Method and device for processing intelligent equipment information

Abstract

The invention discloses a method and device for processing intelligent equipment information, and relates to the technical field of intelligent office. A specific embodiment of the method comprises the following steps: acquiring a unique identifier of the equipment by using a client arranged in the intelligent equipment, and persistently storing a private key generated based on the unique identifier in a trusted module contained in the intelligent equipment, so that a management party communicates with the intelligent equipment based on the private key, a public key corresponding to the private key and the unique identifier, therefore, the state information of the intelligent equipment is determined. According to the embodiment of the invention, the automation degree of processing the information of the intelligent equipment is improved, and the accuracy and efficiency of processing the information of the intelligent equipment are improved.

Description

Technical Field

[0001] The present invention relates to the field of intelligent office technology, and in particular to a method and device for processing intelligent device information. Background Art

[0002] With the popularization of smart offices, more and more smart devices are used in various office scenarios. Usually, managers need to regularly count and maintain the usage status of smart devices.

[0003] Currently, when managing the usage status of smart devices, a QR code bound to its usage status is usually assigned to each smart device, and the usage status of the smart device is obtained by scanning the QR code. When there are a large number of smart devices, the existing method has the problems of poor automation and low efficiency in counting the usage status of smart devices, and there may be a problem of low accuracy of obtaining information due to the mismatch between the QR code and the usage status of the smart device. Summary of the invention

[0004] In view of this, an embodiment of the present invention provides a method and apparatus for processing smart device information, which can obtain the unique identification of the device by using a client installed in the smart device, and persistently store the private key generated based on the unique identification in a trusted module included in the smart device, so that the management party can communicate with the smart device based on the private key, the public key corresponding to the private key, and the unique identification to determine the status information of the smart device. The embodiment of the present invention improves the automation degree of processing smart device information, and improves the accuracy and efficiency of processing smart device information.

[0005] To achieve the above-mentioned purpose, according to one aspect of an embodiment of the present invention, a method for processing smart device information is provided, characterized in that it includes: obtaining a unique identifier of the smart device in response to a request for use of the smart device; generating a private key and a public key corresponding to the private key based on the unique identifier; persistently storing the private key in a trusted module included in the smart device to encrypt the unique identifier using the trusted module and the private key; sending the unique identifier of the smart device and the public key to a storage service end, so that the management party communicates with the smart device based on the private key, the public key stored by the storage service end and the unique identifier to determine the status information of the smart device.

[0006] Optionally, the trusted module is provided with a plurality of programmable interfaces; wherein the programmable interface includes an import interface and a storage interface; the persistent storage of the private key in the trusted module included in the smart device comprises: importing the private key using the import interface; and performing a persistent storage operation on the imported private key using the storage interface.

[0007] Optionally, the method for processing smart device information further includes: in response to an operation that triggers a query for status information, obtaining a unique identifier of the smart device and ciphertext data corresponding to the unique identifier; wherein the ciphertext data is obtained by performing an encryption operation on the unique identifier using the private key contained in the trusted module; sending the unique identifier and the ciphertext data to a verification server, so that the verification server obtains a public key corresponding to the unique identifier from the storage service, and verifies the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier; and receiving the status information for the smart device returned by the verification server.

[0008] Optionally, verifying the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier includes: when the verification service end obtains the public key corresponding to the unique identifier from the storage service end, determining that the status information of the smart device is in normal usage status.

[0009] Optionally, the verifying the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier includes: the verification server performing a decryption operation on the ciphertext data using the public key; comparing a target identifier obtained from the decryption operation with the unique identifier of the smart device; and determining the status information of the smart device based on the comparison result.

[0010] Optionally, when the comparison result indicates that the target identifier is the same as the unique identifier of the smart device, the status information of the smart device is determined to be a normal usage status; when the comparison result indicates that the target identifier is not the same as the unique identifier of the smart device, the status information of the smart device is determined to be an abnormal status.

[0011] Optionally, verifying the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier further includes: when the verification server fails to obtain the public key corresponding to the unique identifier from the storage service side, determining that the status information of the smart device is in an abnormal state.

