Authorization method and system based on embedded algorithm software
By using the encrypted license authorization code and controlling the number of authorizations in the algorithm authorization process, the problem of the algorithm package files being easily illegally obtained in the prior art is solved, and the high security and confidentiality of the algorithm are achieved.
Patent Information
- Application Number
- CN202311112259.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-08-31
- Publication Date
- 2025-02-28
AI Technical Summary
Existing algorithm authorization methods can easily lead to illegal acquisition of algorithm package files, resulting in leakage of commercial secrets and economic losses.
Through mobile phones or computers as authorization tools, encrypted license authorization codes are generated in combination with the server backend, and the number of times that can be authorized is controlled to ensure the legal use and security of the algorithm.
The algorithm is achieved with high security and confidentiality, ensuring the confidentiality and legality of the authorization process, and preventing illegal acquisition and use.
Smart Images
Figure CN119538272A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of computer information technology, and in particular to an authorization method and system based on embedded algorithm software. Background Art
[0002] Embedded software systems are increasingly used in various fields, and algorithms play a key role in them. However, in order to protect the security and trade secrets of algorithms, algorithm companies must authorize algorithm packages before providing them to customers. Existing authorization methods make it easy for algorithm package files to be illegally obtained, resulting in the leakage of trade secrets and significant economic losses. Summary of the invention
[0003] The present invention proposes a highly secure and highly confidential algorithm authorization method based on an embedded software system. A mobile phone or computer is used as an authorization tool, and the encrypted license authorization code is generated in combination with a server background and the number of authorized times is controlled to ensure the legal use of the algorithm and protect the security and commercial confidentiality of the algorithm. This authorization method provides a reliable authorization mechanism for algorithm companies. At the same time, a high level of security measures ensures the confidentiality and legality of the authorization process, making the algorithm authorization method have a wide range of application prospects in embedded software systems, which is achieved through the following technical solutions.
[0004] An authorization method based on embedded algorithm software, characterized in that it comprises the following steps: Step 1: The client device communicates with the terminal device to obtain a unique identification code or serial number of the terminal device; Step 2: The client device establishes a communication link with the server backend, sends the terminal device identification code to the backend and applies for authorization; Step 3: After receiving the terminal device identification code, the server backend will not grant authorization if it is combined with the terminal device identification code, otherwise it will generate a license authorization code; Step 4: The generated license authorization code is encrypted by AES128 and returned to the client device; Step 5: The terminal device system calls the verification interface in the algorithm package to decrypt the authorization code, and calls different interfaces to obtain a unique identification code and other system data according to different chips; Step 6: The terminal device verifies the decrypted authorization code to verify whether the authorization is valid.
[0005] An authorization system based on embedded algorithm software, comprising: Terminal device: It is the application platform of the embedded software system, including processor, memory and communication module; processor 11 is used for system operation and data processing, such as calling the interface in the algorithm package. Memory 12 is used to store the content of the algorithm package and the authorized license code in this process; communication module 13 usually interacts with the client in wireless and wired ways to obtain the license code required before using the algorithm; Client device: The authorization tool installed on the client device needs to establish a connection with the terminal device and establish data interaction with the terminal device through a specific communication protocol to obtain the unique and unreplicable identification code or serial number of the terminal device and transmit it to the server backend for application authorization Server backend: used to generate license authorization codes, count authorization times and control the number of times that can be authorized, receive authorization applications from client devices, and determine whether the authorization conditions are met based on specific information. If so, a license authorization code is generated.
[0006] The beneficial effects of the present invention are: ensuring the security of the authorization algorithm and improving the confidentiality of the algorithm code. BRIEF DESCRIPTION OF THE DRAWINGS
[0007] Figure 1 It is a flowchart of the authorization method according to an embodiment of the present invention.
[0008] Figure 2 It is a structural block diagram of the authorization system of an embodiment of the present invention.
[0009] Figure 3 It is a flowchart of the algorithm authorization of an embodiment of the present invention. DETAILED DESCRIPTION
[0010] The embodiments of the present invention are described in detail below with reference to the accompanying drawings, but the present invention can be implemented in many different ways as defined and covered by the claims.
[0011] like Figure 2 As shown, the implementation process of the algorithm authorization method includes a terminal device 10 (such as a watch, bracelet, and smart ring, etc.), a client device 20 (a mobile phone, a tablet, and a computer, etc.), and a server backend 30. The terminal device 10 is a medium for using an embedded algorithm package, and the client device 20 is used to receive the license code from the server backend and forward it to the terminal device via a wired or wireless method. The server backend 30 is mainly used by the user to receive the terminal device information sent by the client device and generate the corresponding license code and control the number of times that can be authorized.
[0012] The terminal device 10 is usually an application platform of an embedded software system, which includes important components such as a processor, a memory, and a communication module. The processor 11 is used for system operation and data processing, such as calling the interface in the algorithm package. The memory 12 is used to store the content of the algorithm package and the authorized license code in this process. The communication module 13 usually interacts with the client in both wireless and wired ways to obtain the license code required before the algorithm is used.
[0013] The client device 20 is usually a mobile phone or a computer, and the authorization application is run on the client. The authorization tool needs to establish a connection with the terminal device and establish data interaction with the terminal device through a specific communication protocol, obtain the unique and non-copyable identification code or serial number of the terminal device, and transmit it to the server background to apply for authorization.
[0014] The server backend 30 is the core of the authorization process and is responsible for generating license authorization codes, counting authorization times, and controlling the number of times that can be authorized. It receives authorization applications from mobile phones or computer terminal devices, and determines whether the authorization conditions are met based on specific information. If so, it generates a license authorization code. The backend needs to take strict security measures to ensure that the authorization information is not accessed or leaked without authorization.
