Platform authentication and configuration loading method and device, electronic equipment and medium

Abstract

The invention discloses a platform authentication and configuration loading method and device, electronic equipment and a medium, and the method comprises the steps: generating a platform unique identifier based on a platform name of a target platform, and obtaining configuration information of the target platform in response to a configuration demand of a target object; performing multiple encryption on the platform unique identifier and the configuration information to generate a license file; the license file comprises a first public key, a key ciphertext, an identification ciphertext, a verification ciphertext and an information ciphertext; transmitting the license file to a target deployment environment, so that the target deployment environment performs multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performs consistency verification based on the verification ciphertext to obtain decryption configuration information; and carrying out platform initialization loading according to the decryption configuration information. The embodiment of the invention can safely and efficiently realize platform authentication and configuration loading, and can be widely applied to the technical field of data processing.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a platform authentication and configuration loading method, device, electronic equipment and medium. Background Art

[0002] In the field of IoT platform technology, the unique authentication of the platform and the correct loading of configuration information are the key to ensuring the safe and stable operation of the platform. In the existing IoT platform management, platform authentication and configuration are usually carried out separately, and traditional platform authentication and configuration methods often require manual modification between different environments, which not only increases the workload, but also requires practitioners to fully understand the business and have a wealth of relevant knowledge reserves, otherwise it is easy to introduce errors and affect the normal operation of the platform. Summary of the invention

[0003] The present invention proposes a platform authentication and configuration loading method, device, electronic device and medium, aiming to solve one of the technical problems in the related art at least to a certain extent. The embodiments of the present invention can realize platform authentication and configuration loading safely and efficiently.

[0004] On the one hand, an embodiment of the present invention provides a platform authentication and configuration loading method, including:

[0005] Generate a platform unique identifier based on the platform name of the target platform, and obtain configuration information of the target platform in response to the configuration requirements of the target object;

[0006] Perform multiple encryption on the platform's unique identification and configuration information to generate a license file; the license file includes the first public key, key ciphertext, identification ciphertext, verification ciphertext and information ciphertext;

[0007] The license file is transmitted to the target deployment environment, so that the target deployment environment performs multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performs consistency verification based on the verification ciphertext to obtain decryption configuration information;

[0008] Initialize and load the platform based on the decrypted configuration information.

[0009] Optionally, the method further comprises the following steps:

[0010] The configuration data of the target platform is stored in the management-side database;

[0011] The configuration data includes the platform name, configuration information, generation time and update time of the target platform, platform description pre-configured for the target platform and encryption key; the encryption key includes keys of multiple encryption algorithms.

[0012] Optionally, in response to the configuration requirement of the target object, obtaining the configuration information of the target platform includes the following steps:

[0013] In response to the target object performing an information configuration operation on all configuration items in a group configuration manner, management information of each configuration item is obtained;

[0014] Among them, the configuration items include basic license information, device management, access management, message flow, help files and front-end display style;

[0015] Based on the management information of all configuration items, the configuration information of the target platform is sorted out.

[0016] Optionally, the platform unique identifier and configuration information are multiple encrypted to generate a license file, including the following steps:

[0017] Obtaining a first key of a first encryption algorithm, a second key of a second encryption algorithm, and a third key of a third encryption algorithm preconfigured for a target platform; the first key includes a first public key and a first private key;

[0018] Based on the first private key, the second key and the third key, as well as the platform unique identifier, are sequentially encrypted using a first encryption algorithm to obtain a key ciphertext and a verification ciphertext accordingly;

[0019] Based on the second key, the first public key and the platform unique identifier are second encrypted by a second encryption algorithm to obtain an identifier ciphertext;

[0020] Based on the third key, the configuration information is subjected to a third encryption process by a third encryption algorithm to obtain a ciphertext of the information.

[0021] Optionally, performing multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performing consistency verification based on the verification ciphertext to obtain the decryption configuration information includes the following steps:

[0022] Based on the first public key, a first decryption process is performed on the key ciphertext to obtain a decryption key; the decryption key includes a hash key and a symmetric key;

[0023] Based on the first public key, a second decryption process is performed on the identification ciphertext to obtain a unique identification of the decryption platform; based on the unique identification of the decryption platform, the first public key and the decryption key are combined to generate an identification hash encryption value;

[0024] When the hash encryption value of the identifier is inconsistent with the verification ciphertext, it is determined that the license file is unavailable; otherwise,

[0025] Based on the symmetric key, the information password is subjected to a third decryption process to obtain decrypted configuration information.

[0026] Optionally, the method further comprises the following steps:

[0027] Verify the validity of the license file received by the target deployment environment.

[0028] Optionally, the decrypted configuration information includes complete information of each configuration item; performing platform initialization loading according to the decrypted configuration information includes the following steps:

[0029] In response to the call of each business module, the corresponding business module is loaded and started based on the complete information of the configuration items corresponding to each business module.

[0030] On the other hand, an embodiment of the present invention provides a platform authentication and configuration loading device, including:

[0031] The first module is used to generate a platform unique identifier based on the platform name of the target platform, and obtain configuration information of the target platform in response to the configuration requirements of the target object;

[0032] The second module is used to perform multiple encryption on the platform unique identification and configuration information to generate a license file; the license file includes the first public key, key ciphertext, identification ciphertext, verification ciphertext and information ciphertext;

[0033] The third module is used to transmit the license file to the target deployment environment, so that the target deployment environment performs multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performs consistency verification based on the verification ciphertext to obtain decryption configuration information;

[0034] The fourth module is used to initialize and load the platform according to the decrypted configuration information.

