A license authentication control method and system, a computer device and a medium

Abstract

This invention discloses a Li cense authentication control method, system, computer device, and medium. The method includes: the device receiving a symmetric encryption key encrypted with a private key from a cloud using an asymmetric encryption algorithm; encrypting a device fingerprint encryption field using the symmetric encryption key and sending it back to the cloud; the device receiving device Li cense information generated by the cloud based on the device fingerprint encryption field and encrypted with the symmetric encryption key, and writing it to a specific partition of a storage chip; and the device verifying the validity of the encrypted device Li cense information to complete the Li cense authentication process. This invention uses a symmetric encryption algorithm to encrypt the Li cense information and an asymmetric encryption algorithm to encrypt the symmetric encryption key, employing a dual encryption method, which can greatly improve the security of the Li cense information.

Description

Technical Field

[0001] This invention relates to the field of Internet technology, and in particular to a license authentication control method, system, computer device, and medium. Background Technology

[0002] A license is a software license, a standard contract signed between the software author and the user to define and restrict the user's rights to use the software (or its source code), as well as the author's obligations. Software licenses can be broadly categorized into lifetime licenses and annual licenses. A lifetime license allows the user to use the software for life once an agreement is reached and a contract is signed. An annual license means the customer signs an agreement with the software developer to use the software on an annual payment basis. Currently, license authentication information is usually packaged and sold with the system. After the system completes license authentication, the license information is written to a designated location for storage. Upon system startup, the license information is parsed, and the system is controlled based on the validity and timeliness of the license information. Once the usage limit is exceeded, a prompt will be issued and the system will be logged out.

[0003] Existing license authorization and authentication methods typically transmit license information in plaintext. This plaintext transmission of license information may be intercepted, leading to the leakage of license information.

[0004] Therefore, existing technologies still need to be improved and enhanced. Summary of the Invention

[0005] The technical problem to be solved by the present invention is to provide a license authentication control method, system, computer device, and medium, addressing the aforementioned deficiencies of the prior art. The technical solution adopted by the present invention is as follows:

[0006] In a first aspect, the present invention provides a license authentication control method, wherein the method is applied to a license authentication control system composed of a cloud and a device, the method comprising:

[0007] The device receives a symmetric encryption key from the cloud, which is encrypted using a private key of an asymmetric encryption algorithm. The device then uses the symmetric encryption key to encrypt the device fingerprint encryption field and sends the encrypted device fingerprint encryption field back to the cloud.

[0008] The device receives the device license information encrypted by the key generated by the cloud based on the device fingerprint encryption field and using a symmetric encryption algorithm, and writes the encrypted device license information into a specific partition of the storage chip, wherein the specific partition has read-only attributes.

[0009] The device verifies the validity of the encrypted device license information to complete the license authentication process.

[0010] In one implementation, the asymmetric encryption algorithm is the RSA algorithm, and the symmetric encryption algorithm is the AES algorithm.

[0011] In one implementation, before the device receives the symmetric encryption key (encrypted using the private key of the asymmetric encryption algorithm from the cloud), the following steps are also included:

[0012] An RSA public key and an RSA private key are generated in the cloud, and the RSA private key is stored in the cloud while the RSA public key is sent back to the device.

[0013] The cloud generates a corresponding AES key for each device, and encrypts the AES key using the RSA private key to obtain the encrypted AES key, which is then sent back to the device.

[0014] In one implementation, the device fingerprint encryption field is encrypted using the key of the symmetric encryption algorithm, and the encrypted device fingerprint encryption field is then sent back to the cloud, including:

[0015] The device acquires device fingerprint information, which includes the device's IMEI information and MAC address.

[0016] The device uses the base64 algorithm to encrypt the device fingerprint information, and then concatenates the encrypted device fingerprint information with the timestamp and extended fields to obtain the encrypted device fingerprint field.

[0017] The device uses the RSA public key to decrypt the encrypted AES key to obtain the AES key;

[0018] The device uses an AES key to encrypt the device fingerprint encryption field, obtaining the encrypted device fingerprint encryption field, and then sends the encrypted device fingerprint encryption field back to the cloud.

