Storage control method and system for safe storage

Abstract

The invention provides a storage control method and system for safe storage, relates to the field of Internet of Things, and aims to realize lightweight safety management of warehousing of stored articles. The method comprises the steps that a first reader performs inventory operation to inventory to respective device identifiers of M tags, the M device identifiers and the M tags are tags of the same type, the M tags are all environmental Internet of Things AIoT devices, and the M tags need to be put in storage in an area served by a second reader; the first reader reconstructs N device identifications in the M device identifications to obtain N reconstruction identifications, the N reconstruction identifications can be directly sent when the second reader carries out inventory, and M-N device identifications which are not reconstructed in the M device identifications need to be sent in an encrypted mode when the second reader carries out inventory; and the first reader sends reconstruction identifiers corresponding to the N tags to the N tags according to the N reconstruction identifiers, and the N tags are tags of which the equipment identifiers are reconstructed equipment identifiers in the M tags.

Description

Technical Field

[0001] The present application relates to the field of Internet of Things, and in particular to a storage control method and system for secure warehousing. Background Art

[0002] With the rapid development of Internet of Things technology and the widespread application of big data technology, the Environmental Internet of Things (AIoT) has gradually become a core component of modern information technology. AIoT refers to the intelligent management and control of various physical environments and equipment through the deep integration of artificial intelligence technology and Internet of Things technology. AIoT technology has shown great potential and application value in many fields.

[0003] In the field of warehousing, the application of AIoT technology is particularly significant. Traditional warehouse management methods often rely on manual operations and paper records, which are inefficient and prone to errors. The introduction of AIoT technology has made warehouse management more intelligent and automated. By attaching corresponding tags or other types of AIoT devices to logistics items, real-time monitoring and management of items can be achieved. In actual operation, when items need to be shipped out or put in, the reader can automatically record the shipment or entry of items by reading the information on the RFID tag. At the same time, the AIoT system can also perform operations such as inventory counting, cargo tracking, and environmental monitoring based on real-time data. This not only improves the efficiency and accuracy of warehouse management, but also reduces the risk of human error.

[0004] However, since AIoT is a lightweight device with generally low performance, how to ensure data security during warehouse management is a current research issue. Summary of the invention

[0005] The embodiments of the present application provide a storage control method and system for secure warehousing to improve data security during warehousing management of stored items.

[0006] In order to achieve the above objectives, this application adopts the following technical solutions: In a first aspect, a storage control method for secure storage is provided, which is applied to a first reader, and the first reader is a gateway reader of the storage, the method comprising: the first reader performs an inventory operation to inventory the device identifications of M tags, a total of M device identifications, M is an integer greater than 2, the M tags are tags of the same type, the M tags are all AIoT devices, and the M tags need to be stored in an area served by a second reader; the first reader reconstructs N device identifications among the M device identifications to obtain N reconstructed identifications, N is an integer greater than 1 and less than M, the N reconstructed identifications can be directly sent when the second reader takes inventory, and MN device identifications that have not been reconstructed among the M device identifications need to be encrypted and sent when the second reader takes inventory; the first reader sends the reconstruction identifications corresponding to the N tags to the N tags according to the N reconstruction identifications, and the N tags are tags whose device identifications among the M tags are reconstructed device identifications.

[0007] Optionally, the first reader reconstructs N device identifiers among the M device identifiers to obtain N reconstructed identifiers, including: the first reader reconstructs the N device identifiers based on some of the M device identifiers to obtain N reconstructed identifiers, and the N reconstructed identifiers can be restored to N device identifiers using MN device identifiers.

[0008] Optionally, the first reader reconstructs N device identifiers based on some of the M device identifiers to obtain N reconstructed identifiers, including: the first reader pseudo-randomly replaces some characters in the N device identifiers based on some of the M device identifiers to obtain N reconstructed identifiers.

[0009] Optionally, M tags are of the same type, indicating that the identification lengths of the M device identifications are consistent. For the i-th device identification among the M device identifications, i is an integer traversing from 1 to M-1 in sequence. The first reader pseudo-randomly replaces part of the characters in the N device identifications according to part of the device identifications among the M device identifications to obtain N reconstructed identifications, including: the first reader determines the characters to be replaced in the i-th device identification, the characters to be replaced are the characters in the i-th device identification that are the same as the i+1-th device identification among the M device identifications, and the characters to be replaced are part of the characters in the i-th device identification; the first reader replaces the characters to be replaced in the i-th device identification with preset characters, and adds the serial number of the i-th device identification to the starting position of the i-th device identification to obtain the i-th reconstructed identification, and a total of M-1 reconstructed identifications are obtained, that is, N=M-1; the preset characters are different from the characters to be replaced, and the serial number of the i-th device identification indicates that the i-th device identification is the i-th among the M device identifications.

[0010] Optionally, the first reader reconstructs N device identifiers according to some of the M device identifiers to obtain N reconstructed identifiers, including: the first reader pseudo-randomly increases the N device identifiers according to some of the M device identifiers to obtain N reconstructed identifiers.

