Chemical equipment safety monitoring method based on internet of things

Abstract

The application provides a chemical equipment safety monitoring method and system based on the Internet of Things, belongs to the technical field of the Internet of Things, and is used for guaranteeing the information safety of private information transmitted in a monitoring process. The method comprises the following steps: a reader broadcasts a paging message, the paging message is used for paging a first type of chemical equipment; the reader receives device identifiers and ciphertext information of at least one chemical equipment, the at least one chemical equipment belongs to the first type of chemical equipment, and the at least one chemical equipment is all AIoT terminal equipment; and the reader decrypts the ciphertext information of the at least one chemical equipment according to the device identifiers of the at least one chemical equipment, to obtain production states of the at least one chemical equipment.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet of Things, and in particular to a chemical equipment safety monitoring method and system based on Internet of Things. BACKGROUND

[0002] Ambient IoT (A-IoT) is also called Ambient Power-enabled IoT (P-IoT), that is, some network nodes can be passive, which can obtain energy through solar energy, radio frequency, wind energy, water energy or tidal energy, and the way of obtaining energy is not limited. These nodes do not have or depend on power supply devices such as batteries, but obtain energy from the environment to support data sensing, transmission and distributed computing. The nodes can also store the obtained energy. The passive Internet of Things architecture can include passive terminals, readers and servers. The passive terminal can be in the form of a tag or any other terminal form, without limitation. The reader can be an access network device, such as a base station, a pole station, a micro base station, a macro station, etc. The reader can also be a terminal device, such as a mobile phone, an IoT device, a handheld reader, etc. The typical application scenario of A-IoT is a park / warehouse, etc. For example, in the chemical park scenario, by configuring A-IoT tags / terminals for chemical equipment on the chemical production line, the chemical equipment can periodically feed back the production status to the reader according to the paging of the reader through the A-IoT terminal, or the chemical equipment can be regarded as an A-IoT terminal, so as to realize automatic and wireless production status monitoring.

[0003] However, the production status of the chemical equipment is relatively private information, and how to ensure the security of the private information is also a problem of current research. SUMMARY

[0004] The embodiments of the present application provide a chemical equipment safety monitoring method and system based on Internet of Things to ensure the information security of the private information transmitted in the monitoring process.

[0005] To achieve the above-mentioned purpose, the present application adopts the following technical solutions:

[0006] In a first aspect, a chemical equipment safety monitoring method based on an Internet of Things is provided. The method is applied to a reader in an environment AIoT network. The method comprises the following steps: the reader broadcasts a paging message, the paging message is used to page a first type of chemical equipment; the reader receives device identifiers and ciphertext information of at least one chemical equipment, the at least one chemical equipment belongs to the first type of chemical equipment, and each of the at least one chemical equipment is an AIoT terminal device; and the reader decrypts the ciphertext information of the at least one chemical equipment according to the device identifiers of the at least one chemical equipment to obtain production states of the at least one chemical equipment.

[0007] Optionally, for any target chemical equipment in the at least one chemical equipment, the reader receives the device identifiers and the ciphertext information of the at least one chemical equipment, which comprises the following steps: the reader receives a response message returned by a chemical equipment, the response message returned by the chemical equipment is a response to the paging message, the response message returned by the chemical equipment contains M response messages returned by the target chemical equipment, M is an integer greater than 1, and each of the M response messages contains the device identifier and the ciphertext information of the target chemical equipment; and correspondingly, the reader decrypts the ciphertext information of the at least one chemical equipment according to the device identifiers of the at least one chemical equipment to obtain the production states of the at least one chemical equipment, which comprises the following steps: the reader decrypts the ciphertext information carried in each of the M response messages according to the fact that the M response messages all carry the device identifier of the target chemical equipment to obtain M pieces of plaintext information; and the reader splices the M pieces of plaintext information to obtain the production state of the target chemical equipment.

[0008] Optionally, the reader decrypts the ciphertext information carried in each of the M response messages according to the fact that the M response messages all carry the device identifier of the target chemical equipment to obtain M pieces of plaintext information, which comprises the following steps: the reader determines that the M response messages are response messages returned by the same chemical equipment according to the fact that the M response messages carry the same device identifier in the received response message, and the same device identifier carried in the M response messages is the device identifier of the target chemical equipment; and the reader decrypts the ciphertext information carried in each of the M response messages to obtain M pieces of plaintext information.

[0009] Optionally, the paging message further comprises a first random parameter R1 and a second random parameter R2, the first random parameter R1 and the second random parameter R2 are two parameters randomly generated by the reader for the broadcasted paging message; and the reader decrypts the ciphertext information carried in each of the M response messages using R1 and R2 to obtain M pieces of plaintext information.

