Digital authorization method of thermal management system

Abstract

The invention relates to the technical field of thermal management, in particular to a digital authorization method of a thermal management system. Querying a global accumulator instance, constructing a system global accumulator, and initializing a thermal management user accumulator as required; judging an access trust domain relationship according to the thermal management user accumulator member proof; performing access authorization based on a user accumulator; the method is high in privacy, focuses on data privacy, and is wide in application range; in this way, data such as heat conduction parameters of the aircraft in the thermal management system and a thermal model in the flight process of the aircraft can be exchanged conveniently.

Description

Technical Field

[0001] The present invention relates to the field of thermal management technology, and in particular to a digital authorization method for a thermal management system. Background Art

[0002] At present, with the rapid development of aircraft, the importance of thermal management system is becoming increasingly prominent. However, traditional thermal management system has deficiencies in authorization management, remote monitoring and intelligent control, and it is difficult to meet the exchange of data such as aircraft thermal conduction parameters and aircraft flight process thermal model within the thermal management system.

[0003] Therefore, it is very necessary to propose a digital authorization method for a thermal management system that is conducive to the exchange of data such as aircraft heat conduction parameters and aircraft flight process thermal models within the thermal management system. Summary of the invention

[0004] The purpose of the present invention is to provide a digital authorization method for a thermal management system, aiming to solve the technical problem that the thermal management system in the prior art has deficiencies in authorization management, remote monitoring and intelligent control, and is difficult to meet the exchange of data such as aircraft thermal conduction parameters and aircraft flight process thermal models within the thermal management system.

[0005] To achieve the above object, the present invention adopts a digital authorization method for a thermal management system, comprising the following steps:

[0006] Query the global accumulator instance, build the system global accumulator, and initialize the thermal management user accumulator as needed;

[0007] Determine access trust domain relationships based on thermal management user accumulator member proofs;

[0008] Access authorization is performed based on user accumulators.

[0009] Among them, in the step of determining the access trust domain relationship according to the thermal management user accumulator member proof:

[0010] Direct access based on thermal management user accumulator and issuance of data VC credentials.

[0011] Among them, in the step of directly accessing based on the thermal management user accumulator and issuing data VC credentials:

[0012] Initiate a network request for aircraft thermal management system data, submit access parameters, and verify the digital identity of the thermal management user; the verification content includes the global dynamic accumulator and the user dynamic accumulator digital identity member certification;

[0013] When the member proves that the result is verified to be legal, data VC is generated.

[0014] Among them, in the step of performing access authorization based on the user accumulator:

[0015] Apply for authorization based on the user accumulator and issue permission VC credentials and data VC credentials.

[0016] Among them, in the step of applying for authorization based on the user accumulator and issuing the permission VC certificate and the data VC certificate:

[0017] Submit the application data list to initiate a VC application; the application data list is accompanied by DID verification parameters, including the applicant's did, the holder's did, and the accumulator witness value w;

[0018] Prove the global accumulator membership for the DID of the thermal management data applicant, query the applicant's DID document and perform integrity verification;

[0019] Obtain the DID verification result of the thermal management data applicant, and generate the data authority VC to the thermal management data applicant according to the application data list submitted by the thermal management data applicant;

[0020] After obtaining the permission VC, perform integrity check, generate the application list again based on the application list and permission list, and send a network request;

[0021] The DID of the thermal management data applicant is verified again, and the verification result is sent to the thermal management data holder. The thermal management data holder generates data VC and sends it to the applicant.

[0022] Among them, in the steps of querying the global accumulator instance, building the system global accumulator, and initializing the thermal management user accumulator on demand:

[0023] Query the global accumulator status value, global accumulator running instance, and perform operations.

[0024] Among them, in the steps of querying the global accumulator status value, running the global accumulator instance, and performing operations:

[0025] If no global accumulator instance is created, the global accumulator is initialized and the initial accumulated value is stored on the chain as the state value.

[0026] Among them, in the steps of querying the global accumulator status value, running the global accumulator instance, and performing operations:

[0027] If a global accumulator instance already exists, the user accumulator status value and the user accumulator running instance are queried on the chain according to the thermal management user did number.

