Authorization system and control method thereof

Abstract

The invention discloses an authorization system and a control method thereof, and relates to the technical field of equipment authorization, the authorization system comprises a field device, an intelligent terminal and an authorization device; in the control method of the authorization system, when a new configuration parameter is detected by field equipment, an identification code is generated according to the new configuration parameter and a field equipment parameter, and an authorization code is waited to be received; the intelligent terminal collects the identification code and sends the identification code to authorization equipment; the authorization device generates an authorization code according to the identification code when receiving the identification code; and when the field device receives the authorization code, allowing the new configuration parameter to configure the field device so as to complete updating of the configuration parameter. The invention aims to improve the safety and accuracy of parameter configuration of the field equipment, improve the management and maintenance level of the field equipment, and ensure the stability and reliability of the industrial production process.

Description

Technical Field

[0001] The present invention relates to the technical field of device authorization, and in particular to an authorization system and a control method thereof. Background Art

[0002] In modern industrial automation, the configuration parameters of equipment are crucial to ensure the accuracy and reliability of measurement results. These parameters often need to be adjusted in a timely manner according to the specific conditions of the actual application scenario (such as temperature, humidity, vibration, etc.) to adapt to different working environments and optimize their performance, thereby improving work efficiency. Therefore, it is particularly important to implement strict control measures on the modification of key parameters of these devices. However, for security and compliance reasons, some devices are not allowed to be connected to the Internet, which greatly limits the application of remote management methods. Summary of the invention

[0003] The main purpose of the present invention is to propose an authorization system and a control method thereof, which aims to realize authorized operation of field equipment, improve the problem of easy errors and illegal modification during manual parameter adjustment, improve the security and accuracy of parameter configuration of field equipment, and thus improve the reliability of equipment operation.

[0004] To achieve the above object, the present invention proposes a control method of an authorization system, wherein the authorization system includes a field device, an intelligent terminal and an authorization device; the control method of the authorization system of the device includes:

[0005] When the field device detects new configuration parameters, it generates an identification code based on the new configuration parameters and field device parameters, and waits to receive an authorization code;

[0006] The smart terminal collects the identification code and sends it to the authorization device;

[0007] The authorization device generates an authorization code based on the identification code when receiving the identification code;

[0008] When the field device receives the authorization code, the new configuration parameters are allowed to configure the field device to complete the update of the configuration parameters.

[0009] In one embodiment, generating an identification code according to new configuration parameters and field device parameters specifically includes:

[0010] The field device writes new configuration parameters and field device parameters into the file;

[0011] The file is encrypted using an encryption algorithm and an identification code is generated.

[0012] In one embodiment, generating an identification code according to new configuration parameters and field device parameters specifically includes:

[0013] The field device obtains its own current system time to obtain the sending time;

[0014] Generate timestamp and validity period information based on sending time;

[0015] The field device generates an identification code based on the timestamp, validity period information, new configuration parameters and field device parameters.

[0016] In one embodiment, when the field device receives the authorization code, allowing the new configuration parameters to configure the field device specifically includes:

[0017] The field device uses an encryption algorithm to decrypt the received authorization code to obtain the original information;

[0018] The field device matches the original information with the new configuration parameters and field device parameters, and when the match is successful, determines that the authorization code is valid, allowing the new configuration parameters to configure the field device.

[0019] In one embodiment, the field device includes a display component, and after the step of generating an identification code according to the new configuration parameters and the field device parameters, the control method of the authorization system further includes:

[0020] The generated identification code is sent to the display component.

[0021] In one embodiment, when the authorization device receives the identification code, generating the authorization code according to the identification code specifically includes:

[0022] The authorization device performs a decoding operation on the identification code to obtain the configuration parameters and field device parameters;

[0023] When the configuration parameters meet the preset configuration parameter requirements and it is determined according to the field device parameters that the corresponding field device belongs to a device in the management list, an authorization code is generated according to the identification code.

[0024] In one embodiment, the authorization device performs a decoding operation on the identification code to obtain the configuration parameters and the field device parameters, specifically including:

[0025] The identification code is decoded using an encryption algorithm to obtain a timestamp, validity period information, configuration parameters, and field device parameters.