[0011] Optionally, M tags are of the same type, indicating that the identification lengths of the M device identifications are consistent. For the ith device identification among the M device identifications, i is an integer traversing from M to 2 in sequence. The first reader pseudo-randomly increases the N device identifications according to part of the device identifications among the M device identifications to obtain N reconstructed identifications, including: the first reader determines a specific character in the ith device identification, the specific character being a character in the ith device identification that is different from the i-1th device identification among the M device identifications; the first reader adds the corresponding character of the i-1th device identification that is different from the specific character to the specific character, and adds the serial number of the ith device identification to the starting position of the ith device identification to obtain the ith reconstructed identification, and a total of M-1 reconstructed identifications are obtained, that is, N=M-1; the specific character is a partial character in the ith device identification, and the serial number of the ith device identification indicates that the ith device identification is the ith of the M device identifications.

[0012] Optionally, the first reader performs an inventory operation to inventory the device identification of each of the M tags, including: the first reader sends an inventory command, and the inventory command indicates that the tag receiving the inventory command needs to report its own device identification; the first reader receives the encrypted device identification of each of the K tags, where K is an integer greater than or equal to M; the first reader uses a public key to decrypt the encrypted device identification of each of the K tags to obtain K plaintext device identifications; the first reader determines the device identification of each of M tags of the same type from the K device identifications, for a total of M device identifications.

[0013] Optionally, after the first reader reconstructs the N identifiers, the method further includes: the first reader sends a reconstruction inventory indication to the second reader, the reconstruction inventory indication indicating that the second reader needs to restore the inventoried reconstruction identifier to a device identifier.

[0014] Optionally, the reconstruction inventory specifically indicates that the restoration strategy is: the second reader needs to restore the reconstruction identifier to the device identifier in sequence according to the sequence number in the reconstruction identifier and the encrypted device identifier.

[0015] In a second aspect, a storage control system for secure warehousing is provided, the system includes a first reader, the first reader is a gateway reader for the warehousing, and the first reader is configured as follows: the first reader performs an inventory operation to inventory the device identifications of M tags, a total of M device identifications, M is an integer greater than 2, the M tags are tags of the same type, the M tags are all AIoT devices, and the M tags need to be stored in an area served by a second reader; the first reader reconstructs N device identifications among the M device identifications to obtain N reconstructed identifications, N is an integer greater than 1 and less than M, the N reconstructed identifications can be directly sent when the second reader takes inventory, and the MN device identifications that have not been reconstructed among the M device identifications need to be encrypted and sent when the second reader takes inventory; the first reader sends the reconstruction identifications corresponding to the N tags respectively to the N tags according to the N reconstruction identifications, and the N tags are tags whose device identifications among the M tags are reconstructed device identifications.

[0016] Optionally, the first reader reconstructs N device identifiers among the M device identifiers to obtain N reconstructed identifiers, including: the first reader reconstructs the N device identifiers based on some of the M device identifiers to obtain N reconstructed identifiers, and the N reconstructed identifiers can be restored to N device identifiers using MN device identifiers.

[0017] Optionally, the first reader reconstructs N device identifiers based on some of the M device identifiers to obtain N reconstructed identifiers, including: the first reader pseudo-randomly replaces some characters in the N device identifiers based on some of the M device identifiers to obtain N reconstructed identifiers.

[0018] Optionally, M tags are of the same type, indicating that the identification lengths of the M device identifications are consistent. For the i-th device identification among the M device identifications, i is an integer traversing from 1 to M-1 in sequence. The first reader pseudo-randomly replaces part of the characters in the N device identifications according to part of the device identifications among the M device identifications to obtain N reconstructed identifications, including: the first reader determines the characters to be replaced in the i-th device identification, the characters to be replaced are the characters in the i-th device identification that are the same as the i+1-th device identification among the M device identifications, and the characters to be replaced are part of the characters in the i-th device identification; the first reader replaces the characters to be replaced in the i-th device identification with preset characters, and adds the serial number of the i-th device identification to the starting position of the i-th device identification to obtain the i-th reconstructed identification, and a total of M-1 reconstructed identifications are obtained, that is, N=M-1; the preset characters are different from the characters to be replaced, and the serial number of the i-th device identification indicates that the i-th device identification is the i-th among the M device identifications.

[0019] Optionally, the first reader reconstructs N device identifiers according to some of the M device identifiers to obtain N reconstructed identifiers, including: the first reader pseudo-randomly increases the N device identifiers according to some of the M device identifiers to obtain N reconstructed identifiers.

[0020] Optionally, M tags are of the same type, indicating that the identification lengths of the M device identifications are consistent. For the ith device identification among the M device identifications, i is an integer traversing from M to 2 in sequence. The first reader pseudo-randomly increases the N device identifications according to part of the device identifications among the M device identifications to obtain N reconstructed identifications, including: the first reader determines a specific character in the ith device identification, the specific character being a character in the ith device identification that is different from the i-1th device identification among the M device identifications; the first reader adds the corresponding character of the i-1th device identification that is different from the specific character to the specific character, and adds the serial number of the ith device identification to the starting position of the ith device identification to obtain the ith reconstructed identification, and a total of M-1 reconstructed identifications are obtained, that is, N=M-1; the specific character is a partial character in the ith device identification, and the serial number of the ith device identification indicates that the ith device identification is the ith of the M device identifications.