[0019] In one implementation, after the encrypted device fingerprint encryption field is sent back to the cloud, the process includes:

[0020] The cloud uses an AES key to decrypt the encrypted device fingerprint field, obtaining the device fingerprint encrypted field, and then obtains the IMEI information and MAC address from the device fingerprint encrypted field;

[0021] The cloud verifies the device fingerprint encryption field based on IMEI information and MAC address, and generates device license information based on the device fingerprint encryption field after the verification is successful.

[0022] The cloud uses an AES key to encrypt the device license information, resulting in encrypted device license information.

[0023] In one implementation, the device verifies the validity of the encrypted device license information, including:

[0024] The device obtains the status flag information of the encrypted device license information and determines whether the status flag information is valid;

[0025] If the status flag information is valid, the encrypted device license information is verified to determine whether the device license information is valid.

[0026] If the device license information is valid, then the activation flag information is set and written to the corresponding device.

[0027] In one implementation, the device performs validity verification on the encrypted device license information, which also includes:

[0028] If the status flag information is invalid, or if the device license information is invalid, the device is set to restart after a preset time.

[0029] In one implementation, the encrypted device license information is verified to determine whether the device license information is valid, including:

[0030] The device decrypts the encrypted device license information to obtain the device license information.

[0031] The device side determines the device fingerprint encryption field based on the device license information, and determines the device fingerprint information in the device fingerprint encryption field;

[0032] If the device fingerprint information matches the actual fingerprint information of the corresponding device, then it is determined whether the running time of the corresponding device exceeds the authorized validity period of the device license information;

[0033] If the running time of the corresponding device does not exceed the validity period of the device license information, then the device license information is considered valid.

[0034] In one implementation, verifying the encrypted device license information to determine its validity further includes:

[0035] If the device fingerprint information is inconsistent with the actual fingerprint information of the corresponding device, or if the running time of the corresponding device exceeds the authorization validity period of the device license information, then the device license information is determined to be invalid.

[0036] Secondly, embodiments of the present invention also provide a license authentication control system, the license authentication control system comprising a cloud and a device, wherein the device includes:

[0037] The device fingerprint encryption field determination module is used to receive the key of the symmetric encryption algorithm after the private key of the asymmetric encryption algorithm is encrypted using the private key of the asymmetric encryption algorithm in the cloud, encrypt the device fingerprint encryption field using the key of the symmetric encryption algorithm, and feed back the encrypted device fingerprint encryption field to the cloud.

[0038] The device license information acquisition module is used to receive the device license information generated by the cloud based on the device fingerprint encryption field and encrypted with a key using a symmetric encryption algorithm, and write the encrypted device license information into a specific partition of the storage chip, wherein the specific partition has a read-only attribute.

[0039] The device license information verification module is used to verify the validity of the encrypted device license information in order to complete the license authentication process.

[0040] Thirdly, embodiments of the present invention also provide a computer device, wherein the computer device includes a memory, a processor, and a License authentication control program stored in the memory and executable on the processor. When the processor executes the License authentication control program, it implements the steps of the License authentication control method of any of the above-described schemes.

[0041] Fourthly, embodiments of the present invention also provide a computer-readable storage medium, wherein a license authentication control program is stored on the computer-readable storage medium, and when the license authentication control program is executed by a processor, it implements the steps of the license authentication control method described in any of the above schemes.

[0042] Beneficial Effects: Compared with existing technologies, this invention provides a license authentication control method applied to a license authentication control system composed of a cloud and a device. First, the device receives a symmetric encryption key encrypted with a private key from the cloud using an asymmetric encryption algorithm. The device then uses this symmetric encryption key to encrypt the device fingerprint encryption field and sends the encrypted fingerprint field back to the cloud. Next, the device receives device license information generated by the cloud based on the device fingerprint encryption field and encrypted with the symmetric encryption key. This encrypted device license information is written to a specific partition in a storage chip, where the partition has read-only attributes. Finally, the device verifies the validity of the encrypted device license information to complete the license authentication process. From the technical solution of this invention, it is clear that this invention uses a symmetric encryption algorithm to encrypt the license information and an asymmetric encryption algorithm to encrypt the symmetric encryption key, employing a dual encryption method, which can significantly improve the security of the license information. Attached Figure Description

[0043] Figure 1 This diagram illustrates the application environment of the License authentication control method provided in this embodiment of the invention.

