Communication method and system based on power terminal, electronic equipment and storage medium

Abstract

The invention provides a communication method and system based on a power terminal, electronic equipment and a storage medium. The method comprises the following steps: receiving original power business data sent by a power terminal, and forwarding the original power business data to an open processor in the lightweight module; performing storage item configuration processing, routing mode configuration processing, dialing management, dual-card selection configuration processing and hard encryption configuration processing on the open processor to obtain a configured open processor; processing the original power business data by using the configured open processor to obtain configured power business data, and sending the configured power business data to a security encryption chip by using the lightweight module; and performing encryption processing on the configuration power business data by using the security encryption chip to obtain target power business data.

Description

Technical Field

[0001] The present disclosure relates to the field of power communication technology, and in particular to a communication method, system, electronic device and storage medium based on a power terminal. Background Art

[0002] The 5G communication terminals of power business terminals can be divided into stand-alone terminals and embedded terminals in terms of form. Embedded 5G communication terminals require each manufacturer to develop modules separately, and the compatibility between different manufacturers is insufficient. Stand-alone 5G communication terminals require an external microprocessor unit to process business data, which has the problem of high cost.

[0003] In view of this, how to make the communication terminal of the power business adaptable to multiple manufacturers without the need for an external microprocessor unit has become a technical problem that needs to be solved urgently. Summary of the invention

[0004] In view of this, the purpose of the present disclosure is to propose a communication method, system, electronic device and storage medium based on a power terminal to solve or partially solve the above technical problems.

[0005] Based on the above purpose, the first aspect of the present disclosure proposes a communication method based on a power terminal, the method is applied to a communication system based on a power terminal, the system includes a security reinforcement module, the security reinforcement module includes a lightweight module and a security encryption chip; the method includes:

[0006] Receiving original power service data sent by the power terminal, and forwarding the original power service data to the open processor in the lightweight module;

[0007] Performing storage item configuration processing, routing mode configuration processing, dial-up management, dual-card selection configuration processing and hard encryption configuration processing on the open processor to obtain a configured open processor;

[0008] Using the configured open processor to process the original power business data to obtain configured power business data, and using the lightweight module to send the configured power business data to the security encryption chip;

[0009] The configured power business data is encrypted using the security encryption chip to obtain target power business data.

[0010] Based on the same inventive concept, the second aspect of the present disclosure proposes a communication system based on a power terminal, comprising:

[0011] A forwarding module, configured to receive original power service data sent by the power terminal, and forward the original power service data to the open processor in the lightweight module;

[0012] a configuration module configured to perform storage item configuration processing, routing mode configuration processing, dial-up management, dual-card selection configuration processing and hard encryption configuration processing on the open processor to obtain a configured open processor;

[0013] A data processing module is configured to process the original power business data using the configured open processor to obtain configured power business data, and send the configured power business data to the security encryption chip using the lightweight module;

[0014] The encryption processing module is configured to utilize the security encryption chip to perform encryption processing on the configured power business data to obtain target power business data.

[0015] Based on the same inventive concept, the third aspect of the present disclosure proposes an electronic device, including a memory, a processor, and a computer program stored in the memory and executable by the processor, wherein the processor implements the method as described above when executing the computer program.

[0016] Based on the same inventive concept, a fourth aspect of the present disclosure proposes a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the method as described above.

[0017] As can be seen from the above, the communication method, system, electronic device and storage medium based on the power terminal provided by the present disclosure. The original power business data sent by the power terminal is received, and the original power business data is forwarded to the open processor in the lightweight module. The open processor is subjected to storage item configuration processing, routing mode configuration processing, dial-up management, dual card selection configuration processing and hard encryption configuration processing to obtain a configured open processor. In this way, by configuring the open processor, the secondary development of the open processor is realized, so that the lightweight module can reuse computing and storage resources and can adapt to different manufacturers, thereby reducing costs. The original power business data is processed by the configured open processor to obtain the configured power business data, and the configured power business data is sent to the secure encryption chip by using the lightweight module. In this way, the original power business data can be processed by using the lightweight processor without the need for an external microcontroller unit. The configured power business data is encrypted by using the secure encryption chip to obtain the target power business data. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the present disclosure or related technologies, the drawings required for use in the embodiments or related technical descriptions are briefly introduced below. Obviously, the drawings described below are only embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0019] Figure 1 is a flow chart of a communication method based on a power terminal according to an embodiment of the present disclosure;

[0020] Figure 2 A schematic diagram of the structure of a smart energy unit according to an embodiment of the present disclosure;