[0010] Optionally, each of the M response messages comprises a serial number of the response message, and the reader uses R1 and R2 to decrypt the cipher information carried by each of the M response messages to obtain M pieces of plaintext information, including: the reader sorts the M response messages according to the serial numbers carried by each of the M response messages in ascending order of the serial numbers to obtain sorted M response messages; for the 1st response message in the sorted M response messages: the reader uses R1 and a root key, and a random number parameter T2 carried by the 2nd response message in the M response messages to derive a session key k1', and uses R1 and the root key, and T2 to derive a session key k1"; wherein the root key is a key preconfigured by the reader and the target chemical equipment, and T2 is a parameter randomly generated by the target chemical equipment; the reader uses k1' and k1" respectively to attempt to decrypt the cipher information in the 1st response message; if the reader uses k1' to successfully decrypt the cipher information in the 1st response message to obtain the plaintext information, it indicates that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader uses k1" to successfully decrypt the cipher information in the 1st response message to obtain the plaintext information, it indicates that the target chemical equipment randomly selects R2 from R1 and R2 for encryption; for the 2nd response message in the sorted M response messages: if the reader uses k1' to successfully decrypt the cipher information in the 1st response message, the reader uses R1 and the root key, and a random number parameter T3 carried by the 3rd response message in the M response messages to derive a session key k2', and uses k2' to decrypt the cipher information in the 2nd response message to obtain the plaintext information; if the reader uses k1" to successfully decrypt the cipher information in the 1st response message, the reader uses R2 and the root key, and T3 to derive a session key k2", and uses k2" to decrypt the cipher information in the 2nd response message to obtain the plaintext information; wherein T3 is also a parameter randomly generated by the target chemical equipment; and so on, until the Mth response message in the sorted M response messages: if the reader uses k1' to successfully decrypt the cipher information in the 1st response message, the reader uses R1 and the root key, and a random number parameter T1 carried by the 1st response message in the M response messages to derive a session key kM', and uses kM' to decrypt the cipher information in the Mth response message to obtain the plaintext information; if the reader uses k1" to successfully decrypt the cipher information in the 1st response message, the reader uses R2 and the root key, and T1 to derive a session key kM", and uses kM" to decrypt the cipher information in the Mth response message to obtain the plaintext information; wherein T1 is also a parameter randomly generated by the target chemical equipment.

[0011] Optionally, each of the M response messages comprises a serial number of the response message, and the reader uses R1 and R2 to decrypt the cipher information carried by each of the M response messages to obtain M pieces of plaintext information, including: the reader sorts the M response messages according to the serial numbers carried by each of the M response messages in ascending order of the serial numbers to obtain sorted M response messages; for the 1st response message in the sorted M response messages: the reader uses R1 and a root key, and a random number parameter T3 carried by the 3rd response message in the M response messages to derive a session key k1', and uses R1 and the root key and T3 to derive a session key k1"; wherein the root key is a key preconfigured by the reader and the target chemical equipment, and T3 is a parameter randomly generated by the target chemical equipment; the reader uses k1' and k1" respectively to attempt to decrypt the cipher information in the 1st response message; if the reader uses k1' to successfully decrypt the cipher information in the 1st response message to obtain plaintext information, it indicates that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader uses k1" to successfully decrypt the cipher information in the 1st response message to obtain plaintext information, it indicates that the target chemical equipment randomly selects R2 from R1 and R2 for encryption; for the 2nd response message in the sorted M response messages: if the reader uses k1' to successfully decrypt the cipher information in the 1st response message, the reader uses R1 and the root key, and a random number parameter T4 carried by the 4th response message in the M response messages to derive a session key k2', and uses k2' to decrypt the cipher information in the 2nd response message to obtain plaintext information; if the reader uses k1" to successfully decrypt the cipher information in the 1st response message, the reader uses R2 and the root key, and T4 to derive a session key k2", and uses k2" to decrypt the cipher information in the 2nd response message to obtain plaintext information; wherein T4 is also a parameter randomly generated by the target chemical equipment; and so on, until the Mth response message in the sorted M response messages: if the reader uses k1' to successfully decrypt the cipher information in the 1st response message, the reader uses R1 and the root key, and a random number parameter T2 carried by the 2nd response message in the M response messages to derive a session key kM', and uses kM' to decrypt the cipher information in the Mth response message to obtain plaintext information; if the reader uses k1" to successfully decrypt the cipher information in the 1st response message, the reader uses R2 and the root key, and T2 to derive a session key kM", and uses kM" to decrypt the cipher information in the Mth response message to obtain plaintext information; wherein T2 is also a parameter randomly generated by the target chemical equipment.

[0012] Optionally, the reader splices the M pieces of plaintext information to obtain the production state of the target chemical equipment, including: the reader splices the M pieces of plaintext information according to the order of the M pieces of sorted response messages to obtain the production state of the target chemical equipment.

[0013] Optionally, the paging message contains a mask MASK, and the MASK indicates that the chemical equipment with a device identifier of a length in the first length range reports its own device identifier, and the chemical equipment with the device identifier of the length in the first length range is the first type of chemical equipment.

[0014] Optionally, the production state of each of the at least one chemical equipment includes: the number of chemical products produced by each of the at least one chemical equipment, the factory identification code of the chemical products produced by each of the at least one chemical equipment, or whether the chemical products produced by each of the at least one chemical equipment are defective products.

[0015] In a second aspect, an Internet of Things (IoT)-based chemical equipment safety monitoring system is provided, which includes a reader in an ambient IoT (AIoT) network, and the system is configured to: the reader broadcasts a paging message, the paging message is used to page the first type of chemical equipment; the reader receives device identifiers and ciphertext information of at least one chemical equipment, the at least one chemical equipment belongs to the first type of chemical equipment, and the at least one chemical equipment is an AIoT terminal device; and the reader decrypts the ciphertext information of the at least one chemical equipment according to the device identifiers of the at least one chemical equipment to obtain the production state of the at least one chemical equipment.

[0016] In a third aspect, an electronic device is provided, including: a processor and a memory; the memory is used to store a computer program, when the processor executes the computer program, so that the electronic device executes the method of the first aspect.

[0017] In a possible design scheme, the electronic device of the third aspect can further include a transceiver. The transceiver can be a transceiver circuit or an interface circuit. The transceiver can be used for the electronic device of the third aspect to communicate with other electronic devices.

[0018] In the embodiments of the present application, the electronic device of the third aspect can be a terminal, or a chip (system) or other components or assemblies provided in the terminal, or a system including the terminal.

[0019] In a fourth aspect, a computer-readable storage medium is provided, including: a computer program or instructions; when the computer program or instructions run on a computer, the computer executes the method of the first aspect.

