Formation and capacity grading production line communication method and system

Abstract

The invention provides a formation and capacity grading production line communication method and system in the technical field of formation and capacity grading. The method comprises the following steps: S1, configuring a first router parameter of a main router connected with an upper computer and a second router parameter of a sub-router connected with formation and capacity grading equipment; s2, establishing wireless connection between the upper computer and the formation and capacity grading equipment through a router; s3, the formation and capacity grading device obtains and verifies the communication request sent by the upper computer, and then feeds back a communication permission response; s4, the upper computer sends a formation and capacity grading instruction to the formation and capacity grading equipment based on the communication permission response; s5, the formation and capacity grading device analyzes the formation and capacity grading instruction to obtain ciphertext data, and decrypts the ciphertext data to obtain instruction content to execute formation and capacity grading operation; and S6, generating a formation and capacity grading report based on the formation and capacity grading data, encrypting the formation and capacity grading report into an encrypted report, and sending the encrypted report to an upper computer. The method has the advantages that the convenience and safety of formation and capacity grading production line communication are greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of chemical componentization and capacity generation, and in particular to a chemical componentization and capacity generation line communication method and system. Background Art

[0002] During the production process of lithium batteries, they need to be chemically processed to activate the internal chemical substances. In order to improve the production efficiency of lithium batteries, a chemical processing production line is generally set up to specifically handle the process of lithium battery chemical processing.

[0003] There are several storage locations in the chemical separation and capacity production line. During chemical separation and capacity, the tooling of the chemical separation and capacity equipment needs to be sent to the press in the storage location through the jacking and positioning mechanism, and the tooling needs to be sent out of the storage location after the chemical separation and capacity is completed. In order to control each chemical separation and capacity equipment to execute the chemical separation and capacity instructions, the host computer needs to communicate with each chemical separation and capacity equipment through the storage location.

[0004] For the communication between the host computer and the chemical composition equipment, traditionally, communication interfaces are set on each tooling and press respectively, and docking is carried out when the tooling is sent to the press, and then wired communication is carried out. However, the traditional communication method has the following disadvantages: 1. For tooling that needs to be moved frequently, the docking process is very cumbersome and prone to communication failures; 2. No corresponding security measures are taken during the communication process, which may result in illegal access, or theft or tampering of communication data, posing a great security risk.

[0005] Therefore, how to provide a communication method and system for a chemical component production line to improve the convenience and security of communication in the chemical component production line has become a technical problem that needs to be solved urgently. Summary of the invention

[0006] The technical problem to be solved by the present invention is to provide a communication method and system for a chemical component production line, so as to improve the convenience and security of the communication of the chemical component production line.

[0007] In a first aspect, the present invention provides a communication method for a component production line, comprising the following steps:

[0008] Step S1, configuring the first router parameters of the main router connected to the host computer and the second router parameters of the sub-router connected to the component capacity device;

[0009] Step S2: The host computer and the content-splitting device establish a wireless connection through the main router and the sub-router;

[0010] Step S3, the component content device obtains the communication request sent by the host computer, verifies the communication request, and feeds back a communication permission response to the host computer;

[0011] Step S4: The host computer sends a content splitting instruction carrying ciphertext data to the content splitting device based on the communication permission response;

[0012] Step S5, the content splitting device parses the received content splitting instruction to obtain ciphertext data, decrypts the ciphertext data to obtain instruction content, and performs content splitting operation based on the instruction content;

[0013] Step S6: After the chemical composition and capacity is completed, the chemical composition and capacity device generates a chemical composition and capacity report based on the chemical composition and capacity data, encrypts the chemical composition and capacity report into an encrypted report, and sends the encrypted report to the host computer.

[0014] Further, in step S1, the first router parameters include at least a first working mode, a first IP mode, a first IP address, a first subnet mask, a wifi name, and a wifi password;

[0015] The second router parameters include at least a second working mode, a second IP mode, a second IP address and a second subnet mask;

[0016] The first working mode is AP mode; the second working mode is client mode; the first IP mode and the second IP mode are both static IPs; the first IP address and the second IP address are different addresses in the same network segment; the first subnet mask and the second subnet mask are the same.

[0017] Furthermore, the step S3 is specifically as follows:

[0018] The host computer generates a communication request carrying a device ID, a timestamp, and a hash value, and sends the communication request to the content-splitting device in real time; the hash value is obtained by hashing the device ID and the timestamp;

[0019] The component device receives the communication request in real time, parses the communication request to obtain the device ID, timestamp and hash value, performs integrity check on the device ID and timestamp based on the hash value, performs timeliness check through the timestamp, and then performs legitimacy check on the device ID through the preset device management table, and then provides real-time feedback to the upper computer to allow communication response.

[0020] Furthermore, the step S4 is specifically as follows:

[0021] The upper computer performs MAC calculation on the content of the instruction to be sent to obtain a first MAC value, encrypts the instruction content and the first MAC value through the RSA algorithm to obtain first-level encrypted data, maps each character of the first-level encrypted data through a preset mapping rule to obtain second-level encrypted data, encrypts the second-level encrypted data through the AES algorithm to obtain third-level encrypted data, divides the third-level encrypted data into first sub-encrypted data and second sub-encrypted data, encrypts the first sub-encrypted data through the RC2 algorithm to obtain a first encrypted data block, encrypts the second sub-encrypted data through the BLOWFISH algorithm to obtain a second encrypted data block, encrypts the first encrypted data block and the second encrypted data block into ciphertext data through the ECDSA algorithm, generates a content splitting instruction based on the ciphertext data and sends it to the content splitting device.

