WO2025112698A1 - 安全模组、安全通信系统及方法、存储介质和程序产品 - Google Patents

安全模组、安全通信系统及方法、存储介质和程序产品 Download PDF

Info

Publication number
WO2025112698A1
WO2025112698A1 PCT/CN2024/113795 CN2024113795W WO2025112698A1 WO 2025112698 A1 WO2025112698 A1 WO 2025112698A1 CN 2024113795 W CN2024113795 W CN 2024113795W WO 2025112698 A1 WO2025112698 A1 WO 2025112698A1
Authority
WO
WIPO (PCT)
Prior art keywords
encrypted data
encryption protocol
main controller
security
server
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
PCT/CN2024/113795
Other languages
English (en)
French (fr)
Inventor
王鹏
林紫微
唐伟
曾云凤
施明瑞
张雄威
周豪
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile IoT Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile IoT Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile IoT Co Ltd filed Critical China Mobile Communications Group Co Ltd
Publication of WO2025112698A1 publication Critical patent/WO2025112698A1/zh
Anticipated expiration legal-status Critical
Pending legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0478—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0877—Generation of secret information including derivation or calculation of cryptographic keys or passwords using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols

Definitions

  • the present disclosure belongs to the field of communication technology, and in particular, relates to a security module, a secure communication system and method, a storage medium, and a program product.
  • the embodiments of the present disclosure provide a security module, a secure communication system and method, a storage medium and a program product, which can realize secure communication under multiple encryption methods. While ensuring the security of data transmission between terminal devices and external servers, it also avoids the risk of data leakage during transmission between various modules inside the terminal device.
  • an embodiment of the present disclosure provides a security module, which includes a communication module and a security chip; the communication module is used to perform data encryption or data decryption based on a first encryption protocol, wherein the first encryption protocol is a data transmission encryption protocol within a terminal where the security module is located; the security chip is used to perform data encryption or data decryption based on a security chip encryption protocol, wherein the security chip encryption protocol is a data transmission encryption protocol between the terminal where the security module is located and an external device.
  • an embodiment of the present disclosure provides a secure communication system, which includes the security module provided in the first aspect above, as well as a main controller and a server; the security module and the main controller are deployed in the same terminal; encrypted data transmission is performed between the security module and the main controller based on a first encryption protocol; encrypted data transmission is performed between the security module and the server based on a security chip encryption protocol; and data transmission is performed between the main controller and the server based on a second encryption protocol.
  • an embodiment of the present disclosure provides a secure communication method, which applies the secure communication system provided in the second aspect, and includes: the main controller encrypts data based on the first encryption protocol to obtain first encrypted data; the main controller sends the first encrypted data to the communication module in the security module; and the communication module receives the first encrypted data and decrypts the first encrypted data based on the first encryption protocol.
  • an embodiment of the present disclosure provides a computer storage medium having instructions stored thereon, wherein the instructions, when executed by a processor, implement the method described in the third aspect above.
  • an embodiment of the present disclosure provides a computer program product comprising instructions, which, when executed by a processor, causes the processor to execute the method as described in the third aspect above.
  • the disclosed embodiment provides a security module, a secure communication system and method, wherein the security module includes a communication module and a security chip.
  • the communication module performs encrypted data transmission with other modules in the terminal based on a first encryption protocol
  • the security chip performs encrypted data transmission with external servers and other devices based on a security chip encryption protocol.
  • secure communication under multiple encryption methods is achieved, which ensures the security of data transmission between the terminal and the external server, while also avoiding the risk of data being leaked during transmission between modules inside the terminal device.
  • FIG1 is a schematic diagram of a secure communication system provided by an embodiment of the present disclosure.
  • FIG. 2 is a schematic diagram of data interaction between a main controller and a security module provided in an embodiment of the present disclosure.
  • FIG3 is a schematic diagram of data interaction between a security module and a server provided in an embodiment of the present disclosure.
  • FIG. 4 is a schematic diagram of data interaction between a main controller and a server provided in an embodiment of the present disclosure.
  • FIG. 5 is a schematic diagram of another data interaction between a main controller and a server provided in an embodiment of the present disclosure.
  • FIG6 is a flow chart of upgrading a first encryption protocol provided by an embodiment of the present disclosure.
  • FIG. 7 is a flow chart of upgrading a second encryption protocol provided by an embodiment of the present disclosure.
  • FIG8 is a schematic diagram of the structure of a computer device provided by an embodiment of the present disclosure.
  • FIG1 is a schematic diagram of a security communication system provided by an embodiment of the present disclosure.
  • the security communication system includes a security module 101, a main controller 102 and a server 103.
  • the security module 101 and the main controller 102 are deployed in the same terminal 104, that is, the security module and the main controller are different hardware modules inside the same terminal.
  • the terminal 104 can be a smart phone, a tablet computer, a portable computer, a desktop computer, etc., which is not limited by the embodiments of the present disclosure.
  • the security module 101 belongs to the communication unit of the terminal 104.
  • the security module 101 is consistent with the traditional communication module in appearance, and is a communication module with security encryption capability and network communication capability, which is used to realize the communication between the terminal 104 and the server 103.
  • the security module 101 includes a communication module 1011 and a security chip 1012, and data can be exchanged between the communication module 1011 and the security chip 1012.
  • the communication module 1011 and the security chip 1012 can be connected through a physical interface, and the physical interface can be a serial port, I2C, SPI or other interface, which is not limited in the embodiment of the present disclosure.
  • a security software development kit (SDK) adapted to the security chip 1012 can be integrated on the communication module 1011, and calling the API interface provided by the security SDK can drive the security chip 1012 to provide secure communication services.
  • SDK security software development kit
  • the main controller 102 is a control unit of a terminal device, and the main controller 102 can exchange data with the server 103 through the security module 101.
  • the main controller 102 belongs to the control unit of the terminal 104, and can be used to receive the control instruction sent by the security module 101, and complete the operation indicated by the control instruction and reply the operation result.
  • the main controller 102 can be implemented as a single-chip microcomputer MCU (Microcontroller Unit), which is not limited in the embodiment of the present disclosure.
  • the server 103 is deployed in the cloud, and the server 103 may be one server, multiple servers, a cloud computing platform, etc. The disclosed embodiment does not limit the device type of the server 103.
  • the server 103 may be connected to the terminal 104 via a wireless network or a wired network to achieve communication and control of the terminal 104.
  • the server 103 may provide a remote upgrade service to the communication module 1011 and the main controller 1012 in the security module 101, and the communication module 1011 and the main controller 1012 in the security module 101 support the remote upgrade function.
  • the server 103 includes an IoT security access platform 1031 and an IoT application platform 1032.
  • the IoT security access platform 1031 can communicate with the terminal 104 and perform operations such as encryption, decryption, and data signing on the transmitted data.
  • the IoT application platform 1032 can provide functions such as device access, data collection, data processing, and application management.
