Safety control method and system for special dot matrix printer

Abstract

The present invention relates to the fields of information security and printer technology, and specifically discloses a security control method and system for a dedicated dot matrix printer. The method comprises: controlling a bidirectional identity authentication between the dedicated dot matrix printer and a printing service system before printing via the dedicated dot matrix printer; after the bidirectional identity authentication is successful, controlling the printing service system to generate a print data packet and send the print data packet to the dedicated dot matrix printer; upon receipt of the print data packet, the dedicated dot matrix printer verifies the print data packet; after the verification is successful, decrypts the print data packet, executes a printing operation, and finally reports the print result to the printing service system. The security control method for a dedicated dot matrix printer provided by the present invention can prevent illegal operation of the printer for printing, ensure that data is securely sent to the dedicated dot matrix printer for printing, ensure information security during the printing process, and simultaneously ensure that the printed dedicated vouchers and receipts are legal and valid.

Description

Technical Field

[0001] The present invention relates to the fields of information security and printer technology, and more particularly to a security control method and system for a dedicated dot matrix printer. Background Art

[0002] Special dot matrix printers are often used to print bills and special vouchers. These bills and special vouchers are mostly used in the fields of finance and public security and have important economic and legal status. Therefore, there are high security requirements for the printing process. If the printing process is not supervised, there may be a risk of counterfeiting bills and special vouchers. At the same time, the printing process may involve the transmission of personal information. If the data transmission process is not protected, it may cause personal information leakage.

[0003] Currently, most dedicated dot matrix printers are general-purpose devices, often deployed in a decentralized manner at business windows. Without an operator identification mechanism or information security protection measures, any user can operate the printer to print, failing to effectively protect the security of the printing process. Therefore, dedicated printers require security controls. First, they must prevent illegal printer access to the system for use. If illegal dedicated dot matrix printers are accessed and used, neither the quality of the prints nor the legitimacy of the prints can be guaranteed. Second, they must securely transmit and store data related to dedicated dot matrix printers to prevent the leakage of sensitive information. Third, they must improve the full lifecycle management of dedicated dot matrix printers and deregister deactivated or scrapped dedicated dot matrix printers. Summary of the Invention

[0004] In order to ensure the security and controllability of the printing process, as well as the security of the printed information and reduce the possibility of forgery, the present invention provides a security control method and system for a dedicated dot matrix printer, which can prevent illegal operation of the printer for printing, ensure that data is securely sent to the dedicated dot matrix printer for printing, ensure the information security of the printing process, and at the same time ensure that the printed special vouchers and tickets are legal and valid.

[0005] As a first aspect of the present invention, a security control method for a dedicated dot matrix printer is provided, comprising:

[0006] Step S1: Before printing by the dedicated dot matrix printer, controlling the dedicated dot matrix printer to perform two-way identity authentication with the printing service system;

[0007] Step S2: After the two-way identity authentication is passed, controlling the printing service system to generate a print data packet and sending the print data packet to the dedicated dot matrix printer;

[0008] Step S3: After receiving the print data packet, the dedicated dot matrix printer verifies the print data packet; after passing the verification, the print data packet is decrypted and a print operation is performed, and finally the print result is reported to the print service system.

[0009] Furthermore, before step S1, the method further includes:

[0010] Issue a printing service system digital certificate SystemCert to the printing service system through a dedicated dot matrix printer management platform for authorization and authentication;

[0011] Before the security chip of each authorized dedicated dot matrix printer is issued, security parameters are written into the security chip through the dedicated dot matrix printer management platform, wherein the security parameters include the dedicated dot matrix printer digital certificate SamCert and a dedicated font library.