[0035] Optionally, the device further comprises:

[0036] The fifth module is used to store the configuration data of the target platform through the management side database;

[0037] The configuration data includes the platform name, configuration information, generation time and update time of the target platform, platform description pre-configured for the target platform and encryption key; the encryption key includes keys of multiple encryption algorithms.

[0038] Optionally, the device further comprises:

[0039] The sixth module is used to verify the validity of the license file received by the target deployment environment.

[0040] On the other hand, an embodiment of the present invention provides an electronic device, including: a processor and a memory; the memory is used to store programs; the processor executes the program to implement the above platform authentication and configuration loading method.

[0041] On the other hand, an embodiment of the present invention provides a computer storage medium, in which a program executable by a processor is stored. When the program executable by the processor is executed by the processor, it is used to implement the above-mentioned platform authentication and configuration loading method.

[0042] The embodiment of the present invention generates a platform unique identifier based on the platform name of the target platform, and obtains the configuration information of the target platform in response to the configuration requirements of the target object; the platform unique identifier and configuration information are multiple encrypted to generate a license file; the license file includes a first public key, a key ciphertext, an identification ciphertext, a verification ciphertext and an information ciphertext; the license file is transmitted to the target deployment environment, so that the target deployment environment performs multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performs consistency verification based on the verification ciphertext to obtain the decrypted configuration information; the platform is initialized and loaded according to the decrypted configuration information. The embodiment of the present invention uses multiple encryption for generation and verification, which ensures the security and uniqueness of the platform, and the present invention can achieve reuse under the same platform and the same configuration by importing the pre-configured configuration file into the target deployment environment, significantly reducing the workload of manual modification when deploying in different environments, while reducing the deployment cost of platform migration, reducing the errors introduced by manual deployment, and improving the deployment efficiency and portability of the platform. The embodiment of the present invention can safely and efficiently realize platform authentication and configuration loading. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] The accompanying drawings are used to provide a further understanding of the technical solution of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the technical solution of the present invention and do not constitute a limitation on the technical solution of the present invention.

[0044] Figure 1 A schematic diagram of an implementation environment for platform authentication and configuration loading provided by an embodiment of the present invention;

[0045] Figure 2 A flow chart of a platform authentication and configuration loading method provided by an embodiment of the present invention;

[0046] Figure 3 A schematic diagram of a process flow for obtaining configuration information provided by an embodiment of the present invention;

[0047] Figure 4 A schematic diagram of the expansion process of multiple encryption provided by an embodiment of the present invention;

[0048] Figure 5 A schematic diagram of the expansion process of multi-stage decryption provided by an embodiment of the present invention;

[0049] Figure 6 A schematic diagram of the overall architecture of the platform authentication and configuration loading method provided by an embodiment of the present invention;

[0050] Figure 7 A schematic diagram of a license file generation process provided in an embodiment of the present invention;

[0051] Figure 8 A schematic diagram of the license loading and verification process provided by an embodiment of the present invention;

[0052] Fig. 9 A schematic diagram of the structure of a platform authentication and configuration loading device provided by an embodiment of the present invention;

[0053] Fig.10 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0054] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0055] It should be noted that, although the functional modules are divided in the system schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the system or the order in the flowchart. The terms "first / S100", "second / S200", etc. in the specification, claims and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0056] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0057] To facilitate the understanding of the technical solution of the present invention, the technical feature terms that may appear in the embodiments of the present invention are first explained:

[0058] UUID: Universally Unique Identifier. The purpose of UUID is to allow all elements in a distributed system to have unique identification information without the need to specify identification information through a central control terminal.

[0059] RSA: RSA is a public key encryption algorithm. The security of RSA is based on the difficulty of large number factorization, that is, it is extremely difficult to decompose a large integer into two prime factors without a private key. RSA is widely used in data encryption and digital signatures.

[0060] Hmac: Hash-based Message Authentication Code, Hmac is a message authentication code algorithm based on a key and a hash function, which is used to ensure the integrity and authentication of data at the same time. Hmac works by mixing the key with the message content and generating a fixed-length authentication code through a hash function. The receiver can use the same key and hash function to verify the integrity and authentication of the message.

[0061] SHA: Secure Hash Algorithm, SHA is a series of cryptographic hash functions. The SHA family includes a variety of different hash functions that accept data of arbitrary length as input and generate a hash value of fixed length.

[0062] AES-GCM: Advanced Encryption Standard-Galois / Counter Mode, AES-GCM is an encryption mode that combines the Advanced Encryption Standard (AES) and the Galois / Counter Mode (GCM). AES is a symmetric encryption algorithm that provides keys of different lengths (such as 128 bits, 192 bits, and 256 bits). GCM is an authenticated encryption mode that provides encryption and message authentication (by generating an authentication tag). Therefore, AES-GCM can not only ensure the confidentiality of data, but also ensure the integrity and authentication of data.

[0063] IV: Initialization Vector, a random or pseudo-random value used to ensure that even if the same plaintext is encrypted with the same key, the encrypted result (ciphertext) will be different. It increases protection against replay attacks and ensures that each encryption operation is unique.

[0064] License: A legal document or authorization certificate that authorizes the holder to use, copy, distribute or modify copyrighted software, technology, data or other forms of works. In the field of software, licenses usually define the scope, duration, restrictions, and update and maintenance services that users can use the software. Licenses ensure that the rights of software developers are protected, while also providing users with a way to use the software legally. The specific content of the license varies depending on the software and application scenario.

