Device state detection method, electronic device and computer-readable storage medium

Abstract

The present application belongs to the technical field of security of communication devices. Disclosed are a device state detection method, an electronic device and a computer-readable storage medium. The method in the present application comprises: when a radio-frequency unit is powered on or reset to start, sending first information to a base band unit, wherein the first information comprises notification information for indicating that the radio-frequency unit has an anti-theft capability; after first verification information which is returned by the base band unit in response to the first information is received, performing authentication on the first verification information; and when the authentication fails, determining that the radio-frequency unit is in a stolen state.

Description

Device status detection method, electronic device, and computer-readable storage medium

[0001] Related applications

[0002] This application claims priority to Chinese patent application No. 202310757648.2 filed on June 26, 2023, the entire contents of which are incorporated by reference into this application. Technical Field

[0003] The present application relates to the field of communication device security technology, and in particular to a device status detection method, an electronic device, and a computer-readable storage medium. Background Art

[0004] Traditional base station equipment mostly adopts a distributed architecture consisting of a BBU (Building Base Band Unit) and an RRU (Remote Radio Unit). The BBU is deployed in a centralized equipment room or a separate cabinet, while the RRU is placed outdoors on a tower or rack. RRUs face a greater theft risk than BBUs. RRU theft can cause asset losses for operators and, if resold to regulated countries, can also pose compliance and export control risks for operators and equipment vendors.

[0005] Communications-related anti-theft technologies primarily focus on mobile phone and car anti-theft. Base station-related anti-theft technologies primarily rely on physical security measures, with software-based solutions rarely used. As the international political landscape becomes increasingly complex, the compliance and export control risks faced by operators and equipment manufacturers are intensifying. Therefore, how to accurately determine the device status of network devices (i.e., identify whether a network device has been stolen) through software, thereby facilitating the switching of operating states based on the device status, thereby curbing theft and reducing compliance and export control risks for operators and equipment manufacturers, has become a pressing issue.

[0006] Summary of the Invention

[0007] The main purpose of this application is to provide a device status detection method, an electronic device and a computer-readable storage medium, aiming to solve the technical problem of how to accurately identify whether a network device has been stolen through software means.

[0008] To achieve the above-mentioned purpose, the present application provides a device status detection method, which is applied to a radio frequency unit. The method includes: sending first information to a baseband unit when the radio frequency unit is powered on or reset, wherein the first information includes notification information that the radio frequency unit has anti-theft capabilities; after receiving first verification information returned by the baseband unit in response to the first information, authenticating the first verification information; and if the authentication fails, determining that the radio frequency unit is in a stolen state.

[0009] In addition, to achieve the above-mentioned purpose, the present application also provides an electronic device, which includes: a memory, a processor, and a device status detection program stored in the memory and runnable on the processor, and when the device status detection program is executed by the processor, it implements the device status detection method as described above.

[0010] To achieve the above-mentioned purpose, the present application provides a device status detection method, which is applied to a baseband unit. The method includes: receiving first information sent by a radio frequency unit, the first information including notification information that the radio frequency unit has anti-theft capabilities, and third verification information; authenticating the third verification information; and if the authentication fails, determining that the radio frequency unit is in a stolen state.

[0011] In addition, to achieve the above-mentioned purpose, the present application also provides an electronic device, which includes: a memory, a processor, and a device status detection program stored in the memory and runnable on the processor, and when the device status detection program is executed by the processor, it implements the device status detection method as described above.

[0012] In addition, to achieve the above-mentioned purpose, the present application also provides a computer-readable storage medium, on which a device status detection program is stored. When the device status detection program is executed by a processor, the device status detection method as described above is implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying any creative work.

[0014] FIG1 is a flow chart of a first embodiment of a device status detection method of the present application;

[0015] FIG2 is a flow chart of a second embodiment of the device status detection method of the present application;

[0016] FIG3 is a block diagram of an RRU anti-theft verification according to an embodiment of the present application;

[0017] FIG4 is a timing diagram of an RRU writing an anti-theft code according to an embodiment of the present application;

[0018] FIG5 is a schematic diagram of a process for an RRU to successfully verify an anti-theft code according to an embodiment of the present application;

[0019] FIG6 is a schematic diagram of a process of an RRU verifying an anti-theft code without a response according to an embodiment of the present application;

[0020] FIG7 is a schematic diagram of a process for checking an inconsistency of an anti-theft code in an RRU according to an embodiment of the present application;

[0021] FIG8 is a schematic diagram of a process for RRU to verify that the anti-theft code is consistent with another embodiment of the present application;

[0022] FIG9 is a schematic diagram of a process for checking an inconsistency of an anti-theft code in an RRU according to another embodiment of the present application;

[0023] FIG10 is a schematic diagram of the hardware structure of the electronic device involved in the embodiment of the present application.

[0024] The realization of the objectives, functional features and advantages of this application will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0025] It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application.

[0026] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments of this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0027] It should be noted that all directional indications in the embodiments of the present application (such as up, down, left, right, front, back, etc.) are only used to explain the relative position relationship, movement status, etc. between the various components under a certain specific posture (as shown in the accompanying drawings). If the specific posture changes, the directional indication will also change accordingly.

[0028] In this application, unless otherwise specified or limited, the terms "connection" and "fixation" should be understood in a broad sense. For example, "fixation" can mean fixed connection, detachable connection, or integration; mechanical connection or electrical connection; direct connection or indirect connection through an intermediate medium; internal communication between two elements or interaction between two elements, unless otherwise specified. For those skilled in the art, the specific meanings of the above terms in this application can be understood according to specific circumstances.