[0021] Optionally, the first reader performs an inventory operation to inventory the device identification of each of the M tags, including: the first reader sends an inventory command, and the inventory command indicates that the tag receiving the inventory command needs to report its own device identification; the first reader receives the encrypted device identification of each of the K tags, where K is an integer greater than or equal to M; the first reader uses a public key to decrypt the encrypted device identification of each of the K tags to obtain K plaintext device identifications; the first reader determines the device identification of each of M tags of the same type from the K device identifications, for a total of M device identifications.

[0022] Optionally, after the first reader reconstructs the N identifiers, the first reader is further configured to: send a reconstruction inventory instruction to the second reader, the reconstruction inventory instruction indicating that the second reader needs to restore the inventoried reconstruction identifier to a device identifier.

[0023] Optionally, the reconstruction inventory specifically indicates that the restoration strategy is: the second reader needs to restore the reconstruction identifier to the device identifier in sequence according to the sequence number in the reconstruction identifier and the encrypted device identifier.

[0024] In a third aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer executes the above-mentioned storage control method for secure storage.

[0025] In summary, the above method and system have the following specific technical effects: The first reader can perform an inventory operation to inventory M device identifiers of M tags of the same type. When M tags need to be stored in the area served by the second reader, the first reader can reconstruct some of the M device identifiers, such as obtaining N reconstructed identifiers. At this time, the N reconstructed identifiers can be directly sent when the second reader takes inventory, that is, no encryption is required. The MN device identifiers that have not been reconstructed among the M device identifiers need to be encrypted and sent when the second reader takes inventory. In this way, the first reader sends the reconstruction identifiers corresponding to each of the N tags to the N tags. These tags can directly send the reconstruction identifiers when they are inventoried by the second reader, eliminating the encryption process. In other words, N of the M tags do not need to be encrypted when they are inventoried by the second reader, reducing the overhead of data processing and being more suitable for lightweight AIoT scenarios. In addition, since the reconstructed reconstruction identifier has changed the original characteristics of the device identifier, attackers cannot directly steal the device identifier, thereby improving data security during the storage management of stored items. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 A schematic diagram of the architecture of a storage control system for secure storage provided in an embodiment of the present application; Figure 2 A flow chart of a storage control method for secure warehousing provided in an embodiment of the present application. DETAILED DESCRIPTION

[0027] In addition, in the embodiments of the present application, words such as "exemplarily" and "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" in the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of the word "exemplary" is intended to present concepts in a concrete way.

[0028] First, in this application, "used to indicate" may include being used to indicate directly or indirectly. When describing that a certain "information" is used to indicate A, it may include that the information directly indicates A or indirectly indicates A, but it does not mean that the information must contain A.

[0029] The information indicated by a piece of information is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved by means of the arrangement order of each information agreed in advance (such as protocol regulations), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each piece of information can also be identified and uniformly indicated to reduce the indication overhead caused by indicating the same information separately. In addition, the specific indication method can also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of various indication methods can refer to the prior art, and will not be repeated in this article. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, there may be a situation where the indication methods of different information are different. During the specific implementation process, the required indication method can be selected according to specific needs. The embodiment of the present application does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present application should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0030] Second, in the embodiments shown below, the first, second and various digital numbers are only used for the convenience of description and are not used to limit the scope of the embodiments of the present application. For example, to distinguish different indication information.

[0031] Third, "pre-set", "pre-defined", or "pre-configured" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in a device (for example, including a terminal device and a network device), or can be pre-specified in a protocol. This application does not limit its specific implementation method. Among them, "save" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or a device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or a communication device. The type of memory can be any form of storage medium, which is not limited by this application.

[0032] The network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0033] The network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0034] To facilitate understanding of the embodiments of the present application, first Figure 1 The system shown in is used as an example to describe in detail the system applicable to the embodiment of the present application. Figure 1 A schematic diagram of the architecture of a storage control system for secure warehousing applicable to the method provided in an embodiment of the present application.

[0035] Figure 1 The schematic diagram of the architecture of the storage control system for secure storage is shown in FIG. The storage control system for secure storage mainly includes: a tag and a reader.

[0036] The reader can be a device in the network, and the network can be an operator network, or a mobile communication network. The reader can be a reader in the ambient Internet of Things (AIoT), and specifically can be an access network device, such as a base station, a pole station, a micro base station, a macro station, etc.; the reader can also be a terminal device, such as a mobile phone, an IoT device, a handheld reader, etc. The reader can take inventory of tags, which are also called AIoT devices. The reader can take inventory of tags by wireless radio frequency. In the warehousing scenario, the reader can be deployed in a distributed manner, such as a gateway reader can be deployed at the entrance of the logistics park, such as the first reader described below, which is used for the initial inventory when entering the warehouse. For example, the gateway reader can reconstruct the device identification that has been inventoried, and the reconstructed identification can be directly used during the subsequent inventory, thereby eliminating the encryption process, reducing overhead, and being suitable for the AIoT scenario of lightweight devices, and ensuring data security. The storage warehouse of various physical items in the logistics park can also deploy readers, such as the second reader described below, to use the reconstructed identification for inventory when the storage items (or logistics items) enter or leave the warehouse.

