Safety control method and system of special stylus printer

Abstract

The invention relates to the technical field of information security and printers, and particularly discloses a security control method and system for a special needle printer, and the method comprises the steps: controlling the special needle printer to carry out bidirectional identity authentication with a printing service system before printing through the special needle printer; after the bidirectional identity authentication is passed, the printing service system is controlled to generate a printing data packet, and the printing data packet is sent to the special stylus printer; after the special needle printer receives the printing data packet, the printing data packet is verified; and after verification is passed, the printing data packet is decrypted and then printing operation is executed, and finally a printing result is reported to a printing service system. According to the safety control method for the special stylus printer, the printer can be prevented from being illegally operated for printing, it can be guaranteed that data are safely sent to the special stylus printer for printing, information safety in the printing process is guaranteed, and meanwhile it is guaranteed that printed special vouchers and bills are legal and effective.

Description

Technical Field

[0001] The present invention relates to the fields of information security and printer technology, and more specifically, to a security control method and system for a special dot matrix printer. Background Art

[0002] Special dot matrix printers are often used to print tickets and special vouchers. Most of these tickets and special vouchers are used in the fields of finance and public security and have important economic and legal status. Therefore, they have high security requirements for the printing process. If the printing process is not supervised, there may be a risk of counterfeiting tickets and special vouchers. At the same time, the printing process may involve the transmission of personal information. If the data transmission process is not protected, it may cause personal information leakage.

[0003] At present, most of the dedicated dot matrix printers are general-purpose devices, which are often used in a decentralized manner at business windows. There is no operator identification mechanism and information security protection measures. All users can operate the printer to print, and the security of the printing process cannot be effectively protected. Therefore, it is necessary to conduct security control on dedicated printers. First, prevent illegal printers from accessing the system for use. If illegal dedicated dot matrix printers are accessed to the system for use, the quality of printing cannot be guaranteed, and the legality of printing cannot be determined; second, the relevant data of the dedicated dot matrix printer is securely transmitted and stored to prevent sensitive information leakage; third, improve the full life cycle management of dedicated dot matrix printers, and deregister the deactivated or scrapped dedicated dot matrix printers. Summary of the invention

[0004] In order to ensure the security and controllability of the printing process, as well as the security of the printed information and reduce the possibility of forgery, the present invention provides a security control method and system for a dedicated dot matrix printer, which can prevent illegal operation of the printer for printing, ensure that data is securely sent to the dedicated dot matrix printer for printing, ensure the information security of the printing process, and at the same time ensure that the printed dedicated vouchers and tickets are legal and valid.

[0005] As a first aspect of the present invention, a safety control method for a dedicated dot matrix printer is provided, comprising: Step S1: Before printing by the dedicated dot matrix printer, control the dedicated dot matrix printer to perform two-way identity authentication with the printing service system; Step S2: after the two-way identity authentication is passed, controlling the printing service system to generate a printing data packet, and sending the printing data packet to the dedicated dot matrix printer; Step S3: After receiving the print data packet, the dedicated dot matrix printer verifies the print data packet; after the verification is passed, the print data packet is decrypted and a print operation is performed, and finally the print result is reported to the print service system.

[0006] Furthermore, before step S1, the method further includes: Issue a printing service system digital certificate SystemCert to the printing service system through a dedicated dot matrix printer management platform for authorization authentication; Before the security chip of each authorized dedicated dot matrix printer is issued, security parameters are written into the security chip through the dedicated dot matrix printer management platform, wherein the security parameters include the dedicated dot matrix printer digital certificate SamCert and a dedicated font library.