[0065] SDK: Software Development Kit, which provides a series of development tools, dependency libraries and documentation to help users get started quickly, create, test and deploy software applications, effectively improve development efficiency and quality, and is widely used in mobile applications, cloud computing and other fields.

[0066] CA certificate: A CA certificate is a digital certificate issued by an authoritative certificate authority, which is used to identify the authenticity and integrity of an identity and ensure network communication security. It uses public and private key encryption technology to verify the server identity and prevent malicious attacks and identity masquerading. It is widely used in e-commerce, e-government and other fields.

[0067] Asymmetric encryption algorithm: It is an encryption algorithm based on a key pair (public key and private key). The public key is used to encrypt data, while the private key is used to decrypt data. Since the public key can be made public, anyone can use the public key to encrypt data, but only the person holding the private key can decrypt the data. This feature makes asymmetric encryption algorithms widely used in digital signatures, identity authentication, and data transmission security. Compared with symmetric encryption algorithms, asymmetric encryption algorithms have higher security, but the computational complexity is also relatively high.

[0068] It is understandable that the platform authentication and configuration loading method provided in the embodiment of the present invention can be applied to any computer device with data processing and computing capabilities, and this computer device can be various types of terminals or servers. When the computer device in the embodiment is a server, the server is an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. Optionally, the terminal is a smart phone, tablet computer, laptop computer, desktop computer, etc., but is not limited to this.

[0069] like Figure 1 FIG. 1 is a schematic diagram of an implementation environment provided by an embodiment of the present invention. Figure 1 The implementation environment includes at least one terminal 102 and a server 101. The terminal 102 and the server 101 can be connected to a network wirelessly or wired to complete data transmission and exchange.

[0070] Server 101 can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers. It can also be a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), as well as big data and artificial intelligence platforms.

[0071] In addition, the server 101 can also be a node server in the blockchain network. Blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, and encryption algorithm.

[0072] The terminal 102 may be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, etc., but is not limited thereto. The terminal 102 and the server 101 may be directly or indirectly connected via wired or wireless communication, which is not limited in the embodiment of the present invention.

[0073] Based on the example Figure 1 In the implementation environment shown, an embodiment of the present invention provides a platform authentication and configuration loading method. The following is an example of the platform authentication and configuration loading method being applied in the terminal 102. It can be understood that the platform authentication and configuration loading method can also be applied in the server 101.

[0074] Reference Figure 2 , Figure 2 The flowchart of the platform authentication and configuration loading method applied to the terminal provided by the embodiment of the present invention, the execution subject of the platform authentication and configuration loading method can be any of the aforementioned computer devices (including servers or terminals). Figure 2 , the method comprises the following steps:

[0075] S100, generating a platform unique identifier based on the platform name of the target platform, and obtaining configuration information of the target platform in response to the configuration requirements of the target object;

[0076] It should be noted that in some embodiments, Figure 3 As shown, in response to the configuration requirements of the target object, the configuration information of the target platform is obtained, which may include the following steps: S101, in response to the target object performing information configuration operations on all configuration items in a group configuration manner, obtaining management information of each configuration item; wherein the configuration items include basic license information, device management, access management, message flow, help files, and front-end display styles; S102, based on the management information of all configuration items, the configuration information of the target platform is sorted out.

[0077] In some embodiments, the method may further include the following steps: storing the configuration data of the target platform through a management side database; wherein the configuration data includes the platform name, configuration information, generation time and update time of the target platform, a platform description pre-configured for the target platform, and an encryption key; the encryption key includes keys of multiple encryption algorithms.

[0078] For example, in some specific implementations, the platform unique identifier can be generated by combining the platform name with the platform identifier generation module. According to the user's resource configuration and functional requirements, the platform personalized configuration information is generated. Specifically, it can be implemented as follows:

[0079] A. Generate a pair of asymmetric encryption keys for each customer platform to ensure that the keys used by each customer platform are unique. The asymmetric encryption public and private keys are stored in the management side database. The platform name is used as the unique identifier of the license to be verified and used in subsequent steps. The platform name cannot be repeated or modified. Support adding platform description information to facilitate subsequent management and tracking. Each time a platform is added, the generation time of the platform addition will be recorded, and each update will also record the update time. The platform name, platform description, generation time, update time, etc. will also be recorded in the management side database table for storage. When the platform is no longer in use, the set of records can be deleted.

[0080] B. Add detailed configuration information of the platform. The configuration items are managed by group configuration, and the configuration is divided according to the functional modules. The configuration group may include basic license information, device management, access management, message flow, help documents, front-end display style, etc. For example, the basic license information configuration group may include configuration items such as license expiration time and whether to enable verification. The device management configuration group may include configuration items such as the maximum number of registered devices, whether to support pan-protocols, SDK download addresses corresponding to different protocols, and whether to enable script parsing. The access management configuration group may include configuration items such as whether to enable two-factor authentication, login page copyright license, and whether a verification code is required for login. The message flow configuration group may include configuration items such as message push support mode, message source level, and whether to support CA certificates. The help document configuration group may include configuration items such as whether to support downloading and whether to enable identity authentication. The front-end display style configuration group may include configuration items such as portal title, page display style, menu and button display, etc. Specific configurations can be added in combination with specific businesses. All configuration information is maintained and stored in the database table on the management side.

