Equipment access control method and device, electronic equipment and storage medium

Abstract

The invention belongs to the technical field of equipment access, and relates to an equipment access control method and device, electronic equipment and a storage medium. Through a dynamic key generation and key mapping verification mechanism, the problems that a unified password is easy to leak and multi-password management is complex are avoided, security access to after-sales data of the energy storage system can be locally realized without depending on a professional debugging tool, software upgrading or a stable network, the security and reliability of data access are effectively improved, and the security and reliability of the after-sales data are improved. And precise authorization and management of professional maintenance personnel are realized, so that the problems of insufficient safety, limited operation, strong network dependence and the like in the prior art are solved.

Description

Technical Field

[0001] The present application belongs to the field of device access technology, and specifically relates to a device access control method, apparatus, electronic device, and storage medium. Background Art

[0002] Energy storage systems play a vital role in renewable energy utilization and power regulation. Their after-sales data spans the entire equipment lifecycle and is invaluable for fault analysis, health assessment, operational optimization, and product improvement. Existing technologies often restrict access to after-sales data due to security, confidentiality, and technical requirements. Access often relies on fixed passwords, specialized debugging tools, software upgrades, or remote diagnostic platforms.

[0003] In the process of implementing this application, the inventors found that the existing technology has at least the following problems: unified passwords are easy to leak and the cost of managing different passwords is high; reliance on professional tools is limited by on-site conditions and personnel skills; software upgrade methods are prone to cause system instability; remote diagnosis depends on network quality and remote areas are easily affected. Summary of the Invention

[0004] To address the above issues, the present application proposes a device access control method to improve the security and reliability of after-sales data access for energy storage systems and to achieve effective authorization and management of professional maintenance personnel.

[0005] In order to solve the above technical problems, a technical solution adopted in the embodiment of the present application is: providing a device access control method, the method including: in response to a received activation signal, generating a target verification key through a preset dynamic key generation strategy; based on a preset key conversion rule, converting the target verification key into a key mapping sequence, and entering a key input monitoring state; in the key input monitoring state, receiving an input key sequence signal and an input confirmation key signal to verify whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table; if the input key sequence signal matches the key mapping sequence and the mapping relationship table, and the input confirmation key signal matches the mapping relationship table, then accessing the hidden interface.

[0006] In some embodiments, a target verification key is generated through a preset dynamic key generation strategy, including: obtaining device identification information; obtaining first clock data, and performing a time window calculation on the first clock data to obtain key time information; wherein the key time information includes first standard timestamp information and weekly calendar information; according to the number of physical keys, a corresponding password generation rule is selected; based on the password generation rule, device identification information, first standard timestamp information, and weekly calendar information, a target verification key is generated.

[0007] In some embodiments, based on a preset key conversion rule, the target verification key is converted into a key mapping sequence and enters a key input monitoring state, including: based on the key conversion rule, performing a password and key conversion operation on each number in the target verification key, obtaining a key mapping sequence corresponding to the target verification key, and entering a key input monitoring state.

[0008] In some embodiments, the key validity information also includes permission expiration timestamp information, and the method also includes: when in a key input listening state, obtaining second clock data, and performing timestamp conversion on the second clock data to obtain second standard timestamp information; comparing the second standard timestamp information with the permission expiration timestamp information; if the second standard timestamp information is not greater than the permission expiration timestamp information, determining that the target verification key is within the validity period; if the second standard timestamp information is greater than the permission expiration timestamp information, determining that the target verification key has expired.

[0009] In some embodiments, an input key sequence signal and an input confirmation key signal are received to verify whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table, including: obtaining an input interval time; comparing the input interval time with a preset timeout threshold; if the input interval time is less than the preset timeout threshold and the input confirmation key signal is not received, then continuing to receive the input key sequence signal; if the input interval time is less than the preset timeout threshold and the input confirmation key signal is received, then verifying whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table; if the input interval time is not less than the preset timeout threshold, executing the backtracking process.

[0010] In some embodiments, the method further includes: calculating the total number of input key sequence combinations and the total number of confirmation key combinations based on the number of physical keys; and generating a mapping relationship table based on the weekly calendar information, the total number of input key sequence combinations and the total number of confirmation key combinations.

[0011] In some embodiments, a mapping relationship table is generated based on the weekly calendar information, the total number of input key sequence combinations and the total number of confirmation key combinations, including: enumerating the total number of input key sequence combinations to obtain key sequence combinations; enumerating the total number of confirmation key combinations to obtain confirmation key combinations; mapping the weekly calendar information to the key sequence combinations and the confirmation key combinations respectively to generate a mapping relationship table.

[0012] In order to solve the above technical problems, another technical solution adopted in the embodiment of the present application is: to provide a device access control device, the device including: a key generation module, the key generation module is used to generate a target verification key through a preset dynamic key generation strategy in response to a received activation signal; a key conversion module, the key conversion module is used to convert the target verification key into a key mapping sequence based on a preset key conversion rule, and enter a key input listening state; a key verification module, the key verification module is used to receive an input key sequence signal and an input confirmation key signal in the key input listening state to verify whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table; an interface access module, the interface access module is used to access a hidden interface if the input key sequence signal matches the key mapping sequence and the mapping relationship table, and the input confirmation key signal matches the mapping relationship table.

[0013] To solve the above technical problems, another technical solution adopted in the embodiment of the present application is: to provide an electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the above method.

[0014] In order to solve the above technical problems, another technical solution adopted in the embodiment of the present application is: providing a non-volatile computer-readable storage medium, which stores computer-executable instructions. When the computer-executable instructions are executed by an electronic device, the electronic device executes the above method.

