Device anti-substitution method and device based on RFID

Abstract

The invention discloses an RFID-based device anti-substitution method and device, and relates to the technical field of energy power equipment, and the method comprises the steps: controlling an RFID reader to read the identification information stored by an RFID tag disposed on each power module in the equipment before the equipment is started; comparing all the read identification information with all legal identification information pre-stored in the control panel; if the comparison result shows that all the read identification information is matched with all the pre-stored legal identification information one by one, the control equipment is normally started; and if the comparison result shows that any identification information is not matched or missing, the control equipment terminates the starting process. According to the invention, access of a non-authentication module is completely eradicated from the source, electrical potential safety hazards caused by mismatching of module parameters and quality defects are directly eliminated, and the reliability and the service life of equipment operation are guaranteed. Meanwhile, the mandatory identity verification effectively prevents the behavior of replacing the module privately by the user.

Description

Technical Field

[0001] This invention relates to the field of energy and power equipment technology, and in particular to a method and apparatus for preventing device substitution based on RFID. Background Technology

[0002] In the field of energy and power equipment, power modules are core power conversion components in equipment such as converters, frequency converters, and inverters. Their performance and reliability are closely related to the safe and stable operation of the entire system. To ensure the long-term efficiency and safety of the equipment, manufacturers typically conduct rigorous matching, testing, and certification of power modules, and recommend or require users to use original equipment manufacturer (OEM) modules for maintenance and replacement.

[0003] However, in real-world applications, some users, to reduce maintenance costs, may attempt to repair the power module themselves or replace it with a non-original manufacturer's power module after it fails. These non-original power modules may not have undergone sufficient verification in terms of materials, manufacturing processes, electrical characteristics, heat dissipation design, and durability. Directly installing them into the equipment will not only affect the overall conversion efficiency and stability of the machine but may also cause malfunctions or even safety accidents due to electrical parameter mismatch, insufficient insulation, or overheating, thus significantly shortening the overall lifespan and value of the equipment.

[0004] Furthermore, this phenomenon has eroded the market share of compliant aftermarket services for original equipment manufacturers (OEMs) and may damage their brand reputation due to equipment problems caused by non-OEM modules. Currently, although some physical anti-tampering or identification methods exist in the industry, they are often easy to counterfeit, remove, or bypass, making it difficult to achieve automatic, reliable, and irreversible determination of module identity and status during the daily startup and operation of equipment.

[0005] Therefore, how to provide an effective solution that can automatically and reliably identify whether the power module is original and has not been disassembled before the device is started, and control the device's operating permissions accordingly, has become a technical problem that needs to be solved in this field. Summary of the Invention

[0006] This invention provides an RFID-based method and apparatus for preventing device substitution, aiming to solve the technical problem of: how to provide an effective solution that can automatically and reliably identify whether a power module is original and has not been disassembled before the device is started, and thereby control the device's operating permissions.

[0007] In a first aspect, embodiments of the present invention provide an RFID-based method for preventing device substitution, comprising: Before the device is started, the RFID reader is controlled to read the identification information stored in the RFID tags set on each power module in the device. The identification information stored in each RFID tag is used to uniquely identify the corresponding power module. All the read identification information is compared with all the valid identification information pre-stored in the control board; If the comparison results indicate that all the read identification information matches all the pre-stored legal identification information, then the device is controlled to start normally. If the comparison results indicate that any identification information is mismatched or missing, the device will be controlled to terminate the startup process.

[0008] Optionally, comparing all the read identification information with all the valid identification information pre-stored in the control board includes: Receive the identification information reported by the RFID reader; Determine whether the number of identification information reported by the RFID reader is consistent with the number of valid identification information pre-stored in the control board; If the number of identification information reported by the RFID reader is consistent with the number of valid identification information pre-stored in the control board, then it is determined whether there is a matching valid identification information for each reported identification information, and a comparison result is obtained.

[0009] Optionally, after the control device is prevented from starting, the method further includes: The device is controlled to issue an alarm to indicate that the power module is abnormal or has been illegally replaced.

