System and method for batch program burning of intelligent internet-of-things electric energy meter management module

Abstract

The invention discloses a system and a method for batch programming of a management module of an intelligent internet-of-things electric energy meter, the system comprises a management module firmware management client, a management module production transfer security disk and a management module programming management system, and the problem of low application programming efficiency is solved. The management module firmware management client generates an order file according to the order information, encrypts the order file and transmits the encrypted order file to the management module burning management system; the management module firmware management client side distributes to-be-burnt program information including an application program and a license to each management module, and standardization and secure transmission of the to-be-burnt program information are achieved; the management module firmware management client and the management module burning management system transmit encrypted data through the management module production transfer security disk, data leakage is avoided, the management module burning management system burns the application programs in batches according to the information of the programs to be burnt, rapid and batch burning of the management modules is achieved, and the burning efficiency of the application programs is improved. And the data security is ensured while the production efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a system and method for batch burning programs of intelligent IoT electric energy meter management modules. Background Art

[0002] Smart IoT electric energy meter is a new generation of smart electric energy meter. This electric energy meter divides the traditional electric energy meter industry into three parts: hardware manufacturers, software manufacturers and users. Smart IoT electric energy meter consists of three hardware parts: management module, metering module and extension module. All modules are standard products and can be produced and sold separately. The management module runs boot program, operating system program, driver, basic application program (can have multiple), business application program (can have multiple), and extension application program (can have multiple). The boot program and driver program are developed by the management module hardware manufacturer. The operating system and basic application program are released uniformly. Business application program and extension application program are developed by software manufacturers. When all applications (basic + business + extension) are running, a license must be applied for, otherwise they cannot run. The license is bound to the unique ID of the hardware and cannot be used on more than two hardware. Users select hardware products and software products according to their needs, apply for corresponding software licenses, and finally synthesize a complete smart IoT electric energy meter.

[0003] When the current management module is produced, the management module hardware manufacturer burns the boot program, operating system program, driver and basic application program through the program burning interface (communication rate 10Mbps, no protocol overhead), and sends the corresponding basic application license to the management module. After the user purchases the management module, he needs to select the business application and extension application developed by the software manufacturer according to actual needs, apply for the corresponding license, and then install the program and license to the management module through the business communication interface (communication speed 460Kbps, with communication protocol overhead).

[0004] Under the current technical model, users need to perform a second burn of the management module. Due to the slow speed of the business communication interface, high protocol overhead and business process overhead, and long software program burning cycle, the production efficiency is low during mass production, the product production cost is high, and the production cycle is long. If users submit business applications and extended applications to the management module hardware manufacturer for unified burning, the hardware manufacturer will face the problem of difficult management of applications and high production failure rate when facing many users. The application license is a software product with a certain value applied by the user. In the absence of a reliable transmission channel, users can only burn the application license by themselves after purchasing the management module hardware, which does not fundamentally solve the problem of low production efficiency. Summary of the invention

[0005] The present invention provides a system and method for batch burning programs of an intelligent IoT electric energy meter management module, so as to solve the problem of low burning efficiency of application programs.

[0006] According to one aspect of the present invention, a system for batch burning programs of management modules of smart IoT electric energy meters is provided, comprising: a management module firmware management client, a management module production transfer security disk, and a management module burning management system;

[0007] The management module firmware management client is used to generate an order file according to the order information, encrypt the order file, and store the encrypted order file in the management module production transfer security disk;

[0008] The management module burning management system is used to allocate management modules according to the encrypted order file in the management module production transfer secure disk, and encrypt and store the information of the allocated management modules in the management module production transfer secure disk;

[0009] The management module firmware management client is used to allocate program information to be burned to each management module according to the information of the management module encrypted in the management module production transfer secure disk, and encrypt and store the program information to be burned of each management module in the management module production transfer secure disk, wherein the program information to be burned includes at least one application and a corresponding license;

[0010] The management module burning management system is used to batch burn application programs to the management modules according to the encrypted information of the program to be burned that is produced and transferred to the secure disk by the management module.

[0011] According to another aspect of the present invention, a method for batch burning a program for a smart IoT electric energy meter management module is provided, which is executed by a system for batch burning a program for a smart IoT electric energy meter management module according to any embodiment of the invention, and the method comprises:

[0012] The management module firmware management client generates an order file according to the order information, encrypts the order file, and stores the encrypted order file in the management module production transfer secure disk;

[0013] The management module burning management system allocates the management module according to the encrypted order file in the management module production transfer secure disk, and encrypts and stores the information of the allocated management module in the management module production transfer secure disk;

[0014] The management module firmware management client allocates program information to be burned for each management module according to the information of the management module encrypted in the management module production transfer secure disk, and encrypts and stores the program information to be burned of each management module in the management module production transfer secure disk, wherein the program information to be burned includes at least one application and a corresponding license;

[0015] The management module burning management system burns application programs to the management modules in batches according to the encrypted information of the program to be burned that is produced and transferred to the secure disk by the management module.

[0016] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the method for batch burning a program for a smart IoT electric energy meter management module as described in any embodiment of the present invention when executed.

[0017] According to another aspect of the present invention, a computer program product is provided, which includes a computer program. When the computer program is executed by a processor, the method for batch burning a program for a smart IoT electric energy meter management module described in any embodiment of the present invention is implemented.