[0015] Different from the related art, the present application provides a device access control method, apparatus, electronic device and storage medium. By introducing a dynamic key generation strategy and a mapping mechanism of keys to key sequences, the limitations and risks of the existing technology such as the easy leakage of unified passwords, high management costs of different passwords, and reliance on professional tools and software upgrades are effectively overcome. Specifically, the dynamic key generation strategy ensures that the keys required for each access verification are different. Even if the key is intercepted during transmission or use, it cannot be reused in subsequent accesses, which fundamentally improves access security. The key is converted into a key mapping sequence and double-matched and verified in combination with the mapping relationship table, which not only avoids the risk of directly exposing the key, but also increases the difficulty of cracking. The confirmation key signal check in the key input monitoring state can prevent the hidden interface from being entered through brute force attempts or misoperations, thereby further improving the reliability of access. This method does not rely on a network environment or complex professional debugging tools. It can safely complete after-sales data access authorization under limited on-site conditions and unstable networks. It not only facilitates controlled access by professional maintenance personnel, but also ensures the stability of the energy storage system operation and the confidentiality of data. It effectively solves the problems of password security, tool dependence and network constraints in the existing technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] One or more embodiments are exemplarily illustrated by corresponding drawings, which do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings are represented as similar elements, and unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0017] Figure 1 This is a flow chart of a device access control method provided by an embodiment of the present application; Figure 2 This is a schematic diagram of the structure of a device access control apparatus provided in an embodiment of the present application; Figure 3 This is a hardware structure diagram of an electronic device that executes a device access control method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0018] To make the objectives, technical solutions, and advantages of the embodiments of the present application more clear, the technical solutions in the embodiments of the present application will be described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, not all of them. It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application.

[0019] It should be noted that, if there is no conflict, the various features in the embodiments of the present application can be combined with each other and are all within the scope of protection of the present application. In addition, although the functional modules are divided in the device schematics and the logical order is shown in the flow charts, in some cases, the steps shown or described can be performed in a different order than the module division in the device schematics or the order in the flow charts.

[0020] The terms "first," "second," and the like in the specification and claims of this application are used to distinguish similar objects, and are not used to describe a particular order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate, so that the embodiments of this application can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "first," "second," and the like generally distinguish objects of a class and do not limit the number of objects. For example, the first object may be one or more.

[0021] Unless otherwise defined, all technical and scientific terms used in this specification have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used in this specification are only for the purpose of describing specific embodiments and are not intended to limit this application.

[0022] As a crucial component of new energy and smart grids, the operating status and safety performance of energy storage systems directly impact the stability of the power system and the safety of energy users. Throughout their lifecycle, energy storage equipment generates a vast amount of after-sales data, including real-time operating parameters, fault logs, and historical operating records. This after-sales data not only serves as the technical foundation for ensuring equipment reliability but also as a crucial basis for manufacturers to optimize product performance and improve services. By analyzing after-sales data, maintenance personnel can accurately locate the root cause of faults, dynamically monitor the health of equipment, and dynamically adjust operating parameters for different application scenarios, thereby improving the safety and efficiency of energy storage systems. Furthermore, manufacturers can leverage this after-sales data to continuously optimize control algorithms and iterate software versions to enhance the adaptability and stability of equipment.

[0023] Existing technologies primarily rely on the following methods to obtain after-sales data from energy storage systems: 1. Accessing a hidden interface on the device by entering a fixed password; 2. Using specialized debugging tools to connect to the device and read data via a communication interface; 3. Enabling access to hidden interfaces through software upgrades; and 4. Authorizing access to relevant data through the manufacturer's remote diagnostic platform. These methods meet data access requirements to a certain extent, but they also have certain shortcomings.

[0024] First, fixed passwords pose a risk of leakage, and password management is complex, making access security difficult to ensure. Second, professional debugging tools are difficult to use, and tool loss or damage can affect repair progress. Third, during software upgrades, power outages or upgrade package anomalies can cause device failures, increasing repair difficulties. Furthermore, remote access relies on a network environment, and when the network is unstable or coverage is insufficient, it is difficult to ensure continuous and reliable access. More importantly, after-sales data contains core device parameters and manufacturer-proprietary algorithms. Opening it to ordinary users could lead to misuse or the leakage of core technology.

[0025] In response to the above problems, this application proposes a device access control method based on a unique device identification code and a real-time clock, which realizes secure access to the hidden functions of the device by combining a complex operation sequence of physical buttons. Specifically, the unique serial number of the device and the real-time generated timestamp are used for encryption calculation to dynamically generate an access password to ensure the uniqueness and timeliness of the access credentials; a multi-button combination is mapped to a key sequence and confirmation key corresponding to the day of the week to form a dual physical interactive verification mechanism to enhance access security; a hierarchical and incremental locking mechanism is introduced to greatly increase the difficulty of brute force cracking; and non-volatile storage is used to record access logs to achieve tamper-proof auditing of access behavior. This solution makes full use of the existing hardware resources of the device and does not require additional hardware investment to achieve safe, efficient and reliable hidden interface access control.

[0026] In addition, the hardware and data foundation of the device access control method provided in this application includes, but is not limited to: 1) SN code storage: Upon leaving the factory, a unique SN code is burned into the MCU's non-volatile storage (e.g., Flash), containing information such as the device type, production batch, and unique identification code. 2) Real-Time Clock (RTC) module: The device has an RTC module that provides time data at the year, month, day, hour, minute, and second level, and supports power-off retention (powered by a backup battery). 3) Key input: The device has two or more physical keys: for example, energy storage systems typically have: a system POWER key, an AC output key, and a DC output key. Alternatively, reliable touch buttons / a touch screen with a specific area: The display is equipped with directional keys (up / down / left / right), function keys (menu / confirm / return), and numeric keys (0-9). The MCU scans the key status in real time.

[0027] The device access control method provided by this application is described in detail below with reference to specific embodiments.

[0028] See also Figure 1 , Figure 1 This is a flow chart of a device access control method provided by an embodiment of the present application. Figure 1 As shown, the method includes steps S11-S14: S11: In response to the received activation signal, a target verification key is generated using a preset dynamic key generation strategy.