[0010] Optionally, the step of controlling the RFID reader to read the identification information stored in the RFID tags set on each power module in the device before the device is started includes: After the device is powered on, the control board enters the initialization phase, and during the initialization phase, the control board sends a trigger command to the RFID reader; In response to the trigger command, the RFID reader performs a radio frequency scan of the device's interior and returns all the identification information read.

[0011] Optionally, the legal identification information pre-stored inside the control board is obtained by reading the original identification information of the RFID tags on each power module through the RFID reader and burning it into the control board before the equipment leaves the factory.

[0012] Optionally, the method further includes: After the control device starts normally, periodically or in response to a preset event, the RFID reader is controlled to read the identification information of each RFID tag in the device again and compare it. If an anomaly is found in the comparison results during equipment operation, the control equipment will perform a safe shutdown operation and record a fault log.

[0013] Secondly, embodiments of the present invention propose an RFID-based device for preventing device substitution, applied to a device containing at least one power module. The RFID-based device for preventing device substitution includes a control board, an RFID reader, and multiple RFID tags. Each RFID tag is fixedly disposed on a power module and stores the identification information of the corresponding power module. The RFID reader is communicatively connected to the control board and is used to read the identification information of the RFID tag according to the instructions of the control board, and upload the reading result to the control board. The control board is used to execute the method described in the first aspect.

[0014] Optionally, the RFID tag is in the form of a sticker, cable tie, screw, or nut, and is installed at the mounting screw position or structural connection of the power module.

[0015] Optionally, the RFID tag is configured to be physically damaged and become unreadable when the power module is disassembled.

[0016] Optionally, the system further includes a detection board; The detection board is electrically connected to the power module and is used to collect the operating parameters of the power module; The control board is communicatively connected to the detection board and is also used to monitor the operating status of the power module according to the operating parameters.

[0017] This invention provides an RFID-based method and apparatus for preventing device substitution. The method includes: before device startup, controlling an RFID reader to read the identification information stored in the RFID tags on each power module within the device, where each RFID tag uniquely identifies its corresponding power module; comparing all read identification information with all pre-stored valid identification information on the control board; if the comparison results show that all read identification information matches all pre-stored valid identification information, then the device starts normally; if the comparison results show that any identification information is mismatched or missing, then the device terminates the startup process. This method automatically compares RFID tag information with pre-stored valid identification information before device startup, ensuring that only original manufacturer modules can be used. This mechanism eliminates the access of uncertified modules at the source, directly eliminating electrical safety hazards caused by module parameter mismatches or quality defects, and ensuring the reliability and lifespan of the device. Simultaneously, mandatory identity verification effectively prevents users from privately replacing modules, thereby maintaining the necessity of original manufacturer after-sales service and protecting brand reputation and market value. Attached Figure Description

[0018] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the following description of the embodiments will be briefly introduced. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0019] Figure 1 A structural block diagram of an RFID-based device anti-substitution device provided in an embodiment of the present invention; Figure 2 This is a flowchart illustrating an RFID-based device anti-substitution method provided in an embodiment of the present invention. Detailed Implementation

[0020] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0021] It should be understood that, when used in this specification and the appended claims, the terms "comprising" and "including" indicate the presence of the described features, integrals, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or collections thereof.

[0022] It should also be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the invention. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0023] It should also be further understood that the term "and / or" as used in this specification and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0024] As used in this specification and the appended claims, the term "if" may be interpreted, depending on the context, as "when," "once," "in response to determination," or "in response to detection." Similarly, the phrase "if determined" or "if [described condition or event] is detected" may be interpreted, depending on the context, as "once determined," "in response to determination," "once [described condition or event] is detected," or "in response to detection of [described condition or event]."

[0025] Please see Figure 1 This invention proposes an RFID-based device for preventing device substitution, applied to a device (e.g., a converter, frequency converter, or inverter) containing at least one power module 100. The RFID-based device for preventing device substitution includes a control board 10, an RFID reader 20, and multiple RFID tags 30. Each RFID tag 30 is fixedly disposed on a power module 100 and stores the identification information of the corresponding power module 100. The RFID reader 20 is communicatively connected to the control board 10 and is used to read the identification information of the RFID tag 30 according to the instructions of the control board 10, and upload the reading result to the control board 10. The control board 10 is used to execute an RFID-based device substitution prevention method proposed in this invention.