[0012] Furthermore, the controlling of the two-way identity authentication between the dedicated dot matrix printer and the printing service system further includes:

[0013] Step S11: connecting the dedicated dot matrix printer to the printing service system;

[0014] Step S12: the printing service system sends a command to the dedicated dot matrix printer to obtain a random number; the security chip in the dedicated dot matrix printer generates a first random number Random1 and returns the first random number Random1 to the printing service system;

[0015] Step S13: After receiving the first random number Random1, the printing service system generates a second random number Random2 and an authentication timestamp TIME, and digitally signs the first random number Random1, the second random number Random2, and the authentication timestamp TIME using its own private key to obtain a first signature value T1; then, the first random number Random1, the second random number Random2, the authentication timestamp TIME, the first signature value T1, and the printing service system digital certificate SystemCert are sent as a first authentication data packet PKG1 to the dedicated dot matrix printer;

[0016] Step S14: After receiving the first authentication data packet PKG1, the dedicated dot matrix printer compares the consistency of the first random number Random1 in the first authentication data packet PKG1 and the local first random number Random1; if the two first random numbers Random1 are consistent, the CA root certificate is used to verify the validity of the digital certificate SystemCert of the printing service system; after the verification is successful, the public key in the digital certificate SystemCert of the printing service system is used to verify the first signature value T1 in the first authentication data packet PKG1; if the verification is successful, the dedicated dot matrix printer completes the identity authentication of the printing service system;

[0017] Step S15: The dedicated dot matrix printer generates a third random number Ran3, and uses the public key in the print service system digital certificate SystemCert to encrypt the second random number Ran2 and the third random number Ran3 to obtain a first ciphertext EncryptText; then uses its own private key to digitally sign the first ciphertext EncryptText to obtain a second signature value T2, and sends the first ciphertext EncryptText, the second signature value T2, and the dedicated dot matrix printer digital certificate SamCert together as a second authentication data packet PKG2 to the print service system;

[0018] Step S16: After receiving the second authentication data packet PKG2, the printing service system uses the CA root certificate to verify the validity of the dedicated dot matrix printer digital certificate SamCert; after the verification is successful, the public key in the dedicated dot matrix printer digital certificate SamCert is used to verify the second signature value T2 in the second authentication data packet PKG2; after the verification is successful, the first ciphertext EncryptText is decrypted using its own private key to obtain the plaintext, and the second random number Random2 in the second authentication data packet PKG2 is compared with the local second random number Random2 for consistency; if the two second random numbers Random2 are consistent, the printing service system completes the identity authentication of the dedicated dot matrix printer;

[0019] Step S17: Use the third random number Random3 as a temporary session key in the data interaction process after the two-way identity authentication is passed.

[0020] Furthermore, after the two-way identity authentication is passed, controlling the printing service system to generate a print data packet and sending the print data packet to the dedicated dot matrix printer further includes:

[0021] Step S21: the printing service system generates plain text data PrintData and a current printing timestamp PrintTime according to the information to be printed;

[0022] Step S22: the printing service system uses the temporary session key Random3 to encrypt the plaintext data PrintData and the current printing timestamp PrintTime to obtain a second ciphertext EncryptData;

[0023] Step S23: The printing service system uses its own private key to digitally sign the second ciphertext EncryptData to obtain a third signature value T3; and sends the second ciphertext EncryptData and the third signature value T3 as a print data packet PrintPkg to the dedicated dot matrix printer.

[0024] Furthermore, when the dedicated dot matrix printer receives the print data packet, it verifies the print data packet; after the verification is passed, it decrypts the print data packet and performs a print operation, and finally reports the print result to the print service system, further comprising:

[0025] Step S31: After receiving the print data packet PrintPkg, the dedicated dot matrix printer verifies the third signature value T3 in the print data packet PrintPkg using the print service system digital certificate SystemCert, thereby determining whether the source of the print data packet PrintPkg is legal;

[0026] Step S32: when it is determined that the source of the print data packet PrintPkg is legal, decrypt the print data packet PrintPkg using the temporary session key Random3 to obtain the plaintext data PrintData and the current print timestamp PrintTime;

[0027] Step S33: The dedicated dot matrix printer compares the current print timestamp PrintTime with the authentication timestamp TIME to determine whether the timeliness of the print data packet PrintPkg is legal; if the current print timestamp PrintTime is later than the authentication timestamp TIME, the timeliness of the print data packet PrintPkg is determined to be legal, and the current print timestamp PrintTime is recorded in the dedicated dot matrix printer for use in determining the timeliness of the next print data packet;

[0028] Step S34: when it is determined that the time validity of the print data packet PrintPkg is legal, the dedicated dot matrix printer performs a printing operation using the plain text data PrintData;

[0029] Step S35: The dedicated dot matrix printer reports the printing result to the printing service system to complete the printing.

