Method and system for protecting data security of ATE equipment

Abstract

The invention provides a method and system for protecting data security of ATE equipment, and the method comprises the steps: generating a temporary session key by a test system before test data transmission starts, and exchanging the temporary session key with a data receiver through a secure channel; performing multi-layer encryption on the original test data by using the temporary session key; sending the encrypted test data to a data receiver through a secure channel; and the data receiver decrypts the encrypted test data by using the temporary session key to obtain the original test data. A dynamic key exchange and multi-layer encryption strategy is introduced, data can be prevented from being accessed or tampered by an unauthorized user in the transmission and storage process, the safety and reliability of a test system are greatly improved, test failures caused by data tampering or system faults are reduced, and the test efficiency is improved. And the quality control efficiency of the electronic equipment in the production process is improved to the greatest extent.

Description

Technical Field

[0001] The present invention relates to the field of automatic test equipment, and in particular to a method and system for protecting data security of ATE equipment. Background Art

[0002] ATE equipment (Automatic Test Equipment) is a kind of equipment widely used in the production and testing of electronic equipment, which can ensure that the product can operate normally before leaving the factory. As the complexity of electronic equipment increases, the requirements for the security of test data and system reliability of ATE equipment are getting higher and higher. However, current ATE equipment often lacks sufficient protection measures when facing test data tampering, system failures and security threats, which affects the accuracy of test results and the availability of test systems. Solutions in the prior art, such as basic data encryption and simple redundant design, are usually unable to cope with data leakage, system crashes and other security issues in complex environments. Summary of the invention

[0003] In view of this, the present application proposes a method and system for protecting the data security of ATE equipment. The specific scheme is as follows:

[0004] In a first aspect, a method for protecting data security of an ATE device is proposed, including connecting a test system of the ATE device and a data receiver; the method includes:

[0005] Before the test data transmission begins, the test system generates a temporary session key and exchanges the temporary session key with the data receiver through a secure channel;

[0006] Use temporary session keys to encrypt the original test data in multiple layers;

[0007] Send the encrypted test data to the data receiver through a secure channel;

[0008] The data receiver uses the temporary session key to decrypt the encrypted test data to obtain the original test data.

[0009] In some specific embodiments, generating a temporary session key includes:

[0010] Obtaining hardware information of the ATE device, and / or current system time, and / or current environment variables to obtain basic data;

[0011] Generate an initial random number sequence based on basic data; encrypt the initial random number sequence using a preset encryption algorithm to obtain an initial key;

[0012] The strength of the initial key is evaluated. When the strength of the initial key is less than a preset value, the initial random number sequence is encrypted again using a preset encryption algorithm.

[0013] When the strength of the initial key is greater than a preset value, the initial key is determined to be a temporary session key.

[0014] The preset encryption algorithm may be an AES algorithm (Advanced Encryption Standard, which is a symmetric encryption algorithm).

[0015] In some specific embodiments, a monitoring system is also included, and the test system is also provided with a backup system accordingly; the method further includes:

[0016] During the test data transmission process, the system parameters of the ATE equipment are collected in real time, and the obtained system parameters are transmitted to the monitoring system; the system parameters include voltage, and / or current, and / or temperature;

[0017] The monitoring system detects system parameters through a preset machine learning algorithm;

[0018] When an anomaly is detected in the system parameters, the test system automatically triggers an alarm and initiates preset protection measures, which include pausing the test or switching to a backup system.

[0019] In some specific embodiments, the test system includes a plurality of operating modules, and the backup system is provided with at least one backup module corresponding to each operating module; the method includes:

[0020] During the process of the test system executing the test data transmission task, synchronously running the backup system;

[0021] When a fault is detected in the test system, determining the operating module of the test system where the fault is located;

[0022] Switch the test data transmission task on the test system from the running module with the fault to the backup module of the corresponding running module in the backup system for execution;

[0023] When it is detected that the fault repair is completed, the test data transmission task on the test system is switched from the backup module to the running module corresponding to the backup module in the test system for execution.

[0024] In actual applications, when the test data transmission task is running on the test system, the detection of the test system operation process is a continuous and uninterrupted detection. It can make it possible to switch the test data transmission task on the test system in the shortest time after a fault occurs and after the fault is repaired, so as to ensure the normal operation of the test data transmission task.