[0012] To achieve the above-mentioned purpose, according to a second aspect of an embodiment of the present invention, a client for processing smart device information is provided, characterized in that it comprises: a key generation module, a key storage module and a key sending module; wherein,

[0013] The key generation module is used to obtain the unique identification of the smart device in response to the smart device's request for use; generate a private key and a public key corresponding to the private key based on the unique identification;

[0014] The key storage module is used to persistently store the private key in a trusted module included in the smart device, so as to encrypt the unique identifier using the trusted module and the private key;

[0015] The key sending module is used to send the unique identifier and the public key of the smart device to the storage service end, so that the management party can communicate with the smart device based on the private key, the public key stored in the storage service end and the unique identifier to determine the status information of the smart device.

[0016] Optionally, the client that processes smart device information includes: the trusted module is provided with multiple programmable interfaces; wherein the programmable interface includes an import interface and a storage interface; the persistent storage of the private key in the trusted module included in the smart device includes: importing the private key using the import interface; and performing persistent storage operations on the imported private key using the storage interface.

[0017] Optionally, the client that processes the smart device information is further used to obtain the unique identifier of the smart device and the ciphertext data corresponding to the unique identifier in response to an operation that triggers a query for status information; wherein the ciphertext data is obtained by performing an encryption operation on the unique identifier using the private key contained in the trusted module; send the unique identifier and the ciphertext data to the verification server, so that the verification server obtains the public key corresponding to the unique identifier from the storage service, and verifies the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier; receive the status information of the smart device returned by the verification server.

[0018] Optionally, the client that processes the smart device information is used to verify the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier, including: when the verification server obtains the public key corresponding to the unique identifier from the storage service client, determining that the status information of the smart device is in normal usage status.

[0019] Optionally, the client that processes the smart device information is used to verify the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier, including: the verification server uses the public key to perform a decryption operation on the ciphertext data; compares the target identifier obtained from the decryption operation with the unique identifier of the smart device; and determines the status information of the smart device based on the comparison result.

[0020] Optionally, the client that processes the smart device information is used to determine that the status information of the smart device is in a normal usage state when the comparison result indicates that the target identifier is the same as the unique identifier of the smart device; and to determine that the status information of the smart device is in an abnormal state when the comparison result indicates that the target identifier is different from the unique identifier of the smart device.

[0021] Optionally, the client that processes the smart device information is used to verify the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier, and further includes: when the verification server fails to obtain the public key corresponding to the unique identifier from the storage service end, determining that the status information of the smart device is in an abnormal state.

[0022] To achieve the above-mentioned purpose, according to the third aspect of an embodiment of the present invention, there is provided an electronic device for processing smart device information, characterized in that it includes: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement any of the methods described in the above-mentioned methods for processing smart device information.

[0023] To achieve the above-mentioned purpose, according to a fourth aspect of an embodiment of the present invention, a computer-readable medium is provided, on which a computer program is stored, characterized in that when the program is executed by a processor, any method as described in the above-mentioned method for processing smart device information is implemented.

[0024] An embodiment of the above invention has the following advantages or beneficial effects: the unique identification of the device can be obtained by using a client provided on the smart device, and the private key generated based on the unique identification is persistently stored in a trusted module included in the smart device, so that the management party can communicate with the smart device based on the private key, the public key corresponding to the private key, and the unique identification to determine the status information of the smart device. The embodiment of the present invention improves the automation level of processing smart device information, and improves the accuracy and efficiency of processing smart device information.

[0025] The further effects of the above-mentioned non-conventional optional manner will be described below in conjunction with the specific implementation manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The accompanying drawings are used to better understand the present invention and do not constitute an improper limitation of the present invention.

[0027] Figure 1 It is a flowchart of a method for processing smart device information provided by an embodiment of the present invention;

[0028] Figure 2AIt is a schematic diagram of a process for processing intelligent device use provided by an embodiment of the present invention;

[0029] Figure 2B It is a structural diagram of a process for processing intelligent device use provided by an embodiment of the present invention;

[0030] Figure 3A It is a schematic diagram of a process for processing smart device information provided by an embodiment of the present invention;

[0031] Figure 3B It is a structural diagram of a process for processing intelligent device information provided by an embodiment of the present invention;

[0032] Figure 4 It is a structural schematic diagram of an apparatus for processing smart device information provided by an embodiment of the present invention;

[0033] Figure 5 is an exemplary system architecture diagram to which embodiments of the present invention may be applied;

[0034] Figure 6 It is a schematic diagram of the structure of a computer system of a terminal device or a server suitable for implementing an embodiment of the present invention. DETAILED DESCRIPTION

[0035] The following is a description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0036] It should be noted that in the technical solution of the present invention, the collection, use, storage, sharing and transfer of user personal information involved are in compliance with the provisions of relevant laws and regulations, and it is necessary to inform the user and obtain the user's consent or authorization. When applicable, the user's personal information is de-identified and / or anonymized and / or encrypted.