  • encrypted data transmission can be performed between the security module and the main controller based on a first encryption protocol.
  • the first encryption protocol is a data transmission encryption protocol inside the terminal where the security module is located.
  • the first encryption protocol can be a custom encryption protocol between the security module and the main controller, and the main controller and the communication module in the security module can both perform data encryption or data decryption based on the first encryption protocol.
  • Figure 2 is a schematic diagram of data interaction between a main controller and a security module provided by an embodiment of the present disclosure.
  • the main controller can perform data encryption based on the first encryption protocol to obtain first encrypted data, and then send the first encrypted data to the communication module in the security module. That is, execute step 201 to send data encrypted based on the first encryption protocol. After the communication module receives the first encrypted data, it decrypts the first encrypted data based on the first encryption protocol to obtain the original data sent by the main controller. In this scenario, only the communication module in the security module is called, and the main controller and the communication module respectively provide data encryption or decryption functions. There is no need to call the security chip, and the encrypted data can be directly transmitted between the main controller and the communication module in the security module.
  • the communication module can also execute step 202 to send data encrypted based on the first encryption protocol to the main controller, and the main controller decrypts the received data based on the first encryption protocol.
  • the execution order of step 201 and step 202 is not limited.
  • the data transmission between the main controller and the security module is encrypted by the first encryption protocol, which can avoid the leakage of internal terminal data.
  • unencrypted plaintext data can also be transmitted between the modules in the terminal.
  • unencrypted plaintext data can be transmitted between the main controller and the security module.
  • the main controller can execute step 203 to send unencrypted plaintext data to the communication module
  • the communication module can execute step 204 to send unencrypted plaintext data to the main controller.
  • the execution order of steps 203 and 204 is not limited. In this scenario, only the communication module in the security module needs to be called, and there is no need for a security chip to encrypt data. Unencrypted plaintext data is directly transmitted between the main controller and the communication module in the security module.
  • the data sent by the main controller to the security module may carry at least one of a first data recipient identifier and a first encryption identifier.
  • the first data recipient identifier is used to indicate a data receiving device, for example, the first data recipient identifier may be an identifier of the security module or an identifier of a server.
  • the security module may determine whether the received data is processed by the security module or forwarded to the server based on the first data recipient identifier. In one embodiment, this judgment process may be performed by a communication module in the security module.
  • the first encryption identifier is used to indicate whether the data is encrypted using a first encryption protocol, and the security module may determine whether it is necessary to decrypt the received data based on the first encryption protocol based on the first encryption identifier. For example, in an embodiment of the present disclosure, after the communication module receives the first encrypted data, in response to the first encrypted data carrying the first encryption identifier, the step of decrypting the first encrypted data based on the first encryption protocol is executed.
  • the data sent by the main controller may also carry other information, which is not limited in the embodiment of the present disclosure. In one embodiment, the information carried by the data sent by the main controller may be unencrypted plaintext data or data encrypted using a first encryption protocol, which is not limited in the embodiment of the present disclosure.
  • encrypted data transmission can be performed between the security module and the server based on the security chip encryption protocol.
  • the security chip encryption protocol is a data transmission encryption protocol between the terminal where the security module is located and the external device.
  • the security chip encryption protocol can be provided by an IoT security manufacturer, integrated in a security chip and an IoT security access platform, and the security chip in the security module and the IoT security access platform in the server can both perform data encryption or data decryption based on the security chip encryption protocol.
  • the terminal side is provided with data encryption and data decryption functions by the security chip
  • the server side is provided with data encryption and data decryption functions by the IoT security access platform.
  • the security chip encryption protocol since the security chip encryption protocol, devices and services are all provided by IoT security manufacturers, other users cannot modify their contents. After the secure communication system is running, the security chip encryption protocol does not support changes.
  • FIG3 is a schematic diagram of data interaction between a security module and a server provided by an embodiment of the present disclosure.
  • encrypted data transmission can be performed between the security module and the server based on the security chip encryption protocol.
  • the communication module in the security module can execute step 301, call the API interface of the internally integrated security SDK, and send the data to be encrypted to the security chip.
  • the security chip executes step 302, encrypts the data to be encrypted based on the security chip encryption protocol, and sends the encrypted data to the communication module.
  • the communication module executes step 303, and sends the encrypted data to the Internet of Things security access platform in the server.
  • the Internet of Things security access platform executes step 304, decrypts the data based on the security chip encryption protocol, and sends the decrypted data to the Internet of Things application platform.
  • the process of the server sending encrypted data to the security module is similar.
  • the Internet of Things application platform in the server executes step 305, and sends the data to be encrypted to the Internet of Things security access platform.
  • the Internet of Things security access platform executes step 306, encrypts the data to be encrypted based on the security chip encryption protocol, and sends the encrypted data to the communication module in the security module.
  • the communication module executes step 307 to send the encrypted data to the security chip.
  • the security chip executes step 308 to decrypt the data based on the security chip encryption protocol and send the decrypted data back to the communication module.
  • the security chip encryption protocol by applying the security chip encryption protocol, the security of data transmission between the security module in the terminal and the server can be improved.
  • the main controller can perform encrypted data transmission with the server through the security module.
  • the main controller can send unencrypted plaintext data to the security module, which is encrypted by the security module based on the security chip encryption protocol and then forwarded to the server.
  • Figure 4 is a schematic diagram of data interaction between a main controller and a server provided by an embodiment of the present disclosure. As shown in Figure 4, the main controller executes step 401 to send unencrypted plaintext data to the communication module in the security module.
  • the communication module executes step 402, calls the API interface of the internally integrated security SDK, and forwards the data sent by the main controller to the security chip.
  • the security chip executes step 403 to encrypt the data based on the security chip encryption protocol, and sends the encrypted data back to the communication module.
  • the communication module executes step 404 to send the encrypted data to the Internet of Things security access platform in the server.
  • the Internet of Things security access platform executes step 405 to decrypt the data based on the security chip encryption protocol to obtain the plaintext data sent by the main controller, and sends the decrypted plaintext data to the Internet of Things application platform.
  • the process of the server sending data to the main controller is similar.
  • the Internet of Things application platform executes step 406 to send the unencrypted plaintext data to the Internet of Things security access platform.
  • the Internet of Things security access platform executes step 407 to apply the security chip encryption protocol to encrypt the data, and sends the encrypted data to the communication module in the security module.
  • the communication module executes step 408 to forward the received encrypted data to the security chip.
  • the security chip executes step 409 to decrypt the data based on the security chip encryption protocol, and sends the decrypted data back to the communication module.
  • the communication module then forwards the decrypted data to the main controller.
  • forwarding and data encryption are performed by the security module to ensure the security of communication between devices.
  • the main controller and the server can perform encrypted data transmission based on the second encryption protocol, that is, the main controller and the server can transmit data that is confidential to the security module.