[0007] Furthermore, the controlling of the two-way identity authentication between the dedicated dot matrix printer and the printing service system further includes: Step S11: connecting the dedicated dot matrix printer to the printing service system; Step S12: the printing service system sends a command to obtain a random number to the dedicated dot matrix printer; the security chip in the dedicated dot matrix printer generates a first random number Random1, and returns the first random number Random1 to the printing service system; Step S13: After receiving the first random number Random1, the printing service system generates a second random number Random2 and an authentication timestamp TIME, and uses its own private key to digitally sign the first random number Random1, the second random number Random2 and the authentication timestamp TIME to obtain a first signature value T1; then the first random number Random1, the second random number Random2, the authentication timestamp TIME, the first signature value T1 and the printing service system digital certificate SystemCert are sent as a first authentication data packet PKG1 to the dedicated dot matrix printer; Step S14: After receiving the first authentication data packet PKG1, the dedicated dot matrix printer compares the consistency of the first random number Random1 in the first authentication data packet PKG1 and the local first random number Random1; if the two first random numbers Random1 are consistent, the CA root certificate is used to verify the validity of the digital certificate SystemCert of the printing service system; after the verification is passed, the public key in the digital certificate SystemCert of the printing service system is used to verify the first signature value T1 in the first authentication data packet PKG1; if the verification is passed, the dedicated dot matrix printer completes the identity authentication of the printing service system; Step S15: the dedicated dot matrix printer generates a third random number Random3, and uses the public key in the print service system digital certificate SystemCert to encrypt the second random number Random2 and the third random number Random3 to obtain a first ciphertext EncryptText; then uses its own private key to digitally sign the first ciphertext EncryptText to obtain a second signature value T2, and sends the first ciphertext EncryptText, the second signature value T2 and the dedicated dot matrix printer digital certificate SamCert together as a second authentication data packet PKG2 to the print service system; Step S16: After receiving the second authentication data packet PKG2, the printing service system uses the CA root certificate to verify the validity of the dedicated dot matrix printer digital certificate SamCert; after the verification is passed, the public key in the dedicated dot matrix printer digital certificate SamCert is used to verify the second signature value T2 in the second authentication data packet PKG2; after the verification is passed, the first ciphertext EncryptText is decrypted using its own private key to obtain the plain text, and the second random number Random2 in the second authentication data packet PKG2 is compared with the local second random number Random2 for consistency; if the two second random numbers Random2 are consistent, the printing service system completes the identity authentication of the dedicated dot matrix printer; Step S17: Use the third random number Random3 as a temporary session key in the data exchange process after the two-way identity authentication is passed.

[0008] Furthermore, after the two-way identity authentication is passed, the printing service system is controlled to generate a print data packet and the print data packet is sent to the dedicated dot matrix printer, further comprising: Step S21: the printing service system generates plain text data PrintData and a current printing timestamp PrintTime according to the information to be printed; Step S22: the printing service system uses the temporary session key Random3 to encrypt the plaintext data PrintData and the current printing timestamp PrintTime to obtain a second ciphertext EncryptData; Step S23: the printing service system uses its own private key to digitally sign the second ciphertext EncryptData to obtain a third signature value T3; and sends the second ciphertext EncryptData and the third signature value T3 as a print data packet PrintPkg to the dedicated dot matrix printer.

[0009] Furthermore, when the dedicated dot matrix printer receives the print data packet, it verifies the print data packet; after the verification is passed, it decrypts the print data packet and performs a print operation, and finally reports the print result to the print service system, which also includes: Step S31: After receiving the print data packet PrintPkg, the dedicated dot matrix printer verifies the third signature value T3 in the print data packet PrintPkg using the print service system digital certificate SystemCert, thereby determining whether the source of the print data packet PrintPkg is legal; Step S32: when it is determined that the source of the print data packet PrintPkg is legitimate, the print data packet PrintPkg is decrypted using the temporary session key Random3 to obtain the plaintext data PrintData and the current print timestamp PrintTime; Step S33: the dedicated dot matrix printer compares the current print timestamp PrintTime with the authentication timestamp TIME, thereby determining whether the timeliness of the print data packet PrintPkg is legal; if the current print timestamp PrintTime is later than the authentication timestamp TIME, the timeliness of the print data packet PrintPkg is determined to be legal, and the current print timestamp PrintTime is recorded in the dedicated dot matrix printer for use in determining the timeliness of the next print data packet; Step S34: when it is determined that the timeliness of the print data packet PrintPkg is legal, the dedicated dot matrix printer uses the plain text data PrintData to perform a print operation; Step S35: The dedicated dot matrix printer reports the printing result to the printing service system to complete the printing.