[0026] In one embodiment, after the identification code is decoded using an encryption algorithm to obtain a timestamp, validity period information, configuration parameters, and field device parameters, the control method of the authorization system further includes:

[0027] The authorized device obtains its current system time to obtain the receiving time;

[0028] The authorization device calculates the time difference according to the reception time and the timestamp in the identification code;

[0029] When the time difference is greater than the validity period, refusing to accept the identification code;

[0030] When the time difference is less than or equal to the validity period, the identification code is accepted, so as to generate an authorization code according to the identification code when the configuration parameters meet the preset configuration parameter requirements and it is determined according to the field device parameters that the field device belongs to the management list.

[0031] In one embodiment, when the authorization device receives the identification code, the control method of the authorization system of the device further includes:

[0032] The authorized device takes a picture of a person's face within a preset range to obtain facial information;

[0033] Searching in a preset image database based on facial information;

[0034] When the facial information successfully matches the preset image database, the identification code is accepted and an authorization code is generated according to the identification code;

[0035] When the facial information fails to match the preset image database, the identification code is rejected.

[0036] The present invention further proposes an authorization system for implementing any of the above-mentioned control methods for the authorization system, wherein the authorization system includes a field device, an intelligent terminal and an authorization device.

[0037] The present invention proposes a control method for an authorization system, wherein the authorization system includes a field device, an intelligent terminal and an authorization device; in the control method for the authorization system, when the field device detects new configuration parameters, it generates an identification code according to the new configuration parameters and the field device parameters, and waits to receive an authorization code; the intelligent terminal collects the identification code and sends it to the authorization device; when the authorization device receives the identification code, it generates an authorization code according to the identification code; when the field device receives the authorization code, it allows the new configuration parameters to configure the field device to complete the update of the configuration parameters.

[0038] In actual applications, by generating identification codes and authorization codes, double verification of configuration parameter updates is ensured, which improves the security and integrity of data. Even if the field equipment is not connected to the Internet, the configuration parameters can be updated through the cooperation of smart terminals and authorized devices, avoiding security risks caused by network problems. In addition, all changes to configuration parameters need to be approved by auditors or managers on authorized devices to prevent unauthorized access and modification, ensuring the compliance of changes. In this way, the problem of errors and illegal modifications during manual parameter adjustment is improved, the security and accuracy of parameter configuration of field equipment is improved, and the management and maintenance level of field equipment is improved, ensuring the stability and reliability of the industrial production process. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying creative work.

[0040] Figure 1 A flow chart of an embodiment of a control method of an authorization system of the present invention;

[0041] Figure 2 A flowchart of another embodiment of the control method of the authorization system of the present invention;

[0042] Figure 3 A flowchart of another embodiment of the control method of the authorization system of the present invention;

[0043] Figure 4 A flowchart of another embodiment of a control method of an authorization system of the present invention;

[0044] Figure 5 A flowchart of another embodiment of the control method of the authorization system of the present invention;

[0045] Figure 6 A flowchart of another embodiment of the control method of the authorization system of the present invention;

[0046] Figure 7 The flowchart of another embodiment of the control method of the authorization system of the present invention.

[0047] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0049] It should be noted that, in this article, step codes such as S100, S200, etc. are used for the purpose of expressing the corresponding content more clearly and concisely, and do not constitute a substantial limitation on the sequence. When implementing the step, those skilled in the art may execute S200 first and then S100, etc., but these should all be within the scope of protection of this application.

[0050] In modern industrial automation, the configuration parameters of equipment are crucial to ensure the accuracy and reliability of measurement results. These parameters often need to be adjusted in a timely manner according to the specific conditions of the actual application scenario (such as temperature, humidity, vibration, etc.) to adapt to different working environments, optimize their performance, and thus improve work efficiency. Therefore, it is particularly important to implement strict control measures for the modification of key parameters of these devices. The conventional implementation method is to set passwords on the device to control these modifications. However, for security and compliance reasons, some devices are not allowed to be connected to the Internet, and the functions of operation and maintenance personnel performing modifications and management personnel reviewing and controlling cannot be realized. This greatly limits the application of remote management methods.

