Linux architecture certificate application method and system based on RSA algorithm

Abstract

The invention discloses a Linux architecture certificate application method and system based on an RSA algorithm. The method comprises the following steps that S1, an SDK interface is called through handheld electric detection equipment to detect the validity of an SDK certificate; s2, placing the SDK in the handheld electric detection equipment, and returning to the path; s3, the handheld electric detection equipment requests the SDK to generate an RSA public and private key pair; s4, the handheld electric detection equipment requests the SDK to apply for a certificate; s5, the PKI system decrypts the received certificate application and verifies theme information in the certificate application; and S6, after the SDK receives the issued encryption certificate, the encryption certificate is decrypted by using the prefabricated symmetric key. According to the invention, the encryption certificate application is carried out by integrating the MAC of the handheld electric detection equipment to the certificate theme through the SDK, so that the authenticity of the identity of the equipment and the security of data transmission are effectively ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of data encryption, and in particular to a Linux architecture certificate application method and system based on an RSA algorithm. Background Art

[0002] With the rapid development of intelligent connected vehicles, the amount of sensitive information that needs to be written by handheld electrical inspection equipment during vehicle production has increased exponentially, which has put forward new requirements for information security protection. The developers of existing electrical inspection equipment are non-trusted groups and cannot directly apply for certificates from upstream systems. The issuance and control of certificates has become a major problem that needs to be solved at present.

[0003] To solve the above problems, a Chinese patent with publication number CN118540168A discloses "an implicit certificate generation method and system for data encryption". This patent helps terminal devices apply for certificates by building a terminal device management platform. This method will cause the public and private keys of the certificate to be exposed during the transmission process, and there are still security risks. Summary of the invention

[0004] The purpose of the present invention is to propose a Linux architecture certificate application method and system based on the RSA algorithm, aiming to solve the technical problem that due to information security requirements, the developer of electric inspection equipment belongs to the non-trusted group of information security business and cannot independently develop the certificate application business.

[0005] The present invention is implemented by adopting the following technical scheme: a Linux architecture certificate application method based on RSA algorithm, comprising the following steps: S1: Use a handheld electrical inspection device to call the SDK interface to detect the validity of the SDK certificate; S2: Place the SDK inside the handheld electrical inspection device and return the path; S3: The handheld electrical inspection device requests the SDK to generate an RSA public and private key pair; S4: The handheld electrical inspection device requests the SDK to apply for a certificate; S5: The PKI system decrypts the received certificate application and verifies the subject information in the certificate application; S6: After receiving the encryption certificate, the SDK uses the pre-made symmetric key to decrypt it.

[0006] Furthermore, step S1 is specifically as follows: the handheld electrical inspection device calls the SDK interface to detect the validity of the SDK certificate. If the certificate validity period is less than a preset value or there is no certificate, it returns to a state where a certificate application is required; if a certificate exists, the handheld electrical inspection device is informed that there is no need to apply for a certificate.

[0007] Furthermore, step S2 is specifically as follows: placing the SDK inside the handheld electrical inspection device, and calling the SDK storage path setting interface, certificate and key encrypted file path. The SDK will scan the contents in the path folder. If the folder is empty, it returns that the path setting is successful; if there are files in the folder, the path setting returns that the path setting failed.

[0008] Furthermore, step S3 is specifically as follows: the handheld electrical inspection device requests the SDK to generate an RSA public-private key pair, the SDK generates an RSA public-private key pair through a private RSA algorithm, the private key is encrypted and stored using the internally stored AES symmetric encryption, and the SDK returns the call result to the handheld electrical inspection device.

[0009] Furthermore, step S4 is specifically as follows: the handheld electrical inspection device requests the SDK to apply for a certificate, the SDK reads the MAC address of the handheld electrical inspection device, uses the MAC address as part of the certificate subject to generate a certificate subject, and uses the certificate subject and the public key generated in step S2 to generate a certificate application, and encrypts the generated certificate application and uploads it to the upstream PKI system.

[0010] Furthermore, step S5 is specifically as follows: the PKI system decrypts the received certificate application, verifies the subject information in the certificate application, compares the MAC address in the subject with the PKI device whitelist, and if it exists, signs a certificate with a validity period within the preset value and encrypts it and sends it down; if the MAC address does not exist in the PKI set whitelist, the certificate application is rejected.

[0011] Furthermore, step S6 is specifically as follows: after receiving the encrypted certificate, the SDK uses the pre-made symmetric key to decrypt it and verify the validity of the certificate. After the verification is passed, the certificate is encrypted and stored, and the handheld electrical inspection device is notified that the certificate application is completed.