[0044] Figure 2 This is a flowchart of a preferred embodiment of the License authentication control method provided in this invention.

[0045] Figure 3 The flowchart illustrates the license information authentication process of the license authentication control method provided in this embodiment of the invention during practical application.

[0046] Figure 4 This is a flowchart illustrating the process of determining the device fingerprint encryption field in the License authentication control method provided in this embodiment of the invention.

[0047] Figure 5 This is a flowchart illustrating the process of enabling the license verification service in the license authentication control method provided in this embodiment of the invention.

[0048] Figure 6 This is a flowchart illustrating the verification and control process of device license information in the license authentication control method provided in this embodiment of the invention.

[0049] Figure 7 This is a flowchart illustrating the specific verification process of device license information in the license authentication control method provided in this embodiment of the invention.

[0050] Figure 8This is a schematic diagram of the device architecture in the License authentication control system provided in an embodiment of the present invention.

[0051] Figure 9 A schematic block diagram of a computer device provided for an embodiment of the present invention. Detailed Implementation

[0052] To make the objectives, technical solutions, and effects of this invention clearer and more explicit, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

[0053] The flowchart shown in the attached diagram is for illustrative purposes only and does not necessarily include all content, operations, or steps, nor does it require execution in the described order. For example, some operations or steps can be broken down, combined, or partially merged, so the actual execution order may change depending on the actual situation.

[0054] It should be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the invention. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0055] It should be understood that, in order to clearly describe the technical solutions of the embodiments of the present invention, the terms "first" and "second" are used in the embodiments of the present invention to distinguish identical or similar items with essentially the same function and effect. For example, "first control information" and "second control information" are only used to distinguish different control information and do not limit their order.

[0056] Those skilled in the art will understand that the words "first" and "second" do not limit the quantity or the order of execution, and that the words "first" and "second" do not necessarily imply that they are different.

[0057] It should also be understood that the term "and / or" as used in this specification and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0058] Because existing technologies primarily employ single-layer encryption to encrypt license information, and all encryption processes across different machines use the same key, and some solutions encode the license information into the hardware at the factory, lacking universality for license verification, this embodiment provides a license authentication control method to address these issues. This method employs a dual encryption approach to encrypt license information, significantly improving its security. In specific applications, such as... Figure 1 As shown, the License authentication control method of this embodiment is applied to a License authentication control system composed of a cloud and a device. The device in this embodiment can include various devices, such as computers and mobile phones. In practical applications, the device first receives a symmetric encryption key encrypted with a private key of an asymmetric encryption algorithm from the cloud, uses the symmetric encryption key to encrypt the device fingerprint encryption field, and sends the encrypted device fingerprint encryption field back to the cloud. Then, the device receives device License information generated by the cloud based on the device fingerprint encryption field and encrypted with a symmetric encryption key, and writes the encrypted device License information into a specific partition of the storage chip, where the specific partition has read-only attributes. Finally, the device verifies the validity of the encrypted device License information to complete the License authentication process. From the technical solution of this embodiment, this embodiment uses a symmetric encryption algorithm to encrypt the License information and uses an asymmetric encryption algorithm to encrypt the symmetric encryption key. It can be seen that this application adopts a dual encryption method, which can greatly improve the security of the License information.

[0059] In practical applications, such as Figure 2 As shown, the method in this embodiment includes the following steps:

[0060] Step S100: The device receives the key of the symmetric encryption algorithm after the private key of the asymmetric encryption algorithm is encrypted by the cloud, uses the key of the symmetric encryption algorithm to encrypt the device fingerprint encryption field, and sends the encrypted device fingerprint encryption field back to the cloud.

