Warehouse management method and system based on big data

Abstract

The invention provides a warehouse management method and system based on big data, belongs to the technical field of Internet of Things, and is used for realizing rapid execution of a warehouse management command, such as the data security under the condition of writing in data. The method comprises: an AIoT TF receiving a warehouse management request from an AF, the warehouse management request indicating a write command, the warehouse management request comprising device paging information and data, the data being data of an AIoT device to be written in paging of the device paging information; the AIoTF obtains the encryption level of the data from the database according to the warehouse management request, and the higher the encryption level of the data is, the higher the security of the encryption mode corresponding to the encryption level is; the AIoTF encrypts the data by using an encryption mode corresponding to the encryption level of the data to obtain ciphertext information; and the AIoT TF triggers the reader to send a paging message, the service area of the reader covers the AIoT device to be paged by the device paging information, and the paging message comprises an inventory indication, a write command and ciphertext information.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to a warehouse management method and system based on big data. Background Art

[0002] Ambient IoT (AIoT), also known as Passive IoT, is an emerging Internet of Things (IoT) technology. This concept focuses on how to power IoT devices through energy sources in the natural environment (such as solar energy, wind energy, etc.), thereby reducing or eliminating dependence on traditional energy. This not only helps to reduce energy consumption and carbon emissions, but also provides a wider range of application scenarios for IoT devices.

[0003] The development of IoT technology has profoundly changed the way we live and work. However, the widespread use of IoT devices has also brought some problems, one of which is the energy supply problem of the devices. Traditional IoT devices usually need to be directly connected to the power supply or powered by batteries, which is limited in many cases. Therefore, how to provide stable and reliable energy for IoT devices has become an urgent problem to be solved. Environmental IoT technology came into being in this context. By utilizing natural energy in the environment, environmental IoT technology can provide a continuous energy supply for IoT devices. For example, sensor devices can be powered by solar panels, or energy can be extracted from ambient heat using the thermoelectric effect. The core of environmental IoT technology is energy harvesting technology. Energy harvesting is a technology that obtains energy from the environment and converts it into electrical energy, including solar energy, wind energy, thermal energy, vibration energy and other forms. These energy sources are usually ubiquitous and can provide a continuous energy supply for IoT devices. For example, solar collectors can directly convert sunlight into electrical energy for use by IoT devices; thermoelectric effects can convert temperature differences in the environment into electrical energy, which is suitable for IoT applications in high or low temperature environments.

[0004] At present, AIoT applications mainly include inventory, that is, taking inventory of the current status of AIoT devices, and commands, that is, letting AIoT devices execute commands such as read, write, and extinguish. The current process is usually divided into two steps. First, the AIoT devices are inventoried through the reader, and then the inventoried AIoT devices are instructed to execute commands, such as reading the local data of the AIoT device and reporting it to the network, and writing the data sent by the network to the local AIoT device. On this basis, how to improve the efficiency of the process and ensure data security is a current research issue. Summary of the invention

[0005] The embodiments of the present invention provide a warehouse management method and system based on big data, so as to realize the rapid execution of warehouse management commands, and ensure data security when writing data.

[0006] In order to achieve the above object, the present invention adopts the following technical scheme:

[0007] In a first aspect, a warehouse management method based on big data is provided, and the method is applied to AIoTF located on the network side in the environmental Internet of Things, and the method includes: AIoTF receives a warehouse management request from AF, the warehouse management request indicates a write command, the warehouse management request includes device paging information and data, and the data is the data of the AIoT device to be paged by the device paging information to be written; AIoTF obtains the encryption level of the data from the database according to the warehouse management request, the higher the encryption level of the data, the higher the security of the encryption method corresponding to the encryption level; AIoTF encrypts the data using the encryption method corresponding to the encryption level of the data to obtain ciphertext information; AIoTF triggers the reader to send a paging message, and the service area of ​​the reader covers the AIoT device to be paged by the device paging information, and the paging message includes an inventory indication, a write command and ciphertext information.

[0008] Optionally, the warehouse management request includes the type of data, and AIoTF obtains the encryption level of the data from the database based on the warehouse management request, including: AIoTF sends a security management request to the data management entity based on the warehouse management request, the security management request includes the type of data, and the security management request is used to request the data management entity to provide an encryption level; AIoTF receives a security management response returned by the data management entity based on the security management request, the security management response includes the encryption level of the data, and the encryption level of the data corresponds to the type of data.