[0012] A Linux architecture certificate application system based on RSA algorithm is used to implement the above-mentioned Linux architecture certificate application method based on RSA algorithm, including a handheld electrical inspection device, a certificate application module and a PKI module. The handheld electrical inspection device calls the SDK interface to detect the validity of the SDK certificate. The SDK is placed inside the handheld electrical inspection device through the certificate application module and the path is returned. The handheld electrical inspection device requests the certificate application module to generate an RSA public-private key pair and apply for a certificate. The PKI module decrypts the received certificate application and verifies the subject information in the certificate application. After receiving the issued encrypted certificate, the certificate application module uses a pre-made symmetric key to decrypt it.

[0013] The beneficial effects of the present invention are: The present invention embeds a set of SDK components into the handheld electrical inspection device, uses the internal RSA key generation component to generate a public-private key pair, and stores the private key in encrypted form. The SDK reads the device MAC address, converts the MAC address and the public key into a certificate CSR, and applies for a certificate with the upstream PKI system. The PKI has a built-in white list that can be modified by the user. The white list verifies the MAC in the CSR, issues a certificate after the verification, and signs the returned certificate through the root certificate in the SDK for authentication. After the authentication is passed, the private key is encrypted and stored in the SDK. In this certificate application method, the private key does not leave the handheld electrical inspection device, thereby ensuring the security of the private key.

[0014] The present invention integrates the MAC of the handheld electrical inspection device into the certificate subject through SDK to apply for an encrypted certificate, thereby effectively ensuring the authenticity of the device identity and the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying creative work.

[0016] Figure 1 It is a flow chart of the present invention. DETAILED DESCRIPTION

[0017] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0018] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0019] Some embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.

[0020] See also Figure 1 , a Linux architecture certificate application method based on RSA algorithm, comprising the following steps: Step 1: The handheld electrical inspection device calls the SDK interface to detect the validity of the SDK certificate. If the certificate is valid for less than seven days or there is no certificate, it returns a status that requires a certificate application. If a certificate exists, the handheld electrical inspection device is informed that there is no need to apply for a certificate.

[0021] Step 2: Place the SDK inside the handheld electrical inspection device. Call the SDK storage path setting interface to set the file path for certificate and key encryption. The SDK will scan the contents of the path folder. If the folder is empty, it returns a successful path setting. If there is a file in the folder, the path setting returns a failed path setting.

[0022] Step 3: The handheld electrical inspection device requests the SDK to generate an RSA public-private key pair. The SDK generates an RSA public-private key pair using a private RSA algorithm. The private key is encrypted and stored using the internally stored AES symmetric encryption. The public key is stored in plain text, and the SDK returns the result to the handheld electrical inspection device.

[0023] Step 4: The handheld electrical inspection device requests the SDK to apply for a certificate. The SDK reads the MAC address of the handheld electrical inspection device, uses the MAC address as part of the certificate subject to generate a certificate subject, and uses the certificate subject and the public key generated in step 2 to generate a certificate application (CSR). The generated CSR is encrypted and uploaded to the upstream PKI system.

[0024] Step 5: The PKI system decrypts the received certificate application (CSR), verifies the subject information in the certificate application (CSR), and compares the MAC address in the subject with the PKI device whitelist. If it exists, a certificate with a validity period of three months is signed and encrypted and issued; if the MAC address does not exist in the PKI setting whitelist, the certificate application is rejected.

[0025] Step 6: After receiving the encrypted certificate, the SDK uses the pre-made symmetric key to decrypt it and verify the validity of the certificate. After the verification passes, the certificate is encrypted and stored, and the handheld electrical inspection device is notified that the certificate application is completed.

[0026] The present invention also provides a Linux architecture certificate application system based on the RSA algorithm, which is used to implement the above-mentioned Linux architecture certificate application method based on the RSA algorithm, including a handheld electrical inspection device, a certificate application module and a PKI module. The handheld electrical inspection device calls the SDK interface to detect the validity of the SDK certificate. The SDK is placed inside the handheld electrical inspection device through the certificate application module, and a path is returned. The handheld electrical inspection device requests the certificate application module to generate an RSA public-private key pair and apply for a certificate. The PKI module decrypts the received certificate application and verifies the subject information in the certificate application. After receiving the issued encrypted certificate, the certificate application module uses a pre-made symmetric key to decrypt it.

[0027] The present invention embeds a set of SDK components into a handheld electrical inspection device, uses an internal RSA key generation component to generate a public-private key pair, stores the private key in encrypted form, and reads the device MAC address. The SDK converts the MAC address and the public key into a certificate CSR, and applies for a certificate with an upstream PKI system. The PKI has a built-in white list that can be modified by the user, and the white list verifies the MAC in the CSR. After the verification is passed, the certificate is issued, and the returned certificate is signed and authenticated by the root certificate in the SDK. After the authentication is passed, it is encrypted and stored in the SDK. In this certificate application method, the private key does not leave the handheld electrical inspection device, thereby ensuring the security of the private key. By integrating the MAC of the handheld electrical inspection device into the certificate subject through the SDK to apply for an encrypted certificate, the authenticity of the device identity and the security of data transmission are effectively guaranteed.