[0020] In summary, after the reader broadcasts the paging message to page the first type of chemical equipment (or AIoT terminal), the reader can receive the first type of chemical equipment, such as at least one chemical equipment returning the respective device identifier and the ciphertext information, that is, the encrypted information, so that the reader can decrypt the ciphertext information of at least one chemical equipment according to the respective device identifier of at least one chemical equipment locally, and obtain the plaintext production state of at least one chemical equipment, so as to ensure the information security of the private information (that is, the production state) transmitted in the monitoring process. BRIEF DESCRIPTION OF DRAWINGS

[0021] Figure 1 An architecture schematic diagram of an Internet of Things system provided for an embodiment of the present application is provided.

[0022] Figure 2 A flowchart of a chemical equipment safety monitoring method based on Internet of Things provided for an embodiment of the present application is provided.

[0023] Figure 3 A structure schematic diagram of an electronic device provided for an embodiment of the present application is provided. DETAILED DESCRIPTION

[0024] The technical solutions in the present application will be described below with reference to the drawings.

[0025] In the embodiments of the present application, the indication can include direct indication and indirect indication, and can also include explicit indication and implicit indication. The information indicated by a certain information is referred to as to-be-indicated information, and there are many ways to indicate the to-be-indicated information in the specific implementation process, for example, but not limited to, the to-be-indicated information can be directly indicated, such as the to-be-indicated information itself or the index of the to-be-indicated information. The to-be-indicated information can also be indirectly indicated by indicating other information, where the other information and the to-be-indicated information have an association relationship. The to-be-indicated information can also be only indicated in part, and the other part of the to-be-indicated information is known or agreed in advance. For example, the indication of a specific information can also be achieved by means of the arrangement order of each information agreed in advance (for example, a protocol stipulates), thereby reducing the indication overhead to a certain extent. At the same time, the common part of each information can be identified and uniformly indicated, so as to reduce the indication overhead caused by separately indicating the same information.

[0026] In addition, the specific indication manner can also be various existing indication manners, for example but not limited to the indication manners described above and various combinations thereof. The specific details of various indication manners can refer to the prior art, and will not be described herein. As can be known from the above, for example, when multiple information of the same type needs to be indicated, the indication manners of different information can be different. In the specific implementation process, the required indication manner can be selected according to the specific needs, and the selected indication manner is not limited by the embodiments of the present application. In this way, the indication manners involved in the embodiments of the present application should be understood as covering various methods that can enable the to-be-indicated party to know the to-be-indicated information.

[0027] It should be understood that the to-be-indicated information can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of the sub-information can be the same or different. The specific sending method is not limited by the embodiments of the present application. The sending period and / or sending time of the sub-information can be predefined, for example, predefined according to a protocol, or configured by the sending end device by sending configuration information to the receiving end device.

[0028] The "predefined" or "preconfigured" can be realized by pre-storing corresponding codes, tables or other methods that can be used to indicate related information in the device, and the specific implementation manner is not limited by the embodiments of the present application. The "storage" can mean storage in one or more memories. The one or more memories can be separately arranged or integrated in the encoder or decoder, processor or electronic device. The one or more memories can be partially separately arranged and partially integrated in the decoder, processor or electronic device. The type of the memory can be any form of storage medium, and the embodiments of the present application do not limit this.

[0029] The "protocol" involved in the embodiments of the present application can refer to a protocol family in the communication field, a standard protocol similar to the protocol family frame structure, or a related protocol applied to a future system, and the embodiments of the present application do not make specific limitations.

[0030] In the embodiments of the present application, "when", "in the case of", "if" and the like all refer to the device making corresponding processing under certain objective conditions, and are not limited by time, and do not require the device to have a judgment action when implemented, nor does it mean that there are other limitations.

[0031] In the description of the embodiments of the present application, unless otherwise specified, " / " represents that the objects before and after the " / " are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present application is only a description of the association relationship of the associated objects, which means that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist together, and B exists alone, where A and B can be singular or plural. And, in the description of the embodiments of the present application, unless otherwise specified, "multiple" means two or more than two. "At least one of the following" or the like means any combination of the items, including any combination of single item or multiple items. For example, at least one of a, b or c can represent: a, b, c, a-b, a-c, b-c, or a-b-c, where a, b, and c can be single or multiple. In addition, in order to clearly describe the technical solutions of the embodiments of the present application, in the embodiments of the present application, "first", "second", etc. are used to distinguish the same items or similar items with basically the same function and effect. Those skilled in the art can understand that "first", "second", etc. do not limit the quantity and execution order, and "first", "second", etc. also do not necessarily mean different. At the same time, in the embodiments of the present application, "exemplary" or "for example" means to serve as an example, illustration or description. Any embodiment or design scheme described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as more preferred or more advantageous than other embodiments or design schemes. Rather, the use of "exemplary" or "for example" is intended to present the relevant concept in a specific manner, for understanding.

[0032] The network architecture and service scenarios described in the embodiments of the present application are used to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided by the embodiments of the present application. Those skilled in the art can know that, with the evolution of network architecture and the appearance of new service scenarios, the technical solutions provided by the embodiments of the present application are also applicable to similar technical problems.

[0033] In order to understand the embodiments of the present application, first, taking the Internet of Things system shown in Figure 1 , as an example, the embodiments of the present application are described,

[0034] Figure 1 The architecture schematic diagram of the Internet of Things system to which the chemical equipment safety monitoring method based on the Internet of Things provided by the embodiments of the present application is applied.

[0035] As shown in Figure 1 , the Internet of Things system can include a reader and an AIoT device or AIoT terminal.

[0036] The reader can be a base station or a terminal. In the embodiments of the present application, the reader is a base station.