[0018] The embodiment of the present invention provides a system for batch burning programs of management modules of smart IoT electric energy meters, wherein the management module firmware management client is used to generate an order file according to order information, encrypt the order file, and store the encrypted order file in the management module production transfer safety disk; the management module burning management system is used to allocate management modules according to the encrypted order file in the management module production transfer safety disk, and encrypt and store the information of the allocated management modules in the management module production transfer safety disk; the management module firmware management client is used to allocate program information to be burned to each management module according to the encrypted management module information in the management module production transfer safety disk, and store the encrypted information of each management module in the management module production transfer safety disk. The program information to be burned is encrypted and stored in the management module production transfer security disk, and the program information to be burned includes at least one application and a corresponding license; the management module burning management system is used to batch burn the application programs of the management module according to the encrypted program information to be burned in the management module production transfer security disk, which solves the problem of low application burning efficiency. The management module firmware management client and the management module burning management system transmit encrypted data through the management module production transfer security disk to avoid data leakage. The management module burning management system batch burns the application programs through the program information to be burned of the management module, which can realize fast and batch burning of the management module, improve production efficiency and ensure data security.

[0019] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0021] Figure 1 It is a structural diagram of a system for batch burning a program for a smart IoT electric energy meter management module provided according to the first embodiment of the present invention;

[0022] Figure 2 It is a structural diagram of a system for batch burning a program for a smart IoT electric energy meter management module provided according to a second embodiment of the present invention;

[0023] Figure 3 It is a schematic diagram of data stored in a management module for transferring and retrieving secure disks according to a second embodiment of the present invention;

[0024] Figure 4 It is a flow chart of a method for batch burning a program of a smart IoT electric energy meter management module provided according to the third embodiment of the present invention. DETAILED DESCRIPTION

[0025] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0026] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0027] Embodiment 1

[0028] Figure 1 This is a schematic diagram of the structure of a system for batch burning programs of a smart IoT power meter management module provided by the first embodiment of the present invention. This embodiment is applicable to the case of fast and batch burning programs of smart IoT power meter management modules. Figure 1 As shown, the system includes: a management module firmware management client 11, a management module production transfer secure disk 12 and a management module burning management system 13;

[0029] The management module firmware management client 11 is used to generate an order file according to the order information, encrypt the order file, and store the encrypted order file in the management module production transfer secure disk 12;

[0030] The management module burning management system 13 is used to allocate the management module according to the encrypted order file in the management module production transfer secure disk 12, and encrypt and store the information of the allocated management module in the management module production transfer secure disk 12;

[0031] The management module firmware management client 11 is used to allocate program information to be burned to each management module according to the information of the management module encrypted in the management module production transfer secure disk 12, and encrypt and store the program information to be burned of each management module in the management module production transfer secure disk 12, where the program information to be burned includes at least one application and a corresponding license;

[0032] The management module burning management system 13 is used to batch burn application programs to the management modules according to the encrypted information of the program to be burned in the secure disk 12 produced and transferred by the management module.

[0033] In this embodiment, the management module firmware management client 11 can be understood as a software client, which is installed on the user side and is used to manage the management module. The management module burning management system 13 can be understood as a system for managing firmware and managing the burning process, which is responsible for managing the execution of the entire burning process; the management module production transfer safe disk 12 can be understood as an information carrier with a security protection function, which is responsible for transmitting information between the management module firmware management client 11 and the management module burning management system 13. The management module is the intelligent IoT electric energy meter management module. Figure 1 The connection between the management module firmware management client 11 and the management module production transfer safety disk 12 indicates that the management module firmware management client 11 and the management module production transfer safety disk 12 can interact with each other; the connection between the management module burning management system 13 and the management module production transfer safety disk 12 indicates that the management module burning management system 13 and the management module production transfer safety disk 12 can interact with each other.

[0034] The hardware manufacturer uses the management module to burn the management system 13 and the management module to produce the transfer security disk 12 ; the user uses the management module to produce the transfer security disk 12 and the management module firmware management client 11 .

[0035] In this embodiment, the order information may be understood as information describing relevant information of the required management module; the order file may be understood as a file including the order information, such as a word document, an Excel spreadsheet, and the like.

[0036] The management module firmware management client 11 obtains order information, which can be manually input by the user or obtained by parsing from a file. For example, a corresponding document is generated in advance, and the document includes relevant information about the order. The document is extracted through a preset model, algorithm, etc. to obtain the order information. The document can also include other information, such as the deployment location and time of the management module. The management module firmware management client 11 processes the order information according to a certain format or rule, for example, the order information is summarized in the form of an Excel table to generate an order file; the encryption key is determined, and the encryption key can be determined in advance, or the encryption key can be stored in the management module production transfer safety disk 12 and read from the management module production transfer safety disk 12. The order file is encrypted according to the encryption key, the management module production transfer safety disk 12 is connected to the management module firmware management client 11, and the encrypted order file is stored in the management module production transfer safety disk 12.

[0037] The management module production transfer safe disk 12 is connected to the management module burning management system 13, and the management module burning management system 13 reads the encrypted order file in the management module production transfer safe disk 12, and decrypts the encrypted order file according to the corresponding key. The key used for decryption can be pre-set, and the management module burning management system 13 saves this key. After obtaining the encrypted order file, it is decrypted according to the pre-saved key. The decrypted key can also be directly read from the management module production transfer safe disk 12, or read the relevant information of the key from the management module production transfer safe disk 12 and then further determine the decrypted key according to the relevant information; determine the order information according to the order file, allocate the corresponding management module according to the order information, determine the information of the allocated management module, encrypt the information of the allocated management module, and then store it in the management module production transfer safe disk 12.

