A differentiated fusion encryption intelligent key cabinet safety management and control method and system

Abstract

The application discloses a differentiated fusion encryption intelligent key cabinet safety management and control method and system, and relates to the technical field of intelligent key management and information security. The application is based on a vehicle management platform and an intelligent key cabinet integrated architecture, realizes fine-grained authorization adaptation through scene-based dynamic authorization and space-time two-dimensional management and control, adopts a national secret SM4 algorithm to construct a three-level hardware encryption system and a two-way identity authentication mechanism, combines authorized full life cycle closed loop management, encryption abnormal behavior quantitative early warning and MQTT-S special transmission encryption, and realizes key taking full-process safety management and control. The application can effectively solve the problems of existing technology, such as rigid authorization, weak encryption, missing control and the like, improves the authorization flexibility and data security, meets the high safety requirements of multiple scenes such as emergency repair, logistics transportation and special operation, and is suitable for high safety fields of key management of power grids, traffic and logistics.

Description

Technical Field

[0001] This invention relates to the field of intelligent management and information security technology, specifically to a differentiated, integrated, and encrypted intelligent key cabinet security management method and system. Background Technology

[0002] Smart key cabinets are digital key management devices built on IoT, biometrics, and RFID technologies. They overcome the inefficiency and security shortcomings of traditional manual management, and achieve precise control over key access permissions through multiple identity authentication methods such as facial recognition, fingerprints, and IC cards. This enables full traceability of "who takes the key, when they take it, and when they return it," reducing labor costs, optimizing key configuration and usage efficiency, and building a solid security defense for enterprises, transportation, logistics, and other scenarios.

[0003] While existing technologies have enabled the scientific management and tracking of keys, they generally suffer from the following shortcomings: 1. The authorization mechanism is rigid, only supporting fixed permission configurations, and cannot adapt to the needs of different scenarios such as emergency repairs, daily scheduling, and special operations; 2. The encryption level is low, mostly using software encryption or a single encryption method, making data transmission and storage easily tampered with, forged, or hijacked; 3. Lack of end-to-end control, non-closed-loop authorization lifecycle, no proactive warning of abnormal behavior, and security degradation in network outage scenarios, resulting in significant security risks and efficiency losses.

[0004] Therefore, how to design an intelligent management method for key cabinets to achieve refined authorization, hardware encryption, and end-to-end control, applicable to high-security fields such as power grids, transportation, and logistics, has become a technical problem that urgently needs to be solved by people in this field. Summary of the Invention

[0005] To address the shortcomings of existing technologies, this invention provides a differentiated, integrated, and encrypted smart key cabinet security management method and system. Through scenario-based dynamic authorization, spatiotemporal dual-dimensional control, national cryptographic hardware encryption, two-way identity authentication, abnormal behavior early warning, and full lifecycle closed-loop management, it achieves full-link security management of the smart key cabinet from authorization generation, issuance, verification, use to traceability and expiration, thereby improving authorization flexibility, data security, and management compliance.

[0006] To achieve the above objectives, the present invention provides a differentiated fusion encryption smart key cabinet security management method, comprising the following steps: S1. Authorization Mechanism Control: Based on the vehicle management platform, identify work order attributes, generate scenario-based differentiated authorization rules and synchronize them to the smart key cabinet, perform spatiotemporal dual-dimensional authorization verification, and conduct full lifecycle closed-loop management and encrypted ledger synchronization for authorization; S2. Encryption Technology Protection: Construct a three-level hardware encryption architecture of platform-key cabinet-terminal, and use national cryptographic algorithms to achieve data encryption, two-way identity authentication and offline authorization security. S3. End-to-end security linkage: Risks are identified and tiered early warnings and lock-down measures are triggered through an encrypted abnormal behavior analysis model, and a dedicated encrypted communication protocol is used to ensure data transmission security.

[0007] Preferably, the scenario-based differentiated authorization rules in step S1 include: Emergency repair work orders trigger emergency authorization mode, with customizable time redundancy configuration; Daily dispatch work orders adopt an approval chain authorization mode, which generates a unique and non-reusable authorization code based on the three elements of vehicle user ID, approver ID and work order identifier through hash operation using the national cryptographic SM4 algorithm. Special operation work orders are combined with qualification authorization verification. The user's qualification card information is read and compared with the platform's qualification database. The dedicated key compartment is unlocked only when the qualification matches and the authorization is approved.

[0008] Preferably, the spatiotemporal dual-dimensional authorization control in step S1 is as follows: the authorization code is only valid within the specified time period and only effective in the designated smart key cabinet; it supports key retrieval and return in different locations, and cross-cabinet verification is achieved through the extension of the vehicle dispatch order field and the exclusive remote return cabinet authorization.