[0037] like Figure 1 As shown, an embodiment of the present invention provides a method for processing smart device information, which may include the following steps:

[0038] Step S101: in response to a request for use of a smart device, obtaining a unique identifier of the smart device; and generating a private key and a public key corresponding to the private key based on the unique identifier.

[0039] Specifically, in intelligent office application scenarios, there are usually multiple smart devices, such as: smart phones, tablets, laptops, smart phones, smart printers, etc., and the number of these smart devices is often large. Therefore, the management party needs to obtain the status of each smart device (such as normal usage status, abnormal status, etc.) to manage (for example: statistics, classification, etc.) each smart device.

[0040] Furthermore, a client disposed on the smart device responds to a request for the smart device to be used, wherein the use is the collection and use of the smart device for one or more undetermined users.

[0041] Furthermore, according to the request for use, a unique identifier of the smart device is obtained; wherein, the unique identifier of the smart device is an SN code, SN is the abbreviation of Serial Number, representing the device serial number, which is used to uniquely identify a device. The present invention does not limit the specific content and specific format of the SN code.

[0042] Further, a private key and a public key corresponding to the private key are generated based on the unique identifier; in an embodiment of the present invention, the OpenSSL tool can be used to generate a pair of keys (including a private key and a public key); wherein the OpenSSL tool is based on cryptographic algorithms, provides secure communication, data encryption and decryption functions, and supports the management of digital certificates and keys, etc. For example, the schematic instruction for generating a private key using OpenSSL is:

[0043] openssl genrsa-out-out private.pem;

[0044] Furthermore, the schematic instructions for using OpenSSL to generate the public key corresponding to the private key are:

[0045] openssl rsa-in private.pem-outform PEM-pubout-out public.pem

[0046] The public key or private key can be stored in a file, for example, private.pem is a private key file and public.pem is a public key file.

[0047] Step S102: persistently storing the private key in a trusted module included in the smart device, so as to encrypt the unique identifier using the trusted module and the private key.

[0048] Specifically, the client disposed in the smart device persistently stores the private key described in step S101 in a trusted module included in the smart device.

[0049] In the embodiment of the present invention, the trusted module TPM (Trusted Platform Module) is a microcomputer chip that can be installed in a smart device as hardware firmware and interact with other components of the smart device. TPM can be used to perform authentication, encryption, identification, and integrity verification on smart devices. Data stored in TPM can be stored persistently and can be prohibited from being edited, thereby achieving the technical effect of improving data security.

[0050] Furthermore, the unique identifier can be encrypted using a trusted module and a private key. The embodiment of the present invention improves the security and reliability of the private key to a great extent by persistently storing the private key in the TPM and encrypting it using the TPM, compared with storing the private key file in a hard disk, a cloud disk, or other storage methods, thereby improving the accuracy and reliability of managing smart devices.

[0051] Furthermore, the private key can be persistently stored in the trusted module included in the smart device using the programmable interface provided by the TPM. That is, the trusted module is provided with a plurality of programmable interfaces; wherein the programmable interface includes an import interface and a storage interface; the persistent storage of the private key in the trusted module included in the smart device includes: importing the private key using the import interface; and performing a persistent storage operation on the imported private key using the storage interface.

[0052] The TPM programmable interface and instructions for using the programmable interface and its schematics are as follows:

[0053] tpm2_createprimary-C og sha256-G rsa-c primary.ctx / / This instruction is used to create the primary object primary.ctx of the TPM

[0054] tpm2_import-C primary.ctx-G rsa-i private.pem…-r key.prv / / This instruction imports the private key private.pem into TPM for management; that is, the private key is imported using the import interface;

[0055] tpm2_load-C primary.ctx…-r key.prv-c key.ctx / / This instruction loads the primary object and private key into the TPM;

[0056] tpm2_evictcontrol-C oc key.ctx / / This instruction stores the loaded key persistently; that is, the storage interface is used to perform a persistent storage operation on the imported private key.