[0030] Furthermore, it also includes:

[0031] If the dedicated dot matrix printer needs to be deactivated or scrapped, a dedicated instruction is sent through the printing service system to erase the data in the security chip, thereby rendering the dedicated dot matrix printer inoperable;

[0032] Among them, the retention time of the dedicated dot matrix printer is set in the printing service system, and the printing service system records the time when the dedicated dot matrix printer was last connected to the printing service system for use. If the dedicated dot matrix printer is not connected to the printing service system for use within the retention time starting from the last access time, it is assumed that the dedicated dot matrix printer has been disabled or scrapped, and the dedicated dot matrix printer is prohibited from being connected to the printing service system for use.

[0033] As a second aspect of the present invention, a safety control system for a dedicated dot matrix printer is provided, wherein the safety control system for the dedicated dot matrix printer includes a dedicated dot matrix printer management platform and a printing service system, wherein:

[0034] The dedicated dot matrix printer management platform is used to control the dedicated dot matrix printer to perform two-way identity authentication with the printing service system before printing is performed by the dedicated dot matrix printer; after the two-way identity authentication is passed, the printing service system is controlled to generate a print data packet;

[0035] The printing service system is used to send the printing data packet to the dedicated dot matrix printer; wherein, when the dedicated dot matrix printer receives the printing data packet, it verifies the printing data packet; after the verification is passed, the printing data packet is decrypted and the printing operation is performed, and finally the printing result is reported to the printing service system.

[0036] Furthermore, the dedicated dot matrix printer has a built-in security chip, which is initialized and managed by the dedicated dot matrix printer management platform, and the dedicated dot matrix printer management platform issues a digital certificate for each security chip. A commercially encrypted algorithm is integrated into the security chip, and the dedicated dot matrix printer implements functions based on the security chip, including: unique identification, identity authentication with the print service system, secure communication with the print service system, decryption verification and key storage of print data packets, and control of the dedicated dot matrix printer to perform printing operations.

[0037] The dedicated dot matrix printer management platform is responsible for the issuance and management of digital certificates, as well as the issuance and management of the dedicated dot matrix printer and security chip;

[0038] The printing service system generates a printing data packet and sends it to the dedicated dot matrix printer, and records and stores the printing operation.

[0039] The security control method and system for a dedicated dot matrix printer provided by the present invention have the following advantages: based on the PKI certificate system, a security chip is embedded in the dedicated dot matrix printer, which ensures from a hardware perspective that only legitimate dedicated dot matrix printers can access the system for printing operations, providing an information security protection mechanism for the entire printing process; it can effectively prevent illegal printing and maintain economic market order. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. Together with the following specific embodiments, they are used to explain the present invention, but do not constitute a limitation of the present invention.

[0041] Figure 1 This is a flow chart of the safety control method for the dedicated dot matrix printer provided by the present invention.

[0042] Figure 2 This is a flow chart of a specific implementation of the security control method for a dedicated dot matrix printer provided by the present invention.

[0043] Figure 3 This is a structural diagram of the safety control system of the special dot matrix printer provided by the present invention. DETAILED DESCRIPTION

[0044] To further illustrate the technical means and effectiveness of the present invention in achieving its intended purpose, the following, in conjunction with the accompanying drawings and preferred embodiments, describes in detail the specific implementation, structure, features, and effectiveness of the security control method and system for a dedicated dot matrix printer according to the present invention. It should be understood that the described embodiments are only a subset of the embodiments of the present invention, and are not exhaustive. All other embodiments derived by persons of ordinary skill in the art based on the embodiments of the present invention without inventive effort are intended to fall within the scope of protection of the present invention.