[0037] The tag may be a terminal, which may also be referred to as user equipment (UE), access terminal, subscriber unit (subscriber unit), user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent or user device. The terminal in the embodiments of the present application can be a mobile phone, a cellular phone, a smartphone, a tablet computer, a wireless data card, a personal digital assistant (PDA), a wireless modem, a handset, a laptop computer, a machine type communication (MTC) terminal, a computer with wireless transceiver function, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a smart home device (for example, a refrigerator, a television, an air conditioner, an electric meter, etc.), an intelligent robot, a robotic arm, a workshop equipment, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in a smart city, and a wireless terminal in a smart home.

[0038] For example, in the scenario of the embodiment of the present application, a tag can be set on the packaging box of the stored items. When the stored items are shipped out, the location where they are shipped out can be covered by the signal sent by the reader, so that the tag can be counted by the reader. During the inventory, the tag reports its own device identification, which can be the electronic product code (EPC) of the stored items affixed with the tag. For details, please refer to the relevant introduction of the following method embodiment.

[0039] For example, Figure 2 The flowchart of the storage control method of the safe storage provided by the embodiment of the present application is as follows. Figure 2 As shown, applied to the first reader, the process of the storage control method of the secure storage is as follows: S201, a first reader performs an inventory operation to store device identifications of M tags, a total of M device identifications, where M is an integer greater than 2.

[0040] The M tags are of the same type, all of them are AIoT devices, and the M tags need to be stored in the area served by the second reader.

[0041] The first reader may receive instruction information from a third-party application through a network. The third-party application is the party to which the stored items belong. The instruction information may include device selection information, and the device selection information may include device identifications that need to be inventoried. The device identifications that need to be inventoried refer to device identifications of stored items that need to be inventoried in the logistics process, i.e., include the M device identifications mentioned above.

[0042] In response to the indication information, the first reader may send an inventory command (such as a periodic broadcast). The inventory command may not contain device paging information, such as a mask, that is, any tag that receives the inventory command needs to perform an inventory, that is, the tag that receives the inventory command needs to report its own device identification. The tag and the first reader can pre-configure a public key when leaving the factory / deployed, that is, multiple tags and the first reader can use the same key, that is, the public key. If K tags are transported into the signal coverage range of the first reader in logistics, the K tags can receive the inventory command. In response to the inventory command not carrying a mask, each of the K tags can use the public key to encrypt its own device identification and send it to the first reader. In this way, the first reader can receive the device identification encrypted by each of the K tags, where K is an integer greater than or equal to M. The first reader uses the public key to decrypt the device identification encrypted by each of the K tags (i.e., symmetric encryption and decryption, such as AES) to obtain the K device identifications in plain text. The first reader determines the device identification of each of the M tags of the same type from the K device identifications, for a total of M device identifications. For example, each of the K device identifications is an EPC, which can indicate the manufacturer, model, etc. of the device (i.e., the storage items to which each tag is attached). For storage items of the same manufacturer and model, they are considered to be the same type of device, i.e., the same type of tags, such as M tags.

[0043] S202: The first reader reconstructs N device identifiers among the M device identifiers to obtain N reconstructed identifiers, where N is an integer greater than 1 and less than M.

[0044] The N reconstructed identifiers can be directly sent when the second reader takes inventory, and the MN device identifiers that have not been reconstructed among the M device identifiers need to be encrypted and sent when the second reader takes inventory.

[0045] For example, the first reader can reconstruct N device identifiers according to some of the M device identifiers to obtain N reconstructed identifiers, and the N reconstructed identifiers can be restored to N device identifiers using MN device identifiers, so that the encryption and decryption process can be omitted, that is, the tag does not need to perform encryption operations during inventory, which is beneficial to the energy saving of the tag to meet its low-performance device requirements. There are two ways to reconstruct, one is replacement and the other is growth, which are introduced below in different situations.

[0046] Case 1: The first reader replaces some characters in N device identifiers pseudo-randomly based on some device identifiers in M ​​device identifiers to obtain N reconstructed identifiers. For example, if M tags are of the same type, it means that the identifier lengths of the M device identifiers are consistent. For the i-th device identifier in the M device identifiers, i is an integer traversing from 1 to M-1 in sequence. The first reader can determine the characters to be replaced in the i-th device identifier. The characters to be replaced are the characters in the i-th device identifier that are the same as the i+1-th device identifier in the M device identifiers, and the characters to be replaced are some characters in the i-th device identifier. On this basis, the first reader replaces the characters to be replaced in the i-th device identifier with preset characters, and adds the serial number of the i-th device identifier to the starting position of the i-th device identifier to obtain the i-th reconstructed identifier, and obtains a total of M-1 reconstructed identifiers, that is, N=M-1; the preset characters are different from the characters to be replaced, and the serial number of the i-th device identifier indicates that the i-th device identifier is the i-th one in the M device identifiers.