[0021] Figure 3 A flowchart of configuring an open processor according to an embodiment of the present disclosure;

[0022] Figure 4 A flowchart of a storage item configuration for an embodiment of the present disclosure;

[0023] Figure 5 A flowchart of a hard encryption configuration for an embodiment of the present disclosure;

[0024] Figure 6 It is a schematic diagram of the structure of a communication system based on a power terminal according to an embodiment of the present disclosure;

[0025] Figure 7 It is a schematic diagram of the structure of an electronic device according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0026] In order to make the objectives, technical solutions and advantages of the present disclosure more clearly understood, the present disclosure is further described in detail below in combination with specific embodiments and with reference to the accompanying drawings.

[0027] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present disclosure should be understood by people with ordinary skills in the field to which the present disclosure belongs. The "first", "second" and similar words used in the embodiments of the present disclosure do not indicate any order, quantity or importance, but are only used to distinguish different components. "Including" or "comprising" and similar words mean that the elements or objects appearing before the word cover the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0028] Based on the description of the background technology, the 5G communication terminals of the power business terminals can be divided into two types in terms of form: stand-alone terminals and embedded terminals. Stand-alone 5G communication terminals refer to independent communication devices that provide communication channels for business terminals. Generally, business terminals are connected through RJ45 network ports or serial ports. Embedded communication terminals refer to the communication components in business terminal equipment, which are mostly customized terminals, such as: remote wireless broadband communication units of type I and II concentrators of power consumption information collection systems. For stand-alone communication terminals, their structural dimensions and appearance requirements generally need to consider factors such as physical protection, installation conditions, heat dissipation requirements, easy maintenance requirements, and manufacturing costs. Because there is an independent microcontroller unit (MCU) processing system, it is easier to support network management functions, edge computing functions, and security authentication functions. The corresponding cost is higher than that of embedded communication terminals.

[0029] The hardware design of the embedded 5G communication terminal is simple, and it can basically meet most low-saturation business applications and expansion requirements in terms of interface resources, making it easier to install and use. Under this general architecture, further reduction and optimization can be carried out according to actual needs, greatly reducing the power consumption and volume of the equipment, forming an embedded lightweight 5G communication unit for equipment such as smart station integration terminals, energy controllers, power consumption information collection concentrators, and load-controlled special transformer collection terminals. The disadvantage is that the adaptability of different manufacturers is insufficient.

[0030] 5G communication terminal products do not perform too much complex processing on business data, and do not require high processing capabilities from the device's main central processing unit (CPU), and have fewer requirements for MCU resources. However, with the large-scale application of 5G, the demands on cost, power consumption, security, etc. are becoming increasingly prominent.

[0031] As mentioned above, how to make the communication terminals of the power business adaptable to multiple manufacturers without the need for an external microprocessor unit has become an important research issue.

[0032] Based on the above description, if Figure 1 As shown, the communication method based on the power terminal proposed in this embodiment is applied to a communication system based on the power terminal, the system includes a security reinforcement module, the security reinforcement module includes a lightweight module and a security encryption chip; the method includes:

[0033] Step 101: receiving original power service data sent by a power terminal, and forwarding the original power service data to an open processor in the lightweight module.

[0034] Step 102, performing storage item configuration processing, routing mode configuration processing, dial-up management, dual-card selection configuration processing and hard encryption configuration processing on the open processor to obtain a configured open processor.

[0035] Step 103: Process the original power business data using the configured open processor to obtain configured power business data, and send the configured power business data to the security encryption chip using the lightweight module.

[0036] Step 104: encrypt the configured power service data using the security encryption chip to obtain target power service data.

[0037] When implementing it specifically, Figure 2 A schematic diagram of the structure of the communication system supporting the smart energy unit of the embodiment of the present disclosure. Figure 2 As shown, the smart energy unit (a kind of power terminal) includes: 5G security reinforcement module, power output DC_OUT and network port. Among them, the 5G security reinforcement module includes: lightweight module (5G Redcap module), security encryption chip, TYPEC interface, SIM1 card, SIM2 card, ANT1, ANT2, power input DC_IN, LEDs and RST. The 5G Redcap module includes: open processor (Open CPU), which includes soft routing and security authentication SDK.

[0038] The TYPEC interface is connected to the USB2.0 port of the 5G Redcap module through an analog switch. The security encryption chip is connected to the 5G Redcap module through the Serial Peripheral Interface (SPI). SIM1 card and SIM2 card are connected to the 5G Redcap module through an analog switch. ANT1, ANT2, LEDs, and RST are connected to the 5G Redcap module. The power output DC_OUT sends the 12V input voltage to the power input DC_IN, and the power input DC_IN is connected to the 5G Redcap module through VBAT_RF and VBAT_BB. The network port is connected to the 5G Redcap module through RGMII.