[0081] S200, perform multiple encryption on the platform unique identification and configuration information to generate a license file;

[0082] The license file includes the first public key, key ciphertext, identification ciphertext, verification ciphertext and information ciphertext;

[0083] It should be noted that in some embodiments, Figure 4 As shown, step S200 may include the following steps: S201, obtaining a first key of a first encryption algorithm, a second key of a second encryption algorithm, and a third key of a third encryption algorithm pre-configured for the target platform; the first key includes a first public key and a first private key; S202, based on the first private key, performing a first encryption process on the second key and the third key, and the platform unique identifier in sequence through the first encryption algorithm, and correspondingly obtaining a key ciphertext and a verification ciphertext; S203, based on the second key, performing a second encryption process on the first public key and the platform unique identifier through the second encryption algorithm, and obtaining an identifier ciphertext; S204, based on the third key, performing a third encryption process on the configuration information through the third encryption algorithm, and obtaining an information ciphertext.

[0084] For example, in some specific implementations, the license file generation module can generate a personalized authentication file containing authentication information and configuration information according to the personalized identification and added configuration information. The license file is encrypted using an encryption method that combines an asymmetric encryption algorithm, a symmetric encryption algorithm, and a hash function to ensure the security and integrity of the file. The UUID is encrypted using the private key of the asymmetric encryption algorithm to obtain a UUID ciphertext (hereinafter referred to as UUIDSEC, i.e., the identification ciphertext). The license file can be divided into four parts:

[0085] The first part is the public key of the asymmetric encryption algorithm (ie, the first public key).

[0086] The second part is the ciphertext, which is used to encrypt the hash function and the key of the symmetric encryption algorithm using the private key of the asymmetric encryption algorithm (i.e., key ciphertext).

[0087] The third part is the ciphertext, which uses a hash function to encrypt the key of the symmetric encryption algorithm, the public key of the asymmetric encryption algorithm, and the platform name number UUID (i.e., verification ciphertext).

[0088] The fourth part is the ciphertext, which uses a symmetric encryption algorithm to encrypt platform information, including platform configuration, platform name, license generation time and other information (i.e., information ciphertext).

[0089] S300, transmitting the license file to the target deployment environment, so that the target deployment environment performs multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performs consistency verification based on the verification ciphertext to obtain decryption configuration information;

[0090] It should be noted that in some embodiments, Figure 5As shown, performing multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performing consistency verification based on the verification ciphertext to obtain the decryption configuration information may include the following steps: S301, performing a first decryption process on the key ciphertext based on the first public key to obtain a decryption key; the decryption key includes a hash key and a symmetric key; S302, performing a second decryption process on the identification ciphertext based on the first public key to obtain a unique identifier of the decryption platform; generating an identification hash encryption value based on the unique identifier of the decryption platform combined with the first public key and the decryption key; S303, when the identification hash encryption value is inconsistent with the verification ciphertext, determining that the license file is unavailable; otherwise, S304, performing a third decryption process on the information ciphertext based on the symmetric key to obtain the decryption configuration information.

[0091] For example, in some specific implementations, the license can be parsed by a license file parsing module, which can be implemented as follows:

[0092] A. First, check whether the license file is imported correctly, and then divide the imported license into four parts and parse them one by one. The first part is the asymmetric public key used for encryption (ie, the first public key).

[0093] B. Use the asymmetric public key in the first part to parse the ciphertext in the second part. The obtained part can be called LicenseFirstSec (i.e., decryption key), which contains the key of the symmetric encryption algorithm and the key of the hash algorithm used for encryption.

[0094] C. Use the asymmetric key public key in the first part to decrypt the UUIDSEC written in the deployment environment to obtain its corresponding original UUID (i.e., the unique identifier of the decrypted platform). Based on this UUID, combined with the asymmetric key public key and LicenseFirstSec, regenerate the encrypted value of the UUID (i.e., the identifier hash encryption value), and compare it with the ciphertext in the third part. If the two are consistent, it is considered to be the same platform and the identity verification is successful. If they are inconsistent, it is considered that the certificate of another platform has been imported, the identity verification fails, the certificate parsing fails, and the platform cannot be used.

[0095] D. Use the symmetric key in LicenseFirstSec to decrypt the fourth part of the ciphertext to obtain the platform configuration information.

[0096] In some embodiments, the method may further include the following steps: verifying the validity of the license file received by the target deployment environment.

[0097] For example, in some specific implementations, the validity and effectiveness of the license can be verified by a validity verification module, which can be implemented as follows:

[0098] After the license is imported and parsed, the gateway calls the validity verification module to verify the validity of the license each time the user logs in to the platform. If the license of other platforms is imported, or the license decryption fails, or the license has expired, the license is considered illegal and the platform cannot be logged in. If the verification passes, it means that the platform has passed the authentication and can be logged in and used normally. The validity verification restrictions can be expanded according to specific business requirements to meet the final needs. After the license is imported for the first time, if it is not modified, it will not need to be imported later until the license is modified or expires.

[0099] S400: Initialize and load the platform according to the decrypted configuration information.

[0100] It should be noted that the decrypted configuration information includes complete information of each configuration item; in some embodiments, step S400 may include the following steps: in response to the call of each business module, the corresponding business module is loaded and started based on the complete information of the configuration item corresponding to each business module.

[0101] For example, in some specific implementations, the platform personalized configuration can be read through the configuration information loading module to complete the platform initialization. Specifically, it can be implemented as follows:

[0102] After the platform passes the authentication, the configuration information is extracted from the license file and automatically loaded into the platform. Configuration items are managed in groups. The configuration information loading module stores the complete information of each decrypted configuration item. Each business module calls the configuration information loading module to obtain the group configuration of this module in the platform personalized configuration and loads it, completing the loading and startup of the personalized configuration of the business, ensuring that the platform can operate normally in different environments.