[0051] To this end, the present invention proposes a control method for an authorization system, referring to Figure 1 , the authorization system includes a field device, an intelligent terminal and an authorization device; the control method of the authorization system of the device includes:

[0052] Step S100: When the field device detects new configuration parameters, it generates an identification code according to the new configuration parameters and field device parameters, and waits to receive an authorization code;

[0053] Step S200: The smart terminal collects the identification code and sends it to the authorization device;

[0054] Step S300: When receiving the identification code, the authorization device generates an authorization code according to the identification code;

[0055] Step S400: When receiving the authorization code, the field device allows the new configuration parameters to configure the field device to complete the update of the configuration parameters.

[0056] In this embodiment, the field equipment includes gateways, driver boards, test boxes, etc.; smart terminals include mobile phones, tablets, computers, and other electronic devices with photo taking and transmission functions; authorized devices include mobile phones, tablets, computers, etc. Auditors or managers can receive identification codes and send authorization codes through the dedicated authorization APP, OA approval system, or web pages, applets, etc. of the authorized device. The identification code can be a QR code, barcode, a string of numbers or letters, etc.

[0057] It should be noted that for equipment newly put into use on site, its configuration parameters are generally initialized and need to be reset; as the functional requirements of the on-site equipment change, its configuration parameters may also need to be updated accordingly. For example, the test box can detect inverters, tooling boards, etc. When detecting inverters and tooling boards, the configuration parameters set in the test box may be different; or the data stored in the on-site equipment needs to be exported, authorization is required to ensure security.

[0058] Specifically, when a user (including but not limited to a field operator or maintenance personnel) needs to update the configuration parameters of a field device, the new configuration parameters can be input through the user interface of the field device first. When the control device of the field device detects the new configuration parameters, it will generate a corresponding identification code based on the input configuration parameters using the program algorithm stored in the control device, and wait for the authorization code to be received, that is, when the user inputs the authorization code through the user interface, the control device of the field device can receive the new configuration parameters and perform related operations to complete the update of the configuration parameters. Among them, the control device of the field device can be implemented by a main controller, such as MCU, DSP (Digital Signal Process, digital signal processing chip), FPGA (Field Programmable Gate Array, programmable logic gate array chip), PLC, SOC (SystemOn Chip, system-on-chip), etc. The user uses a smart terminal to scan or manually input, take a photo, etc. to obtain the identification code, and sends it to the auditor or manager on the authorized device through a secure communication channel (such as an encrypted email, a dedicated mobile application or an internal enterprise network). The auditor or manager receives the identification code through the dedicated software on the authorized device (such as an authorized APP, an OA approval system, a web page or a small program). The authorization device decides whether to approve the configuration change based on the information in the identification code and the judgment of the auditor. If the auditor approves, the corresponding confirmation operation can be entered through the dedicated software on the authorization device to generate a corresponding authorization code and send it to the corresponding on-site operator or maintenance personnel. The on-site operator or maintenance personnel can enter the authorization code through the user interface of the on-site device to verify its validity and matching. If the verification is successful, the on-site device will allow the new configuration parameters to take effect and complete the update of the configuration parameters. If the verification fails, the on-site device will reject the modification. No related operations are performed. It should be noted that when the identification code and / or authorization code is a string of numbers or letters, the auditor and the user operating the on-site device can also directly transmit the identification code and / or authorization password through calls, voice, text messages, etc. When the authorization code is a QR code or a barcode, if the on-site device has a camera and related image recognition functions, the user can also correspond the authorization code received on the smart terminal to the camera, and the on-site device can use the camera to shoot the authorization code displayed on the smart terminal to obtain the authorization code picture, and identify the authorization code picture to obtain the authorization code. It can be understood that since the QR code can carry a lot of information, including text, numbers, URLs, etc. In this embodiment, a two-dimensional code may be selected as the identification code.