[0047] For ease of understanding, the following is an introduction through Example 1.

[0048] Example 1: Assume that M=3, the first reader can sort the three device identifiers in the order of inventory from first to last, that is, the first device identifier, the second device identifier, and the third device identifier. Assume that the length of the three device identifiers is 9 characters, such as the first device identifier is X1X2X3Y1Y2Y3Z1Z2Z3, the second device identifier is X1X3X4Y1Y4Y5Z1Z2Z3, and the third device identifier is X1X5X6Y1Y4Y3Z1Z3Z4. The first reader compares the first device identifier with the second device identifier character by character to determine the characters in the first device identifier that are identical to those in the second device identifier, such as the characters in bold in X1X2X3Y1Y2Y3Z1Z2Z3 are the same characters, and the preset character is V. The bold characters are replaced to obtain VX2X3VY2Y3VVV, and the serial number #1 is added in front of the first character V in VX2X3VY2Y3VVV to obtain the first reconstructed identifier #1VX2X3VY2Y3VVV. The first reader compares the second device identification with the third device identification character by character to determine the characters in the second device identification that are identical to the third device identification, such as the characters in bold in X1X3X4Y1Y4Y5Z1Z2Z3 are the identical characters, and replaces the characters in bold to obtain VX3X4VVY5VZ2Z3. Add serial number #2 in front of the first character V in VX3X4VVY5VZ2Z3 to obtain the second reconstructed identification #2VX3X4VVY5VZ2Z3.

[0049] Case 2: The first reader pseudo-randomly increases the N device identifiers according to some of the M device identifiers to obtain N reconstructed identifiers.

[0050] M tags are of the same type, indicating that the identification lengths of the M device identifications are consistent. For the i-th device identification among the M device identifications, i is an integer traversing from M to 2 in sequence. On this basis, the first reader determines the specific character in the i-th device identification, and the specific character is a character in the i-th device identification that is different from the i-1-th device identification among the M device identifications. The first reader can add the characters of the i-1-th device identification that are different from the specific character to the specific character (such as adding each character one by one), and add the serial number of the i-th device identification to the starting position of the i-th device identification to obtain the i-th reconstructed identification, and obtain a total of M-1 reconstructed identifications, that is, N=M-1; the specific character is a partial character in the i-th device identification, and the serial number of the i-th device identification indicates that the i-th device identification is the i-th among the M device identifications.

[0051] For ease of understanding, the following is an introduction through Example 2.

[0052] Example 2: Assume that M=3, the first reader can sort the three device identifiers in the order of inventory from first to last, that is, the first device identifier, the second device identifier, and the third device identifier. Assume that the length of the three device identifiers is 9 characters, such as the first device identifier is X1X2X3Y1Y2Y3Z1Z2Z3, the second device identifier is X1X3X4Y1Y4Y5Z1Z2Z3, and the third device identifier is X1X5X6Y1Y4Y3Z1Z3Z4. The first reader compares the second device identification with the third device identification character by character to determine the characters in the second device identification that are different from the third device identification, such as the characters in bold in X1X3X4Y1Y4Y5Z1Z2Z3 are different characters, and each different character in the second device identification is added to a corresponding different character in the third device identification according to the position, that is, X3 is added to X5, X4 is added to X6, and so on until Z3, to obtain X1X5X3X6X4Y1Y4Y3Y5Z1Z3Z2Z4Z3, and the sequence number #3 is added before the first character X1 of X1X5X3X6X4Y1Y4Y3Y5Z1Z3Z2Z4Z3 to obtain the third reconstructed identification #3X1X5X3X6X4Y1Y4Y3Y5Z1Z3Z2Z4Z3. The first reader compares the first device identifier with the second device identifier character by character to determine the characters in the first device identifier that are different from those in the second device identifier, such as the characters in bold in X1X2X3Y1Y2Y3Z1Z2Z3 are different characters, and each different character in the first device identifier is added to a corresponding different character in the second device identifier according to its position, to obtain X1X3X2X4X3Y1Y4Y2Y5Y3Z1Z2Z3, and add serial number #2 in front of the first character X1 of X1X3X2X4X3Y1Y4Y2Y5Y3Z1Z2Z3 to obtain the second reconstructed identifier #2X1X3X2X4X3Y1Y4Y2Y5Y3Z1Z2Z3.

[0053] S203: The first reader sends reconstruction identifiers corresponding to the N tags respectively to the N tags according to the N reconstruction identifiers.

[0054] The N tags are tags whose device identifiers are reconstructed among the M tags, that is, the N tags that send the N device identifiers. For the MN tags, the first reader sends the serial numbers of the respective device identifiers to the MN tags to indicate that the MN tags need to associate the device identifiers with the serial numbers and report them when they are subsequently inventoried (such as by the second reader).