[0037] The AIoT terminal can be a passive terminal, which can obtain energy through solar energy, radio frequency, wind energy, water energy, or tidal energy, and the like. The way of obtaining energy is not limited. These nodes do not have or depend on power supply devices such as batteries, but obtain energy from the environment to support data sensing, transmission, and distributed computing. The nodes can also store the obtained energy. The form of the AIoT terminal can be user equipment (UE), access terminal, subscriber unit, user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent, or user device. The terminal in the embodiments of the present application can be a mobile phone, a cellular phone, a smart phone, a tablet computer (Pad), a wireless data card, a personal digital assistant computer (PDA), a wireless modem, a handset, a laptop computer, a machine type communication (MTC) terminal, a computer with wireless transceiver function, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical treatment, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, a vehicle-mounted terminal, a road side unit (RSU) with terminal function, and the like. The terminal in the present application can also be a vehicle-mounted module, a vehicle-mounted module, a vehicle-mounted component, a vehicle-mounted chip, or a vehicle-mounted unit built into a vehicle as one or more components or units. Alternatively, the terminal can also be a customer-premises equipment (CPE).

[0038] The embodiments of the present application are for a chemical industry scene, and therefore the form of the AIoT terminal can be a chemical industry device.

[0039] Figure 2 The flowchart of the method provided by the embodiment of the present application. The chemical equipment safety monitoring method based on the Internet of Things is applicable to the above-mentioned Internet of Things system, and involves the interaction between devices in the above-mentioned Internet of Things system, such as the interaction between the reader and the AIoT terminal. The specific process is as follows:

[0040] S201, the reader broadcasts a paging message.

[0041] The paging message is used to page the first type of chemical equipment. For example, the paging message contains a mask (MASK), which instructs the chemical equipment whose device identifier length is in the first length interval to report its own device identifier. Specifically, it can contain information of the first length interval, such as length L1 to length L2, L1 and L2 both represent the number of bits, such as L1 represents 0 bits, and L2 represents 128 bits, i.e. the first length interval is 0-128 bits. On this basis, the chemical equipment whose device identifier length is in the first length interval is the first type of chemical equipment, in other words, if the length of the device identifier of the chemical equipment is in the first length interval, it responds to the paging message, i.e. S202, otherwise, it does not respond.

[0042] It can be understood that there can be multiple length intervals, and the first length interval is one of the multiple length intervals. In fact, the reader can poll and broadcast the mask for each length interval, such as 3 length intervals. Polling means first for the first length interval, then for the second length interval, and finally for the third length interval, and then repeat from the first length interval again. The method of the present application can be executed under different length intervals. For ease of understanding, the first length interval is taken as an example for introduction.

[0043] S202, the reader receives the device identifier and the ciphertext information of each of the at least one chemical equipment.

[0044] S203, the reader decrypts the ciphertext information of each of the at least one chemical equipment according to the device identifier of each of the at least one chemical equipment, to obtain the production state of each of the at least one chemical equipment.

[0045] The at least one chemical equipment belongs to the first type of chemical equipment, i.e. the device identifier of each of the at least one chemical equipment is in the first length interval, and the at least one chemical equipment is an AIoT terminal device, or an AIoT terminal / device.

[0046] The device identifier of the chemical equipment can be an identifier assigned by the equipment manufacturer when the chemical equipment is manufactured, which is used to uniquely identify the chemical equipment. Specifically, it can be an equipment identifier code (EPC) or any other possible type of identifier.

[0047] The production state of each of the at least one chemical equipment can include: a number of chemical products produced by each of the at least one chemical equipment, a factory identification code of the chemical products produced by each of the at least one chemical equipment, or whether the chemical products produced by each of the at least one chemical equipment is a defective product, that is, can be used to represent the production result.

[0048] The embodiment of the present application does not limit the form of the chemical product, which can be any possible form of the existing chemical product.

[0049] The S202-S203 are jointly introduced below.

[0050] For S202, for any target chemical equipment in the at least one chemical equipment, the reader receives the device identification and the ciphertext information of each of the at least one chemical equipment, including:

[0051] The reader receives the response message returned by the chemical equipment, which is a response to the paging message, and the response message returned by the chemical equipment contains M response messages returned by the target chemical equipment, M is an integer greater than 1, and each response message in the M response messages contains the device identification and the ciphertext information of the target chemical equipment. That is, the reader can receive the response message returned by each chemical equipment whose device identification length is within the first length range. Since each chemical equipment needs to return its own production state through the response message, and the information amount (or data amount) of the production state is relatively large, the production state data needs to be sent in segments, that is, each response message carries the device identification of the chemical equipment and the ciphertext of a corresponding data segment, for easy understanding, the target equipment is taken as an example for introduction, as follows:

[0052] After receiving the paging message, the target chemical equipment determines that the length of its device identification is within the first length range indicated by the mask of the paging message, thereby determining to respond to the paging message. In response to responding to the paging message, the target chemical equipment can obtain the production state in the period from responding to the last received paging message to responding to the current received paging message, that is, the production state of the target chemical equipment. Additionally, if the current received paging message is the first received paging message, the target chemical equipment obtains the production state in the period from the device startup to responding to the current received paging message.

[0053] The target chemical equipment divides the production state (or data of the production state) of the target chemical equipment into M pieces of segmented data according to the maximum number of bits that can be carried according to the rules defined in the protocol (for example, if the length of the equipment identifier belongs to the first length interval defined in the protocol, a response message can carry a maximum of 100 bits of data), and the maximum number of bits. For example, a response message can carry a maximum of 100 bits of data, and the data of the production state of the target chemical equipment is 660 bits, so M = 7, the first 6 segments of 660 bits are 100 bits, and the 7th segment is 60 bits, or the first segment of 660 bits is 60 bits, and the last 6 segments are 100 bits.

