Chemical equipment safety monitoring method and system based on Internet of Things

Abstract

The invention provides a chemical equipment safety monitoring method and system based on the Internet of Things, belongs to the technical field of the Internet of Things, and is used for ensuring information safety of privacy information transmitted in a monitoring process. The method comprises the following steps that: a reader broadcasts a paging message, wherein the paging message is used for paging chemical equipment of a first type; the reader receives the device identifier and the ciphertext information of at least one chemical device, the at least one chemical device belongs to the chemical device of the first type, and the at least one chemical device is an AIoT terminal device; and the reader decrypts the respective ciphertext information of the at least one chemical equipment according to the respective equipment identifier of the at least one chemical equipment to obtain the respective production state of the at least one chemical equipment.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to a chemical equipment safety monitoring method and system based on the Internet of Things. Background Art

[0002] Ambient IoT (A-IoT) is also called ambient power-enabled IoT Passive IoT (P-IoT), that is, some network nodes can be passive, and they can obtain energy through solar energy, radio frequency, wind energy, water energy or tidal energy, and there is no restriction on the way of obtaining energy. These nodes are not equipped with or rely on power devices such as batteries, but obtain energy from the environment to support data perception, transmission and distributed computing. Nodes can also store the obtained energy. The passive IoT architecture can include passive terminals, readers and servers. Passive terminals can be in the form of tags or any other terminal forms without restriction. Readers can be access network devices, such as base stations, pole stations, micro base stations, macro stations, etc.; readers can also be terminal devices, such as mobile phones, IoT devices, handheld readers and writers, etc. Typical application scenarios of A-IoT are parks / warehouses, etc. For example, in a chemical park scenario, by configuring A-IoT tags / terminals for chemical equipment on the chemical production line, the chemical equipment can use the A-IoT terminal, or the chemical equipment can be regarded as an A-IoT terminal, and periodically feedback the production status to the reader based on the reader's paging, thereby realizing automated and wireless production status monitoring.

[0003] However, the production status of chemical equipment is relatively private information, and how to ensure the security of private information is also a current research issue. Summary of the invention

[0004] The embodiments of the present invention provide a chemical equipment safety monitoring method and system based on the Internet of Things to ensure the information security of private information transmitted during the monitoring process.

[0005] In order to achieve the above object, the present invention adopts the following technical scheme:

[0006] In a first aspect, a chemical equipment safety monitoring method based on the Internet of Things is provided, and the method is applied to a reader in an environmental Internet of Things network AIoT, and the method includes: the reader broadcasts a paging message, and the paging message is used to page a first type of chemical equipment; the reader receives a device identification and ciphertext information of at least one chemical equipment, at least one chemical equipment belongs to the first type of chemical equipment, and at least one chemical equipment is an AIoT terminal device; the reader decrypts the ciphertext information of at least one chemical equipment according to the device identification of at least one chemical equipment, and obtains the production status of at least one chemical equipment.

[0007] Optionally, for any target chemical equipment among at least one chemical equipment, the reader receives the respective equipment identification and ciphertext information of at least one chemical equipment, including: the reader receives a response message returned by the chemical equipment, the response message returned by the chemical equipment is a response to the paging message, the response message returned by the chemical equipment includes M response messages returned by the target chemical equipment, M is an integer greater than 1, and each of the M response messages includes the equipment identification and ciphertext information of the target chemical equipment; accordingly, the reader decrypts the respective ciphertext information of at least one chemical equipment according to the respective equipment identification of at least one chemical equipment to obtain the respective production status of at least one chemical equipment, including: the reader decrypts the ciphertext information carried by the M response messages according to the equipment identification of the target chemical equipment carried by the M response messages to obtain M plaintext information; the reader splices the M plaintext information to obtain the production status of the target chemical equipment.

[0008] Optionally, based on the fact that all M response messages carry the equipment identification of the target chemical equipment, the reader decrypts the ciphertext information carried in each of the M response messages to obtain M plaintext information, including: based on the fact that M of the received response messages carry the same equipment identification, the reader determines that the M response messages are response messages returned by the same chemical equipment, and the same equipment identification carried in the M response messages is the equipment identification of the target chemical equipment; the reader decrypts the ciphertext information carried in each of the M response messages to obtain M plaintext information.

[0009] Optionally, the paging message also includes a first random parameter R1 and a second random parameter R2, and the first random parameter R1 and the second random parameter R2 are two parameters randomly generated by the reader for the paging message broadcast this time; the reader decrypts the ciphertext information carried by each of the M response messages to obtain M plaintext information, including: the reader uses R1 and R2 to decrypt the ciphertext information carried by each of the M response messages to obtain M plaintext information.