[0029] Among them, the target verification key is generated through a preset dynamic key generation strategy, including: obtaining device identification information; obtaining first clock data, and performing a time window calculation on the first clock data to obtain key time information; wherein the key time information includes first standard timestamp information and weekly calendar information; according to the number of physical keys, the corresponding password generation rule is selected; based on the password generation rule, device identification information, first standard timestamp information, and weekly calendar information, the target verification key is generated.

[0030] Before generating the target verification key, the system needs to receive an activation signal to trigger the hidden interface access activation mechanism. The specific process is as follows: (1) Interface status judgment: The system continuously detects the current interface status of the device and allows access to the hidden access process only when the device is in the preset baseline interface. The preset baseline interface is usually the device information display interface (such as the software version information interface) to avoid accidental touches on other interfaces. This judgment is implemented through the software interface management module, and the interface status indicator is updated in real time.

[0031] (2) Predefined physical key combination detection: The system uses the hardware key scanning module to monitor whether a specific key combination is pressed simultaneously. A predefined combination is, for example, "the AC key and the DC key are pressed simultaneously." "Pressing simultaneously" means that all keys in the combination have overlapping activation states at a certain time, not individual keys. This detection is performed periodically to ensure continuous and reliable acquisition of key states.

[0032] (3) Judgment of the validity of the activation state: To prevent accidental brute force cracking, the system further judges the validity of the activation state, including: Continuous key press time detection: The above key combination is required to be continuously pressed for a time not less than the preset threshold T1, a typical value of 10 seconds, and a tolerance of ±5%. Judgment of the locked state: The device must be in an unlocked state, that is, the security lock is not triggered due to multiple incorrect inputs to ensure safe access. If the device is in a locked state, or the key press duration does not reach the threshold, the access process will not be triggered. The duration is determined by a timer, which starts counting from the first time the key combination meets the activation conditions.

[0033] (4) Comprehensive judgment of trigger conditions: The system determines that the activation signal is received successfully and triggers the hidden interface access process only when all the following conditions are met: the device is currently in the preset reference interface; a predefined physical button combination is pressed simultaneously; the continuous pressing time reaches the threshold ; The device is not locked.

[0034] If the above conditions are met, the system will output an activation signal and enter the subsequent dynamic key generation process. Otherwise, it will continue to monitor and wait for the conditions to be met.

[0035] After receiving the activation signal, the system performs the following steps according to the preset dynamic key generation strategy: (1) Obtaining device identification information: The system reads the unique serial number (SN code) from the device’s non-volatile memory and records the read SN code as , such as the 14-digit string burned into the device at the factory. This information is unique and cannot be changed, and serves as the identity binding basis for dynamic key generation.

[0036] (2) First clock data acquisition and time window calculation: The system reads the current real-time clock data (i.e., first clock data) through the real-time clock module (RTC module) and formats it into the first standard timestamp information. , the format is like " "or" For example, 09:30 on June 11, 2025 corresponds to .

[0037] At the same time, extract the corresponding weekly calendar information , which represents the day of the week (1 for Monday, 7 for Sunday). For example, Wednesday is recorded as .

[0038] Based on the preset password validity period (Unit: minutes), calculate the password expiration time (that is, the permission expiration timestamp information) , ensuring that the generated key is only valid within the specified time window, to prevent the security risks caused by the long-term validity of the key. For example, and When The corresponding password is valid from 09:30 to 09:35 on June 11, 2025. 、 、 Store in a temporary register and then execute the subsequent steps.

[0039] (3) Password generation rule selection: The system selects the corresponding password generation rule based on the number of physical keys N on the current device. The password length and value range are adjusted according to the number of keys. For example: when N=2, a 2-digit password is generated (modulo 100); when N=3, a 3-digit password is generated (modulo 1000); and so on. The rules ensure that the password complexity matches the number of keys.

[0040] (4) Dynamic password generation algorithm execution: This embodiment adopts a hybrid hash calculation method: the device identification information With the first standard timestamp information Splice into a string; use the CRC32 algorithm to calculate the cyclic redundancy check value of the string to obtain the hash value ;Will Multiply by the weekly calendar information , enhance the dynamics; perform a modulus operation on the product result, the modulus is determined by the number of physical keys N, and the final dynamic password is obtained , recorded as the target verification key. It can be understood that when N=2, , take the last two decimal digits of the calculation result; when N=3, , take the last three decimal digits of the calculation result, and so on.

[0041] For example, suppose , , , if N=2, then the calculated ; If N=3, then the calculated .

[0042] (5) Target verification key output: calculated Output for subsequent key mapping and verification.

[0043] This step, by responding to the received activation signal, implements strict trigger detection of hidden interface access and secure generation of dynamic keys, significantly improving the security and reliability of device access control. Specifically, the system activates the hidden access process only when the device is in the preset baseline interface and the predefined physical button combination is continuously pressed to reach the preset time threshold and the device is not in a locked state, effectively preventing accidental access to malicious brute force hacking behaviors; then, based on the device's unique identification information and real-time collected clock data, combined with the time window calculation, the target verification key is dynamically generated, ensuring the timeliness and uniqueness of the key, and further enhancing the dynamic management capabilities of access rights. This dynamic key generation strategy not only effectively improves the system's security protection level, but also takes into account ease of use, avoids the defects of traditional static passwords that are easily cracked, and provides a solid guarantee for secure access to the device's hidden interface.

[0044] S12: Based on a preset key conversion rule, the target verification key is converted into a key mapping sequence, and a key input monitoring state is entered.

[0045] Among them, based on the preset key conversion rules, the target verification key is converted into a key mapping sequence and enters the key input monitoring state, including: based on the key conversion rules, a password and key conversion operation is performed on each number in the target verification key to obtain a key mapping sequence corresponding to the target verification key, and enter the key input monitoring state.