[0038] In this embodiment, the program information to be burned can be understood as the information of the application that needs to be burned to the management module; the program information to be burned includes at least one application and a corresponding license, and the application in the program information to be burned can be the name, logo, installation package and other information that uniquely identifies an application; the program information to be burned can also include the version of the application, files that ensure the operation or installation of the program, the time of burning, etc.

[0039] The management module production transfer secure disk 12 is connected to the management module firmware management client 11. The management module firmware management client 11 reads the information in the management module production transfer secure disk 12 to obtain the encrypted management module information, decrypts the encrypted management module information to obtain the management module information, determines the license of the application that has been applied for, allocates the application and the corresponding license to each management module, determines the program information to be burned of each management module, and each management module can deploy one or more applications. The program information to be burned includes at least one application and the license corresponding to each application. The program information to be burned of each management module is encrypted and then stored in the management module production transfer secure disk 12.

[0040] The management module production transfer safety disk 12 is connected to the management module burning management system 13, the management module burning management system 13 reads the encrypted program information to be burned in the management module production transfer safety disk 12, decrypts the encrypted program information to be burned, obtains the program information to be burned, determines the application program that needs to be burned for each management module and the license of the application program according to the program information to be burned, connects each management module to the management module burning management system 13, and burns the application program for each management module in batches.

[0041] The embodiment of the present invention provides a system for batch burning programs of management modules of intelligent IoT electric energy meters, which solves the problem of low application burning efficiency. A management module firmware management client generates an order file according to order information and transmits it to a management module burning management system in an encrypted manner, and the management module burning management system allocates management modules; the management module firmware management client allocates program information to be burned, including an application and a license, to each management module according to the encrypted management module information, so as to achieve standardization and safe transmission of the program information to be burned; the management module firmware management client and the management module burning management system transmit encrypted data through a management module production transfer security disk to avoid data leakage, and the management module burning management system batch burns the application program through the program information to be burned of the management module, so as to achieve fast and batch burning of the management module, improve production efficiency and ensure data security at the same time.

[0042] Embodiment 2

[0043] Figure 2 This is a schematic diagram of the structure of a system for batch burning a program for a smart IoT electric energy meter management module provided in the second embodiment of the present invention. This embodiment is refined on the basis of the above embodiment. Figure 2 As shown, the system refines the management module burning management system 13 and the management module firmware management client 11.

[0044] The management module burning management system 13 includes:

[0045] The first data decryption module 131 is used to read the verification information from the management module production transfer secure disk 12 after determining that it has the access authority of the management module production transfer secure disk 12, and determine the symmetric key according to the verification information;

[0046] The module allocation module 132 is used to decrypt the encrypted order file based on the symmetric key, determine the order information, and allocate the management module for basic burning according to the order information, wherein the order information at least includes the type and quantity of the management module.

[0047] In this embodiment, the first data decryption module 131 can be understood as a data processing module for performing data decryption in the management system for managing module burning and managing system 13. The verification information can be understood as information for verifying the identity of the management system for managing module burning and managing system 13.

[0048] When accessing the management module production transfer safety disk 12, the management module burning management system 13 first determines whether it has the access right to the management module production transfer safety disk 12. The access right to the management module production transfer safety disk 12 for different users or systems can be set in advance, and whether the access right to the management module production transfer safety disk 12 is determined according to the account number, identification, etc. of the user or system; or, an access password for the management module production transfer safety disk 12 is set, for example, a login verification PIN code; when accessing the management module production transfer safety disk 12, the management module burning management system 13 first enters the access password. If the entered password is correct, it is determined that the management module burning management system 13 has the access right to the management module production transfer safety disk 12. After determining that the management module burning management system 13 has access rights to the management module production transfer security disk 12, the first data decryption module 131 reads the verification information from the management module production transfer security disk 12, performs corresponding verification based on the verification information, and determines the symmetric key after the verification is passed; for example, the symmetric key is in an encrypted state, and the encrypted symmetric key is decrypted after the verification is passed to determine the symmetric key; or the symmetric key is in a non-encrypted state, and the symmetric key is directly obtained after the verification is passed.

[0049] In this embodiment, the module allocation module 132 can be understood as a data processing module for allocation of management modules in the management system for management module burning 13. The module allocation module 132 decrypts the encrypted order file according to the symmetric key to obtain the decrypted order file, analyzes the order file or extracts data to obtain order information, which includes the type and quantity of management modules; according to the number and type of management modules, the corresponding number and type of management modules are selected from the management modules that have completed basic burning, and the allocation of management modules is completed.

[0050] Optionally, the management module firmware management client 11 includes:

[0051] The license application module 111 is used to decrypt the encrypted information of the management module according to the symmetric key, obtain the information of the management module, apply for the license of the application according to the information of the management module, and receive the license of at least one application applied for, and each application corresponds to at least one license;

[0052] The program to be burned allocation module 112 is used to allocate application programs and licenses to each management module, and generate program to be burned information of each management module based on the allocated application programs and licenses.