[0026] In its implementation, the device consists of three core components: a control board 10, an RFID reader 20, and multiple RFID tags 30. The control board 10 is a printed circuit board integrating a microprocessor, memory, communication interface, and input / output interfaces, serving as the control center of the device. The RFID reader 20 is an independent module containing an RF chip, antenna matching circuit, and communication interface. It connects to the corresponding interface on the control board 10 via a communication cable, establishing a physical connection and communication protocol, for example, through an RS-232 or RS-485 interface. The multiple RFID tags 30 are passive UHF tags, each with a globally unique identification code stored in its chip at the factory. Each power module 100 has one RFID tag 30 fixedly mounted on its housing or heat sink. The fixing methods include, but are not limited to, using a sticker with strong adhesive backing to affix it to the module surface, or using plastic cable ties containing the tag chip to secure it to the module's cable or mounting post. The power module 100 can be used for power conversion, such as converting direct current (DC) to alternating current (AC) and vice versa. The microprocessor within the control board 10 executes a program stored in the memory to implement the method described in any embodiment of the present invention, including sending instructions to drive the RFID reader 20, receiving and processing identification information, executing comparison logic, and outputting control signals and alarm signals.

[0027] In this embodiment of the invention, the control board 10 serves as the intelligent processing center, responsible for logical judgment and system control; the RFID reader 20 serves as a dedicated data collector, responsible for acquiring contactless identity information; and the RFID tag 30 serves as the identity carrier, physically attached to the protected object. These three components form a collaborative system through a clear communication and physical connection. The device has a clear structure and well-defined division of labor, and can be easily integrated into various devices containing the power module 100. By assigning all the steps of the method embodiment to the control board 10 of this device for execution, it is ensured that the device can fully realize the module authentication, result judgment, and device control functions before startup and during operation, thereby effectively preventing and monitoring the replacement of the power module 100 at the physical product level.

[0028] In some preferred embodiments, the RFID tag 30 is in the form of a sticker, cable tie, screw, or nut, and is installed at the mounting screw position or structural connection of the power module 100.

[0029] In specific implementations, the sticker-type RFID tag 30 has its chip and antenna encapsulated within a thin dielectric material, with a strong adhesive coating on the back. The protective film can be peeled off and the tag can be directly attached to the smooth surface of the power module 100's outer casing. The cable tie-type RFID tag 30 has its chip embedded in the head of a plastic cable tie. The tag is secured to the power module 100 by passing the cable tie through the fixing hole and tightening it. The screw-type RFID tag 30 looks identical to a standard screw or bolt, but has a miniature RFID chip embedded in its head or shank. It replaces one of the original mounting screws on the power module 100 and is screwed into the device's mounting threaded hole. Similarly, the nut-type RFID tag 30 has an embedded chip and can be used as a locking nut. These tags are specifically installed at the mounting screw locations of the power module 100, i.e., replacing or adjacent to the screws securing the power module 100; or at structural connections, such as near the gap between the power module 100 and the heat sink, or near the terminals connecting the power module 100 and the busbar. These locations are typically the key points where the power module 100 is physically or electrically connected to the main body of the device.

[0030] This embodiment specifies the form and installation location of the RFID tag 30. Through diverse form designs, the RFID tag 30 can adapt to the physical structure and environmental requirements of different power modules 100, enhancing the applicability and concealment of the solution. More importantly, limiting the installation location of the RFID tag 30 to key mechanical points such as the mounting screw positions or structural connections of the power module 100 creates a strong correlation between the RFID tag 30 and the physical fixation or structural integrity of the power module 100. This installation strategy not only facilitates implementation but also lays the foundation for subsequent implementation of physical tamper-proof features. With the RFID tag 30 located in these key positions, any attempt to disassemble or replace the power module 100 is highly likely to directly affect the RFID tag 30 or its adjacent area, thereby improving the reliability of tamper-proof features from the installation strategy perspective.