[0022] Furthermore, the step S6 is specifically as follows:

[0023] After the content splitting is completed, the content splitting device generates a content splitting report including at least content splitting data, content splitting time, and device ID, performs MAC calculation on the content splitting report to obtain a second MAC value, encrypts the content splitting report and the second MAC value through the IDEA algorithm to obtain first encrypted data, shifts each character of the first encrypted data to the right by a preset first displacement amount to obtain second encrypted data, encrypts the second encrypted data through the 3DES algorithm to obtain third encrypted data, shifts each character of the third encrypted data to the left by a preset second displacement amount to obtain fourth encrypted data, encrypts the fourth encrypted data through the AES-KW algorithm to obtain fifth encrypted data, shifts each character of the fifth encrypted data to the right by a preset third displacement amount to obtain sixth encrypted data, encrypts the sixth encrypted data through the 3DES algorithm to obtain an encrypted report, and sends the encrypted report to a host computer.

[0024] In a second aspect, the present invention provides a communication system for a chemical composition production line, including the following modules:

[0025] A router configuration module, used to configure the first router parameters of the main router connected to the host computer and the second router parameters of the sub-router connected to the component capacity device;

[0026] Wireless connection module, used for establishing wireless connection between the host computer and the chemical component equipment through the main router and the sub-router;

[0027] The communication request verification module is used to obtain the communication request sent by the host computer from the component capacity device, verify the communication request, and feedback the communication permission response to the host computer;

[0028] A chemical composition and containment instruction sending module, used for the host computer to send a chemical composition and containment instruction carrying ciphertext data to the chemical composition and containment device based on the communication permission response;

[0029] A composition operation module, configured for the composition device to parse the received composition instruction to obtain ciphertext data, decrypt the ciphertext data to obtain instruction content, and perform composition operation based on the instruction content;

[0030] The chemical composition capacity report management module is used for generating a chemical composition capacity report based on chemical composition capacity data after the chemical composition capacity device completes chemical composition capacity, encrypting the chemical composition capacity report into an encrypted report, and sending the encrypted report to the host computer.

[0031] Further, in the router configuration module, the first router parameter includes at least a first working mode, a first IP mode, a first IP address, a first subnet mask, a wifi name, and a wifi password;

[0032] The second router parameters include at least a second working mode, a second IP mode, a second IP address and a second subnet mask;

[0033] The first working mode is AP mode; the second working mode is client mode; the first IP mode and the second IP mode are both static IPs; the first IP address and the second IP address are different addresses in the same network segment; the first subnet mask and the second subnet mask are the same.

[0034] Furthermore, the communication request verification module is specifically used to:

[0035] The host computer generates a communication request carrying a device ID, a timestamp, and a hash value, and sends the communication request to the content-splitting device in real time; the hash value is obtained by hashing the device ID and the timestamp;

[0036] The component device receives the communication request in real time, parses the communication request to obtain the device ID, timestamp and hash value, performs integrity check on the device ID and timestamp based on the hash value, performs timeliness check through the timestamp, and then performs legitimacy check on the device ID through the preset device management table, and then provides real-time feedback to the upper computer to allow communication response.

[0037] Furthermore, the content-based instruction sending module is specifically used for:

[0038] The upper computer performs MAC calculation on the content of the instruction to be sent to obtain a first MAC value, encrypts the instruction content and the first MAC value through the RSA algorithm to obtain first-level encrypted data, maps each character of the first-level encrypted data through a preset mapping rule to obtain second-level encrypted data, encrypts the second-level encrypted data through the AES algorithm to obtain third-level encrypted data, divides the third-level encrypted data into first sub-encrypted data and second sub-encrypted data, encrypts the first sub-encrypted data through the RC2 algorithm to obtain a first encrypted data block, encrypts the second sub-encrypted data through the BLOWFISH algorithm to obtain a second encrypted data block, encrypts the first encrypted data block and the second encrypted data block into ciphertext data through the ECDSA algorithm, generates a content splitting instruction based on the ciphertext data and sends it to the content splitting device.

[0039] Furthermore, the chemical composition and capacity report management module is specifically used for:

[0040] After the content splitting is completed, the content splitting device generates a content splitting report including at least content splitting data, content splitting time, and device ID, performs MAC calculation on the content splitting report to obtain a second MAC value, encrypts the content splitting report and the second MAC value through the IDEA algorithm to obtain first encrypted data, shifts each character of the first encrypted data to the right by a preset first displacement amount to obtain second encrypted data, encrypts the second encrypted data through the 3DES algorithm to obtain third encrypted data, shifts each character of the third encrypted data to the left by a preset second displacement amount to obtain fourth encrypted data, encrypts the fourth encrypted data through the AES-KW algorithm to obtain fifth encrypted data, shifts each character of the fifth encrypted data to the right by a preset third displacement amount to obtain sixth encrypted data, encrypts the sixth encrypted data through the 3DES algorithm to obtain an encrypted report, and sends the encrypted report to a host computer.

[0041] The advantages of the present invention are:

[0042] 1. By configuring the first router parameters of the main router connected to the host computer and the second router parameters of the sub-router connected to the chemical splitting device, the host computer and the chemical splitting device establish a wireless connection through the main router and the sub-router; then the chemical splitting device obtains the communication request sent by the host computer and verifies it, and then feeds back a communication permission response to the host computer; based on the communication permission response, the host computer sends a chemical splitting instruction carrying ciphertext data to the chemical splitting device; then the chemical splitting device parses the chemical splitting instruction to obtain the ciphertext data, decrypts the ciphertext data to obtain the instruction content, and executes the chemical splitting based on the instruction content. After the chemical composition and capacity operation is completed, a chemical composition and capacity report is generated based on the chemical composition and capacity data, and the chemical composition and capacity report is encrypted into an encrypted report and sent to the host computer; that is, the wifi of the main router is connected through the sub-router to establish a wireless connection between the host computer and the chemical composition and capacity equipment, instead of the traditional wired connection, to avoid damage to the corresponding communication equipment due to frequent movement of the tooling, reduce the probability of communication failure, and encrypt the data when transmitting between the host computer and the chemical composition and capacity equipment, and verify the communication request before transmitting the data to avoid illegal access, which ultimately greatly improves the convenience and security of the chemical composition and capacity production line communication.