[0010] Optionally, each of the M response messages includes a sequence number of the response message, and the reader uses R1 and R2 to decrypt the ciphertext information carried by each of the M response messages to obtain M plaintext information, including: the reader sorts the M response messages in ascending order according to the sequence numbers carried by each of the M response messages to obtain the sorted M response messages; for the first response message among the sorted M response messages: the reader uses R1 and the root key, and the random number parameter T2 carried by the second response message among the M response messages to derive the session key k1', and uses R1 and the root key, as well as T2, to derive the session key k1" ; Wherein, the root key is the key pre-configured by both the reader and the target chemical equipment, and T2 is a parameter randomly generated by the target chemical equipment; the reader uses k1' and k1" to try to decrypt the ciphertext information in the first response message; if the reader successfully decrypts the ciphertext information in the first response message using k1' and obtains the plaintext information, it means that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader successfully decrypts the ciphertext information in the first response message using k1" and obtains the plaintext information, it means that the target chemical equipment randomly selects R2 from R1 and R2 for encryption; for the second response message among the sorted M response messages: if the reader If k1' is used to successfully decrypt the ciphertext information in the first response message, the reader uses R1 and the root key, as well as the random number parameter T3 carried in the third response message among the M response messages, to deduce the session key k2', and uses k2' to decrypt the ciphertext information in the second response message to obtain the plaintext information; if the reader uses k1" to successfully decrypt the ciphertext information in the first response message, the reader uses R2 and the root key, as well as T3, to deduce the session key k2", and uses k2" to decrypt the ciphertext information in the second response message to obtain the plaintext information; wherein T3 is also a parameter randomly generated by the target chemical equipment; and so on, until the sorted M response messages are The Mth response message in the message: If the reader successfully decrypts the ciphertext information in the first response message using k1', the reader uses R1 and the root key, as well as the random number parameter T1 carried by the first response message among the M response messages, to deduce the session key kM', and uses kM' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; if the reader successfully decrypts the ciphertext information in the first response message using k1", the reader uses R2 and the root key, as well as T1, to deduce the session key kM", and uses kM" to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; wherein T1 is also a parameter randomly generated by the target chemical equipment.

[0011] Optionally, each of the M response messages includes a sequence number of the response message, and the reader uses R1 and R2 to decrypt the ciphertext information carried by each of the M response messages to obtain M plaintext information, including: the reader sorts the M response messages in ascending order according to the sequence numbers carried by each of the M response messages to obtain the sorted M response messages; for the first response message among the sorted M response messages: the reader uses R1 and the root key, and the random number parameter T3 carried by the third response message among the M response messages to derive the session key k1', and uses R1, the root key, and T3 to derive the session key k1" ; Wherein, the root key is the key pre-configured by both the reader and the target chemical equipment, and T3 is a parameter randomly generated by the target chemical equipment; the reader uses k1' and k1" to try to decrypt the ciphertext information in the first response message; if the reader successfully decrypts the ciphertext information in the first response message using k1' and obtains the plaintext information, it means that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader successfully decrypts the ciphertext information in the first response message using k1" and obtains the plaintext information, it means that the target chemical equipment randomly selects R2 from R1 and R2 for encryption; for the second response message among the sorted M response messages: if the reader If k1' is used to successfully decrypt the ciphertext information in the first response message, the reader uses R1 and the root key, as well as the random number parameter T4 carried in the fourth response message among the M response messages, to deduce the session key k2', and uses k2' to decrypt the ciphertext information in the second response message to obtain the plaintext information; if the reader uses k1" to successfully decrypt the ciphertext information in the first response message, the reader uses R2 and the root key, as well as T4, to deduce the session key k2", and uses k2" to decrypt the ciphertext information in the second response message to obtain the plaintext information; wherein T4 is also a parameter randomly generated by the target chemical equipment; and so on, until the sorted M response messages are The Mth response message in the message: If the reader successfully decrypts the ciphertext information in the first response message using k1', the reader uses R1 and the root key, as well as the random number parameter T2 carried in the second response message among the M response messages, to deduce the session key kM', and uses kM' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; if the reader successfully decrypts the ciphertext information in the first response message using k1", the reader uses R2 and the root key, as well as T2, to deduce the session key kM", and uses kM" to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; wherein T2 is also a parameter randomly generated by the target chemical equipment.

[0012] Optionally, the reader splices M pieces of plain text information to obtain the production status of the target chemical equipment, including: the reader splices the M pieces of plain text information in the order of the sorted M response messages to obtain the production status of the target chemical equipment.

[0013] Optionally, the paging message includes a mask MASK, where MASK indicates that the chemical equipment whose device identifier length is within a first length interval reports its own device identifier, and the chemical equipment whose device identifier length is within the first length interval is the first type of chemical equipment.

[0014] Optionally, the production status of at least one chemical equipment includes: the number of chemical products produced by at least one chemical equipment, the factory identification code of the chemical product produced by at least one chemical equipment, or whether the chemical product produced by at least one chemical equipment is a defective product.

[0015] In a second aspect, a chemical equipment safety monitoring system based on the Internet of Things is provided, the system includes a reader in an environmental Internet of Things network AIoT, and the system is configured as follows: the reader broadcasts a paging message, the paging message is used to page a first type of chemical equipment; the reader receives a device identification and ciphertext information of at least one chemical equipment, at least one chemical equipment belongs to the first type of chemical equipment, and at least one chemical equipment is an AIoT terminal device; the reader decrypts the ciphertext information of at least one chemical equipment according to the device identification of at least one chemical equipment, and obtains the production status of at least one chemical equipment.

[0016] In a third aspect, an electronic device is provided, comprising: a processor and a memory; the memory is used to store a computer program, and when the processor executes the computer program, the electronic device executes the method described in the first aspect.