  • the second encryption protocol is a custom encryption protocol between the main controller and the Internet of Things application platform. Both the main controller and the Internet of Things application platform can perform data encryption or data transmission based on the second encryption protocol. According to decryption.
  • Figure 5 is another schematic diagram of data interaction between a main controller and a server provided by an embodiment of the present disclosure. As shown in Figure 5, the main controller executes step 501 to encrypt data based on the second encryption protocol to obtain second encrypted data, and sends the second encrypted data to the communication module in the security module.
  • the communication module executes step 502, calls the API interface of the internally integrated security SDK, and sends the data to be encrypted, that is, the second encrypted data.
  • the security chip executes step 503 to receive the second encrypted data forwarded by the communication module, and encrypts the second encrypted data based on the security chip encryption protocol to obtain third encrypted data.
  • the communication module executes step 504 to forward the third encrypted data to the server.
  • the server receives the third encrypted data and decrypts the third encrypted data based on the security chip protocol and the second encryption protocol.
  • the Internet of Things security access platform in the server receives the third encrypted data, executes step 505 to decrypt the third encrypted data based on the security chip encryption protocol, obtains the second encrypted data, and forwards the decrypted second encrypted data to the Internet of Things application platform.
  • the Internet of Things application platform executes step 506 to receive the second encrypted data, decrypts the second encrypted data based on the second encryption protocol, and obtains the original data sent by the main controller.
  • the process of the server sending encrypted data to the main controller is similar.
  • the Internet of Things application platform executes step 507 to encrypt the plaintext data to be sent based on the second encryption protocol to obtain the encrypted intermediate data, and then executes step 508 to send the intermediate data to the Internet of Things security access platform.
  • the Internet of Things security access platform executes step 509 to encrypt the intermediate data based on the security chip encryption protocol, and then executes step 510 to send the encrypted data to the communication module.
  • the communication module forwards it to the security chip for decryption.
  • the security chip executes step 511 to decrypt the received data based on the security chip encryption protocol to obtain the intermediate data, and sends the intermediate data back to the communication module.
  • the communication module executes step 512 to forward the decrypted data, that is, forward the intermediate data to the main controller.
  • the main controller executes step 513 to decrypt the data based on the second encryption protocol to obtain the original plaintext data sent by the Internet of Things application platform.
  • the transmission intermediate device can be a security module, an Internet of Things security access platform, etc.
  • the communication between the security module and the main controller may be implemented through AT (Attention) instructions, or through user-defined protocols and channels, which is not limited in the embodiments of the present disclosure.
  • the data sent by the server to the security module may carry at least one of a second data receiver identifier and a second encryption identifier.
  • the second data receiver identifier is used to indicate a data receiving device, for example, the second data receiver identifier may be an identifier of a security module or an identifier of a main controller.
  • the security module may determine whether the received data is processed by the security module or forwarded to the main controller based on the second data receiver identifier. Optionally, this judgment process may be performed by a communication module in the security module.
  • the second encryption identifier is used to indicate whether the data is encrypted using a second encryption protocol, and the main controller may determine whether it is necessary to decrypt the received data based on the second encryption protocol based on the second encryption identifier. For example, in an embodiment of the present disclosure, after the main controller receives the intermediate data forwarded by the communication module, in response to the intermediate data carrying the second encryption identifier, the step of decrypting the intermediate data based on the second encryption protocol is executed; in response to the intermediate data not carrying the second encryption identifier, the intermediate data is used as the original plaintext data sent by the server.
  • the data sent by the server may also carry other information, which is not limited in the embodiment of the present disclosure.
  • the information carried by the data sent by the server may be data encrypted using the second encryption protocol or the security chip encryption protocol, which is not limited in this embodiment of the present disclosure.
  • the first encryption protocol and the second encryption protocol can be set by the developer.
  • both the first encryption protocol and the second encryption protocol can be implemented in the form of "algorithm" + "key”
  • the first encryption protocol is deployed in the software run by the communication module and the software run by the main controller
  • the second encryption protocol is deployed in the software run by the main controller and the Internet of Things application platform.
  • the first encryption protocol supports changes, for example, the software firmware related to the first encryption protocol in the main controller and the security module can be upgraded respectively by remote upgrade OTA (Over-the-Air Technology).
  • the second encryption protocol supports changes, for example, the software firmware related to the second encryption protocol on the Internet of Things application platform can be upgraded.
  • the software firmware related to the second encryption protocol in the main controller is upgraded by remote upgrade OTA.
  • FIG. 6 is a flowchart of upgrading the first encryption protocol provided by the embodiment of the present disclosure.
  • a developer can make a first software firmware upgrade package that supports the upgraded first encryption protocol to run on the main controller, and a second software firmware upgrade package that supports the upgraded first encryption protocol to run on the communication module, and add the first software firmware upgrade package and the second software firmware upgrade package to the Internet of Things application platform in the server, that is, the process of executing step 601.
  • the running software of the first encryption protocol in the main controller is upgraded.
  • the process can be implemented as follows: the server executes step 602 to send a first upgrade instruction to the security module, and then forwards the first upgrade instruction to the main controller through the security module, and the first upgrade instruction carries the first software firmware upgrade package.
  • the main controller executes step 603 to upgrade the running software of the first encryption protocol in the main controller based on the first upgrade instruction, that is, the main controller can complete the upgrade of the first encryption protocol by burning the first software firmware upgrade package.
  • the main controller completes the upgrade of the first encryption protocol, it sends the version number of the upgraded first encryption protocol and the main controller identifier to the Internet of Things application platform in the server.
  • the Internet of Things application platform executes step 604 to receive and detect the correctness of the version number of the upgraded first encryption protocol and the main controller identifier. If the version number of the upgraded first encryption protocol and the main controller identifier are correct, the upgrade is successful. If the upgraded first encryption protocol version number and the main controller identifier are correct, the upgrade is successful. If the version number of the encryption protocol and the main controller identifier are incorrect, the upgrade fails. In response to the upgrade failure, the server re-issues the first upgrade instruction to the main controller, that is, re-executes the above step 602. In response to the upgrade success, continue to execute the subsequent steps of upgrading the running software of the first encryption protocol in the communication module. Finally, the running software of the first encryption protocol in the communication module is upgraded.
  • the process can be implemented as follows: the server executes step 605 to send a second upgrade instruction to the communication module in the security module, and the second upgrade instruction carries the second software firmware upgrade package.
  • the communication module executes step 606 to upgrade the running software of the first encryption protocol in the communication module based on the second upgrade instruction, that is, the communication module can complete the upgrade of the first encryption protocol by burning the second software firmware upgrade package.
  • the upgraded version number of the first encryption protocol and the main controller identifier are sent to the Internet of Things application platform in the server.
  • the Internet of Things application platform executes step 607 to receive and detect the correctness of the version number of the upgraded first encryption protocol and the main controller identifier.