[0039] The communication system based on power terminals mainly includes the following features:

[0040] (1) The 5G Redcap module of the 5G security reinforcement module adopts the Balong solution. The module supports Open CPU secondary development and can reuse the module's computing and storage resources to reduce costs.

[0041] (2) The communication method between the 5G security reinforcement module and the power business terminal is the network port, which is similar to the independent 5G terminal in function. However, the peripheral interfaces such as the network port, LEDs, and routing functions are all implemented by the 5G Redcap module instead of an independent MCU, so an external MCU is not required.

[0042] (3) The 5G security reinforcement module is soldered with the security encryption chip SC1041, connected through the module SPI interface, and a security authentication SDK program is developed based on the module's Open CPU to complete security encryption and identity authentication and certificate loading with the secure access gateway.

[0043] (4) The module of the 5G security reinforcement module is the 5G R17 standard Redcap module, which can further quickly realize the low cost of the 5G module.

[0044] (5) The power supply for the 5G security reinforcement module comes from the 12V power supply of the power service terminal.

[0045] The 5G security reinforcement module based on the 5G Redcap module Open CPU architecture, compared with the current 5G communication terminal, the communication system based on the power terminal in the disclosed embodiment does not require an external MCU, and external interfaces such as network port, serial port, Beidou, USB port, encryption chip, etc. are all connected through 5G module resources; compared with the current power terminal embedded communication unit, it does not need to be software adapted with the business terminal, but only needs to be connected to the standard 12V power supply and network port. In terms of software, the 5G Redcap module realizes functions such as routing and bridging, and realizes business security encryption functions.

[0046] The power terminal-based communication system in the disclosed embodiment reuses the computing and storage resources of the 5G module to reduce costs. The module-based Open CPU secondary development not only solves the security problems and insufficient adaptability problems of embedded 5G communication terminals, but also solves the high cost problem of ordinary stand-alone 5G communication terminals.

[0047] A lightweight 5G Redcap module is used, and routing and security reinforcement functions are developed based on the module's own open processor Open CPU to achieve a truly lightweight design. It must be integrated with the smart energy unit and easy to adapt. The power terminal-based communication system in the disclosed embodiment only requires the business terminal manufacturer to reserve the approximate size of the module inside the terminal, and reserve the 12V power supply interface and the universal network port before deployment and installation.

[0048] Through the above embodiment, the original power business data sent by the power terminal is received, and the original power business data is forwarded to the open processor in the lightweight module. The open processor is subjected to storage item configuration processing, routing mode configuration processing, dialing management, dual card selection configuration processing and hard encryption configuration processing to obtain a configured open processor. In this way, by configuring the open processor, the secondary development of the open processor is realized, so that the lightweight module can reuse computing and storage resources and can adapt to different manufacturers, thereby reducing costs. The original power business data is processed by the configured open processor to obtain the configured power business data, and the configured power business data is sent to the secure encryption chip by the lightweight module. In this way, the original power business data can be processed by the lightweight processor without the need for an external microcontroller unit. The configured power business data is encrypted by the secure encryption chip to obtain the target power business data.

[0049] Figure 3 FIG. 1 is a flow chart of configuring an open processor according to an embodiment of the present disclosure. Figure 3 As shown in the figure, the secondary development of the open CPU subsystem based on Modem includes: NV customization, routing mode configuration, dial-up management, dual-card selection configuration and hard encryption configuration.

[0050] In some embodiments, in step 102, the process of storing item configuration processing includes:

[0051] Step 1021, adding a hard encryption certificate node and a software development tool node under the communication module node of the open processor.

[0052] Step 1022, add the structure definition of the hard encryption certificate node and the software development tool node, and add the enumeration information of the storage item identifier.

[0053] Step 1023, setting standard values ​​for the product categories, subcategory names and burning versions in the storage items to obtain product customization.

[0054] Step 1024: compile the product customization to obtain a storage item configuration file.

[0055] Step 1025: Generate an open processor after storage item configuration based on the storage item configuration file.

[0056] In specific implementation, storage item configuration processing refers to customizing non-volatile storage items (Non-volatile Item, NV for short).