[0017] In a possible design solution, the electronic device described in the third aspect may further include a transceiver. The transceiver may be a transceiver circuit or an interface circuit. The transceiver may be used for the electronic device described in the third aspect to communicate with other electronic devices.

[0018] In an embodiment of the present invention, the electronic device described in the third aspect may be a terminal, or a chip (system) or other parts or components that may be arranged in the terminal, or a system including the terminal.

[0019] In a fourth aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer is caused to execute the method described in the first aspect.

[0020] In summary: after the reader broadcasts a paging message to page the first type of chemical equipment (or AIoT terminal), the reader can receive the first type of chemical equipment, such as at least one chemical equipment returns its respective device identification and ciphertext information, that is, encrypted information. In this way, the reader can locally decrypt the ciphertext information of at least one chemical equipment according to the device identification of at least one chemical equipment, so as to obtain the production status of at least one chemical equipment in plain text, thereby ensuring the information security of the privacy information (that is, the production status) transmitted during the monitoring process. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 A schematic diagram of the architecture of an Internet of Things system provided by an embodiment of the present invention;

[0022] Figure 2 A schematic diagram of a process flow of a chemical equipment safety monitoring method based on the Internet of Things provided by an embodiment of the present invention;

[0023] Figure 3 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0024] The technical solution of the present invention will be described below in conjunction with the accompanying drawings.

[0025] In the embodiment of the present invention, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved by means of the arrangement order of each information agreed in advance (for example, specified by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can also be identified and indicated uniformly to reduce the indication overhead caused by indicating the same information separately.

[0026] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present invention does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present invention should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0027] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in the embodiment of the present invention. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to a protocol, or can be configured by the sending end device by sending configuration information to the receiving end device.

[0028] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present invention do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or an electronic device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or an electronic device. The type of memory can be any form of storage medium, which is not limited by the embodiments of the present invention.

[0029] The "protocol" involved in the embodiments of the present invention may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol applied in future systems, and the embodiments of the present invention do not specifically limit this.

[0030] In the embodiments of the present invention, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will perform corresponding processing under certain objective circumstances, but do not limit the time, nor do they require the device to perform judgment actions when implementing, nor do they mean the existence of other limitations.

[0031] In the description of the embodiments of the present invention, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present invention is only a kind of association relationship describing the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, in the description of the embodiments of the present invention, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solution of the embodiments of the present invention, in the embodiments of the present invention, the words "first" and "second" are used to distinguish the same items or similar items with basically the same functions and effects. Those skilled in the art will appreciate that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference. At the same time, in the embodiments of the present invention, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0032] The network architecture and business scenarios described in the embodiments of the present invention are intended to more clearly illustrate the technical solutions of the embodiments of the present invention, and do not constitute a limitation on the technical solutions provided by the embodiments of the present invention. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present invention are equally applicable to similar technical problems.

[0033] To facilitate understanding of the embodiments of the present invention, first Figure 1 Taking the Internet of Things system shown in as an example,

[0034] Figure 1 A schematic diagram of the architecture of an Internet of Things system applicable to a chemical equipment safety monitoring method based on the Internet of Things provided in an embodiment of the present invention.

[0035] like Figure 1 As shown, the Internet of Things system may include: a reader, and an AIoT device or an AIoT terminal.

[0036] The reader can be a base station or a terminal. In the embodiment of the present application, the reader is a base station.

[0037] AIoT terminals can be passive terminals. They can obtain energy through solar energy, radio frequency, wind energy, hydropower or tidal energy, and there is no restriction on the way of obtaining energy. These nodes are not equipped with or rely on power devices such as batteries, but obtain energy from the environment to support data perception, transmission and distributed computing. The nodes can also store the obtained energy. The AIoT terminal can be in the form of user equipment (UE), access terminal, subscriber unit, user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication equipment, user agent or user device. The terminal in the embodiments of the present application can be a mobile phone, a cellular phone, a smart phone, a tablet computer, a wireless data card, a personal digital assistant (PDA), a wireless modem, a handset, a laptop computer, a machine type communication (MTC) terminal, a computer with wireless transceiver function, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in a smart city, a wireless terminal in a smart home, a vehicle-mounted terminal, a road side unit (RSU) with terminal function, etc. The terminal of the present application may also be a vehicle-mounted module, a vehicle-mounted module, a vehicle-mounted component, a vehicle-mounted chip or a vehicle-mounted unit built into a vehicle as one or more components or units. Alternatively, the terminal may also be customer-premises equipment (CPE).

[0038] The embodiments of the present application are aimed at chemical industry scenarios, so the AIoT terminal can be in the form of chemical equipment.

[0039] Figure 2 A schematic diagram of a method provided by an embodiment of the present invention. This method for chemical equipment safety monitoring based on the Internet of Things is applicable to the above-mentioned Internet of Things system, and involves the interaction between devices in the above-mentioned Internet of Things system, such as the interaction between the reader and the AIoT terminal. The specific process is as follows:

[0040] S201, the reader broadcasts a paging message.