[0043] 2. A communication request carrying the device ID, timestamp and hash value is generated by the host computer and sent to the chemical component device. The chemical component device can perform integrity verification through the hash value, time validity verification through the timestamp, and legitimacy verification through the device ID. Three security measures are taken before and after to prevent illegal devices from transmitting instructions to the chemical component device, greatly improving security.

[0044] 3. Perform MAC calculation on the content of the instruction to be sent to obtain a first MAC value, encrypt the instruction content and the first MAC value through the RSA algorithm to obtain first-level encrypted data, map each character of the first-level encrypted data through a preset mapping rule to obtain second-level encrypted data, encrypt the second-level encrypted data through the AES algorithm to obtain third-level encrypted data, divide the third-level encrypted data into first sub-encrypted data and second sub-encrypted data, encrypt the first sub-encrypted data through the RC2 algorithm to obtain a first encrypted data block, encrypt the second sub-encrypted data through the BLOWFISH algorithm to obtain a second encrypted data block, encrypt the first encrypted data block and the second encrypted data block into ciphertext data through the ECDSA algorithm, generate a content-splitting instruction based on the ciphertext data and send it to the content-splitting device; subsequently, the integrity check can be performed through the first MAC value, during which a variety of encryption algorithms, block encryption, and data transformation are combined. If the corresponding encryption algorithm or data transformation rule is not known, the ciphertext data cannot be cracked. At least 7 security measures (MAC calculation, RSA algorithm, mapping rule, AES algorithm, RC2 algorithm, BLOWFISH algorithm, ECDSA algorithm) are taken before and after, thereby greatly improving the security of instruction content transmission.

[0045] 4. Perform MAC calculation on the chemical composition capacity report to obtain a second MAC value, encrypt the chemical composition capacity report and the second MAC value through the IDEA algorithm to obtain the first encrypted data, shift each character of the first encrypted data to the right by a preset first displacement to obtain the second encrypted data, encrypt the second encrypted data through the 3DES algorithm to obtain the third encrypted data, shift each character of the third encrypted data to the left by a preset second displacement to obtain the fourth encrypted data, encrypt the fourth encrypted data through the AES-KW algorithm to obtain the fifth encrypted data, shift each character of the fifth encrypted data to the right by a preset third displacement to obtain the sixth encrypted data, encrypt the sixth encrypted data through the 3DES algorithm to obtain an encrypted report and send it to the host computer; subsequently, the second MAC value can be used for integrity verification, during which a variety of encryption algorithms and data transformations are combined. If the corresponding encryption algorithm or data transformation rule is not known, the encrypted report cannot be cracked. At least 9 security measures are taken before and after (MAC calculation, IDEA algorithm, first displacement, displacement direction, 3DES algorithm, second displacement, AES-KW algorithm, third displacement, 3DES algorithm), thereby greatly improving the security of chemical composition capacity report transmission.

[0046] 5. By taking different security measures during communication request verification, instruction content transmission, and chemical composition report transmission, the security of chemical composition production line communication is further improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The present invention will be further described below in conjunction with embodiments with reference to the accompanying drawings.

[0048] Figure 1 The present invention is a flow chart of a method for communication of a component production line.

[0049] Figure 2 It is a structural schematic diagram of a communication system for a chemical composition production line of the present invention. DETAILED DESCRIPTION

[0050] The technical solution in the embodiment of the present application has the following overall idea: a wireless connection is established between the host computer and the chemical component equipment by connecting the wifi of the main router through a sub-router, replacing the traditional wired connection, avoiding damage to the corresponding communication equipment due to frequent movement of tooling, reducing the probability of communication failure, and encrypting the data when transmitting between the host computer and the chemical component equipment, and verifying the communication request before transmitting the data to avoid illegal access, so as to improve the convenience and security of the communication of the chemical component production line.

[0051] Please refer to Figure 1 to Figure 2 As shown, a preferred embodiment of a communication method for a component production line of the present invention includes the following steps:

[0052] Step S1, configuring the first router parameters of the main router connected to the host computer and the second router parameters of the sub-router connected to the component capacity device;

[0053] Step S2: The host computer and the content-splitting device establish a wireless connection through the main router and the sub-router;

[0054] Step S3, the component capacity device obtains the communication request sent by the host computer, verifies the communication request, and feeds back a communication permission response to the host computer;

[0055] Step S4: The host computer sends a content splitting instruction carrying ciphertext data to the content splitting device based on the communication permission response;

[0056] Step S5, the content splitting device parses the received content splitting instruction to obtain ciphertext data, decrypts the ciphertext data to obtain instruction content, and performs content splitting operation based on the instruction content;

[0057] Step S6: After the chemical composition and capacity is completed, the chemical composition and capacity device generates a chemical composition and capacity report based on the chemical composition and capacity data, encrypts the chemical composition and capacity report into an encrypted report, and sends the encrypted report to the host computer.

[0058] In step S1, the first router parameters at least include a first working mode, a first IP mode, a first IP address, a first subnet mask, a wifi name, and a wifi password;

[0059] The second router parameters include at least a second working mode, a second IP mode, a second IP address and a second subnet mask;

[0060] The first working mode is AP mode; the second working mode is client mode; the first IP mode and the second IP mode are both static IPs; the first IP address and the second IP address are different addresses in the same network segment; the first subnet mask and the second subnet mask are the same.