[0059] In actual applications, by generating identification codes and authorization codes, double verification of configuration parameter updates is ensured, which improves the security and integrity of data. Even if the field equipment is not connected to the Internet, the configuration parameters can be updated through the cooperation of smart terminals and authorized devices, avoiding security risks caused by network problems. In addition, all changes to configuration parameters need to be approved by auditors or managers on authorized devices to prevent unauthorized access and modification, ensuring the compliance of changes. In this way, the problem of errors and illegal modifications during manual parameter adjustment is improved, the security and accuracy of parameter configuration of field equipment is improved, the management and maintenance level of field equipment is improved, and the stability and reliability of the industrial production process are ensured.

[0060] In one embodiment of the present invention, reference Figure 2 The generating of the identification code according to the new configuration parameters and the field device parameters specifically includes:

[0061] Step S111, the field device writes new configuration parameters and field device parameters into a file;

[0062] Step S112: Encrypt the file using an encryption algorithm and generate an identification code.

[0063] In this embodiment, when the field device detects new configuration parameters, the new configuration parameters and the field device parameters can be written into the file at the same time. The field device parameters include the device number (device ID), the device status, etc., which is equivalent to giving the configuration parameters an identity. The format of the file can be excel, word, text document, etc. It should be noted that in order to avoid too much information being written into the file and causing the QR code information to be too long, only the new configuration parameters can be written without including the old configuration parameters. Then the above file is encrypted using an encryption algorithm, and the encryption algorithm includes any one of the MD5 algorithm, the AES algorithm, and the RSA algorithm. The field device converts the encrypted data into an identification code. Optionally, the field device includes a display component. After the step of generating an identification code according to the new configuration parameters and the field device parameters, the control method of the authorization system also includes: sending the generated identification code to the display component. The display component includes an LED screen and an LCD screen. After the control device of the field equipment converts the encrypted data into an identification code, it is sent to the display component so that the identification code is displayed on the display screen of the field equipment for the operator to view, scan or take pictures, etc. For example, the operator uses a smart terminal to scan the generated QR code, or manually enters the identification code, and sends the identification code to the auditor or manager on the authorized device, so that the auditor or manager receives the identification code through the dedicated software on the authorized device (such as an authorized APP, OA approval system, web page or applet). The authorized device uses the same encryption algorithm and key to decrypt the identification code and restore the original configuration parameter file. That is, the authorized device can use the authorization algorithm to calculate the authorization code using the QR code, access time, and the non-public key information agreed upon by the field device and the authorization tool. The authorization algorithm used includes but is not limited to simple character transformation, CRC algorithm, MD5, encryption algorithm, etc., which can correspond to the field device. The auditor decides whether to approve the configuration change based on the decrypted configuration parameter file and his own judgment. If approved, a corresponding authorization code is generated. The operator receives the authorization code through the smart terminal and enters it into the user interface of the field device, and the field device verifies its validity and matching. If the verification is successful, the field device will allow the new configuration parameters to take effect and complete the update of the configuration parameters. If the verification fails, the field device will reject the modification and will not perform the relevant operation.

[0064] It should be noted that the auditor can choose to generate an authorization code that is only used for the current access, that is, to ensure the independence and security of each configuration change through strong approval, or the authorization code can be an authorization code that takes effect in the next period of time, that is, to improve the flexibility of operation through weak approval. For example, the auditor opens the dedicated software on the authorized device and enters the user name and password, or enters the SMS verification code or performs fingerprint recognition to log in. On the main authorization interface, click the "Requests to be reviewed" tab. View all configuration change requests for field devices that are pending review. There can be multiple field devices. Select a request to be reviewed, enter the request details interface, and view the received identification code and corresponding information. And find the "Approval Options" section in the request details interface. Select "Strong Approval" or "Weak Approval". If the "Strong Approval" option is selected. The authorized device will generate an authorization code that is only used for the current access. If the "Weak Approval" option is selected, the authorized device will generate an authorization code that takes effect within a specified time. For example, if the authorization code is valid for 10 minutes, click the "Generate Authorization Code" option. The corresponding authorization code will be generated and displayed on the interface of the authorized device. Auditors can send the authorization code to operators via SMS, email or instant messaging tools, so that operators can receive the authorization code through smart terminals and input it into the user interface of the on-site equipment to complete the update of configuration parameters. The original authorization information includes identification code, access time, non-public information agreed by both parties, etc. The authorization algorithm can include algorithms with a high degree of obfuscation of the original information, such as MD5, AES, etc., to ensure that the authorization code has sufficient randomness and is difficult to crack by guessing; the on-site equipment has all the parameters required by the authorization algorithm, and uses the same algorithm as the authorization tool to calculate the authorization code at the time of access, which is valid only when the two are consistent.