[0054] The paging message also includes a first random parameter R1 (referred to as R1) and a second random parameter R2 (referred to as R2). R1 and R2 are two parameters randomly generated by the reader for the paging message broadcasted this time (i.e. the paging message of S201). The target chemical equipment can randomly select to use R1 or R2 to encrypt the data of each segment in the M segments. Taking the case where the target chemical equipment selects to use R1 as an example, the target chemical equipment can use a cross-encryption method to encrypt the data of each segment.

[0055] For example:

[0056] For the data of the first segment, the target chemical equipment randomly generates a random number parameter T2 (referred to as T2), which is a parameter that needs to be carried in the second response message. The target chemical equipment uses R1 and the root key, and T2 to derive a session key k1' (referred to as k1'), which can be derived by taking R1, the root key and T2 as input parameters through a key derivation algorithm (KDF). The target chemical equipment uses k1' to encrypt the data of the first segment to obtain ciphertext information, and carries the ciphertext information into the first response message. The response message also carries the equipment identifier of the target chemical equipment and a random number parameter T1 (referred to as T1) randomly generated by the target chemical equipment. The target chemical equipment adds a serial number of 1 to the first response message and sends the response message to the reader, wherein the serial number of 1 indicates that the response message is the first response message of the target chemical equipment to the reader.

[0057] For the second data segment, the target chemical equipment randomly generates a random number parameter T3 (hereinafter referred to as T3). T3 is a parameter that needs to be carried in the third response message. The target chemical equipment uses R1, the root key, and T3 to deduce the session key k2' (hereinafter referred to as k2'). The specific derivation method is similar to that described above and will not be repeated. The target chemical equipment uses k2' to encrypt the second data segment, obtaining ciphertext information, and carries this ciphertext information in the second response message. The response message also carries the target chemical equipment's device identifier and the randomly generated T2. The target chemical equipment adds sequence number 2 to the second response message and sends this response message to the reader. Sequence number 2 indicates that this response message is the target chemical equipment's second response to the reader.

[0058] Similarly, for the Mth data segment, the target chemical equipment uses R1, the root key, and T1 to deduce the session key kM' (referred to as kM'). The specific derivation method is similar to that described above and will not be repeated. The target chemical equipment uses kM' to encrypt the Mth data segment, obtaining ciphertext information, and carries this ciphertext information in the Mth response message. The response message also carries the target chemical equipment's device identifier and a randomly generated random number parameter TM. The target chemical equipment adds sequence number M to the Mth response message and sends this response message to the reader. Sequence number M indicates that this response message is the target chemical equipment's Mth response message to the reader.

[0059] For example:

[0060] For the first data segment, the target chemical equipment randomly generates T3, which is a parameter to be carried in the third response message. The target chemical equipment uses R1, the root key, and T3 to deduce k1'. Specifically, R1, the root key, and T3 can be used as input parameters, and k1' can be derived using a Key Derivation Function (KDF) algorithm. The target chemical equipment uses k1' to encrypt the first data segment, obtaining ciphertext information, and carries this ciphertext information in the first response message. This response message also carries the target chemical equipment's device identifier and the randomly generated T1. The target chemical equipment adds sequence number 1 to the first response message and sends this response message to the reader. Sequence number 1 indicates that this response message is the first message from the target chemical equipment to respond to the reader.

[0061] Similarly, for the data of the Mth segment, the target chemical equipment uses R1 and the root key, and T2 to derive the session key kM'(referred to as kM') in a similar manner as described above, which will not be repeated. The target chemical equipment uses kM' to encrypt the Mth segment of data to obtain ciphertext information, and carries the ciphertext information into the Mth response message. The response message also carries the device identifier of the target chemical equipment and the random number parameter TM generated by the target chemical equipment. The target chemical equipment adds the sequence number M to the Mth response message and sends the response message to the reader, wherein the sequence number M indicates that the response message is the Mth response message of the target chemical equipment to the reader.

[0062] That is, the above two examples cross-use the random number parameters in the next message / next two messages to encrypt the data carried in the previous message. Compared with the existing method, the existing method usually uses the random number parameter in the current message to encrypt the data carried in the current message. If the attacker cannot steal the encryption rule, even if the random number parameter in each message is obtained, it cannot be successfully decrypted, so that the information security can be further improved.

[0063] For S203:

[0064] The reader can decrypt the ciphertext information carried in each of the M response messages to obtain M pieces of plaintext information according to that the M response messages each carry the device identifier of the target chemical equipment.

[0065] Specifically, the reader can determine that the M response messages are response messages returned by the same chemical equipment according to that M of the received response messages carry the same device identifier, and the same device identifier carried by the M response messages is the device identifier of the target chemical equipment. The reader decrypts the ciphertext information carried in each of the M response messages to obtain M pieces of plaintext information. For example, the reader can use R1 and R2 to decrypt the ciphertext information carried in each of the M response messages to obtain M pieces of plaintext information.

[0066] The decryption of the reader is the inverse process of the above encryption. Since the reader does not know whether the target chemical equipment uses R1 or R2 for encryption, decryption attempts need to be made, which are as follows.

[0067] Method 1 (interval 1 message):

[0068] Each of the M response messages contains the sequence number of the response message. The reader first sorts the M response messages in ascending order of the sequence numbers carried in the M response messages to obtain the sorted M response messages, that is, the order in which the target chemical equipment sends the M response messages.

[0069] The first response message in the sorted M response messages.

[0070] The reader uses R1 and the root key, and the random number parameter T2 carried by the second response message in the M response messages to derive the session key k1', and uses R1 and the root key, and T2 to derive the session key k1". The reader uses k1' and k1" respectively to attempt to decrypt the ciphertext information in the first response message. If the reader uses k1' to successfully decrypt the ciphertext information in the first response message to obtain the plaintext information, i.e. the first segment of data, it indicates that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader uses k1" to successfully decrypt the ciphertext information in the first response message to obtain the plaintext information, it indicates that the target chemical equipment randomly selects R2 from R1 and R2 for encryption.