[0010] Furthermore, it also includes: If the dedicated dot matrix printer needs to be deactivated or scrapped, a dedicated instruction is sent through the printing service system to erase the data in the security chip, thereby making the dedicated dot matrix printer inoperable; Among them, a retention time of the dedicated dot matrix printer is set in the printing service system, and the printing service system records the time when the dedicated dot matrix printer was last connected to the printing service system for use. If the dedicated dot matrix printer has not been connected to the printing service system for use within the retention time since the last access time, it is assumed that the dedicated dot matrix printer has been disabled or scrapped, and the dedicated dot matrix printer is prohibited from connecting to the printing service system for use.

[0011] As a second aspect of the present invention, a safety control system for a dedicated dot matrix printer is provided, wherein the safety control system for the dedicated dot matrix printer comprises a dedicated dot matrix printer management platform and a printing service system, wherein: The dedicated dot matrix printer management platform is used to control the dedicated dot matrix printer and the printing service system to perform two-way identity authentication before printing through the dedicated dot matrix printer; after the two-way identity authentication is passed, control the printing service system to generate a printing data packet; The printing service system is used to send the printing data packet to the dedicated dot matrix printer; wherein, when the dedicated dot matrix printer receives the printing data packet, it verifies the printing data packet; after the verification is passed, the printing data packet is decrypted and the printing operation is performed, and finally the printing result is reported to the printing service system.

[0012] Furthermore, a security chip is embedded in the dedicated dot matrix printer, and the security chip is initialized and managed by the dedicated dot matrix printer management platform, and the dedicated dot matrix printer management platform issues a digital certificate for each security chip; wherein the security chip is integrated with a commercial secret algorithm, and the functions implemented by the dedicated dot matrix printer based on the security chip include: unique identity identification, identity authentication with the printing service system, secure communication with the printing service system, decryption verification and key storage of printing data packets, and control of the dedicated dot matrix printer to perform printing operations; The dedicated dot matrix printer management platform is responsible for the issuance and management of digital certificates, as well as the issuance and management of the dedicated dot matrix printer and security chip; The printing service system generates a printing data packet and sends it to the dedicated dot matrix printer, and records and stores the printing operation.

[0013] The security control method and system for a dedicated dot matrix printer provided by the present invention have the following advantages: based on the PKI certificate system, a security chip is embedded in the dedicated dot matrix printer, which ensures from a hardware perspective that only legitimate dedicated dot matrix printers can access the system for printing operations, thereby providing an information security protection mechanism for the entire printing process; it can effectively prevent illegal printing and maintain economic market order. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. Together with the following specific embodiments, they are used to explain the present invention, but do not constitute a limitation of the present invention.

[0015] Figure 1 The present invention provides a flowchart of a safety control method for a special dot matrix printer.

[0016] Figure 2 A flowchart of a specific implementation of the safety control method for a special dot matrix printer provided by the present invention.

[0017] Figure 3 This is a structural diagram of the safety control system of the special dot matrix printer provided by the present invention. DETAILED DESCRIPTION

[0018] In order to further explain the technical means and effects adopted by the present invention to achieve the predetermined invention purpose, the specific implementation method, structure, characteristics and effects of the safety control method and system of the special dot matrix printer proposed by the present invention are described in detail below in combination with the accompanying drawings and preferred embodiments. Obviously, the described embodiments are part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work belong to the protection scope of the present invention.

[0019] In this embodiment, a safety control method for a dedicated dot matrix printer is provided. Figure 1 As shown, the safety control method of the dedicated dot matrix printer includes: Step S1: Before printing by the dedicated dot matrix printer, control the dedicated dot matrix printer to perform two-way identity authentication with the printing service system; Preferably, if Figure 2 As shown, before step S1, it also includes: Issue a printing service system digital certificate SystemCert to the printing service system through a dedicated dot matrix printer management platform for authorization and authentication; Before the security chip of each authorized dedicated dot matrix printer is issued, security parameters are written into the security chip through the dedicated dot matrix printer management platform, wherein the security parameters include the dedicated dot matrix printer digital certificate SamCert and a dedicated font library.