[0041] The paging message is used to page the first type of chemical equipment. For example, the paging message includes a mask (MASK), and the MASK indicates that the length of the equipment identifier of the chemical equipment within the first length interval reports its own equipment identifier, and specifically may include information of the first length interval, such as length L1 to length L2, L1 and L2 both represent the number of bits, such as L1 represents 0 bits, L2 represents 128 bits, that is, the first length interval is 0-128 bits. On this basis, the chemical equipment whose equipment identifier length is within the first length interval is the first type of chemical equipment. In other words, if the length of the chemical equipment's own equipment identifier is within the first length interval, it responds to the paging message, that is, S202, otherwise, it does not respond.

[0042] It can be understood that there can be multiple length intervals, and the first length interval is one of the multiple length intervals. In fact, the reader can poll and broadcast the mask for each length interval, such as 3 length intervals. Polling refers to first targeting the first length interval, then the second length interval, and finally the third length interval, and then repeating from the first length interval again. That is, the method of the present application can be executed in different length intervals. For ease of understanding, the present application is introduced using the first length interval as an example.

[0043] S202, the reader receives the equipment identification and ciphertext information of at least one chemical equipment.

[0044] S203, the reader decrypts the ciphertext information of at least one chemical equipment according to the equipment identification of at least one chemical equipment, and obtains the production status of at least one chemical equipment.

[0045] At least one chemical equipment belongs to the first type of chemical equipment, that is, the respective equipment identifiers are within the first length interval, and at least one chemical equipment is an AIoT terminal device, or AIoT terminal / device.

[0046] The equipment identification of the chemical equipment may be an identification assigned by the equipment manufacturer when the chemical equipment leaves the factory, which is used to uniquely identify the chemical equipment, and may specifically be an equipment identification code (EPC) or any other possible type of identification.

[0047] The production status of at least one chemical equipment may include: the number of chemical products produced by at least one chemical equipment, the factory identification code of the chemical product produced by at least one chemical equipment, or whether the chemical product produced by at least one chemical equipment is a defective product, which can be used to characterize the production results.

[0048] The embodiments of the present application do not limit the form of the chemical product, which can be any possible existing form of the chemical product.

[0049] The following is a joint introduction of S202-S203.

[0050] In S202, for any target chemical equipment among the at least one chemical equipment, the reader receives the equipment identification and ciphertext information of the at least one chemical equipment, including:

[0051] The reader receives the response message returned by the chemical equipment. The response message returned by the chemical equipment is a response to the paging message. The response message returned by the chemical equipment includes M response messages returned by the target chemical equipment, where M is an integer greater than 1. Each of the M response messages includes the device identification and ciphertext information of the target chemical equipment. In other words, the reader can receive the response message returned by each chemical equipment whose device identification length is within the first length interval. Since each chemical equipment needs to return its own production status through a response message, and the amount of information about the production status (or the amount of data) is relatively large, the data of the production status needs to be sent in segments, that is, each response message carries the device identification of the chemical equipment and the ciphertext of a corresponding data segment. For ease of understanding, the target equipment is used as an example for introduction, as follows:

[0052] After receiving the paging message, the target chemical equipment determines that the length of its own equipment identification is within the first length range indicated by the mask of the paging message, thereby determining to respond to the paging message. In response to the paging message, the target chemical equipment can obtain the production status during the period from responding to the last paging message received to responding to the paging message received this time, that is, the production status of the target chemical equipment. In addition, if the paging message received this time is the first paging message received, the target chemical equipment obtains the production status during the period from the equipment startup to the response to the paging message received this time.

[0053] The target chemical equipment divides the production status of the target chemical equipment (or the data of the production status of the target chemical equipment) into M segments of data according to the rules defined by the protocol (such as the protocol defines how many bits of data a response message can carry at most when the length of the equipment identifier belongs to the first length interval), according to the maximum number of bits that can be carried. For example, a response message can carry a maximum of 100 bits of data, and the data of the production status of the target chemical equipment is 660 bits, then M=7, the first 6 segments of the 660 bits are all 100 bits, and the 7th segment is 60 bits, or the first segment of the 660 bits is 60 bits, and the last 6 segments are all 100 bits.

[0054] The paging message also includes a first random parameter R1 (abbreviated as R1) and a second random parameter R2 (abbreviated as R2). R1 ​​and R2 are two parameters randomly generated by the reader for the paging message broadcast this time (i.e., the paging message of S201). The target chemical equipment can randomly choose to use R1 or R2 to encrypt the data of each segment in the M segments. Taking the target chemical equipment choosing to use R1 as an example, the target chemical equipment can use cross encryption to encrypt the data of each segment.

[0055] For example:

[0056] For the data of the first segment, the target chemical equipment randomly generates a random number parameter T2 (abbreviated as T2). T2 is a parameter that needs to be carried in the second response message. The target chemical equipment uses R1, the root key, and T2 to deduce the session key k1' (abbreviated as k1'). Specifically, R1, the root key, and T2 can be used as input parameters to derive k1' through a key derivation algorithm (KDF). The target chemical equipment uses k1' to encrypt the data of the first segment to obtain ciphertext information, and carries the ciphertext information to the first response message. At the same time, the response message also carries the equipment identification of the target chemical equipment and the random number parameter T1 (abbreviated as T1) randomly generated by the target chemical equipment. The target chemical equipment adds the serial number 1 to the first response message and sends the response message to the reader, where the serial number 1 indicates that the response message is the first message of the target chemical equipment in response to the reader.