[0029] In addition, the descriptions of "first", "second", etc. in this application are for descriptive purposes only and should not be understood as indicating or implying their relative importance or implicitly indicating the number of the technical features indicated. Therefore, the features defined as "first" or "second" may explicitly or implicitly include at least one of such features. In addition, the technical solutions between the various embodiments can be combined with each other, but this must be based on the fact that they can be implemented by ordinary technicians in this field. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such combination of technical solutions does not exist and is not within the scope of protection required by this application.

[0030] Currently, communications-related anti-theft technologies primarily focus on mobile phone and car anti-theft. Base station-related anti-theft technologies primarily rely on physical security measures, with software-based solutions rarely used. As the international political landscape becomes increasingly complex, the compliance and export control risks faced by operators and equipment manufacturers are increasing. Therefore, how to accurately determine the device status of network devices (i.e., identify whether a network device has been stolen) through software, thereby facilitating the switching of operating states based on the device status, thereby curbing network device theft and reducing compliance and export control risks for operators and equipment manufacturers, has become a pressing issue.

[0031] Based on this, an embodiment of the present application provides a device status detection method, with reference to Figure 1, which is a flow chart of an embodiment of the device status detection method of the present application. In this embodiment, the device status detection method is applied to a radio frequency unit, and the method includes the following steps.

[0032] Step S10: When the radio frequency unit is powered on or reset, first information is sent to the baseband unit, wherein the first information includes notification information that the radio frequency unit has an anti-theft capability.

[0033] In this embodiment, the radio frequency unit may be an RRU (Remote Radio Unit) or an AAU (Active Antenna Unit) that integrates an RRU and an antenna unit. The baseband unit may be a BBU (Building Base Band Unit) or a BTS (Base Transceiver Station) composed of a CU (Centralized Unit) and a DU (Distributed Unit) architecture, but this embodiment does not limit this.

[0034] In this embodiment, the radio frequency unit sends a first message to the connected baseband unit after each startup, wherein the first message includes notification information that the radio frequency unit has anti-theft capability, so that the baseband unit sends a first verification information for authentication verification to the radio frequency unit in response to the first information.

[0035] Step S20: After receiving the first verification information returned by the baseband unit in response to the first information, authenticate the first verification information.

[0036] In this embodiment, after receiving the first information, the baseband unit generates first verification information according to the first information, and sends the first verification information to the radio frequency unit, so that the radio frequency unit performs authentication verification based on the first verification information.

[0037] Step S30: If the authentication fails, it is determined that the radio frequency unit is in a stolen state.

[0038] Exemplarily, the method further includes: step A10, after determining that the radio frequency unit is in a stolen state, locking the service function of the radio frequency unit or controlling the radio frequency unit to reset.

[0039] In this embodiment, after determining that the RF unit is in a stolen state, the business service function of the RF unit is locked or the RF unit is controlled to be reset, thereby limiting the normal operation of the RF unit, effectively protecting the RF unit device from theft, and making it impossible for a network established using the stolen network device to work normally, thereby suppressing the purchase of stolen RF unit devices and further suppressing the theft of network devices.

[0040] The technical solution of the embodiment of the present application is to send a first message to the baseband unit when the radio frequency unit is powered on or reset, wherein the first message includes notification information that the radio frequency unit has anti-theft capabilities. After receiving the first verification information returned by the baseband unit in response to the first message, the first verification information is authenticated. If the authentication fails, it is determined that the radio frequency unit is in a stolen state, thereby accurately identifying the current device status of the network device (i.e., identifying whether the network device has been stolen) through software means, facilitating the subsequent conversion of its working state according to the device status of the network device to suppress the theft of the network device. For example, when it is identified that the current device status of the radio frequency unit is a stolen state, the business service function of the radio frequency unit is locked, thereby restricting the use of the radio frequency unit device by illegal personnel, solving the technical problem of how to accurately identify whether the network device has been stolen through software means, thereby effectively suppressing the theft of network equipment and reducing the compliance or export control risks of operators and equipment manufacturers.

[0041] In one practicable manner, in step S20, the step of authenticating the first verification information includes: step B10, obtaining second verification information locally stored by the radio frequency unit; step B20, determining that the authentication is successful when it is detected that the first verification information is consistent with the second verification information; step B30, determining that the authentication fails when it is detected that the first verification information is inconsistent with the second verification information.

[0042] The first verification information and the second verification information may be in the form of an anti-theft code, and the second verification information may be stored in a non-volatile storage medium of the radio frequency unit.

[0043] In this embodiment, the device status of the RF unit can be determined based on the authentication result. If the authentication result is successful, the device status of the RF unit is determined to be non-stolen, and the RF unit is controlled to operate normally. If the authentication result is unsuccessful, the device status of the RF unit is determined to be stolen, and the stolen state operation policy is implemented to restrict the normal operation of the RF unit.

[0044] This embodiment obtains second verification information locally stored in the radio frequency unit, and determines that authentication is successful when the first verification information and the second verification information are detected to be consistent. If the first verification information and the second verification information are detected to be inconsistent, it is determined that authentication has failed. In the case of authentication failure, it is determined that the radio frequency unit is in a stolen state, thereby achieving accurate identification of the current device state of the network device through software means, facilitating subsequent conversion of the working state of the network device according to the device state, thereby suppressing network device theft.