[0020] It should be noted that the dedicated dot matrix printer and the printing service system perform asymmetric encrypted two-way identity authentication based on digital certificates. Through two-way identity authentication, it is ensured that only legitimate dedicated dot matrix printers can access the printing service system, avoiding the access of illegal electronic identification card issuers, and at the same time, it is ensured that only legitimate printing service systems can send print requests to dedicated dot matrix printers, avoiding the dedicated dot matrix printers from printing illegal data.

[0021] Both the dedicated dot matrix printer and the printing service system already have digital certificates issued by the dedicated dot matrix printer management platform. In this patented technical solution, both parties are configured to perform two-way identity authentication through an asymmetric encryption algorithm, without the need to negotiate or share the same key, which simplifies the system structure and improves flexibility.

[0022] Preferably, if Figure 2 As shown, the control of the two-way identity authentication between the dedicated dot matrix printer and the printing service system also includes: Step S11: connecting the dedicated dot matrix printer to the printing service system; Step S12: the printing service system sends a command to obtain a random number to the dedicated dot matrix printer; the security chip in the dedicated dot matrix printer generates a first random number Random1, and returns the first random number Random1 to the printing service system; Step S13: After receiving the first random number Random1, the printing service system generates a second random number Random2 and an authentication timestamp TIME, and uses its own private key to digitally sign the first random number Random1, the second random number Random2 and the authentication timestamp TIME to obtain a first signature value T1; T1 = Sign (Random1||Random2||TIME, printing service system private key); wherein Sign is a signature algorithm; then the first random number Random1, the second random number Random2, the authentication timestamp TIME, the first signature value T1 and the printing service system digital certificate SystemCert are sent as a first authentication data packet PKG1 to the dedicated dot matrix printer; It should be noted that random numbers generated by both parties are added to the authentication process, making each authentication process random and preventing the authentication process from being intercepted and cracked.

[0023] Step S14: After receiving the first authentication data packet PKG1, the dedicated dot matrix printer compares the consistency of the first random number Random1 in the first authentication data packet PKG1 and the local first random number Random1; if the two first random numbers Random1 are consistent, the CA root certificate is used to verify the validity of the digital certificate SystemCert of the printing service system; after the verification is passed, the public key in the digital certificate SystemCert of the printing service system is used to verify the first signature value T1 in the first authentication data packet PKG1; if the verification is passed, the dedicated dot matrix printer completes the identity authentication of the printing service system; Step S15: the dedicated dot matrix printer generates a third random number Random3, and uses the public key in the print service system digital certificate SystemCert to encrypt the second random number Random2 and the third random number Random3 to obtain a first ciphertext EncryptText; EncryptText=E (Random2||Random3, SystemCert); wherein E is an asymmetric encryption algorithm; then uses its own private key to digitally sign the first ciphertext EncryptText to obtain a second signature value T2, T2 = Sign(EncryptText, dedicated dot matrix printer private key); wherein Sign is a signature algorithm; Send the first ciphertext EncryptText, the second signature value T2 and the dedicated dot matrix printer digital certificate SamCert together as a second authentication data packet PKG2 to the printing service system; Step S16: After receiving the second authentication data packet PKG2, the printing service system uses the CA root certificate to verify the validity of the dedicated dot matrix printer digital certificate SamCert, and retrieves the system's digital certificate list to check whether the dedicated dot matrix printer corresponding to the certificate is cancelled or deactivated; after the verification is passed, the public key in the dedicated dot matrix printer digital certificate SamCert is used to verify the second signature value T2 in the second authentication data packet PKG2; after the verification is passed, the first ciphertext EncryptText is decrypted using its own private key to obtain the plaintext, and the second random number Random2 in the second authentication data packet PKG2 is compared with the local second random number Random2 for consistency; if the two second random numbers Random2 are consistent, the printing service system completes the identity authentication of the dedicated dot matrix printer; Step S17: The third random number Random3 is used as a temporary session key in the data exchange process after the two-way identity authentication is passed. The temporary session key negotiated during the authentication process is used to encrypt the data exchanged between the dedicated dot matrix printer and the printing service system. The encryption algorithm adopts a symmetric encryption algorithm, which not only ensures the efficiency of the encryption and decryption process, but also ensures the information security on the communication link.