[0009] Preferably, the authorized full lifecycle closed-loop management in step S1 includes: After authorization is generated, it is encrypted and written into the ledger and sent out via the MQTT-S encryption protocol. The key cabinet decrypts and verifies the status and then returns feedback. After the user retrieves and returns the key, the ledger is updated to show the status as used or completed after the hardware sensor confirms the key retrieval and return. Authorizations expire actively or passively based on conditions such as work order completion, expiration of time limit, qualification expiration, and administrator revocation. All authorization processes are encrypted and traceable, and hierarchical traceability is supported. When the network is offline, the key cabinet locally encrypts and stores operation records. After the network is connected, the data is automatically synchronized and its consistency is verified.

[0010] Preferably, step S2, the hardware-level encryption of the Chinese cryptographic algorithm, is as follows: The platform uses the national cryptographic SM4 algorithm to encrypt core data, and the key cabinet has a built-in national cryptographic security chip with a non-exportable key to complete local decryption and biometric encrypted storage. The user terminal authorization code uses a dynamic QR code and a one-time password mechanism, and expires immediately after use.

[0011] Preferably, the two-way authentication in step S2 includes: Before issuing authorization, the platform performs encrypted signing and timestamp verification with the key cabinet to prevent replay attacks; When the key cabinet uploads logs, it performs encryption and signing. The logs can only be stored after the platform verifies the signature to prevent log tampering. User interaction employs a dual verification process: authorization code encryption and biometric encryption comparison. Unlocking is only permitted after verification by the security chip.

[0012] Preferably, the offline authorization encryption guarantee in step S2 is as follows: When the network is normal, the platform pre-distributes a 24-hour encrypted offline authorization pool to the key cabinet's national cryptographic security chip and sets a time lock. When the network is down, users are authorized to retrieve keys through dual verification of facial recognition and emergency password, and logs are stored locally in encrypted form. Once the network is restored, logs will be automatically encrypted and uploaded, and ledger calibration will be completed.

[0013] Preferably, in step S3, the encrypted abnormal behavior analysis model is used to pre-define an abnormal feature library and calculate abnormal scores according to weights to achieve hierarchical early warning: Emergency work orders are not authorized for use outside of working hours, with a weight of 0.4. If the same authorization code is attempted by ≥3 terminals within 10 minutes, the weight is 0.3; If the same user fails verification ≥ 5 times during the authorization period, the weight is 0.2; If the key retrieval time exceeds the mean plus 2 standard deviations and no device error is reported, the weight is 0.1. An anomaly score ≥ 0.3 is considered abnormal, ≥ 0.6 is considered high risk, 0.3 ≤ Score < 0.6 is considered medium risk, and < 0.3 is considered low risk. High / medium risk triggers alerts, temporary locking of the key cabinet, and video recording, while low risk only records logs.

[0014] Preferably, in step S3, data transmission adopts the MQTT-S encryption protocol, and lightweight transmission is achieved based on TLS1.3 and the national cryptographic suite; data is encrypted in segments and verified segment by segment, and if any link fails, the data packet is discarded and an anomaly is reported; the key cabinet automatically monitors the link status and switches to a backup encrypted channel.

[0015] A system used in a differentiated, fusion-encrypted smart key cabinet security management method includes: The vehicle management platform is used for work order identification, authorization generation, encryption calculation, anomaly analysis, ledger management, and remote control. The smart key cabinet is equipped with a national cryptographic security chip, a biometric module, an IC card / NFC card reader, a pressure sensor and micro switch, a camera and a communication module, which are used for local decryption, identity verification, key position control, log storage and abnormal locking. The user terminal is used to receive dynamic encrypted authorization codes, display authorization information, and receive early warning notifications. The encrypted communication module uses the MQTT-S encryption protocol to achieve secure data transmission and two-way authentication between the platform and the key cabinet. The vehicle management platform includes: Scenario-based authorization units are used to generate three categories of differentiated authorization rules: emergency, routine, and special operations. The spatiotemporal authorization verification unit is used to perform dual authorization boundary control in both time and space. The authorization closed-loop management unit is used for authorization issuance, status synchronization, failure control, and encrypted traceability; The abnormal behavior analysis unit is used to achieve graded early warning and coordinated response to abnormal behavior based on weighted scoring. The smart key cabinet includes: The national cryptographic hardware encryption unit is used for data decryption, encrypted storage of biometric features, and offline authorization pool management. The two-way authentication unit is used for encrypted signature verification and legality verification with the platform and users; The remote key return adaptation unit is used to parse remote cabinet return authorization and complete cross-cabinet key return verification; The network outage fault-tolerant unit is used for local encrypted storage of operation records, which are automatically synchronized and calibrated with the ledger after the network is connected.