[0025] In some specific embodiments, a plurality of user roles are preset in the test system, and each user role corresponds to user rights; the method further includes:

[0026] Before the test data transmission begins, the user logs in to the test system and performs the first level of identity authentication to verify the password entered by the user;

[0027] When the password entered by the user is correct, a second level of identity authentication is performed to verify the user's biometric information;

[0028] When the user's biological information is correct, the correspondence between the user and the user role is completed, and the user is granted the user rights corresponding to the user role.

[0029] By setting up two-factor authentication, a higher level of protection can be provided for the test system, ensuring that only authorized users can access and operate the test system. In actual applications, multiple levels of user permissions are preset, and different levels of user permissions cover different operational scopes for the test system. Users can only operate the test system within the scope of user permissions corresponding to their own user roles.

[0030] In some specific embodiments, the biometric information includes the user's fingerprint information, and / or facial information, and / or iris information, and / or voiceprint information.

[0031] In some specific embodiments, verifying the user's biometric information includes:

[0032] Obtain multiple biometric information of the user, and screen and correspond different biometric information in a preset user database;

[0033] When the corresponding user's biometric information does not exist in the user database, the user authentication fails and the user is prompted to re-enter the second level of identity authentication;

[0034] When part of the corresponding user's biometric information exists in the user database, the user is prompted to re-enter the unmatched type of biometric information or re-enter the second level of identity authentication;

[0035] When the user data may contain the biometric information of all corresponding users, it is prompted that the user's biometric information is correct.

[0036] In actual applications, by verifying the user's multiple biometric information in the second-factor identity authentication, multiple verifications are actually further included. For example, when fingerprint information and facial information need to be verified at the same time, if one of them matches accurately and the other matches inaccurately, the user will not be able to complete the second-factor identity authentication. This further improves the reliability of identity authentication, prevents unauthorized persons from entering the system by forging information or data, and can effectively increase the difficulty of intrusion by unauthorized persons.

[0037] In some specific embodiments, it also includes:

[0038] Recording the time and number of times the user performs the first identity authentication and the second identity authentication, and generating an alarm when the difference between the number of times the user performs the first identity authentication and the second identity authentication is greater than a preset value;

[0039] An alert is sent to the superior user role of the user role logged in by the user, and / or the user role logged in by the user is temporarily locked until the superior user role unlocks the user role.

[0040] In actual applications, by recording the time and number of double identity authentication, abnormal user login situations can be effectively identified. When the difference between the number of times a user performs the first identity authentication and the second identity authentication is greater than the preset value, it means that the user's identity is in doubt. At this time, the user's login operation is identified as a suspicious operation, and an alarm is generated based on the data information of the user's suspicious operation. The alarm includes the user's login time, the number of times the user logs in, and the data of the user's identity failure. By sending an alarm to the superior user role corresponding to the user role that the user plans to log in, the superior user role with greater user authority and management authority over the user role can quickly obtain relevant information about ATE equipment data and user's suspicious operations, and effectively process them to resolve potential external intrusion risks.

[0041] In actual applications, an alert is sent to the parent user role of the user role that the user is logging in to, and the user role that the user is logging in to is temporarily locked. There are also multiple unlocking mechanisms at different levels:

[0042] In the primary unlocking mechanism, when a user role corresponds to multiple superior user roles with the same user authority level, an alarm will be randomly sent to one or more superior user roles corresponding to the user role that the user wants to log in. When a release signal is received from one of the superior user roles, the lock on the user role is unlocked;

[0043] In the advanced unlocking mechanism, when a user role corresponds to multiple superior user roles with the same user authority level, an alarm will be sent to all superior user roles corresponding to the user role that the user wants to log in. When the release signals of all or a preset number of superior user roles are received, the user role will be unlocked.

[0044] In actual applications, the primary unlocking mechanism is applicable to user roles with lower user permissions, and the advanced unlocking mechanism is applicable to user roles with greater user permissions; the superior user role corresponding to the user role may refer to a superior user role whose user permissions are one or more levels higher than the user role.