  • the upgrade is successful. If the version number of the upgraded first encryption protocol and the main controller identifier are correct, the upgrade is successful. If the version number of the upgraded first encryption protocol and the main controller identifier are incorrect, the upgrade fails. In response to the upgrade failure, the server re-issues the second upgrade instruction to the communication module, that is, re-executes the above step 605. In response to the successful upgrade, it is determined that the upgrade of the first encryption protocol is complete. In the embodiment of the present disclosure, by upgrading the first encryption protocol, the data encryption effect is ensured, and the security of data transmission between modules inside the terminal device is further improved.
  • FIG. 7 is a flowchart of upgrading a second encryption protocol provided by an embodiment of the present disclosure.
  • the developer can integrate and deploy the upgraded second encryption protocol in the Internet of Things application platform in the server, that is, execute the process of step 701 to complete the upgrade of the running software of the second encryption protocol in the server.
  • the Internet of Things application platform supports data encryption and data decryption based on the upgraded second encryption protocol.
  • the developer can also make a third software firmware upgrade package that supports the upgraded second encryption protocol to run on the main controller, and add it to the Internet of Things application platform of the server, that is, execute the process of step 702. Then, the running software of the second encryption protocol in the main controller is upgraded.
  • the process can be implemented as follows: the server executes step 703 to send a third upgrade instruction to the security module, and then forwards the third upgrade instruction to the main controller through the security module, and the third upgrade instruction carries the third software firmware upgrade package.
  • the main controller receives the third upgrade instruction sent by the server in step 704, it upgrades the running software of the second encryption protocol in the main controller based on the third upgrade instruction, that is, the main controller can complete the upgrade of the second encryption protocol by burning the third software firmware upgrade package.
  • the main controller sends the version number of the upgraded second encryption protocol and the main controller identifier to the Internet of Things application platform in the server.
  • the Internet of Things application platform executes step 705 to receive and detect the correctness of the version number of the upgraded second encryption protocol and the main controller identifier. If the upgraded version number of the second encryption protocol and the main controller identifier are correct, the upgrade is successful. If the upgraded version number of the second encryption protocol and the main controller identifier are incorrect, the upgrade fails. In response to the upgrade failure, the server re-issues the third upgrade instruction to the main controller, that is, re-executes step 703. In response to the upgrade success, it is determined that the upgrade of the second encryption protocol is complete. In the embodiment of the present disclosure, by upgrading the second encryption protocol, the data encryption effect is ensured, and the security of data transmission between the main controller and the server is further improved.
  • the version number of the first encryption protocol and the version number of the second encryption protocol can be used to manage the software version.
  • the version numbers before and after the upgrade are different, which can be used to determine whether the running software of the encryption protocol has been successfully upgraded.
  • the communication module identifier and the main controller identifier can be used for device management.
  • the identifier can be the IMEI (International Mobile Equipment Identity) number, SN (serial number), hardware version number, etc. of the device.
  • IMEI International Mobile Equipment Identity
  • SN serial number
  • the transmission method of the software firmware upgrade package there is no limitation on the transmission method of the software firmware upgrade package.
  • the second encryption protocol and the security chip encryption protocol can be used for encryption and transmission, or only the security chip encryption protocol can be used for encryption and transmission.
  • the security module in the disclosed embodiment includes a communication module and a security chip. Inside the terminal device, the communication module performs encrypted data transmission with other modules in the terminal based on the first encryption protocol. During external communication, the security chip performs encrypted data transmission with external servers and other devices based on the security chip encryption protocol. In this solution, by applying the security encryption function of the security chip and the custom encryption algorithm between the modules inside the terminal, secure communication under multiple encryption methods is achieved. While ensuring the security of data transmission between the terminal and the external server, the risk of data leakage during transmission between modules inside the terminal device is also avoided.
  • Fig. 8 is a schematic diagram of the hardware structure of a computer device provided in an embodiment of the present disclosure.
  • the above-mentioned terminal and server can be regarded as a computer device.
  • the computer device may include a processor 801 and a memory 802 storing computer program instructions.
  • the above-mentioned processor 801 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present disclosure.
  • CPU central processing unit
  • ASIC application specific integrated circuit
  • the memory 802 may include a large capacity memory for data or instructions.
  • the memory 802 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive, or a combination of two or more of these.
  • the memory 802 may include a removable or non-removable (or fixed) medium, or the memory 802 is a non-volatile solid-state memory.
  • the memory 802 may be internal or external to the computing device.
  • the memory 802 may include read-only memory (ROM), random access memory (RAM), disk storage media, Device, optical storage medium device, flash memory device, electrical, optical or other physical/tangible memory storage device.
  • the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to an aspect of the present disclosure.
  • the processor 801 implements the secure communication method shown in FIG. 2 to FIG. 7 by reading and executing the computer program instructions stored in the memory 802 .
  • the computer device may further include a communication interface 803 and a bus 804. As shown in Fig. 8, the processor 801, the memory 802, and the communication interface 803 are connected via the bus 804 and communicate with each other.
  • the communication interface 803 is mainly used to implement communication between various modules, devices, units and/or equipment in the embodiments of the present disclosure.
  • the bus 804 includes hardware, software, or both, coupling the components of the online data traffic metering device to each other.
  • the bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Extended Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hyper Transport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an InfiniBand interconnect, a Low Pin Count (LPC) bus, a Memory bus, a Micro Channel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local (VLB) bus, or other suitable busses or a combination of two or more of these.
  • the bus 304 may include one or more buses. Although the embodiments of the present disclosure describe and illustrate specific buses, the present disclosure contemplates any suitable bus or interconnect.
  • the embodiment of the present disclosure may provide a computer storage medium for implementation.
  • the computer storage medium stores computer program instructions; when the computer program instructions are executed by the processor, any of the secure communication methods in the above embodiment is implemented.
  • the computer storage medium may be a non-transitory computer-readable storage medium.
  • the functional blocks (modules) shown in the structural block diagram described above can be implemented as hardware, software, firmware or a combination thereof.
  • it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc.
  • ASIC application specific integrated circuit
  • the components/elements of the present disclosure are programs or code segments used to perform the required tasks.
  • the program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link through a data signal carried in a carrier.
  • "Machine-readable medium" may include any medium capable of storing or transmitting information.
  • machine-readable media examples include electronic circuits, semiconductor memory devices, read-only memory (ROM), flash memory, erasable read-only memory (EROM), floppy disks, compact discs (CD-ROM), optical discs, hard disks, optical fiber media, radio frequency (RF) links, etc.
  • the code segment can be downloaded via a computer network such as the Internet, an intranet, etc.
  • the exemplary embodiments mentioned in the present disclosure describe some methods or systems based on a series of steps or devices.
  • the present disclosure is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiments, or in a different order from the embodiments, or several steps can be performed simultaneously.
  • Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and/or flowchart and the combination of boxes in the block diagram and/or flowchart can also be implemented by dedicated hardware that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer And Data Communications (AREA)
  • Communication Control (AREA)

Abstract

本公开提供了一种安全模组、安全通信系统及方法、存储介质和程序产品。本公开中的安全模组包括通信模组和安全芯片，在终端设备内部，该通信模组基于第一加密协议，与终端内的其他模组进行加密数据传输，在外部通信过程中，该安全芯片基于安全芯片加密协议与外部服务器等设备进行加密数据传输。在本方案中，通过应用安全芯片的安全加密功能，终端内部各模组之间的的自定义加密算法，实现多重加密方法下的安全通信，在保障终端和外部服务器之间数据传输安全性的同时，也避免了数据在终端设备内部模组之间传输过程中被泄露的风险。

Description

安全模组、安全通信系统及方法、存储介质和程序产品
相关申请的交叉引用
本公开基于申请号为202311620399.9、申请日为2023年11月29日的中国专利申请提出，并要求该中国专利申请的优先权，该中国专利申请的全部内容在此引入本公开作为参考。
技术领域
本公开属于通信技术领域，尤其涉及一种安全模组、安全通信系统及方法、存储介质和程序产品。
背景技术
随着终端通信技术、物联网技术的快速发展，设备间的通信量大幅增长，也对通信安全提出了更高要求。目前的通信技术大多通过部署安全服务，来确保不同终端设备之间、终端设备与服务器之间的通信安全，但是在各个终端设备内部，缺少相应的安全机制，因为数据在终端设备内的各个模组之间传输时，存在泄漏风险，所以无法全面保障通信系统的数据安全。
发明内容
本公开实施例提供一种安全模组、安全通信系统及方法、存储介质和程序产品，能够实现多重加密方法下的安全通信，在保障终端设备和外部服务器之间数据传输安全性的同时，也避免了数据在终端设备内部的各个模组之间传输过程中被泄露的风险。
在第一方面，本公开实施例提供一种安全模组，该安全模组包括通信模组和安全芯片；该通信模组，用于基于第一加密协议进行数据加密或数据解密，其中该第一加密协议是该安全模组所在的终端内部的数据传输加密协议；该安全芯片，用于基于安全芯片加密协议进行数据加密或数据解密，其中该安全芯片加密协议是该安全模组所在的终端与外部设备之间的数据传输加密协议。
在第二方面，本公开实施例提供了一种安全通信系统，该安全通信系统包括上述第一方面提供的安全模组，以及主控制器、服务器；该安全模组与该主控制器部署在同一终端；该安全模组与该主控制器之间基于第一加密协议进行加密数据传输；该安全模组与该服务器之间基于安全芯片加密协议进行加密数据传输；该主控制器与该服务器之间基于第二加密协议进行数据传输。
在第三方面，本公开实施例提供了一种安全通信方法，该方法应用上述第二方面提供的安全通信系统，该方法包括：由该主控制器基于该第一加密协议进行数据加密，得到第一加密数据；由该主控制器将该第一加密数据发送至该安全模组中的该通信模组；以及由该通信模组接收该第一加密数据，基于该第一加密协议对该第一加密数据进行解密。
在第四方面，本公开实施例提供了一种计算机存储介质，其上存储有指令，所述指令被处理器执行时实现如上述第三方面所述的方法。
在第四方面，本公开实施例提供了一种包括指令的计算机程序产品，所述指令被处理器执行时，使得所述处理器执行如上述第三方面所述的方法。
本公开实施例提供了一种安全模组、安全通信系统及方法，所述安全模组包括通信模组和安全芯片，在终端设备内部，该通信模组基于第一加密协议，与终端内的其他模组进行加密数据传输，在外部通信过程中，该安全芯片基于安全芯片加密协议与外部服务器等设备进行加密数据传输。在本方案中，通过应用安全芯片的安全加密功能，终端内部各模组之间的的自定义加密算法，实现多重加密方法下的安全通信，在保障终端和外部服务器之间数据传输安全性的同时，也避免了数据在终端设备内部模组之间传输过程中被泄露的风险。
附图说明
为了更清楚地说明本公开实施例的技术方案，下面将对本公开实施例中所需要使用的附图作简单的介绍，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1是本公开实施例提供的一种安全通信系统的示意图。
图2是本公开实施例提供的一种主控制器与安全模组之间的数据交互示意图。
图3是本公开实施例提供的一种安全模组与服务器之间的数据交互示意图。
图4是本公开实施例提供的一种主控制器与服务器之间的数据交互示意图。
图5是本公开实施例提供的另一种主控制器与服务器之间的数据交互示意图。
图6是本公开实施例提供的一种升级第一加密协议的流程图。
图7是本公开实施例提供的一种升级第二加密协议的流程图。
图8是本公开实施例提供的一种计算机设备的结构示意图。
具体实施方式
下面将详细描述本公开的各个方面的特征和示例性实施例，为了使本公开的目的、技术方案及优点更加清楚明白，以下结合附图及具体实施例，对本公开进行进一步详细描述。应理解，此处所描述的具体实施例仅意在解释本公开，而不是限定本公开。对于本领域技术人员来说，本公开可以在不需要这些具体细节中的一些细节的情况下实施。下面对实施例的描述仅仅是为了通过示出本公开的示例来提供对本公开更好的理解。
需要说明的是，在本文中，诸如第一和第二等等术语仅仅用来将一个实体或者操作与另一个实体或操作区分开来，而不一定要求或者暗示这些实体或操作之间存在任何这种实际的关系或者顺序。而且，术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含，从而使得包括一系列要素的过程、方法、物品或者设备不仅包括那些要素，而且还包括没有明确列出的其他要素，或者是还包括为这种过程、方法、物品或者设备所固有的要素。在没有更多限制的情况下，由语句“包括……”限定的要素，并不排除在包括所述要素的过程、方法、物品或者设备中还存在另外的相同要素。
为了解决现有技术问题，本公开实施例提供了一种安全模组、安全通信系统及方法。下面结合附图进行详细说明。图1是本公开实施例提供的一种安全通信系统的示意图。如图1所示，该安全通信系统包括安全模组101、主控制器102和服务器103。在一个实施例中，该安全模组101与该主控制器102部署在同一终端104，也即是，该安全模组与该主控制器是同一终端内部的不同硬件模块。该终端104可以是智能手机、平板电脑、便携型计算机、台式计算机等，本公开实施例对此不做限定。