[0045] In this embodiment, a security control method for a dedicated dot matrix printer is provided. Figure 1 As shown, the safety control method of the dedicated dot matrix printer includes:

[0046] Step S1: Before printing by the dedicated dot matrix printer, controlling the dedicated dot matrix printer to perform two-way identity authentication with the printing service system;

[0047] Preferably, if Figure 2 As shown, before step S1, the following steps are also included:

[0048] Issue a printing service system digital certificate SystemCert to the printing service system through a dedicated dot matrix printer management platform for authorization and authentication;

[0049] Before the security chip of each authorized dedicated dot matrix printer is issued, security parameters are written into the security chip through the dedicated dot matrix printer management platform, wherein the security parameters include the dedicated dot matrix printer digital certificate SamCert and a dedicated font library.

[0050] It should be noted that the dedicated dot matrix printer and the printing service system use asymmetric encryption and two-way authentication based on digital certificates. This two-way authentication ensures that only legitimate dedicated dot matrix printers can access the printing service system, preventing access by unauthorized electronic identification card issuers. Furthermore, only the authorized printing service system can send print requests to the dedicated dot matrix printer, preventing the dedicated dot matrix printer from printing unauthorized data.

[0051] Both the dedicated dot matrix printer and the printing service system already have digital certificates issued by the dedicated dot matrix printer management platform. In this patented technical solution, both parties are set to perform two-way identity authentication through an asymmetric encryption algorithm, without the need to negotiate or share the same key, which simplifies the system structure and improves flexibility.

[0052] Preferably, if Figure 2 As shown, the control of the two-way identity authentication between the dedicated dot matrix printer and the printing service system further includes:

[0053] Step S11: connecting the dedicated dot matrix printer to the printing service system;

[0054] Step S12: the printing service system sends a command to the dedicated dot matrix printer to obtain a random number; the security chip in the dedicated dot matrix printer generates a first random number Random1 and returns the first random number Random1 to the printing service system;

[0055] Step S13: After receiving the first random number Random1, the printing service system generates a second random number Random2 and an authentication timestamp TIME, and uses its own private key to digitally sign the first random number Random1, the second random number Random2, and the authentication timestamp TIME to obtain a first signature value T1; T1 = Sign(Random1||Random2||TIME, printing service system private key); where Sign is the signature algorithm; then the first random number Random1, the second random number Random2, the authentication timestamp TIME, the first signature value T1, and the printing service system digital certificate SystemCert are sent as a first authentication data packet PKG1 to the dedicated dot matrix printer;

[0056] It should be noted that random numbers generated by both parties are added to the authentication process, making each authentication process random and preventing the authentication process from being intercepted and cracked.

[0057] Step S14: After receiving the first authentication data packet PKG1, the dedicated dot matrix printer compares the consistency of the first random number Random1 in the first authentication data packet PKG1 and the local first random number Random1; if the two first random numbers Random1 are consistent, the CA root certificate is used to verify the validity of the digital certificate SystemCert of the printing service system; after the verification is successful, the public key in the digital certificate SystemCert of the printing service system is used to verify the first signature value T1 in the first authentication data packet PKG1; if the verification is successful, the dedicated dot matrix printer completes the identity authentication of the printing service system;

[0058] Step S15: The dedicated dot matrix printer generates a third random number Random3, and uses the public key in the print service system digital certificate SystemCert to encrypt the second random number Random2 and the third random number Random3 to obtain a first ciphertext EncryptText; EncryptText = E (Random2||Random3, SystemCert); where E is an asymmetric encryption algorithm; then the dedicated dot matrix printer uses its own private key to digitally sign the first ciphertext EncryptText to obtain a second signature value T2, where T2 = Sign (EncryptText, dedicated dot matrix printer private key); where Sign is the signature algorithm;

[0059] Sending the first ciphertext EncryptText, the second signature value T2 and the dedicated dot matrix printer digital certificate SamCert together as a second authentication data packet PKG2 to the printing service system;

[0060] Step S16: After receiving the second authentication data packet PKG2, the printing service system uses the CA root certificate to verify the validity of the dedicated dot matrix printer digital certificate SamCert, and searches the system's digital certificate list to check whether the dedicated dot matrix printer corresponding to the certificate is cancelled or deactivated; after the verification is successful, the public key in the dedicated dot matrix printer digital certificate SamCert is used to verify the second signature value T2 in the second authentication data packet PKG2; after the verification is successful, the first ciphertext EncryptText is decrypted using its own private key to obtain the plaintext, and the second random number Random2 in the second authentication data packet PKG2 is compared with the local second random number Random2 for consistency; if the two second random numbers Random2 are consistent, the printing service system completes the identity authentication of the dedicated dot matrix printer;