[0046] The system receives the target verification key generated in step S11. This key is typically a dynamic password consisting of numbers, such as "487." This password represents the basis for access control verification. However, using a numeric password directly may pose a security risk. Therefore, it is necessary to convert the numeric password into a corresponding physical key sequence to achieve higher security operation verification. The specific implementation is as follows: The system processes the target verification key bit by bit according to a preset key conversion rule. This rule defines the mapping between numbers, physical keys, and key presses. For example, on a device with three physical keys (Key A, Key B, Key C), the conversion rule might specify that the first digit in the target verification key corresponds to the number of times Key A is pressed; the second digit corresponds to the number of times Key B is pressed; and the third digit corresponds to the number of times Key C is pressed. Taking the dynamic password "487" as an example, the system maps the digit "4" to Key A pressed four times, "8" to Key B pressed eight times, and "7" to Key C pressed seven times, forming the complete key mapping sequence K: "Key A pressed four times → Key B pressed eight times → Key C pressed seven times."

[0047] During the conversion process, the system matches the target authentication key length with the number of physical keys on the device to ensure the conversion rules are adapted to the current device configuration. If the number of keys on the device or the password length changes, the system can dynamically adjust the conversion rules to ensure the accuracy and practicality of the key sequence conversion.

[0048] After the mapping conversion is complete, the system enters the key input monitoring state. In this state, the system monitors and records the user's input key sequence signals in real time, waiting for the user to enter the key mapping sequence. The monitoring module captures every key event, including the key type and number of presses, and compares the user's input sequence with the mapping sequence as the basis for subsequent verification.

[0049] In this step, by converting the target verification key into a key mapping sequence based on the preset key conversion rules and entering the key input monitoring state, the effective mapping of the digital password to the physical key sequence is realized, which significantly improves the security of system access verification and the convenience of operation. This conversion process avoids the direct exposure of the digital password and reduces the risk of the password being stolen or cracked. At the same time, it increases the complexity and unpredictability of the password by utilizing the diverse combinations of the device's physical keys, and enhances the ability to resist attacks. After entering the key input monitoring state, the system can capture and verify the user's physical key input sequence in real time, ensuring that only the correct key input can pass the verification to access the hidden interface, thereby effectively preventing illegal access. In addition, this step is highly flexible and adaptable, and can dynamically adjust the conversion rules according to the number and characteristics of the physical keys of different devices, and adapt to a variety of hardware environments.

[0050] In some embodiments, before entering the key input listening state, the method further includes a time-limited visual display of the target verification key. After the system completes the calculation of the target verification key, the following steps are performed to achieve secure display and automatic destruction of the password: Interface rendering: A black background prompt box is generated in the center area of ​​the device's main display screen, and the box displays the format of "The key password is { }” prompt message. For example: , the display shows "Key password is 487." Timer control: Starts a countdown timer, and the prompt message continues to display for a preset time of t seconds (t is configurable, typically 10 seconds). During this time, the screen backlight automatically adjusts to maximum brightness. Automatic destruction: After the timer ends, the prompt box automatically disappears, the system clears the temporary password variable in memory, and restores the screen backlight to its initial brightness. It is understandable that the password prompt box will no longer be displayed at this time, and the stored password value will be cleared. After the display is completed, the system enters the key input monitoring state.

[0051] In this embodiment, through the limited-time visual display of dynamic passwords, security prompts and timely destruction of password information are achieved, effectively balancing the user's need for password visibility with system security protection. Specifically, the system presents the current dynamic password with eye-catching visual effects in the central area of ​​the device's main display screen, making it easier for users to accurately and quickly obtain the required key password, thereby improving the convenience and accuracy of operation. Countdown control ensures that the password is only visible within a preset time, avoiding security risks caused by long-term exposure of the password. After the countdown ends, the password prompt is automatically destroyed and the password variable in the memory is cleared, further preventing the password from being obtained by unauthorized personnel or saved by screenshots. At the same time, the brightness adjustment of the screen backlight enhances the readability and security of the password display, improving the user experience.

[0052] In some embodiments, the key validity information also includes permission expiration timestamp information, and the method also includes: when in a key input listening state, obtaining second clock data, and performing timestamp conversion on the second clock data to obtain second standard timestamp information; comparing the second standard timestamp information with the permission expiration timestamp information; if the second standard timestamp information is not greater than the permission expiration timestamp information, determining that the target verification key is within the validity period; if the second standard timestamp information is greater than the permission expiration timestamp information, determining that the target verification key has expired.

[0053] When the user enters the password, the relationship between the current time and the password expiration time is continuously monitored to ensure that only input within the password validity period is accepted. If the timeout is exceeded, the process is forcibly terminated to ensure access security. The specific process is as follows: (1) Clock synchronization when key input monitoring is started: When the system enters the key input monitoring state, it immediately obtains the current system time through the RTC (real-time clock) module to obtain the second clock data. The clock data usually contains year, month, day, hour, minute, and second information. The system converts the clock data into a timestamp in a unified format, called the second standard timestamp information, which is generally in the format of " "or" ”, recorded as This format is the same as the permission expiration timestamp information generated in step S11. The format is consistent, which facilitates subsequent numerical comparison.

[0054] (2) Comparison of the value of the dynamic password validity period: The system compares the current timestamp The preset permission expiration timestamp Compare the values. This comparison process generally uses integer comparison logic: like , indicating that the current time has not exceeded the password validity period, the password is still valid, and the system continues to allow the user to enter key verification. The system remains in the input monitoring state and waits for the user to complete the password input.

[0055] like , indicating that the password has expired, the system immediately terminates the current input monitoring. If the user has already entered some keys at this time, the system clears the sequence to prevent the incorrect password from being misused. At the same time, the system automatically jumps back to the initial trigger detection step S11 and waits for the next hidden interface access activation.