[0053] The management module firmware management client 11 can save the symmetric key in advance, or read the symmetric key from the management module production transfer safe disk 12. The management module production transfer safe disk 12 can directly store the symmetric key, or store the encrypted symmetric key. For example, the management module burning management system 13 decrypts the symmetric key and encrypts the information of the assigned management module through the symmetric key, and encrypts the symmetric key at the same time, and stores the encrypted key ciphertext to the management module production transfer safe disk 12. When accessing the management module production transfer safe disk 12, the management module firmware management client 11 first determines whether it has the access right to the management module production transfer safe disk 12. The principle can refer to the above-mentioned permission setting of whether the management module burning management system 13 has the management module production transfer safe disk 12. After determining that the management module firmware management client 11 has access rights to the management module production transfer secure disk 12, determine that the management module firmware management client 11 reads the verification information from the management module production transfer secure disk 12, performs corresponding verification based on the verification information, and determines the symmetric key after the verification is passed; for example, the symmetric key is in an encrypted state, and the encrypted symmetric key is decrypted after the verification is passed to determine the symmetric key; or the symmetric key is in an unencrypted state, and the symmetric key is directly obtained after the verification is passed.

[0054] The license application module 111 decrypts the encrypted management module information according to the obtained symmetric key to obtain the management module information, which may be a unique identifier such as the management module number. The license of the application is applied for according to the management module information, and a license for the application to be installed is applied for each management module. The application license can be applied for from a platform that provides the application, etc., and at least one application license is received. Each application corresponds to at least one license, and each license is bound to a management module. When an application needs to be installed and deployed in multiple management modules, multiple licenses need to be applied for accordingly.

[0055] In this embodiment, the program allocation module 112 to be burned can be understood as a data processing module that allocates the application programs that need to be burned into the management module. The program allocation module 112 to be burned allocates the application programs and licenses to each management module according to the corresponding management between the license of the applied application program and the management module, and for the same application program, a license is allocated to each corresponding management module, and the program information to be burned of each management module is generated based on the allocated application program and license.

[0056] Optionally, the management module burning management system 13 includes:

[0057] The first data decryption module 131 is used to read the verification information from the management module production transfer secure disk 12 after determining that it has the access authority of the management module production transfer secure disk 12, and determine the symmetric key according to the verification information;

[0058] The burning information acquisition module 133 is used to decrypt each encrypted program information to be burned according to the symmetric key to obtain each program information to be burned;

[0059] The burning module 134 is used to verify the connected management modules, and burn the management modules according to the to-be-burned program information corresponding to each management module after the verification is passed.

[0060] The manner in which the first data decryption module 131 determines the symmetric key can refer to the above description. Each time the management module burning management system 13 reads the data in the management module production transfer secure disk 12, it needs to verify and determine the symmetric key.

[0061] In this embodiment, the burning information acquisition module 133 can be understood as a data processing module for acquiring burning information; the burning information acquisition module 133 decrypts each encrypted program information to be burned according to the symmetric key to obtain each program information to be burned.

[0062] In this embodiment, the burning module 134 can be understood as a data processing module for burning applications. After determining the information of the program to be burned, the management module to be burned is connected to the management module burning management system 13. The burning module 134 verifies the connected management module to determine whether each connected management module is a module that needs to burn the application. For example, the connected management module is matched with the assigned management module. If the connected management module is in the assigned management module, it is determined that the verification is passed; if the connected management module is not in the assigned management module, it is determined that the verification of this connected management module has not passed. After the verification of all the connected management modules is passed, the application and license that the management module needs to burn are determined according to the information of the program to be burned corresponding to each management module, and the application is burned into the management module based on the application and the corresponding license.

[0063] Optionally, the verification information includes: key ciphertext, user information and signature data;

[0064] The first data decryption module 131 is specifically used to: authenticate the signature data and user information based on the first public key, and if the authentication is successful, decrypt the key ciphertext according to the first private key of the asymmetric algorithm to obtain a symmetric key.

[0065] In this embodiment, the key ciphertext can be understood as the encrypted data of the symmetric key; the user information can be one or more of the following information: order number, order quantity, contact person, contact person phone number, user name (for example, company name, etc.). The signature data is the data obtained by signing the user information.

[0066] In this embodiment, the first public key can be understood as a public key of an asymmetric encryption algorithm, which is usually a public key provided by a user. The first private key can be understood as a private key of an asymmetric encryption algorithm, which is usually a private key provided by a hardware provider.

[0067] The first public key and the first private key are stored in advance. The first data decryption module 131 decrypts the signature data according to the first public key, and compares the decrypted data with the user information to implement identity authentication. If they are consistent, it is determined that the verification is successful; if they are inconsistent, it is determined that the verification fails. If the verification is successful, the key ciphertext is decrypted according to the first private key of the asymmetric algorithm to obtain a symmetric key. When the management module burning management system 13 subsequently transfers the data stored in the secure disk 12 to the management module, each data is encrypted by the symmetric key.

[0068] Optionally, the management module firmware management client 11 is further used for:

[0069] Generate a symmetric key, and encrypt the symmetric key according to the second public key of the asymmetric algorithm to obtain a key ciphertext;

[0070] Generate user information, and sign the user information according to the second private key of the asymmetric algorithm to generate signature data;

[0071] The key ciphertext, user information and signature data are written into the management module production transfer secure disk 12 as verification information.

[0072] In this embodiment, the second public key can be understood as a public key of an asymmetric encryption algorithm, the second public key is usually a public key provided by the hardware provider, the second public key and the first private key are a pair of keys, the public key encrypts, and the private key decrypts. The second private key can be understood as a private key of an asymmetric encryption algorithm, the second private key is usually a private key provided by the user, the second private key and the first public key are a pair of keys, the private key signs, and the public key verifies the signature.