[0061] Step S17: The third random number Random3 is used as a temporary session key for data exchange after the bidirectional identity authentication is successful. The temporary session key negotiated during the authentication process is used to encrypt data exchanged between the dedicated dot matrix printer and the print service system. The encryption algorithm uses a symmetric encryption algorithm, which ensures both efficient encryption and decryption and information security on the communication link.

[0062] Step S2: After the two-way identity authentication is passed, controlling the printing service system to generate a print data packet and sending the print data packet to the dedicated dot matrix printer;

[0063] Preferably, if Figure 2 As shown, after the two-way identity authentication is passed, the printing service system is controlled to generate a print data packet and send the print data packet to the dedicated dot matrix printer, further comprising:

[0064] Step S21: the printing service system generates plain text data PrintData and a current printing timestamp PrintTime according to the information to be printed;

[0065] Step S22: The print service system uses the temporary session key Random3 to encrypt the plaintext data PrintData and the current print timestamp PrintTime to obtain a second ciphertext EncryptData; EncryptData = Enc(PrintData||PrintTime, Random3), where Enc is a symmetric encryption algorithm;

[0066] Step S23: The printing service system uses its own private key to digitally sign the second ciphertext EncryptData to obtain a third signature value T3; T3 = Sign(EncryptData, printing service system private key); where Sign is the signature algorithm; the second ciphertext EncryptData and the third signature value T3 are sent as a print data packet PrintPkg to the dedicated dot matrix printer.

[0067] Step S3: After receiving the print data packet, the dedicated dot matrix printer verifies the print data packet; after passing the verification, the print data packet is decrypted and a print operation is performed, and finally the print result is reported to the print service system.

[0068] Preferably, if Figure 2 As shown, when the dedicated dot matrix printer receives the print data packet, it verifies the print data packet; after the verification is passed, it decrypts the print data packet and performs a print operation, and finally reports the print result to the print service system, further comprising:

[0069] Step S31: After receiving the print data packet PrintPkg, the dedicated dot matrix printer verifies the third signature value T3 in the print data packet PrintPkg using the print service system digital certificate SystemCert, thereby determining whether the source of the print data packet PrintPkg is legal;

[0070] Step S32: when it is determined that the source of the print data packet PrintPkg is legal, decrypt the print data packet PrintPkg using the temporary session key Random3 to obtain the plaintext data PrintData and the current print timestamp PrintTime;

[0071] Step S33: The dedicated dot matrix printer compares the current print timestamp PrintTime with the authentication timestamp TIME to determine whether the timeliness of the print data packet PrintPkg is legal. If the current print timestamp PrintTime is later than the authentication timestamp TIME, the timeliness of the print data packet PrintPkg is determined to be legal. The current print timestamp PrintTime is recorded in the dedicated dot matrix printer for use in determining the timeliness of the next print data packet, thereby preventing replay attacks.

[0072] Step S34: when it is determined that the time validity of the print data packet PrintPkg is legal, the dedicated dot matrix printer performs a printing operation using the plain text data PrintData;

[0073] Step S35: The dedicated dot matrix printer reports the printing result to the printing service system to complete the printing.

[0074] In an embodiment of the present invention, if the dedicated dot matrix printer needs to be deactivated or scrapped, a special instruction is sent through the printing service system to erase the data in the security chip, thereby rendering the dedicated dot matrix printer inoperable; wherein, a retention time for the dedicated dot matrix printer is set in the printing service system, and the printing service system records the time when the dedicated dot matrix printer was last connected to the printing service system for use. If the dedicated dot matrix printer has not been connected to the printing service system for use within the retention time starting from the last access time, it is assumed that the dedicated dot matrix printer has been deactivated or scrapped, and the dedicated dot matrix printer is prohibited from being connected to the printing service system for use.