[0045] In another practicable manner, the first verification information includes a first digital signature. In step S20, the step of authenticating the first verification information includes: step C10, the RF unit decrypts the first digital signature according to the first public key; step C20, if the RF unit fails to decrypt the first digital signature, determining that the authentication has failed, wherein the first public key is stored in a non-volatile storage medium of the RF unit; step C30, if the RF unit successfully decrypts the first digital signature, determining that the authentication has succeeded.

[0046] The first digital signature is obtained by the baseband unit performing an operation on the first plaintext based on a first hash algorithm to obtain a first digest corresponding to the first plaintext, and then encrypting the first digest.

[0047] In an embodiment of the present application, the RF unit stores a first public key. Each time the RF unit is started, it uses the first public key to encrypt the third plaintext to obtain a first ciphertext, and then transmits the first ciphertext to the connected baseband unit within the first message. The third plaintext may be a random number generated by the baseband unit according to a preset first random number generation algorithm; the third plaintext may also be a string pre-set by the baseband unit, such as the electronic serial number (ESN) of the baseband unit. The embodiment of the present application does not specifically limit the form of the third plaintext.

[0048] The first public key is generated by a key server using an asymmetric key algorithm. The key generated by the key server using an asymmetric encryption algorithm includes a first private key and a first public key. The first public key is loaded into the non-volatile storage medium of the radio frequency unit, and the first private key is loaded into the non-volatile storage medium of the baseband unit. The non-volatile storage medium is a storage medium in which stored data will not be lost after power failure, such as a read-only memory (ROM), a flash memory, etc. This prevents the radio frequency unit or the connected baseband unit from losing the authentication function and thus losing the function of suppressing theft after restart. The asymmetric encryption algorithm can be any one of the RSA algorithm, the backpack algorithm, the Elgamal algorithm, or the ECC algorithm, and the embodiments of the present application do not impose specific restrictions.

[0049] In an embodiment of the present application, the device status of the radio frequency unit includes a stolen state and a non-stolen state. If the radio frequency unit cannot correctly decrypt the first digital signature when decrypting the first digital signature according to the first public key, it means that the key used by the baseband unit to encrypt the first digest is not the first private key corresponding to the first public key, the authentication result is authentication failure, the radio frequency unit determines that the first private key is not loaded in the connected baseband unit that sends the first digital signature, the baseband unit is not the target baseband unit authorized by the legitimate user, and the radio frequency unit is determined to be in a stolen state.

[0050] If the radio frequency unit can correctly decrypt the first digital signature to obtain the first digest corresponding to the first plaintext when decrypting the first digital signature according to the first public key, it means that the key used by the baseband unit to encrypt the first digest is the same as the first private key corresponding to the first public key. The baseband unit may be a target baseband unit authorized by a legitimate user, and the radio frequency unit needs to further verify the first digest.

[0051] The first verification information also includes a second plaintext.

[0052] In step D10, if the radio frequency unit successfully decrypts the first digital signature to obtain a first digest, the second plaintext is operated based on a preset second hash algorithm to obtain a second digest corresponding to the second plaintext; in step D20, if the second digest is different from the first digest, it is determined that the authentication has failed; in step D30, if the second digest is the same as the first digest, it is determined that the authentication has succeeded.

[0053] In this embodiment, if the second digest is identical to the first digest, it is determined that the authentication is successful, and furthermore, it is determined that the RF unit is in a non-stolen state.

[0054] The RF unit obtains a second plaintext based on the first verification information, performs a calculation on the second plaintext according to a second hash algorithm, and obtains a second digest corresponding to the second plaintext. The RF unit compares the second digest with the first digest. If the second digest is different from the first digest, it means that the second plaintext is different from the first plaintext and / or the second hash algorithm is different from the first hash algorithm. The authentication result is an authentication failure. The RF device determines that it is not connected to the target baseband unit authorized by the legitimate user, and the RF unit is in a stolen state. The second hash algorithm is a hash algorithm predetermined by the RF unit and the target baseband unit. When the RF unit and the target baseband unit need to calculate the plaintext information to obtain the summary information, they both use the second hash algorithm.

[0055] If the second digest is the same as the first digest, it indicates that the second plaintext is the same as the first plaintext, the second hash algorithm is the same as the first hash algorithm, and the authentication result is successful authentication. At this time, the radio frequency unit determines that the connected radio frequency unit is a target baseband unit authorized by a legitimate user, and the radio frequency unit is in a non-stolen state.

[0056] The first information includes a first ciphertext, where the first ciphertext is obtained by encrypting the third plaintext by the radio frequency unit according to the first public key.

[0057] In this embodiment, the third plaintext may be a random number generated by the radio frequency unit according to a preset first random number generation algorithm, or the third plaintext may be a character string preset by the radio frequency unit.

[0058] The baseband unit generates first verification information according to the first information and returns the first verification information to the radio frequency unit, including the following steps.

[0059] In step E10, the baseband unit decrypts the first ciphertext according to the first private key corresponding to the first public key to obtain a third plaintext, wherein the first public key and the first private key are obtained through an asymmetric encryption algorithm, and the first private key is stored in the non-volatile storage medium of the baseband unit.

[0060] In step E20, when the third plaintext is a random number generated by the radio frequency unit according to a preset first random number generation algorithm, the baseband unit performs an operation on the third plaintext based on a first hash algorithm to obtain a first digest corresponding to the third plaintext, encrypts the first digest to obtain a first digital signature, and generates first verification information including the first digital signature based on the first digital signature.

[0061] In one embodiment, before the RF unit is determined to be in a non-stolen state, the RF unit executes a preset protection policy, where the preset protection policy includes prohibiting the modification or deletion of the first public key, prohibiting the modification of a configuration file of the RF unit, and prohibiting the modification of a system file of the RF unit.