在一个实施例中，该安全模组101属于终端104的通信单元。示例性的，该安全模组101外观上与传统通信模组一致，是具有安全加密能力和网络通信能力的通信模组，用于实现终端104与服务器103之间的通信。在一个实施例中，该安全模组101包括通信模组1011和安全芯片1012，该通信模组1011与安全芯片1012之间可以进行数据交互。示例性的，该通信模组1011和安全芯片1012可以通过物理接口连接，该物理接口可以是串口、I2C、SPI等接口，本公开实施例对此不做限定。可选地，该通信模组1011上可以集成有与安全芯片1012适配的安全软件开发工具包(Software Development Kit，SDK)，调用该安全SDK提供的API接口能够驱动安全芯片1012提供安全通信服务。
在一个实施例中，该主控制器102是终端设备的控制单元，该主控制器102可以通过安全模组101与服务器103进行数据交互。在一个实施例中，该主控制器102属于终端104的控制单元，可以用于接收安全模组101发送的控制指令，并完成该控制指令所指示的操作以及回复操作结果。在一个实施例中，该主控制器102可以实现为单片机MCU(Microcontroller Unit，微控单元)，本公开实施例对此不做限定。
在一个实施例中，服务器103部署在云端，该服务器103可以是一台服务器、多台服务器、云计算平台等，本公开实施例对服务器103的设备类型不做限定。该服务器103可以通过无线网络或有线网络与终端104相连，实现对终端104的通信和控制。在一个实施例中，服务器103可以向安全模组101中的通信模组1011和主控制器1012提供远程升级服务，安全模组101中的通信模组1011和主控制器1012支持远程升级功能。
在一个实施例中，该服务器103包括物联网安全接入平台1031和物联网应用平台1032。示例性的，该物联网安全接入平台1031可以和终端104进行通信，可以对传输的数据进行加密、解密和数据签名等操作。该物联网应用平台1032可以提供设备接入、数据采集、数据处理、应用管理等功能。
下面结合附图对上述安全通信系统中终端内部的各硬件之间的通信流程进行详细说明。在本公开实施例中，安全模组与主控制器之间可以基于第一加密协议进行加密数据传输。其中，该第一加密协议是该安全模组所在的终端内部的数据传输加密协议。示例性的，在本公开实施例中，该第一加密协议可以是安全模组和主控制器之间的自定义加密协议，该主控制器和该安全模组中的通信模组均可以基于第一加密协议进行数据加密或数据解密。图2是本公开实施例提供的一种主控制器与安全模组之间的数据交互示意图。如图2中的图(a)所示，在一个实施例中，该主控制器可以基于该第一加密协议进行数据加密，得到第一加密数据，再将该第一加密数据发送至该安全模组中的通信模组。也即是，执行步骤201，发送基于第一加密协议加密后的数据。在该通信模组接收该第一加密数据之后，基于该第一加密协议对该第一加密数据进行解密，得到该主控制器发送的原始数据。在这一场景中，仅调用安全模组中的通信模组，由该主控制器和通信模组分别提供数据加密或解密功能，无需调用安全芯片，该主控制器与该安全模组中的通信模组之间可以直接传输加密数据。在一个实施例中，该通信模组也可以执行步骤202，向主控制器发送基于第一加密协议加密后的数据，主控制器基于第一加密协议对收到的数据进行解密。需要说明的是，本公开实施例中，对步骤201和步骤202的执行顺序不做限定。在本公开实施例中，通过该第一加密协议对主控制器和安全模组之间的数据传输进行加密，能够避免出现终端内部数据泄密的情况。
在本公开实施例中，终端内的各个模组之间也可以传输未加密的明文数据。如图2中的图(b)所示，在一个实施例中，该主控制器与安全模组之间可以传输未加密的明文数据。示例性的，主控制器可以执行步骤203，向通信模组发送未加密的明文数据，通信模组可以执行步骤204，向主控制器发送未加密的明文数据。本公开实施例中，对步骤203和步骤204的执行顺序不做限定。在这一场景中，仅需调用安全模组中的通信模组，无需安全芯片进行数据加密，该主控制器与该安全模组中的通信模组之间直接传输未加密的明文数据。
在一个实施例中，主控制器发给安全模组的数据可以携带有第一数据接收方标识、第一加密标识中的至少一项。其中，该第一数据接收方标识用于指示数据接收设备，例如，该第一数据接收方标识可以是安全模组的标识或服务器的标识。安全模组接收到主控制器发送的数据后，可以基于该第一数据接收方标识判断接收到的数据是由该安全模组进行数据处理还是转发给服务器。在一个实施例中，这一判断过程可以由安全模组中的通信模组执行。该第一加密标识用于指示数据是否采用第一加密协议进行加密，安全模组可以基于该第一加密标识，判断是否需要基于第一加密协议对接收到的数据进行解密。例如，在本公开实施例中，该通信模组接收第一加密数据后，响应于该第一加密数据携带该第一加密标识，执行基于该第一加密协议对该第一加密数据进行解密的步骤。该主控制器发送的数据还可以携带其他信息，本公开实施例对此不做限定。在一个实施例中，该主控制器发送的数据所携带的信息可以是未加密的明文数据，也可以是采用第一加密协议加密后的数据，本公开实施例对此不做限定。
下面结合附图对上述安全通信系统中各个设备之间的通信流程进行详细说明。在本公开实施例中，该安全模组与服务器之间可以基于安全芯片加密协议进行加密数据传输。其中，该安全芯片加密协议是安全模组所在的终端与外部设备之间的数据传输加密协议。示例性的，该安全芯片加密协议可以由物联网安全厂家提供，集成在安全芯片和物联网安全接入平台中，该安全模组中的安全芯片和服务器中的物联网安全接入平台均可以基于该安全芯片加密协议进行数据加密或数据解密。也即是，终端侧由安全芯片提供数据加密和数据解密功能，服务器侧由物联网安全接入平台提供数据加密和数据解密功能。在一个实施例中，由于该安全芯片加密协议、设备和服务均由物联网安全厂家提供，其他用户不可修改其内容，在该安全通信系统运行后，安全芯片加密协议不支持更改。
图3是本公开实施例提供的一种安全模组与服务器之间的数据交互示意图。如图3所示，在一个实施例中，该安全模组和服务器之间可以基于安全芯片加密协议进行加密数据传输。示例性的，该安全模组中的通信模组可以执行步骤301，调用内部集成的安全SDK的API接口，将待加密的数据发送至安全芯片。该安全芯片执行步骤302，基于该安全芯片加密协议对待加密的数据进行加密，将加密后的数据发送至通信模组。该通信模组执行步骤303，将加密后的数据发送至服务器中的物联网安全接入平台。该物联网安全接入平台执行步骤304，基于安全芯片加密协议进行数据解密，将解密后的数据发送至物联网应用平台。该服务器向安全模组发送加密数据的过程同理。示例性的，该服务器中的物联网应用平台执行步骤305，将待加密的数据发送至物联网安全接入平台。该物联网安全接入平台执行步骤306，基于该安全芯片加密协议对待加密的数据进行加密，将加密后的数据发送至该安全模组中的通信模组。该通信模组执行步骤307，将该加密后的数据发送至安全芯片。由该安全芯片执行步骤308，基于安全芯片加密协议进行数据解密，将解密后的数据发回至该通信模组。在本公开实施例中，通过应用安全芯片加密协议，能够提高终端中安全模组与服务器之间数据传输的安全性。