[0061] The step S3 is specifically as follows:

[0062] The host computer generates a communication request carrying a device ID, a timestamp, and a hash value, and sends the communication request to the content-splitting device in real time; the hash value is obtained by hashing the device ID and the timestamp;

[0063] A communication request carrying the device ID, timestamp and hash value is generated by the host computer and sent to the chemical component device. The chemical component device can perform integrity verification through the hash value, timeliness verification through the timestamp, and legitimacy verification through the device ID. Three security measures are taken before and after to prevent illegal devices from transmitting instructions to the chemical component device, greatly improving security.

[0064] The component device receives the communication request in real time, parses the communication request to obtain the device ID, timestamp and hash value, performs integrity check on the device ID and timestamp based on the hash value, performs timeliness check through the timestamp, and then performs legitimacy check on the device ID through the preset device management table, and then provides real-time feedback to the upper computer to allow communication response.

[0065] The step S4 is specifically as follows:

[0066] The upper computer performs MAC calculation on the content of the instruction to be sent to obtain a first MAC value, encrypts the instruction content and the first MAC value through the RSA algorithm to obtain first-level encrypted data, maps each character of the first-level encrypted data through a preset mapping rule to obtain second-level encrypted data, encrypts the second-level encrypted data through the AES algorithm to obtain third-level encrypted data, divides the third-level encrypted data into first sub-encrypted data and second sub-encrypted data, encrypts the first sub-encrypted data through the RC2 algorithm to obtain a first encrypted data block, encrypts the second sub-encrypted data through the BLOWFISH algorithm to obtain a second encrypted data block, encrypts the first encrypted data block and the second encrypted data block into ciphertext data through the ECDSA algorithm, generates a content splitting instruction based on the ciphertext data and sends it to the content splitting device.

[0067] A first MAC value is obtained by performing MAC calculation on the content of the instruction to be sent, the instruction content and the first MAC value are encrypted by the RSA algorithm to obtain first-level encrypted data, each character of the first-level encrypted data is mapped by a preset mapping rule to obtain second-level encrypted data, the second-level encrypted data is encrypted by the AES algorithm to obtain third-level encrypted data, the third-level encrypted data is equally divided into first sub-encrypted data and second sub-encrypted data, the first sub-encrypted data is encrypted by the RC2 algorithm to obtain a first encrypted data block, the second sub-encrypted data is encrypted by the BLOWFISH algorithm to obtain a second encrypted data block, the first encrypted data block and the second encrypted data block are encrypted into ciphertext data by the ECDSA algorithm, and a content-splitting instruction is generated based on the ciphertext data and sent to the content-splitting device; subsequently, the integrity check can be performed through the first MAC value, during which a variety of encryption algorithms, block encryption, and data transformation are combined. If the corresponding encryption algorithm or data transformation rule is not known, the ciphertext data cannot be cracked. At least 7 security measures (MAC calculation, RSA algorithm, mapping rule, AES algorithm, RC2 algorithm, BLOWFISH algorithm, ECDSA algorithm) are taken before and after, thereby greatly improving the security of instruction content transmission.

[0068] The step S5 is specifically as follows:

[0069] The content splitting device parses the received content splitting instruction to obtain ciphertext data, decrypts the ciphertext data into a first encrypted data block and a second encrypted data block through the ECDSA algorithm, decrypts the first encrypted data block through the RC2 algorithm to obtain first sub-encrypted data, decrypts the second encrypted data block through the BLOWFISH algorithm to obtain second sub-encrypted data, concatenates the first sub-encrypted data and the second sub-encrypted data into three-level encrypted data, decrypts the three-level encrypted data through the AES algorithm to obtain second-level encrypted data, maps each character of the second-level encrypted data through a preset mapping rule to obtain first-level encrypted data, decrypts the first-level encrypted data through the RSA algorithm to obtain instruction content and a first MAC value, and then performs an integrity check on the instruction content through the first MAC value, and then performs a content splitting operation based on the instruction content.

[0070] The step S6 is specifically as follows:

[0071] After the content splitting is completed, the content splitting device generates a content splitting report including at least content splitting data, content splitting time, and device ID, performs MAC calculation on the content splitting report to obtain a second MAC value, encrypts the content splitting report and the second MAC value through the IDEA algorithm to obtain first encrypted data, shifts each character of the first encrypted data to the right by a preset first displacement amount to obtain second encrypted data, encrypts the second encrypted data through the 3DES algorithm to obtain third encrypted data, shifts each character of the third encrypted data to the left by a preset second displacement amount to obtain fourth encrypted data, encrypts the fourth encrypted data through the AES-KW algorithm to obtain fifth encrypted data, shifts each character of the fifth encrypted data to the right by a preset third displacement amount to obtain sixth encrypted data, encrypts the sixth encrypted data through the 3DES algorithm to obtain an encrypted report, and sends the encrypted report to a host computer.

[0072] A second MAC value is obtained by performing MAC calculation on the chemical composition capacity report, the chemical composition capacity report and the second MAC value are encrypted by the IDEA algorithm to obtain the first encrypted data, each character of the first encrypted data is shifted to the right by a preset first displacement to obtain the second encrypted data, the second encrypted data is encrypted by the 3DES algorithm to obtain the third encrypted data, each character of the third encrypted data is shifted to the left by a preset second displacement to obtain the fourth encrypted data, the fourth encrypted data is encrypted by the AES-KW algorithm to obtain the fifth encrypted data, each character of the fifth encrypted data is shifted to the right by a preset third displacement to obtain the sixth encrypted data, the sixth encrypted data is encrypted by the 3DES algorithm to obtain an encrypted report and send it to the host computer; subsequently, the second MAC value can be used for integrity verification, during which a variety of encryption algorithms and data transformations are combined. If the corresponding encryption algorithm or data transformation rule is not known, the encrypted report cannot be cracked. At least 9 security measures are taken before and after (MAC calculation, IDEA algorithm, first displacement, displacement direction, 3DES algorithm, second displacement, AES-KW algorithm, third displacement, 3DES algorithm), thereby greatly improving the security of the chemical composition capacity report transmission.