[0056] It is understandable that if the password timeout causes the process to reset, the system will not only clear the input buffer, but also trigger log records or error counts to prevent brute force cracking attempts. The timeout reset mechanism ensures the timeliness and security of the password, avoids the risk of long-term password leakage, and improves the security protection capabilities of the system access control. In addition, the time verification in this embodiment is not a one-time detection, but a periodic (for example, every second) real-time verification to ensure that the password expiration event can be responded to immediately at any time during the user input process. This continuous monitoring method effectively prevents users from continuing to input passwords after the password validity period expires, ensuring that system access is limited to the authorized period.

[0057] For example, assuming the permission expiration timestamp is "202506110935", that is, the password is valid until 09:35 on June 11, 2025. When the system detects the current time is "202506110933" (i.e. 09:33), which satisfies , the system continues to allow input. If the current time Reaching "202506110936", exceeding , the system immediately clears the input, terminates the verification process, and returns to the initial state.

[0058] This embodiment monitors the relationship between the current time and the password permission expiration time in real time to ensure that users are allowed to enter and verify passwords only within the validity period of the dynamic password, effectively preventing expired passwords from being used, and improving the security and reliability of system access control; at the same time, the input data is automatically cleared and the process is reset when the timeout expires, avoiding misoperation and potential security risks, and ensuring safe access to hidden interfaces of the device.

[0059] S13: In the key input monitoring state, receiving an input key sequence signal and an input confirmation key signal to verify whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table.

[0060] S14: If the input key sequence signal matches the key mapping sequence and the mapping relationship table, and the input confirmation key signal matches the mapping relationship table, then access the hidden interface.

[0061] Among them, receiving the input key sequence signal and the input confirmation key signal to verify whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table, including: obtaining the input interval time; comparing the input interval time with the preset timeout threshold; if the input interval time is less than the preset timeout threshold and the input confirmation key signal is not received, then continue to receive the input key sequence signal; if the input interval time is less than the preset timeout threshold and the input confirmation key signal is received, then verify whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table; if the input interval time is not less than the preset timeout threshold, execute the backtracking process.

[0062] After the system enters the key input listening state, it monitors all relevant physical key events in real time. Specifically, the system captures every key press and release by the user through hardware interrupts or polling, and simultaneously records the detected key events in chronological order to form an input key sequence signal. In addition to normal key sequences, the system also specifically monitors input confirmation key signals. The confirmation key is typically triggered by a specific physical key combination (for example, pressing two keys simultaneously) and serves to mark the end of the current input sequence, prompting the system to verify. During the monitoring process, the system determines in real time whether the confirmation key has been detected.

[0063] When the target verification key is within its validity period, the system continuously monitors the input key sequence signal and the input confirmation key signal to complete the password verification. The specific implementation process is as follows: (1) Input interval timer: When the system detects a key press for the first time, it starts a high-precision timer and records the time as the "first key press time". It also starts recording the input key sequence (format: key ID + number of presses) and the input confirmation key. Each time a new key input is detected, the system calculates the difference between the current key input time and the first key press time, which is the current input interval time. This timer is guaranteed to accurately reflect the time elapsed from the start of user input to the current moment.

[0064] (2) Comparison between input interval and timeout threshold: The system presets a timeout threshold (e.g. 5000 milliseconds) to limit the continuity requirements of key input: like , and the input confirmation key is not detected, it means that the user is still entering the password. The system continues to maintain the key monitoring state, does not perform verification operations, and waits for more input.

[0065] like , and it is detected that the input confirmation key is completed, which means that the user has completed the password input and the system is ready to execute the verification process.

[0066] like , indicating that the input has timed out. This may be because the user paused for too long or entered an error, and the system executed the backtracking process.

[0067] If the input interval exceeds a threshold, the system deems the current input illegal and executes a backtracking process: it clears the currently recorded input key sequence signals and input confirmation key signals, freeing up related memory resources. It also resets the timer and monitoring state, preparing to receive new key input. It also triggers appropriate user prompts or logs to track input anomalies.

[0068] For example, suppose the dynamic password is converted to a key sequence of "Key A × 4 times, Key B × 8 times, Key C × 7 times", and the confirmation key is "Key D double-click". After the user starts pressing the keys, the timer starts: the user completes the input of "Key A × 4, Key B × 8, Key C × 7" continuously within 4000 milliseconds, and triggers the confirmation key "Key D double-click" at the 4500th millisecond, and the system immediately verifies the input. After the verification is passed, access to the hidden interface is allowed. If the user pauses for 7000 milliseconds after entering "Key B × 4" (exceeding the preset timeout threshold), the system determines that the input has timed out, clears all entered data, and returns to the state of waiting for the first key press, requiring re-entry.

[0069] By strictly verifying and matching the input key sequence signals and the input confirmation key signals, the password sequence entered by the user is ensured to be completed continuously and accurately within the specified time window, effectively preventing unauthorized access due to input timeouts, incorrect key sequence, or invalid confirmation keys. A high-precision timer is used to monitor input intervals in real time, dynamically determine whether input has timed out, and comprehensively verify the key sequence and confirmation key in conjunction with a mapping table, enhancing the security and reliability of password verification.

[0070] In some embodiments, the method further includes: calculating the total number of input key sequence combinations and the total number of confirmation key combinations based on the number of physical keys; and generating a mapping relationship table based on the weekly calendar information, the total number of input key sequence combinations and the total number of confirmation key combinations.

[0071] In some embodiments, a mapping relationship table is generated based on the weekly calendar information, the total number of input key sequence combinations and the total number of confirmation key combinations, including: enumerating the total number of input key sequence combinations to obtain key sequence combinations; enumerating the total number of confirmation key combinations to obtain confirmation key combinations; mapping the weekly calendar information to the key sequence combinations and the confirmation key combinations respectively to generate a mapping relationship table.