[0024] Step S2: after the two-way identity authentication is passed, controlling the printing service system to generate a printing data packet, and sending the printing data packet to the dedicated dot matrix printer; Preferably, if Figure 2 As shown, after the two-way identity authentication is passed, the printing service system is controlled to generate a print data packet, and the print data packet is sent to the dedicated dot matrix printer, and further includes: Step S21: the printing service system generates plain text data PrintData and a current printing timestamp PrintTime according to the information to be printed; Step S22: the printing service system uses the temporary session key Random3 to encrypt the plaintext data PrintData and the current printing timestamp PrintTime to obtain a second ciphertext EncryptData; EncryptData= Enc(PrintData||PrintTime, Random3), wherein Enc is a symmetric encryption algorithm; Step S23: The printing service system uses its own private key to digitally sign the second ciphertext EncryptData to obtain a third signature value T3; T3 = Sign(EncryptData, printing service system private key); wherein Sign is a signature algorithm; the second ciphertext EncryptData and the third signature value T3 are sent as a print data packet PrintPkg to the dedicated dot matrix printer.

[0025] Step S3: After receiving the print data packet, the dedicated dot matrix printer verifies the print data packet; after the verification is passed, the print data packet is decrypted and a print operation is performed, and finally the print result is reported to the print service system.

[0026] Preferably, if Figure 2 As shown, when the dedicated dot matrix printer receives the print data packet, it verifies the print data packet; after the verification is passed, the print data packet is decrypted and a print operation is performed, and finally the print result is reported to the print service system, which also includes: Step S31: After receiving the print data packet PrintPkg, the dedicated dot matrix printer verifies the third signature value T3 in the print data packet PrintPkg using the print service system digital certificate SystemCert, thereby determining whether the source of the print data packet PrintPkg is legal; Step S32: when it is determined that the source of the print data packet PrintPkg is legitimate, the print data packet PrintPkg is decrypted using the temporary session key Random3 to obtain the plaintext data PrintData and the current print timestamp PrintTime; Step S33: the dedicated dot matrix printer compares the current print timestamp PrintTime with the authentication timestamp TIME, thereby determining whether the timeliness of the print data packet PrintPkg is legal; if the current print timestamp PrintTime is later than the authentication timestamp TIME, the timeliness of the print data packet PrintPkg is determined to be legal, and the current print timestamp PrintTime is recorded in the dedicated dot matrix printer for use in determining the timeliness of the next print data packet, thereby preventing replay attacks; Step S34: when it is determined that the timeliness of the print data packet PrintPkg is legal, the dedicated dot matrix printer uses the plain text data PrintData to perform a print operation; Step S35: The dedicated dot matrix printer reports the printing result to the printing service system to complete the printing.

[0027] In an embodiment of the present invention, if the dedicated dot matrix printer needs to be deactivated or scrapped, a special instruction is sent through the printing service system to erase the data in the security chip, thereby making the dedicated dot matrix printer incapable of working; wherein, a retention time of the dedicated dot matrix printer is set in the printing service system, and the printing service system records the time when the dedicated dot matrix printer was last connected to the printing service system for use. If the dedicated dot matrix printer has not been connected to the printing service system for use within the retention time starting from the last access time, it is assumed that the dedicated dot matrix printer has been deactivated or scrapped, and the dedicated dot matrix printer is prohibited from being connected to the printing service system for use.

[0028] As another embodiment of the present invention, Figure 3 As shown, a safety control system for a dedicated dot matrix printer is provided, wherein the safety control system for the dedicated dot matrix printer includes a dedicated dot matrix printer management platform and a printing service system, wherein: The dedicated dot matrix printer management platform is used to control the dedicated dot matrix printer and the printing service system to perform two-way identity authentication before printing through the dedicated dot matrix printer; after the two-way identity authentication is passed, control the printing service system to generate a printing data packet; The printing service system is used to send the printing data packet to the dedicated dot matrix printer; wherein, when the dedicated dot matrix printer receives the printing data packet, it verifies the printing data packet; after the verification is passed, the printing data packet is decrypted and the printing operation is performed, and finally the printing result is reported to the printing service system.