[0057] Among them, in the above schematic instructions, tpm2_createprimary, tpm2_import, tpm2_load, and tpm2_evictcontrol are all programmable interfaces set by the trusted module, that is, the trusted module is provided with multiple programmable interfaces, among which tpm2_import is an import interface; tpm2_evictcontrol is a storage interface. It can be understood that when performing an import or storage operation, one or more auxiliary interfaces such as tpm2_createprimary, tpm2_load, etc. are required to perform corresponding auxiliary operations. The present invention does not limit the number, specific content and format of the instructions of each programmable layer interface.

[0058] Step S103: Send the unique identifier and the public key of the smart device to the storage service end, so that the management party communicates with the smart device based on the private key, the public key stored in the storage service end and the unique identifier to determine the status information of the smart device.

[0059] Specifically, the client set on the smart device will send the unique identifier and the public key of the smart device to the storage service end; so that the storage service end can store the unique identifier and public key data of each smart device, as well as the corresponding relationship between the unique identifier and the public key.

[0060] Furthermore, the management party obtains the private key stored in the TPM of the smart device, the public key stored in the storage service end and the unique identifier based on the client to communicate with the smart device, and triggers the client to further interactively transmit SN and / or ciphertext data with the server end (verification server end, storage service end), so as to determine the status information of the smart device; in an embodiment of the present invention, the management party may be the person who obtains and manages the status information of each smart device, and the management party may use the client end set on the smart device to obtain the status information of the smart device (normal use or abnormal status, etc.).

[0061] like Figure 2A As shown, an embodiment of the present invention provides a process for processing smart device usage, which may include the following steps:

[0062] Step S201: responding to a request for use of a smart device.

[0063] Step S202: Acquire a unique identifier of the smart device; generate a private key and a public key corresponding to the private key based on the unique identifier.

[0064] Step S203: persistently storing the private key in a trusted module included in the smart device.

[0065] Step S204: Send the unique identifier of the smart device and the public key to the storage service end.

[0066] Step S205: Complete the smart device collection.

[0067] Steps S201 to S205 describe the process of obtaining a smart device. The steps in the process of obtaining a smart device are consistent with the description of steps S101 to S103 and will not be repeated here.

[0068] Furthermore, the following Figure 2B The structural diagram of FIG. 1 is used as an example to illustrate the multiple execution subjects of steps S201 to S205 corresponding to the smart device use stage, and the association relationship between the execution subjects. Figure 2B As shown:

[0069] Fixed asset inventory client: a client held by the manager of each smart device (for example, the fixed asset inventory manager); after any smart device is used, a private key and a public key corresponding to the private key are generated based on the unique identifier. Furthermore, the private key is written into the trusted module TPM (Trusted Platform Module) for persistent storage. At the same time, the public key file (and the unique identifier) ​​is uploaded to the storage service end (for example, the secret key storage system) to complete the use process of fixed assets (referred to as fixed assets).

[0070] Data verification system: used for the encrypted data (such as private key, public key, etc.) when subsequently verifying the status of the smart device (i.e., taking inventory).

[0071] Key storage system: used to store public key files uploaded by the fixed asset inventory client.

[0072] like Figure 3A As shown, an embodiment of the present invention provides a process for processing smart device information, which may include the following steps:

[0073] Step S301: responding to an operation that triggers querying status information.

[0074] Step S302: Obtain the unique identifier of the smart device.

[0075] Step S303: using the private key contained in the trusted module to perform an encryption operation on the unique identifier to obtain ciphertext data.

[0076] Step S304: Send the unique identifier and the encrypted data to the verification server.

[0077] Specifically, steps S301 to S304 are executed by the client, and the manager can trigger an operation to query the status information of the smart device through the client in the smart device; after receiving the operation to trigger the query of the status information, the client obtains the unique identifier of the smart device (such as SN, etc.), and uses the private key contained in the TPM to perform an encryption operation on the unique identifier (such as SN, etc.) to obtain ciphertext data; and then sends the unique identifier and the ciphertext data to the verification server.