[0015] like Figure 1 As shown, the embodiment of the present invention also relates to an authorization method for embedded algorithm software, comprising the following steps: S1. The client device communicates with the terminal device to obtain a unique identification code or serial number of the terminal device; S2. The client device establishes a communication link with the server backend, sends the terminal device's identification code to the backend and applies for authorization; S3. After receiving the terminal device identification code, the server background determines whether the authorization conditions are met in combination with specific information. If not, authorization is not granted. Otherwise, a license authorization code is generated. S4. The generated license authorization code is encrypted by AES128 and returned to the client device; S5. The system of the terminal device calls the verification interface in the algorithm package to decrypt the authorization code, and calls different interfaces to obtain the unique identification code and other system data according to different chips; S6. The terminal device verifies the decrypted authorization code to verify whether the authorization is valid.
[0016] like Figure 1 , 3 As shown, in the embodiment of the present invention, the encryption method of the authorization process of the algorithm software by means of encrypted communication is specifically: The authorization of the algorithm starts with the terminal device. First, the unique identification code of the terminal device is obtained. Each device has a unique identification code, such as a bracelet, ring or watch.
[0017] Upload the unique identification code to the client device, which is most commonly a mobile phone, but can also be a router for forwarding and communication. When the client device receives the unique identification code, it sends the unique identification code to the server backend, which is a server used to process algorithm authorization.
[0018] The communication process between the client device and the terminal device requires the use of a cyclic redundancy check code (CRC) with error detection and correction capabilities to ensure the continuity and integrity of data transmission.
[0019] The data is encrypted using an AES128 advanced encryption standard to prevent the leakage and tampering of authorized information. The secret key of each round of the encryption algorithm is obtained by the seed key through the key expansion algorithm. In the algorithm, the 16-word inscription, ciphertext and wheel key are represented by a 4*4 matrix.
[0020] In S3, the authorization code generation process needs to undergo strict algorithm and logic control (before generation, it is determined whether the received specific information meets the conditions and whether the device has not been authorized) to ensure the uniqueness and validity of each authorization code.
[0021] In S4, the AES128 encryption algorithm provides high-strength encryption protection, effectively preventing the leakage and cracking of ciphertext.
[0022] In S5, after receiving the ciphertext, the mobile phone or computer does not need to decrypt it, and directly sends the ciphertext to the terminal device through wired or wireless communication. The transmission process of the authorization code also needs to be encrypted to prevent the leakage and illegal acquisition of the authorization information.
[0023] The terminal device's system calls the verification interface in the algorithm package to decrypt the authorization code, and calls different interfaces to obtain the unique identification code and other system data according to different chips. The access rights of this interface need to be strictly limited and are only used for authorization verification.
[0024] In S6, if the authorization code is valid, the terminal device is authorized to use the algorithm package, otherwise the access to other interfaces of the algorithm package will be restricted.
[0025] The advantages of the present invention compared with the prior art are: This authorization method ensures that the terminal device can only use the algorithm package with authorization. Even if the algorithm package file is illegally obtained, the algorithm cannot be run due to the lack of valid authorization. Therefore, the security and commercial confidentiality of the algorithm are guaranteed.
[0026] The algorithm authorization process uses encrypted communication to ensure the confidentiality of authorization information.
[0027] The unique identification code of the terminal device is combined with the authorization code generated by the server background to ensure the legitimacy of the algorithm package on the specific terminal device.
[0028] Through the verification interface, the terminal device can verify the authorization information in real time and reject illegal use.
[0029] The above are only preferred embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. An authorization method based on embedded algorithm software, characterized in that: The steps include: Step 1: The client device communicates with the terminal device to obtain a unique identification code or serial number of the terminal device; Step 2: The client device establishes a communication link with the server backend, sends the terminal device identification code to the backend and applies for authorization; Step 3: After receiving the terminal device identification code, the server background determines whether the authorization conditions are met. If not, authorization is not granted. Otherwise, a license authorization code is generated; Step 4: The generated license authorization code is encrypted by AES128 and returned to the client device; Step 5: The terminal device system calls the verification interface in the algorithm package to decrypt the authorization code, and calls different interfaces to obtain a unique identification code and other system data according to different chips; Step 6: The terminal device verifies the decrypted authorization code to verify whether the authorization is valid.
2. The authorization method according to claim 1, characterized in that: In step 3, it is determined whether the authorization conditions are met and whether the information of date and time, fixed manufacturer name, and device address matches.
3. The authorization method according to claim 2, characterized in that: The judgment conditions are: if any condition in the information does not meet the requirements, authorization will not be granted, specifically: the time is not within the specified range, the manufacturer name cannot be matched, and the device address is illegal.
4. An authorization system based on embedded algorithm software, characterized in that: include: Terminal equipment: It is an application platform of embedded software system, including processor, memory and communication module; the processor is used for system operation and data processing, and calls the interface in the algorithm package; The memory is used in this process to store the content of the algorithm package and the authorized license code; The communication module interacts with the client to obtain the license code required before using the algorithm; Client device: Establish a connection with the terminal device through the authorization tool installed on the client device, establish data interaction with the terminal device through the communication protocol, obtain the unique and non-copyable identification code or serial number of the terminal device, and transmit it to the server backend to apply for authorization; Server backend: used to generate license authorization codes, count authorization times and control the number of times that can be authorized, receive authorization applications from client devices, and combine the information to determine whether the conditions for authorization are met. If so, a license authorization code is generated.