[0029] It should be noted that the security control system of the special dot matrix printer is constructed based on the certificate system of the PKI public key infrastructure. Among them, the PKI system is used to issue digital certificates to various authentication entities deployed in a decentralized manner, which can realize mutual recognition and verification between them and achieve more flexible management of the printing process. At the same time, the confidentiality and integrity of the PKI system can be used to achieve high security and strong authentication.

[0030] Preferably, a security chip is embedded in the dedicated dot matrix printer, and the security chip is initialized and managed by the dedicated dot matrix printer management platform, and the dedicated dot matrix printer management platform issues a digital certificate for each security chip; wherein the security chip integrates symmetric and asymmetric commercial secret algorithms, and the functions implemented by the dedicated dot matrix printer based on the security chip include: unique identity identification, its own work authority control, identity authentication with the printing service system, secure communication with the printing service system, decryption and verification of printing data packets, storage of sensitive information such as keys and printing special fonts, and receiving printing requests from the printing service system and controlling the dedicated dot matrix printer to perform printing operations; Among them, the dedicated dot matrix printer management platform is responsible for the issuance management of digital certificates, as well as the issuance management of the dedicated dot matrix printer and security chip; the digital certificates of the printing service system and the dedicated dot matrix printer are both issued and managed by the dedicated dot matrix printer management platform; sensitive data such as keys, firmware and dedicated printing fonts stored in the security chip in the dedicated dot matrix printer are initialized and written by the dedicated dot matrix printer management platform, and each security chip is uniquely bound to a dedicated dot matrix printer, thereby ensuring that only dedicated dot matrix printers authorized by the dedicated dot matrix printer management platform can perform printing work.

[0031] After the printing service system and the dedicated dot matrix printer are authenticated, the printing service system will encrypt the data required by the printer to generate a print data packet and send it to the dedicated dot matrix printer, and record and store the printing operation.

[0032] Specifically, the security chip may also store a dedicated dot matrix printer digital certificate and a dedicated character library. The security chip has a high security protection capability and can be used as a reliable storage carrier for sensitive data of the dedicated dot matrix printer.

[0033] In an embodiment of the present invention, the security chip gives the dedicated dot matrix printer a trusted digital identity carrier. Based on this technology, the dedicated dot matrix printer and the printing service system realize identity authentication. After the two-way identity authentication is passed, the dedicated dot matrix printer can receive print data and perform printing operations; the security chip ensures the security of the printing link from a hardware perspective, reducing the possibility of illegal imitation, and is particularly suitable for the security management of decentralized dedicated dot matrix printers and printing service systems.

[0034] The security control method for a dedicated dot matrix printer provided by the present invention improves the information security of the dedicated dot matrix printer through two-way identity authentication between the dedicated dot matrix printer and the printing service system. At the same time, by embedding a security chip in the dedicated dot matrix printer as a digital identity carrier of the dedicated dot matrix printer, the work authority control of the dedicated dot matrix printer can be reliably managed and controlled, while also ensuring the legality of the printing operation, effectively preventing illegal printing, and maintaining economic market order and social stability.

[0035] The above description is only a preferred embodiment of the present invention and does not limit the present invention in any form. Although the present invention has been disclosed as a preferred embodiment as above, it is not used to limit the present invention. Any technician familiar with this profession can make some changes or modifications to equivalent embodiments of equivalent changes using the technical contents disclosed above without departing from the scope of the technical solution of the present invention. However, any simple modification, equivalent change and modification made to the above embodiments based on the technical essence of the present invention without departing from the content of the technical solution of the present invention still falls within the scope of the technical solution of the present invention.