[0078] Step S305: Obtain a unique identifier and search for a corresponding public key from the storage service end.

[0079] Step S306: Use the public key to perform a decryption operation on the ciphertext data.

[0080] Step S307: comparing the target identifier obtained by the decryption operation with the unique identifier of the smart device.

[0081] Step S308: Determine the status information of the smart device according to the comparison result.

[0082] Specifically, steps S306 to S308 can be executed by the verification server; the verification server can be deployed in the server, and can also be deployed together with the storage service; after receiving the request sent by the client to query the status information of the smart device, the verification server can parse the unique identifier from the request, obtain the ciphertext data from the request, and then query the storage server for the public key matching the unique identifier based on the unique identifier; further use the found public key to decrypt the received ciphertext data; obtain the unique identifier of the smart device contained in the ciphertext data through the decryption operation (i.e., the target identifier); further compare the target identifier obtained by the decryption operation with the unique identifier of the smart device. Determine the status information of the smart device based on the comparison result; for example: if the comparison result is consistent, it means that the smart device is in normal use.

[0083] Step S309: receiving the status information of the smart device returned by the verification server. Specifically, the verification server sends the determined status information of the smart device to the client.

[0084] The description of step S301 to step S309 is: in response to the operation of triggering the query status information, obtain the unique identifier of the smart device and the ciphertext data corresponding to the unique identifier; wherein the ciphertext data is obtained by performing an encryption operation on the unique identifier using the private key contained in the trusted module; send the unique identifier and the ciphertext data to the verification server, so that the verification server obtains the public key corresponding to the unique identifier from the storage service, and verifies the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier; receive the status information of the smart device returned by the verification server.

[0085] Further, the method for the verification service end to verify the state information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier includes: 1) when the verification service end obtains the public key corresponding to the unique identifier from the storage service end, determining that the state information of the smart device is in a normal use state; when the verification service end does not obtain the public key corresponding to the unique identifier from the storage service end, determining that the state information of the smart device is in an abnormal state. It can be understood that in the process of obtaining a smart device, the unique identifier corresponding to the smart device and the generated public key, as well as the corresponding relationship, need to be stored in the storage service end, so that the unique identifier, private key, and public key indicating the state information of the smart device are determined to have a binding relationship with the smart device through the client and the storage service end, and the smart device is verified through the binding relationship; therefore, the state of the smart device can be determined by querying whether there is a public key corresponding to the SN, wherein the abnormal state is, for example, a state in which the key is inconsistent with the SN due to reasons such as failure to obtain or replacement of the smart device.

[0086] 2) The verification server obtains the public key corresponding to the unique identifier, and uses the public key to perform a decryption operation on the ciphertext data; compares the target identifier obtained from the decryption operation with the unique identifier of the smart device; and determines the status information of the smart device based on the comparison result. Further: if the comparison result indicates that the target identifier is the same as the unique identifier of the smart device, the status information of the smart device is determined to be in a normal use state; if the comparison result indicates that the target identifier is not the same as the unique identifier of the smart device, the status information of the smart device is determined to be in an abnormal state.

[0087] Furthermore, the following Figure 3B The structural diagram of is used as an example to illustrate the steps S301 to S309 corresponding to the processing (eg, query, inventory, etc.) of the smart device stage and the multiple execution subjects of the steps, as well as the association relationship between the execution subjects. Figure 3B As shown:

[0088] Fixed asset inventory client: After the manager holding the fixed asset inventory client triggers an inventory request through the client, in response to the operation of triggering the query status information, the unique identifier SN of the smart device is obtained, and further, the private key contained in the trusted module is used to perform an encryption operation on the unique identifier to obtain ciphertext data, and further, an inventory request containing the unique identifier and ciphertext data is sent to the data verification system (i.e., the verification server). And receive the inventory result returned by the data verification system.