[0061] Throughout the entire license information authentication process, system security is significantly influenced by the encryption algorithm, the length of the encrypted information, and the system's license information detection mechanism. The choice of encryption algorithm is also related to many factors, such as the length of the encrypted information, the difficulty of cracking the encryption algorithm, the encryption and decryption speed, and whether decryption is required. To meet the required encryption requirements, this embodiment employs a dual encryption mechanism to encrypt the license information. Specifically, a symmetric encryption algorithm is used to encrypt the license information, and then an asymmetric encryption algorithm is used to encrypt the key of the symmetric encryption algorithm. In this embodiment, the asymmetric encryption algorithm is RSA, and the symmetric encryption algorithm is AES. RSA is an algorithm that can be used for both encryption and digital signatures, and it performs better on shorter strings. AES is an algorithm that uses the same key for both encryption and decryption.

[0062] Combination Figure 3 As shown, during license information authentication, the cloud generates an RSA public key and an RSA private key, stores the RSA private key in the cloud, and sends the RSA public key back to the device. The cloud generates a corresponding AES key for each device to increase the security of the license information. The AES key is then encrypted using the RSA private key, resulting in an encrypted AES key, which is sent back to the device. At this point, the device receives the symmetric encryption algorithm (AES algorithm) key generated by encrypting the RSA private key from the cloud. Next, the device uses the symmetric encryption key to encrypt the device fingerprint encryption field and sends the encrypted device fingerprint encryption field back to the cloud.

[0063] Specifically, in combination Figure 4As shown, the device first obtains device fingerprint information (i.e., machine fingerprint), which includes the device's IMEI information and MAC address. The IMEI information is the International Mobile Equipment Identity, and the MAC address is the device's physical address. Next, the device encrypts the device fingerprint information using the Base64 algorithm. Base64 is an encoding method that converts binary data into printable characters, suitable for email transmission and XML data storage. In this embodiment, after encrypting the device fingerprint information using the Base64 algorithm, the encrypted device fingerprint information is concatenated with a timestamp, and then an extended field is generated using the SHA256 algorithm. This extended field is then concatenated with the SHA256 algorithm to obtain the encrypted device fingerprint field. In this application, SHA256 (Secure Hash Algorithm 256-bit) is a hash function, a method for creating a small digital fingerprint from any type of data. Next, the device uses the RSA public key to decrypt the encrypted AES key to obtain the AES key. Then, the device uses the AES key to encrypt the device fingerprint encryption field, obtaining the encrypted device fingerprint encryption field, and sends the encrypted device fingerprint encryption field back to the cloud via the HTTPS protocol. In this embodiment, the higher the encryption modulus of the RSA algorithm, the higher the security. In this embodiment, the field length encrypted by the RSA algorithm is 2048 bits, which ensures high security while also guaranteeing high efficiency in the decryption process. Furthermore, the use of double encryption in this embodiment greatly increases the security of the license information. Additionally, the timestamp is stored in the device fingerprint encryption field, allowing the authorization validity period of the device license information to be determined based on the timestamp when generating subsequent device license information, which is beneficial for the management of device license information authentication.

[0064] Furthermore, after receiving the encrypted device fingerprint field, the cloud can decrypt it using an AES key to obtain the encrypted device fingerprint field, along with its IMEI and MAC address. Next, the cloud verifies the encrypted device fingerprint field based on the IMEI and MAC address. This verifies whether the IMEI and MAC address in the encrypted device fingerprint field match the corresponding IMEI and MAC address on the device. If they match, the verification of the encrypted device fingerprint field is successful. Following successful verification, the cloud generates device license information based on the encrypted device fingerprint field. Finally, the cloud encrypts the device license information using an AES key to obtain encrypted device license information. At this point, the cloud has obtained the device license information generated based on the encrypted device fingerprint field and encrypted using a symmetric encryption algorithm key. The cloud then sends the encrypted device license information back to the device.

[0065] Step S200: The device receives the device license information generated by the cloud based on the device fingerprint encryption field and encrypted using a key with a symmetric encryption algorithm, and writes the encrypted device license information into a specific partition of the storage chip, wherein the specific partition has read-only attributes.

[0066] Specifically, after receiving the encrypted device license information from the cloud, the device writes the encrypted device license information into a specific partition (factory partition) of the storage chip (flash). In this embodiment, the specific partition has read-only attributes, so users cannot access the content in the specific partition, which can ensure that users cannot cause license authentication vulnerabilities by tampering with the license information.