[0057] Modem is a functional module of the 5G Redcap module. As a mobile network communication module, it provides mobile communication services for board-side applications. The NV item (Non-volatile Item) of the modem is a non-volatile storage item used to store some key data, which can provide configuration information for components. The NV module provides management services such as adding NV items, loading, storing, reading and writing, upgrading and backing up NV data. The hard encryption authentication certificates and SDK programs involved in the secondary development of the open CPU are stored in the NV item.

[0058] Figure 4 Flow chart of storage item configuration of the embodiment of the present disclosure. Figure 4 As shown in the figure, the storage item configuration process includes: adding two NV nodes, hard encryption certificate and SDK, reading and writing NV items, and NV upgrade and backup process. The specific process of adding two NV nodes, hard encryption certificate and SDK, is as follows:<PROJECT_GROUP> Add two NV nodes, hard encryption certificate and software development kit (SDK), with storage item identifiers (NV ID) of 51801 and 51802 respectively; add the structure definition of the two new NVs in nv_define.h; add the enumeration of NV ID; customize the values ​​of NV items, such as product category, subcategory name, burning version, etc., and generate product customization .xml; compile and generate new_nv.db, nv_modem.bin, and nv_cast.bin files. The specific process of reading and writing NV items is: use the NV Tool tool to read and write the two NV items of hard encryption certificate and SDK. The specific process of the NV upgrade and backup process is: read the two new NV values ​​from the nvdload upgrade partition to the shared memory; read the SDK NV value from the working partition nvimg to the shared memory; write the latest NV data back to the working partition, backup partition, and system partition.

[0059] Through the above solution, by storing the hard encryption authentication certificate and SDK program involved in the secondary development of the open processor in the storage item, the storage item configuration of the open processor is realized, which can adapt to the storage item requirements of different manufacturers, thereby reducing costs.

[0060] In some embodiments, in step 102, the process of routing mode configuration processing includes:

[0061] Step 102A, determining a universal serial bus network card in the open processor, setting the universal serial bus network card to use network address translation and communication module network card for data transmission, and obtaining a first routing mode configuration.

[0062] Step 102B, determining the media access controller network card in the open processor, setting the media access controller network card to use the network address translation and communication module network card for data transmission, and obtaining a second routing mode configuration.

[0063] Step 102C: Generate an open processor after routing mode configuration based on the first routing mode configuration and the second routing mode configuration.

[0064] In the specific implementation, the specific process of routing mode configuration processing is as follows: gmac0 network card forwards data with the modem network card (network card name eth_x) through NAT. The dial-up of routing mode is dialed from the application on the single board side through appvcom. The modem is reflected as a virtual network port device on the single board side, and USB (network card name usb0) and GMAC (network card name gmac0) are reflected as user access network card devices. The usb0 network card or gmac0 network card forwards data with the modem network card (network card name eth_x) through NAT.

[0065] Through the above solution, the usb0 network card or gmac0 network card transmits data through NAT forwarding and the Modem network card (network card name is eth_x), realizing the routing mode configuration of the open processor, which can adapt to the routing mode requirements of different manufacturers, thereby reducing costs.

[0066] In some embodiments, in step 102, the dial management process includes:

[0067] Step 102a: Use the open processor to send a dialing instruction and verify whether the dialing is successful.

[0068] Step 102b, in response to determining that a message appears and no packet is lost, verifying that the dialing is successful.

[0069] Step 102c, obtaining the communication address information of the internal dial-up according to the call control command echo message.

[0070] Step 102d: Generate an open processor after dial-up management based on the communication address information.

[0071] In the specific implementation, the specific process of dial-up management is as follows: (1) Send a dial-up command to the USB UART0 port of the Moses chip; (2) Activate the network card, set the route, verify whether the dial-up is successful, and obtain the communication address information (IP address) of the internal dial-up according to the message echoed by the call control command (AT command) AT+CGPADDR; (3) Execute the command to activate the network card and verify whether the dial-up is successful; (4) If the ping message has a return message and there is no packet loss, it proves that the dial-up is successful; (5) Disconnect the dial-up AT command: AT^NDISDUP=1,0.

[0072] Through the above solution, by verifying whether the dialing is successful and obtaining the communication address information of the internal dialing, the dialing management of the open processor is realized, which can adapt to the dialing management requirements of different manufacturers, thereby reducing costs.

[0073] In some embodiments, in step 102, the dual card selection configuration process includes:

[0074] Step 102X, starting the dual card selection configuration function of the open processor, reading the current card position information, and judging whether the dual cards on the current card position are both valid communication cards based on the current card position information.

[0075] Step 102Y, in response to determining that both the dual cards on the current card slot are valid communication cards, a target communication card with high signal strength is determined from the dual cards based on the base station information of the current network environment.

