Single board Anti-theft method, electronic device and computer-readable medium

Abstract

The present application provides a single board anti-theft method which is applied to a network element device. The single board anti-theft method comprises: receiving a network configuration command for a target single board, wherein the target single board accesses the network element device, and the network configuration command comprises a first key; and, when the first key is matched with a second key configured for the target single board in advance, sending the network configuration command to the target single board, so that the target single board performs network configuration on the basis of the network configuration command.

Description

Single board anti-theft method, electronic device, and computer-readable medium

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This patent application claims priority to Chinese patent application 202311283979.3 filed with the State Intellectual Property Office of China on September 28, 2023, and the disclosure of this Chinese patent application is incorporated herein by reference in its entirety. Technical Field

[0003] The present application relates to the field of communication technology, and in particular to a single board anti-theft method, an electronic device, and a computer-readable medium. Background Art

[0004] Currently, the industry prevents single boards from being stolen by setting up physical access control in specific computer rooms, but this method is not very effective in preventing theft.

[0005] Summary of the Invention

[0006] The present application provides a single board anti-theft method, an electronic device, and a computer-readable medium.

[0007] In a first aspect, the present application provides a single-board anti-theft method, which is applied to a network element device. The single-board anti-theft method includes: receiving a network configuration command for a target single board, wherein the target single board is connected to the network element device, and the network configuration command includes: a first secret key; and when the first secret key and a second secret key pre-configured for the target single board match, sending the network configuration command to the target single board, so that the target single board performs network configuration according to the network configuration command.

[0008] In a second aspect, the present application provides an electronic device comprising: at least one processor; and a memory, wherein at least one program is stored in the memory, and when the at least one program is executed by the at least one processor, the above-mentioned single-board anti-theft method is implemented.

[0009] In a third aspect, the present application provides a computer-readable medium having a computer program stored thereon, and the computer program implements the above-mentioned single board anti-theft method when executed by a processor. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] FIG1 is a flow chart of a single board anti-theft method according to an embodiment of the present application;

[0011] FIG2 is a flow chart of an authentication process for a target board according to an embodiment of the present application;

[0012] FIG3 is a block diagram of a single-board anti-theft device according to an embodiment of the present application;

[0013] FIG4 is a block diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0014] In order to enable those skilled in the art to better understand the technical solution of the present application, the single board anti-theft method, electronic device, and computer-readable medium provided by the present application are described in detail below with reference to the accompanying drawings.

[0015] Example embodiments will be described more fully hereinafter with reference to the accompanying drawings, but the example embodiments may be embodied in different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this application will be thorough and complete and will fully convey the scope of this application to those skilled in the art.

[0016] In the absence of conflict, the various embodiments of the present application and the various features therein may be combined with each other.

[0017] As used herein, the term "and / or" includes any and all combinations of at least one of the associated listed items.

[0018] The terms used herein are used only to describe specific embodiments and are not intended to limit this application. As used herein, the singular forms "a," "an," and "the" are also intended to include the plural forms, unless the context clearly indicates otherwise. It will also be understood that when the terms "comprising" and / or "made of" are used in this specification, the presence of the features, wholes, steps, operations, elements, and / or components is specified, but the presence or addition of at least one other feature, whole, step, operation, element, component, and / or group thereof is not excluded.

[0019] Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and this application, and will not be interpreted as having an idealized or overly formal meaning unless expressly defined as such herein.

[0020] FIG1 is a flow chart of a single board anti-theft method according to an embodiment of the present application.

[0021] The single board anti-theft method according to an embodiment of the present application is applied to a network element device. Referring to FIG1 , the single board anti-theft method includes steps 100 and 101 .

[0022] In step 100, a network configuration command for a target board is received. The target board is connected to a network element device. The network configuration command includes a first key.

[0023] In some exemplary embodiments, the first key includes: a first random number key and a first service flow key.

[0024] In step 101, when a first key matches a second key pre-configured for a target board, a network configuration command is sent to the target board, so that the target board performs network configuration according to the network configuration command.