[0009] Optionally, the encryption level of the data is level 1, and the encryption method corresponding to level 1 is direct encryption. AIoTF encrypts the data using the encryption method corresponding to the encryption level of the data to obtain ciphertext information, including: AIoTF encrypts the data using the root key according to the encryption method corresponding to level 1, which is direct encryption, to obtain ciphertext information. The root key is the key of the AIoT device suitable for device paging information paging.

[0010] Optionally, the encryption level of the data is level 2, and the encryption method corresponding to level 2 is a combination of direct encryption and cyclic encryption. AIoTF encrypts the data using the encryption method corresponding to the encryption level of the data to obtain ciphertext information, including: AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to level 2, which is a combination of direct encryption and cyclic encryption, to obtain a sequence after adding the cyclic prefix; AIoTF uses a root key to encrypt the sequence after adding the cyclic prefix to obtain ciphertext information, and the root key is the key of the AIoT device suitable for device paging information.

[0011] Optionally, the data is K-bit data, K is an integer greater than 3, and AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to the second level, which is a combination of direct encryption and cyclic encryption, to obtain a sequence after the cyclic prefix is ​​added, including: AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to the second level, which is a combination of direct encryption and cyclic encryption. The bits are copied as the cyclic prefix sequence, and the cyclic prefix sequence is added before the first bit of the data to obtain K+ bits of data length, The data with a bit length is the sequence after adding the cyclic prefix. Indicates rounding down.

[0012] Optionally, the encryption level of the data is level 3, and the encryption method corresponding to level 3 is multi-level encryption. AIoTF encrypts the data using the encryption method corresponding to the encryption level of the data to obtain ciphertext information, including: AIoTF encrypts the data multiple times according to the encryption method corresponding to level 3, which is multi-level encryption and a root key, to obtain ciphertext information. The root key is the key of the AIoT device suitable for device paging information paging.

[0013] Optionally, AIoTF uses multi-level encryption and root key according to the encryption method corresponding to the third level, and encrypts the data multiple times to obtain ciphertext information, including: AIoTF uses multi-level encryption according to the encryption method corresponding to the third level, takes the count value of the counter and the root key as input parameters, and uses the key deduction algorithm to calculate the input parameters to obtain a temporary key, the counter is a counter synchronized with the AIoT device paged by the device paging information of AIoTF, if the AIoT device paged by the device paging information is paged once by the paging message, the count value of the counter is updated by 1; the data is K bits in length, K is an integer greater than 3, and AIoTF uses the root key to encrypt the front of the data bits, get the intermediate information, Indicates rounding down; AIoTF uses a temporary key to encrypt the intermediate information data. bits to obtain the ciphertext information.

[0014] Optionally, the encryption level of the data is level 4, and the encryption method corresponding to level 4 is a combination of multi-level encryption and cyclic encryption. AIoTF encrypts the data using the encryption method corresponding to the encryption level to obtain ciphertext information, including: AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to level 4, which is a combination of multi-level encryption and cyclic encryption, to obtain a sequence after adding the cyclic prefix; AIoTF encrypts the sequence after adding the cyclic prefix multiple times according to the root key to obtain ciphertext information, and the root key is the key of the AIoT device suitable for device paging information.

[0015] Optionally, the data is K-bit data, K is an integer greater than 3, and AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to the fourth level, which is a combination of multi-level encryption and cyclic encryption, to obtain a sequence after the cyclic prefix is ​​added, including: AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to the fourth level, which is a combination of multi-level encryption and cyclic encryption. The bits are copied as the cyclic prefix sequence, and the cyclic prefix sequence is added before the first bit of the data to obtain K+ The data with a length of bits, and the data with a length of P bits is the sequence after adding the cyclic prefix. Indicates rounding down; accordingly, AIoTF performs multiple different encryptions on the sequence after adding the cyclic prefix to obtain the ciphertext information. The root key is the key of the AIoT device that is paging with the device paging information, including: AIoTF uses the count value of the counter and the root key as input parameters, and uses the key deduction algorithm to calculate the input parameters to obtain a temporary key. The counter is a counter synchronized with the AIoT device that is paging with the device paging information. If the AIoT device that is paging with the device paging information is paged once by the paging message, the count value of the counter is updated by 1; AIoTF uses the root key to encrypt the front of the data bits to obtain the intermediate information; AIoTF uses the temporary key to encrypt the intermediate information data bits to obtain the ciphertext information.