[0071] Then, the second response message in the sorted M response messages:

[0072] If the reader uses k1' to successfully decrypt the ciphertext information in the first response message, the reader uses R1 and the root key, and the random number parameter T3 carried by the third response message in the M response messages to derive the session key k2', and uses k2' to decrypt the ciphertext information in the second response message to obtain the plaintext information, i.e. the second segment of data; if the reader uses k1" to successfully decrypt the ciphertext information in the first response message, the reader uses R2 and the root key, and T3 to derive the session key k2", and uses k2" to decrypt the ciphertext information in the second response message to obtain the plaintext information.

[0073] In this way, until the Mth response message in the sorted M response messages:

[0074] If the reader uses k1' to successfully decrypt the ciphertext information in the first response message, the reader uses R1 and the root key, and the random number parameter T1 carried by the first response message in the M response messages to derive the session key kM', and uses kM' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; if the reader uses k1" to successfully decrypt the ciphertext information in the first response message, the reader uses R2 and the root key, and T1 to derive the session key kM", and uses kM" to decrypt the ciphertext information in the Mth response message to obtain the plaintext information, i.e. the Mth segment of data.

[0075] Method 2 (interval of 2 messages):

[0076] Each of the M response messages contains a serial number of the response message, and the reader sorts the M response messages according to the serial numbers carried by the M response messages in ascending order to obtain sorted M response messages.

[0077] For the first response message in the sorted M response messages:

[0078] The reader uses R1 and the root key, and a random number parameter T3 carried by the third response message in the M response messages to derive a session key k1', and uses R1 and the root key, and T3 to derive a session key k1". The reader can use k1' and k1" respectively to attempt to decrypt the ciphertext information in the first response message. If the reader uses k1' to successfully decrypt the ciphertext information in the first response message to obtain plaintext information, it indicates that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader uses k1" to successfully decrypt the ciphertext information in the first response message to obtain plaintext information, it indicates that the target chemical equipment randomly selects R2 from R1 and R2 for encryption.

[0079] Then, for the second response message in the sorted M response messages, if the reader uses k1' to successfully decrypt the ciphertext information in the first response message, the reader uses R1 and the root key, and a random number parameter T4 carried by the fourth response message in the M response messages to derive a session key k2', and uses k2' to decrypt the ciphertext information in the second response message to obtain plaintext information; if the reader uses k1" to successfully decrypt the ciphertext information in the first response message, the reader uses R2 and the root key, and T4 to derive a session key k2", and uses k2" to decrypt the ciphertext information in the second response message to obtain plaintext information.

[0080] By analogy, until the Mth response message in the sorted M response messages, if the reader uses k1' to successfully decrypt the ciphertext information in the first response message, the reader uses R1 and the root key, and a random number parameter T2 carried by the second response message in the M response messages to derive a session key kM', and uses kM' to decrypt the ciphertext information in the Mth response message to obtain plaintext information; if the reader uses k1" to successfully decrypt the ciphertext information in the first response message, the reader uses R2 and the root key, and T2 to derive a session key kM", and uses kM" to decrypt the ciphertext information in the Mth response message to obtain plaintext information.

[0081] After decrypting to obtain M pieces of plaintext information, the reader can splice the M pieces of plaintext information to obtain the production state of the target chemical equipment. The reader splices the M pieces of plaintext information in the order of the sorted M response messages to obtain the production state of the target chemical equipment.

[0082] In summary, after the reader broadcasts the paging message to page the first type of chemical equipment (or AIoT terminal), the reader can receive the first type of chemical equipment, such as at least one chemical equipment returning the respective device identifier and the ciphertext information, i.e., the encrypted information, so that the reader can decrypt the ciphertext information of at least one chemical equipment according to the respective device identifier of at least one chemical equipment locally, and then obtain the plaintext production state of at least one chemical equipment, so as to ensure the information security of the private information (i.e., the production state) transmitted in the monitoring process.

[0083] The above Figure 2 The method provided by the embodiment of the application is described in detail. The following describes an Internet of Things-based chemical equipment safety monitoring system for executing the method provided by the embodiment of the application. The system includes a reader in an environmental Internet of Things (AIoT). The system is configured to: the reader broadcasts a paging message, and the paging message is used to page the first type of chemical equipment; the reader receives the respective device identifier and the ciphertext information of at least one chemical equipment, the at least one chemical equipment belongs to the first type of chemical equipment, and the at least one chemical equipment is an AIoT terminal device; and the reader decrypts the ciphertext information of at least one chemical equipment according to the respective device identifier of at least one chemical equipment to obtain the respective production state of at least one chemical equipment.

[0084] Figure 3 The structure of the electronic device provided by the embodiment of the application is shown in the figure. The electronic device can be a network device, a chip (system) or other components or assemblies that can be arranged in the network device. As shown in the figure, Figure 3 The electronic device 400 can include a processor 401. Optionally, the electronic device 400 can also include a memory 402 and / or a transceiver 403. The processor 401 is coupled to the memory 402 and the transceiver 403, such as through a communication bus.

[0085] The following Figure 3 The components of the electronic device 400 are described in detail as follows:

[0086] The processor 401 is the control center of the electronic device 400, and can be one processor or a combination of multiple processing elements. For example, the processor 401 is one or more central processing units (CPUs), application specific integrated circuits (ASICs), or one or more integrated circuits configured to implement an embodiment of the present application, such as one or more digital signal processors (DSPs), or one or more field programmable gate arrays (FPGAs).

[0087] Optionally, the processor 401 can perform various functions of the electronic device 400 by running or executing software programs stored in the memory 402 and calling data stored in the memory 402, such as performing the above-mentioned methods. Figure 2 An example of a chemical equipment safety monitoring method based on the Internet of Things is shown.