[0025] In some exemplary embodiments, a designated operator can be centrally configured before a board is sold. The designated operator pre-configures a second key for the target board and manages the configured second key, such as querying, deleting, enabling, and disabling. Non-designated operators cannot configure or manage the configured second key.

[0026] In some exemplary embodiments, the second key is generated from the key information.

[0027] In some exemplary embodiments, the key information includes: a random number and a service flow parameter of the target board.

[0028] In some exemplary embodiments, the second key includes: a second random number key and a second service flow key.

[0029] In some exemplary embodiments, the second random number key is generated by a random number, and the second service flow key is generated by a service flow parameter.

[0030] In some exemplary embodiments, after receiving a network configuration command for a target single board, the single board anti-theft method further includes: determining whether the first random number key and the second random number key are the same; if the first random number key and the second random number key are the same, determining whether the first business flow key and the second business flow key are the same; if the first business flow key and the second business flow key are the same, determining that the first key and the second key match.

[0031] In some exemplary embodiments, when the first random number key and the second random number key are different, the single board anti-theft method further includes: determining that the first key and the second key do not match.

[0032] In some exemplary embodiments, the single board anti-theft method further includes: receiving a second key generated and issued by the network management server according to key information of the target single board.

[0033] In some exemplary embodiments, after receiving the second key generated and issued by the network management server according to the key information of the target board, the board anti-theft method further includes: saving the second key.

[0034] In some exemplary embodiments, before receiving the network configuration command for the target board, a second key generated and issued by the network management server according to the key information of the target board may be received.

[0035] In some exemplary embodiments, after receiving the network configuration command for the target board, a second key generated and issued by the network management server according to the key information of the target board may be received.

[0036] In some exemplary embodiments, the board anti-theft method further includes: receiving a random number and a service flow parameter of a target board sent by a network management server; and generating a second secret key according to the random number and the service flow parameter of the target board.

[0037] In some exemplary embodiments, a designated operator can be uniformly configured before the board is sold, and the designated operator inputs the random number on the network management server side. Non-designated operators cannot input the random number on the network management server side.

[0038] In some exemplary embodiments, after generating the second secret key according to the random number and the service flow parameters of the target board, the board anti-theft method further includes: saving the second secret key.

[0039] In some exemplary embodiments, before receiving the network configuration command for the target board, a random number and a service flow parameter of the target board sent by the network management server may be received.

[0040] In some exemplary embodiments, after receiving the network configuration command for the target board, the random number and the service flow parameters of the target board sent by the network management server may be received.

[0041] In some exemplary embodiments, the service flow parameters include at least one of service source node information, service sink node information, service type, service traffic peak parameter, and protection parameter.

[0042] In some exemplary embodiments, generating the second key according to the key information of the target board includes: generating a second random number key according to a random number, and generating a second service flow key according to a service flow parameter.

[0043] In some exemplary embodiments, designated operators may be uniformly configured before the boards are sold, and the designated operators input the random numbers, while non-designated operators cannot input the random numbers.

[0044] In some exemplary embodiments, the service flow parameters may be concatenated according to a preset format to obtain a second service flow key.

[0045] In some exemplary embodiments, after receiving the second key sent by the network management server; or generating the second key according to the random number and the service flow parameters of the target board, the board anti-theft method further includes: saving the second key.

[0046] FIG2 is a flow chart of an authentication process for a target board according to an embodiment of the present application. The board anti-theft method described with reference to FIG1 also includes an authentication process for the target board, which is performed before receiving a network configuration command for the target board. As shown in FIG2 , the authentication process for the target board includes steps 200 to 202.

[0047] In step 200, upon receiving a network element authentication request reported by a target board, it is determined whether the pre-saved second key includes the second key of the target board, wherein the network element authentication request is generated by the target board when it is newly inserted into the network element device and sent to the network element device.

[0048] In step 201 , when the pre-stored second keys include the second key of the target board, it is determined that the authentication of the target board is successful.

[0049] In step 202, when the pre-stored second keys do not include the second key of the target board, it is determined that the authentication of the target board has failed, and an alarm message of the authentication failure of the target board is reported to the network management server.

[0050] In some exemplary embodiments, the alarm information is used to instruct the network management server to perform a configuration operation on the secret key of the target board.