[0065] Through the above settings, the authorized device generates an authorization code that takes effect within a specified time. The identification code and authorization code can be transmitted in a variety of ways, which improves the flexibility and convenience of operation. Use encryption algorithms (such as MD5, AES, RSA, etc.) to encrypt configuration parameter files and / or authorization codes to prevent data from being intercepted or tampered with during transmission, ensuring the independence and security of each configuration change.

[0066] In one embodiment, reference Figure 3 The generating of the identification code according to the new configuration parameters and the field device parameters specifically includes:

[0067] Step S121, the field device obtains its own current system time to obtain the sending time;

[0068] Step S122: Generate a timestamp and validity period information according to the sending time;

[0069] Step S123: The field device generates an identification code according to the timestamp, validity period information, new configuration parameters and field device parameters.

[0070] In this embodiment, when generating a QR code, the field device will obtain the current system time of the field device and generate a timestamp, that is, obtain the sending time. The timestamp refers to a time information added when generating the QR code, which is usually a timestamp accurate to seconds. The main function of the timestamp is to ensure that the QR code is valid within a certain period of time. After this time, the QR code will become invalid, thereby preventing replay attacks. The field device generates a timestamp and validity period information according to the sending time. The validity period information can be set in advance by the R&D personnel. The field device generates an identification code based on the timestamp, validity period information, new configuration parameters and field device parameters. For example, the validity period is 10 minutes. When the authorized device receives the QR code, it obtains the current system time of the authorized device, and combines the current system time with the timestamp to verify whether the QR code is invalid. In this way, due to the existence of the timestamp, the QR code will become invalid after a certain period of time and cannot be used again, ensuring the timeliness of each operation and preventing the old QR code from being used maliciously.

[0071] Optionally, refer to Figure 4 , the step S400 specifically includes:

[0072] Step S410: The on-site device decrypts the received authorization code using an encryption algorithm to obtain original information;

[0073] Step S420: The field device matches the original information with the new configuration parameters and the field device parameters, and when the match succeeds, determines that the authorization code is valid, and allows the new configuration parameters to configure the field device.

[0074] In combination with the above embodiments, when the operator uses a smart terminal to scan the generated QR code, or manually inputs the identification code, voice, email, etc. to send the identification code to the auditor or manager on the authorized device, the auditor or manager receives the QR code through the dedicated software on the authorized device (such as authorized APP, OA approval system, web page or applet). The authorized device uses the same encryption algorithm and key to decrypt the identification code, restore the original configuration parameter file, and decide whether to approve the configuration change. If approved, a corresponding authorization code is generated. In order to improve the security of data transmission, the authorized device can encrypt the authorization code through the encryption algorithm and output it. The operator receives the authorization code through the smart terminal and inputs it into the user interface of the field device, and the field device verifies its validity and matching. That is, the field device uses the encryption algorithm to decrypt the received authorization code to obtain the original information. And the decrypted original information is matched with the new configuration parameters and field device parameters. For example, whether the new configuration parameters are the content required to be changed this time, whether the field device parameters are the equipment that needs to be updated this time, etc. If the match is successful, that is, all verification conditions are met, it is determined that the authorization code is valid and the new configuration parameters are allowed to configure the device. If any verification condition is not met, for example, the requirement is to change all equipment in production workshop 1, and if the on-site equipment parameters are determined to be production workshop 2 based on the original information, the authorization code is determined to be invalid, and the on-site equipment does not execute the program corresponding to the new configuration parameters.

[0075] In actual applications, by adding timestamp and validity period information when generating the identification, the identification code is ensured to be valid within a certain period of time, thereby preventing malicious users from reusing the old identification code to make unauthorized configuration changes through replay attacks. Use advanced encryption algorithms to encrypt and decrypt identification codes and / or authorization codes to ensure the security of data during transmission. In addition, when verifying the authorization code, the field device matches the decrypted original information with the new configuration parameters and field device parameters. Ensure that the new configuration parameters are the content required to be changed this time, and whether the field device parameters are the equipment that needs to be updated this time, improve the problem of misoperation, and ensure the consistency and accuracy of the configuration.