[0067] Step S300: The device verifies the validity of the encrypted device license information to complete the license authentication process.

[0068] While ensuring the encryption and security of license information, a secure and reliable verification mechanism is also needed to guarantee its security. This solution employs a separate system process to verify license information, which is activated upon system startup. The flowchart for activating the license verification service is shown below. Figure 5As shown in the diagram. During the system's assembly startup phase, the CPU is initially configured, and the dcache (data cache) / icache (instruction cache) and MMU (Memory Management Unit) are disabled. Next, the FPU (Floating-Point Unit) and neon (Multimedia Processing Unit) are enabled, primarily through register configuration and compiler options. Then, the MMU is configured, establishing virtual and physical address mappings. Following this, the system stack is configured, CSS (Cascading Style Sheets) is cleaned up, and the system enters the C language's main function. During the C language startup phase, after passing through the main function and core functions such as Systeminit(), SystemExCuteRcs(), SystemConfig(), and SystemRun(), the system begins scheduling license verification tasks or other system tasks. Specifically, Systeminit() is the system's low-level initialization function, SystemExCuteRcs() executes initialization scripts or configuration items, SystemConfig() configures system modules, and SystemRun() is the system's main loop function. After the system starts the license verification service, the device needs to check the encrypted device license information after receiving it to determine whether it conforms to the specifications.

[0069] Specifically, in combination Figure 6 As shown, the device obtains the status flag information of the encrypted device license information. In this embodiment, the status flag information is LicenseStatusFlag, which indicates whether the device license information is valid. The validity of the status flag information is determined by detecting the status of LicenseStatusFlag. If the status flag information is valid, the encrypted device license information is verified to determine its validity. If the status flag information is invalid, the device is set to restart after a preset time (e.g., 1 hour). After verifying the device license information, if the device license information is valid, an activation flag is set to indicate that the device license information is valid, and the activation flag information is written to the corresponding device. Similarly, if the device license information is invalid, the device can also be set to restart after a preset time (e.g., 1 hour).

[0070] In one implementation, when the device in this embodiment verifies the encrypted device license information, it combines... Figure 7As shown in the diagram. First, the device license file address is retrieved, and it is determined whether the license file exists. If the license file does not exist, the device license is invalid. If the license file exists, the encrypted device license is decrypted to obtain the device license information. Next, the device determines the device fingerprint encryption field based on the device license information, identifies the device fingerprint information within the encrypted field, and verifies whether the device fingerprint information matches the actual fingerprint information of the corresponding device. If the device fingerprint information does not match the actual fingerprint information of the corresponding device, the device license is deemed invalid. If the device fingerprint information matches the actual fingerprint information of the corresponding device, the authorization validity period of the device license is verified, i.e., whether the running time of the corresponding device exceeds the authorization validity period of the device license. If the running time of the corresponding device does not exceed the authorization validity period of the device license, the device license is deemed valid. If the running time of the corresponding device exceeds the authorization validity period of the device license, the device license is deemed invalid. Once the device license information is confirmed to be valid, this embodiment can be configured to verify the device license information once a day to ensure the security of the device license information.

[0071] Based on the above embodiments, combined with Figure 3 As shown, the process of the License authentication control method in practical applications is as follows:

[0072] 1. Generate an RSA public key and an RSA private key in the cloud, and store the RSA private key in the cloud;

[0073] 2. The device saves the RSA public key into the software;

[0074] 3. The cloud generates a unique AES key for each machine, encrypts the AES key using RSA, and transmits it to the device via HTTPS protocol;

[0075] 4. The device receives and saves the AES key;

[0076] 5. The device obtains the device fingerprint information and encrypts it using base64;

[0077] 6. The device concatenates the encrypted fingerprint information with the timestamp and extended fields, encrypts it with AES, and then transmits it to the cloud via HTTPS protocol;

[0078] 7. The cloud decrypts the received information, obtains the device's fingerprint information, and performs verification.

[0079] 8. After successful verification in the cloud, device license information is generated, encrypted with AES, and transmitted to the device via HTTPS protocol;

[0080] 9. The device receives the device license information and saves it to the factory partition of the flash memory.