[0016] In a second aspect, a warehouse management system based on big data is provided, which includes an AIoTF located on the network side in the environmental Internet of Things, and the system is configured as follows: AIoTF receives a warehouse management request from AF, the warehouse management request indicates a write command, and the warehouse management request includes data to be written to the AIoT device; AIoTF obtains the encryption level of the data from the database according to the warehouse management request, the higher the encryption level, the higher the security of the encryption method corresponding to the encryption level; AIoTF encrypts the data using the encryption method corresponding to the encryption level to obtain ciphertext information; AIoTF triggers the reader to send a paging message, the service area of ​​the reader covers the AIoT device to which data is to be written, the paging message indicates an inventory indication, and the paging message includes a write command and ciphertext information.

[0017] The system is also specifically configured to execute the method described in the first aspect above. Please refer to the relevant introduction of the method described in the first aspect for details, which will not be repeated here.

[0018] In a third aspect, an electronic device is provided, comprising: a processor and a memory; the memory is used to store a computer program, and when the processor executes the computer program, the electronic device executes the method described in the first aspect.

[0019] In a possible design solution, the electronic device described in the third aspect may further include a transceiver. The transceiver may be a transceiver circuit or an interface circuit. The transceiver may be used for the electronic device described in the third aspect to communicate with other electronic devices.

[0020] In an embodiment of the present invention, the electronic device described in the third aspect may be a terminal, or a chip (system) or other parts or components that may be arranged in the terminal, or a system including the terminal.

[0021] In a fourth aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer is caused to execute the method described in the first aspect.

[0022] In summary, when AIoTF receives a warehouse management request from AF, AIoTF can execute quick commands for warehouse management, that is, when AIoTF triggers the reader to send a paging message, the paging message contains both inventory instructions and commands, such as write commands, which enables the AIoT device to write data to the local AIoT device while responding to the inventory reporting device identification. There is no need to execute the command process separately, thereby improving process efficiency. In addition, AIoTF can also select an encryption method suitable for the security level of the data through big data query, and encrypt the data so that the data can be sent to the AIoT device through a paging message in the form of ciphertext information. Since the paging message is a broadcast message, for other devices that receive the paging message, they cannot decrypt the ciphertext information, thereby ensuring data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 A schematic diagram of the architecture of an Internet of Things system provided by an embodiment of the present invention;

[0024] Figure 2 A schematic diagram of a process flow of a warehouse management method based on big data provided by an embodiment of the present invention;

[0025] Figure 3 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0026] The technical solution of the present invention will be described below in conjunction with the accompanying drawings.

[0027] In the embodiment of the present invention, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved by means of the arrangement order of each information agreed in advance (for example, specified by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can also be identified and indicated uniformly to reduce the indication overhead caused by indicating the same information separately.

[0028] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present invention does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present invention should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0029] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in the embodiment of the present invention. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to a protocol, or can be configured by the sending end device by sending configuration information to the receiving end device.

[0030] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present invention do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or an electronic device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or an electronic device. The type of memory can be any form of storage medium, which is not limited by the embodiments of the present invention.

[0031] The "protocol" involved in the embodiments of the present invention may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol applied in future systems, and the embodiments of the present invention do not specifically limit this.

[0032] In the embodiments of the present invention, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will perform corresponding processing under certain objective circumstances, but do not limit the time, nor do they require the device to perform judgment actions when implementing, nor do they mean the existence of other limitations.

[0033] In the description of the embodiments of the present invention, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present invention is only a kind of association relationship describing the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, in the description of the embodiments of the present invention, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solution of the embodiments of the present invention, in the embodiments of the present invention, the words "first" and "second" are used to distinguish the same items or similar items with basically the same functions and effects. Those skilled in the art will appreciate that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference. At the same time, in the embodiments of the present invention, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0034] The network architecture and business scenarios described in the embodiments of the present invention are intended to more clearly illustrate the technical solutions of the embodiments of the present invention, and do not constitute a limitation on the technical solutions provided by the embodiments of the present invention. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present invention are equally applicable to similar technical problems.

[0035] To facilitate understanding of the embodiments of the present invention, first Figure 1 Taking the Internet of Things system shown in as an example, Figure 1 A schematic diagram of the architecture of an Internet of Things system applicable to a warehouse management method based on big data provided in an embodiment of the present invention.

[0036] like Figure 1 As shown, the IoT system may include: an ambient IoT management function (Ambient IoT management Function, AIoTF), a reader and an AIoT device.