[0051] In some exemplary embodiments, a designated operator can be uniformly configured before the board is sold, and the designated operator can configure the key of the target board. Non-designated operators cannot configure the key of the target board.

[0052] In some exemplary embodiments, the single board anti-theft method also includes: upon receiving a network element authentication request reported by a newly inserted single board, determining whether the saved second key includes the second key of the newly inserted single board; and if the saved second key includes the second key of the newly inserted single board, the newly inserted single board is authenticated successfully.

[0053] In some exemplary embodiments, when the saved second secret key does not include the second secret key of the newly inserted single board, the single board anti-theft method further includes: authenticating the newly inserted single board fails, and reporting an alarm message of authentication failure of the newly inserted single board to the network management server.

[0054] In some exemplary embodiments, when the first key and the second key do not match, an alarm message is reported to the network management server.

[0055] The single board anti-theft method provided in the present application, when receiving a network configuration command for a target single board, determines whether a first key in the network configuration command and a second key pre-configured for the target single board match. If they match, the network configuration command is sent to the target single board to implement the network configuration, and the target single board is protected from theft based on the secret key, thereby improving the anti-theft effect.

[0056] FIG3 is a block diagram of a single-board anti-theft device according to an embodiment of the present application.

[0057] 3 , the single-board anti-theft device according to an embodiment of the present application includes: a board management module 301, which is configured to receive a network configuration command for a target single board; wherein the target single board is connected to a network element device, and the network configuration command includes a first key; when the first key and a second key pre-configured for the target single board match, the network configuration command is sent to the target single board, so that the target single board performs network configuration according to the network configuration command.

[0058] In some exemplary embodiments, the second key is generated by key information, and the key information includes: a random number and a service flow parameter of the target board.

[0059] In some exemplary embodiments, the second key includes a second random number key and a second service flow key; wherein the second random number key is generated by a random number, and the second service flow key is generated by a service flow parameter.

[0060] In some exemplary embodiments, the service flow parameters include at least one of the following: service source node information, service sink node information, service type, service flow peak parameters, and protection parameters.

[0061] In some exemplary embodiments, the single-board anti-theft device according to an embodiment of the present application also includes: a key management module 302, which is configured to receive a second key generated and issued by the network management server based on the key information of the target single board; or, receive a random number and the business flow parameters of the target single board issued by the network management server; and generate a second key based on the random number and the business flow parameters of the target single board.

[0062] In some exemplary embodiments, the single-board anti-theft device according to an embodiment of the present application also includes: a network element authentication management module 303, which is configured to determine whether the pre-saved second key includes the second key of the target single board when receiving a network element authentication request reported by the target single board; wherein the network element authentication request is generated by the target single board when it is newly inserted into the network element device and sent to the network element device; when the second key of the target single board is included in the pre-saved second key, it is determined that the authentication of the target single board is successful.

[0063] In some exemplary embodiments, the network element authentication management module 303 is further configured to: determine that authentication of the target board fails when the pre-stored second keys do not include the second key of the target board.

[0064] The single board anti-theft device according to the embodiment of the present application further includes: an alarm module 304, which is configured to report alarm information of authentication failure of the target single board to the network management server.

[0065] In some exemplary embodiments, the first key includes: a first random number key and a first service flow key; the second key includes: a second random number key and a second service flow key.

[0066] The board management module 301 is also configured to: determine whether the first random number key and the second random number key are the same; if the first random number key and the second random number key are the same, determine whether the first business flow key and the second business flow key are the same; if the first business flow key and the second business flow key are the same, determine that the first key and the second key match.

[0067] The specific implementation process of the above-mentioned single-board anti-theft device is the same as the specific implementation process of the single-board anti-theft method in the above-mentioned embodiment.

[0068] Figure 4 is a block diagram of an electronic device according to an embodiment of the present application. Referring to Figure 4 , the electronic device according to an embodiment of the present application includes: at least one processor 401; and a memory 402 storing at least one program. When the at least one program is executed by the at least one processor 401, the aforementioned single-board anti-theft method is implemented.