[0062] In this embodiment, after each startup, the RF unit operates in a locked state. The locked state is the operating state of the RF unit before it is determined to be in a non-stolen state. In the locked state, the RF unit can forward messages normally, but it will implement a preset protection policy. The preset protection policy includes prohibiting changes to data in the RF unit's memory during operation, prohibiting changes or deletion of the first public key, prohibiting changes to the RF unit's configuration file, and prohibiting changes to the RF unit's system files. For example, the RF unit's configuration file contains 10 configuration parameters, which are stored on a Compact Flash Card (CF card). After startup, the RF unit reads these 10 configuration parameters from the CF card into its memory for computation by the central processing unit (CPU). If the baseband unit sends configuration data to the RF unit at this time, the RF unit will not add the configuration data to the memory or the configuration file on the CF card. By implementing the preset protection policy, the RF unit can prevent thieves from tampering with data in the RF unit, such as the public key, to ensure normal operation of the RF unit.

[0063] When the RF unit is determined to be in a non-stolen state, the working state of the RF unit is converted from the locked state to the unlocked state, and the RF unit releases the restrictions in the above-mentioned preset protection strategy to enable the RF unit to operate normally.

[0064] In a possible implementation, after the step of sending the first information to the baseband unit, the method further includes: step F10, if the first verification information is not received within a preset time period after sending the first information, determining that the radio frequency unit is in a stolen state.

[0065] In this embodiment, the preset duration can be set by those skilled in the art according to actual conditions to better detect whether the connected baseband unit is a baseband unit authorized by the legitimate user of the radio frequency unit. This embodiment does not make specific limitations. For example, the preset duration is 0.8 seconds or 1.5 seconds.

[0066] This embodiment determines that the currently connected baseband unit is not a baseband unit authorized by the legal user of the radio frequency unit when the first verification information is not received within a preset time period after the first information is sent, thereby accurately determining that the radio frequency unit is in a stolen state.

[0067] In a possible implementation manner, before the step of sending the first information to the baseband unit, the method further includes the following steps.

[0068] Step G10: After the anti-theft function of the radio frequency unit is turned on, detecting whether the radio frequency unit is configured with anti-theft authentication information.

[0069] In this embodiment, those skilled in the art will appreciate that when a radio frequency unit with an anti-theft function is first enabled, it is often necessary to configure anti-theft authentication information, so as to facilitate subsequent verification and identification of whether the radio frequency unit is in a stolen state based on the anti-theft authentication information.

[0070] Step G20, when it is determined that the anti-theft authentication information is not configured, sends second information to the baseband unit, wherein the second information includes notification information that the radio frequency unit has anti-theft capabilities; receives the anti-theft code write command and anti-theft code configuration information returned by the baseband unit in response to the second information; based on the anti-theft code write command, saves the anti-theft code configuration information locally to obtain the second verification information saved locally.

[0071] Step G30: When it is determined that the anti-theft authentication information has been configured, execute: the step of sending the first information to the baseband unit.

[0072] This embodiment sends second information to the baseband unit when it is determined that anti-theft authentication information is not configured, wherein the second information includes notification information that the radio frequency unit has anti-theft capabilities, and then receives the anti-theft code write command and anti-theft code configuration information returned by the baseband unit in response to the second information; based on the anti-theft code write command, the anti-theft code configuration information is saved locally to obtain the second verification information saved locally, so as to facilitate the subsequent comparison of the first verification information with the second verification information saved in the configuration after the radio frequency unit receives the first verification information returned by the baseband unit in response to the first information, thereby accurately determining whether the radio frequency unit is in a stolen state.

[0073] In order to help understand the technical concept or technical principle of the embodiments of the present application, the device status detection method of specific embodiment 1 is listed. This specific embodiment is applied to a distributed BBU+RRU environment, where the BBU is deployed in a centralized computer room or an independent cabinet, and the RRU is directly placed on an outdoor tower or rack.

[0074] As shown in Figure 3, the method includes two parts: 1. When the RRU is used for the first time, the BBU sends an anti-theft code (an example of the first verification information) to the RRU according to the configuration, and the RRU locally stores the anti-theft code (an example of the second verification information). The anti-theft code is related to the country, operator, region, and other information of the device. 2. When the RRU with the anti-theft code written in is used again, the anti-theft code configuration information is obtained from the BBU and compared with the locally stored anti-theft code for verification. If the verification fails, no business service is provided. The following is a detailed description of the device status detection method of this specific embodiment:

[0075] In this embodiment, the anti-theft code is related to information such as the country, operator, and region where the device is used, and the anti-theft code can be constructed using MCC (Mobile Country Code) and MNC (Mobile Network Code).

[0076] The activation of the anti-theft function and the clearing and changing of the anti-theft code are controlled by a special license control item. Without license authorization, the anti-theft function cannot be activated, and the anti-theft code cannot be cleared or changed (an example of a preset protection policy).

[0077] (1) Perform an anti-theft test on the RRU. After the anti-theft function is enabled, the process of writing the anti-theft code when the RRU is used for the first time is shown in Figure 4. The steps are as follows:

[0078] S100: When the RRU is powered on for the first time, it reports that the RRU has anti-theft capabilities (i.e., reports that the radio frequency unit has anti-theft capabilities); S110: The BBU sends a write command (i.e., an anti-theft code write command) and the anti-theft code configured by the network element (i.e., anti-theft code configuration information) to the RRU; S120: The RRU solidifies the anti-theft code sent by the BBU into the local non-volatile storage device.