[0037] AIoTF is deployed on the network side, such as in the core network of the operator network, and can communicate with the reader and the application party (such as AF) to trigger the reader to instruct the AIoT device to perform related operations such as inventory, reading, and writing according to the warehouse management operations instructed by the application party (such as AF), such as warehouse management commands. The embodiment of this application takes the write command as an example.

[0038] The reader can be a base station or a terminal. In the embodiment of the present application, the reader is a base station.

[0039] AIoT devices can be devices in the form of terminals, i.e., terminals. The terminal can be a terminal with transceiver functions, or a chip or chip system that can be set in the terminal. The terminal can also be called user equipment (UE), access terminal, subscriber unit, user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent or user device. The terminal in the embodiments of the present application can be a mobile phone, a cellular phone, a smart phone, a tablet computer, a wireless data card, a personal digital assistant (PDA), a wireless modem, a handset, a laptop computer, a machine type communication (MTC) terminal, a computer with wireless transceiver function, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self-driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, a vehicle-mounted terminal, a road side unit (RSU) with terminal function, etc. The terminal of the present application may also be a vehicle-mounted module, a vehicle-mounted module, a vehicle-mounted component, a vehicle-mounted chip or a vehicle-mounted unit built into a vehicle as one or more components or units. Alternatively, the terminal may also be customer-premises equipment (CPE).

[0040] Figure 2 A flowchart of a method provided by an embodiment of the present invention. This warehouse management method based on big data is applicable to the above-mentioned Internet of Things system and involves the interaction between devices in the above-mentioned Internet of Things system. The specific process is as follows:

[0041] S201, AIoTF receives a warehouse management request from AF.

[0042] The warehouse management request indicates a write command. For example, the warehouse management request includes information indicating the command type, and the information indicating the command type indicates a write command. The warehouse management request also includes device paging information and data. The device paging information is used to page the specified AIoT device. For example, the device paging information is area information, such as indicating a certain area (such as a service cell / a collection of service cells), indicating that the command this time needs to be executed by the AIoT device located in the area. For another example, the device paging information is device type information, indicating that the command this time needs to be executed by a certain type of AIoT device, such as an AIoT device of type A, type A is a passive type, and an AIoT device of type B, type B is a semi-passive type, and an AIoT device of type C, type C is an active type. The data is the data of the AIoT device to be paging by the device paging information to be written. The warehouse management request may also include the type of data, such as business type, user regular data type, user privacy data type, device configuration type, etc.

[0043] S202, AIoTF obtains the encryption level of the data from the database according to the warehouse management request.

[0044] Among them, the higher the encryption level of the data, the higher the security of the encryption method corresponding to the encryption level, that is, the less likely it is to be attacked and deciphered.

[0045] In one possible way, when the warehouse management request includes the type of data, AIoTF can send a security management request to the data management entity based on the warehouse management request (i.e., based on the type of data therein), and the security management request includes the type of data, and the security management request is used to request the data management entity to provide an encryption level. The data management entity can be a network element in the network, such as a data management function (UDM) / data warehouse function (UDR), etc. The data management entity can be understood as a database, that is, it can provide support for big data. In an embodiment of the present application, the data management entity is pre-configured with a correspondence between data types and encryption levels.

[0046] The data management entity can determine the encryption level corresponding to the type of data in the corresponding relationship according to the type of data provided by AIoTF, that is, the encryption level of the data. For example, the encryption levels include level 1, level 2, level 3 and level 4 from low to high, business type data (that is, data of conventional AIoT business, such as business identification, business description, business purpose, etc.) corresponds to level 1, user conventional data type data (that is, conventional user data, such as user identification, user portrait data, etc.) corresponds to level 2, device configuration type data (such as configuration files for AIoT device operation) corresponds to level 3, user privacy data type data (such as user name and password) corresponds to level 4, that is, user privacy is the highest level, in order to first ensure that there is no leakage of user privacy, and then to ensure the configuration file of AIoT device, so that AIoT device can operate normally.

[0047] AIoTF receives a security management response returned by the data management entity based on the security management request. The security management response includes the encryption level of the data, and the encryption level of the data corresponds to the type of the data.

[0048] S203, AIoTF encrypts the data using the encryption method corresponding to the encryption level of the data to obtain ciphertext information.