[0075] As another embodiment of the present invention, Figure 3 As shown, a safety control system for a dedicated dot matrix printer is provided, wherein the safety control system for the dedicated dot matrix printer includes a dedicated dot matrix printer management platform and a printing service system, wherein:

[0076] The dedicated dot matrix printer management platform is used to control the dedicated dot matrix printer to perform two-way identity authentication with the printing service system before printing is performed by the dedicated dot matrix printer; after the two-way identity authentication is passed, the printing service system is controlled to generate a print data packet;

[0077] The printing service system is used to send the printing data packet to the dedicated dot matrix printer; wherein, when the dedicated dot matrix printer receives the printing data packet, it verifies the printing data packet; after the verification is passed, the printing data packet is decrypted and the printing operation is performed, and finally the printing result is reported to the printing service system.

[0078] It should be noted that the security control system for the dedicated dot matrix printer is built based on the PKI public key infrastructure certificate system. Using the PKI system to issue digital certificates to various decentralized authentication entities enables mutual recognition and verification between them, enabling more flexible management of the printing process. Furthermore, leveraging the confidentiality and integrity provided by the PKI system, high security and strong authentication can be achieved.

[0079] Preferably, the dedicated dot matrix printer is embedded with a security chip, which is initialized and managed by the dedicated dot matrix printer management platform, and the dedicated dot matrix printer management platform issues a digital certificate for each security chip; wherein the security chip integrates symmetric and asymmetric commercial encryption algorithms, and the functions implemented by the dedicated dot matrix printer based on the security chip include: unique identity identification, its own work authority control, identity authentication with the printing service system, secure communication with the printing service system, decryption and verification of print data packets, storage of sensitive information such as keys and printing-specific fonts, and receiving print requests from the printing service system and controlling the dedicated dot matrix printer to perform printing operations;

[0080] Among them, the dedicated dot matrix printer management platform is responsible for the issuance and management of digital certificates, as well as the distribution and management of the dedicated dot matrix printer and security chip; the digital certificates of the printing service system and the dedicated dot matrix printer are both issued and managed by the dedicated dot matrix printer management platform; the sensitive data such as keys, firmware and dedicated printing fonts stored in the security chip of the dedicated dot matrix printer are initialized and written by the dedicated dot matrix printer management platform, and each security chip is uniquely bound to a dedicated dot matrix printer, thereby ensuring that only dedicated dot matrix printers authorized by the dedicated dot matrix printer management platform can perform printing.

[0081] After the printing service system and the dedicated dot matrix printer are authenticated, the printing service system will encrypt the data required by the printer to generate a print data packet and send it to the dedicated dot matrix printer, and record and store the printing operation.

[0082] Specifically, the security chip can also store a dedicated dot matrix printer digital certificate and a dedicated font library. The security chip has a high security protection capability and can serve as a reliable storage carrier for sensitive data of the dedicated dot matrix printer.

[0083] In an embodiment of the present invention, the security chip gives the dedicated dot matrix printer a trusted digital identity carrier. Based on this technology, the dedicated dot matrix printer and the printing service system realize identity authentication. Only after the two-way identity authentication is passed can the dedicated dot matrix printer receive print data and perform printing operations; the security chip ensures the security of the printing link from a hardware perspective, reducing the possibility of illegal imitation, and is particularly suitable for the security management of decentralized dedicated dot matrix printers and printing service systems.

[0084] The security control method for a dedicated dot matrix printer provided by the present invention improves the information security of the dedicated dot matrix printer through two-way identity authentication between the dedicated dot matrix printer and the printing service system. At the same time, by embedding a security chip in the dedicated dot matrix printer as a digital identity carrier of the dedicated dot matrix printer, the working authority control of the dedicated dot matrix printer can be reliably managed and controlled, while also ensuring the legality of the printing operation, effectively preventing illegal printing, and maintaining economic market order and social stability.

[0085] The above description is merely a preferred embodiment of the present invention and does not constitute any form of limitation to the present invention. Although the present invention has been disclosed as a preferred embodiment, it is not intended to limit the present invention. Any technician familiar with the present profession can make slight changes or modifications to equivalent embodiments using the technical contents disclosed above without departing from the scope of the technical solution of the present invention. However, any simple modifications, equivalent changes and modifications made to the above embodiments based on the technical essence of the present invention without departing from the content of the technical solution of the present invention are still within the scope of the technical solution of the present invention.