[0076] In another embodiment of the present invention, reference Figure 5 , the step S300 specifically includes:

[0077] Step S310: the authorization device decodes the identification code to obtain the configuration parameters and on-site device parameters;

[0078] Step S320: When the configuration parameters meet the preset configuration parameter requirements and it is determined according to the field device parameters that the corresponding field device belongs to a device in the management list, an authorization code is generated according to the identification code.

[0079] Wherein, step S310 specifically includes:

[0080] The identification code is decoded using an encryption algorithm to obtain a timestamp, validity period information, configuration parameters, and field device parameters.

[0081] In this embodiment, when the authorized device receives the QR code, it decodes the QR code, for example, it uses an encryption algorithm to decrypt and obtain the timestamp and validity period, configuration parameters and field device parameters, identifies the access time contained in the QR code according to the timestamp and validity period, and rejects expired QR codes; and determines whether it is the content required to be changed and the device that needs to be updated according to the configuration parameters and field device parameters. When the configuration parameters meet the preset configuration parameter requirements, and the corresponding field device is determined to belong to the device in the management list according to the field device parameters, the authorization code is generated according to the identification code. Among them, the preset configuration parameter requirements are set in advance by the R&D personnel, and the preset configuration parameter requirements include but are not limited to parameter value range, parameter type, parameter format, etc. The management list is the field device that the authorized device (corresponding auditor) has the authority to, which can prevent the field operator from sending the wrong auditor to cause the wrong operation problem. If there are only devices A and B in the management list, when the QR code corresponding to other devices C is received, authorization will not be possible, and device C cannot make configuration changes. If the configuration parameters are determined to meet the preset configuration parameter requirements, and the field device is determined to belong to the device in the management list according to the field device parameters, the corresponding authorization code can be generated after the auditor operates. In this way, by checking the parameters of on-site devices, it is ensured that only devices in the management list can be configured and modified, preventing access and operation of unauthorized devices. That is, the authorized device can decode and verify the identification code to ensure that the modification of configuration parameters is strictly controlled, and generate a valid authorization code for use by on-site devices. This can effectively improve the access problem of unauthorized devices and ensure the consistency and accuracy of configuration.

[0082] Optionally, refer to Figure 6 After step S310, the control method of the authorization system further includes:

[0083] Step S500: The authorized device obtains its own current system time to obtain the receiving time;

[0084] Step S600: the authorization device calculates the time difference according to the receiving time and the timestamp in the identification code;

[0085] Step S700: when the time difference is greater than the validity period, refusing to accept the identification code;

[0086] Step S800: When the time difference is less than or equal to the validity period, accept the identification code to generate an authorization code according to the identification code when the configuration parameters meet the preset configuration parameter requirements and when it is determined according to the field device parameters that the field device belongs to the management list.

[0087] Specifically, after receiving the identification code, the authorization device decodes the identification code, obtains the timestamp, validity period information, configuration parameters and field device parameters, obtains its own current system time to obtain the receiving time, and then calculates the time difference according to the receiving time and the timestamp in the identification code. If the time difference between the current system time of the authorization device and the timestamp is greater than the validity period of the identification code corresponding to the validity period information, the identification code is rejected and no operation related to the identification code is performed. If the time difference is less than or equal to the validity period, it means that the identification code is within the validity period, and the configuration parameters and field device parameters continue to be verified. For example, if the validity period is 10 minutes and the calculated time difference is 9 minutes, it means that within the allowed time, it is possible to continue to check whether the configuration parameters meet the preset configuration parameter requirements, and to detect whether the field device parameters belong to the equipment in the management list. If all verification conditions are met, after receiving the authorization instruction of the auditor, an authorization code is generated according to the identification code, so that the auditor can inform the operator of the field device of it, so that the field device receives the authorization code and performs the corresponding decoding operation, and allows the field device to be configured with parameters.