[0049] Case 1:

[0050] The encryption level of the data is level 1, and the encryption method corresponding to level 1 is direct encryption, or the encryption method corresponding to level 1 pre-configured by AIoTF is direct encryption. On this basis, AIoTF can encrypt the data using the root key according to the encryption method corresponding to level 1, which is direct encryption, to obtain ciphertext information. The root key is the key of the AIoT device that is suitable for paging with device paging information. In other words, the device paging information can page the AIoT device by area or device type, and on this basis, the AIoT device can also pre-configure the root key by area or device type. For example, for the same paged area (such as a service cell / a collection of service cells), all AIoT devices located in the area are pre-configured with the same root key, and accordingly, the network side, that is, AIoTF, also configures the root key and associates the root key with the area, so that when the device paging information pages the AIoT device in the area to execute a write command, the root key is used to encrypt the data to be written according to the association relationship.

[0051] Case 2:

[0052] The encryption level of the data is level 2, and the encryption method corresponding to level 2 is a combination of direct encryption and cyclic encryption, or in other words, the encryption method corresponding to the AIoTF pre-configured level 2 is a combination of direct encryption and cyclic encryption.

[0053] On this basis, AIoTF can add a cyclic prefix to the data according to the encryption method corresponding to the second level, which is a combination of direct encryption and cyclic encryption, to obtain a sequence after adding the cyclic prefix. For example, if the data is K bits long, K is an integer greater than 3, AIoTF can use the encryption method corresponding to the second level as a combination of direct encryption and cyclic encryption to add a cyclic prefix to the data. The bits are copied as the cyclic prefix sequence, and the cyclic prefix sequence is added before the first bit of the data to obtain bits of data length, The data with a bit length is the sequence after adding the cyclic prefix. Indicates rounding down. In other words, this application reuses the mechanism of adding a cyclic prefix (CP) to a symbol in the air interface (NR) in the AIoT scenario to achieve data scrambling. Even if an attacker steals the sequence after adding the cyclic prefix, he will not be able to crack the final data because he does not know which part of the data is cyclically added to the front end. Afterwards, AIoTF uses the root key to encrypt the sequence after adding the cyclic prefix to obtain the ciphertext information. As above, the root key is the key of the AIoT device suitable for paging device paging information. Please refer to the above for details and will not be repeated here.

[0054] Case 3:

[0055] The encryption level of the data is level 3, and the encryption method corresponding to level 3 is multi-level encryption, or in other words, the encryption method corresponding to the pre-configured level 3 of AIoTF is multi-level encryption.

[0056] On this basis, AIoTF performs multiple different encryptions on the data according to the encryption method corresponding to the third level, which is multi-level encryption and root key, to obtain ciphertext information, and the root key is the key applicable to the AIoT device that is paged by the device paging information. For example, AIoTF uses the count value of the counter and the root key as input parameters according to the encryption method corresponding to the third level, and uses the key deduction algorithm to calculate the input parameters to obtain a temporary key. The principle of the counter is similar to the non-access layer (NAS) counter. For example, the counter is a counter synchronized with the AIoT device that is paged by the device paging information. If the AIoT device that is paged by the device paging information is paged once by the paging message, the count value of the counter is updated by 1. Similar to the above-mentioned root key, the counter can also be configured by region or device type, such as a counter associated with a region / a device type. If the device paging information of this time pages the AIoT device of the region / device type, AIoTF updates the count value of the associated counter by 1, and then uses the updated count value for the above-mentioned key deduction. It can be seen that as the count value is updated, it can be ensured that the temporary key deduced each time is different, thereby further improving security.

[0057] After that, the data is K bits long, K is an integer greater than 3, and AIoTF can use the root key to encrypt the front bits, get the intermediate information, Indicates rounding down. AIoTF then uses the temporary key to encrypt the intermediate information data. Bits are used to obtain the ciphertext information. Such segmented encryption, such as encrypting only part of the information at a time, can reduce the decryption overhead of the AIoT device, and further improve security by encrypting all the information a second time.

[0058] Case 4:

[0059] The encryption level of the data is level 4, and the encryption method corresponding to level 4 is a combination of multi-level encryption and cyclic encryption, or in other words, the encryption method corresponding to the AIoTF pre-configured level 4 is a combination of multi-level encryption and cyclic encryption.