[0016] The advantages of this invention compared to the prior art are: 1. The authorization mechanism is highly flexible, adaptable to various operational needs, and significantly improves the efficiency of key retrieval and return. This invention breaks through the limitations of traditional fixed permissions and single authorization models. Based on the urgency of the work order, job type, and vehicle type, it automatically matches three differentiated authorization strategies: emergency repair, daily dispatch, and special operations, achieving "one vehicle, one policy; one order, one authorization." Emergency scenarios can skip the approval process for rapid authorization, significantly shortening the time for emergency repair key retrieval; daily work orders use a unique authorization code to prevent unauthorized use; and special operations incorporate qualification verification to strengthen security access. Simultaneously, it introduces a two-dimensional temporal and spatial control system, with authorization only effective at specified times and in specified key cabinets, and supporting key retrieval and return in different locations. This satisfies both fixed-location management and adapts to fieldwork and cross-regional dispatch needs, maximizing vehicle and key management efficiency while ensuring safety.

[0017] 2. Encryption security level has been comprehensively upgraded to defend against the risks of data leakage, forgery, and tampering at the source. This invention constructs a three-tiered hardware encryption architecture consisting of a vehicle management platform, a smart key cabinet, and a user terminal. It employs the national standard SM4 algorithm throughout, coupled with a national standard security chip, to achieve hardware-level encryption and decryption. The keys are unexportable and unbreakable, preventing key leakage from the ground up. User biometrics are stored as encrypted feature values, without plaintext images, effectively protecting personal information. Terminal authorization uses a dynamic QR code + one-time password mechanism, which expires immediately after use, completely resolving issues such as screenshot reuse, authorization forgery, and brute-force attacks. A two-way authentication mechanism effectively prevents attacks such as commands issued by fake platforms, logs uploaded by fake devices, and identity impersonation by unauthorized users, achieving full-process security protection for transmission, storage, and use, meeting the high-level security and compliance requirements of fields such as power grids, transportation, and logistics.

[0018] 3. Authorized closed-loop management throughout the entire lifecycle, with full traceability of operations, meeting compliance and auditing requirements. This invention achieves a complete closed loop for authorization, from generation and issuance to use, return, expiration, and traceability. Each step is automatically written into an encrypted ledger and its status is synchronized. Key retrieval and return are confirmed by both pressure sensors and microswitches to ensure the authenticity and reliability of the status. Authorizations can be automatically or manually expired based on conditions such as work order completion, expiration date, qualification expiration, and administrator revocation, avoiding residual permissions. All operation data is encrypted and traceable using hash association, supporting multi-dimensional hierarchical queries by personnel, time, work order, key cabinet, etc. The record retention period is configurable, fully meeting the requirements for full-process traceability and auditability for internal control, auditing, and supervision, significantly reducing management liability risks.

[0019] 4. Intelligent identification and tiered early warning of abnormal behavior enable proactive prevention and control of security risks. This invention establishes a quantitative scoring-based encrypted abnormal behavior analysis model, which automatically identifies, weights, scores, and issues tiered warnings for behaviors such as abnormal key retrieval outside of working hours, multiple attempts with the same authorization code on multiple terminals, multiple verification failures, and abnormal key retrieval duration. High / medium risk immediately triggers key cabinet locking, on-site video recording, and real-time administrator alerts, while low risk is automatically recorded and traced, achieving a shift from "passive handling" to "proactive defense." Administrators can remotely issue encrypted unlock or lock commands, with full traceability of operations, enabling rapid response to security incidents such as theft, misuse, and unauthorized access, significantly improving the risk prevention and emergency response capabilities of the key management system.

[0020] 5. Robust offline authorization and network outage fault tolerance mechanisms ensure uninterrupted security and service even in emergency scenarios. For emergency scenarios such as disaster areas, wilderness, and network outages, this invention designs an encrypted offline authorization protection scheme. When the network is normal, a 24-hour authorization pool is pre-distributed to the national cryptographic security chip. Even when the network is down, secure key retrieval can still be completed via face recognition and an emergency password. Operation logs are encrypted and stored locally, and automatically synchronized and verified for consistency after the network is restored, ensuring that key management is uninterrupted and the security level is not reduced during network outages. It also supports automatic switching of transmission links and segmented encrypted verification of data, improving system stability in complex network environments and addressing the pain points of traditional key cabinets that are paralyzed upon network outages and lack offline security.