在本公开实施例中，主控制器可以通过安全模组与服务器进行加密数据传输。在一个实施例中，主控制器可以将未加密的明文数据发送给安全模组，由安全模组基于安全芯片加密协议加密后转发至服务器。图4是本公开实施例提供的一种主控制器与服务器之间的数据交互示意图。如图4所示，主控制器执行步骤401，将未加密的明文数据发送给安全模组中的通信模组。该通信模组执行步骤402，调用内部集成的安全SDK的API接口，将主控制器发送的数据转发给安全芯片。由安全芯片执行步骤403，基于安全芯片加密协议进行数据加密，并将加密后的数据发回至通信模组。该通信模组执行步骤404将加密后的数据发送给服务器中的物联网安全接入平台。该物联网安全接入平台执行步骤405，基于安全芯片加密协议进行数据解密，得到该主控器发送的明文数据，并将解密后得到的该明文数据发送给物联网应用平台。该服务器向主控制器发送数据的过程同理。示例性的，物联网应用平台执行步骤406将未加密的明文数据发送至物联网安全接入平台。由该物联网安全接入平台执行步骤407应用安全芯片加密协议进行数据加密，并将加密后的数据发送个安全模组中的通信模组。该通信模组执行步骤408将接收到的加密后的数据转发给安全芯片。由该安全芯片执行步骤409基于安全芯片加密协议进行数据解密，并将解密后的数据发回至通信模组。再由通信模组将解密后的数据转发给主控制器。在本公开实施例中，主控制器与服务器进行通信过程中，通过安全模组进行转发和数据加密，能够确保设备间通信的安全性。
在一个实施例中，该主控制器与该服务器之间可以基于第二加密协议进行加密数据传输，也即是主控制器与服务器之间可以传输对安全模组保密的数据。其中，该第二加密协议是主控制器与物联网应用平台之间的自定义加密协议，主控制器和物联网应用平台均可以基于该第二加密协议进行数据加密或数 据解密。图5是本公开实施例提供的另一种主控制器与服务器之间的数据交互示意图。如图5所示，该主控制器执行步骤501基于第二加密协议进行数据加密，得到第二加密数据，将该第二加密数据发送至安全模组中的通信模组。该通信模组执行步骤502，调用内部集成的安全SDK的API接口，发送待加密的数据，即该第二加密数据。该安全芯片执行步骤503接收通信模组转发的第二加密数据，基该安全芯片加密协议对该第二加密数据进行加密，得到第三加密数据。该通信模组在接收到该安全芯片发送的第三加密数据后，执行步骤504将该第三加密数据转发至该服务器。该服务器接收第三加密数据，基于该安全芯片协议和该第二加密协议对该第三加密数据进行解密。在一个实施例中，由该服务器中的物联网安全接入平台接收该第三加密数据，执行步骤505基于安全芯片加密协议对该第三加密数据进行解密，得到该第二加密数据，将解密出的第二加密数据转发至该物联网应用平台。该物联网应用平台执行步骤506接收该第二加密数据，基于第二加密协议对该第二加密数据进行解密，得到该主控制器发送的原始数据。该服务器向主控制器发送加密数据的过程同理。示例性的，该物联网应用平台执行步骤507基于第二加密协议对待发送的明文数据进行数据加密，得到加密后的中间数据，再执行步骤508将该中间数据发送至物联网安全接入平台。该物联网安全接入平台执行步骤509基于安全芯片加密协议对该中间数据进行加密，再执行步骤510将加密后的数据发送至通信模组。由通信模组转发给安全芯片进行解密。安全芯片执行步骤511基于安全芯片加密协议对接收到的数据进行解密，得到中间数据，将该中间数据发回至通信模组。该通信模组执行步骤512转发解密后的数据，即将该中间数据转发给主控制器。由主控制器执行步骤513基于第二加密协议进行数据解密，得到该物联网应用平台发送的原始的明文数据。
本公开实施例中，通过应用该第二加密协议，主控制器与服务器之间传输的数据对终端中的其他模块保密，能够保障数据在主控制器与物联网应用平台间之间传输的过程中不会被传输中间设备解析和窃取。示例性的，该传输中间设备可以是安全模组、物联网安全接入平台等。
在一个实施例中，上述安全模组与主控制器之间的通信可以通过AT(Attention)指令实现，也可以通过用户自定义的协议和通道实现，本公开实施例对此不做限定。
在一个实施例中，服务器发送给安全模组的数据可以携带有第二数据接收方标识、第二加密标识中的至少一项。其中该第二数据接收方标识用于指示数据接收设备，例如，该第二数据接收方标识可以是安全模组的标识或主控制器的标识。在安全模组接收到接收到服务器发送的数据后，可以基于该第二数据接收方标识判断接收到的数据是由该安全模组进行数据处理还是转发给主控制器。可选地，这一判断过程可以由安全模组中的通信模组执行。该第二加密标识用于指示数据是否采用第二加密协议进行加密，主控制器可以基于该第二加密标识，判断是否需要基于第二加密协议对接收到的数据进行解密。例如在本公开实施例中，该主控制器接收到通信模组转发的该中间数据后，响应于该中间数据携带该第二加密标识，执行基于第二加密协议对该中间数据进行解密的步骤；响应于该中间数据不携带该第二加密标识，则将该中间数据作为服务器发送的原始的明文数据。当然，该服务器发送的数据还可以携带其他信息，本公开实施例对此不做限定。在一个实施例中，该服务器发送的数据所携带的信息可以是采用第二加密协议或安全芯片加密协议加密后数据，本公开实施例对此不做限定。
在一个实施例中，该第一加密协议和第二加密协议可以由开发人员进行设置。示例性的，该第一加密协议和第二加密协议均可以实现为“算法”+“key”的形式，该第一加密协议部署在通信模组所运行的软件中和主控制器所运行的软件中，该第二加密协议部署在主控制器所运行软件中和物联网应用平台上。在一个实施例中，该第一加密协议支持更改，例如，可以通过远程升级OTA(Over-the-Air Technology，空中下载技术)的方式，分别对主控制器和安全模组中该第一加密协议相关的软件固件进行升级。在一个实施例中，该第二加密协议协议支持更改，例如，可以对物联网应用平台上该第二加密协议相关的软件固件进行升级。通过远程升级OTA的方式，对主控制器中该第二加密协议相关的软件固件进行升级。