[0073] By taking different security measures during communication request verification, instruction content transmission, and chemical composition report transmission, the security of chemical composition production line communication is further improved.

[0074] The decryption process of the encrypted report is as follows: decrypting the encrypted report through the 3DES algorithm to obtain the sixth encrypted data, shifting each character of the sixth encrypted data to the left by a preset third displacement amount to obtain the fifth encrypted data, decrypting the fifth encrypted data through the AES-KW algorithm to obtain the fourth encrypted data, shifting each character of the fourth encrypted data to the right by a preset second displacement amount to obtain the third encrypted data, decrypting the third encrypted data through the 3DES algorithm to obtain the second encrypted data, shifting each character of the second encrypted data to the left by a preset first displacement amount to obtain the first encrypted data, decrypting the first encrypted data through the IDEA algorithm to obtain a component capacity report and a second MAC value, and performing an integrity check on the component capacity report through the second MAC value.

[0075] A preferred embodiment of a communication system for a chemical composition production line of the present invention includes the following modules:

[0076] A router configuration module, used to configure the first router parameters of the main router connected to the host computer and the second router parameters of the sub-router connected to the component capacity device;

[0077] Wireless connection module, used for establishing wireless connection between the host computer and the chemical component equipment through the main router and the sub-router;

[0078] The communication request verification module is used to obtain the communication request sent by the host computer from the component capacity device, verify the communication request, and feedback the communication permission response to the host computer;

[0079] A chemical composition and containment instruction sending module, used for the host computer to send a chemical composition and containment instruction carrying ciphertext data to the chemical composition and containment device based on the communication permission response;

[0080] A composition operation module, configured for the composition device to parse the received composition instruction to obtain ciphertext data, decrypt the ciphertext data to obtain instruction content, and perform composition operation based on the instruction content;

[0081] The chemical composition capacity report management module is used for generating a chemical composition capacity report based on chemical composition capacity data after the chemical composition capacity device completes chemical composition capacity, encrypting the chemical composition capacity report into an encrypted report, and sending the encrypted report to the host computer.

[0082] In the router configuration module, the first router parameters at least include a first working mode, a first IP mode, a first IP address, a first subnet mask, a wifi name, and a wifi password;

[0083] The second router parameters include at least a second working mode, a second IP mode, a second IP address and a second subnet mask;

[0084] The first working mode is AP mode; the second working mode is client mode; the first IP mode and the second IP mode are both static IPs; the first IP address and the second IP address are different addresses in the same network segment; the first subnet mask and the second subnet mask are the same.

[0085] The communication request verification module is specifically used for:

[0086] The host computer generates a communication request carrying a device ID, a timestamp, and a hash value, and sends the communication request to the content-splitting device in real time; the hash value is obtained by hashing the device ID and the timestamp;

[0087] A communication request carrying the device ID, timestamp and hash value is generated by the host computer and sent to the chemical component device. The chemical component device can perform integrity verification through the hash value, timeliness verification through the timestamp, and legitimacy verification through the device ID. Three security measures are taken before and after to prevent illegal devices from transmitting instructions to the chemical component device, greatly improving security.

[0088] The component device receives the communication request in real time, parses the communication request to obtain the device ID, timestamp and hash value, performs integrity check on the device ID and timestamp based on the hash value, performs timeliness check through the timestamp, and then performs legitimacy check on the device ID through the preset device management table, and then provides real-time feedback to the upper computer to allow communication response.

[0089] The componentization and content-scaling instruction sending module is specifically used for:

[0090] The upper computer performs MAC calculation on the content of the instruction to be sent to obtain a first MAC value, encrypts the instruction content and the first MAC value through the RSA algorithm to obtain first-level encrypted data, maps each character of the first-level encrypted data through a preset mapping rule to obtain second-level encrypted data, encrypts the second-level encrypted data through the AES algorithm to obtain third-level encrypted data, divides the third-level encrypted data into first sub-encrypted data and second sub-encrypted data, encrypts the first sub-encrypted data through the RC2 algorithm to obtain a first encrypted data block, encrypts the second sub-encrypted data through the BLOWFISH algorithm to obtain a second encrypted data block, encrypts the first encrypted data block and the second encrypted data block into ciphertext data through the ECDSA algorithm, generates a content splitting instruction based on the ciphertext data and sends it to the content splitting device.

[0091] A first MAC value is obtained by performing MAC calculation on the content of the instruction to be sent, the instruction content and the first MAC value are encrypted by the RSA algorithm to obtain first-level encrypted data, each character of the first-level encrypted data is mapped by a preset mapping rule to obtain second-level encrypted data, the second-level encrypted data is encrypted by the AES algorithm to obtain third-level encrypted data, the third-level encrypted data is equally divided into first sub-encrypted data and second sub-encrypted data, the first sub-encrypted data is encrypted by the RC2 algorithm to obtain a first encrypted data block, the second sub-encrypted data is encrypted by the BLOWFISH algorithm to obtain a second encrypted data block, the first encrypted data block and the second encrypted data block are encrypted into ciphertext data by the ECDSA algorithm, and a content-splitting instruction is generated based on the ciphertext data and sent to the content-splitting device; subsequently, the integrity check can be performed through the first MAC value, during which a variety of encryption algorithms, block encryption, and data transformation are combined. If the corresponding encryption algorithm or data transformation rule is not known, the ciphertext data cannot be cracked. At least 7 security measures (MAC calculation, RSA algorithm, mapping rule, AES algorithm, RC2 algorithm, BLOWFISH algorithm, ECDSA algorithm) are taken before and after, thereby greatly improving the security of instruction content transmission.