[0028] Among them, in the steps of querying the global accumulator status value, running the global accumulator instance, and performing operations:

[0029] If no user accumulator instance is created according to the thermal management user did number, the thermal management user accumulator is initialized and the initial accumulated value is stored on the chain as the state value.

[0030] A digital authorization method for a thermal management system of the present invention builds a system global accumulator and initializes a thermal management user accumulator on demand by querying a global accumulator instance; determines the access trust domain relationship based on the thermal management user accumulator member certificate; and performs access authorization based on the user accumulator. The present invention has high privacy, focuses on data privacy, and has a wide range of applications. Through the above-mentioned method, it is beneficial to exchange data such as aircraft thermal conduction parameters and aircraft flight process thermal models within the thermal management system. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0032] Figure 1 It is a schematic diagram of the process of thermal management trust domain authorization of the present invention.

[0033] Figure 2 It is a schematic diagram of the flow of VC authorization in the thermal management system of the present invention.

[0034] Figure 3 It is a schematic diagram of the process flow of the thermal management direct data access of the present invention.

[0035] Figure 4 It is a flow chart of the thermal management application authorization access of the present invention.

[0036] Figure 5 It is a flow chart of the steps of the digital authorization method of the thermal management system of the present invention. DETAILED DESCRIPTION

[0037] Here, exemplary embodiments are described in detail, and examples thereof are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application.

[0038] The terms used in this application are for the purpose of describing specific embodiments only and are not intended to limit this application. The singular forms of "a", "said" and "the" used in this application and the appended claims are also intended to include plural forms unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0039] It should be understood that although the terms first, second, third, etc. may be used in the present application to describe various information, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0040] See also Figure 1 to Figure 5 ,in Figure 1 This is a flow chart of thermal management trust domain authorization. Figure 2 This is a flow chart of VC authorization in the thermal management system. Figure 3 It is a flow chart of direct data access for thermal management. Figure 4 This is a flow chart of the thermal management application authorization access process. Figure 5 is a flow chart of steps of a digital authorization method for a thermal management system.

[0041] The present invention provides a digital authorization method for a thermal management system, comprising the following steps:

[0042] S100: query the global accumulator instance, build the system global accumulator, and initialize the thermal management user accumulator as needed;

[0043] S200: judging the access trust domain relationship according to the thermal management user accumulator member certificate;

[0044] S300: Perform access authorization based on the user accumulator.

[0045] In this implementation, the global accumulator instance is first queried, the system global accumulator is constructed, and the thermal management user accumulator is initialized on demand; then the access trust domain relationship is determined based on the thermal management user accumulator member certificate; finally, access authorization is performed based on the user accumulator; the present invention has high privacy, focuses on data privacy, and has a wide range of applications; through the above method, it is beneficial to exchange data such as aircraft thermal conduction parameters and aircraft flight process thermal models within the thermal management system.

[0046] Further, in the steps of querying the global accumulator instance, building the system global accumulator, and initializing the thermal management user accumulator on demand:

[0047] Query the global accumulator status value, global accumulator running instance, and perform operations;

[0048] If no global accumulator instance is created, the global accumulator is initialized and the initial accumulated value is stored on the chain as the state value;

[0049] Among them, if the global accumulator instance already exists, the user accumulator state value and the user accumulator running instance are queried on the chain according to the thermal management user did number;

[0050] Among them, if the user accumulator instance is not created according to the thermal management user did number, the thermal management user accumulator is initialized, and the initial accumulated value is stored on the chain as the state value.

[0051] In this implementation, the global accumulator state value and the global accumulator running instance are queried on the chain; if no global accumulator instance is created, the global accumulator is initialized, referring to the formula The secret parameter k is a random number, which is stored by the user. g It is the initial cumulative value of the global accumulator. The initial cumulative value is stored on the chain as the state value. If a global accumulator instance already exists, the user accumulator state value and the user accumulator running instance are queried on the chain according to the user did ID number. If no user accumulator instance is created according to the user did ID number, the user accumulator is initialized and the initial cumulative value is stored on the chain as the state value.