[0073] The management module firmware management client 11 randomly generates a symmetric key, predetermines the second public key of the asymmetric algorithm, encrypts the symmetric key according to the second public key of the asymmetric algorithm, and generates a key ciphertext. The input box is displayed on the interface, and the data category required to be input by the staff is prompted. The staff enters the corresponding information in the input box. The management module firmware management client 11 receives the information entered by the user to generate user information; or, the user's relevant information can be pre-set and stored in the corresponding location, and the corresponding information is read according to the information storage path to generate user information. The user information is signed according to the second private key of the asymmetric algorithm to generate signature data. The management module production transfer security disk 12 is connected to the management module firmware management client 11, and the key ciphertext, user information and signature data are automatically written into the management module production transfer security disk 12 as verification information by calling functions and the like. When the management module firmware management client 11 subsequently stores data in the management module production transfer security disk 12, each data is encrypted by a symmetric key.

[0074] Optionally, the management module firmware management client 11 is further used to: set access rights for the management module to produce the transfer secure disk 12 .

[0075] The management module firmware management client 11 may set the access rights of the management module production transfer security disk 12 by setting a password, for example, setting a login verification PIN code for the management module production transfer security disk 12. In this way, the access rights of the management module production transfer security disk 12 can be obtained as long as the password is known; or a user or system with access rights can be pre-set. When the user or system accesses the management module production transfer security disk 12, it can be determined whether the user or system is a pre-set user or system with access rights. If so, it is determined that the user or system has access rights. A user usually refers to a user account. The same user account can be used to log in to different systems, or the user and the system correspond one to one.

[0076] The above method can be used to initialize the management module production transfer safety disk 12. When the user uses the management module production transfer safety disk 12 for the first time, it is necessary to first connect the management module production transfer safety disk 12 to the firmware client for initialization; after the initialization is completed, the management module production transfer safety disk 12 can be connected to the management module burning management system 13, and the management module burning management system 13 reads the data and performs corresponding decryption.

[0077] The initialization process is as follows: the management module firmware management client 11 generates a symmetric key K1 for data encryption, and uses the second public key P11 of the asymmetric algorithm provided by the management module burning management system 13 to encrypt the symmetric key K1 to obtain the ciphertext E1. The management module firmware management client 11 generates user information Info, and signs Info with the second private key Q11 of the asymmetric algorithm provided by the management module firmware management client 11 to generate signature data S1. The management module firmware management client 11 writes data such as Info, S1, and E1 into the management module production transfer safe disk 12, and sets the login verification PIN code of the management module production transfer safe disk 12.

[0078] After the management module production transfer security disk 12 is initialized and connected to the management module burning management system 13, the verification PIN code is entered to obtain access rights. The management module burning management system 13 verifies the Info information and the signature data S1 through the first public key Q12 provided by the management module firmware management client 11, and can realize the identity authentication of the management module production transfer security disk 12. After the verification is passed, E1 is decrypted by the first private key P12 of the asymmetric algorithm provided by the management module burning management system 13 to obtain the plaintext symmetric key K1. From then on, the management module burning management system 13 and the management module firmware management client 11 have completed the exchange of identity authentication and encryption keys. All subsequent data written to the management module production transfer security disk 12 will be encrypted by the symmetric algorithm through K1, and then decrypted by K1 when read.

[0079] Since the management module production transfer secure disk 12 is initialized in the management module firmware management client 11, the management module firmware management client 11 can directly obtain the symmetric key generated during the initialization process when reading data from the management module production transfer secure disk 12. If the number of management module production transfer secure disks 12 may be multiple, the management module firmware management client 11 can store the symmetric key corresponding to each management module production transfer secure disk 12 in advance, and after the management module production transfer secure disk 12 is connected to the management module firmware management client 11, query the database, data table or folder that pre-stores the key to determine the corresponding symmetric key. The management module firmware management client 11 cannot distinguish the management module production transfer secure disk 12 or in order to further ensure data security, the management module firmware management client 11 deletes the symmetric key of each management module production transfer secure disk 12 after completing the initialization of the management module production transfer secure disk 12, and decrypts and determines the symmetric key each time the data in the management module production transfer secure disk 12 is read. For example, after the management module burning management system 13 decrypts the symmetric key, it encrypts the symmetric key through the first public key of the management module firmware management client 11 and then stores it in the management module production transfer security disk 12. When the management module firmware management client 11 accesses the management module production transfer security disk 12, it can use its own second private key to decrypt it.

[0080] Optionally, the management module firmware management client 11 is used to: after determining that it has access rights to the management module production transfer secure disk, read verification information from the management module production transfer secure disk, and determine the symmetric key according to the verification information.

[0081] The verification information includes: key ciphertext, user information and signature data; determining the symmetric key based on the verification information includes: authenticating the signature data and user information based on the first public key. If the verification passes, decrypting the key ciphertext based on the second private key of the asymmetric algorithm to obtain the symmetric key.

[0082] Since the encryption keys used after the symmetric key is encrypted by the management module firmware management client 11 and the management module burning management system 13 are different, the obtained key ciphertexts are different, and can be respectively recorded as the first key ciphertext and the second key ciphertext to distinguish them. For example, the key ciphertext in the verification information read by the management module firmware management client 11 is recorded as the first key ciphertext, and the key ciphertext in the verification information read by the management module firmware management client 11 is recorded as the second key ciphertext.

[0083] After the management module firmware management client 11 obtains the symmetric key through decryption, it decrypts the data in the management module production transfer security disk 12 through the symmetric key and performs corresponding operations. For example, it decrypts the encrypted management module information according to the symmetric key to obtain the management module information, and applies for the application license based on the management module information.

[0084] The embodiment provided in this application is divided into four parts when burning the management module:

[0085] 1. Manage the basic burning of modules.