[0079] (2) The verification process when the RRU is connected to a BBU that supports the anti-theft code function and the anti-theft codes are consistent is shown in Figure 5. The steps are as follows:

[0080] S200: RRU is powered on or reset; S210: RRU reports to BBU that it has anti-theft capability; S220: BBU responds to RRU with the anti-theft code configured by the network element (i.e., an example of the first verification information); S230: RRU compares the locally solidified anti-theft code with the anti-theft code responded by BBU; S240: The comparison results of the anti-theft codes are consistent, and the RRU is working normally.

[0081] (3) When a stolen RRU is connected to a BBU that does not support the anti-theft code function, the verification process is shown in Figure 6. The steps are as follows:

[0082] S300: RRU is powered on or reset; S310: RRU reports to BBU that it has anti-theft capability; S320: RRU cannot receive the anti-theft code in response from BBU (i.e., the first verification information is not received within a preset time after sending the first information); S330: RRU is reset.

[0083] (4) After the RRU is stolen, it is connected to a BBU that supports the anti-theft code function, but the anti-theft code is not the same. The verification process is shown in Figure 7 and the steps are as follows:

[0084] S400: RRU is powered on or reset; S410: RRU reports to BBU that it has anti-theft capability; S420: RRU determines whether the BBU response has timed out (i.e., determines whether the first verification information is received within a preset time period from sending the first information); S430: BBU response has not timed out, RRU compares the locally solidified anti-theft code (an example of the second verification information) with the anti-theft code responded by BBU (an example of the first verification information); S440: The anti-theft codes are inconsistent, and RRU is reset.

[0085] The above-mentioned specific embodiment 1 is only used to help understand the technical concept of the embodiment of the present application, and does not constitute a limitation on the device status detection device of the present application. More simple transformations based on the technical concept should all be within the scope of protection of the present application.

[0086] In addition, to achieve the above objectives, the present application also provides a device status detection method, with reference to Figure 2, which is a flow chart of another embodiment of the device status detection method of the present application. In this embodiment, the device status detection method is applied to a baseband unit, and the method includes the following steps.

[0087] Step S40: receiving first information sent by the radio frequency unit, wherein the first information includes notification information that the radio frequency unit has anti-theft capability and third verification information.

[0088] In this embodiment, the radio frequency unit may be an RRU (Remote Radio Unit) or an AAU (Active Antenna Unit) that integrates an RRU and an antenna unit. The baseband unit may be a BBU (Building Base Band Unit) or a BTS (Base Transceiver Station) composed of a CU (Centralized Unit) and a DU (Distributed Unit) architecture.

[0089] In this embodiment, after each startup, the RF unit sends first information to the connected baseband unit, wherein the first information includes notification information that the RF unit has anti-theft capability, and third verification information for authentication verification sent to the base station unit.

[0090] Step S50: authenticating the third verification information.

[0091] In this embodiment, after receiving the first information, the baseband unit generates third verification information according to the first information, and performs authentication verification based on the third verification information.

[0092] Step S60: If the authentication fails, it is determined that the radio frequency unit is in a stolen state.

[0093] Exemplarily, in a possible implementation, the method further includes: step H10, after determining that the radio frequency unit is in a stolen state, sending device disabling information to the radio frequency unit to lock the business service function of the radio frequency unit, or sending reset control information to the radio frequency unit to control the resetting of the radio frequency unit.

[0094] In this embodiment, after determining that the RF unit is in a stolen state, device disabling information is sent to the RF unit to lock the business service function of the RF unit, or reset control information is sent to the RF unit to control the resetting of the RF unit, thereby restricting the normal operation of the RF unit, effectively protecting the RF unit device from theft, and making the network formed by using the stolen network device unable to work normally, thereby suppressing the purchase of stolen RF unit devices, and then suppressing the behavior of stealing network devices.

[0095] The technical solution of the embodiment of the present application is to receive a first message sent by a radio frequency unit, which includes a notification message that the radio frequency unit has anti-theft capabilities, and a third verification information, and then authenticate the third verification information. If the authentication fails, it is determined that the radio frequency unit is in a stolen state, thereby accurately identifying the current device status of the network device (i.e., identifying whether the network device has been stolen) by software means, facilitating the subsequent conversion of its working state according to the device status of the network device to suppress the theft of the network device. For example, when it is identified that the current device status of the radio frequency unit is a stolen state, the business service function of the radio frequency unit is locked, thereby restricting the use of the radio frequency unit device by illegal personnel, solving the technical problem of how to accurately identify whether the network device has been stolen by software means, thereby effectively suppressing the theft of network equipment and reducing the compliance or export control risks of operators and equipment manufacturers.

[0096] In one practicable manner, the step of authenticating the third verification information includes:

[0097] Step I10, obtaining the fourth verification information stored locally in the baseband unit; Step I20, determining that the authentication is successful when it is detected that the third verification information is consistent with the fourth verification information; Step I30, determining that the authentication fails when it is detected that the third verification information is inconsistent with the fourth verification information.

[0098] The third verification information and the fourth verification information may be in the form of an anti-theft code, and the fourth verification information may be stored in a non-volatile storage medium of the base station unit.

[0099] In this embodiment, the device status of the RF unit can be determined based on the authentication result. If the authentication result is successful, the device status of the RF unit is determined to be non-stolen, and the RF unit is controlled to operate normally. If the authentication result is unsuccessful, the device status of the RF unit is determined to be stolen, and the stolen state operation policy is implemented to restrict the normal operation of the RF unit.