Claims

1. A safety control method for a special dot matrix printer, characterized in that: include: Step S1: Before printing by the dedicated dot matrix printer, control the dedicated dot matrix printer to perform two-way identity authentication with the printing service system; Step S2: after the two-way identity authentication is passed, controlling the printing service system to generate a printing data packet, and sending the printing data packet to the dedicated dot matrix printer; Step S3: After receiving the print data packet, the dedicated dot matrix printer verifies the print data packet; after the verification is passed, the print data packet is decrypted and a print operation is performed, and finally the print result is reported to the print service system.

2. The safety control method for a dedicated dot matrix printer according to claim 1, characterized in that: Before step S1, the method further includes: Issue a printing service system digital certificate SystemCert to the printing service system through a dedicated dot matrix printer management platform for authorization and authentication; Before the security chip of each authorized dedicated dot matrix printer is issued, security parameters are written into the security chip through the dedicated dot matrix printer management platform, wherein the security parameters include the dedicated dot matrix printer digital certificate SamCert and a dedicated font library.

3. The safety control method for a dedicated dot matrix printer according to claim 2, characterized in that: The controlling of the two-way identity authentication between the dedicated dot matrix printer and the printing service system also includes: Step S11: connecting the dedicated dot matrix printer to the printing service system; Step S12: the printing service system sends a command to obtain a random number to the dedicated dot matrix printer; the security chip in the dedicated dot matrix printer generates a first random number Random1, and returns the first random number Random1 to the printing service system; Step S13: After receiving the first random number Random1, the printing service system generates a second random number Random2 and an authentication timestamp TIME, and uses its own private key to digitally sign the first random number Random1, the second random number Random2 and the authentication timestamp TIME to obtain a first signature value T1; then the first random number Random1, the second random number Random2, the authentication timestamp TIME, the first signature value T1 and the printing service system digital certificate SystemCert are sent as a first authentication data packet PKG1 to the dedicated dot matrix printer; Step S14: After receiving the first authentication data packet PKG1, the dedicated dot matrix printer compares the consistency of the first random number Random1 in the first authentication data packet PKG1 and the local first random number Random1; if the two first random numbers Random1 are consistent, the CA root certificate is used to verify the validity of the digital certificate SystemCert of the printing service system; after the verification is passed, the public key in the digital certificate SystemCert of the printing service system is used to verify the first signature value T1 in the first authentication data packet PKG1; if the verification is passed, the dedicated dot matrix printer completes the identity authentication of the printing service system; Step S15: the dedicated dot matrix printer generates a third random number Random3, and uses the public key in the print service system digital certificate SystemCert to encrypt the second random number Random2 and the third random number Random3 to obtain a first ciphertext EncryptText; then uses its own private key to digitally sign the first ciphertext EncryptText to obtain a second signature value T2, and sends the first ciphertext EncryptText, the second signature value T2 and the dedicated dot matrix printer digital certificate SamCert together as a second authentication data packet PKG2 to the print service system; Step S16: After receiving the second authentication data packet PKG2, the printing service system uses the CA root certificate to verify the validity of the dedicated dot matrix printer digital certificate SamCert; after the verification is passed, the public key in the dedicated dot matrix printer digital certificate SamCert is used to verify the second signature value T2 in the second authentication data packet PKG2; after the verification is passed, the first ciphertext EncryptText is decrypted using its own private key to obtain the plain text, and the second random number Random2 in the second authentication data packet PKG2 is compared with the local second random number Random2 for consistency; if the two second random numbers Random2 are consistent, the printing service system completes the identity authentication of the dedicated dot matrix printer; Step S17: Use the third random number Random3 as a temporary session key in the data exchange process after the two-way identity authentication is passed.

4. The safety control method for a dedicated dot matrix printer according to claim 3, characterized in that: After the two-way identity authentication is passed, the printing service system is controlled to generate a print data packet, and the print data packet is sent to the dedicated dot matrix printer, further comprising: Step S21: the printing service system generates plain text data PrintData and a current printing timestamp PrintTime according to the information to be printed; Step S22: the printing service system uses the temporary session key Random3 to encrypt the plaintext data PrintData and the current printing timestamp PrintTime to obtain a second ciphertext EncryptData; Step S23: the printing service system uses its own private key to digitally sign the second ciphertext EncryptData to obtain a third signature value T3; and sends the second ciphertext EncryptData and the third signature value T3 as a print data packet PrintPkg to the dedicated dot matrix printer.