[0086] Basic burning is the process of burning non-customized program firmware and extracting information from the management module.

[0087] The specific steps are as follows:

[0088] Connect the qualified management module to the burning system;

[0089] The burning system burns the boot program, operating system program, driver, basic application program and related license files into the management module;

[0090] The burning system reads the program version of the management module and verifies the burning result;

[0091] The burning system records and manages the module's unique chip number, body barcode, fixture number, production date, production batch, order user, inventory number and other information.

[0092] 2. Initialization of the management module production transfer safety disk 12.

[0093] 3. Customized document application.

[0094] Customized file application is the process of applying for related burning files for the management module to complete basic burning. The detailed steps are as follows:

[0095] The user connects the initialized management module production transfer secure disk 12 to the management module firmware management client 11, generates an order file after inputting the order information, and encrypts the order file and stores it in the management module production transfer secure disk 12;

[0096] The user sends the management module production transfer secure disk 12 to the hardware provider;

[0097] The hardware provider connects the management module production transfer secure disk 12 to the management module burning management system 13. The management module burning management system 13 decrypts the encrypted order file in the management module production transfer secure disk 12 and reads the user's order information. According to the order information, the management modules that have completed the basic burning are allocated, and the relevant information of these management modules is stored in the management module production transfer secure disk 12;

[0098] The hardware provider delivers the management module production transfer secure disk 12 to the user;

[0099] The user connects the management module production transfer secure disk 12 to the management module firmware management client 11 to read the management module information;

[0100] Users prepare relevant applications based on their own needs and apply for corresponding licenses based on the information of the management module;

[0101] The user enters the application and the license into the management module firmware management client 11;

[0102] The user allocates corresponding program information to be burned to each management module according to the needs, and the program information to be burned includes at least one application program and a license;

[0103] The corresponding program information to be burned allocated to each management module is encrypted and synchronized to the management module production transfer secure disk 12.

[0104] For example, Figure 3 A schematic diagram of data stored in a secure disk produced and transferred by a management module is provided. Among them, the program library includes different applications, and application 1, application 2...application N1 refer to different applications, which can be the name of the application, the installation package, etc. License 1, license 2...license N2 are different licenses for different applications, and an application can have multiple licenses. File 1, file 2...file N3 are files of different applications, and the files can be used to ensure the normal operation of the application, and can be files of some initialization parameters. Among them, N1 and N3 can be the same, N2≥N1, and usually N2 is greater than N1. After allocating the information of the program to be burned, the information of the program to be burned can be added to the order information. The order information includes the corresponding information of different management modules, for example, the information of the management module, the program list, the license list and the file list. Among them, the program list includes the application, indicating that this management module needs to burn the application in the program list, the license list includes the license of the application, and the application can be burned according to the license, and the file list includes the file of the application to ensure the normal operation of the application.

[0105] 4. Secondary burning

[0106] The user delivers the synchronized data management module production transfer secure disk 12 to the hardware provider;

[0107] The hardware provider connects the management module production transfer secure disk 12 to the management module burning management system 13;

[0108] Connect the management module to the management module burning management system 13;

[0109] The burning system will check the currently connected management module, for example, whether the currently connected management module has order information in the management module production transfer secure disk 12, that is, whether it is the management module that needs to be burned; after the check is completed, the application and license corresponding to the management module will be read from the management module production transfer secure disk 12 and burned into the management module;

[0110] After the burning is completed, the management module restarts. After restarting, the management module application version is read for verification.

[0111] The management module burning management system provided in the embodiment of the present application can manage the burning files of the program, provide basic burning functions, and can record the relevant information of the management module that has completed the basic burning to form a database; it has symmetric and asymmetric algorithm functions, and can read and write ciphertext on the management module production transfer security disk; it can read order information from the management module production transfer security disk, and allocate management modules that have completed basic burning from the database, and write the information of these management modules into the management module production transfer security disk; it can read order information from the management module production transfer security disk, and burn the corresponding application and license according to the information of the management module in the management module production transfer security disk.

[0112] The management module burning management system provided in the embodiment of the present application has symmetric and asymmetric algorithm functions, can initialize the management module production transfer security disk, can generate a transmission key, and generate a login verification PIN code; can generate order information and store it in the management module production transfer security disk; can read the management module information in the management module production transfer security disk, can export the management module information, import applications and licenses, and distribute them according to the management module.

[0113] The management module production transfer security disk provided in the embodiment of the present application serves as a secure storage medium, which can implement PIN code verification of login permissions and can realize the reading and writing of ciphertext.

[0114] The system for batch burning programs of the intelligent IoT electric energy meter management module provided in the embodiment of the present application applies symmetric encryption technology and asymmetric encryption technology, takes the management module production transfer security disk as the carrier, realizes the secure transmission of programs and licenses, transfers all firmware and files to the management module burning management system of the hardware provider, and the hardware provider burns them through the burning interface, thereby improving production efficiency; the production process in the embodiment of the present application is initiated by the management module firmware management client, takes the management module production transfer security disk as the transmission medium, and is managed and executed by the management module burning management system, which is a complete closed-loop process. The hardware provider does not need to invest additional resources to manage the data of many users, which reduces the complexity of management, improves production efficiency, and improves the product qualification rate.

[0115] Embodiment 3

[0116] Figure 4 This is a flow chart of a method for batch burning a program of a smart IoT electric energy meter management module provided in the third embodiment of the present invention. Figure 4 As shown, the method includes:

[0117] S201. The management module firmware management client generates an order file according to the order information, encrypts the order file, and stores the encrypted order file in the management module production transfer secure disk.