[0103] In order to explain the principle of the technical solution of the present invention in detail, the overall process of the present invention is described below in combination with some specific embodiments. It is easy to understand that the following is an explanation of the technical principle of the present invention and cannot be regarded as a limitation of the present invention.

[0104] First of all, it should be noted that, based on the relevant shortcomings of the prior art, it is of great practical significance to develop a method that can automatically perform platform authentication and complete configuration information loading at the same time. In view of this, the present invention provides an Internet of Things platform multi-environment authentication and automatic configuration loading method (i.e., platform authentication and configuration loading method). In some specific implementation scenarios, the embodiments of the present invention can be implemented as follows: Figure 6The overall architecture shown implements the multi-environment authentication and configuration automatic loading method of the Internet of Things platform. The architecture includes a platform identification generation module, a license file generation module, a license file parsing module, a validity verification module and a configuration information loading module, which can simultaneously manage multiple configuration licenses corresponding to multiple platforms.

[0105] When a new platform needs to be deployed, the management personnel first generate a license containing platform-specific configuration information through the platform identification generation module and the license file generation module. The license generation is completed before the platform is deployed. The following steps are summarized as follows: Figure 7 As shown:

[0106] 1. The platform identification generation module generates a unique platform identification based on the platform name. It generates personalized platform configuration information based on the user's resource configuration and functional requirements.

[0107] A. Generate a pair of asymmetric encryption keys for each customer platform to ensure that the keys used by each customer platform are unique. The asymmetric encryption public and private keys are stored in the management side database. The platform name is used as the unique identifier of the license to be verified and used in subsequent steps. The platform name cannot be repeated or modified. Support adding platform description information to facilitate subsequent management and tracking. Each time a platform is added, the generation time of the platform addition will be recorded, and each update will also record the update time. The platform name, platform description, generation time, update time, etc. will also be recorded in the management side database table for storage. When the platform is no longer in use, the set of records can be deleted.

[0108] B. Add detailed configuration information of the platform. The configuration items are managed by group configuration, and the configuration is divided according to the functional modules. The configuration group may include basic license information, device management, access management, message flow, help documents, front-end display style, etc. For example, the basic license information configuration group may include configuration items such as license expiration time and whether to enable verification. The device management configuration group may include configuration items such as the maximum number of registered devices, whether to support pan-protocols, SDK download addresses corresponding to different protocols, and whether to enable script parsing. The access management configuration group may include configuration items such as whether to enable two-factor authentication, login page copyright license, and whether a verification code is required for login. The message flow configuration group may include configuration items such as message push support mode, message source level, and whether to support CA certificates. The help document configuration group may include configuration items such as whether to support downloading and whether to enable identity authentication. The front-end display style configuration group may include configuration items such as portal title, page display style, menu and button display, etc. Specific configurations can be added in combination with specific businesses. All configuration information is maintained and stored in the database table on the management side.

[0109] 2. The license file generation module generates a personalized authentication file containing authentication information and configuration information based on the personalized identification and added configuration information. The license file is encrypted using an asymmetric encryption algorithm, a symmetric encryption algorithm, and a hash function to ensure the security and integrity of the file. The UUID is encrypted using the private key of the asymmetric encryption algorithm to obtain the UUID ciphertext (hereinafter referred to as UUIDSEC). The license file can be divided into four parts:

[0110] The first part is the public key of the asymmetric encryption algorithm.

[0111] The second part is the ciphertext, which is encrypted by the private key of the asymmetric encryption algorithm to encrypt the key of the hash function and the symmetric encryption algorithm.

[0112] The third part is the ciphertext, which encrypts the key of the symmetric encryption algorithm, the public key of the asymmetric encryption algorithm, and the platform name number UUID through a hash function.

[0113] The fourth part is the ciphertext, which uses a symmetric encryption algorithm to encrypt platform information, including platform configuration, platform name, license generation time, and other information.

[0114] The following examples are for reference; the encryption algorithm can be replaced based on actual needs.

[0115] The platform name and UUID correspond one to one. The UUID is encrypted using the RSA-2048 private key, and the generated UUID ciphertext (UUIDSEC) is recorded for subsequent use.

[0116] The license content consists of the following:

[0117] The first part is the RSA-2048 public key.

[0118] The second part is the ciphertext, which is encrypted by RSA-2048 private key to encrypt the HmacSHA256 key, AES-GCM key, and AES-GCM IV.

[0119] The third part is the ciphertext, which encrypts the RSA-2048 public key, the AES-GCM key, the AES-GCM IV, and the UUID generated for each platform name using HmacSHA256.

[0120] The fourth part is the ciphertext, which uses the AES-GCM key and AES-GCM IV to encrypt the platform information, including platform configuration, platform name, license generation time, and other information.

[0121] The generated file can be exported with one click and imported when the platform is deployed later. It can be used after verification. At the same time, the platform information and certificate information will be maintained in the management-side database table for retention, and the system operation and management personnel will manage it in a unified manner. When a platform needs to modify the configuration information, such as renewing the license after expiration, increasing the maximum number of registered devices, etc., it is necessary to regenerate and export a new license after completing the configuration modification. The platform name and UUID corresponding to the new license remain unchanged.

[0122] When a platform is newly deployed or migrated, the platform name and UUID correspond one-to-one. For security reasons, the plaintext UUID will not be directly exposed. The UUIDSEC of the platform recorded when the platform license is generated will be written to the platform deployment environment. When the platform is started, the generated license will be imported into the corresponding platform. The platform deployment is completed through the license file parsing module, validity verification module and configuration information loading module, such as Figure 8 As shown:

[0123] 1. The license file parsing module parses the license.