[0057] For the data in the second segment, the target chemical equipment randomly generates a random number parameter T3 (abbreviated as T3). T3 is a parameter that needs to be carried in the third response message. The target chemical equipment uses R1 and the root key, as well as T3, to deduce the session key k2' (abbreviated as k2'). The specific derivation method is similar to the above and will not be repeated. The target chemical equipment uses k2' to encrypt the data in the second segment, obtains the ciphertext information, and carries the ciphertext information to the second response message. At the same time, the response message also carries the equipment identification of the target chemical equipment and the target chemical equipment randomly generated T2. The target chemical equipment adds the serial number 2 to the second response message and sends the response message to the reader, where the serial number 2 indicates that the response message is the second message of the target chemical equipment in response to the reader.

[0058] By analogy, for the data of the Mth segment, the target chemical equipment uses R1 and the root key, as well as T1, to deduce the session key kM' (abbreviated as kM'). The specific derivation method is similar to the above and will not be repeated. The target chemical equipment uses kM' to encrypt the data of the Mth segment to obtain the ciphertext information, and carries the ciphertext information to the Mth response message. At the same time, the response message also carries the equipment identification of the target chemical equipment and the random number parameter TM randomly generated by the target chemical equipment. The target chemical equipment adds the serial number M to the Mth response message and sends the response message to the reader, where the serial number M indicates that the response message is the Mth message of the target chemical equipment in response to the reader.

[0059] Another example:

[0060] For the data of the first segment, the target chemical equipment randomly generates T3, which is a parameter that needs to be carried in the third response message. The target chemical equipment uses R1, the root key, and T3 to deduce k1'. Specifically, R1, the root key, and T3 can be used as input parameters to derive k1' through a key derivation algorithm (KDF). The target chemical equipment uses k1' to encrypt the data of the first segment to obtain ciphertext information, and carries the ciphertext information to the first response message. At the same time, the response message also carries the device identification of the target chemical equipment and T1 randomly generated by the target chemical equipment. The target chemical equipment adds the serial number 1 to the first response message and sends the response message to the reader, where the serial number 1 indicates that the response message is the first message of the target chemical equipment in response to the reader.

[0061] By analogy, for the data of the Mth segment, the target chemical equipment uses R1 and the root key, as well as T2, to deduce the session key kM' (abbreviated as kM'). The specific derivation method is similar to the above and will not be repeated. The target chemical equipment uses kM' to encrypt the data of the Mth segment to obtain the ciphertext information, and carries the ciphertext information to the Mth response message. At the same time, the response message also carries the device identification of the target chemical equipment and the random number parameter TM randomly generated by the target chemical equipment. The target chemical equipment adds the serial number M to the Mth response message and sends the response message to the reader, where the serial number M indicates that the response message is the Mth message of the target chemical equipment in response to the reader.

[0062] That is, the above two examples cross-use the random number parameters in the next / next two messages to encrypt the data carried in the previous message. Compared with the existing method, the existing method usually uses the random number parameters in the current message to encrypt the data carried in the current message. If the attacker cannot steal the encryption rules, even if the random number parameters in each message are obtained, it cannot be successfully decrypted, thereby further improving information security.

[0063] For S203:

[0064] The reader can decrypt the ciphertext information carried in each of the M response messages according to the equipment identification of the target chemical equipment carried in each of the M response messages to obtain M pieces of plaintext information.

[0065] Specifically, the reader can determine that the M response messages received carry the same device identifier, and that the M response messages are response messages returned by the same chemical equipment. The same device identifier carried by the M response messages is the device identifier of the target chemical equipment. The reader decrypts the ciphertext information carried by each of the M response messages to obtain M plaintext information. For example, the reader can use R1 and R2 to decrypt the ciphertext information carried by each of the M response messages to obtain M plaintext information.

[0066] Among them, the decryption of the reader is the reverse process of the above encryption. Since the reader does not know whether the target chemical equipment uses R1 or R2 for encryption, a decryption attempt is required, as follows.

[0067] Method 1 (one message interval):

[0068] Each of the M response messages contains the sequence number of the response message. The reader first sorts the M response messages in ascending order according to the sequence numbers carried by each of the M response messages to obtain the sorted M response messages, that is, the order in which the target chemical equipment sends the M response messages.

[0069] For the first response message among the sorted M response messages.

[0070] The reader uses R1 and the root key, as well as the random number parameter T2 carried in the second response message among the M response messages, to deduce the session key k1', and uses R1 and the root key, as well as T2, to deduce the session key k1". The reader uses k1' and k1" respectively to try to decrypt the ciphertext information in the first response message. If the reader successfully decrypts the ciphertext information in the first response message using k1' and obtains the plaintext information, that is, the data of the first segment, it means that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader successfully decrypts the ciphertext information in the first response message using k1" and obtains the plaintext information, it means that the target chemical equipment randomly selects R2 from R1 and R2 for encryption.