[0072] When the system detects that the input interval is less than the preset timeout threshold and the confirmation key signal input is completed, the verification process of the input key sequence signal and the input confirmation key signal is triggered. To enhance the security and uniqueness of the verification, the total number of input key sequence combinations and the total number of confirmation key combinations are calculated based on the number of physical keys N on the device, thereby constructing a dynamic mapping relationship table associated with time periods. The specific process is as follows: (1) Calculation of the number of physical key combinations: The system reads the number of physical keys N on the device and calculates the total number of key sequence combinations , covering all non-empty key subset combinations (including single key, double key, triple key...multi-key combinations). At the same time, calculate the total number of confirmed key combinations , representing all double-button long-press combinations.

[0073] (2) Key combination enumeration: Based on the value of N, the system generates all key sequence combinations and confirmation key combinations through enumeration. The key sequence combination uses a binary increment method to enumerate all non-empty subsets, as shown in Table 1. Taking N=3 as an example, the combination number 001 corresponds to a single key A, 010 corresponds to a single key B, 011 corresponds to a double key A+B, and so on. It should be noted that when the number of physical buttons N on the device is equal to 3, the number of non-empty button combinations is exactly 7, which can perfectly correspond to the mapping relationship of the 7 days of a week, achieving one-to-one correspondence and strong combination diversity; when N is greater than 3, the total number of combinations will increase significantly, far exceeding 7. At this time, any 7 combinations can be flexibly selected or preset according to specific needs to form different mapping table groups to support longer time periods (such as using one set of mappings for the first 15 days of a month and another set of mappings for the last 15 days), thereby enhancing the security and adaptability of the system; conversely, when the number of buttons is small (such as only 2 buttons), the number of non-empty combinations is small (only 3). At this time, these 3 combinations need to be reused cyclically for the 7-day mapping relationship to ensure the integrity of the mapping table and the continuity of functionality.

[0074] Table 1 - Key sequence combinations

[0075] As shown in Table 2, the confirmation key combination enumerates all the double-key long press combinations through the combination formula. For example, when N=3, there are three combinations: A+B, A+C, and B+C.

[0076] Table 2 - Confirmation key combinations

[0077] (3) Mapping relationship table generation: The system obtains the current weekly calendar information, which is obtained in step S11. (1-7, corresponding to Monday to Sunday respectively). The day of the week value is periodically mapped to the key sequence combination and the confirmation key combination to realize the dynamic mapping relationship table of "day of the week-key sequence combination-confirmation key combination". The key sequence combinations correspond one to one in the order of the week to ensure that each day corresponds to a unique key sequence combination. Because the number of confirmation key combinations is usually less than 7, a cyclic multiplexing method is used to map them to the day of the week to ensure the continuity and cyclicity of the mapping. The above-enumerated key sequence combinations and confirmation key combinations are combined with the weekly calendar information to generate a mapping relationship table. As shown in Table 3, the key sequence combination and the corresponding confirmation key combination for each day are clearly specified to ensure that the input operation of the day strictly matches the preset mapping.

[0078] Table 3 - Mapping relationship table

[0079] (4) Input Verification Mechanism: During the verification phase, the system performs multi-dimensional verification on the input key sequence and confirmation key based on the mapping relationship table: Verify whether the number of times each key is pressed in the input key sequence is consistent with the number generated by the dynamic password. Verify whether the input key combination completely matches the key sequence combination mapped on the day. Verify whether the double-key long press combination of the confirmation key matches the confirmation key combination mapped on the day.

[0080] (5) Verification result processing: If all the above checks are passed, the input is deemed legal, the permission verification is successful, and the hidden interface can be accessed. If any check fails (including inconsistent keystroke count, mismatched combination, or input timeout), the system immediately triggers the security lock mechanism to prevent unauthorized access.

[0081] For example, if the target verification key is 487 and the day is Wednesday, the key mapping sequence is converted to {Key A pressed 4 times → Key B pressed 8 times → Key C pressed 7 times}. After entering the key sequence and the confirmation key, the mapping table is searched. The corresponding key sequence for Wednesday is: short presses of keys A and B, without pressing key C. Therefore, short press key A 4 times, then short press key B 8 times. The mapping table is then searched again. The corresponding confirmation key operation for Wednesday is: long press key B and key C simultaneously. Therefore, long press key B and key C simultaneously. All the above checks pass, indicating that the input is valid, permission verification is successful, and access to the hidden interface is possible.

[0082] This embodiment calculates and enumerates all possible key sequence and confirmation key combinations based on the number of physical keys on the device, and dynamically generates a "day of the week-key sequence-confirmation key combination" mapping table based on calendar information. This achieves both temporal periodicity and diversity in key input verification, effectively enhancing the uniqueness and security of password input. This mechanism not only significantly expands the range of input combinations, making brute force attacks more difficult, but also ensures the accuracy and real-time nature of input operations through strict combination matching and timing verification, preventing intrusion into the system due to illegal or timed-out operations. This enhances the reliability and protection capabilities of device access control, thereby improving the overall system security level and the credibility of user operations.

[0083] In some embodiments, if all the above checks are passed, the input is determined to be legal, the permission verification is successful, and the hidden interface activation and exit detection process is executed; if any check fails (including inconsistent number of key presses, mismatched combinations, or input timeout), the system immediately triggers the security lock mechanism and executes the security lock process.

[0084] Among them, the hidden interface activation and exit detection process is: the system loads the hidden interface and enables the page turning function (preset page turning button, such as short press A / B button to turn the page), and monitors the exit button in real time (preset exit button, such as A+B long press 2 seconds): If the exit operation is detected, the normal interface display process is executed; if no exit is detected and there is no operation, the access time timing control process is executed to enter the timeout mechanism.

[0085] The access duration control process is as follows: Start the cumulative timer ,like (preset value, such as 2 minutes), return to the hidden interface to activate and exit the detection process; otherwise, execute the storage process.