[0045] A data security system for ATE equipment, applicable to any one of the methods for protecting data security of ATE equipment in the aforementioned technical solutions, comprising:

[0046] A data security module, which is used to enable the test system to generate a temporary session key and use the temporary session key to perform multi-layer encryption on the test data;

[0047] A test system, the test system is used to send the encrypted test data to a data receiver through a secure channel;

[0048] The data receiver is used to decrypt the encrypted test data using the temporary session key to obtain the original test data;

[0049] Backup system: The backup system corresponds to the test system setting and is used to run simultaneously with the test system;

[0050] The emergency switching module is used to determine the operating module of the detection system where the fault is located when a fault is detected in the test system; switch the test data transmission task on the test system from the operating module with the fault to the backup module of the corresponding operating module in the backup system for operation; when it is detected that the fault repair is completed, switch the test data transmission task on the test system from the backup module to the operating module of the corresponding backup module in the test system for operation;

[0051] The test system and the backup system are respectively connected to the data receiver through a secure channel, and the data security module, the emergency switching module, the test system and the backup system are respectively connected to the ATE equipment.

[0052] In some specific embodiments, sensors, monitoring systems and user rights management modules are also included:

[0053] There are one or more sensors, which are respectively connected to the ATE device and the monitoring system, and are used to collect system parameters of the ATE device in real time and transmit the obtained system parameters to the monitoring system; the monitoring system is connected to the test system, and is used to detect the system parameters through a preset machine learning algorithm;

[0054] The user authority management module is connected to the test system, and the user authority management module includes a first verification module and a second verification module. The first verification module is used to perform a first identity authentication to verify the password input by the user; the second verification module is used to perform a second identity authentication to verify the user's biometric information.

[0055] Beneficial effects: The present application proposes a method and system for protecting the data security of ATE equipment. By introducing a dynamic key exchange and multi-layer encryption strategy, it can prevent data from being accessed or tampered with by unauthorized users during transmission and storage, greatly improving the security and reliability of the test system, reducing test failures caused by data tampering or system failures, and maximizing the quality control efficiency of electronic equipment in the production process. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0057] Figure 1 It is a schematic diagram of the specific steps in this application;

[0058] Figure 2 This is a schematic diagram of some of the steps in this application;

[0059] Figure 3 This is a schematic diagram of some of the steps in this application;

[0060] Figure 4 This is a schematic diagram of some of the steps in this application;

[0061] Figure 5 This is a schematic diagram of some of the steps in this application;

[0062] Figure 6 This is a schematic diagram of some of the steps in this application;

[0063] Figure 7 This is a schematic diagram of some of the steps in this application;

[0064] Figure 8 Schematic diagram of the connection relationship between the modules of the system in this application.

[0065] Figure numerals: 1-ATE equipment; 2-test system; 3-data receiver; 4-backup system; 5-data security module; 6-user authority management module; 7-sensor; 8-monitoring system; 9-emergency switching module. DETAILED DESCRIPTION

[0066] Hereinafter, various embodiments disclosed in the present application will be described more fully. The present application may have various embodiments, and adjustments and changes may be made therein. However, it should be understood that there is no intention to limit the various embodiments disclosed in the present application to the specific embodiments disclosed herein, but the present application should be understood to cover all adjustments, equivalents and / or alternatives falling within the spirit and scope of the various embodiments disclosed in the present application.

[0067] The terms used in the various embodiments disclosed in the present application are only used to describe the purpose of specific embodiments and are not intended to limit the various embodiments disclosed in the present application. As used herein, the singular form is intended to also include the plural form, unless the context clearly indicates otherwise. Unless otherwise specified, all terms used here (including technical terms and scientific terms) have the same meaning as the meanings commonly understood by ordinary technicians in the field of various embodiments disclosed in the present application. Terms (such as terms defined in generally used dictionaries) will be interpreted as having the same meaning as the contextual meaning in the relevant technical field and will not be interpreted as having an idealized meaning or an overly formal meaning, unless clearly defined in the various embodiments disclosed in the present application.

[0068] Example 1

[0069] Embodiment 1 of the present application discloses a method for protecting data security of an ATE device, including connecting a test system and a data receiver of the ATE device, wherein the test system is used to run a variety of test data transmission tasks, wherein the test data transmission tasks include test data transmission; Figure 1 As shown, the method includes:

[0070] S100, before the test data transmission starts, the test system generates a temporary session key;

[0071] S200, exchanging a temporary session key with a data receiver through a secure channel;

[0072] S300, using a temporary session key to perform multi-layer encryption on the original test data;

[0073] S400, sending the encrypted test data to a data receiver through a secure channel;

[0074] S500: The data receiver uses the temporary session key to decrypt the encrypted test data to obtain the original test data.