[0031] In some preferred embodiments, the RFID tag 30 is installed in such a way that when the power module 100 is disassembled, the RFID tag 30 is physically damaged and becomes unreadable.

[0032] In practice, the mounting structure of the RFID tag 30 is designed to be vulnerable. When it is attached to the head of a mounting screw or the surface in contact with a structural component using a sticker, the substrate or antenna of the sticker-type RFID tag 30 will break due to shearing or peeling forces once the screw is tightened or the structural component is pried, resulting in an open circuit and inability to be read. When it is tied to a critical connection component using a cable tie, disassembling the power module 100 requires cutting or loosening the cable tie, which directly damages the chip or antenna of the RFID tag 30 encapsulated inside the cable tie head. When screws or nuts are used as fasteners, the mechanical stress generated during the process of loosening or removing the screws or nuts using tools such as wrenches will damage the chip or antenna connection of the RFID tag 30 encapsulated inside. Alternatively, the special screws or nuts themselves may be designed for single use, losing their structural and electrical functions after disassembly. Through the above configuration, the physical operation of disassembling the power module 100 becomes the direct cause of the failure of its corresponding RFID tag 30.

[0033] This embodiment constructs a causal relationship, directly linking the physical disassembly action with the failure of the electronic identity carrier, adding an irreversible physical layer of protection to the anti-substitution mechanism. Even if someone attempts to carefully disassemble the original module and hopes to retain the tag for copying or reuse, it is difficult to avoid physical damage to the RFID tag 30 in actual operation. Once the RFID tag 30 is damaged, it cannot be read in subsequent RFID scans, resulting in missing identification information, thereby triggering the control board 10's prohibition of startup or safety shutdown response. This physical anti-tamper design complements and reinforces the electronic authentication logic: the electronic authentication logic prevents the use of unauthenticated modules, while the physical anti-tamper design ensures that the identity carrier of the original power module 100 automatically becomes invalid after disassembly, greatly increasing the difficulty and cost of disassembling and reinstalling the original power module 100 in other devices for reuse or for dissection and analysis, thus more thoroughly achieving the dual purpose of preventing substitution and disassembly.

[0034] In some preferred embodiments, the device further includes a detection board 40; the detection board 40 is electrically connected to the power module 100 and is used to collect the operating parameters of the power module 100; the control board 10 is communicatively connected to the detection board 40 and is also used to monitor the working status of the power module 100 according to the operating parameters.

[0035] In its implementation, the device, in addition to the control board 10, RFID reader 20, and RFID tag 30, further includes a detection board 40. The detection board 40 is an independent circuit board integrating voltage sensors, current sensors, and signal conditioning circuitry. The detection board 40 is electrically connected to the main circuit output or sampling point of the power module 100 via its input terminals to directly measure the module's DC bus voltage, output AC voltage, output current, and other operating parameters. The microcontroller or dedicated chip on the detection board 40 converts these analog signals into digital quantities. The detection board 40 establishes a data connection with the control board 10 through its communication interface, such as an isolated SPI or CAN interface, and periodically sends the collected operating parameter data packets to the control board 10. After receiving this data, the control board 10, in addition to executing RFID authentication logic, also runs additional status monitoring algorithms. For example, the control board 10 can compare the voltage and current values ​​reported by the detection board 40 with preset normal operating ranges to determine whether the module is overvoltage, overcurrent, or has abnormal output, thereby achieving real-time monitoring of the power module 100's operating status.

[0036] This embodiment expands the device's functionality by introducing a detection board 40. Beyond the core function of module identity authentication, it adds real-time monitoring capabilities for the actual operating electrical parameters of the power module 100. This makes the device an integrated monitoring system. The control board 10 comprehensively processes identity information and operating parameters, enabling a more comprehensive assessment of the equipment's status. On one hand, the operating status monitoring can operate independently, promptly detecting electrical faults in the power module 100 itself, such as overload or component aging, improving the predictability of equipment maintenance. On the other hand, the combination of identity authentication and status monitoring provides richer diagnostic information. For example, when an abnormal electrical parameter of a power module 100 is detected, the RFID verification results can be used to clearly distinguish whether the problem is caused by a fault in the original module itself or by the substandard performance of a non-original module, providing precise technical evidence for after-sales service and further enhancing the system's overall value and reliability.