[0071] Afterwards, for the second response message among the sorted M response messages:

[0072] If the reader successfully decrypts the ciphertext information in the first response message using k1', the reader uses R1 and the root key, as well as the random number parameter T3 carried in the third response message among the M response messages, to deduce the session key k2', and uses k2' to decrypt the ciphertext information in the second response message to obtain the plaintext information, i.e., the data of the second segment; if the reader successfully decrypts the ciphertext information in the first response message using k1", the reader uses R2 and the root key, as well as T3, to deduce the session key k2", and uses k2" to decrypt the ciphertext information in the second response message to obtain the plaintext information;

[0073] And so on, until the Mth response message among the sorted M response messages:

[0074] If the reader successfully decrypts the ciphertext information in the first response message using k1', the reader uses R1 and the root key, as well as the random number parameter T1 carried by the first response message among M response messages, to deduce the session key kM', and uses kM' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; if the reader successfully decrypts the ciphertext information in the first response message using k1", the reader uses R2 and the root key, as well as T1, to deduce the session key kM", and uses kM" to decrypt the ciphertext information in the Mth response message to obtain the plaintext information, i.e., the data of the Mth segment.

[0075] Method 2 (two messages apart):

[0076] Each of the M response messages includes a sequence number of the response message. The reader also sorts the M response messages in ascending order according to the sequence numbers carried by each of the M response messages to obtain the sorted M response messages.

[0077] For the first response message among the sorted M response messages:

[0078] The reader uses R1 and the root key, as well as the random number parameter T3 carried in the third response message among the M response messages, to deduce the session key k1', and uses R1 and the root key, as well as T3, to deduce the session key k1". The reader can use k1' and k1" respectively to try to decrypt the ciphertext information in the first response message. If the reader successfully decrypts the ciphertext information in the first response message using k1' and obtains the plaintext information, it means that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader successfully decrypts the ciphertext information in the first response message using k1" and obtains the plaintext information, it means that the target chemical equipment randomly selects R2 from R1 and R2 for encryption.

[0079] Afterwards, for the second response message among the sorted M response messages, if the reader successfully decrypts the ciphertext information in the first response message using k1', the reader uses R1 and the root key, as well as the random number parameter T4 carried by the fourth response message among the M response messages, to deduce the session key k2', and uses k2' to decrypt the ciphertext information in the second response message to obtain the plaintext information; if the reader successfully decrypts the ciphertext information in the first response message using k1", the reader uses R2 and the root key, as well as T4, to deduce the session key k2", and uses k2" to decrypt the ciphertext information in the second response message to obtain the plaintext information;

[0080] And so on, until the Mth response message among the sorted M response messages, if the reader successfully decrypts the ciphertext information in the first response message using k1', the reader uses R1 and the root key, and the random number parameter T2 carried by the second response message among the M response messages, to deduce the session key kM', and uses kM' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; if the reader successfully decrypts the ciphertext information in the first response message using k1", the reader uses R2 and the root key, as well as T2, to deduce the session key kM", and uses kM" to decrypt the ciphertext information in the Mth response message to obtain the plaintext information.

[0081] After decrypting and obtaining M plaintext messages, the reader can splice the M plaintext messages to obtain the production status of the target chemical equipment. The reader splices the M plaintext messages in the order of the sorted M response messages to obtain the production status of the target chemical equipment.

[0082] In summary, after the reader broadcasts a paging message to page the first type of chemical equipment (or AIoT terminal), the reader can receive the first type of chemical equipment, such as at least one chemical equipment returns its respective device identification and ciphertext information, that is, encrypted information. In this way, the reader can locally decrypt the ciphertext information of at least one chemical equipment according to the device identification of at least one chemical equipment, so as to obtain the production status of at least one chemical equipment in plain text, thereby ensuring the information security of the privacy information (that is, the production status) transmitted during the monitoring process.

[0083] Combination of the above Figure 2 The method provided by the embodiment of the present invention is described in detail. The following is a chemical equipment safety monitoring system based on the Internet of Things for executing the method provided by the embodiment of the present invention, the system includes a reader in the environmental Internet of Things AIoT, and the system is configured as follows: the reader broadcasts a paging message, the paging message is used to page the first type of chemical equipment; the reader receives the device identification and ciphertext information of at least one chemical equipment, at least one chemical equipment belongs to the first type of chemical equipment, and at least one chemical equipment is an AIoT terminal device; the reader decrypts the ciphertext information of at least one chemical equipment according to the device identification of at least one chemical equipment, and obtains the production status of at least one chemical equipment.

[0084] Figure 3 The electronic device provided in the embodiment of the present invention is a schematic diagram of the structure of the electronic device. For example, the electronic device may be a network device, or a chip (system) or other components or assemblies that can be set in the network device. Figure 3 As shown, the electronic device 400 may include a processor 401. Optionally, the electronic device 400 may further include a memory 402 and / or a transceiver 403. The processor 401 is coupled with the memory 402 and the transceiver 403, such as being connected via a communication bus.