[0075] In some specific embodiments, Figure 2 As shown, generating a temporary session key includes:

[0076] S101, obtaining hardware information of the ATE device, and / or current system time, and / or current environment variables to obtain basic data;

[0077] S102, generating an initial random number sequence according to basic data; encrypting the initial random number sequence using a preset encryption algorithm to obtain an initial key;

[0078] S103, evaluating the strength of the initial key, and when the strength of the initial key is less than a preset value, re-encrypting the initial random number sequence using a preset encryption algorithm;

[0079] S104: When the strength of the initial key is greater than a preset value, determine that the initial key is a temporary session key.

[0080] The preset encryption algorithm may be an AES algorithm.

[0081] In practical applications, the hardware information of ATE equipment includes the serial number of the ATE equipment, the processor serial number, etc., which are highly specific and unique data relative to the ATE equipment; by combining the hardware data of the ATE equipment with dynamic data such as the current system time and / or the current environmental variables, the basic data obtained can be made more random, providing a more stable basic material for the generation of keys. Further, the initial random number sequence is generated based on the basic data. In practical applications, it can be achieved by combining a hardware random number generator with a software random number generator. For example, a hardware random number generator can generate random numbers based on physical phenomena such as thermal noise; software random numbers can be processed by a preset algorithm on the basic data, further increasing the complexity of the random numbers.

[0082] The process of evaluating the strength of the initial key also includes verifying the initial key using a verification algorithm, wherein the verification algorithm includes a cyclic redundancy check.

[0083] In some specific embodiments, a monitoring system is also included, and the test system is also provided with a backup system; Figure 3 As shown, the method also includes:

[0084] S601. During the test data transmission process, the system parameters of the ATE equipment are collected in real time, and the obtained system parameters are transmitted to the monitoring system; wherein the system parameters include voltage, and / or current, and / or temperature;

[0085] S602, the monitoring system detects system parameters through a preset machine learning algorithm;

[0086] S603. When an abnormality is detected in the system parameters, the test system automatically triggers an alarm and starts preset protection measures, which include pausing the test or switching to a backup system.

[0087] In some specific embodiments, the test system includes a plurality of operating modules, and the backup system is provided with at least one backup module corresponding to each operating module; Figure 4 As shown, the method includes:

[0088] S701, during the test data transmission process, synchronously running the test system and the backup system;

[0089] S702, when a fault is detected in the test system, determining an operating module of the test system where the fault is located;

[0090] S703, switching the test data transmission task on the test system from the running module with the fault to the backup module of the corresponding running module in the backup system for execution;

[0091] S704: When it is detected that the fault repair is complete, the test data transmission task on the test system is switched from the backup module to the running module corresponding to the backup module in the test system for execution.

[0092] In actual applications, when the test data transmission task is running on the test system, the detection of the test system operation process is a continuous and uninterrupted detection. It can make it possible to switch the test data transmission task on the test system in the shortest time after a fault occurs and after the fault is repaired, so as to ensure the normal operation of the test data transmission task.

[0093] In some specific embodiments, a plurality of user roles are preset in the test system, and each user role corresponds to user permissions; Figure 5 As shown, the method also includes:

[0094] S810, before the test data transmission starts, the user logs in to the test system, performs the first level of identity authentication, and verifies the password entered by the user;

[0095] S820: When the password entered by the user is correct, a second level of identity authentication is performed to verify the user's biometric information;

[0096] S830. When the user's biological information is correct, the user is matched with the user role, and the user is granted the user rights corresponding to the user role.

[0097] By setting up two-factor authentication, a higher level of protection can be provided for the test system, ensuring that only authorized users can access and operate the test system. In actual applications, multiple levels of user permissions are preset, and different levels of user permissions cover different operational scopes for the test system. Users can only operate the test system within the scope of user permissions corresponding to their own user roles.

[0098] In some specific embodiments, the biometric information includes the user's fingerprint information, and / or facial information, and / or iris information, and / or voiceprint information.