[0088] Through the above settings, by adding timestamp and validity period information to the identification code, the identification code is ensured to be valid within a certain period of time. Once the validity period expires, the identification code will automatically become invalid, thereby preventing malicious users from reusing old identification codes to make unauthorized configuration changes through replay attacks. In addition, multi-factor verification is performed in combination with timestamp, validity period information, configuration parameters, and field device parameters to ensure that only compliant operators and field devices can make configuration changes, thereby improving the security of configuration operations and the reliability of field device operations.

[0089] In one embodiment, reference Figure 7 When the authorization device receives the identification code, the control method of the authorization system of the device further includes:

[0090] Step S330: the authorized device takes a picture of the face of a person within a preset range to obtain facial information;

[0091] Step S340, searching a preset image database according to the facial information;

[0092] Step S350: When the facial information successfully matches the preset image database, the identification code is accepted and an authorization code is generated according to the identification code;

[0093] Step S360: When the facial information fails to match the preset image database, the identification code is rejected.

[0094] In this embodiment, the authorization device is provided with a camera, which takes pictures within a preset range and obtains facial information of a person's face. Then, it is searched and matched with a preset image database in an internal memory or a cloud server. When a record highly similar to the photographed facial information is found in the image database, that is, after the identity of the photographed subject is confirmed, the relevant authorization operation can be further performed. At the same time, the preset image database can be provided with user-related information, such as user ID, name, authority level, etc. When the authorization device does not find a record matching the photographed facial information in the image database, it means that the match fails. The authorization device can also display an error prompt to inform the user of the reason for the identity verification failure, such as "No matching user found", "Please try to shoot again", etc. The user operating the authorization device can perform further verification or the authorization device can directly reject the authorization operation.

[0095] It should be noted that the preset range is set in advance by the R&D personnel. The preset range can be a specific area in front of the authorized device to ensure that only people close to the device can be photographed, avoiding irrelevant people in the distance from being mistakenly photographed, and avoiding the collection of invalid facial information as much as possible, causing the authorized device to perform unnecessary operations, thereby increasing its own power consumption. After receiving the identification code, the camera of the authorized device is triggered to shoot, which reduces power consumption to a certain extent. When shooting the user operating the authorized device, the operation of non-audited personnel can be rejected. For example, assuming that the audit account and password are retained on the authorized device, although the authorization main page can be directly entered, when the authorized device confirms that the facial information fails to match the preset image database, the identification code is refused to be received, that is, all authorized operations corresponding to the user are rejected, and a notification can be sent to the relevant personnel at the same time. The authorized device may be at risk of malicious occupation. In addition, the control device of the authorized device can store the collected facial information in the internal memory or cloud server. For multiple auditors with authorization authority, the same audit account and password can be shared to manage all on-site equipment in the management list. If there is a problem with the audit and management, the stored facial information can be searched, combined with the authorization time record, and all authorization records within the time period when the fault occurred can be searched. Determine the corresponding specific auditors and conduct accountability processing, etc. In addition, when the authorized device is lost, the auditors and relevant persons in charge, or the authorized on-site operators, send the identification code through the on-site device to enable the camera of the authorized device to take pictures and obtain facial information. The authorized device uploads the captured facial information and the current time to the cloud server, so that the auditors or relevant persons in charge can know the person who operates the authorized device through the cloud server, contact the relevant personnel based on the facial information and time records, and retrieve the lost authorized device, so as to avoid the inconvenience caused by the loss of the device and the production errors of the on-site equipment caused by the non-compliant authorized operation.

[0096] By capturing the facial information of the user operating the authorized device and matching it with the preset image database, it is ensured that only authorized auditors can make configuration changes. This greatly improves the security of the system and prevents unauthorized users from operating. At the same time, by storing facial information and authorization time, accountability can be pursued when problems arise, ensuring clear responsibilities, improving management efficiency and system reliability. In addition, quickly locating the person operating the authorized device helps to retrieve the lost authorized device as soon as possible, reducing production interruptions and related losses caused by lost equipment.

[0097] The present invention also proposes an authorization system for implementing the control method of the authorization system described above. The authorization system includes a field device, an intelligent terminal and an authorization device.