[0037] Please see Figure 2 This invention provides an RFID-based method for preventing device substitution, which includes the following steps: S1, Before the device is started, the RFID reader is controlled to read the identification information stored in the RFID tags set on each power module in the device. The identification information stored in each RFID tag is used to uniquely identify the corresponding power module.

[0038] In practice, after the device is powered on, the control board executes the anti-substitution verification process. The control board sends a communication message containing a read command to the RFID reader via its communication interface, such as a serial port or CAN bus. Upon receiving the command, the RFID reader activates its radio frequency antenna, emitting a specific frequency radio frequency signal inside the device chassis. When an RFID tag within the radio frequency signal's coverage area receives sufficient energy and is activated, it reflects its internally stored identification information, written at the factory (e.g., a 128-bit digital sequence), back to the RFID reader via the radio frequency signal. The RFID reader then packages one or more successfully decoded identification information pieces and sends them back to the control board via the communication interface.

[0039] In some preferred embodiments, the step of controlling the RFID reader to read the identification information stored in the RFID tags set on each power module in the device before the device is started includes: after the device is powered on, the control board enters the initialization phase, and during the initialization phase, the control board sends a trigger command to the RFID reader; the RFID reader responds to the trigger command, performs radio frequency scanning on the inside of the device, and returns all the identification information read.

[0040] In practice, after the device is powered on, the control board powers on and resets, then begins executing the firmware program. The program first enters the hardware and software module initialization phase. During this initialization phase, the system's main control logic has not yet run, and the control board prioritizes performing the anti-substitution verification task. After completing its basic configuration, the control board's CPU immediately constructs a trigger command frame conforming to a predetermined communication protocol and sends it to the RFID reader's receiving port. Upon receiving the trigger command, the RFID reader's microcontroller parses the command content to confirm it as a read command, and then controls its RF chip and antenna circuit to generate and transmit an RF carrier. The RF carrier energy field covers the internal space of the device, exciting RFID tags within its range. The RFID reader receives and demodulates the response signal returned by the tag, temporarily storing the decoded identification information in a buffer. After a complete scan, the RFID reader encapsulates all the identification information in the buffer according to the agreed data format and transmits it back to the control board through its sending port.

[0041] This embodiment clearly defines RFID verification as a critical task that must be completed first during the device's power-on initialization phase. This timing ensures that any unauthorized modules are identified and intercepted before the device enters normal operating mode. This design makes authentication an unavoidable prerequisite for device startup. The control board, as the initiator, sends trigger commands, and the RFID reader, as the controlled party, responds and executes, forming a clear master-slave control relationship that guarantees the controllability and determinism of the reading action. The entire process is completed automatically during the initialization phase without manual intervention, achieving full automation of the verification process. This ensures security without increasing the user's operational complexity, allowing the anti-substitution mechanism to be seamlessly integrated into the device's standard startup procedure.

[0042] S2 compares all the read identification information with all the valid identification information pre-stored in the control board.

[0043] In practice, the control board retrieves a list of identification information for all valid power modules pre-stored at the factory from its non-volatile memory. The control board then compares the received set of identification information with the pre-stored list of valid identification information. This comparison includes checking if the number of elements in the two sets is equal, and checking if every received identification information exists in the pre-stored list of valid identification information.

[0044] In some preferred embodiments, comparing all read identification information with all legal identification information pre-stored in the control board includes: receiving identification information reported by the RFID reader; determining whether the number of identification information reported by the RFID reader is consistent with the number of legal identification information pre-stored in the control board; if the number of identification information reported by the RFID reader is consistent with the number of legal identification information pre-stored in the control board, then determining whether there is a matching legal identification information for each reported identification information, and obtaining a comparison result.