[0060] On this basis, AIoTF uses the encryption method corresponding to the fourth level as a combination of multi-level encryption and cyclic encryption to add a cyclic prefix to the data and obtain a sequence after adding the cyclic prefix. For example, if the data is K bits long, K is an integer greater than 3, AIoTF uses the encryption method corresponding to the fourth level as a combination of multi-level encryption and cyclic encryption to add a cyclic prefix to the data. The bits are copied as the cyclic prefix sequence, and the cyclic prefix sequence is added before the first bit of the data to obtain The data with a length of bits, and the data with a length of P bits is the sequence after adding the cyclic prefix. Indicates rounding down.

[0061] Afterwards, AIoTF performs multiple different encryptions on the sequence after adding the cyclic prefix according to the root key to obtain the ciphertext information. The root key is the key for the AIoT device that is paged by the device paging information. For example, AIoTF uses the counter count value and the root key as input parameters, and uses the key deduction algorithm to calculate the input parameters to obtain a temporary key. The counter is a counter synchronized between AIoTF and the AIoT device that is paged by the device paging information. If the AIoT device that is paged by the device paging information is paged once, the counter count value is updated by 1; AIoTF uses the root key to encrypt the front of the data. bits to obtain the intermediate information; AIoTF uses the temporary key to encrypt the intermediate information data bits to obtain the ciphertext information.

[0062] S204, AIoTF triggers the reader to send a paging message.

[0063] The service area of ​​the reader covers the AIoT devices to be paged by the device paging information, and the paging message includes an inventory instruction, a write command, and ciphertext information. The paging message also includes a mask determined according to the device paging information. The paging message also includes information for indicating the above encryption method.

[0064] Correspondingly, after the AIoT device receives the paging message, if the AIoT device matches the mask, such as a device belonging to a certain area, or the AIoT device is a device of a specified device type, the AIoT device responds to the inventory indication and write command, on the one hand, reporting its own device identification to the AIoTF, and on the other hand, decrypting the ciphertext information according to the information indicating the above encryption method, using the corresponding decryption method to decrypt the ciphertext information (the decryption method is the inverse process of the above encryption, which can be used as a reference to understand), obtaining the data, and then writing the data to the local AIoT device.

[0065] In summary, when AIoTF receives a warehouse management request from AF, AIoTF can execute quick commands for warehouse management, that is, when AIoTF triggers the reader to send a paging message, the paging message contains both inventory instructions and commands, such as write commands, which enables the AIoT device to write data to the local AIoT device while responding to the inventory reporting device identification. There is no need to execute the command process separately, thereby improving process efficiency. In addition, AIoTF can also select an encryption method suitable for the security level of the data through big data query, and encrypt the data so that the data can be sent to the AIoT device through a paging message in the form of ciphertext information. Since the paging message is a broadcast message, for other devices that receive the paging message, they cannot decrypt the ciphertext information, thereby ensuring data security.

[0066] Combination of the above Figure 2 The method provided by the embodiment of the present invention is described in detail. The following is a warehouse management system based on big data for executing the method provided by the embodiment of the present invention, which includes an AIoTF located on the network side in the environmental Internet of Things, and the system is configured as follows: AIoTF receives a warehouse management request from AF, the warehouse management request indicates a write command, and the warehouse management request includes data to be written to the AIoT device; AIoTF obtains the encryption level of the data from the database according to the warehouse management request, the higher the encryption level, the higher the security of the encryption method corresponding to the encryption level; AIoTF encrypts the data using the encryption method corresponding to the encryption level to obtain ciphertext information; AIoTF triggers the reader to send a paging message, the service area of ​​the reader covers the AIoT device to which data is to be written, the paging message indicates an inventory indication, and the paging message includes a write command and ciphertext information.

[0067] The system is also specifically configured to perform the above Figure 2 For details about the method, please refer to the relevant introduction of the above method embodiment, which will not be repeated here.

[0068] Figure 3 The electronic device provided in the embodiment of the present invention is a schematic diagram of the structure of the electronic device. For example, the electronic device may be a network device, or a chip (system) or other components or assemblies that can be set in the network device. Figure 3 As shown, the electronic device 400 may include a processor 401. Optionally, the electronic device 400 may further include a memory 402 and / or a transceiver 403. The processor 401 is coupled with the memory 402 and the transceiver 403, such as being connected via a communication bus.

[0069] Combine the following Figure 3 The components of the electronic device 400 are described in detail:

[0070] The processor 401 is the control center of the electronic device 400, and may be a processor or a general term for multiple processing elements. For example, the processor 401 is one or more central processing units (CPUs), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0071] Optionally, the processor 401 can execute various functions of the electronic device 400 by running or executing the software program stored in the memory 402 and calling the data stored in the memory 402, such as executing the above Figure 2 A warehouse management method based on big data is shown.