[0021] 6. The system has a high degree of integration and strong adaptability, enabling large-scale deployment and reducing overall operation and maintenance costs. This invention seamlessly integrates with existing vehicle management platforms and smart key cabinets, requiring no large-scale hardware modifications and enabling rapid deployment in various fields such as power grids, transportation, logistics, and government vehicles. Full-process automated management reduces the workload of manual registration, approval, and verification, lowering labor costs; automatic anomaly warnings reduce the pressure of manual inspections and post-incident investigations; and end-to-end security management reduces potential losses from lost keys, unauthorized use, and information leaks. While improving security and efficiency, it achieves a dual reduction in long-term maintenance costs and management risks. Attached Figure Description

[0022] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0023] Figure 1 This is a schematic diagram of the end-to-end security management method of the present invention; Figure 2 This is a schematic diagram of the encrypted early warning mechanism for abnormal behavior authorized by the present invention. Detailed Implementation

[0024] The embodiments of this application are described in detail below. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain this application, and should not be construed as limiting this application.

[0025] In the description of this application, it should be noted that, unless otherwise expressly specified and limited, the terms "installation," "connection," and "joining" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; they can refer to the internal communication of two components or the interaction between two components. Those skilled in the art can understand the specific meaning of the above terms in this application according to the specific circumstances.

[0026] The present invention will now be described in further detail with reference to the accompanying drawings.

[0027] Combination Figures 1-2 This invention discloses a method for end-to-end security management of smart key cabinets based on differentiated fusion encryption, comprising: S1. Authorization Mechanism Control. Based on the vehicle management platform, the system automatically identifies work order attributes, including urgency, job type, and vehicle type, generates differentiated authorization rules, and synchronizes them to the smart key cabinet in real time. Authorization codes are only valid at specified times and in specified key cabinets. Simultaneously, a dynamic authorization ledger management system is established, with the smart key cabinet synchronizing the ledger status in real time.

[0028] The preferred approach is a scenario-based dynamic authorization strategy. This case study details the strategies for three scenarios: emergency authorization mode, approval chain authorization mode, and qualification authorization verification.

[0029] Furthermore, the emergency repair work order triggers the emergency authorization mode. The authorization effective time = S_start - 2h, and the authorization expiration time = S_start + S_duration + 2h (with 2 hours of redundancy before and after). The time parameters can be customized by the platform administrator. This case allows the team leader to authorize multiple team members to receive the corresponding emergency repair vehicle keys with one click. The authorization permission is bound to the dedicated key slot of the emergency repair vehicle, skipping the regular approval process and shortening the emergency response time.

[0030] Furthermore, daily dispatch work orders utilize an approval chain authorization mode. The algorithm automatically extracts the user ID (User_ID), approver ID (Approver_ID), and work order identifier (WorkOrder_ID), and uses the national cryptographic SM4 algorithm to perform hash calculations on these three elements to generate a unique authorization code (Auth_Code). The authorization code corresponds one-to-one with the three elements and cannot be tampered with or reused. The authorization effective time = S_start - 0.5h, and the authorization expiration time = S_start + S_duration + 30min (with 30 minutes of redundancy before and after to meet the key retrieval and return preparation requirements). After the timeout, the algorithm automatically triggers an authorization expiration command and reclaims the key to unlock permissions.

[0031] Furthermore, special operation work orders are overlaid with qualification authorization verification, and the smart key cabinet integrates an IC card / NFC reader with embedded qualification verification factors. After reading the user's special operation qualification card information, it automatically calls the platform's qualification database to extract the user's special operation qualification information. Qualification information includes qualification number, validity period, and corresponding operation type. Notably, a qualification verification data packet is generated and bound to an authorization code, which is simultaneously sent to the smart key cabinet. The special vehicle's dedicated key compartment is only unlocked when the qualification matches and authorization is successful, strengthening the safety management of special operations.

[0032] The preferred approach is a dual-dimensional authorization control system encompassing both time and space. This introduces both temporal and spatial verification factors to construct multi-dimensional authorization boundaries. In the time dimension, the authorization code is only valid within a specified time period. Outside of this period, even if the correct authorization code is entered, the smart key cabinet will refuse to unlock. Administrators can remotely adjust the authorization validity period through the vehicle management platform, extending or shortening the authorization time. All adjustments are recorded and audited. In the spatial dimension, authorization is limited to specific smart key cabinets.

[0033] Furthermore, for remote key retrieval and return, the user initiates a remote key return request. The vehicle management platform associates the user-input authorization code with a unique dispatch order (return_cabinet) and the remote target key cabinet information (bind_cabinet, bind_door). The platform updates the dispatch order status (return_status) to "Return Key Request in Progress" and performs full-dimensional verification. Only after successful verification will a remote return authorization be generated. After successful verification, the platform generates unique remote key cabinet return authorization information for the dispatch order and updates the dispatch order and key cabinet data. The updated dispatch order return_cabinet contains: target cabinet code / name, assigned cabinet door number, return authorization code, and return validity period.