[0085] Combine the following Figure 3 The components of the electronic device 400 are described in detail:

[0086] The processor 401 is the control center of the electronic device 400, and may be a processor or a general term for multiple processing elements. For example, the processor 401 is one or more central processing units (CPUs), or may be application specific integrated circuits (ASICs), or may be one or more integrated circuits configured to implement the embodiments of the present invention, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0087] Optionally, the processor 401 can execute various functions of the electronic device 400 by running or executing the software program stored in the memory 402 and calling the data stored in the memory 402, such as executing the above Figure 2 A chemical equipment safety monitoring method based on the Internet of Things is shown.

[0088] In a specific implementation, as an embodiment, the processor 401 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0089] In a specific implementation, as an embodiment, the electronic device 400 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (e.g., computer program instructions).

[0090] The memory 402 is used to store the software program for executing the solution of the present invention, and the execution is controlled by the processor 401. The specific implementation method can refer to the above method embodiment, which will not be repeated here.

[0091] Optionally, the memory 402 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 402 may be integrated with the processor 401, or may exist independently and access the computer through the interface circuit ( Figure 3 (not shown) is coupled to the processor 401, which is not specifically limited in this embodiment of the present invention.

[0092] The transceiver 403 is used for communication with other electronic devices. For example, if the electronic device 400 is a terminal, the transceiver 403 can be used to communicate with a network device, or with another terminal device. For another example, if the electronic device 400 is a network device, the transceiver 403 can be used to communicate with a terminal, or with another network device.

[0093] Optionally, the transceiver 403 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0094] Optionally, the transceiver 403 may be integrated with the processor 401, or may exist independently and communicate with the electronic device 400 through an interface circuit ( Figure 3 (not shown) is coupled to the processor 401, which is not specifically limited in this embodiment of the present invention.

[0095] Understandably, Figure 3 The structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and the actual electronic device may include more or fewer components than those shown in the figure, or combine certain components, or arrange the components differently.

[0096] In addition, the technical effects of the electronic device 400 can refer to the technical effects of the methods described in the above method embodiments, which will not be repeated here.

[0097] It should be understood that the processor in the embodiment of the present invention may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0098] It should also be understood that the memory in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0099] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0100] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0101] In the present invention, "at least one" means one or more, and "more than one" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can be represented by: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0102] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0103] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0104] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0105] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0106] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0107] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0108] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0109] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A chemical equipment safety monitoring method based on the Internet of Things, characterized in that: The method is applied to a reader in an AIoT network, and the method comprises: The reader broadcasts a paging message, wherein the paging message is used to page a first type of chemical equipment; The reader receives a device identification and ciphertext information of at least one chemical device, wherein the at least one chemical device belongs to the first type of chemical device, and the at least one chemical device is an AIoT terminal device; The reader decrypts the ciphertext information of the at least one chemical equipment according to the equipment identification of the at least one chemical equipment to obtain the production status of the at least one chemical equipment.

2. The method according to claim 1, characterized in that For any target chemical equipment among the at least one chemical equipment, the reader receives the equipment identification and ciphertext information of the at least one chemical equipment, including: The reader receives a response message returned by the chemical equipment, the response message returned by the chemical equipment is a response to the paging message, the response message returned by the chemical equipment includes M response messages returned by the target chemical equipment, M is an integer greater than 1, and each of the M response messages includes a device identification and ciphertext information of the target chemical equipment; Correspondingly, the reader decrypts the ciphertext information of the at least one chemical equipment according to the equipment identification of the at least one chemical equipment to obtain the production status of the at least one chemical equipment, including: The reader decrypts the ciphertext information carried by each of the M response messages according to the equipment identification of the target chemical equipment carried by each of the M response messages, and obtains M pieces of plaintext information; The reader splices the M pieces of plain text information to obtain the production status of the target chemical equipment.

3. The method according to claim 2, characterized in that The reader decrypts the ciphertext information carried by each of the M response messages according to the equipment identification of the target chemical equipment, and obtains M pieces of plaintext information, including: The reader determines, based on the M response messages among the received response messages carrying the same device identifier, that the M response messages are response messages returned by the same chemical equipment, and the same device identifier carried by the M response messages is the device identifier of the target chemical equipment; The reader decrypts the ciphertext information carried in each of the M response messages to obtain M pieces of plaintext information.

4. The method according to claim 3, characterized in that The paging message further includes a first random parameter R1 and a second random parameter R2, wherein the first random parameter R1 and the second random parameter R2 are two parameters randomly generated by the reader for the paging message broadcast this time; The reader decrypts the ciphertext information carried by each of the M response messages to obtain M plaintext information, including: The reader uses R1 and R2 to decrypt the ciphertext information carried in each of the M response messages to obtain the M plaintext information.