[0099] In some specific embodiments, Figure 6 As shown, the biometric information of the user verified in step S820 includes:

[0100] S821, obtaining multiple biometric information of the user, and filtering and matching different biometric information in a preset user database;

[0101] S822: When the biometric information of the corresponding user does not exist in the user database, the user authentication fails, and the user is prompted to re-enter the second level of identity authentication;

[0102] S823, when part of the corresponding user's biometric information exists in the user database, prompt the user to re-enter the uncorresponding type of biometric information or re-enter the second level of identity authentication;

[0103] S824. When the user data may contain the biometric information of all corresponding users, it is prompted that the biometric information of the user is correct.

[0104] In actual applications, by verifying the user's multiple biometric information in the second-factor identity authentication, multiple verifications are actually further included. For example, when fingerprint information and facial information need to be verified at the same time, if one of them matches accurately and the other matches inaccurately, the user will not be able to complete the second-factor identity authentication. This further improves the reliability of identity authentication, prevents unauthorized persons from entering the system by forging information or data, and can effectively increase the difficulty of intrusion by unauthorized persons.

[0105] In some specific embodiments, Figure 7 As shown, it also includes:

[0106] S901, recording the time and number of times the user performs the first identity authentication and the second identity authentication, and generating an alarm when the difference between the number of times the user performs the first identity authentication and the second identity authentication is greater than a preset value;

[0107] S902: Send an alarm to the superior user role of the user role logged in by the user, and / or temporarily lock the user role logged in by the user until the superior user role unlocks the user role.

[0108] In actual applications, by recording the time and number of double identity authentication, abnormal user login situations can be effectively identified. When the difference between the number of times a user performs the first identity authentication and the second identity authentication is greater than the preset value, it means that the user's identity is in doubt. At this time, the user's login operation is identified as a suspicious operation, and an alarm is generated based on the data information of the user's suspicious operation. The alarm includes the user's login time, the number of times the user logs in, and the data of the user's identity failure. By sending an alarm to the superior user role corresponding to the user role that the user plans to log in, the superior user role with greater user authority and management authority over the user role can quickly obtain relevant information about ATE equipment data and user's suspicious operations, and effectively process them to resolve potential external intrusion risks.

[0109] In actual applications, an alert is sent to the parent user role of the user role that the user is logging in to, and the user role that the user is logging in to is temporarily locked. There are also multiple unlocking mechanisms at different levels:

[0110] In the primary unlocking mechanism, when a user role corresponds to multiple superior user roles with the same user authority level, an alarm will be randomly sent to one or more superior user roles corresponding to the user role that the user wants to log in. When a release signal is received from one of the superior user roles, the lock on the user role is unlocked;

[0111] In the advanced unlocking mechanism, when a user role corresponds to multiple superior user roles with the same user authority level, an alarm will be sent to all superior user roles corresponding to the user role that the user wants to log in. When the release signals of all or a preset number of superior user roles are received, the user role will be unlocked.

[0112] In actual applications, the primary unlocking mechanism is applicable to user roles with lower user permissions, and the advanced unlocking mechanism is applicable to user roles with greater user permissions; the superior user role corresponding to the user role may refer to a superior user role whose user permissions are one or more levels higher than the user role.

[0113] This embodiment proposes a method for protecting the data security of ATE equipment, which can provide multiple data transmission protections before and after the ATE equipment starts data transmission. By introducing dynamic key exchange and multi-layer encryption strategies, it can prevent data from being accessed or tampered by unauthorized users during transmission and storage. By introducing a backup system and adopting a multiple redundancy design, it can quickly switch to the backup system when a test system fails, ensuring that the data transmission and the execution process of the test data transmission task are not interrupted. Furthermore, user role-based permission management is introduced to ensure that only authorized users can access or operate key system functions, and the security of the system is further improved by performing dual identity authentication on users. The security and reliability of the test system are greatly improved, test failures caused by data tampering or system failures are reduced, and the quality control efficiency of electronic equipment in the production process is maximized.