[0100] This embodiment obtains the fourth verification information locally stored in the baseband unit, and determines that the authentication is successful when it is detected that the third verification information is consistent with the fourth verification information, and determines that the authentication fails when it is detected that the third verification information is inconsistent with the fourth verification information. In the case of authentication failure, it is determined that the radio frequency unit is in a stolen state, thereby achieving accurate identification of the current device status of the network device through software means, facilitating subsequent conversion of the working state of the network device according to the device status of the network device, so as to suppress the theft of the network device.

[0101] In another practicable manner, the third verification information includes a second digital signature, and the authentication of the third verification information includes: step J10, the baseband unit decrypts the second digital signature according to the second public key; step J20, if the baseband unit fails to decrypt the second digital signature, it is determined that the authentication has failed, wherein the second public key is stored in the non-volatile storage medium of the baseband unit.

[0102] The second digital signature is obtained by the radio frequency unit performing an operation on the first plaintext based on a third hash algorithm to obtain a first digest corresponding to the first plaintext, and then encrypting the first digest.

[0103] In an embodiment of the present application, the baseband unit stores a second public key. Each time the baseband unit is started, it uses the second public key to encrypt the third plaintext to obtain the first ciphertext, and then transmits the first ciphertext to the connected radio frequency unit within the first message. The third plaintext may be a random number generated by the radio frequency unit according to a preset first random number generation algorithm; the third plaintext may also be a string pre-set by the radio frequency unit, such as the electronic serial number (ESN) of the baseband unit. The embodiment of the present application does not specifically limit the form of the third plaintext.

[0104] The second public key is generated by the key server using an asymmetric key algorithm. The key generated by the key server using the asymmetric encryption algorithm includes a second private key and a second public key. The second public key is loaded into the non-volatile storage medium of the base station unit, and the second private key is loaded into the non-volatile storage medium of the radio frequency unit. The non-volatile storage medium is a storage medium in which the stored data will not be lost after power failure, such as a read-only memory (ROM), a flash memory, etc. This prevents the radio frequency unit or the connected baseband unit from losing the authentication function and thus losing the function of suppressing theft after restart. The asymmetric encryption algorithm can be any one of the RSA algorithm, the backpack algorithm, the Elgamal algorithm or the ECC algorithm, and the embodiments of the present application do not impose specific restrictions.

[0105] In this embodiment of the present application, the device status of the RF unit includes a stolen state and a non-stolen state. If the base station unit cannot correctly decrypt the second digital signature when decrypting the second digital signature based on the second public key, it means that the key used by the RF unit to encrypt the second digest is not the second private key corresponding to the second public key, the authentication result is authentication failure, the base station unit determines that the second private key is not loaded in the connected RF unit, and determines that the RF unit is in a stolen state.

[0106] If the base station unit can correctly decrypt the second digital signature to obtain the first digest corresponding to the first plaintext when decrypting the second digital signature according to the second public key, it means that the key used by the radio frequency unit to encrypt the first digest is the same as the second private key corresponding to the second public key. The radio frequency unit may be in a non-stolen state and further verification of the first digest is required.

[0107] The third verification information also includes a second plaintext, and the method also includes: step K10, if the baseband unit successfully decrypts the second digital signature to obtain a first digest, then the second plaintext is operated based on a preset fourth hash algorithm to obtain a second digest corresponding to the second plaintext; step K20, if the second digest is different from the first digest, it is determined that the authentication has failed; step K30, if the second digest is the same as the first digest, it is determined that the authentication is successful.

[0108] In this embodiment, if the second digest is identical to the first digest, it is determined that the authentication is successful, and furthermore, it is determined that the RF unit is in a non-stolen state.

[0109] The base station unit obtains a second plaintext based on the third verification information, performs a calculation on the second plaintext according to the fourth hash algorithm, and obtains a second digest corresponding to the second plaintext. The base station unit compares the second digest with the first digest. If the second digest is different from the first digest, it means that the second plaintext is different from the first plaintext and / or the fourth hash algorithm is different from the third hash algorithm. The authentication result is an authentication failure, and the base station device determines that the radio frequency unit is in a stolen state. The fourth hash algorithm is a hash algorithm predetermined by the radio frequency unit and the target baseband unit authorized by the legitimate user. When the radio frequency unit and the target baseband unit need to calculate the plaintext information to obtain the digest information, they both use the fourth hash algorithm.

[0110] If the second digest is the same as the first digest, it indicates that the second plaintext is the same as the first plaintext, the fourth hash algorithm is the same as the third hash algorithm, the authentication result is successful, and it is determined that the radio frequency unit is in a non-stolen state.

[0111] The first information includes a first ciphertext, where the first ciphertext is obtained by encrypting the third plaintext by the radio frequency unit according to the second private key corresponding to the second public key.

[0112] In this embodiment, the third plain text may be a random number generated by the base station unit according to a preset first random number generation algorithm, or the third plain text may be a character string preset by the base station unit.

[0113] In this embodiment, the third plain text may be a random number generated by the base station unit according to a preset first random number generation algorithm, or the third plain text may be a character string preset by the base station unit.

[0114] The radio frequency unit generates third verification information and sends it to the base station unit, including the following steps.

[0115] In step L10, the radio frequency unit decrypts the first ciphertext according to the second private key corresponding to the second public key to obtain a third plaintext, wherein the second public key and the second private key are obtained through an asymmetric encryption algorithm, and the second private key is stored in the non-volatile storage medium of the radio frequency unit.