[0118] S202, the management module burning management system allocates a management module according to the encrypted order file in the management module production transfer secure disk, and encrypts and stores the information of the allocated management module in the management module production transfer secure disk.

[0119] S203, the management module firmware management client allocates program information to be burned for each management module according to the information of the management module encrypted in the management module production transfer secure disk, and encrypts and stores the program information to be burned of each management module in the management module production transfer secure disk, where the program information to be burned includes at least one application and a corresponding license.

[0120] S204, the management module burning management system burns the application programs to the management modules in batches according to the encrypted information of the programs to be burned that are transferred from the management module to the secure disk.

[0121] The embodiment of the present invention provides a method for batch burning programs of management modules of intelligent IoT electric energy meters, which solves the problem of low application burning efficiency. A management module firmware management client generates an order file according to order information and transmits it to a management module burning management system in an encrypted manner, and the management module burning management system allocates management modules; the management module firmware management client allocates program information to be burned, including an application and a license, to each management module according to the encrypted management module information, so as to achieve standardization and safe transmission of the program information to be burned; the management module firmware management client and the management module burning management system transmit encrypted data through a management module production transfer security disk to avoid data leakage, and the management module burning management system batch burns the application program through the program information to be burned of the management module, so as to achieve fast and batch burning of the management module, improve production efficiency and ensure data security at the same time.

[0122] Optionally, the management module burning management system allocates the management module according to the data generated by the management module and transferred to the secure disk, including:

[0123] After determining that the user has access rights to the management module production transfer secure disk, reading verification information from the management module production transfer secure disk, and determining the symmetric key based on the verification information;

[0124] The encrypted order file is decrypted based on the symmetric key to determine the order information, and the management module for completing the basic burning is allocated according to the order information, wherein the order information at least includes the type and quantity of the management module.

[0125] Optionally, the management module firmware management client allocates program information to be burned to each management module according to the encrypted management module information generated by the management module and transferred to the secure disk, including:

[0126] After determining that the user has access rights to the management module production transfer secure disk, reading verification information from the management module production transfer secure disk, and determining the symmetric key based on the verification information;

[0127] Decrypting the encrypted information of the management module according to the symmetric key to obtain the information of the management module, applying for a license of the application according to the information of the management module, and receiving the license of at least one application applied for, where each application corresponds to at least one license;

[0128] An application program and a license are allocated to each of the management modules, and program information to be burned of each of the management modules is generated based on the allocated application program and license.

[0129] Optionally, the management module burning management system burns application programs to the management modules in batches according to the encrypted information of the program to be burned in the secure disk produced and transferred by the management module, including:

[0130] After determining that the user has access rights to the management module production transfer secure disk, reading verification information from the management module production transfer secure disk, and determining the symmetric key based on the verification information;

[0131] Decrypting each of the encrypted program information to be burned according to the symmetric key to obtain each of the program information to be burned;

[0132] The connected management modules are verified, and after the verification is passed, the management modules are burned according to the program information to be burned corresponding to each management module.

[0133] Optionally, the verification information includes: key ciphertext, user information and signature data;

[0134] Determining a symmetric key according to the verification information includes:

[0135] The signature data and user information are authenticated based on the first public key. If the authentication is successful, the key ciphertext is decrypted according to the first private key of the asymmetric algorithm to obtain a symmetric key.

[0136] Optionally, the method further includes:

[0137] The management module firmware management client generates a symmetric key, and encrypts the symmetric key according to the second public key of the asymmetric algorithm to obtain a key ciphertext;

[0138] The management module firmware management client generates user information, and signs the user information according to the second private key of the asymmetric algorithm to generate signature data;

[0139] The management module firmware management client writes the key ciphertext, the user information and the signature data into the management module production transfer secure disk as verification information.

[0140] Optionally, the method further includes:

[0141] The management module firmware management client sets the access rights of the management module to produce the transfer secure disk.

[0142] The method for batch burning programs of smart IoT electric energy meter management modules provided in the embodiment of the present invention can be executed by the system for batch burning programs of smart IoT electric energy meter management modules provided in any embodiment of the present application, and has corresponding beneficial effects.

[0143] Embodiment 4

[0144] An embodiment of the present invention provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the method for batch burning a program for a smart IoT electric energy meter management module described in any embodiment of the present invention is implemented.

[0145] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0146] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0147] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0148] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0149] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0150] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A system for batch burning programs of intelligent IoT electric energy meter management modules, characterized in that: include: Manage module firmware management client, manage module production transfer security disk and manage module burning management system; The management module firmware management client is used to generate an order file according to the order information, encrypt the order file, and store the encrypted order file in the management module production transfer security disk; The management module burning management system is used to allocate management modules according to the encrypted order file in the management module production transfer secure disk, and encrypt and store the information of the allocated management modules in the management module production transfer secure disk; The management module firmware management client is used to allocate program information to be burned to each management module according to the information of the management module encrypted in the management module production transfer secure disk, and encrypt and store the program information to be burned of each management module in the management module production transfer secure disk, wherein the program information to be burned includes at least one application and a corresponding license; The management module burning management system is used to batch burn application programs to the management modules according to the encrypted program information to be burned in the secure disk produced and transferred by the management module.