[0052] Further, in the step of determining the access trust domain relationship according to the thermal management user accumulator member proof:

[0053] Initiate a network request for aircraft thermal management system data, submit access parameters, and verify the digital identity of the thermal management user; the verification content includes the global dynamic accumulator and the user dynamic accumulator digital identity member certification;

[0054] When the member proves that the result is verified to be legal, data VC is generated.

[0055] In this embodiment, direct access is performed based on the thermal management user accumulator, and a data VC certificate is issued; the specific process is: obtaining the user accumulator running instance and performing member certification; presetting the logical value of the certification result, the logical value includes 1 and 0, where 1 means the certification is passed and 0 means the certification is not passed; if the member certification result is 1, apply for authorization, and issue the authority VC certificate and data VC certificate; if the member certification result is not 1, direct access is performed and a data VC certificate is issued.

[0056] When thermal management user A interacts with thermal management user B, by determining whether the DID entity is within the trust domain of another DID entity, the data access rights of the data sovereignty owned by the entity can be obtained. Figure 1 As shown: s, r, w, d, and c are used to represent data sovereignty, data read permission, data write permission, data delete permission, and data create permission. The scope of the trust relationship includes the r domain, w domain, d domain, and c domain of the user data domain, as described below:

[0057]

[0058] If thermal management user x has s permission, it means that user x also has r, w, d, and c permissions.

[0059] If thermal management user y trusts thermal management user x and x has s permission on data A, then thermal management user y will have r permission on data A, as described below:

[0060]

[0061] Other permissions require entities to obtain them by applying for authorized data access, which is in the form of VC application and issuance. This VC authorization rule can be found in Figure 2 .

[0062] The trusted entity can obtain the r permission of the data with s permission of the building owner entity through direct data access, while other permissions need to be obtained through application authorization data access, which is mainly achieved by issuing VC. Similarly, if an entity is not in the trust domain of another entity, data access needs to be carried out through application authorization.

[0063] In the embodiment of the present invention, directly accessing the reference Figure 4 The specific steps include:

[0064] The applicant initiates a network request for application data and submits access parameters;

[0065] Verify the legitimacy of DID identity;

[0066] The applicant returns the DID verification result, and the holder obtains the verification result;

[0067] The holder generates data VC after judging the verification is legal;

[0068] Upload data VC;

[0069] Applicants obtain data VC.

[0070] The data table of VC is shown in Table 1:

[0071] Fields describe context Context description did User DID type Type of VC issued issuer Issuer's did issuranceDate Issue Date expirationDate Expiration time credentialSubjectId The ID of the credential payload proofId The number of the cryptographic proof of integrity

[0072] Table 1

[0073] The specific field descriptions of credentailSubject and proof are shown in Table 2 and Table 3:

[0074] Fields describe Did User DID shortDescription summary attributes Voucher Content type Encryption algorithm type

[0075] Table 2

[0076] Fields describe creator DID of the creator type Encryption algorithm type signatureValue Signature value

[0077] Table 3

[0078] Furthermore, in the step of performing access authorization based on the user accumulator:

[0079] Submit the application data list to initiate a VC application; the application data list is accompanied by DID verification parameters, including the applicant's did, the holder's did, and the accumulator witness value w;

[0080] Prove the global accumulator membership for the DID of the thermal management data applicant, query the applicant's DID document and perform integrity verification;

[0081] Obtain the DID verification result of the thermal management data applicant, and generate the data authority VC to the thermal management data applicant according to the application data list submitted by the thermal management data applicant;

[0082] After obtaining the permission VC, perform integrity check, generate the application list again based on the application list and permission list, and send a network request;

[0083] The DID of the thermal management data applicant is verified again, and the verification result is sent to the thermal management data holder. The thermal management data holder generates data VC and sends it to the applicant.