[0116] In step L20, when the third plaintext is a random number generated by the baseband unit according to a preset first random number generation algorithm, the radio frequency unit performs an operation on the third plaintext based on the first hash algorithm to obtain a first digest corresponding to the third plaintext, encrypts the first digest to obtain a second digital signature, and generates third verification information including the second digital signature based on the second digital signature.

[0117] In one embodiment, before the RF unit is determined to be in a non-stolen state, the RF unit executes a preset protection policy, where the preset protection policy includes prohibiting the modification or deletion of the first public key, prohibiting the modification of a configuration file of the RF unit, and prohibiting the modification of a system file of the RF unit.

[0118] In this embodiment, after each startup, the RF unit operates in a locked state. The locked state is the operating state of the RF unit before it is determined to be in a non-stolen state. In the locked state, the RF unit can forward messages normally, but it will implement a preset protection policy. The preset protection policy includes prohibiting changes to data in the RF unit's memory during operation, prohibiting changes or deletion of the first public key, prohibiting changes to the RF unit's configuration file, and prohibiting changes to the RF unit's system files. For example, the RF unit's configuration file contains 10 configuration parameters, which are stored on a Compact Flash Card (CF card). After startup, the RF unit reads these 10 configuration parameters from the CF card into its memory for computation by the central processing unit (CPU). If the baseband unit sends configuration data to the RF unit at this time, the RF unit will not add the configuration data to the memory or the configuration file on the CF card. By implementing the preset protection policy, the RF unit can prevent thieves from tampering with data in the RF unit, such as the public key, to ensure normal operation of the RF unit.

[0119] When the RF unit is determined to be in a non-stolen state, the working state of the RF unit is converted from the locked state to the unlocked state, and the RF unit releases the restrictions in the above-mentioned preset protection strategy to enable the RF unit to operate normally.

[0120] In one practicable manner, the method further includes:

[0121] Step N10, upon receiving the second information sent by the radio frequency unit, sends an anti-theft code write command and anti-theft code configuration information to the radio frequency unit, wherein the second information includes notification information that the radio frequency unit has anti-theft capabilities, so that the radio frequency unit saves the anti-theft code configuration information locally to the radio frequency unit based on the anti-theft code write command as the third verification information locally saved by the radio frequency unit.

[0122] This embodiment sends an anti-theft code write command and anti-theft code configuration information to the radio frequency unit upon receiving the second information sent by the radio frequency unit, wherein the second information includes notification information that the radio frequency unit has anti-theft capabilities, so that the radio frequency unit saves the anti-theft code configuration information locally to the radio frequency unit based on the anti-theft code write command as the third verification information locally saved by the radio frequency unit, thereby facilitating the subsequent radio frequency unit sending the third verification information to the base station unit for authentication verification, that is, comparing the third verification information with the fourth verification information saved in the configuration, and then accurately determining whether the radio frequency unit is in a stolen state.

[0123] To help understand the technical concept or technical principle of the embodiments of the present application, the device status detection method of the second specific embodiment is listed below, with reference to FIG8 , including the following main process steps:

[0124] (1) Perform anti-theft verification on the BBU. This solution relies on the BBU supporting the anti-theft verification function. The verification process when the RRU is connected to a BBU that supports the anti-theft code function and the anti-theft code is consistent is shown in Figure 8. The steps are as follows:

[0125] S500: RRU is powered on or reset; S510: RRU reports to BBU that the RRU has anti-theft capability (i.e., reports notification that the radio frequency unit has anti-theft capability), and carries the anti-theft code stored locally in the RRU (i.e., an example of the third verification information); S520: BBU compares the anti-theft code reported by the RRU (an example of the third verification information) with the anti-theft code configured by the network element (an example of the fourth verification information) to see if they are consistent; S530: The anti-theft code comparison results are consistent, and the RRU is working normally.

[0126] (2) After the RRU is stolen, it is connected to a BBU that supports the anti-theft code function, but the anti-theft code is not the same. The verification process is shown in Figure 9 and the steps are as follows:

[0127] S500: The RRU is powered on or reset; S510: The RRU reports to the BBU that it has anti-theft capabilities and carries the anti-theft code stored locally in the RRU; S520: The BBU compares the anti-theft code reported by the RRU with the anti-theft code configured in the network element to see if they are consistent; S540: If the anti-theft code comparison result is inconsistent, the RRU is reset.

[0128] In addition, the information of the anti-theft code includes but is not limited to information such as the country, operator, and region of the device, and may also include feature information such as the serial number of the device.

[0129] The above disclosure is only a preferred embodiment of the present application, and it is certainly not intended to limit the scope of protection of the present application. Ordinary technicians in this field can understand that all or part of the processes of the above embodiment and equivalent changes made in accordance with the claims of the present application are still within the scope covered by the present application.

[0130] That is to say, the above-mentioned specific embodiment 2 is only used to help understand the technical concept of the embodiment of the present application, and does not constitute a limitation of the present application. More simple transformations based on the technical concept should all be within the scope of protection of the present application.

[0131] In addition, an embodiment of the present application further provides an electronic device, with reference to Figure 10, which is a schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application. As shown in Figure 10, the electronic device may include: a processor 1001, such as a central processing unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. Among them, the communication bus 1002 is used to realize the connection and communication between these components. The user interface 1003 may include a display screen (Display), an input unit such as a keyboard (Keyboard), and the user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may include a standard wired interface and a wireless interface (such as a wireless fidelity (Wireless-Fidelity, WI-FI) interface). The memory 1005 may be a high-speed random access memory (Random Access Memory, RAM) memory, or a stable non-volatile memory (Non-Volatile Memory, NVM), such as a disk storage. The memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0132] Those skilled in the art will appreciate that the structure shown in FIG10 does not limit the electronic device and may include more or fewer components than shown, or combine certain components, or arrange the components differently. As shown in FIG10 , the memory 1005 as a storage medium may include an operating system, a data storage module, a network communication module, a user interface module, and a device status detection program.