[0072] In a specific implementation, as an embodiment, the processor 401 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0073] In a specific implementation, as an embodiment, the electronic device 400 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (e.g., computer program instructions).

[0074] The memory 402 is used to store the software program for executing the solution of the present invention, and the execution is controlled by the processor 401. The specific implementation method can refer to the above method embodiment, which will not be repeated here.

[0075] Optionally, the memory 402 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 402 may be integrated with the processor 401, or may exist independently and access the computer through the interface circuit ( Figure 3 (not shown) is coupled to the processor 401, which is not specifically limited in this embodiment of the present invention.

[0076] The transceiver 403 is used for communication with other electronic devices. For example, if the electronic device 400 is a terminal, the transceiver 403 can be used to communicate with a network device, or with another terminal device. For another example, if the electronic device 400 is a network device, the transceiver 403 can be used to communicate with a terminal, or with another network device.

[0077] Optionally, the transceiver 403 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0078] Optionally, the transceiver 403 may be integrated with the processor 401, or may exist independently and communicate with the electronic device 400 through an interface circuit ( Figure 3 (not shown) is coupled to the processor 401, which is not specifically limited in this embodiment of the present invention.

[0079] Understandably, Figure 3 The structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and the actual electronic device may include more or fewer components than those shown in the figure, or combine certain components, or arrange the components differently.

[0080] In addition, the technical effects of the electronic device 400 can refer to the technical effects of the methods described in the above method embodiments, which will not be repeated here.

[0081] It should be understood that the processor in the embodiment of the present invention may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0082] It should also be understood that the memory in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DRRAM).

[0083] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0084] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0085] In the present invention, "at least one" means one or more, and "more than one" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can be represented by: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0086] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0087] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0088] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0089] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0090] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0091] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0092] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0093] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A warehouse management method based on big data, characterized in that: The method is applied to AIoTF located on the network side in the environmental Internet of Things, and the method includes: The AIoTF receives a warehouse management request from the AF, where the warehouse management request indicates a write command, and the warehouse management request includes device paging information and data, where the data is data of the AIoT device to be written into the device paging information; The AIoTF obtains the encryption level of the data from the database according to the warehouse management request. The higher the encryption level of the data, the higher the security of the encryption method corresponding to the encryption level; The AIoTF encrypts the data using an encryption method corresponding to the encryption level of the data to obtain ciphertext information; The AIoTF triggers the reader to send a paging message, and the service area of ​​the reader covers the AIoT device to be paged by the device paging information. The paging message includes an inventory indication, the write command and the ciphertext information.

2. The method according to claim 1, characterized in that The warehouse management request includes the type of the data, and the AIoTF obtains the encryption level of the data from the database according to the warehouse management request, including: The AIoTF sends a security management request to the data management entity according to the warehouse management request, where the security management request includes the type of the data, and the security management request is used to request the data management entity to provide an encryption level; The AIoTF receives a security management response returned by the data management entity according to the security management request, wherein the security management response includes an encryption level of the data, and the encryption level of the data corresponds to a type of the data.

3. The method according to claim 1 or 2, characterized in that: The encryption level of the data is level 1, and the encryption method corresponding to the level 1 is direct encryption. The AIoTF encrypts the data using the encryption method corresponding to the encryption level of the data to obtain ciphertext information, including: The AIoTF uses direct encryption according to the encryption method corresponding to the first level, and uses a root key to encrypt the data to obtain the ciphertext information. The root key is the key of the AIoT device suitable for paging the device paging information.

4. The method according to claim 1 or 2, characterized in that: The encryption level of the data is level 2, and the encryption method corresponding to the level 2 is a combination of direct encryption and cyclic encryption. The AIoTF encrypts the data using the encryption method corresponding to the encryption level of the data to obtain ciphertext information, including: The AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to the second level, which is a combination of direct encryption and cyclic encryption, to obtain a sequence after the cyclic prefix is ​​added; The AIoTF uses a root key to encrypt the sequence after adding the cyclic prefix to obtain the ciphertext information, and the root key is a key of the AIoT device suitable for paging the device paging information.