[0034] Preferably, closed-loop management of the entire authorization lifecycle is implemented. When an authorization is generated, an automatic generation mode or a manual approval mode is automatically triggered based on the work order attribute vector. After the authorization information is generated, it is synchronously written into the encrypted ledger to form the initial authorization record.

[0035] Furthermore, after the authorization data packet is generated, the algorithm initiates the encrypted distribution and ledger linkage process. Using the MQTT-S encrypted communication protocol, the authorization data packet, encrypted with the national standard SM4, is distributed to the smart key cabinet. During the distribution process, a platform digital signature and timestamp are attached and written to the "Distribution Record" field in the ledger. After the smart key cabinet receives the data packet and decrypts and verifies it, it sends a "Receipt Successful" signal, and the algorithm updates the ledger status to "Distributed." If distribution fails (e.g., due to network interruption), the algorithm initiates a 3-retry mechanism. If the retry fails, the ledger status is marked as "Distribution Abnormal," an alert is pushed to the administrator, and the offline authorization pool activation logic is triggered (for emergency scenarios).

[0036] Furthermore, upon authorization and successful user verification and key retrieval, the smart key cabinet sends a "key retrieval successful" signal, and the algorithm updates the ledger status to "used." It supplements the record with information such as the key retriever ID, retrieval time, and key location code, and simultaneously triggers an authorization expiration countdown (automatic warning for key not returned within the timeout period). After the user returns the key, the smart key cabinet double-confirms key return, sends a "key return successful" signal, and the algorithm updates the ledger status to "completed." It records the key return time; simultaneously, the smart key cabinet immediately clears the corresponding authorization cache (including authorization code and qualification verification data) locally to prevent secondary use, and the key return information is synchronously encrypted and uploaded to the platform ledger.

[0037] Furthermore, authorization expires. Upon completion, cancellation, or key return by the user, the algorithm automatically triggers a proactive expiration command, revoking authorization permissions and marking it as "Proactive Expiration" in the ledger. The expiration trigger reason is associated (e.g., "Work Order Completed," "User Returns Key"). Administrators can remotely initiate abnormal authorization revocation via the platform (e.g., authorization abuse detected, work order changes). Upon receiving the command, the algorithm immediately updates the ledger status to "Proactive Revocation," simultaneously issuing an authorization expiration command to the smart key cabinet, locking the corresponding key slot, and recording the revoking person, revocation time, and reason. When authorization expires, authorization code usage is exhausted (for daily scheduling work orders, it's valid only once), or qualification expires (for special operation work orders), the algorithm automatically triggers passive expiration, marking it as "Passive Expiration" in the ledger. The expiration factor is associated (e.g., "Expiration Date," "Qualification Expired"). After passive expiration, the smart key cabinet immediately rejects all operations corresponding to that authorization and simultaneously uploads the expiration record to the platform ledger.

[0038] Furthermore, authorization traceability is enhanced. The algorithm constructs a multi-dimensional traceability index, and all data at each authorization stage is encrypted and traceable, supporting hierarchical queries based on permissions to meet compliance audit requirements. Each authorization ledger record employs a "multi-field hash association" mechanism, linking core information such as the authorizing person's ID, the authorized person's ID, the work order number, the key cabinet number, the operation time, the encrypted authorization code digest, the verification result, and the reason for failure, forming an immutable traceability chain. Records are retained for ≥90 days (customizable).

[0039] Furthermore, the algorithm configures query permissions based on user roles. Administrators can query all traceability records, while ordinary users can only query their own associated authorized records. The query process uses the national cryptographic SM4 algorithm for identity authentication, and the query log is synchronously written to the ledger, recording the queryer, query time, and query content, thus enabling traceability of traceability behavior.

[0040] S2. Encryption Technology Protection. A three-tier hardware encryption architecture is constructed, consisting of a vehicle management platform, a smart key cabinet, and a user terminal. The national standard SM4 algorithm is used. The platform encrypts core data before sending it to the smart key cabinet, where a built-in national standard security chip decrypts the encrypted data locally. The authorization code received by the terminal uses a dynamic QR code and a one-time key mechanism to prevent forgery and leakage.