2. The system according to claim 1, characterized in that The management module burning management system comprises: A first data decryption module is used to read verification information from the management module production transfer secure disk after determining that it has access rights to the management module production transfer secure disk, and determine the symmetric key according to the verification information; The module allocation module is used to decrypt the encrypted order file based on the symmetric key, determine the order information, and allocate the management module for basic burning according to the order information, wherein the order information at least includes the type and quantity of the management module.

3. The system according to claim 1, characterized in that The management module firmware management client includes: A license application module, used to decrypt the encrypted information of the management module according to the symmetric key to obtain the information of the management module, apply for a license of the application according to the information of the management module, and receive the license of at least one application applied for, each application corresponding to at least one license; The program allocation module to be burned is used to allocate application programs and licenses to each of the management modules, and generate program information to be burned of each of the management modules based on the allocated application programs and licenses.

4. The system according to claim 1, characterized in that The management module burning management system comprises: A first data decryption module is used to read verification information from the management module production transfer secure disk after determining that it has access rights to the management module production transfer secure disk, and determine the symmetric key according to the verification information; A burning information acquisition module, used for decrypting each of the encrypted program information to be burned according to the symmetric key to obtain each of the program information to be burned; The burning module is used to verify the connected management modules, and burn the management modules according to the to-be-burned program information corresponding to each management module after the verification is passed.

5. The system according to any one of claims 2 or 4, characterized in that: The verification information includes: key ciphertext, user information and signature data; The first data decryption module is specifically used to: authenticate the signature data and user information based on the first public key, and if the authentication is successful, decrypt the key ciphertext according to the first private key of the asymmetric algorithm to obtain a symmetric key.

6. The system according to claim 5, characterized in that The management module firmware management client is also used for: Generate a symmetric key, and encrypt the symmetric key according to a second public key of the asymmetric algorithm to obtain a key ciphertext; Generate user information, and sign the user information according to the second private key of the asymmetric algorithm to generate signature data; The key ciphertext, the user information and the signature data are written as verification information into the management module production transfer security disk.

7. The system according to claim 6, characterized in that The management module firmware management client is also used to set the access rights of the management module to produce the transfer secure disk.

8. A method for batch burning programs of smart IoT electric energy meter management modules, characterized in that: The method is executed by a system for batch burning a program for managing a module of an intelligent IoT electric energy meter according to any one of claims 1 to 7, and comprises: The management module firmware management client generates an order file according to the order information, encrypts the order file, and stores the encrypted order file in the management module production transfer secure disk; The management module burning management system allocates the management module according to the encrypted order file in the management module production transfer secure disk, and encrypts and stores the information of the allocated management module in the management module production transfer secure disk; The management module firmware management client allocates program information to be burned for each management module according to the information of the management module encrypted in the management module production transfer secure disk, and encrypts and stores the program information to be burned of each management module in the management module production transfer secure disk, wherein the program information to be burned includes at least one application and a corresponding license; The management module burning management system burns application programs to the management modules in batches according to the encrypted information of the program to be burned in the secure disk produced and transferred by the management module.

9. The method according to claim 8, characterized in that The management module burning management system allocates the management module according to the data generated by the management module and transferred to the secure disk, including: After determining that the user has access rights to the management module production transfer secure disk, reading verification information from the management module production transfer secure disk, and determining the symmetric key based on the verification information; The encrypted order file is decrypted based on the symmetric key to determine the order information, and the management module for completing the basic burning is allocated according to the order information, wherein the order information at least includes the type and quantity of the management module.

10. The method according to claim 8, characterized in that The management module firmware management client allocates program information to be burned to each management module according to the encrypted management module information generated and transferred to the secure disk by the management module, including: Decrypting the encrypted information of the management module according to the symmetric key to obtain the information of the management module, applying for a license of the application according to the information of the management module, and receiving the license of at least one application applied for, where each application corresponds to at least one license; An application program and a license are allocated to each of the management modules, and program information to be burned of each of the management modules is generated based on the allocated application program and license.

11. The method according to claim 8, characterized in that The management module burning management system burns application programs to the management module in batches according to the encrypted program information to be burned in the secure disk produced and transferred by the management module, including: After determining that the user has access rights to the management module production transfer secure disk, reading verification information from the management module production transfer secure disk, and determining the symmetric key based on the verification information; Decrypting each of the encrypted program information to be burned according to the symmetric key to obtain each of the program information to be burned; The connected management modules are verified, and after the verification is passed, the management modules are burned according to the program information to be burned corresponding to each management module.

12. The method according to any one of claims 9 or 11, characterized in that: The verification information includes: key ciphertext, user information and signature data; Determining a symmetric key according to the verification information includes: The signature data and user information are authenticated based on the first public key. If the authentication is successful, the key ciphertext is decrypted according to the first private key of the asymmetric algorithm to obtain a symmetric key.

13. The method according to claim 12, characterized in that Also includes: The management module firmware management client generates a symmetric key, and encrypts the symmetric key according to the second public key of the asymmetric algorithm to obtain a key ciphertext; The management module firmware management client generates user information, and signs the user information according to the second private key of the asymmetric algorithm to generate signature data; The management module firmware management client writes the key ciphertext, the user information and the signature data into the management module production transfer secure disk as verification information.

14. The method according to claim 13, characterized in that Also includes: The management module firmware management client sets the access rights of the management module to produce the transfer secure disk.

15. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the method for batch burning a program for a smart IoT electric energy meter management module according to any one of claims 8 to 14 when executed.

16. A computer program product, characterized in that The computer program product comprises a computer program, which, when executed by a processor, implements a method for batch burning a program for a smart IoT electric energy meter management module according to any one of claims 8 to 14.

Images