5. The method according to claim 4, characterized in that The data is data of K bits in length, K is an integer greater than 3, and the AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to the second level, which is a combination of direct encryption and cyclic encryption, to obtain a sequence after the cyclic prefix is ​​added, including: The AIoTF uses a combination of direct encryption and cyclic encryption according to the encryption method corresponding to the second level, and then The bits are copied as a cyclic prefix sequence, and the cyclic prefix sequence is added before the first bit of the data to obtain bits of length, the The data with a bit length is the sequence after adding the cyclic prefix. Indicates rounding down.

6. The method according to claim 1 or 2, characterized in that: The encryption level of the data is level 3, and the encryption method corresponding to the level 3 is multi-level encryption. The AIoTF encrypts the data using the encryption method corresponding to the encryption level of the data to obtain ciphertext information, including: The AIoTF encrypts the data multiple times in different ways according to the encryption method corresponding to the third level, which is multi-level encryption and root key, to obtain the ciphertext information. The root key is the key of the AIoT device suitable for paging the device paging information.

7. The method according to claim 6, characterized in that The AIoTF performs multiple different encryptions on the data according to the encryption method corresponding to the third level, which is multi-level encryption and root key, to obtain the ciphertext information, including: The AIoTF uses multi-level encryption according to the encryption method corresponding to the third level, takes the count value of the counter and the root key as input parameters, and uses the key deduction algorithm to calculate the input parameters to obtain a temporary key. The counter is a counter synchronized with the AIoT device paged by the device paging information. If the AIoT device paged by the device paging information is paged once by the paging message, the count value of the counter is updated by 1; The data is K bits long, K is an integer greater than 3, and the AIoTF uses the root key to encrypt the front bits, get the intermediate information, Indicates rounding down; The AIoTF uses the temporary key to encrypt the intermediate information and the data bits to obtain the ciphertext information.

8. The method according to claim 1 or 2, characterized in that: The encryption level of the data is level 4, and the encryption method corresponding to the level 4 is a combination of multi-level encryption and cyclic encryption. The AIoTF encrypts the data using the encryption method corresponding to the encryption level to obtain ciphertext information, including: The AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to the fourth level, which is a combination of multi-level encryption and cyclic encryption, to obtain a sequence after the cyclic prefix is ​​added; The AIoTF performs multiple different encryptions on the sequence after adding the cyclic prefix according to the root key to obtain the ciphertext information, and the root key is the key of the AIoT device suitable for paging the device paging information.

9. The method according to claim 8, characterized in that The data is K-bit data, where K is an integer greater than 3. The AIoTF adds a cyclic prefix to the data according to the encryption method corresponding to the fourth level, which is a combination of multi-level encryption and cyclic encryption, to obtain a sequence after the cyclic prefix is ​​added, including: The AIoTF uses a combination of multi-level encryption and cyclic encryption according to the encryption method corresponding to the fourth level, and then The bits are copied as a cyclic prefix sequence, and the cyclic prefix sequence is added before the first bit of the data to obtain bits of data, the data of P bits of length is the sequence after adding the cyclic prefix, Indicates rounding down; Correspondingly, the AIoTF performs multiple different encryptions on the sequence after adding the cyclic prefix to obtain the ciphertext information, and the root key is the key of the AIoT device applicable to the device paging information paging, including: The AIoTF uses the count value of the counter and the root key as input parameters, and uses the key deduction algorithm to calculate the input parameters to obtain a temporary key. The counter is a counter synchronized between the AIoTF and the AIoT device paged by the device paging information. If the AIoT device paged by the device paging information is paged once by the paging message, the count value of the counter is updated by 1; The AIoTF uses the root key to encrypt the data bits to obtain the intermediate information; The AIoTF uses the temporary key to encrypt the intermediate information and the data bits to obtain the ciphertext information.

10. A warehouse management system based on big data, characterized in that: The system includes an AIoTF located on the network side in the environmental Internet of Things, and the system is configured as follows: The AIoTF receives a storage management request from the AF, where the storage management request indicates a write command and includes data to be written into the AIoT device; The AIoTF obtains the encryption level of the data from the database according to the warehouse management request, and the higher the encryption level, the higher the security of the encryption method corresponding to the encryption level; The AIoTF encrypts the data using an encryption method corresponding to the encryption level to obtain ciphertext information; The AIoTF triggers the reader to send a paging message, the service area of ​​the reader covers the AIoT device to which the data is to be written, the paging message indicates an inventory indication, and the paging message includes the write command and the ciphertext information.

Images