[0041] Preferably, hardware-level encryption using the national cryptographic algorithm is employed. The entire process utilizes the national cryptographic algorithm SM4. Employing SM4 algorithm CBC mode, the session key derived from the server's root key is used as the encryption key to encrypt the plaintext data block, generating ciphertext data (Cipher_Data). Simultaneously, a hash operation (SM3 algorithm) is performed on the timestamp and server identifier to generate a data integrity check value (Check_Value). After successful signature verification, the security chip uses its built-in, non-exportable working key to decrypt the ciphertext data in SM4-CBC mode, restoring the plaintext data block. Simultaneously, the extracted check value is compared with the locally recalculated hash value to ensure that the data transmission process has not been tampered with.

[0042] Preferably, two-way identity authentication encryption is used. Before the platform sends authorization data to the smart key cabinet, it first sends an encrypted authentication command. The smart key cabinet decrypts the command through the security chip and returns an authentication response. The platform only sends the authorization data after verifying the authentication. When the smart key cabinet uploads operation logs to the platform, it encrypts and signs the log data. The platform only receives and stores the logs after verifying the validity of the signature.

[0043] Furthermore, two-way authentication is performed before authorized data is distributed. The platform's encryption server signs the "authentication command, timestamp, and key cabinet unique identifier" using its own SM2 private key, then encrypts the signed data using the SM4 algorithm to generate an encrypted authentication packet, which is then distributed to the corresponding key cabinet. After receiving the packet, the key cabinet's security chip first decrypts it using the SM4 working key, then uses the pre-stored platform SM2 public key to verify the signature validity, and simultaneously verifies the timestamp. The example setting is an error of ≤30 seconds to prevent replay attacks.

[0044] Furthermore, the operation log upload involves two-way authentication. The key cabinet's security chip first encrypts the operation log (key retrieval and return time, user ID, and verification result) using the SM4 algorithm, then calculates the log hash value using the SM3 algorithm, and signs the hash value using its own SM2 private key, forming a data packet containing "encrypted log, signature, and timestamp". After receiving the packet, the platform first verifies the signature validity using the key cabinet's SM2 public key, then recalculates the hash value using the SM3 algorithm for comparison to confirm that the log has not been tampered with; finally, it decrypts the encrypted log using the SM4 working key. If the verification is successful, the data is stored in the encrypted database; otherwise, the data is discarded and an alert is triggered.

[0045] Preferably, offline authorization is encrypted. An encrypted offline authorization scheme is designed for emergency scenarios such as network outages and disaster areas, balancing security and availability. When the network is normal, the platform pre-issues an encrypted offline authorization pool to the smart key cabinet, containing potential emergency work order authorizations for the next 24 hours. The authorization pool data is stored in a national cryptographic security chip and is time-locked, activating only within a specified period. When the network is interrupted, the smart key cabinet decrypts the offline authorization pool data through the security chip. Users can retrieve the key after dual verification using facial recognition and an emergency password. Operation logs are encrypted and stored locally. After the network is restored, the smart key cabinet automatically uploads the encrypted offline operation logs to the platform. The platform verifies the integrity and authenticity of the logs and updates the ledger, ensuring uninterrupted key management and no security degradation during network outages.

[0046] S3. End-to-End Security Linkage. The platform deploys an encrypted abnormal behavior analysis model to encrypt and parse authorization credentials, usage logs, and device interaction data in real time. It includes a standardized abnormal feature library, covering risk rules such as: emergency authorization during off-peak hours, multiple attempts with the same authorization code on multiple terminals, multiple failed key retrievals within the authorization period, and single key retrieval duration exceeding normal limits. When the model identifies behavior matching abnormal features in real time, the system pushes tiered warning information to the administrator terminal through an encrypted channel; simultaneously, it issues a linkage control command to the smart key cabinet, which immediately performs a local temporary lock, triggering the on-site camera to start real-time video capture. The video stream and device status data are encrypted and synchronously stored in the local secure partition and the platform's cloud database. After verifying the abnormal event, the administrator can remotely issue temporary unlock or permanent lock operations via the management platform using encrypted commands. All command transmissions, device responses, video recordings, and administrator operations form an immutable audit log, ensuring full traceability. Furthermore, the encrypted abnormal behavior analysis model quantifies abnormal behavior into computable rule-based features, with each feature configured with "judgment rules, thresholds, and weights" to form a structured feature library.