[0045] In practice, the control board performs a two-stage judgment process when comparing the set of RFID reader-reported identification information with the internally stored set of valid identification information. In the first stage, the control board calls a counting function to count the number of reported identification information N_report and the number of pre-stored valid identification information N_preset. The control board compares the values ​​of N_report and N_preset. If they are not equal, for example, N_report is less than N_preset, the comparison is directly judged as a failure, and there is no need to proceed to the second stage. If N_report equals N_preset, the second stage is initiated. In the second stage, the control board sequentially iterates through each identification information ID_x in the reported identification information set. For each ID_x, the control board searches its pre-stored list of valid identification information, performing exact string or numerical matching operations. If a completely identical corresponding item can be found in the pre-stored list for all ID_x, the content is judged as a successful match. If at least one ID_x cannot be found in the pre-stored list, the content is judged as a failure.

[0046] This embodiment significantly improves the accuracy and robustness of identity verification by introducing a dual, step-by-step judgment logic that combines quantity consistency and content matching. First, a quantity comparison is performed to quickly detect obvious anomalies such as missing or added modules. This judgment logic is simple and efficient, allowing for rapid failure determination. Based on quantity consistency, a step-by-step content matching is then performed to ensure that the identity details of each in-place module are verified, preventing fraudulent replacements through copying or forging partial identification information. This hierarchical verification strategy, prioritizing quantity over content, ensures thorough verification while optimizing the processing logic. It allows the control panel to terminate the verification process early upon detecting quantity discrepancies, improving system response efficiency and making the final verification conclusion more reliable, reducing the possibility of false positives.

[0047] In some preferred embodiments, the legal identification information pre-stored inside the control board is obtained by reading the original identification information of the RFID tags on each power module through the RFID reader and burning it into the control board before the device leaves the factory.

[0048] In practice, at the final stage of the equipment production and assembly process, after all original equipment manufacturer (OEM) power modules are installed in the equipment chassis, the legitimate identification information is programmed. The operator uses a production testing tool to send a command to the powered-on control board to enter programming mode. Once in programming mode, the control board drives its connected RFID reader to perform a comprehensive radio frequency scan of the equipment's interior. The RFID reader reads the original identification information of the RFID tags on all installed power modules and uploads this information to the control board. This identification information received by the control board constitutes the legitimate identity set of all OEM power modules in the current configuration. The control board writes this identification information set into a specific address region in its internal non-volatile memory, such as a sector of EEPROM or FLASH, using an array or linked list data structure. After programming, the control board exits programming mode. Subsequently, throughout the equipment's lifecycle, the control board uses this programmed identification information set as a comparison benchmark during each verification process.

[0049] This embodiment specifies a method for generating and solidifying legitimate identification information benchmarks, ensuring the uniqueness and authenticity of the authoritative data source used for comparison within the control board. By using the same RFID reading system on the production line to actually read and burn the information of the assembled modules, the pre-stored information corresponds perfectly with the actual physical assembly state, avoiding errors that may occur during manual input. The read original identification information is directly solidified into the non-volatile memory of the control board, ensuring that the benchmark data is not lost after the equipment loses power and is difficult for end users to tamper with. This process establishes a reliable comparison foundation in the anti-substitution verification logic, giving all subsequent verification actions clear and reliable judgment criteria, guaranteeing the effectiveness and authority of the entire anti-substitution system from the data source.

[0050] S3, if the comparison result indicates that all the identification information read matches all the pre-stored legal identification information one by one, then control the device to start normally.

[0051] In practice, if the comparison results show that all the identification information read matches the pre-stored legal identification information, the control board determines that all power modules are original and have legal identities. Then, it sends a start-up signal to the main power control circuit or logic enable terminal of the device through its control signal output port, and the device enters the normal operation process.

[0052] S4. If the comparison result indicates that any identification information is mismatched or missing, the device is controlled to terminate the startup process.

[0053] In practice, if the comparison results indicate that any identification information is mismatched or missing, such as the number of received identification information is less than the number stored in the pre-stored list, or an identification information is not found in the pre-stored list, the control board will determine that there is an abnormal module identity and maintain or output a signal to prohibit startup, thereby locking the device and preventing it from operating.