[0081] From the technical solution of this embodiment, it can be seen that the present invention adopts a dual encryption method, which can greatly improve the security of license information.

[0082] Based on the above embodiments, the present invention also provides a license authentication control system, which includes a cloud platform and a device platform. Specifically, as follows... Figure 8 As shown, the device includes: a device fingerprint encryption field determination module 10, a device license information acquisition module 20, and a device license information verification module 30. The device fingerprint encryption field determination module 10 receives a symmetric encryption algorithm key generated by encrypting a private key of an asymmetric encryption algorithm using a private key from the cloud, encrypts the device fingerprint encryption field using the symmetric encryption algorithm key, and sends the encrypted device fingerprint encryption field back to the cloud. The device license information acquisition module 20 receives device license information generated by the cloud based on the device fingerprint encryption field and encrypted using a symmetric encryption algorithm key, writes the encrypted device license information to a specific partition of the storage chip, and the specific partition has read-only attributes. The device license information verification module 30 verifies the validity of the encrypted device license information to complete the license authentication process.

[0083] The working principle of each module in the License authentication control system of this embodiment is the same as that of each step in the above method embodiment, and will not be repeated here.

[0084] The modules in the aforementioned license authentication control system can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of a computer device in hardware form or independent of it, or stored in the memory of the computer device in software form, so that the processor can call and execute the corresponding operations of each module.

[0085] In some embodiments, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 9As shown. This computer device can connect to the aforementioned cloud server, host computer, and device, and can invoke these components to control them, thereby implementing the License authentication control method of this embodiment. Specifically, the computer device includes a processor, memory, input / output interface, communication interface, display unit, and input device. The processor, memory, and input / output interface are connected via a system bus, and the communication interface, display unit, and input device are connected to the system bus via the input / output interface. The processor provides computing and control capabilities. The memory includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The input / output interface is used for exchanging information between the processor and external devices. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, NFC (Near Field Communication), or other technologies. When executed by the processor, the computer program implements a license authentication control method. The display unit of the computer device is used to form a visually visible image and can be a display screen, a projection device, or a virtual reality imaging device. The display screen can be an LCD screen or an e-ink screen. The input device of the computer device can be a touch layer covering the display screen, or buttons, a trackball, or a touchpad set on the casing of the computer device, or an external keyboard, touchpad, or mouse, etc.

[0086] Those skilled in the art will understand that Figure 9 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0087] In some embodiments, a computer device is provided for controlling and scheduling device-side and cloud-side connections. The computer device includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0088] The control device receives a symmetric encryption key from the cloud after encrypting the private key of the asymmetric encryption algorithm. It then uses the symmetric encryption key to encrypt the device fingerprint encryption field and sends the encrypted device fingerprint encryption field back to the cloud.

[0089] The control device receives the device license information encrypted by the key generated by the cloud based on the device fingerprint encryption field and using a symmetric encryption algorithm, and writes the encrypted device license information into a specific partition of the storage chip, wherein the specific partition has read-only attributes.

[0090] The control device verifies the validity of the encrypted device license information to complete the license authentication process.

[0091] It should be noted that the user information (including but not limited to user device function information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of related data must comply with relevant regulations.