[0055] It should be understood that after the first reader reconstructs the identifiers according to the N, the method further includes: The first reader sends a reconstruction inventory instruction to the second reader, and the reconstruction inventory instruction requires the second reader to restore the reconstruction identifier stored in the inventory to the device identifier. The reconstruction inventory specifically indicates the restoration strategy as follows: the second reader needs to restore the reconstruction identifier to the device identifier in sequence according to the serial number in the reconstruction identifier and the encrypted device identifier, that is, the second reader can perform the above-mentioned reverse process.

[0056] For example, M tags are further transported within the logistics park to a location within the signal coverage of the second reader for storage inventory. Then the second reader can inventory N reconstructed identifiers, as well as MN device identifiers and associated serial numbers. In response to the reconstruction inventory instruction, the second reader can restore the N reconstructed identifiers in sequence according to the MN device identifiers and associated serial numbers to obtain N device identifiers.

[0057] For ease of understanding, continue with Example 1 above: The second reader determines that the reconstruction identifier is the first reconstruction identifier based on the fact that the reconstruction identifier stored in the disk contains the serial number #1, and determines that the reconstruction identifier is the second reconstruction identifier based on the fact that the second reconstruction identifier contains #2, and determines that the device identifier is associated with the serial number #3, and determines that the device identifier is the third device identifier. In this way, the second reader compares the third device identifier with the second reconstruction identifier, thereby replacing each V character in VX3X4VVY5VZ2Z3 with the character in the same position in X1X5X6Y1Y4Y3Z1Z3Z4 to obtain #2X1X3X4Y1Y4Y5Z1Z2Z3, and then strips the serial number #2 to obtain X1X3X4Y1Y4Y5Z1Z2Z3, that is, restoring the second device identifier. The second reader continues to compare the second device identifier with the first reconstructed identifier, thereby replacing each V character in VX2X3VY2Y3VVV with the character in the same position in X1X3X4Y1Y4Y5Z1Z2Z3, thus obtaining #1X1X2X3Y1Y2Y3Z1Z2Z3, and then stripping off the serial number #1 to obtain X1X2X3Y1Y2Y3Z1Z2Z3, thus restoring the first device identifier.

[0058] For ease of understanding, continue with Example 2 above: The second reader determines that the reconstruction identifier is the third reconstruction identifier based on the fact that the reconstruction identifier stored in the inventory contains the serial number #3, and determines that the reconstruction identifier is the second reconstruction identifier based on the fact that the second reconstruction identifier contains #2, and determines that the device identifier is associated with the serial number #1, and determines that the device identifier is the first device identifier. In this way, the second reader can compare the second reconstruction identifier with the first device identifier, and thus remove the characters in the second reconstruction identifier that are the same as those in the first device identifier, that is, the second reader can remove the characters in bold in #2X1X3X2X4X3Y1Y4Y2Y5Y3Z1Z2Z3 to obtain #2X1X3X4Y1Y4Y5Z1Z2Z3, and then remove the serial number #2 to obtain X1X3X4Y1Y4Y5Z1Z2Z3, that is, restore the second device identifier. The second reader can compare the third reconstructed identifier with the second device identifier, thereby stripping off the characters in the third reconstructed identifier that are the same as those in the second device identifier, that is, the second reader can strip off the characters in bold in #3X1X5X3X6X4Y1Y4Y3Y5Z1Z3Z2Z4Z3 to obtain #3X1X5X6Y1Y4Y3Z1Z3Z4, and then strip off the serial number #3 to obtain X1X5X6Y1Y4Y3Z1Z3Z4, thereby restoring the third device identifier.

[0059] It should be understood that the characters in bold above have no other meanings and are only used to more clearly indicate the sameness or difference for easier understanding.

[0060] In summary, the first reader can perform an inventory operation to inventory M device identifiers of M tags of the same type. When M tags need to be stored in the area served by the second reader, the first reader can reconstruct some of the M device identifiers, such as obtaining N reconstructed identifiers. At this time, the N reconstructed identifiers can be directly sent when the second reader takes inventory, that is, no encryption is required. The MN device identifiers that have not been reconstructed among the M device identifiers need to be encrypted and sent when the second reader takes inventory. In this way, the first reader sends the reconstruction identifiers corresponding to each of the N tags to the N tags. These tags can directly send the reconstruction identifiers when they are inventoried by the second reader, eliminating the encryption process. In other words, N of the M tags do not need to be encrypted when they are inventoried by the second reader, which reduces the overhead of data processing and is more suitable for lightweight AIoT scenarios. In addition, since the reconstructed reconstruction identifier has changed the original characteristics of the device identifier, attackers cannot directly steal the device identifier, thereby improving data security during the storage management of stored items.

[0061] It should be understood that the above specifically introduces the method, and the following specifically introduces the storage control system of the safe storage.