[0086] Among them, the safety lock process is: Error counter Increment by 1 to calculate the lock duration (Unit: hours), the lock duration is graded and incremented instead of a fixed value (e.g. 30 minutes for the first time, 60 minutes for the second time, 120 minutes for the third time) to increase the cost of brute force cracking, and access to the hidden interface is prohibited during this period. Stored in non-volatile memory, it will be cleared after 24 hours.

[0087] The storage process involves storing the access timestamp and operation history in non-volatile memory to form a traceability log. The format is: access timestamp + access result (success / failure). After storage is complete, the normal interface display process is executed.

[0088] Among them, the normal interface display process is: display the normal interface.

[0089] In this embodiment, the security of device access and the accuracy of operation are effectively guaranteed through multiple verification mechanisms. When the input is legal and the permission verification is successful, the system automatically activates the hidden interface and supports page turning operations. At the same time, the exit button is monitored in real time so that the user can exit safely at any time, ensuring the flexibility and convenience of operation. The access time timing control further prevents the hidden interface from being unmanned for a long time, automatically enters the timeout process, and improves the efficiency of system resource management. If any verification failure is detected, including inconsistent keystroke counts, wrong combination or input timeout, the system immediately triggers the security lock mechanism and adopts a hierarchical and increasing lock time strategy to significantly increase the difficulty of brute force cracking and effectively prevent the risk of illegal access. During the security lock period, access to the hidden interface is prohibited to ensure the safety and reliability of the system. All access behaviors are recorded in the non-volatile memory to form a detailed traceability log, which is convenient for subsequent auditing and security management. Finally, the system automatically switches back to the regular interface according to the access results to ensure the consistency of user experience and the stability of the system status.

[0090] It should be noted that relevant operators can obtain in the maintenance manual or training: the triggering conditions of the hidden interface access process; the key conversion rules between dynamic passwords and key sequences; the mapping relationship table of "week-key sequence combination-confirm key combination"; which physical key key key A, key B,..., key N specifically represents; the page turning key action of the hidden interface; the key action of exiting the hidden interface; the timeout period of the hidden interface, etc.

[0091] The present invention provides a device access control method that, without adding any additional hardware, leverages only the device's existing display, physical buttons, real-time clock (RTC), and stored SN code to achieve a highly secure, reliable, and error-proof hidden interface access mechanism. Its core advantages are: First, a target verification key is dynamically generated based on the current time and the device's unique SN code, resulting in a different authentication key for each entry. This completely eliminates the risk of static passwords being snooped, recorded, or replayed, and ensures that the target verification key from one device cannot be used on another. Second, access requires a physical button press, preventing remote attacks. Furthermore, the target verification key is only briefly displayed on the screen, making it extremely difficult to fully peek or record. Even if dynamic data and input sequences are recorded once, they are unusable the next time. Furthermore, a hierarchical lockout duration strategy, with increasing error counts, significantly increases the difficulty of brute-force attacks, making them virtually impossible within the time window. This mechanism also strictly restricts access, ensuring that only those who understand the entry method, have physical access to the device, and can correctly interpret the dynamic information and input sequence can successfully access the device, effectively preventing unauthorized operation. More importantly, while improving security, the complex entry process also significantly reduces the possibility of ordinary users accidentally entering professional or sensitive backend interfaces, ensuring the stability of system operation and the consistency of user experience.

[0092] Based on the device access control method provided in the above embodiment, the present application embodiment further provides a device access control apparatus. Figure 2 , Figure 2 This is a schematic diagram of the structure of the device access control device. Figure 2 As shown, the device 200 includes: a key generation module 210 , a key conversion module 220 , a key verification module 230 and an interface access module 240 .

[0093] Among them, the key generation module 210 is used to generate a target verification key through a preset dynamic key generation strategy in response to a received activation signal; the key conversion module 220 is used to convert the target verification key into a key mapping sequence based on a preset key conversion rule, and enter the key input monitoring state; the key verification module 230 is used to receive the input key sequence signal and the input confirmation key signal in the key input monitoring state to verify whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table; the interface access module 240 is used to access the hidden interface if the input key sequence signal matches the key mapping sequence and the mapping relationship table, and the input confirmation key signal matches the mapping relationship table.

[0094] It should be noted that the above-mentioned device access control device can execute the device access control method provided in the embodiment of this application, and has the corresponding functional modules and beneficial effects of the execution method. For technical details not fully described in the embodiment of the device access control device, please refer to the device access control method provided in the embodiment of this application.

[0095] The present application embodiment also provides an electronic device 300, see Figure 3 , which shows a hardware structure diagram of an electronic device 300 capable of executing the method described in the above embodiment. The electronic device 300 includes: at least one processor 310; and a memory 320 in communication with the at least one processor 310, Figure 3 In the embodiment, a processor 310 is used as an example. The memory 320 stores instructions that can be executed by the at least one processor 310. The instructions are executed by the at least one processor 310 so that the at least one processor 310 can execute the device access control method described in the above embodiment. The processor 310 and the memory 320 can be connected via a bus or other means. Figure 3 The bus connection is taken as an example.

[0096] Memory 320, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer-executable programs, and modules, such as the program instructions / modules corresponding to the device access control method in the embodiments of the present application. Processor 310 executes the non-volatile software programs, instructions, and modules stored in memory 320 to execute various server functional applications and data processing, thereby implementing the device access control method described in the above embodiments.

[0097] The memory 320 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and application programs required for at least one function; the data storage area may store data created based on the use of the computing device, etc. In addition, the memory 320 may include a high-speed random access memory and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some embodiments, the memory 320 may optionally include a memory remotely located relative to the processor 310, and these remote memories may be connected to the computing device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0098] The one or more modules are stored in the memory 320 , and when executed by the one or more processors 310 , perform the device access control method described in the above embodiment.