[0076] Step 102Z, switching the card position to the target communication card, and obtaining an open processor after dual-card selection configuration.

[0077] In specific implementation, the specific process of dual-card selection configuration processing is as follows: (1) When the dual-card optimization function is started, the card position information in the current communication module is read to check whether all the card positions are valid SIM cards, and the card operator information is recorded; (2) All operator base station information of the specified 5G / 4G network in the current network environment is searched, and the base station information is sorted according to the signal strength; (3) The existing operator information and card are matched, the priority of the card operator in the current network environment is matched, and the card with better network signal is selected for card position switching; (4) After switching to the specified card position, the normal dial-up Internet access process is carried out.

[0078] Through the above scheme, by determining the target communication card with higher signal strength from the dual cards, the dual-card selection configuration of the open processor is realized, which can adapt to the dual-card selection requirements of different operators, thereby increasing communication reliability.

[0079] In some embodiments, in step 102, the process of hard encryption configuration processing includes:

[0080] Step 102M, using the lightweight module to call the serial peripheral device interface driver of the encryption chip.

[0081] Step 102N, encapsulate the serial peripheral device interface driver to obtain a shared library file.

[0082] Step 102O, cross-compile the shared library file to obtain an encryption algorithm library.

[0083] Step 102P, use the first encryption algorithm interface to import the encryption key into the encryption algorithm library, use the second encryption algorithm interface to import the signature certificate and encryption certificate into the encryption algorithm library, and obtain an open processor after hard encryption configuration, so that the configured open processor can call the encryption algorithm library to perform data encryption and decryption processing.

[0084] In specific implementation, the hard encryption chip communicates as an SPI peripheral. SPI communication includes three processes: sending, querying, and receiving, and the data format is encapsulated according to the hard encryption standard. The encryption chip can respond to the correct commands initiated by the main chip, thereby realizing the data encryption and decryption functions.

[0085] Hard encryption communication can perform channel encryption through hard encryption chips and security gateways, and is applied to power load management business. Figure 5 FIG. 1 is a flowchart of the hard encryption configuration of the embodiment of the present disclosure. Figure 5 As shown in the figure, the specific process of hard encryption configuration processing is as follows:

[0086] For 5G communication terminals, encrypted communication is initiated by the security gateway. As the responder, the 5G communication terminal decrypts according to the certificate and key. If the decryption is successful, the encrypted data will be returned. The security gateway will decrypt and analyze the data according to the supporting certificate.

[0087] The 5G communication system (Redcap module security authentication SDK) calls the serial peripheral interface (SPI) driver of the encryption chip; the security authentication SDK is encapsulated into libscspi.so; the corresponding encryption algorithm library (skf library) is generated through cross-compilation; the certificate request file in the chip is first exported to issue the certificate, and the certificate request csr can be exported and imported through instructions. The skf library has interfaces for exporting csr and importing certificates. The skf library completes the export of csr and import of certificates; first call the SKF_ImportECCKeyPair interface for importing the encryption key pair, import the encryption key, and then call the SKF_ImportCertificate interface to import the signature certificate and encryption certificate; call the skf library file to encrypt and decrypt data.

[0088] The specific process of calling the skf library file for data encryption and decryption is as follows: 5G communication system (Redcap module security authentication SDK) initializes the SPI interface; the security authentication SDK sets SSN = 0; the security authentication SDK sends 0x55 CLA INS P1 P2Len1 Len2 DATA LRC1; the security authentication SDK sets SSN = 1; the security authentication SDK sets SSN = 0; the security authentication SDK waits for the BUSY status word; the security authentication SDK determines whether the status word is 0x55; when the status word is not 0x55, it returns to the step of "security authentication SDK waits for the BUSY status word"; when the status word is 0x55, the security authentication SDK reads data SW1 SW2Len1Len2 DATA LRC2; the security authentication SDK sets SSN = 1; end.

[0089] Through the above solution, by importing encryption keys, signature certificates and encryption certificates into the encryption algorithm library, hard encryption configuration of the open processor is realized, which can meet the security reinforcement requirements for wireless communications.

[0090] In some embodiments, before step 104, the method further includes:

[0091] Step 104A, obtaining the operating status of the security encryption chip.

[0092] Step 104B: determine whether there is any abnormality in the security encryption chip based on the operating status.

[0093] Step 104C, in response to determining that the security encryption chip is abnormal, an alarm is issued and the communication function of the power terminal-based communication system is disabled.