[0069] In some exemplary embodiments, the electronic device further includes: one or more I / O interfaces 403 , which are connected between the processor 401 and the memory 402 and configured to implement information interaction between the processor 401 and the memory 402 .

[0070] The processor 401 is a device with data processing capabilities, including but not limited to a central processing unit (CPU); the memory 402 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), and flash memory (FLASH); the I / O interface (read-write interface) 403 is connected between the processor 401 and the memory 402, and can realize information exchange between the processor 401 and the memory 402, including but not limited to a data bus (Bus), etc.

[0071] In some embodiments, the processor 401 , the memory 402 , and the I / O interface 403 are connected to each other via a bus 404 , and further connected to other components of the computing device.

[0072] In a third aspect, another embodiment of the present application provides a computer-readable medium having a computer program stored thereon, and when the computer program is executed by a processor, any of the above-mentioned single-board anti-theft methods is implemented.

[0073] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As is well known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable, and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, as is well known to those skilled in the art, communication media typically embodies computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0074] Example embodiments have been disclosed herein, and although specific terms are employed, they are used and should be interpreted only in a general illustrative sense and not for purposes of limitation. In some instances, it will be apparent to those skilled in the art that, unless otherwise expressly indicated, features, characteristics, and / or elements described in conjunction with a particular embodiment may be used alone or in combination with features, characteristics, and / or elements described in conjunction with other embodiments. Therefore, it will be understood by those skilled in the art that various changes in form and detail may be made without departing from the scope of the present application as set forth in the appended claims.

Claims

1. A single board anti-theft method, which is applied to a network element device, the single board anti-theft method comprising: receiving a network configuration command for a target board, wherein the target board is connected to the network element device, and the network configuration command includes a first key; and In a case where the first secret key matches a second secret key pre-configured for the target single board, the network configuration command is sent to the target single board, so that the target single board performs network configuration according to the network configuration command.

2. The single board anti-theft method according to claim 1, wherein: The second secret key is generated by secret key information, and the secret key information includes: a random number and a service flow parameter of the target board.

3. The single board anti-theft method according to claim 2, wherein: The second key includes a second random number key and a second service flow key, and Among them, the second random number key is generated by the random number, and the second service flow key is generated by the service flow parameter.

4. The single board anti-theft method according to claim 2 or 3, wherein: The service flow parameters include at least one of service source node information, service sink node information, service type, service flow peak parameter, and protection parameter.

5. The single board anti-theft method according to claim 2, further comprising: Receive the second secret key generated and issued by the network management server according to the secret key information of the target board.

6. The single board anti-theft method according to claim 2, further comprising: Receiving the random number and the service flow parameter of the target board sent by the network management server; as well as The second secret key is generated according to the random number and the service flow parameters of the target board.

7. The single board anti-theft method according to any one of claims 1 to 6, wherein: Before receiving the network configuration command for the target single board, the single board anti-theft method further includes: In the case of receiving the network element authentication request reported by the target board, determining the whether the first saved second key includes the second key of the target board, wherein the network element authentication request is generated by the target board when the network element device is newly inserted and sent to the network element device; In a case where the pre-saved second keys include the second key of the target board, it is determined that the authentication of the target board is successful.

8. The single board anti-theft method according to claim 7, further comprising: When the pre-saved second keys do not include the second key of the target board, it is determined that the authentication of the target board fails, and alarm information of the authentication failure of the target board is reported to the network management server.

9. The single board anti-theft method according to any one of claims 1 to 6, wherein: The first secret key includes: a first random number secret key and a first service flow secret key; the second secret key includes: a second random number secret key and a second service flow secret key; After receiving the network configuration command for the target single board, the single board anti-theft method further includes: Determine whether the first random number key and the second random number key are the same; When the first random number key and the second random number key are the same, determining whether the first service flow key and the second service flow key are the same; When the first service flow key and the second service flow key are the same, it is determined that the first key and the second key match.

10. An electronic device comprising: at least one processor; as well as A memory, wherein at least one program is stored in the memory, and when the at least one program is executed by the at least one processor, the single board anti-theft method according to any one of claims 1 to 9 is implemented.

11. A computer-readable medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the single board anti-theft method according to any one of claims 1 to 9.

Images