5. The safety control method for a dedicated dot matrix printer according to claim 4, characterized in that: After receiving the print data packet, the dedicated dot matrix printer verifies the print data packet; After the verification is passed, the printing data packet is decrypted and the printing operation is performed, and finally the printing result is reported to the printing service system, which also includes: Step S31: After receiving the print data packet PrintPkg, the dedicated dot matrix printer verifies the third signature value T3 in the print data packet PrintPkg using the print service system digital certificate SystemCert, thereby determining whether the source of the print data packet PrintPkg is legal; Step S32: when it is determined that the source of the print data packet PrintPkg is legitimate, the print data packet PrintPkg is decrypted using the temporary session key Random3 to obtain the plaintext data PrintData and the current print timestamp PrintTime; Step S33: the dedicated dot matrix printer compares the current print timestamp PrintTime with the authentication timestamp TIME, thereby determining whether the timeliness of the print data packet PrintPkg is legal; if the current print timestamp PrintTime is later than the authentication timestamp TIME, the timeliness of the print data packet PrintPkg is determined to be legal, and the current print timestamp PrintTime is recorded in the dedicated dot matrix printer for use in determining the timeliness of the next print data packet; Step S34: when it is determined that the timeliness of the print data packet PrintPkg is legal, the dedicated dot matrix printer uses the plain text data PrintData to perform a print operation; Step S35: The dedicated dot matrix printer reports the printing result to the printing service system to complete the printing.

6. The safety control method for a dedicated dot matrix printer according to claim 1, characterized in that: Also includes: If the dedicated dot matrix printer needs to be deactivated or scrapped, a dedicated instruction is sent through the printing service system to erase the data in the security chip, thereby making the dedicated dot matrix printer inoperable; Among them, a retention time of the dedicated dot matrix printer is set in the printing service system, and the printing service system records the time when the dedicated dot matrix printer was last connected to the printing service system for use. If the dedicated dot matrix printer has not been connected to the printing service system for use within the retention time since the last access time, it is assumed that the dedicated dot matrix printer has been disabled or scrapped, and the dedicated dot matrix printer is prohibited from connecting to the printing service system for use.

7. A safety control system for a special dot matrix printer, used to implement the safety control method for a special dot matrix printer according to any one of claims 1 to 6, characterized in that: The safety control system of the dedicated dot matrix printer includes a dedicated dot matrix printer management platform and a printing service system, wherein: The dedicated dot matrix printer management platform is used to control the dedicated dot matrix printer and the printing service system to perform two-way identity authentication before printing through the dedicated dot matrix printer; after the two-way identity authentication is passed, control the printing service system to generate a printing data packet; The printing service system is used to send the printing data packet to the dedicated dot matrix printer; wherein, when the dedicated dot matrix printer receives the printing data packet, it verifies the printing data packet; after the verification is passed, the printing data packet is decrypted and the printing operation is performed, and finally the printing result is reported to the printing service system.

8. The safety control system of the dedicated dot matrix printer according to claim 7, characterized in that: The dedicated dot matrix printer is embedded with a security chip, which is initialized and managed by the dedicated dot matrix printer management platform, and the dedicated dot matrix printer management platform issues a digital certificate for each security chip; wherein the security chip is integrated with a commercial secret algorithm, and the functions implemented by the dedicated dot matrix printer based on the security chip include: unique identity identification, identity authentication with the printing service system, secure communication with the printing service system, decryption verification and key storage of printing data packets, and control of the dedicated dot matrix printer to perform printing operations; The dedicated dot matrix printer management platform is responsible for the issuance and management of digital certificates, as well as the issuance and management of the dedicated dot matrix printer and security chip; The printing service system generates a printing data packet and sends it to the dedicated dot matrix printer, and records and stores the printing operation.

Images