[0094] During the specific implementation, various requirements are made for the security protection of the power 5G integrated module. Based on the security protection requirements, an integrated 5G security reinforcement module for the smart energy unit is designed to solve problems such as high cost of 5G terminals and insufficient security of the public network.

[0095] Through the above scheme, when there is an abnormality in the security encryption chip, an alarm prompt is issued and the communication function of the communication system based on the power terminal is disabled. In this way, the situation where the configuration power business data cannot be encrypted can be avoided, and the security of the power business data is guaranteed.

[0096] Through the above embodiment, the original power business data sent by the power terminal is received, and the original power business data is forwarded to the open processor in the lightweight module. The open processor is subjected to storage item configuration processing, routing mode configuration processing, dialing management, dual card selection configuration processing and hard encryption configuration processing to obtain a configured open processor. In this way, by configuring the open processor, the secondary development of the open processor is realized, so that the lightweight module can reuse computing and storage resources and can adapt to different manufacturers, thereby reducing costs. The original power business data is processed by the configured open processor to obtain the configured power business data, and the configured power business data is sent to the secure encryption chip by the lightweight module. In this way, the original power business data can be processed by the lightweight processor without the need for an external microcontroller unit. The configured power business data is encrypted by the secure encryption chip to obtain the target power business data.

[0097] It should be noted that the method of the embodiment of the present disclosure can be performed by a single device, such as a computer or a server. The method of the present embodiment can also be applied in a distributed scenario and completed by multiple devices cooperating with each other. In the case of such a distributed scenario, one of the multiple devices can only perform one or more steps in the method of the embodiment of the present disclosure, and the multiple devices will interact with each other to complete the described method.

[0098] It should be noted that the above describes some embodiments of the present disclosure. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the above embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0099] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, the present disclosure also provides a communication system based on a power terminal.

[0100] refer to Figure 6 , the communication system based on the power terminal comprises:

[0101] The forwarding module 301 is configured to receive the original power service data sent by the power terminal and forward the original power service data to the open processor in the lightweight module;

[0102] The configuration module 302 is configured to perform storage item configuration processing, routing mode configuration processing, dial-up management, dual-card selection configuration processing and hard encryption configuration processing on the open processor to obtain a configured open processor;

[0103] The data processing module 303 is configured to process the original power business data using the configured open processor to obtain configured power business data, and send the configured power business data to the security encryption chip using the lightweight module;

[0104] The encryption processing module 304 is configured to utilize the security encryption chip to perform encryption processing on the configured power service data to obtain target power service data.

[0105] In some embodiments, the configuration module 302 includes a storage item configuration unit; the storage item configuration unit is specifically configured to:

[0106] Adding a hard encryption certificate node and a software development tool node under the communication module node of the open processor;

[0107] Add the structure definition of the hard encryption certificate node and the software development tool node, and add the enumeration information of the storage item identifier;

[0108] Set standard values ​​for product categories, subcategory names, and chip versions in storage items to achieve product customization;

[0109] Compiling the product customization to obtain a storage item configuration file;

[0110] Based on the storage item configuration file, an open processor after the storage item configuration is generated.

[0111] In some embodiments, the configuration module 302 includes a routing mode configuration unit; the routing mode configuration unit is specifically configured to:

[0112] Determine a universal serial bus network card in the open processor, set the universal serial bus network card to use network address translation and communication module network card to perform data transmission, and obtain a first routing mode configuration;

[0113] Determine a media access controller network card in the open processor, set the media access controller network card to use network address translation and communication module network card to perform data transmission, and obtain a second routing mode configuration;

[0114] Based on the first routing mode configuration and the second routing mode configuration, an open processor after routing mode configuration is generated.

[0115] In some embodiments, the configuration module 302 includes a dial management unit; the dial management unit is specifically configured to:

[0116] Using the open processor to send a dialing instruction and verify whether the dialing is successful;

[0117] In response to determining that the message appears and no packet is lost, verifying that the dialing is successful;

[0118] Obtain the communication address information of the internal dial-up according to the call control command echo message;

[0119] Based on the communication address information, an open processor after dial-up management is generated.

[0120] In some embodiments, the configuration module 302 includes a dual card selection configuration unit; the dual card selection configuration unit is specifically configured to:

[0121] Starting the dual card selection configuration function of the open processor, reading the current card position information, and judging whether the dual cards on the current card position are both valid communication cards based on the current card position information;

[0122] In response to determining that both the dual cards in the current card position are valid communication cards, determining a target communication card with a high signal strength from the dual cards based on the base station information of the current network environment;

[0123] The card position is switched to the target communication card to obtain an open processor after dual-card selection configuration.