[0047] 1) Emergency authorization during non-working hours: The key retrieval time (operate_time) is not within the time period configured in the system (work_time_section). In this case, it is 9:00-18:00 and there is no emergency work order associated with it. The weight is 0.4. 2) Multiple terminal attempts with the same authorization code: The same Auth_Code is associated with ≥3 different Terminal_IDs, and the time interval between attempts is ≤10 minutes, with a weight of 0.3; 3) Multiple key retrieval failures within the authorization period: For the same User_ID, if the cumulative number of Verify_Result failures within Auth_Time_Range is ≥5, the weight is 0.2; 4) Single key retrieval time exceeds the normal range: Use_Duration > (average historical key retrieval time + 2 times standard deviation), no key cabinet error record, weight 0.1; The anomaly score is obtained by summing the triggered features according to their weights. Score = Set the grading threshold: High risk: Score ≥ 0.6; Medium risk: 0.3 ≤ Score < 0.6; Low risk: Score < 0.3 Anomaly detection: A score ≥ 0.3 is considered abnormal behavior. High / medium risk triggers the handling process immediately, generating an alert via SMS / vehicle management platform pop-up. Low risk only logs the anomaly.

[0048] Preferably, the data transmission encryption channel is optimized. The platform and the smart key cabinet use the dedicated MQTT-S encrypted communication protocol, replacing the traditional HTTP protocol. Based on TLS 1.3 and national cryptographic suites, lightweight encrypted transmission is achieved, reducing bandwidth consumption while improving security. Transmitted data employs a segmented encryption and verification mechanism, splitting data packets into multiple fragments. The sender fragments the original data packet into several independent data segments of fixed length; each segment is then encrypted using a symmetric encryption algorithm to generate an independent verification code. The receiver receives the data segment by segment in sequence (fragment_id), first verifying the validity of the verification code for each segment. If the verification passes, the segment is decrypted and cached. After all segment verifications pass, they are reassembled into a complete business data packet according to their sequence numbers. If any verification fails, it is determined that the data has been tampered with or hijacked, and the data packet is immediately discarded and a transmission anomaly event is reported.

[0049] Finally, any parts of this invention not described herein utilize existing mature products and technologies.

[0050] The present invention and its embodiments have been described above. This description is not restrictive, and the accompanying drawings are only one embodiment of the present invention; the actual structure is not limited thereto. In conclusion, if those skilled in the art are inspired by this description and design similar structures and embodiments without departing from the spirit of the invention, such designs should fall within the protection scope of the present invention.

Claims

1. A differentiated, integrated, and encrypted smart key cabinet security management method, characterized in that, Includes the following steps: S1. Authorization Mechanism Control: Based on the vehicle management platform, identify work order attributes, generate scenario-based differentiated authorization rules and synchronize them to the smart key cabinet, perform spatiotemporal dual-dimensional authorization verification, and conduct full lifecycle closed-loop management and encrypted ledger synchronization for authorization; S2. Encryption Technology Protection: Construct a three-level hardware encryption architecture of platform-key cabinet-terminal, and use national cryptographic algorithms to achieve data encryption, two-way identity authentication and offline authorization security. S3. End-to-end security linkage: Risks are identified and tiered early warnings and lock-down measures are triggered through an encrypted abnormal behavior analysis model, and a dedicated encrypted communication protocol is used to ensure data transmission security.

2. The method for security management of a smart key cabinet with differentiated fusion encryption according to claim 1, characterized in that: The scenario-based differentiated authorization rules mentioned in step S1 include: Emergency repair work orders trigger emergency authorization mode, with customizable time redundancy configuration; Daily dispatch work orders adopt an approval chain authorization mode, which generates a unique and non-reusable authorization code based on the three elements of vehicle user ID, approver ID and work order identifier through hash operation using the national cryptographic SM4 algorithm. Special operation work orders are combined with qualification authorization verification. The user's qualification card information is read and compared with the platform's qualification database. The dedicated key compartment is unlocked only when the qualification matches and the authorization is approved.

3. The method for security management of a smart key cabinet with differentiated fusion encryption according to claim 1, characterized in that: The spatiotemporal dual-dimensional authorization control mentioned in step S1 is as follows: the authorization code is only valid within a specified time period and only effective in the designated smart key cabinet; it supports key retrieval and return in different locations, and cross-cabinet verification is achieved through the extension of the vehicle dispatch order field and the exclusive remote return cabinet authorization.

4. The method for security management of a smart key cabinet with differentiated fusion encryption according to claim 1, characterized in that: The authorization process described in step S1, which involves closed-loop management throughout its entire lifecycle, includes: After authorization is generated, it is encrypted and written into the ledger and sent out via the MQTT-S encryption protocol. The key cabinet decrypts and verifies the status and then returns feedback. After the user retrieves and returns the key, the ledger is updated to show the status as used or completed after the hardware sensor confirms the key retrieval and return. Authorizations expire actively or passively based on conditions such as work order completion, expiration of time limit, qualification expiration, or administrator revocation. All authorization processes are encrypted and traceable, and hierarchical traceability is supported. When the network is offline, the key cabinet locally encrypts and stores operation records. After the network is connected, the data is automatically synchronized and its consistency is verified.