[0092] The componentization and capacity operation module is specifically used for:

[0093] The content splitting device parses the received content splitting instruction to obtain ciphertext data, decrypts the ciphertext data into a first encrypted data block and a second encrypted data block through the ECDSA algorithm, decrypts the first encrypted data block through the RC2 algorithm to obtain first sub-encrypted data, decrypts the second encrypted data block through the BLOWFISH algorithm to obtain second sub-encrypted data, concatenates the first sub-encrypted data and the second sub-encrypted data into three-level encrypted data, decrypts the three-level encrypted data through the AES algorithm to obtain second-level encrypted data, maps each character of the second-level encrypted data through a preset mapping rule to obtain first-level encrypted data, decrypts the first-level encrypted data through the RSA algorithm to obtain instruction content and a first MAC value, and then performs an integrity check on the instruction content through the first MAC value, and then performs a content splitting operation based on the instruction content.

[0094] The chemical composition and capacity reporting management module is specifically used for:

[0095] After the content splitting is completed, the content splitting device generates a content splitting report including at least content splitting data, content splitting time, and device ID, performs MAC calculation on the content splitting report to obtain a second MAC value, encrypts the content splitting report and the second MAC value through the IDEA algorithm to obtain first encrypted data, shifts each character of the first encrypted data to the right by a preset first displacement amount to obtain second encrypted data, encrypts the second encrypted data through the 3DES algorithm to obtain third encrypted data, shifts each character of the third encrypted data to the left by a preset second displacement amount to obtain fourth encrypted data, encrypts the fourth encrypted data through the AES-KW algorithm to obtain fifth encrypted data, shifts each character of the fifth encrypted data to the right by a preset third displacement amount to obtain sixth encrypted data, encrypts the sixth encrypted data through the 3DES algorithm to obtain an encrypted report, and sends the encrypted report to a host computer.

[0096] A second MAC value is obtained by performing MAC calculation on the chemical composition capacity report, the chemical composition capacity report and the second MAC value are encrypted by the IDEA algorithm to obtain the first encrypted data, each character of the first encrypted data is shifted to the right by a preset first displacement to obtain the second encrypted data, the second encrypted data is encrypted by the 3DES algorithm to obtain the third encrypted data, each character of the third encrypted data is shifted to the left by a preset second displacement to obtain the fourth encrypted data, the fourth encrypted data is encrypted by the AES-KW algorithm to obtain the fifth encrypted data, each character of the fifth encrypted data is shifted to the right by a preset third displacement to obtain the sixth encrypted data, the sixth encrypted data is encrypted by the 3DES algorithm to obtain an encrypted report and send it to the host computer; subsequently, the second MAC value can be used for integrity verification, during which a variety of encryption algorithms and data transformations are combined. If the corresponding encryption algorithm or data transformation rule is not known, the encrypted report cannot be cracked. At least 9 security measures are taken before and after (MAC calculation, IDEA algorithm, first displacement, displacement direction, 3DES algorithm, second displacement, AES-KW algorithm, third displacement, 3DES algorithm), thereby greatly improving the security of the chemical composition capacity report transmission.

[0097] By taking different security measures during communication request verification, instruction content transmission, and chemical composition report transmission, the security of chemical composition production line communication is further improved.

[0098] The decryption process of the encrypted report is as follows: decrypting the encrypted report through the 3DES algorithm to obtain the sixth encrypted data, shifting each character of the sixth encrypted data to the left by a preset third displacement amount to obtain the fifth encrypted data, decrypting the fifth encrypted data through the AES-KW algorithm to obtain the fourth encrypted data, shifting each character of the fourth encrypted data to the right by a preset second displacement amount to obtain the third encrypted data, decrypting the third encrypted data through the 3DES algorithm to obtain the second encrypted data, shifting each character of the second encrypted data to the left by a preset first displacement amount to obtain the first encrypted data, decrypting the first encrypted data through the IDEA algorithm to obtain a component capacity report and a second MAC value, and performing an integrity check on the component capacity report through the second MAC value.

[0099] In summary, the advantages of the present invention are:

[0100] 1. By configuring the first router parameters of the main router connected to the host computer and the second router parameters of the sub-router connected to the chemical splitting device, the host computer and the chemical splitting device establish a wireless connection through the main router and the sub-router; then the chemical splitting device obtains the communication request sent by the host computer and verifies it, and then feeds back a communication permission response to the host computer; based on the communication permission response, the host computer sends a chemical splitting instruction carrying ciphertext data to the chemical splitting device; then the chemical splitting device parses the chemical splitting instruction to obtain the ciphertext data, decrypts the ciphertext data to obtain the instruction content, and executes the chemical splitting based on the instruction content. After the chemical composition and capacity operation is completed, a chemical composition and capacity report is generated based on the chemical composition and capacity data, and the chemical composition and capacity report is encrypted into an encrypted report and sent to the host computer; that is, the wifi of the main router is connected through the sub-router to establish a wireless connection between the host computer and the chemical composition and capacity equipment, instead of the traditional wired connection, to avoid damage to the corresponding communication equipment due to frequent movement of the tooling, reduce the probability of communication failure, and encrypt the data when transmitting between the host computer and the chemical composition and capacity equipment, and verify the communication request before transmitting the data to avoid illegal access, which ultimately greatly improves the convenience and security of the chemical composition and capacity production line communication.