[0089] Data verification system: according to the inventory request received from the fixed asset inventory client (i.e., the request sent by the client to query the status information of the smart device), the unique identifier SN is parsed from the inventory request, and the ciphertext data is obtained from the request, and then the public key matching the unique identifier is queried from the storage server (i.e., the key storage system) based on the unique identifier; the received ciphertext data is further decrypted using the found public key; the unique identifier of the smart device contained in the ciphertext data (i.e., the target identifier) ​​is obtained through the decryption operation; the target identifier obtained from the decryption operation is further compared with the unique identifier of the smart device. The status information of the smart device is determined based on the comparison result; for example: if the comparison result is consistent, it means that the smart device is in normal use. The comparison result is returned to the fixed asset inventory client.

[0090] Key storage system: used to store the public key files uploaded by the fixed asset inventory client, and when receiving a request from the data verification system to query the public key that matches the unique identifier based on the unique identifier, determine the public key that matches the unique identifier based on the unique identifier and return it to the data verification system.

[0091] like Figure 4 As shown, the embodiment of the present invention provides a client 400 for processing smart device information, including: a key generation module 401, a key storage module 402 and a key sending module 403; wherein,

[0092] The key generation module 401 is used to obtain the unique identification of the smart device in response to the smart device's request for use; generate a private key and a public key corresponding to the private key based on the unique identification;

[0093] The key storage module 402 is used to persistently store the private key in a trusted module included in the smart device, so as to encrypt the unique identifier using the trusted module and the private key;

[0094] The key sending module 403 is used to send the unique identifier and the public key of the smart device to the storage service end, so that the management party can communicate with the smart device based on the private key, the public key stored in the storage service end and the unique identifier to determine the status information of the smart device.

[0095] An embodiment of the present invention also provides a system for processing smart device information, including: one or more clients for processing smart device information, a verification server, and a storage service, so that the system for processing smart device information executes the method provided in any of the above embodiments.

[0096] An embodiment of the present invention also provides an electronic device for processing smart device information, comprising: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement the method provided in any of the above embodiments.

[0097] An embodiment of the present invention further provides a computer-readable medium on which a computer program is stored. When the program is executed by a processor, the method provided in any of the above embodiments is implemented.

[0098] Figure 5 An exemplary system architecture 500 of a client for processing smart device information or processing smart device information according to an embodiment of the present invention is shown.

[0099] like Figure 5 As shown, system architecture 500 may include terminal devices 501, 502, 503, a network 504 and a server 505. Network 504 is used to provide a medium for communication links between terminal devices 501, 502, 503 and server 505. Network 504 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0100] Users can use terminal devices 501, 502, 503 to interact with server 505 through network 504 to receive or send messages, etc. Various client applications can be installed on terminal devices 501, 502, 503, such as e-commerce client applications, web browser applications, search applications, instant messaging tools, and email clients.

[0101] The terminal devices 501 , 502 , and 503 may be various electronic devices having a display screen and supporting various client applications, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0102] The server 505 may be a server providing various services, such as a verification or storage management server providing support for client applications used by users using the terminal devices 501, 502, and 503. The verification server may process the received request for querying the status of the smart device, and feed back the status information of the smart device obtained by the processing to the terminal device.

[0103] It should be noted that the method for processing smart device information provided in the embodiment of the present invention is generally executed by terminal devices 501, 502, 503 and server 505. Accordingly, the client for processing smart device information is generally set in the terminal devices 501, 502, 503; the verification service end and / or storage service end for processing smart device information is generally set in the server 505.

[0104] It should be understood that Figure 5 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0105] Reference below Figure 6 , which shows a schematic diagram of the structure of a computer system 600 of a terminal device suitable for implementing an embodiment of the present invention. Figure 6 The terminal device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0106] like Figure 6 As shown, the computer system 600 includes a central processing unit (CPU) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage part 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the system 600 are also stored. The CPU 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0107] The following components are connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 610 as needed, so that a computer program read therefrom is installed into the storage section 608 as needed.

[0108] In particular, according to the embodiments disclosed in the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present invention include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 609, and / or installed from the removable medium 611. When the computer program is executed by the central processing unit (CPU) 601, the above-mentioned functions defined in the system of the present invention are executed.

[0109] It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0110] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0111] The modules and / or units involved in the embodiments of the present invention may be implemented in software or hardware. The modules and / or units described may also be set in a processor, for example, they may be described as: a processor including a key generation module, a key storage module, and a key transmission module; wherein the names of these modules do not constitute a limitation on the modules themselves in certain circumstances, for example, the key generation module may also be described as a "module for generating a private key and a public key corresponding to the private key based on the unique identification of the smart device".