[0133] In the electronic device shown in Figure 10, the network interface 1004 is mainly used for data communication with other devices; the user interface 1003 is mainly used for data interaction with the user; the processor 1001 and the memory 1005 in this embodiment can be set in the communication device, and the communication device calls the device status detection program stored in the memory 1005 through the processor 1001, and executes the device status detection method provided in any of the above embodiments.

[0134] The terminal proposed in this embodiment and the device status detection method proposed in the above embodiment belong to the same application concept. The technical details not described in detail in this embodiment can be referred to any of the above embodiments, and this embodiment has the same beneficial effects as executing the device status detection method.

[0135] In addition, an embodiment of the present application also proposes a computer storage medium, which can be a non-volatile computer-readable storage medium. The computer-readable storage medium stores a device status detection program, and when the device status detection program is executed by the processor, it implements the device status detection method of the present application as described above.

[0136] The various embodiments of the electronic device and computer-readable storage medium of the present application can refer to the various embodiments of the device status detection method of the present application, and will not be repeated here.

[0137] As used herein, the terms "comprises," "comprising," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, article, or system that includes a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or system. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not preclude the presence of additional identical elements in the process, method, article, or system that includes the element.

[0138] The serial numbers of the above embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0139] Through the description of the above embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform, and of course, by hardware, but in many cases the former is a better embodiment. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) as described above, and includes a number of instructions for enabling an electronic device to execute the methods described in each embodiment of the present application.

[0140] The above are only some embodiments of the present application and are not intended to limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A device status detection method, wherein: The device status detection method is applied to a radio frequency unit, and the method comprises: When the radio frequency unit is powered on or reset, first information is sent to the baseband unit, wherein the first information includes notification information that the radio frequency unit has anti-theft capability; After receiving first verification information returned by the baseband unit in response to the first information, authenticating the first verification information; In case of authentication failure, it is determined that the radio frequency unit is in a stolen state.

2. The device status detection method according to claim 1, wherein: After the step of sending the first information to the baseband unit, the method further includes: If the first verification information is not received within a preset time period after the first information is sent, it is determined that the radio frequency unit is in a stolen state.

3. The device status detection method according to claim 1, wherein: The step of authenticating the first verification information comprises: Acquire second verification information locally stored in the radio frequency unit; When detecting that the first verification information is consistent with the second verification information, determining that the authentication is successful; When it is detected that the first verification information is inconsistent with the second verification information, it is determined that the authentication fails.

4. The device status detection method according to claim 1, wherein: Before the step of sending the first information to the baseband unit, the method further includes: After the radio frequency unit turns on the anti-theft function, detecting whether the radio frequency unit is configured with anti-theft authentication information; In the case where it is determined that the anti-theft authentication information is not configured, sending second information to the baseband unit, wherein the second information includes notification information that the radio frequency unit has anti-theft capability; receiving an anti-theft code write command and anti-theft code configuration information returned by the baseband unit in response to the second information; based on the anti-theft code write command, saving the anti-theft code configuration information locally to obtain second verification information saved locally; In the case where it is determined that the anti-theft authentication information has been configured, the step of sending the first information to the baseband unit is performed.

5. The device status detection method according to any one of claims 1 to 4, wherein: The method further comprises: After determining that the radio frequency unit is in a stolen state, locking the service function of the radio frequency unit or controlling the radio frequency unit to reset.

6. A device status detection method, wherein: The device status detection method is applied to a baseband unit, and the method comprises: receiving first information sent by the radio frequency unit, wherein the first information includes notification information that the radio frequency unit has anti-theft capability and third verification information; authenticating the third verification information; In case of authentication failure, it is determined that the radio frequency unit is in a stolen state.

7. The device status detection method according to claim 6, wherein: The step of authenticating the third verification information comprises: Acquire fourth verification information locally stored in the baseband unit; In the case where it is detected that the third verification information is consistent with the fourth verification information, determining that the authentication is successful; When it is detected that the third verification information is inconsistent with the fourth verification information, it is determined that the authentication fails.

8. The device status detection method according to claim 6, wherein: The method further comprises: When receiving the second information sent by the radio frequency unit, an anti-theft code write command and anti-theft code configuration information are sent to the radio frequency unit, wherein the second information includes notification information that the radio frequency unit has anti-theft capability, so that the radio frequency unit saves the anti-theft code configuration information locally to the radio frequency unit based on the anti-theft code write command as the third verification information locally saved by the radio frequency unit.

9. The device status detection method according to any one of claims 6 to 8, wherein: The method further comprises: After determining that the radio frequency unit is in a stolen state, sending device disabling information to the radio frequency unit to lock the service function of the radio frequency unit, or sending reset control information to the radio frequency unit to control the radio frequency unit to reset.

10. An electronic device, wherein: The electronic device includes: a memory, a processor, and a device status detection program stored in the memory and executable on the processor. When the device status detection program is executed by the processor, it implements the device status detection method described in any one of claims 1 to 5, and / or implements the device status detection method described in any one of claims 6 to 9.

11. A computer-readable storage medium, wherein: The computer-readable storage medium stores a device status detection program, which, when executed by a processor, implements the device status detection method according to any one of claims 1 to 5, and / or implements the device status detection method according to any one of claims 6 to 9.

Images