[0124] A. First, check whether the license file is imported correctly, and then divide the imported license into four parts and parse them one by one. The first part is the asymmetric public key used for encryption.

[0125] B. Use the asymmetric public key in the first part to parse the ciphertext in the second part. The obtained part can be called LicenseFirstSec, which contains the key of the symmetric encryption algorithm and the key of the hash algorithm used for encryption.

[0126] C. Use the asymmetric key public key in the first part to decrypt the UUIDSEC written in the deployment environment to obtain its corresponding original UUID. Based on this UUID combined with the asymmetric key public key and LicenseFirstSec, regenerate the encrypted value of the UUID and compare it with the ciphertext in the third part. If the two are consistent, it is considered to be the same platform and the identity verification is successful. If they are inconsistent, it is considered that the certificate of another platform has been imported, the identity verification fails, the certificate parsing fails, and the platform cannot be used.

[0127] D. Use the symmetric key in LicenseFirstSec to decrypt the fourth part of the ciphertext to obtain the platform configuration information.

[0128] Specifically, the license generated in the above example can be decoded in the following way.

[0129] A. First, check whether the license file is imported correctly, and then divide the imported license into four parts and parse them one by one. The first part is the RSA-2048 public key used for encryption.

[0130] B. Use the RSA-2048 public key in the first part to parse the ciphertext in the second part. The resulting part can be called LicenseFirstSec, which contains the HmacSHA256 key used for encryption, the AES-GCM key, and the AES-GCM IV.

[0131] C. Use the RSA-2048 public key in the first part to decrypt the UUIDSEC written in the deployment environment to obtain its corresponding original UUID. Based on this UUID, combine the RSA-2048 public key and the HmacSHA256 key, AES-GCM key, and AES-GCM IV in LicenseFirstSec to regenerate the encrypted value of the UUID and compare it with the ciphertext in the third part. If the two are consistent, it is considered that they are the same platform and the identity verification is successful. If they are inconsistent, it is considered that the certificate of another platform has been imported, the identity verification fails, the certificate parsing fails, and the platform cannot be used.

[0132] D. Use the AES-GCM key and AES-GCM IV in LicenseFirstSec to decrypt the fourth part of the ciphertext to obtain the platform configuration information, including platform configuration, platform name, License generation time and other information.

[0133] Convert UUIDSEC and License itself into strings and store them in the client-side database. Store the parsed platform name in the client-side database for subsequent use. When updating the certificate, modify this record and record the modification time.

[0134] 2. The validity verification module verifies the legitimacy and validity of the license.

[0135] After the license is imported and parsed, the gateway calls the validity verification module to verify the validity of the license each time the user logs in to the platform. If the license of other platforms is imported, or the license decryption fails, or the license has expired, the license is considered illegal and the platform cannot be logged in. If the verification passes, it means that the platform has passed the authentication and can be logged in and used normally. The validity verification restrictions can be expanded according to specific business requirements to meet the final needs. After the license is imported for the first time, if it is not modified, it will not need to be imported later until the license is modified or expires.

[0136] 3. The configuration information loading module reads the platform personalized configuration and completes the platform initialization.

[0137] After the platform passes the authentication, the configuration information is extracted from the license file and automatically loaded into the platform. Configuration items are managed in groups. The configuration information loading module stores the complete information of each decrypted configuration item. Each business module calls the configuration information loading module to obtain the group configuration of this module in the platform personalized configuration and loads it, completing the loading and startup of the personalized configuration of the business, ensuring that the platform can operate normally in different environments.

[0138] In summary, the present invention integrates and optimizes the platform authentication and configuration loading methods when different platforms of the Internet of Things are deployed, aiming at actual usage scenarios, and designs a multi-environment authentication and configuration automatic loading method for the Internet of Things platform. Generate a personalized license file before deployment, and automatically load and apply the platform personalized configuration information contained in the license file while completing the platform authentication during deployment, including file path, service port, protocol support, function control, etc. The license file is generated and verified by combining asymmetric encryption algorithms, symmetric encryption algorithms, hash algorithms and other encryption algorithms, ensuring the security and uniqueness of the platform. The license can be reused under the same configuration on the same platform, significantly reducing the workload of manual modification when deployed in different environments, while reducing the deployment cost of platform migration, reducing errors introduced by manual deployment, and improving the deployment efficiency and portability of the platform. The present invention has a wide range of application scenarios and can be applied to personalized deployment scenarios of various types of platforms in the field of the Internet of Things.

[0139] Specifically, the method of the present invention can be applied to the perception cloud platform, and the method of the present invention supports multi-environment deployment and migration services of various platforms in the field of the Internet of Things; the present invention is easy to implement and promote, and can be extended to other systems, including but not limited to: traditional telecommunications industry, smart cities, smart life, etc.

[0140] Compared with the prior art, the present invention has at least the following beneficial effects:

[0141] 1. Using the license file as the synchronization medium realizes the flexible use of the license file. The license not only contains the traditional licensing information, but also adds the personalized configuration information of the platform. When the platform starts, it can automatically verify and load the application configuration, realize automatic and accurate synchronization of authentication and configuration information, improve the automation and accuracy of deployment, significantly reduce the workload during deployment, and improve the portability of the platform.

[0142] 2. Automatically loading configuration information reduces the technical requirements for operators and reduces platform failures caused by configuration errors. When migrating between different environments, the platform does not need to rely on manual operations or complex scripts, and does not need to invest a lot of manpower in manual configuration and verification. More resources can be invested in business development and innovation, reducing manual intervention and costs and improving platform maintenance efficiency.