[0112] As another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiment; or it may exist independently without being assembled into the device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by a device, the device includes: in response to a request for use of a smart device, obtaining a unique identifier of the smart device; generating a private key and a public key corresponding to the private key based on the unique identifier; persistently storing the private key in a trusted module included in the smart device, so as to encrypt the unique identifier using the trusted module and the private key; sending the unique identifier of the smart device and the public key to the storage service end, so that the management party communicates with the smart device based on the private key, the public key stored by the storage service end, and the unique identifier to determine the status information of the smart device.

[0113] The embodiment of the present invention can use the client provided in the smart device to obtain the unique identification of the device, and persistently store the private key generated based on the unique identification in the trusted module included in the smart device, so that the management party can communicate with the smart device based on the private key, the public key corresponding to the private key and the unique identification to determine the status information of the smart device. The embodiment of the present invention improves the automation degree of processing the smart device information, and improves the accuracy and efficiency of processing the smart device information.

[0114] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for processing smart device information, characterized in that: The client device is applied to the smart device and includes: In response to a request for use of a smart device, obtaining a unique identifier of the smart device; Generate a private key and a public key corresponding to the private key based on the unique identifier; Persistently storing the private key in a trusted module included in the smart device, so as to encrypt the unique identifier using the trusted module and the private key; The unique identifier and the public key of the smart device are sent to the storage service end, so that the management party communicates with the smart device based on the private key, the public key stored by the storage service end and the unique identifier to determine the status information of the smart device.

2. The method according to claim 1, characterized in that The trusted module is provided with a plurality of programmable interfaces; wherein the programmable interfaces include an import interface and a storage interface; The step of persistently storing the private key in a trusted module included in the smart device includes: Importing the private key using the import interface; And use the storage interface to perform a persistent storage operation on the imported private key.

3. The method according to claim 1, characterized in that Further including: In response to the operation of triggering the query status information, the unique identifier of the smart device and the ciphertext data corresponding to the unique identifier are obtained; wherein the ciphertext data is obtained by performing an encryption operation on the unique identifier using the private key contained in the trusted module; Sending the unique identifier and the ciphertext data to the verification server, so that the verification server obtains the public key corresponding to the unique identifier from the storage service, and verifies the status information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier; Receive status information for the smart device returned by the verification server.

4. The method according to claim 3, characterized in that: The verifying the state information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier includes: When the verification service end obtains the public key corresponding to the unique identifier from the storage service end, it is determined that the status information of the smart device is in a normal use status.

5. The method according to claim 3 or 4, characterized in that: The verifying the state information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier includes: The verification server uses the public key to perform a decryption operation on the ciphertext data; The target identification obtained by the decryption operation is compared with the unique identification of the smart device; and the status information of the smart device is determined according to the comparison result.

6. The method according to claim 5, characterized in that When the comparison result indicates that the target identifier is the same as the unique identifier of the smart device, determining that the state information of the smart device is a normal use state; When the comparison result indicates that the target identifier is different from the unique identifier of the smart device, it is determined that the state information of the smart device is in an abnormal state.

7. The method according to claim 4, characterized in that The verifying the state information of the smart device based on the unique identifier, the ciphertext data and the public key corresponding to the unique identifier further includes: In the case that the verification service end fails to obtain the public key corresponding to the unique identifier from the storage service end, it is determined that the status information of the smart device is in an abnormal state.

8. A client for processing smart device information, characterized in that: Applied to the smart device, including: a key generation module, a key storage module and a key sending module; wherein, The key generation module is used to obtain the unique identification of the smart device in response to the smart device's request for use; generate a private key and a public key corresponding to the private key based on the unique identification; The key storage module is used to persistently store the private key in a trusted module included in the smart device, so as to encrypt the unique identifier using the trusted module and the private key; The key sending module is used to send the unique identifier and the public key of the smart device to the storage service end, so that the management party can communicate with the smart device based on the private key, the public key stored in the storage service end and the unique identifier to determine the status information of the smart device.

9. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 7.

10. A computer readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images