[0054] This invention constructs a proactive anti-substitution mechanism by embedding a mandatory authentication step into the device startup process. The core of this method lies in using RFID technology to automatically and non-contactly read the identification information of each power module and compare it with a pre-stored authoritative list within the control board. This process accurately and automatically identifies whether unauthorized non-original power modules are installed in the device, or whether any power modules have been removed and not reinstalled. By directly binding the authentication result to the device startup control permission—allowing startup upon successful authentication and prohibiting startup upon failure—this method fundamentally eliminates the possibility of using uncertified modules. This effectively ensures that the device must use matched and tested original manufacturer power modules, thereby ensuring the electrical safety, operational reliability, and performance consistency of the device from the source, while also maintaining the manufacturer's after-sales service ecosystem and brand reputation.

[0055] In some preferred embodiments, after the control device is prohibited from starting, the method further includes: controlling the device to issue an alarm to indicate that the power module is abnormal or has been illegally replaced.

[0056] In practice, when the control board determines, based on the identification information comparison results, that a power module has an abnormal identity or has been illegally replaced and executes a control operation to prevent the device from starting, the control board simultaneously activates its alarm output function, controlling the device to issue an alarm prompt to indicate that the power module has an abnormal identity or has been illegally replaced. Specifically, the control board sends control commands and status data to the human-machine interface integrated on the front panel of the device through its GPIO pins or a dedicated display driver interface. After receiving the command, the human-machine interface displays a prompt message in text or code form in a specific area of ​​its LCD screen, indicating that the power module verification failed, an illegal module exists, or a module is missing. Alternatively, the control board drives one or more indicator lights corresponding to a specific fault type, such as lighting up a red LED indicator or causing an indicator light to flash at a specific frequency. This indicator light can be installed in a conspicuous position on the device casing. Through visual information, the operator is clearly informed that the root cause of the device's inability to start is the failure of power module identity authentication.

[0057] This embodiment, based on the implementation of start-up prohibition control, adds a clear status indication function. When the device is locked due to module identity issues, it can proactively provide users or maintenance personnel with an intuitive indication of the cause of the fault. This avoids users blindly troubleshooting when the device cannot start, and can quickly pinpoint the problem to the legitimacy of the power module's identity. The issuance of alarm messages guides users to contact authorized after-sales service to resolve the issue, and also serves as a warning and dissuasion against potential replacement attempts. Transmitting status information through a human-machine interface or indicator lights enhances the system's interactivity and maintainability, making the execution results of the anti-substitution mechanism visible to the user, thus improving the overall user experience and professionalism of the system.

[0058] In some preferred embodiments, the method further includes: after the control device starts normally, periodically or in response to a preset event, controlling the RFID reader to read and compare the identification information of each RFID tag in the device again; if the comparison result is abnormal during device operation, controlling the device to perform a safe shutdown operation and record a fault log.

[0059] In practice, after the control board controls the device to start normally and enter the running state, the background monitoring task running within the control board begins to work. This task has two triggering modes: periodic triggering or event triggering. In periodic triggering mode, the timer inside the control board generates an interrupt at preset intervals, triggering the execution of the monitoring task. In event triggering mode, specific system events, such as receiving a remote query command or the device's internal log being full, can serve as triggers. When the monitoring task is triggered, the control board executes a process similar to the pre-start verification: sending a read command to the RFID reader to obtain the identification information of all RFID tags in the current device and comparing it with the pre-stored valid identification information. If the comparison result is normal, only one verification pass log is recorded, and the device continues to run. If the comparison result is abnormal, such as the discovery of missing identification information or the addition of unknown identification information, the control board immediately initiates a safety shutdown procedure. The safety shutdown procedure includes: the control board orderly shutting down the drive signals of the power modules, disconnecting the main circuit contactor, and recording a fault log entry in its non-volatile memory containing the current time and the type of abnormality (such as module loss or module replacement). This invention is not specifically limited to this.