[0092] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0093] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0094] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A license authentication control method characterized by comprising: The method is applied to a license authentication control system composed of a cloud platform and a device platform. The method includes: The device receives a symmetric encryption key from the cloud, which is encrypted using a private key of an asymmetric encryption algorithm. The device then uses the symmetric encryption key to encrypt the device fingerprint encryption field and sends the encrypted device fingerprint encryption field back to the cloud. The device receives the device license information encrypted by the key generated by the cloud based on the device fingerprint encryption field and using a symmetric encryption algorithm, and writes the encrypted device license information into a specific partition of the storage chip, wherein the specific partition has read-only attributes. The device verifies the validity of the encrypted device license information to complete the license authentication process. Before the device receives the symmetric encryption key (encrypted using the private key from the cloud using an asymmetric encryption algorithm), it also includes: An RSA public key and an RSA private key are generated in the cloud, and the RSA private key is stored in the cloud while the RSA public key is sent back to the device. The cloud generates a corresponding AES key for each device and encrypts the AES key using the RSA private key to obtain an encrypted AES key, which is then fed back to the device. The device fingerprint encryption field is encrypted using the key of the symmetric encryption algorithm, and the encrypted device fingerprint encryption field is then sent back to the cloud, including: The device acquires device fingerprint information, which includes the device's IMEI information and MAC address. The device uses the base64 algorithm to encrypt the device fingerprint information, and then concatenates the encrypted device fingerprint information with the timestamp and extended fields to obtain the encrypted device fingerprint field. The device uses the RSA public key to decrypt the encrypted AES key to obtain the AES key; The device uses an AES key to encrypt the device fingerprint encryption field, obtaining the encrypted device fingerprint encryption field, and then sends the encrypted device fingerprint encryption field back to the cloud. After the encrypted device fingerprint encryption field is sent back to the cloud, the following steps are included: The cloud uses an AES key to decrypt the encrypted device fingerprint field, obtaining the device fingerprint encrypted field, and then obtains the IMEI information and MAC address from the device fingerprint encrypted field; The cloud verifies the device fingerprint encryption field based on IMEI information and MAC address, and generates device license information based on the device fingerprint encryption field after the verification is successful. The cloud uses an AES key to encrypt the device license information, resulting in encrypted device license information; The device verifies the validity of the encrypted device license information, including: The device obtains the status flag information of the encrypted device license information and determines whether the status flag information is valid; If the status flag information is valid, the encrypted device license information is verified to determine whether the device license information is valid. If the device license information is valid, then the activation flag information is set and written to the corresponding device; The encrypted device license information is verified to determine its validity, including: Retrieve the address of the license file containing the device license information, and determine whether the license file exists. If the license file does not exist, the device license information is invalid; If the license file exists, the encrypted device license information is decrypted to obtain the device license information. The device decrypts the encrypted device license information to obtain the device license information. The device side determines the device fingerprint encryption field based on the device license information, and determines the device fingerprint information in the device fingerprint encryption field; If the device fingerprint information matches the actual fingerprint information of the corresponding device, then it is determined whether the running time of the corresponding device exceeds the authorized validity period of the device license information; If the running time of the corresponding device does not exceed the validity period of the device license information, then the device license information is considered valid.

2. The license authentication control method according to claim 1, characterized by, The asymmetric encryption algorithm is the RSA algorithm, and the symmetric encryption algorithm is the AES algorithm.

3. The License authentication control method according to claim 1, characterized in that, The device side performs validity verification on the encrypted device license information, which also includes: If the status flag information is invalid, or if the device license information is invalid, the device is set to restart after a preset time.

4. The license authentication control method of claim 1, wherein Verifying the encrypted device license information to determine its validity also includes: If the device fingerprint information is inconsistent with the actual fingerprint information of the corresponding device, or if the running time of the corresponding device exceeds the authorization validity period of the device license information, then the device license information is determined to be invalid.

5. A license authentication control system characterized by comprising: The system is used to implement the steps of the License authentication control method according to any one of claims 1-4, wherein the License authentication control system includes a cloud and a device, wherein the device includes: The device fingerprint encryption field determination module is used to receive the key of the symmetric encryption algorithm after the private key of the asymmetric encryption algorithm is encrypted using the private key of the asymmetric encryption algorithm in the cloud, encrypt the device fingerprint encryption field using the key of the symmetric encryption algorithm, and feed back the encrypted device fingerprint encryption field to the cloud. The device license information acquisition module is used to receive the device license information generated by the cloud based on the device fingerprint encryption field and encrypted with a key using a symmetric encryption algorithm, and write the encrypted device license information into a specific partition of the storage chip, wherein the specific partition has a read-only attribute. The device license information verification module is used to verify the validity of the encrypted device license information in order to complete the license authentication process.

6. A computer device, comprising: The computer device includes a memory, a processor, and a License authentication control program stored in the memory and executable on the processor. When the processor executes the License authentication control program, it implements the steps of the License authentication control method as described in any one of claims 1-4.

7. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a License authentication control program, which, when executed by a processor, implements the steps of the License authentication control method as described in any one of claims 1-4.

Images