[0088] In a specific implementation, as an example, the processor 401 can include one or more CPUs, such as the CPU0 and CPU1 shown in FIG. 1. Figure 3

[0089] In a specific implementation, as an example, the electronic device 400 can also include multiple processors. Each of these processors can be a single-CPU or a multi-CPU. The processor here can refer to one or more devices, circuits, and / or processing cores for processing data (such as computer program instructions).

[0090] The memory 402 is used to store software programs for implementing the solutions of the present application, and is controlled by the processor 401 to execute, and the specific implementation can refer to the above-mentioned method embodiments, which will not be repeated here.

[0091] ​Optionally, the memory 402 can be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (RAM) or other type of dynamic storage device that can store information and instructions, an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disk storage, a magnetic disk storage or other magnetic storage devices, or any other medium capable of storing desired program code in the form of instructions or data structures and that can be accessed by a computer, but is not limited to this. The memory 402 can be integrated with the processor 401 or exist independently and be coupled to the processor 401 through an interface circuit (not shown in the figure) of the electronic device 400, and the embodiments of the present application do not make specific limitations hereon. Figure 3

[0092] The transceiver 403 is configured to communicate with other electronic devices. For example, the electronic device 400 is a terminal, and the transceiver 403 can be configured to communicate with a network device or another terminal. For another example, the electronic device 400 is a network device, and the transceiver 403 can be configured to communicate with a terminal or another network device.

[0093] Optionally, the transceiver 403 can include a receiver and a transmitter (not shown separately in the figure). The receiver is configured to implement the receiving function, and the transmitter is configured to implement the transmitting function. Figure 3

[0094] Optionally, the transceiver 403 can be integrated with the processor 401 or exist independently and be coupled to the processor 401 through an interface circuit (not shown in the figure) of the electronic device 400, and the embodiments of the present application do not make specific limitations hereon. Figure 3

[0095] It can be understood that the structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and the actual electronic device can include more or fewer components than those shown in the figure, or combine certain components, or different component arrangements. Figure 3 In addition, the technical effects of the electronic device 400 can refer to the technical effects of the methods described in the above method embodiments, which will not be described here again.

[0096]

[0097] ​​​​It should be understood that the processor in the embodiments of the present invention can be a central processing unit (CPU), or it can be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor.

[0098] It should also be understood that the memory in the embodiments of the present invention can be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory. The non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. The volatile memory can be random access memory (RAM), which is used as an external cache. By way of example, but not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate synchronous DRAM (DDR SDRAM), enhanced synchronous DRAM (ESDRAM), synchronous linked DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0099] The above embodiments can be implemented, in whole or in part, by software, hardware (such as circuits), firmware, or any other combination thereof. When implemented using software, the above embodiments can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, all or part of the processes or functions described in the embodiments of the present invention are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more sets of available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium. A semiconductor medium can be a solid-state drive.

[0100] It should be understood that the term "and / or" in this article is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, or B existing alone. A and B can be singular or plural. Additionally, the character " / " in this article generally indicates an "or" relationship between the preceding and following related objects, but it can also represent an "and / or" relationship. Please refer to the context for a more accurate understanding.

[0101] In this invention, "at least one" means one or more, and "more than one" means two or more. "At least one of the following" or similar expressions refer to any combination of these items, including any combination of a single item or a plurality of items. For example, at least one of a, b, or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, and c can be a single item or multiple items.

[0102] It should be understood that, in various embodiments of the present invention, the order of the above-mentioned process numbers does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0103] Those skilled in the art can clearly understand that the units and algorithm steps of each example described in combination with the embodiments disclosed herein can be realized by electronic hardware or a combination of computer software and electronic hardware. Whether the functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present application.

[0104] Those skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working processes of the above-described system, device and unit can refer to the corresponding processes in the foregoing method embodiments, which will not be repeated here.

[0105] In several embodiments provided by the present application, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the above-described device embodiments are merely schematic, for example, the division of the units is only a logical function division, and actual implementation can have another division manner, for example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the units shown or discussed can be indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0106] The units described as separate components can or can not be physically separated, and the components shown as units can or can not be physical units, that is, they can be located in one place, or can be distributed on multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the embodiment.

[0107] In addition, each functional unit in each embodiment of the present application can be integrated into a processing unit, or each unit can exist physically independently, or two or more units can be integrated into one unit.

[0108] If the functions are realized in the form of software function units and sold or used as independent products, they can be stored in a computer readable storage medium. Based on this understanding, the technical solutions of the present application or the parts of the present application that essentially contribute to the prior art or the parts of the technical solutions can be embodied in the form of software products. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in the various embodiments of the present application. The aforementioned storage medium includes a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various media that can store program codes.