[0084] In this embodiment, the application for authorization to access Figure 4As shown, it includes: applying for authorization based on the user accumulator, issuing permission VC credentials and data VC credentials; the specific process is: submitting an application data list to initiate a VC application; the application data list is accompanied by DID verification parameters, including the applicant's did, the holder's did, and the accumulator witness value w; the DID of the thermal management data applicant is certified as a global accumulator member, the applicant's user's DID document is queried and an integrity check is performed; if the verification fails, a failure status is returned, and if successful, the next step is executed; the thermal management data holder obtains the DID verification result of the thermal management data applicant, and generates a data permission VC to the thermal management data applicant based on the application data list submitted by the thermal management data applicant; after the thermal management data applicant obtains the permission VC, it performs an integrity check, generates an application list again based on the application list and the permission list, and sends a network request; the DID of the thermal management data applicant is verified again, and the verification result is sent to the thermal management data holder, and the thermal management data holder generates the data VC and sends it to the applicant.

[0085] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the contents disclosed herein. The present application is intended to cover any variations, uses or adaptations of the present application, which follow the general principles of the present application and include common knowledge or customary technical means in the art that are not disclosed in the present application.

[0086] It should be understood that the present application is not limited to the exact construction that has been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof.

Claims

1. A digital authorization method for a thermal management system, characterized in that: The steps include: Query the global accumulator instance, build the system global accumulator, and initialize the thermal management user accumulator as needed; Determine access trust domain relationships based on thermal management user accumulator member proofs; Access authorization is performed based on user accumulators.

2. The digital authorization method for a thermal management system according to claim 1, characterized in that: In the step of determining the access trust domain relationship according to the thermal management user accumulator member proof: Direct access based on thermal management user accumulator and issuance of data VC credentials.

3. The digital authorization method for a thermal management system according to claim 2, characterized in that: In the step of issuing data VC credentials for direct access based on thermal management user accumulator: Initiate a network request for aircraft thermal management system data, submit access parameters, and verify the digital identity of the thermal management user; the verification content includes the global dynamic accumulator and the user dynamic accumulator digital identity member certification; When the member proves that the result is verified to be legal, data VC is generated.

4. The digital authorization method for a thermal management system according to claim 3, characterized in that: In the steps of access authorization based on user accumulator: Apply for authorization based on the user accumulator and issue permission VC credentials and data VC credentials.

5. The digital authorization method for a thermal management system according to claim 4, characterized in that: In the steps of applying for authorization based on the user accumulator and issuing the permission VC certificate and data VC certificate: Submit the application data list to initiate a VC application; the application data list is accompanied by DID verification parameters, including the applicant's did, the holder's did, and the accumulator witness value w; Prove the global accumulator membership for the DID of the thermal management data applicant, query the applicant's DID document and perform integrity verification; Obtain the DID verification result of the thermal management data applicant, and generate the data authority VC to the thermal management data applicant according to the application data list submitted by the thermal management data applicant; After obtaining the permission VC, perform integrity check, generate the application list again based on the application list and permission list, and send a network request; The DID of the thermal management data applicant is verified again, and the verification result is sent to the thermal management data holder. The thermal management data holder generates data VC and sends it to the applicant.

6. The digital authorization method for a thermal management system according to claim 1, characterized in that: In the steps of querying global accumulator instances, building system global accumulators, and initializing thermal management user accumulators on demand: Query the global accumulator status value, global accumulator running instance, and perform operations.

7. The digital authorization method for a thermal management system according to claim 6, characterized in that: In the steps of querying the global accumulator status value, running the global accumulator instance, and performing operations: If no global accumulator instance is created, the global accumulator is initialized and the initial accumulated value is stored on the chain as the state value.

8. The digital authorization method for a thermal management system according to claim 6, characterized in that: In the steps of querying the global accumulator status value, running the global accumulator instance, and performing operations: If a global accumulator instance already exists, the user accumulator status value and the user accumulator running instance are queried on the chain according to the thermal management user did number.

9. The digital authorization method for a thermal management system according to claim 6, characterized in that: In the steps of querying the global accumulator status value, running the global accumulator instance, and performing operations: If no user accumulator instance is created according to the thermal management user did number, the thermal management user accumulator is initialized and the initial accumulated value is stored on the chain as the state value.

Images