[0028] For the aforementioned embodiments, for the sake of simplicity, they are all described as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the order of the actions described, because according to the present application, some steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are preferred embodiments, and the actions involved are not necessarily required by the present application.

[0029] The above embodiments describe the basic principles and main features of the present invention and the advantages of the present invention. Those skilled in the art should understand that the present invention is not limited by the above embodiments, and the above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the changes and modifications made by those skilled in the art shall be within the scope of protection of the appended claims of the present invention without departing from the spirit and scope of the present invention.

Claims

1. A Linux architecture certificate application method based on RSA algorithm, characterized in that: The steps include: S1: Use a handheld electrical inspection device to call the SDK interface to detect the validity of the SDK certificate; S2: Place the SDK inside the handheld electrical inspection device and return the path; S3: The handheld electrical inspection device requests the SDK to generate an RSA public and private key pair; S4: The handheld electrical inspection device requests the SDK to apply for a certificate; S5: The PKI system decrypts the received certificate application and verifies the subject information in the certificate application; S6: After receiving the encryption certificate, the SDK uses the pre-made symmetric key to decrypt it.

2. A Linux architecture certificate application method based on RSA algorithm as claimed in claim 1, characterized in that: Step S1 is specifically as follows: the handheld electrical inspection device calls the SDK interface to detect the validity of the SDK certificate. If the certificate validity period is less than the preset value or there is no certificate, it returns to a state where a certificate application is required; if a certificate exists, the handheld electrical inspection device is informed that there is no need to apply for a certificate.

3. A Linux architecture certificate application method based on RSA algorithm as claimed in claim 2, characterized in that: Step S2 is specifically as follows: placing the SDK inside the handheld electrical inspection device, and calling the SDK storage path setting interface, certificate and key encrypted file path. The SDK will scan the contents in the path folder. If the folder is empty, it returns that the path setting is successful; if there are files in the folder, the path setting returns that the path setting failed.

4. A Linux architecture certificate application method based on RSA algorithm as claimed in claim 3, characterized in that: Step S3 is specifically as follows: the handheld electrical inspection device requests the SDK to generate an RSA public-private key pair, the SDK generates an RSA public-private key pair using a private RSA algorithm, the private key is encrypted and stored using internally stored AES symmetric encryption, and the SDK returns the call result to the handheld electrical inspection device.

5. A Linux architecture certificate application method based on RSA algorithm as claimed in claim 4, characterized in that: Step S4 is specifically as follows: the handheld electrical inspection device requests the SDK to apply for a certificate, the SDK reads the MAC address of the handheld electrical inspection device, uses the MAC address as part of the certificate subject to generate a certificate subject, and uses the certificate subject and the public key generated in step S2 to generate a certificate application, and encrypts the generated certificate application and uploads it to the upstream PKI system.

6. A Linux architecture certificate application method based on RSA algorithm as claimed in claim 5, characterized in that: Step S5 is specifically as follows: the PKI system decrypts the received certificate application, verifies the subject information in the certificate application, compares the MAC address in the subject with the PKI device whitelist, and if it exists, signs a certificate with a validity period within the preset value and encrypts it and sends it down; if the MAC address does not exist in the PKI set whitelist, the certificate application is rejected.

7. A Linux architecture certificate application method based on RSA algorithm as claimed in claim 6, characterized in that: Step S6 is specifically as follows: after receiving the encrypted certificate, the SDK uses the pre-made symmetric key to decrypt it and verify the validity of the certificate. After the verification passes, the certificate is encrypted and stored, and the handheld electrical inspection device is notified that the certificate application is completed.

8. A Linux architecture certificate application system based on RSA algorithm, used to implement a Linux architecture certificate application method based on RSA algorithm as described in any one of claims 1 to 7, characterized in that: It includes a handheld electrical inspection device, a certificate application module and a PKI module. The handheld electrical inspection device calls the SDK interface to detect the validity of the SDK certificate. The SDK is placed inside the handheld electrical inspection device through the certificate application module and the path is returned. The handheld electrical inspection device requests the certificate application module to generate an RSA public and private key pair and apply for a certificate. The PKI module decrypts the received certificate application and verifies the subject information in the certificate application. After receiving the issued encrypted certificate, the certificate application module uses the pre-made symmetric key to decrypt it.

Images