[0109] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical scope disclosed by the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A method for safety monitoring of chemical equipment based on the Internet of Things, characterized in that, The method is applied to a reader in an AIoT (Artificial Intelligence of Things) network, and the method includes: The reader broadcasts a paging message, which is used to paging first-type chemical equipment; The reader receives the device identifier and encrypted information of at least one chemical device, wherein the at least one chemical device belongs to the first type of chemical device and is an AIoT terminal device. The reader decrypts the encrypted information of each of the at least one chemical equipment based on the equipment identifier of each of the at least one chemical equipment, thereby obtaining the production status of each of the at least one chemical equipment. For any one of the at least one chemical equipment, the reader receives the equipment identifier and encrypted information of each of the at least one chemical equipment, including: The reader receives a response message returned by the chemical equipment. The response message returned by the chemical equipment is a response to the paging message. The response message returned by the chemical equipment contains M response messages returned by the target chemical equipment, where M is an integer greater than 1. Each of the M response messages contains the device identifier of the target chemical equipment and encrypted information. The reader decrypts the encrypted information of each of the at least one chemical device based on its respective device identifier to obtain the production status of each of the at least one chemical device, including: The reader decrypts the encrypted information carried in each of the M response messages, based on the fact that each of the M response messages carries the device identifier of the target chemical equipment, to obtain M plaintext messages. The reader splices together the M plaintext messages to obtain the production status of the target chemical equipment. The paging message also includes a first random parameter R1 and a second random parameter R2, which are two parameters randomly generated by the reader for the paging message broadcast this time. The reader decrypts the ciphertext information carried in each of the M response messages to obtain M plaintext messages, including: The reader uses R1 and R2 to decrypt the ciphertext information carried by each of the M response messages to obtain the M plaintext information. Each of the M response messages contains a sequence number. The reader uses R1 and R2 to decrypt the ciphertext information carried in each of the M response messages to obtain the M plaintext messages, including: The reader sorts the M response messages according to the sequence number carried by each of the M response messages, in ascending order of the sequence number, to obtain the sorted M response messages; Regarding the first response message in the sorted M response messages: The reader uses R1 and the root key, as well as the random number parameter T2 carried in the second response message of the M response messages, to deduce the session key k1', and uses R1, the root key, and T2 to deduce the session key k1''. Wherein, the root key is a key pre-configured by both the reader and the target chemical equipment, and T2 is a parameter randomly generated by the target chemical equipment; The reader attempts to decrypt the ciphertext information in the first response message using k1' and k1'' respectively; If the reader successfully decrypts the ciphertext information in the first response message using k1' and obtains the plaintext information, it indicates that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader successfully decrypts the ciphertext information in the first response message using k1'' and obtains the plaintext information, it indicates that the target chemical equipment randomly selects R2 from R1 and R2 for encryption. Regarding the second response message in the sorted M response messages: If the reader successfully decrypts the ciphertext information in the first response message using k1', then the reader uses R1, the root key, and the random number parameter T3 carried in the third response message of the M response messages to deduce the session key k2', and uses k2' to decrypt the ciphertext information in the second response message to obtain the plaintext information; If the reader successfully decrypts the ciphertext information in the first response message using k1'', the reader uses R2, the root key, and T3 to deduce the session key k2'', and uses k2'' to decrypt the ciphertext information in the second response message to obtain the plaintext information; Wherein, T3 is also a parameter randomly generated by the target chemical equipment; And so on, until the Mth response message in the sorted M response messages: If the reader successfully decrypts the ciphertext information in the first response message using k1', the reader uses R1, the root key, and the random number parameter T1 carried in the first response message of the M response messages to deduce the session key kM', and uses kM' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; If the reader successfully decrypts the ciphertext information in the first response message using k1'', the reader uses R2, the root key, and T1 to deduce the session key kM'', and uses kM'' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; Wherein, T1 is also a parameter randomly generated by the target chemical equipment; or, Each of the M response messages contains a sequence number. The reader uses R1 and R2 to decrypt the ciphertext information carried in each of the M response messages to obtain the M plaintext messages, including: The reader sorts the M response messages according to the sequence number carried by each of the M response messages, in ascending order of the sequence number, to obtain the sorted M response messages; Regarding the first response message in the sorted M response messages: The reader uses the R1 and root key, as well as the random number parameter T3 carried in the third response message of the M response messages, to deduce the session key k1', and uses the R1 and root key, as well as T3, to deduce the session key k1''. Wherein, the root key is a key pre-configured by both the reader and the target chemical equipment, and T3 is a parameter randomly generated by the target chemical equipment; The reader attempts to decrypt the ciphertext information in the first response message using k1' and k1'' respectively; If the reader successfully decrypts the ciphertext information in the first response message using k1' and obtains the plaintext information, it indicates that the target chemical equipment randomly selects R1 from R1 and R2 for encryption; if the reader successfully decrypts the ciphertext information in the first response message using k1'' and obtains the plaintext information, it indicates that the target chemical equipment randomly selects R2 from R1 and R2 for encryption. Regarding the second response message in the sorted M response messages: If the reader successfully decrypts the ciphertext information in the first response message using k1', the reader uses R1, the root key, and the random number parameter T4 carried in the fourth response message of the M response messages to deduce the session key k2', and uses k2' to decrypt the ciphertext information in the second response message to obtain the plaintext information; If the reader successfully decrypts the ciphertext information in the first response message using k1'', the reader uses R2, the root key, and T4 to deduce the session key k2'', and uses k2'' to decrypt the ciphertext information in the second response message to obtain the plaintext information; Wherein, T4 is also a parameter randomly generated by the target chemical equipment; And so on, until the Mth response message in the sorted M response messages: If the reader successfully decrypts the ciphertext information in the first response message using k1', the reader uses R1, the root key, and the random number parameter T2 carried in the second response message of the M response messages to deduce the session key kM', and uses kM' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; If the reader successfully decrypts the ciphertext information in the first response message using k1'', the reader uses R2, the root key, and T2 to deduce the session key kM'', and uses kM'' to decrypt the ciphertext information in the Mth response message to obtain the plaintext information; T2 is a parameter randomly generated by the target chemical equipment.

2. The method according to claim 1, characterized in that, The reader concatenates the M plaintext messages to obtain the production status of the target chemical equipment, including: The reader concatenates the M plaintext messages according to the sorted order of the M response messages to obtain the production status of the target chemical equipment.

3. The method according to claim 1, characterized in that, The paging message contains a mask, which indicates the length of the device identifier. Chemical equipment that reports its own device identifier within a first length range is chemical equipment of the first type.

4. The method according to claim 1, characterized in that, The production status of each of the at least one chemical equipment includes: the number of chemical products produced by each of the at least one chemical equipment, the factory identification code of the chemical products produced by each of the at least one chemical equipment, or whether the chemical products produced by each of the at least one chemical equipment are defective products.

Images