[0124] In some embodiments, the configuration module 302 includes a hard encryption configuration unit; the hard encryption configuration unit is specifically configured as follows:

[0125] Using the lightweight module to call the serial peripheral device interface driver of the encryption chip;

[0126] Encapsulating the serial peripheral device interface driver to obtain a shared library file;

[0127] Cross-compiling the shared library file to obtain an encryption algorithm library;

[0128] The encryption key is imported into the encryption algorithm library using the first encryption algorithm interface, and the signature certificate and encryption certificate are imported into the encryption algorithm library using the second encryption algorithm interface to obtain an open processor after hard encryption configuration, so that the encryption algorithm library can be called by the configured open processor to perform data encryption and decryption processing.

[0129] In some embodiments, before the secure encryption chip is used to encrypt the configured power service data to obtain the target power service data, the system further includes an abnormality judgment module; the abnormality judgment module is specifically configured as follows:

[0130] Obtaining the operating status of the security encryption chip;

[0131] Determine whether the security encryption chip is abnormal based on the operating status;

[0132] In response to determining that an abnormality exists in the security encryption chip, an alarm is issued and a communication function of the power terminal-based communication system is disabled.

[0133] For the convenience of description, the above device is described by dividing it into various modules according to its functions. Of course, when implementing the present disclosure, the functions of each module can be implemented in the same or multiple software and / or hardware.

[0134] The device of the above embodiment is used to implement the corresponding communication method based on the power terminal in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0135] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments and methods, the present disclosure also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the communication method based on the power terminal described in any of the above embodiments is implemented.

[0136] Figure 7 A more specific schematic diagram of the hardware structure of an electronic device provided in this embodiment is shown, and the device may include: a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040 are connected to each other through the bus 1050 in the device.

[0137] The processor 1010 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0138] The memory 1020 may be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 1020 may store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program codes are stored in the memory 1020 and are called and executed by the processor 1010.

[0139] The input / output interface 1030 is used to connect the input / output module to realize information input and output. The input / output module can be configured in the device as a component (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, etc.

[0140] The communication interface 1040 is used to connect a communication module (not shown in the figure) to realize communication interaction between the device and other devices. The communication module can realize communication through a wired mode (such as USB (Universal Serial Bus), network cable, etc.), or through a wireless mode (such as mobile network, WIFI (Wireless Fidelity), Bluetooth, etc.).

[0141] The bus 1050 includes a path that transmits information between the various components of the device (eg, the processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040).

[0142] It should be noted that, although the above device only shows the processor 1010, the memory 1020, the input / output interface 1030, the communication interface 1040 and the bus 1050, in the specific implementation process, the device may also include other components necessary for normal operation. In addition, it can be understood by those skilled in the art that the above device may also only include the components necessary for implementing the embodiments of the present specification, and does not necessarily include all the components shown in the figure.

[0143] The electronic device of the above embodiment is used to implement the corresponding communication method based on the power terminal in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0144] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, the present disclosure also provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the communication method based on the power terminal as described in any of the above embodiments.

[0145] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0146] The computer instructions stored in the storage medium of the above embodiment are used to enable the computer to execute the communication method based on the power terminal as described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0147] Those skilled in the art should understand that the discussion of any of the above embodiments is merely illustrative and is not intended to imply that the scope of the present disclosure is limited to these examples. Based on the concept of the present disclosure, the technical features in the above embodiments or different embodiments may be combined, the steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present disclosure as described above, which are not provided in detail for the sake of simplicity.

[0148] In addition, to simplify the description and discussion, and in order not to make the embodiments of the present disclosure difficult to understand, the known power / ground connections to the integrated circuit (IC) chips and other components may or may not be shown in the provided figures. In addition, the device can be shown in the form of a block diagram to avoid making the embodiments of the present disclosure difficult to understand, and this also takes into account the fact that the details of the implementation of these block diagram devices are highly dependent on the platform on which the embodiments of the present disclosure will be implemented (that is, these details should be fully within the scope of understanding of those skilled in the art). Where specific details (e.g., circuits) are set forth to describe exemplary embodiments of the present disclosure, it is apparent to those skilled in the art that the embodiments of the present disclosure can be implemented without these specific details or with changes in these specific details. Therefore, these descriptions should be considered illustrative rather than restrictive.

[0149] Although the present disclosure has been described in conjunction with specific embodiments of the present disclosure, many replacements, modifications and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may use the embodiments discussed.