[0062] In the storage control system of the secure warehouse, the first reader is configured as follows: the first reader performs an inventory operation to inventory the device identifications of M tags, a total of M device identifications, where M is an integer greater than 2, the M tags are tags of the same type, the M tags are all AIoT devices, and the M tags need to be stored in the area served by the second reader; the first reader reconstructs N device identifications among the M device identifications to obtain N reconstructed identifications, where N is an integer greater than 1 and less than M, the N reconstructed identifications can be directly sent when the second reader takes inventory, and the MN device identifications that have not been reconstructed among the M device identifications need to be encrypted and sent when the second reader takes inventory; the first reader sends the reconstruction identifications corresponding to the N tags to the N tags based on the N reconstruction identifications, and the N tags are the tags whose device identifications among the M tags are reconstructed device identifications.

[0063] Optionally, the first reader reconstructs N device identifiers among the M device identifiers to obtain N reconstructed identifiers, including: the first reader reconstructs the N device identifiers based on some of the M device identifiers to obtain N reconstructed identifiers, and the N reconstructed identifiers can be restored to N device identifiers using MN device identifiers.

[0064] Optionally, the first reader reconstructs N device identifiers based on some of the M device identifiers to obtain N reconstructed identifiers, including: the first reader pseudo-randomly replaces some characters in the N device identifiers based on some of the M device identifiers to obtain N reconstructed identifiers.

[0065] Optionally, M tags are of the same type, indicating that the identification lengths of the M device identifications are consistent. For the i-th device identification among the M device identifications, i is an integer traversing from 1 to M-1 in sequence. The first reader pseudo-randomly replaces part of the characters in the N device identifications according to part of the device identifications among the M device identifications to obtain N reconstructed identifications, including: the first reader determines the characters to be replaced in the i-th device identification, the characters to be replaced are the characters in the i-th device identification that are the same as the i+1-th device identification among the M device identifications, and the characters to be replaced are part of the characters in the i-th device identification; the first reader replaces the characters to be replaced in the i-th device identification with preset characters, and adds the serial number of the i-th device identification to the starting position of the i-th device identification to obtain the i-th reconstructed identification, and a total of M-1 reconstructed identifications are obtained, that is, N=M-1; the preset characters are different from the characters to be replaced, and the serial number of the i-th device identification indicates that the i-th device identification is the i-th among the M device identifications.

[0066] Optionally, the first reader reconstructs N device identifiers according to some of the M device identifiers to obtain N reconstructed identifiers, including: the first reader pseudo-randomly increases the N device identifiers according to some of the M device identifiers to obtain N reconstructed identifiers.

[0067] Optionally, M tags are of the same type, indicating that the identification lengths of the M device identifications are consistent. For the ith device identification among the M device identifications, i is an integer traversing from M to 2 in sequence. The first reader pseudo-randomly increases the N device identifications according to part of the device identifications among the M device identifications to obtain N reconstructed identifications, including: the first reader determines a specific character in the ith device identification, the specific character being a character in the ith device identification that is different from the i-1th device identification among the M device identifications; the first reader adds the corresponding character of the i-1th device identification that is different from the specific character to the specific character, and adds the serial number of the ith device identification to the starting position of the ith device identification to obtain the ith reconstructed identification, and a total of M-1 reconstructed identifications are obtained, that is, N=M-1; the specific character is a partial character in the ith device identification, and the serial number of the ith device identification indicates that the ith device identification is the ith of the M device identifications.

[0068] Optionally, the first reader performs an inventory operation to inventory the device identification of each of the M tags, including: the first reader sends an inventory command, and the inventory command indicates that the tag receiving the inventory command needs to report its own device identification; the first reader receives the encrypted device identification of each of the K tags, where K is an integer greater than or equal to M; the first reader uses a public key to decrypt the encrypted device identification of each of the K tags to obtain K plaintext device identifications; the first reader determines the device identification of each of M tags of the same type from the K device identifications, for a total of M device identifications.

[0069] Optionally, after the first reader reconstructs the N identifiers, the first reader is further configured to: send a reconstruction inventory instruction to the second reader, the reconstruction inventory instruction indicating that the second reader needs to restore the inventoried reconstruction identifier to a device identifier.

[0070] Optionally, the reconstruction inventory specifically indicates that the restoration strategy is: the second reader needs to restore the reconstruction identifier to the device identifier in sequence according to the sequence number in the reconstruction identifier and the encrypted device identifier.

[0071] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0072] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0073] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0074] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0075] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0076] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM), random access memories (RAM), magnetic disks or optical disks.

[0077] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A storage control method for safe storage, characterized in that: Applied to a first reader, the first reader being a warehouse gateway reader, the method comprises: The first reader performs an inventory operation to inventory the device identifications of the M tags, a total of M device identifications, where M is an integer greater than 2, the M tags are tags of the same type, and the M tags are all AIoT devices. The M tags need to be stored in the area served by the second reader; The first reader reconstructs N device identifiers among the M device identifiers to obtain N reconstructed identifiers, where N is an integer greater than 1 and less than M. The N reconstructed identifiers can be directly sent when the second reader takes inventory, and MN device identifiers among the M device identifiers that have not been reconstructed need to be encrypted and sent when the second reader takes inventory; The first reader sends reconstruction identifiers corresponding to the N tags respectively to N tags according to the N reconstruction identifiers, and the N tags are tags whose device identifiers are reconstructed device identifiers among the M tags.