[0060] This embodiment extends authentication from a one-time startup check to continuous operational monitoring, providing dynamic protection against potential hot-swapping or malicious replacement of modules during device operation. Periodic or event-driven repetitive authentication mechanisms can promptly detect unauthorized changes to module states after device startup. Upon detecting an anomaly during operation, a safe shutdown is immediately executed, preventing cascading failures or safety incidents that could result from unauthorized modules continuing to operate in improper conditions. Recording fault logs provides electronic evidence for post-incident analysis and accountability. This design significantly enhances the depth defense capability of the anti-substitution mechanism, enabling it not only to prevent the use of unauthorized modules to start the device but also to deter and prevent unauthorized operations during device operation, achieving full lifecycle and full operational status monitoring and protection of the device's power modules.

[0061] In the above embodiments, the descriptions of each embodiment have different focuses. For parts that are not described in detail in a certain embodiment, please refer to the relevant descriptions in other embodiments.

[0062] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Since these modifications and variations fall within the scope of the claims and their equivalents, this invention also intends to include these modifications and variations.

[0063] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in the present invention, and these modifications or substitutions should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. An RFID-based method of preventing substitution of a device, characterized by, include: Before the device is started, the RFID reader is controlled to read the identification information stored in the RFID tags set on each power module in the device. The identification information stored in each RFID tag is used to uniquely identify the corresponding power module. All the read identification information is compared with all the valid identification information pre-stored in the control board; If the comparison results indicate that all the read identification information matches all the pre-stored legal identification information, then the device is controlled to start normally. If the comparison results indicate that any identification information is mismatched or missing, the device will be controlled to terminate the startup process.

2. The RFID-based device anti-tampering method of claim 1, wherein, The step of comparing all the read identification information with all the valid identification information pre-stored in the control board includes: Receive the identification information reported by the RFID reader; Determine whether the number of identification information reported by the RFID reader is consistent with the number of valid identification information pre-stored in the control board; If the number of identification information reported by the RFID reader is consistent with the number of valid identification information pre-stored in the control board, then it is determined whether there is a matching valid identification information for each reported identification information, and a comparison result is obtained.

3. The RFID-based device anti-tampering method of claim 1, wherein, After the control device is prevented from starting, the method further includes: The device is controlled to issue an alarm to indicate that the power module is abnormal or has been illegally replaced.

4. The RFID-based device anti-tampering method of claim 1, wherein, Before the device is started, controlling the RFID reader to read the identification information stored in the RFID tags set on each power module in the device includes: After the device is powered on, the control board enters the initialization phase, and during the initialization phase, the control board sends a trigger command to the RFID reader; In response to the trigger command, the RFID reader performs a radio frequency scan of the device's interior and returns all the identification information read.

5. The RFID-based device anti-tampering method of claim 1, wherein, The legal identification information pre-stored inside the control board is generated by reading the original identification information of the RFID tags on each power module and burning it into the control board before the equipment leaves the factory using the RFID reader.

6. The RFID-based device anti-tampering method of claim 1, wherein, The method further includes: After the control device starts normally, periodically or in response to a preset event, the RFID reader is controlled to read the identification information of each RFID tag in the device again and compare it. If an anomaly is detected during equipment operation, the equipment will be controlled to perform a safe shutdown and a fault log will be recorded.

7. An RFID-based device anti-substitution apparatus, characterized by, The RFID-based device anti-substitution device, applicable to a device containing at least one power module, includes a control board, an RFID reader, and multiple RFID tags; each RFID tag is fixedly disposed on a power module and stores the identification information of the corresponding power module; the RFID reader is communicatively connected to the control board and is used to read the identification information of the RFID tag according to the instructions of the control board, and upload the reading result to the control board; wherein, the control board is used to perform the method as described in any one of claims 1-6.

8. The RFID-based device anti-substitution apparatus of claim 7, wherein, The RFID tag is in the form of a sticker, cable tie, screw, or nut, and is installed at the mounting screw position or structural connection of the power module.

9. The RFID-based device anti-substitution apparatus of claim 8, wherein, The RFID tag is configured to be physically damaged and become unreadable when the power module is disassembled.

10. The device anti-tampering apparatus of claim 7, wherein, The device anti-substitution device also includes a detection board; The detection board is electrically connected to the power module and is used to collect the operating parameters of the power module; The control board is communicatively connected to the detection board and is also used to monitor the operating status of the power module according to the operating parameters.

Images