[0099] It should be noted that the electronic device of this embodiment can be a control and human-computer interaction device in the energy storage system, including but not limited to: the energy storage system main control unit, the energy management system (EMS) controller, and a local human-computer interaction terminal with display and input functions (such as a control panel with physical buttons and a display, an LCD touch panel, etc.). In addition, it can also be other electronic devices equipped with a processor, memory, a real-time clock (RTC), a unique serial number storage module, and a key input module, such as industrial controllers, electromechanical equipment control panels, intelligent terminals for power distribution equipment, and robot consoles, thereby realizing a wide range of equipment safety verification and operation control functions.

[0100] The above-mentioned product can execute the method provided in the embodiment of this application, and has the functional modules and beneficial effects corresponding to the execution method. For technical details not fully described in this embodiment, please refer to the device access control method described in the embodiment of this application.

[0101] The embodiments of the present application provide a non-volatile computer-readable storage medium that stores computer-executable instructions. The computer-executable instructions are executed by one or more processors to enable the at least one processor to execute the device access control method described in the above embodiments. For example, the non-volatile computer-readable storage medium can be a read-only memory (ROM), a random access memory (RAM), a compact disc read-only memory (CDROM), a magnetic tape, a floppy disk, an optical data storage device, etc.

[0102] It should be noted that the device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of the modules may be selected based on actual needs to achieve the objectives of this embodiment.

[0103] Through the description of the above embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform. Of course, they can also be implemented by hardware, but in many cases the former is a more preferred embodiment. Based on this understanding, the technical solution of this application, or the part that contributes to the existing technology, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for enabling a terminal (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of this application.

[0104] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Based on the concept of the present application, the technical features in the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other variations in different aspects of the present application as described above. For the sake of simplicity, they are not provided in detail. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A device access control method, characterized in that: The method comprises: In response to the received activation signal, generating a target authentication key by using a preset dynamic key generation strategy; Based on a preset key conversion rule, the target verification key is converted into a key mapping sequence, and a key input monitoring state is entered; In the key input monitoring state, receiving an input key sequence signal and an input confirmation key signal to verify whether the input key sequence signal matches the key mapping sequence and mapping relationship table and whether the input confirmation key signal matches the mapping relationship table; If the input key sequence signal matches the key mapping sequence and the mapping relationship table, and the input confirmation key signal matches the mapping relationship table, then the hidden interface is accessed.

2. The device access control method according to claim 1, characterized in that: Generating a target verification key by using a preset dynamic key generation strategy includes: Get device identification information; Acquire first clock data, and perform an aging window calculation on the first clock data to obtain key aging information; wherein the key aging information includes first standard timestamp information and week calendar information; Select the corresponding password generation rule based on the number of physical keys; The target verification key is generated based on the password generation rule, the device identification information, the first standard timestamp information, and the weekly calendar information.

3. The device access control method according to claim 1, wherein: The method of converting the target verification key into a key mapping sequence based on a preset key conversion rule and entering a key input monitoring state includes: Based on the key conversion rule, a password and key conversion operation is performed on each number in the target verification key to obtain the key mapping sequence corresponding to the target verification key, and enter the key input monitoring state.

4. The device access control method according to claim 2, wherein: The key validity information also includes permission expiration timestamp information, and the method further includes: When in the key input monitoring state, obtaining second clock data, and performing timestamp conversion on the second clock data to obtain second standard timestamp information; Comparing the second standard timestamp information with the permission expiration timestamp information; If the second standard timestamp information is not greater than the authority expiration timestamp information, it is determined that the target verification key is within the validity period; If the second standard timestamp information is greater than the authority expiration timestamp information, it is determined that the target verification key has expired.

5. The device access control method according to claim 1, wherein: The receiving of the input key sequence signal and the input confirmation key signal to verify whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table includes: Get the input interval time; Comparing the input interval time with a preset timeout threshold; If the input interval is less than the preset timeout threshold and the input confirmation key signal is not received, continue to receive the input key sequence signal; If the input interval is less than the preset timeout threshold and the input confirmation key signal is received, verifying whether the input key sequence signal matches the key mapping sequence and the mapping relationship table and whether the input confirmation key signal matches the mapping relationship table; If the input interval is not less than the preset timeout threshold, the backtracking process is executed.

6. The device access control method according to claim 2, characterized in that: The method further comprises: Calculate the total number of input key sequence combinations and the total number of confirmation key combinations based on the number of physical keys; The mapping relationship table is generated according to the weekly calendar information, the total number of input key sequence combinations and the total number of confirmation key combinations.

7. The device access control method according to claim 6, characterized in that: The generating the mapping relationship table according to the weekly calendar information, the total number of input key sequence combinations, and the total number of confirmation key combinations includes: Enumerate the total number of input key sequence combinations to obtain key sequence combinations; Enumerate the total number of confirmation key combinations to obtain a confirmation key combination; The weekly calendar information is mapped to the key sequence combination and the confirmation key combination respectively to generate the mapping relationship table.

8. A device access control device, characterized in that: The device comprises: A key generation module, the key generation module being configured to generate a target verification key using a preset dynamic key generation strategy in response to a received activation signal; A key conversion module, configured to convert the target verification key into a key mapping sequence based on a preset key conversion rule and enter a key input monitoring state; a key verification module, the key verification module being configured to receive an input key sequence signal and an input confirmation key signal in the key input monitoring state to verify whether the input key sequence signal matches the key mapping sequence and mapping relationship table and whether the input confirmation key signal matches the mapping relationship table; An interface access module is configured to access a hidden interface if the input key sequence signal matches the key mapping sequence and the mapping relationship table, and the input confirmation key signal matches the mapping relationship table.

9. An electronic device, characterized in that: include: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method according to any one of claims 1 to 7.

10. A non-volatile computer-readable storage medium, characterized in that: The non-volatile computer-readable storage medium stores computer-executable instructions. When the computer-executable instructions are executed by an electronic device, the electronic device executes the method according to any one of claims 1 to 7.

Images