[0150] The embodiments of the present disclosure are intended to cover all such substitutions, modifications and variations that fall within the broad scope of the present disclosure. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present disclosure should be included in the scope of protection of the present disclosure.

Claims

1. A communication method based on a power terminal, characterized in that: The method is applied to a communication system based on a power terminal, the system includes a security reinforcement module, the security reinforcement module includes a lightweight module and a security encryption chip; the method includes: Receiving original power service data sent by the power terminal, and forwarding the original power service data to the open processor in the lightweight module; Performing storage item configuration processing, routing mode configuration processing, dial-up management, dual-card selection configuration processing and hard encryption configuration processing on the open processor to obtain a configured open processor; Using the configured open processor to process the original power business data to obtain configured power business data, and using the lightweight module to send the configured power business data to the security encryption chip; The configured power business data is encrypted using the security encryption chip to obtain target power business data.

2. The method according to claim 1, characterized in that The storage item configuration processing process includes: Adding a hard encryption certificate node and a software development tool node under the communication module node of the open processor; Add the structure definition of the hard encryption certificate node and the software development tool node, and add the enumeration information of the storage item identifier; Set standard values ​​for product categories, subcategory names, and chip versions in storage items to achieve product customization; Compiling the product customization to obtain a storage item configuration file; Based on the storage item configuration file, an open processor after the storage item configuration is generated.

3. The method according to claim 1, characterized in that The process of routing mode configuration processing includes: Determine a universal serial bus network card in the open processor, set the universal serial bus network card to use network address translation and communication module network card to perform data transmission, and obtain a first routing mode configuration; Determine a media access controller network card in the open processor, set the media access controller network card to use network address translation and communication module network card to perform data transmission, and obtain a second routing mode configuration; Based on the first routing mode configuration and the second routing mode configuration, an open processor after routing mode configuration is generated.

4. The method according to claim 1, characterized in that: The dial-up management process includes: Using the open processor to send a dialing instruction and verify whether the dialing is successful; In response to determining that the message appears and no packet is lost, verifying that the dialing is successful; Obtain the communication address information of the internal dial-up according to the call control command echo message; Based on the communication address information, an open processor after dial-up management is generated.

5. The method according to claim 1, characterized in that: The dual card selection configuration process includes: Starting the dual card selection configuration function of the open processor, reading the current card position information, and judging whether the dual cards on the current card position are both valid communication cards based on the current card position information; In response to determining that both the dual cards in the current card position are valid communication cards, determining a target communication card with a high signal strength from the dual cards based on the base station information of the current network environment; The card position is switched to the target communication card to obtain an open processor after dual-card selection configuration.

6. The method according to claim 1, characterized in that The process of hard encryption configuration processing includes: Using the lightweight module to call the serial peripheral device interface driver of the encryption chip; Encapsulating the serial peripheral device interface driver to obtain a shared library file; Cross-compiling the shared library file to obtain an encryption algorithm library; The encryption key is imported into the encryption algorithm library using the first encryption algorithm interface, and the signature certificate and encryption certificate are imported into the encryption algorithm library using the second encryption algorithm interface to obtain an open processor after hard encryption configuration, so that the encryption algorithm library can be called by the configured open processor to perform data encryption and decryption processing.

7. The method according to claim 1, characterized in that Before the configuration power service data is encrypted by the security encryption chip to obtain the target power service data, the method further includes: Obtaining the operating status of the security encryption chip; Determine whether the security encryption chip is abnormal based on the operating status; In response to determining that an abnormality exists in the security encryption chip, an alarm is issued and a communication function of the power terminal-based communication system is disabled.

8. A communication system based on a power terminal, characterized in that: include: A forwarding module, configured to receive original power service data sent by the power terminal, and forward the original power service data to the open processor in the lightweight module; a configuration module configured to perform storage item configuration processing, routing mode configuration processing, dial-up management, dual-card selection configuration processing and hard encryption configuration processing on the open processor to obtain a configured open processor; A data processing module is configured to process the original power business data using the configured open processor to obtain configured power business data, and send the configured power business data to the security encryption chip using the lightweight module; The encryption processing module is configured to utilize the security encryption chip to perform encryption processing on the configured power business data to obtain target power business data.

9. An electronic device, characterized in that: The method comprises a memory, a processor and a computer program stored in the memory and running on the processor, wherein when the processor executes the program, the method according to any one of claims 1 to 7 is implemented.

10. A non-transitory computer-readable storage medium, characterized in that: The non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to cause a computer to execute the method according to any one of claims 1 to 7.

Images