[0101] 2. A communication request carrying the device ID, timestamp and hash value is generated by the host computer and sent to the chemical component device. The chemical component device can perform integrity verification through the hash value, time validity verification through the timestamp, and legitimacy verification through the device ID. Three security measures are taken before and after to prevent illegal devices from transmitting instructions to the chemical component device, greatly improving security.

[0102] 3. Perform MAC calculation on the content of the instruction to be sent to obtain a first MAC value, encrypt the instruction content and the first MAC value through the RSA algorithm to obtain first-level encrypted data, map each character of the first-level encrypted data through a preset mapping rule to obtain second-level encrypted data, encrypt the second-level encrypted data through the AES algorithm to obtain third-level encrypted data, divide the third-level encrypted data into first sub-encrypted data and second sub-encrypted data, encrypt the first sub-encrypted data through the RC2 algorithm to obtain a first encrypted data block, encrypt the second sub-encrypted data through the BLOWFISH algorithm to obtain a second encrypted data block, encrypt the first encrypted data block and the second encrypted data block into ciphertext data through the ECDSA algorithm, generate a content-splitting instruction based on the ciphertext data and send it to the content-splitting device; subsequently, the integrity check can be performed through the first MAC value, during which a variety of encryption algorithms, block encryption, and data transformation are combined. If the corresponding encryption algorithm or data transformation rule is not known, the ciphertext data cannot be cracked. At least 7 security measures (MAC calculation, RSA algorithm, mapping rule, AES algorithm, RC2 algorithm, BLOWFISH algorithm, ECDSA algorithm) are taken before and after, thereby greatly improving the security of instruction content transmission.

[0103] 4. Perform MAC calculation on the chemical composition capacity report to obtain a second MAC value, encrypt the chemical composition capacity report and the second MAC value through the IDEA algorithm to obtain the first encrypted data, shift each character of the first encrypted data to the right by a preset first displacement to obtain the second encrypted data, encrypt the second encrypted data through the 3DES algorithm to obtain the third encrypted data, shift each character of the third encrypted data to the left by a preset second displacement to obtain the fourth encrypted data, encrypt the fourth encrypted data through the AES-KW algorithm to obtain the fifth encrypted data, shift each character of the fifth encrypted data to the right by a preset third displacement to obtain the sixth encrypted data, encrypt the sixth encrypted data through the 3DES algorithm to obtain an encrypted report and send it to the host computer; subsequently, the second MAC value can be used for integrity verification, during which a variety of encryption algorithms and data transformations are combined. If the corresponding encryption algorithm or data transformation rule is not known, the encrypted report cannot be cracked. At least 9 security measures are taken before and after (MAC calculation, IDEA algorithm, first displacement, displacement direction, 3DES algorithm, second displacement, AES-KW algorithm, third displacement, 3DES algorithm), thereby greatly improving the security of chemical composition capacity report transmission.

[0104] 5. By taking different security measures during communication request verification, instruction content transmission, and chemical composition report transmission, the security of chemical composition production line communication is further improved.

[0105] Although the specific implementation modes of the present invention are described above, those skilled in the art should understand that the specific implementation modes described are only illustrative and are not intended to limit the scope of the present invention. Equivalent modifications and changes made by those skilled in the art in accordance with the spirit of the present invention should be included in the scope of protection of the claims of the present invention.

Claims

1. A communication method for a chemical component production line, characterized in that: The steps include: Step S1, configuring the first router parameters of the main router connected to the host computer and the second router parameters of the sub-router connected to the component capacity device; Step S2: The host computer and the content-splitting device establish a wireless connection through the main router and the sub-router; Step S3, the component content device obtains the communication request sent by the host computer, verifies the communication request, and feeds back a communication permission response to the host computer; Step S4: The host computer sends a content splitting instruction carrying ciphertext data to the content splitting device based on the communication permission response; Step S5, the content splitting device parses the received content splitting instruction to obtain ciphertext data, decrypts the ciphertext data to obtain instruction content, and performs content splitting operation based on the instruction content; Step S6: After the chemical composition and capacity is completed, the chemical composition and capacity device generates a chemical composition and capacity report based on the chemical composition and capacity data, encrypts the chemical composition and capacity report into an encrypted report, and sends the encrypted report to the host computer.

2. A method for communication of a chemical component production line according to claim 1, characterized in that: In step S1, the first router parameters at least include a first working mode, a first IP mode, a first IP address, a first subnet mask, a wifi name, and a wifi password; The second router parameters include at least a second working mode, a second IP mode, a second IP address and a second subnet mask; The first working mode is AP mode; the second working mode is client mode; the first IP mode and the second IP mode are both static IPs; the first IP address and the second IP address are different addresses in the same network segment; the first subnet mask and the second subnet mask are the same.

3. A method for communication of a chemical component production line according to claim 1, characterized in that: The step S3 is specifically as follows: The host computer generates a communication request carrying a device ID, a timestamp, and a hash value, and sends the communication request to the content-splitting device in real time; the hash value is obtained by hashing the device ID and the timestamp; The component device receives the communication request in real time, parses the communication request to obtain the device ID, timestamp and hash value, performs integrity check on the device ID and timestamp based on the hash value, performs timeliness check through the timestamp, and then performs legitimacy check on the device ID through the preset device management table, and then provides real-time feedback to the upper computer to allow communication response.