[0143] 3. The license file is encrypted by combining asymmetric encryption algorithms, symmetric encryption algorithms, hash algorithms and other encryption algorithms to ensure the uniqueness of the license file and prevent illegal copying and tampering.

[0144] 4. Through the generation and verification of license files, full-process supervision is achieved. The legitimacy and integrity of the configuration can be automatically verified simultaneously during the process of realizing the unique identity authentication of the platform, thereby improving the security of platform operation.

[0145] 5. When the management side generates a license, the complete information of each platform is automatically stored, and there is no need for repeated maintenance. Each customer side only stores necessary operation information, effectively reducing the mutual impact between customers and achieving effective management of multiple platforms.

[0146] On the other hand, Fig. 9 As shown, the embodiment of the present invention provides a platform authentication and configuration loading device 900, which may include:

[0147] The first module 901 is used to generate a platform unique identifier based on the platform name of the target platform, and obtain configuration information of the target platform in response to the configuration requirements of the target object;

[0148] The second module 902 is used to perform multiple encryption on the platform unique identification and configuration information to generate a license file; the license file includes a first public key, a key ciphertext, an identification ciphertext, a verification ciphertext and an information ciphertext;

[0149] The third module 903 is used to transmit the license file to the target deployment environment, so that the target deployment environment performs multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performs consistency verification based on the verification ciphertext to obtain decryption configuration information;

[0150] The fourth module 904 is used to perform platform initialization loading according to the decrypted configuration information.

[0151] In some embodiments, the apparatus may further include:

[0152] The fifth module is used to store the configuration data of the target platform through the management side database;

[0153] The configuration data includes the platform name, configuration information, generation time and update time of the target platform, platform description pre-configured for the target platform and encryption key; the encryption key includes keys of multiple encryption algorithms.

[0154] In some embodiments, the apparatus may further include:

[0155] The sixth module is used to verify the validity of the license file received by the target deployment environment.

[0156] The contents of the method embodiments of the present invention are all applicable to the device embodiments. The functions specifically implemented by the device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0157] On the other hand, an embodiment of the present invention further provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above sensitive information method when executing the computer program. The electronic device can be any intelligent terminal including a tablet computer, a car computer, etc.

[0158] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0159] like Fig.10 As shown, Fig.10 A specific example of the hardware structure of an electronic device 1000 according to an embodiment is shown. The electronic device 1000 includes:

[0160] The processor 1001 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present invention.

[0161] The memory 1002 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 1002 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 1002, and the processor 1001 calls and executes the network node population optimization method of the embodiment of the present invention;

[0162] Input / output interface 1003, used to implement information input and output;

[0163] The communication interface 1004 is used to realize the communication interaction between the device and other devices. The communication can be realized through a wired manner (such as USB, network cable, etc.) or a wireless manner (such as mobile network, WIFI, Bluetooth, etc.);

[0164] A bus 1005 , which transmits information between various components of the device (e.g., the processor 1001 , the memory 1002 , the input / output interface 1003 , and the communication interface 1004 );

[0165] The processor 1001 , the memory 1002 , the input / output interface 1003 and the communication interface 1004 are connected to each other in communication within the device via the bus 1005 .

[0166] The electronic device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0167] The contents of the method embodiments of the present invention are all applicable to the electronic device embodiments. The functions specifically implemented by the electronic device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0168] Another aspect of an embodiment of the present invention further provides a computer-readable storage medium, wherein the storage medium stores a program, and the program is executed by a processor to implement the above method.

[0169] It should be noted that the computer-readable medium shown in the embodiment of the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, an optical fiber, a portable compact disk read-only memory (Compact Disc Read to Only Memory, CD to ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer readable signal media may also be any computer readable medium other than computer readable storage media, which may send, propagate, or transmit programs for use by or in conjunction with an instruction execution system, apparatus, or device. The program code contained on the computer readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0170] The contents of the method embodiments of the present invention are all applicable to the computer-readable storage medium embodiments. The functions specifically implemented by the computer-readable storage medium embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0171] The embodiment of the present invention also discloses a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. A processor of a computer device can read the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes the above method.

[0172] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0173] It should be noted that, although several modules of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to an embodiment of the present invention, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into being embodied by multiple modules or units.

[0174] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present invention can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD to ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a touch terminal, or a network device, etc.) to execute the method according to the implementation of the present invention.

[0175] In some selectable embodiments, the function / operation mentioned in the block diagram may not occur in the order mentioned in the operation diagram. For example, depending on the function / operation involved, the two boxes shown in succession can actually be executed substantially simultaneously or the boxes can sometimes be executed in reverse order. In addition, the embodiment presented and described in the flow chart of the present invention is provided by way of example, for the purpose of providing a more comprehensive understanding of technology. The disclosed method is not limited to the operation and logic flow presented herein. Selectable embodiments are expected, wherein the order of various operations is changed and the sub-operation of a part for which is described as a larger operation is performed independently.

[0176] In addition, although the present invention is described in the context of functional modules, it should be understood that, unless otherwise specified, one or more of the functions and / or features can be integrated into a single physical device and / or software module, or one or more functions and / or features can be implemented in a separate physical device or software module. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the present invention. More specifically, in view of the properties, functions and internal relationships of the various functional modules in the device disclosed herein, the actual implementation of the module will be understood within the conventional skills of the engineer. Therefore, those skilled in the art can implement the present invention set forth in the claims without excessive experimentation using ordinary techniques. It is also understood that the specific concepts disclosed are merely illustrative and are not intended to limit the scope of the present invention, which is determined by the full scope of the appended claims and their equivalents.