5. The method according to claim 4, characterized in that Each of the M response messages includes a sequence number of the response message. The reader uses R1 and R2 to decrypt the ciphertext information carried by each of the M response messages to obtain the M plaintext information, including: The reader sorts the M response messages according to the sequence numbers carried by the M response messages, in ascending order of the sequence numbers, to obtain sorted M response messages; For the first response message among the sorted M response messages: The reader uses the R1 and the root key, and the random number parameter T2 carried in the second response message among the M response messages, to derive the session key k1', and uses the R1 and the root key, as well as T2, to derive the session key k1". Wherein, the root key is a key pre-configured by both the reader and the target chemical equipment, and T2 is a parameter randomly generated by the target chemical equipment; The reader attempts to decrypt the ciphertext information in the first response message using the k1′ and the k1″ respectively; If the reader successfully decrypts the ciphertext information in the first response message using the k1' and obtains the plaintext information, it means that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader successfully decrypts the ciphertext information in the first response message using the k1", and obtains the plaintext information, it means that the target chemical equipment randomly selects R2 from R1 and R2 for encryption; For the second response message among the sorted M response messages: If the reader successfully decrypts the ciphertext information in the first response message using the k1', the reader uses the R1 and the root key, and the random number parameter T3 carried by the third response message among the M response messages, to deduce the session key k2', and uses the k2' to decrypt the ciphertext information in the second response message to obtain the plaintext information; If the reader successfully decrypts the ciphertext information in the first response message using the k1", the reader uses the R2 and the root key, as well as the T3, to derive the session key k2", and uses the k2" to decrypt the ciphertext information in the second response message to obtain the plaintext information; Wherein, the T3 is also a parameter randomly generated by the target chemical equipment; And so on, until the Mth response message among the sorted M response messages: If the reader successfully decrypts the ciphertext information in the first response message using the k1', the reader uses the R1 and the root key, and the random number parameter T1 carried by the first response message among the M response messages, to deduce the session key kM', and uses the kM' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; If the reader successfully decrypts the ciphertext information in the first response message using the k1", the reader uses the R2 and the root key, as well as the T1, to derive the session key kM", and uses the kM" to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; Among them, the T1 is also a randomly generated parameter of the target chemical equipment.

6. The method according to claim 4, characterized in that Each of the M response messages includes a sequence number of the response message. The reader uses R1 and R2 to decrypt the ciphertext information carried by each of the M response messages to obtain the M plaintext information, including: The reader sorts the M response messages according to the sequence numbers carried by the M response messages, in ascending order of the sequence numbers, to obtain sorted M response messages; For the first response message among the sorted M response messages: The reader uses the R1 and the root key, and the random number parameter T3 carried in the third response message among the M response messages, to derive the session key k1', and uses the R1 and the root key, as well as T3, to derive the session key k1". Wherein, the root key is a key pre-configured by both the reader and the target chemical equipment, and T3 is a parameter randomly generated by the target chemical equipment; The reader attempts to decrypt the ciphertext information in the first response message using the k1′ and the k1″ respectively; If the reader successfully decrypts the ciphertext information in the first response message using the k1' and obtains the plaintext information, it means that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader successfully decrypts the ciphertext information in the first response message using the k1", and obtains the plaintext information, it means that the target chemical equipment randomly selects R2 from R1 and R2 for encryption; For the second response message among the sorted M response messages: If the reader successfully decrypts the ciphertext information in the first response message using the k1', the reader uses the R1 and the root key, and the random number parameter T4 carried by the fourth response message among the M response messages, to deduce the session key k2', and uses the k2' to decrypt the ciphertext information in the second response message to obtain the plaintext information; If the reader successfully decrypts the ciphertext information in the first response message using the k1", the reader uses the R2 and the root key, as well as T4, to derive the session key k2", and uses the k2" to decrypt the ciphertext information in the second response message to obtain the plaintext information; Wherein, the T4 is also a randomly generated parameter of the target chemical equipment; And so on, until the Mth response message among the sorted M response messages: If the reader successfully decrypts the ciphertext information in the first response message using the k1', the reader uses the R1 and the root key, and the random number parameter T2 carried by the second response message among the M response messages, to deduce the session key kM', and uses the kM' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; If the reader successfully decrypts the ciphertext information in the first response message using the k1", the reader uses the R2 and the root key, as well as T2, to derive the session key kM", and uses the kM" to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; Among them, T2 is also a randomly generated parameter of the target chemical equipment.

7. The method according to claim 5 or 6, characterized in that: The reader splices the M pieces of plain text information to obtain the production status of the target chemical equipment, including: The reader splices the M plaintext information in the order of the sorted M response messages to obtain the production status of the target chemical equipment.

8. The method according to any one of claims 1 to 6, characterized in that The paging message includes a mask MASK, wherein the MASK indicates that a chemical device with a device identifier length within a first length interval reports its own device identifier, and the chemical device with a device identifier length within the first length interval is the first type of chemical device.

9. The method according to any one of claims 1 to 6, characterized in that: The production status of each of the at least one chemical equipment includes: the number of chemical products produced by each of the at least one chemical equipment, the factory identification code of the chemical product produced by each of the at least one chemical equipment, or whether the chemical product produced by each of the at least one chemical equipment is a defective product.

10. A chemical equipment safety monitoring system based on the Internet of Things, characterized in that: The system comprises a reader in an ambient Internet of Things (AIoT), and the system is configured to: The reader broadcasts a paging message, wherein the paging message is used to page a first type of chemical equipment; The reader receives a device identification and ciphertext information of at least one chemical device, wherein the at least one chemical device belongs to the first type of chemical device, and the at least one chemical device is an AIoT terminal device; The reader decrypts the ciphertext information of the at least one chemical equipment according to the equipment identification of the at least one chemical equipment to obtain the production status of the at least one chemical equipment.

Images