4. A method for communication of a chemical component production line according to claim 1, characterized in that: The step S4 is specifically as follows: The upper computer performs MAC calculation on the content of the instruction to be sent to obtain a first MAC value, encrypts the instruction content and the first MAC value through the RSA algorithm to obtain first-level encrypted data, maps each character of the first-level encrypted data through a preset mapping rule to obtain second-level encrypted data, encrypts the second-level encrypted data through the AES algorithm to obtain third-level encrypted data, divides the third-level encrypted data into first sub-encrypted data and second sub-encrypted data, encrypts the first sub-encrypted data through the RC2 algorithm to obtain a first encrypted data block, encrypts the second sub-encrypted data through the BLOWFISH algorithm to obtain a second encrypted data block, encrypts the first encrypted data block and the second encrypted data block into ciphertext data through the ECDSA algorithm, generates a content splitting instruction based on the ciphertext data and sends it to the content splitting device.

5. A chemical composition production line communication method as claimed in claim 1, characterized in that: The step S6 is specifically as follows: After the content splitting is completed, the content splitting device generates a content splitting report including at least content splitting data, content splitting time, and device ID, performs MAC calculation on the content splitting report to obtain a second MAC value, encrypts the content splitting report and the second MAC value through the IDEA algorithm to obtain first encrypted data, shifts each character of the first encrypted data to the right by a preset first displacement amount to obtain second encrypted data, encrypts the second encrypted data through the 3DES algorithm to obtain third encrypted data, shifts each character of the third encrypted data to the left by a preset second displacement amount to obtain fourth encrypted data, encrypts the fourth encrypted data through the AES-KW algorithm to obtain fifth encrypted data, shifts each character of the fifth encrypted data to the right by a preset third displacement amount to obtain sixth encrypted data, encrypts the sixth encrypted data through the 3DES algorithm to obtain an encrypted report, and sends the encrypted report to a host computer.

6. A communication system for a chemical component production line, characterized in that: Includes the following modules: A router configuration module, used to configure the first router parameters of the main router connected to the host computer and the second router parameters of the sub-router connected to the component capacity device; Wireless connection module, used for establishing wireless connection between the host computer and the chemical component equipment through the main router and the sub-router; The communication request verification module is used to obtain the communication request sent by the host computer from the component capacity device, verify the communication request, and feedback the communication permission response to the host computer; A chemical composition and containment instruction sending module, used for the host computer to send a chemical composition and containment instruction carrying ciphertext data to the chemical composition and containment device based on the communication permission response; A composition operation module, configured for the composition device to parse the received composition instruction to obtain ciphertext data, decrypt the ciphertext data to obtain instruction content, and perform composition operation based on the instruction content; The chemical composition capacity report management module is used for generating a chemical composition capacity report based on chemical composition capacity data after the chemical composition capacity device completes chemical composition capacity, encrypting the chemical composition capacity report into an encrypted report, and sending the encrypted report to the host computer.

7. A chemical composition production line communication system as claimed in claim 6, characterized in that: In the router configuration module, the first router parameters at least include a first working mode, a first IP mode, a first IP address, a first subnet mask, a wifi name, and a wifi password; The second router parameters include at least a second working mode, a second IP mode, a second IP address and a second subnet mask; The first working mode is AP mode; the second working mode is client mode; the first IP mode and the second IP mode are both static IPs; the first IP address and the second IP address are different addresses in the same network segment; the first subnet mask and the second subnet mask are the same.

8. A chemical composition production line communication system as claimed in claim 6, characterized in that: The communication request verification module is specifically used for: The host computer generates a communication request carrying a device ID, a timestamp, and a hash value, and sends the communication request to the content-splitting device in real time; the hash value is obtained by hashing the device ID and the timestamp; The component device receives the communication request in real time, parses the communication request to obtain the device ID, timestamp and hash value, performs integrity check on the device ID and timestamp based on the hash value, performs timeliness check through the timestamp, and then performs legitimacy check on the device ID through the preset device management table, and then provides real-time feedback to the upper computer to allow communication response.

9. A chemical composition production line communication system as claimed in claim 6, characterized in that: The componentization and content-scaling instruction sending module is specifically used for: The upper computer performs MAC calculation on the content of the instruction to be sent to obtain a first MAC value, encrypts the instruction content and the first MAC value through the RSA algorithm to obtain first-level encrypted data, maps each character of the first-level encrypted data through a preset mapping rule to obtain second-level encrypted data, encrypts the second-level encrypted data through the AES algorithm to obtain third-level encrypted data, divides the third-level encrypted data into first sub-encrypted data and second sub-encrypted data, encrypts the first sub-encrypted data through the RC2 algorithm to obtain a first encrypted data block, encrypts the second sub-encrypted data through the BLOWFISH algorithm to obtain a second encrypted data block, encrypts the first encrypted data block and the second encrypted data block into ciphertext data through the ECDSA algorithm, generates a content splitting instruction based on the ciphertext data and sends it to the content splitting device.

10. A chemical composition production line communication system as claimed in claim 6, characterized in that: The chemical composition and capacity reporting management module is specifically used for: After the content splitting is completed, the content splitting device generates a content splitting report including at least content splitting data, content splitting time, and device ID, performs MAC calculation on the content splitting report to obtain a second MAC value, encrypts the content splitting report and the second MAC value through the IDEA algorithm to obtain first encrypted data, shifts each character of the first encrypted data to the right by a preset first displacement amount to obtain second encrypted data, encrypts the second encrypted data through the 3DES algorithm to obtain third encrypted data, shifts each character of the third encrypted data to the left by a preset second displacement amount to obtain fourth encrypted data, encrypts the fourth encrypted data through the AES-KW algorithm to obtain fifth encrypted data, shifts each character of the fifth encrypted data to the right by a preset third displacement amount to obtain sixth encrypted data, encrypts the sixth encrypted data through the 3DES algorithm to obtain an encrypted report, and sends the encrypted report to a host computer.

Images