2. The method according to claim 1, characterized in that The first reader reconstructs N device identifiers among the M device identifiers to obtain N reconstructed identifiers, including: The first reader reconstructs the N device identifications according to some of the M device identifications to obtain the N reconstructed identifications, and the N reconstructed identifications can be restored to the N device identifications using the MN device identifications.

3. The method according to claim 2, characterized in that The first reader reconstructs the N device identifiers according to some of the M device identifiers to obtain the N reconstructed identifiers, including: The first reader pseudo-randomly replaces some characters in the N device identifications according to some device identifications in the M device identifications to obtain the N reconstructed identifications.

4. The method according to claim 3, characterized in that The M tags being of the same type indicate that the identification lengths of the M device identifications are consistent. For the i-th device identification among the M device identifications, i is an integer traversing from 1 to M-1 in sequence. The first reader replaces part of the characters in the N device identifications pseudo-randomly according to part of the device identifications among the M device identifications to obtain the N reconstructed identifications, including: The first reader determines the character to be replaced in the i-th device identification, the character to be replaced is the character in the i-th device identification that is the same as the (i+1)th device identification in the M device identifications, and the character to be replaced is part of the characters in the i-th device identification; The first reader replaces the character to be replaced in the i-th device identifier with a preset character, and adds the serial number of the i-th device identifier to the starting position of the i-th device identifier to obtain the i-th reconstructed identifier, and obtains a total of M-1 reconstructed identifiers, that is, N=M-1; the preset character is different from the character to be replaced, and the serial number of the i-th device identifier indicates that the i-th device identifier is the i-th among the M device identifiers.

5. The method according to claim 2, characterized in that: The first reader reconstructs the N device identifiers according to some of the M device identifiers to obtain the N reconstructed identifiers, including: The first reader pseudo-randomly increases the N device identifiers according to some of the M device identifiers to obtain the N reconstructed identifiers.

6. The method according to claim 5, characterized in that The M tags being tags of the same type indicate that the identification lengths of the M device identifications are consistent. For the i-th device identification among the M device identifications, i is an integer traversing from M to 2 in sequence. The first reader pseudo-randomly increases the N device identifications according to some device identifications among the M device identifications to obtain the N reconstructed identifications, including: The first reader determines a specific character in the i-th device identification, where the specific character is a character in the i-th device identification that is different from an (i-1)-th device identification in the M device identifications; The first reader adds the character corresponding to the i-1th device identifier that is different from the specific character to the specific character, and adds the serial number of the i-th device identifier to the starting position of the i-th device identifier to obtain the i-th reconstructed identifier, and a total of M-1 reconstructed identifiers are obtained, that is, N=M-1; the specific character is a partial character in the i-th device identifier, and the serial number of the i-th device identifier indicates that the i-th device identifier is the i-th among the M device identifiers.

7. The method according to any one of claims 1 to 6, characterized in that: The first reader performs an inventory operation to obtain the device identifications of the M tags, including: The first reader sends an inventory command, wherein the inventory command indicates that the tag receiving the inventory command needs to report its own device identification; The first reader receives the encrypted device identification of each of K tags, where K is an integer greater than or equal to M; The first reader uses the public key to decrypt the device identifications encrypted by the K tags to obtain K device identifications in plain text; The first reader determines the device identifications of the respective M tags of the same type from the K device identifications, which total the M device identifications.

8. The method according to any one of claims 1 to 6, characterized in that: After the first reader reconstructs the N identifiers, the method further includes: The first reader sends a reconstruction inventory instruction to the second reader, and the reconstruction inventory instruction indicates that the second reader needs to restore the inventoryed reconstruction identifier to the device identifier.

9. The method according to claim 8, characterized in that The reconstruction inventory specifically indicates that the restoration strategy is: the second reader needs to restore the reconstruction identifier to the device identifier in sequence according to the sequence number in the reconstruction identifier and the encrypted device identifier.

10. A storage control system for safe storage, characterized in that: The system includes a first reader, which is a warehouse gateway reader, and the first reader is configured to: The first reader performs an inventory operation to inventory the device identifications of the M tags, a total of M device identifications, where M is an integer greater than 2, the M tags are tags of the same type, and the M tags are all AIoT devices. The M tags need to be stored in the area served by the second reader; The first reader reconstructs N device identifiers among the M device identifiers to obtain N reconstructed identifiers, where N is an integer greater than 1 and less than M. The N reconstructed identifiers can be directly sent when the second reader takes inventory, and MN device identifiers among the M device identifiers that have not been reconstructed need to be encrypted and sent when the second reader takes inventory; The first reader sends reconstruction identifiers corresponding to the N tags respectively to N tags according to the N reconstruction identifiers, and the N tags are tags whose device identifiers are reconstructed device identifiers among the M tags.

Images