5. The method for security management of a smart key cabinet with differentiated fusion encryption according to claim 1, characterized in that: The hardware-level encryption of the national cryptographic algorithm mentioned in step S2 is as follows: The platform uses the national cryptographic SM4 algorithm to encrypt core data, and the key cabinet has a built-in national cryptographic security chip with a non-exportable key to complete local decryption and biometric encrypted storage. The user terminal authorization code uses a dynamic QR code and a one-time password mechanism, and expires immediately after use.

6. The method for security management of a smart key cabinet with differentiated fusion encryption according to claim 1, characterized in that: The two-way authentication mentioned in step S2 includes: Before issuing authorization, the platform performs encrypted signing and timestamp verification with the key cabinet to prevent replay attacks; When the key cabinet uploads logs, it performs encryption and signing. The logs can only be stored after the platform verifies the signature to prevent log tampering. User interaction employs a dual verification process: authorization code encryption and biometric encryption comparison. Unlocking is only permitted after verification by the security chip.

7. The method for security management of a smart key cabinet with differentiated fusion encryption according to claim 1, characterized in that: The offline authorization encryption guarantee mentioned in step S2 is as follows: When the network is normal, the platform pre-distributes a 24-hour encrypted offline authorization pool to the key cabinet's national cryptographic security chip and sets a time lock. When the network is down, users are authorized to retrieve keys through dual verification of facial recognition and emergency password, and logs are stored locally in encrypted form. Once the network is restored, logs will be automatically encrypted and uploaded, and ledger calibration will be completed.

8. The method for security management of a smart key cabinet with differentiated fusion encryption according to claim 1, characterized in that: The encrypted abnormal behavior analysis model described in step S3 uses a pre-set abnormal feature library and calculates abnormal scores according to weights to achieve hierarchical early warning: Emergency work orders are not authorized for use outside of working hours, with a weight of 0.

4. If the same authorization code is attempted by ≥3 terminals within 10 minutes, the weight is 0.3; If the same user fails verification ≥ 5 times during the authorization period, the weight is 0.2; If the key retrieval time exceeds the mean plus 2 standard deviations and no device error is reported, the weight is 0.

1. An anomaly score ≥ 0.3 is considered abnormal, ≥ 0.6 is considered high risk, 0.3 ≤ Score < 0.6 is considered medium risk, and < 0.3 is considered low risk. High / medium risk triggers alerts, temporary locking of the key cabinet, and video recording, while low risk only records logs.

9. The method for security management of a smart key cabinet with differentiated fusion encryption according to claim 1, characterized in that: The data transmission in step S3 adopts the MQTT-S encryption protocol and achieves lightweight transmission based on TLS1.3 and the national cryptographic suite; the data is encrypted in segments and verified segment by segment. If any link fails, the data packet is discarded and an anomaly is reported; the key cabinet automatically monitors the link status and switches to the backup encryption channel.

10. A system used in the end-to-end security management method for smart key cabinets based on differentiated fusion encryption as described in claim 1, for executing the method described in any one of claims 1-9, characterized in that, include: The vehicle management platform is used for work order identification, authorization generation, encryption calculation, anomaly analysis, ledger management, and remote control. The smart key cabinet is equipped with a national cryptographic security chip, a biometric module, an IC card / NFC card reader, a pressure sensor and micro switch, a camera and a communication module, which are used for local decryption, identity verification, key position control, log storage and abnormal locking. The user terminal is used to receive dynamic encrypted authorization codes, display authorization information, and receive early warning notifications. The encrypted communication module uses the MQTT-S encryption protocol to achieve secure data transmission and two-way authentication between the platform and the key cabinet. The vehicle management platform includes: Scenario-based authorization units are used to generate three categories of differentiated authorization rules: emergency, routine, and special operations. The spatiotemporal authorization verification unit is used to perform dual authorization boundary control in both time and space. The authorization closed-loop management unit is used for authorization issuance, status synchronization, failure control, and encrypted traceability; The abnormal behavior analysis unit is used to achieve graded early warning and coordinated response to abnormal behavior based on weighted scoring. The smart key cabinet includes: The national cryptographic hardware encryption unit is used for data decryption, encrypted storage of biometric features, and offline authorization pool management. The two-way authentication unit is used for encrypted signature verification and legality verification with the platform and users; The remote key return adaptation unit is used to parse remote cabinet return authorization and complete cross-cabinet key return verification; The network outage fault-tolerant unit is used for local encrypted storage of operation records, which are automatically synchronized and calibrated with the ledger after the network is connected.

Images