Claims

1. A safety control method for a special dot matrix printer, characterized in that: include: Step S1: Before printing by the dedicated dot matrix printer, controlling the dedicated dot matrix printer to perform two-way identity authentication with the printing service system; Step S2: After the two-way identity authentication is passed, controlling the printing service system to generate a print data packet and sending the print data packet to the dedicated dot matrix printer; Step S3: After receiving the print data packet, the dedicated dot matrix printer verifies the print data packet; after passing the verification, the print data packet is decrypted and a print operation is performed, and finally the print result is reported to the print service system; The controlling of the bidirectional identity authentication between the dedicated dot matrix printer and the printing service system further includes: Step S11: connecting the dedicated dot matrix printer to the printing service system; Step S12: the printing service system sends a command to the dedicated dot matrix printer to obtain a random number; the security chip in the dedicated dot matrix printer generates a first random number Random1 and returns the first random number Random1 to the printing service system; Step S13: After receiving the first random number Random1, the printing service system generates a second random number Random2 and an authentication timestamp TIME, and digitally signs the first random number Random1, the second random number Random2, and the authentication timestamp TIME using its own private key to obtain a first signature value T1; then, the first random number Random1, the second random number Random2, the authentication timestamp TIME, the first signature value T1, and the printing service system digital certificate SystemCert are sent as a first authentication data packet PKG1 to the dedicated dot matrix printer; Step S14: After receiving the first authentication data packet PKG1, the dedicated dot matrix printer compares the consistency of the first random number Random1 in the first authentication data packet PKG1 and the local first random number Random1; if the two first random numbers Random1 are consistent, the CA root certificate is used to verify the validity of the digital certificate SystemCert of the printing service system; after the verification is successful, the public key in the digital certificate SystemCert of the printing service system is used to verify the first signature value T1 in the first authentication data packet PKG1; if the verification is successful, the dedicated dot matrix printer completes the identity authentication of the printing service system; Step S15: The dedicated dot matrix printer generates a third random number Ran3, and uses the public key in the print service system digital certificate SystemCert to encrypt the second random number Ran2 and the third random number Ran3 to obtain a first ciphertext EncryptText; then uses its own private key to digitally sign the first ciphertext EncryptText to obtain a second signature value T2, and sends the first ciphertext EncryptText, the second signature value T2, and the dedicated dot matrix printer digital certificate SamCert together as a second authentication data packet PKG2 to the print service system; Step S16: After receiving the second authentication data packet PKG2, the printing service system uses the CA root certificate to verify the validity of the dedicated dot matrix printer digital certificate SamCert; after the verification is successful, the public key in the dedicated dot matrix printer digital certificate SamCert is used to verify the second signature value T2 in the second authentication data packet PKG2; after the verification is successful, the first ciphertext EncryptText is decrypted using its own private key to obtain the plaintext, and the second random number Random2 in the second authentication data packet PKG2 is compared with the local second random number Random2 for consistency; if the two second random numbers Random2 are consistent, the printing service system completes the identity authentication of the dedicated dot matrix printer; Step S17: Use the third random number Random3 as a temporary session key in the data interaction process after the two-way identity authentication is passed.

2. The safety control method for a dedicated dot matrix printer according to claim 1, characterized in that: Before step S1, the method further includes: Issue a printing service system digital certificate SystemCert to the printing service system through a dedicated dot matrix printer management platform for authorization and authentication; Before the security chip of each authorized dedicated dot matrix printer is issued, security parameters are written into the security chip through the dedicated dot matrix printer management platform, wherein the security parameters include the dedicated dot matrix printer digital certificate SamCert and a dedicated font library.