[0114] Example 2

[0115] Embodiment 2 of the present application discloses a data security system for ATE equipment, which can implement any method for protecting data security of ATE equipment in the technical solution of Embodiment 1, including:

[0116] Data security module 5, the data security module 5 is used to enable the test system 2 to generate a temporary session key and use the temporary session key to perform multi-layer encryption on the test data;

[0117] Test system 2, test system 2 is used to send the encrypted test data to data receiver 3 through a secure channel;

[0118] Data receiver 3, data receiver 3 is used to decrypt the encrypted test data using the temporary session key to obtain the original test data;

[0119] A backup system 4, the backup system 4 is set corresponding to the test system 2 and is used to run simultaneously with the test system 2;

[0120] The emergency switching module 9 is used to determine the running module of the detection system where the fault is located when a fault is detected in the test system 2; switch the test data transmission task on the test system 2 from the running module with the fault to the backup module of the corresponding running module in the backup system 4 for execution; when it is detected that the fault repair is completed, switch the test data transmission task on the test system 2 from the backup module to the running module of the corresponding backup module in the test system 2 for execution.

[0121] The test system 2 and the backup system 4 are respectively connected to the data receiver 3 via a secure channel, and the data security module 5, the emergency switching module 9, the test system 2 and the backup system 4 are respectively connected to the ATE device 1.

[0122] In some specific embodiments, the connection relationship between the modules is as follows: Figure 8 As shown, it also includes a sensor 7, a monitoring system 8 and a user authority management module 6:

[0123] The sensor 7 has one or more sensors, which are respectively connected to the ATE device 1 and the monitoring system 8, and are used to collect system parameters of the ATE device 1 in real time and transmit the obtained system parameters to the monitoring system 8; the monitoring system 8 is connected to the test system 2, and is used to detect the system parameters through a preset machine learning algorithm;

[0124] The user authority management module 6 is connected to the test system 2, and the user authority management module 6 includes a first verification module and a second verification module. The first verification module is used to perform a first identity authentication to verify the password input by the user; the second verification module is used to perform a second identity authentication to verify the user's biometric information.

[0125] This embodiment proposes a data security system for ATE equipment. By setting up a data security module and introducing a dynamic key exchange and multi-layer encryption strategy, it can prevent data from being accessed or tampered by unauthorized users during the transmission and storage between the test system and the data recipient. By introducing a backup system and an emergency switching module and adopting a multiple redundancy design, it can quickly switch to the backup system when a test system fails, ensuring that the data transmission and the execution of the test data transmission task are not interrupted. Furthermore, by setting up a user authority management module, it is ensured that only authorized users can access or operate key system functions, and the security of the system is further improved by performing dual identity authentication on users. It can provide multiple data transmission protections before and after the start of data transmission on the ATE device, greatly improving the security and reliability of the test system during operation.

[0126] Those skilled in the art will appreciate that the accompanying drawings are only schematic diagrams of a preferred implementation scenario, and the modules or processes in the accompanying drawings are not necessarily necessary for the implementation of the present application. Those skilled in the art will appreciate that the modules in the devices in the implementation scenario can be distributed in the devices of the implementation scenario according to the description of the implementation scenario, or can be changed accordingly and located in one or more devices different from the present implementation scenario. The modules of the above-mentioned implementation scenarios can be combined into one module, or can be further split into multiple sub-modules. The above-mentioned serial numbers of this application are only for description and do not represent the pros and cons of the implementation scenarios. The above disclosure is only a few specific implementation scenarios of the present application, but the present application is not limited thereto, and any changes that can be thought of by a technician in this field should fall within the scope of protection of the present application.

Claims

1. A method for protecting data security of ATE equipment, characterized in that: Including a test system and a data receiver connected to an ATE device, the method includes: Before the test data transmission starts, the test system generates a temporary session key and exchanges the temporary session key with the data recipient through a secure channel; Using the temporary session key to perform multi-layer encryption on the original test data; Sending the encrypted test data to the data recipient through a secure channel; The data receiver uses the temporary session key to decrypt the encrypted test data to obtain the original test data.

2. A method for protecting data security of ATE equipment according to claim 1, characterized in that: Generating a temporary session key comprises: Obtaining hardware information of the ATE device, and / or current system time, and / or current environment variables to obtain basic data; Generate an initial random number sequence based on the basic data; encrypt the initial random number sequence using a preset encryption algorithm to obtain an initial key; The strength of the initial key is evaluated, and when the strength of the initial key is less than a preset value, the initial random number sequence is encrypted again using a preset encryption algorithm; When the strength of the initial key is greater than a preset value, the initial key is determined to be the temporary session key.