[0177] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0178] The logic and / or steps represented in the flowchart or otherwise described herein, for example, may be considered as an ordered list of executable instructions for implementing logical functions, and may be embodied in any computer-readable medium for use by an instruction execution device, apparatus or device (such as a computer-based device, a device including a processor, or other device that can fetch instructions from an instruction execution device, apparatus or device and execute the instructions), or in conjunction with such instruction execution device, apparatus or device. For purposes of this specification, "computer-readable medium" may be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution device, apparatus or device, or in conjunction with such instruction execution device, apparatus or device.

[0179] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0180] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution device. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0181] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0182] Although the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the claims and their equivalents.

[0183] The above is a specific description of the preferred implementation of the present invention, but the present invention is not limited to the embodiments. Those skilled in the art can make various equivalent modifications or substitutions without violating the spirit of the present invention. These equivalent modifications or substitutions are all included in the scope defined by the claims of the present invention.

Claims

1. A platform authentication and configuration loading method, characterized in that: The following steps are involved: Generate a platform unique identifier based on the platform name of the target platform, and obtain configuration information of the target platform in response to a configuration requirement of the target object; The platform unique identifier and the configuration information are multiple-encrypted to generate a license file; the license file includes a first public key, a key ciphertext, an identifier ciphertext, a verification ciphertext and an information ciphertext; The license file is transmitted to a target deployment environment, so that the target deployment environment performs multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performs consistency verification based on the verification ciphertext to obtain decryption configuration information; The platform is initialized and loaded according to the decrypted configuration information.

2. The platform authentication and configuration loading method according to claim 1, characterized in that: The method further comprises the following steps: Storing the configuration data of the target platform through a management-side database; The configuration data includes the platform name, the configuration information, the generation time and update time of the target platform, the platform description pre-configured for the target platform and an encryption key; the encryption key includes keys of multiple encryption algorithms.

3. The platform authentication and configuration loading method according to claim 1, characterized in that: The step of obtaining the configuration information of the target platform in response to the configuration requirement of the target object comprises the following steps: In response to the target object performing an information configuration operation on all configuration items in a group configuration manner, obtaining management information of each of the configuration items; The configuration items include basic license information, device management, access management, message flow, help files and front-end display style; Based on the management information of all the configuration items, the configuration information of the target platform is sorted out.

4. The platform authentication and configuration loading method according to claim 1, characterized in that: The method of multiple-encrypting the platform unique identifier and the configuration information to generate a license file includes the following steps: Acquire a first key of a first encryption algorithm, a second key of a second encryption algorithm, and a third key of a third encryption algorithm preconfigured for the target platform; the first key includes the first public key and a first private key; Based on the first private key, the second key and the third key, and the platform unique identifier are sequentially subjected to a first encryption process by using the first encryption algorithm to obtain the key ciphertext and the verification ciphertext accordingly; Based on the second key, performing a second encryption on the first public key and the platform unique identifier by using the second encryption algorithm to obtain the identifier ciphertext; Based on the third key, the configuration information is subjected to a third encryption process by using the third encryption algorithm to obtain the information ciphertext.

5. The platform authentication and configuration loading method according to claim 1, characterized in that: The step of performing multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performing consistency verification based on the verification ciphertext to obtain decryption configuration information comprises the following steps: Based on the first public key, performing a first decryption process on the key ciphertext to obtain a decryption key; the decryption key includes a hash key and a symmetric key; Based on the first public key, a second decryption process is performed on the identification ciphertext to obtain a unique identification of the decryption platform; based on the unique identification of the decryption platform, the first public key and the decryption key are combined to generate an identification hash encryption value; When the identification hash encryption value is inconsistent with the verification ciphertext, it is determined that the license file is unavailable; otherwise, Based on the symmetric key, a third decryption process is performed on the information password to obtain the decryption configuration information.

6. The platform authentication and configuration loading method according to claim 1, characterized in that: The method further comprises the following steps: The validity of the license file received by the target deployment environment is verified.

7. The platform authentication and configuration loading method according to claim 1, characterized in that: The decrypted configuration information includes complete information of each configuration item; the platform initialization loading according to the decrypted configuration information includes the following steps: In response to the call of each business module, the corresponding business module is loaded and started based on the complete information of the configuration item corresponding to each business module.

8. A platform authentication and configuration loading device, characterized in that: include: The first module is used to generate a platform unique identifier based on the platform name of the target platform, and obtain configuration information of the target platform in response to the configuration requirements of the target object; The second module is used to perform multiple encryption on the platform unique identifier and the configuration information to generate a license file; the license file includes a first public key, a key ciphertext, an identifier ciphertext, a verification ciphertext and an information ciphertext; A third module is used to transmit the license file to a target deployment environment, so that the target deployment environment performs multi-segment decryption on the key ciphertext, the identification ciphertext and the information ciphertext based on the first public key and performs consistency verification based on the verification ciphertext to obtain decryption configuration information; The fourth module is used to perform platform initialization loading according to the decrypted configuration information.

9. An electronic device, characterized in that: including a processor and a memory; The memory is used to store programs; The processor executes the program to implement the method according to any one of claims 1 to 7.

10. A computer storage medium storing a program executable by a processor, characterized in that: The program executable by the processor is used to implement the method according to any one of claims 1 to 7 when executed by the processor.

Images