3. The safety control method for a dedicated dot matrix printer according to claim 1, characterized in that: After the two-way identity authentication is passed, controlling the printing service system to generate a print data packet and sending the print data packet to the dedicated dot matrix printer further includes: Step S21: the printing service system generates plain text data PrintData and a current printing timestamp PrintTime according to the information to be printed; Step S22: the printing service system uses the temporary session key Random3 to encrypt the plaintext data PrintData and the current printing timestamp PrintTime to obtain a second ciphertext EncryptData; Step S23: The printing service system uses its own private key to digitally sign the second ciphertext EncryptData to obtain a third signature value T3; and sends the second ciphertext EncryptData and the third signature value T3 as a print data packet PrintPkg to the dedicated dot matrix printer.

4. The safety control method for a dedicated dot matrix printer according to claim 3, characterized in that: After receiving the print data packet, the dedicated dot matrix printer verifies the print data packet; After the verification is passed, the printing data packet is decrypted and the printing operation is performed, and finally the printing result is reported to the printing service system, which also includes: Step S31: After receiving the print data packet PrintPkg, the dedicated dot matrix printer verifies the third signature value T3 in the print data packet PrintPkg using the print service system digital certificate SystemCert, thereby determining whether the source of the print data packet PrintPkg is legal; Step S32: when it is determined that the source of the print data packet PrintPkg is legal, decrypt the print data packet PrintPkg using the temporary session key Random3 to obtain the plaintext data PrintData and the current print timestamp PrintTime; Step S33: The dedicated dot matrix printer compares the current print timestamp PrintTime with the authentication timestamp TIME to determine whether the timeliness of the print data packet PrintPkg is legal; if the current print timestamp PrintTime is later than the authentication timestamp TIME, the timeliness of the print data packet PrintPkg is determined to be legal, and the current print timestamp PrintTime is recorded in the dedicated dot matrix printer for use in determining the timeliness of the next print data packet; Step S34: when it is determined that the time validity of the print data packet PrintPkg is legal, the dedicated dot matrix printer performs a printing operation using the plain text data PrintData; Step S35: The dedicated dot matrix printer reports the printing result to the printing service system to complete the printing.

5. The safety control method for a dedicated dot matrix printer according to claim 1, characterized in that: Also includes: If the dedicated dot matrix printer needs to be deactivated or scrapped, a dedicated instruction is sent through the printing service system to erase the data in the security chip, thereby rendering the dedicated dot matrix printer inoperable; Among them, the retention time of the dedicated dot matrix printer is set in the printing service system, and the printing service system records the time when the dedicated dot matrix printer was last connected to the printing service system for use. If the dedicated dot matrix printer is not connected to the printing service system for use within the retention time starting from the last access time, it is assumed that the dedicated dot matrix printer has been disabled or scrapped, and the dedicated dot matrix printer is prohibited from being connected to the printing service system for use.

6. A safety control system for a dedicated dot matrix printer, used to implement the safety control method for a dedicated dot matrix printer according to any one of claims 1 to 5, characterized in that: The safety control system of the dedicated dot matrix printer includes a dedicated dot matrix printer management platform and a printing service system, wherein: The dedicated dot matrix printer management platform is used to control the dedicated dot matrix printer to perform two-way identity authentication with the printing service system before printing is performed by the dedicated dot matrix printer; after the two-way identity authentication is passed, the printing service system is controlled to generate a print data packet; The printing service system is used to send the printing data packet to the dedicated dot matrix printer; wherein, when the dedicated dot matrix printer receives the printing data packet, it verifies the printing data packet; after the verification is passed, the printing data packet is decrypted and the printing operation is performed, and finally the printing result is reported to the printing service system.

7. The safety control system for a dedicated dot matrix printer according to claim 6, characterized in that: The dedicated dot matrix printer has a built-in security chip, which is initialized and managed by the dedicated dot matrix printer management platform. The dedicated dot matrix printer management platform issues a digital certificate for each security chip. The security chip integrates a commercial secret algorithm. The dedicated dot matrix printer implements the following functions based on the security chip: unique identity identification, identity authentication with the print service system, secure communication with the print service system, decryption verification and key storage of print data packets, and control of the dedicated dot matrix printer to perform printing operations. The dedicated dot matrix printer management platform is responsible for the issuance and management of digital certificates, as well as the issuance and management of the dedicated dot matrix printer and security chip; The printing service system generates a printing data packet and sends it to the dedicated dot matrix printer, and records and stores the printing operation.

Images