3. A method for protecting data security of ATE equipment according to claim 1, characterized in that: The test system also includes a monitoring system, and the test system is also provided with a corresponding backup system; the method also includes: During the test data transmission process, the system parameters of the ATE device are collected in real time, and the obtained system parameters are transmitted to the monitoring system; the system parameters include voltage, and / or current, and / or temperature; The monitoring system detects the system parameters through a preset machine learning algorithm; When an abnormality is detected in the system parameters, the test system automatically triggers an alarm and starts a preset protection measure, which includes pausing the test or switching to run the backup system.

4. A method for protecting data security of ATE equipment according to claim 3, characterized in that: The test system includes a plurality of operating modules, and the backup system is provided with at least one backup module corresponding to each of the operating modules; the method further includes: During the test data transmission process, synchronously running the test system and the backup system; When a fault is detected in the test system, determining an operating module of the detection system where the fault is located; Switching the test data transmission task on the test system from the running module with the fault to the backup module corresponding to the running module in the backup system for execution; When it is detected that the fault repair is completed, the test data transmission task on the test system is switched from the backup module to the running module corresponding to the backup module in the test system for execution.

5. The method for protecting data security of ATE equipment according to claim 1, characterized in that: The test system is preset with a plurality of user roles, each of which corresponds to user rights; the method further includes: Before the test data transmission starts, the user logs in to the test system, performs a first level of identity authentication, and verifies the password entered by the user; When the password entered by the user is correct, a second identity authentication is performed to verify the user's biometric information; When the biological information of the user is correct, the correspondence between the user and the user role is completed, and the user authority corresponding to the user role is granted to the user.

6. A method for protecting data security of ATE equipment according to claim 5, characterized in that: The biometric information includes the user's fingerprint information, and / or facial information, and / or iris information, and / or voiceprint information.

7. A method for protecting data security of ATE equipment according to claim 5, characterized in that: The verifying the user's biometric information includes: Obtaining a plurality of types of biometric information of the user, and filtering and matching different types of biometric information in a preset user database; When the biometric information corresponding to the user does not exist in the user database, the user authentication fails, and the user is prompted to re-enter the second identity authentication; When part of the biometric information corresponding to the user exists in the user database, prompting the user to re-enter the biometric information of the non-corresponding type or re-enter the second-factor identity authentication; When the user data may contain all the biometric information corresponding to the user, it is prompted that the biometric information of the user is correct.

8. The method for protecting data security of ATE equipment according to claim 5, characterized in that: Also includes: Recording the time and number of times the user performs the first identity authentication and the second identity authentication, and generating an alarm when the difference between the number of times the user performs the first identity authentication and the second identity authentication is greater than a preset value; The alarm is sent to the superior user role of the user role logged in by the user, and / or the user role logged in by the user is temporarily locked until the superior user role unlocks the user role.

9. A data security system for ATE equipment, characterized in that: A method for protecting data security of ATE equipment applicable to any one of claims 1-8, comprising: A data security module, the data security module is used to enable the test system to generate a temporary session key and use the temporary session key to perform multi-layer encryption on the test data; A test system, the test system is used to send the encrypted test data to the data recipient through a secure channel; A data receiver, the data receiver is used to decrypt the encrypted test data using the temporary session key to obtain the original test data; A backup system, the backup system being arranged corresponding to the test system and being used to run simultaneously with the test system; The emergency switching module is used to, when a fault is detected in the test system, determine the running module of the detection system where the fault is located; switch the test data transmission task on the test system from the running module with the fault to the backup module corresponding to the running module in the backup system for execution; when it is detected that the fault is repaired, switch the test data transmission task on the test system from the backup module to the running module corresponding to the backup module in the test system for execution; The test system and the backup system are respectively connected to the data receiver via a secure channel, and the data security module, the emergency switching module, the test system and the backup system are respectively connected to the ATE device.

10. The data security system of ATE equipment according to claim 9, characterized in that: It also includes sensors, monitoring systems and user rights management modules: The sensor has one or more sensors, which are respectively connected to the ATE device and the monitoring system, and are used to collect system parameters of the ATE device in real time, and transmit the obtained system parameters to the monitoring system; the monitoring system is connected to the test system, and is used to detect the system parameters through a preset machine learning algorithm; The user authority management module is connected to the test system, and the user authority management module includes a first verification module and a second verification module. The first verification module is used to perform a first identity authentication to verify the password input by the user; the second verification module is used to perform a second identity authentication to verify the user's biometric information.

Images