[0098] It is worth noting that since the authorization system of the present invention is based on the control method of the above-mentioned authorization system, the embodiments of the authorization system of the present invention include all technical solutions of all embodiments of the control method of the above-mentioned authorization system, and the technical effects achieved are also exactly the same, which will not be repeated here.

[0099] The above descriptions are only optional embodiments of the present invention, and are not intended to limit the patent scope of the present invention. All equivalent structural changes made using the contents of the present invention's specification and drawings, or direct / indirect applications in other related technical fields, under the inventive concept of the present invention are included in the patent protection scope of the present invention.

Claims

1. A control method for an authorization system, characterized in that: The authorization system includes a field device, an intelligent terminal and an authorization device; the control method of the authorization system of the device includes: When the field device detects new configuration parameters, it generates an identification code based on the new configuration parameters and field device parameters, and waits to receive an authorization code; The smart terminal collects the identification code and sends it to the authorization device; The authorization device generates an authorization code based on the identification code when receiving the identification code; When the field device receives the authorization code, the new configuration parameters are allowed to configure the field device to complete the update of the configuration parameters.

2. The control method of the authorization system according to claim 1, characterized in that: The generating of the identification code according to the new configuration parameters and the field device parameters specifically includes: The field device writes new configuration parameters and field device parameters into the file; The file is encrypted using an encryption algorithm and an identification code is generated.

3. The control method of the authorization system according to claim 1, characterized in that: The generating of the identification code according to the new configuration parameters and the field device parameters specifically includes: The field device obtains its own current system time to obtain the sending time; Generate timestamp and validity period information based on sending time; The field device generates an identification code based on the timestamp, validity period information, new configuration parameters and field device parameters.

4. The control method of the authorization system according to claim 1, characterized in that: When the field device receives the authorization code, the new configuration parameters are allowed to configure the field device, specifically including: The field device uses an encryption algorithm to decrypt the received authorization code to obtain the original information; The field device matches the original information with the new configuration parameters and field device parameters, and when the match is successful, determines that the authorization code is valid, allowing the new configuration parameters to configure the field device.

5. The control method of the authorization system according to claim 1, characterized in that: The field device includes a display component. After the step of generating an identification code according to the new configuration parameters and the field device parameters, the control method of the authorization system further includes: The generated identification code is sent to the display component.

6. The control method of the authorization system according to claim 1, characterized in that: When receiving the identification code, the authorization device generates the authorization code according to the identification code, specifically including: The authorization device performs a decoding operation on the identification code to obtain the configuration parameters and field device parameters; When the configuration parameters meet the preset configuration parameter requirements and it is determined according to the field device parameters that the corresponding field device belongs to a device in the management list, an authorization code is generated according to the identification code.

7. The control method of the authorization system according to claim 6, characterized in that: The authorization device performs a decoding operation on the identification code to obtain the configuration parameters and the field device parameters, specifically including: The identification code is decoded using an encryption algorithm to obtain a timestamp, validity period information, configuration parameters, and field device parameters.

8. The control method of the authorization system according to claim 7, characterized in that: After the identification code is decoded using an encryption algorithm to obtain a timestamp, validity period information, configuration parameters, and field device parameters, the control method of the authorization system further includes: The authorized device obtains its current system time to obtain the receiving time; The authorization device calculates the time difference according to the reception time and the timestamp in the identification code; When the time difference is greater than the validity period, refusing to accept the identification code; When the time difference is less than or equal to the validity period, the identification code is accepted, so as to generate an authorization code according to the identification code when the configuration parameters meet the preset configuration parameter requirements and it is determined according to the field device parameters that the field device belongs to the management list.

9. The control method of the authorization system according to claim 1, characterized in that: When the authorization device receives the identification code, the control method of the authorization system of the device further includes: The authorized device takes a picture of a person's face within a preset range to obtain facial information; Searching in a preset image database based on facial information; When the facial information successfully matches the preset image database, the identification code is accepted and an authorization code is generated according to the identification code; When the facial information fails to match the preset image database, the identification code is rejected.

10. An authorization system, characterized in that: A control method for implementing the authorization system according to any one of claims 1 to 9, wherein the authorization system comprises a field device, an intelligent terminal and an authorization device.

Images