下面结合附图对上述第一安全协议和第二安全协议的升级流程进行详细说明。在一个实施例中，该通信模组和主控制器可以用于对该第一加密协议的运行软件进行升级。图6是本公开实施例提供的一种升级第一加密协议的流程图。如图6所示，首先，可以由开发人员制作支持升级后的第一加密协议在主控制器上运行的第一软件固件升级包，以及支持升级后的第一加密协议在通信模组上运行的第二软件固件升级包，并将该第一软件固件升级包和第二软件固件升级包添加至服务器中的物联网应用平台，也即是执行步骤601的过程。然后，对主控制器中第一加密协议的运行软件进行升级。示例性的，该过程可以实现为，服务器执行步骤602发送第一升级指令给安全模组，然后通过安全模组将该第一升级指令转发给主控制器，该第一升级指令携带该第一软件固件升级包。该主控制器在接收到服务器发送的第一升级指令之后，执行步骤603基于该第一升级指令对该主控制器中第一加密协议的运行软件进行升级，即该主控制器可以通过对该第一软件固件升级包进行烧录来完成对第一加密协议的升级。该主控制器完成对第一加密协议的升级后，将升级后的第一加密协议的版本号、主控制器标识发送至服务器中的物联网应用平台。物联网应用平台执行步骤604，接收并检测升级后的第一加密协议的版本号、主控制器标识的正确性。若升级后的第一加密协议的版本号、主控制器标识是正确的，则升级成功。若升级后的第一加 密协议的版本号、主控制器标识是不正确的，则升级失败。响应于升级失败，服务器重新下发该第一升级指令给主控制器，即重新执行上述步骤602。响应于升级成功，继续执行后续对通信模组中第一加密协议的运行软件进行升级的步骤。最后，对通信模组中第一加密协议的运行软件进行升级。示例性的，该过程可以实现为，服务器执行步骤605，发送第二升级指令给该安全模组中的通信模组，该第二升级指令携带该第二软件固件升级包。该通信模组在接收到该服务器发送的第二升级指令后，执行步骤606基于该第二升级指令对该通信模组中第一加密协议的运行软件进行升级，即该通信模组可以通过对该第二软件固件升级包进行烧录来完成对第一加密协议的升级。该通信模组完成对第一加密协议的升级后，将升级后的第一加密协议的版本号、主控制器标识发送至服务器中的物联网应用平台。物联网应用平台执行步骤607接收并检测升级后的第一加密协议的版本号、主控制器标识的正确性。若升级后的第一加密协议的版本号、主控制器标识是正确的，则升级成功。若升级后的第一加密协议的版本号、主控制器标识是不正确的，则升级失败。响应于升级失败，服务器重新下发该第二升级指令给通信模组，即重新执行上述步骤605。响应于升级成功，则确定第一加密协议升级完成。在本公开实施例中，通过对第一加密协议进行升级，确保数据加密效果，进一步提高数据在终端设备内部各个模组之间传输的安全性。
图7是本公开实施例提供的一种升级第二加密协议的流程图。如图7所示，首先，开发人员可以在服务器中的物联网应用平台集成、部署升级后的第二加密协议，即执行步骤701的过程，完成对服务器中第二加密协议的运行软件的升级。部署后该物联网应用平台支持基于升级后的第二加密协议进行数据加密和数据解密。开发人员还可以制作支持升级后的第二加密协议在主控制器上运行的第三软件固件升级包，并添加到服务器的物联网应用平台中，即执行步骤702的过程。然后，对主控制器中第二加密协议的运行软件进行升级。示例性的，该过程可以实现为，服务器执行步骤703发送第三升级指令给安全模组，然后通过安全模组将该第三升级指令转发给主控制器，该第三升级指令携带该第三软件固件升级包。该主控制器在执行步骤704接收到服务器发送的第三升级指令后，基于该第三升级指令对该主控制器中第二加密协议的运行软件进行升级，即该主控制器可以通过对该第三软件固件升级包进行烧录来完成对第二加密协议的升级。主控制器将升级后的第二加密协议的版本号、主控制器标识发送至服务器中的物联网应用平台。物联网应用平台执行步骤705接收并检测升级后的第二加密协议的版本号、主控制器标识的正确性。若升级后的第二加密协议的版本号、主控制器标识是正确的，则升级成功。若升级后的第二加密协议的版本号、主控制器标识是错误的，则升级失败。响应于升级失败，服务器重新下发该第三升级指令给主控制器，即重新执行步骤703。响应于升级成功，则确定第二加密协议升级完成。在本公开实施例中，通过对第二加密协议进行升级，确保数据加密效果，进一步提高数据在主控制器和服务器之间传输的安全性。
在一个实施例中，上述第一加密协议的版本号、第二加密协议的版本号可以用于进行软件版本的管理，升级前后版本号不同，可以用于判断加密协议的运行软件是否升级成功。上述通信模组标识、主控制器标识可以用于进行设备管理，标识可以为设备的IMEI(International Mobile Equipment Identity)号、SN(serial number)号、硬件版本号等。在本公开实施例中，对上述软件固件升级包的传输方式不做限定，例如，可以应用第二加密协议和安全芯片加密协议进行加密后传输，也可以仅应用安全芯片加密协议加密后进行传输。
本公开实施例中的安全模组包括通信模组和安全芯片，在终端设备内部，该通信模组基于第一加密协议，与终端内的其他模组进行加密数据传输，在外部通信过程中，该安全芯片基于安全芯片加密协议与外部服务器等设备进行加密数据传输。在本方案中，通过应用安全芯片的安全加密功能，终端内部各模组之间的的自定义加密算法，实现多重加密方法下的安全通信，在保障终端和外部服务器之间数据传输安全性的同时，也避免了数据在终端设备内部模组之间传输过程中被泄露的风险。
上述所有可选技术方案，可以采用任意结合形成本申请的可选实施例，在此不再一一赘述。
图8是本公开实施例提供的一种计算机设备的硬件结构示意图。在本公开实施例中，上述终端和服务器均可以视为一种计算机设备。
该计算机设备设备可以包括处理器801以及存储有计算机程序指令的存储器802。
具体地，上述处理器801可以包括中央处理器(Central Processing Unit，CPU)，或者特定集成电路(Application Specific Integrated Circuit，ASIC)，或者可以被配置成实施本公开实施例的一个或多个集成电路。
存储器802可以包括用于数据或指令的大容量存储器。举例来说而非限制，存储器802可包括硬盘驱动器(Hard Disk Drive，HDD)、软盘驱动器、闪存、光盘、磁光盘、磁带或通用串行总线(Universal Serial Bus，USB)驱动器或者两个或更多个以上这些的组合。在一个实例中，存储器802可以包括可移除或不可移除(或固定)的介质，或者存储器802是非易失性固态存储器。存储器802可在计算设备的内部或外部。
在一个实例中，存储器802可以包括只读存储器(ROM)，随机存取存储器(RAM)，磁盘存储介质 设备，光存储介质设备，闪存设备，电气、光学或其他物理/有形的存储器存储设备。因此，通常，存储器包括一个或多个编码有包括计算机可执行指令的软件的有形(非暂态)计算机可读存储介质(例如，存储器设备)，并且当该软件被执行(例如，由一个或多个处理器)时，其可操作来执行参考根据本公开的一方面的方法所描述的操作。
处理器801通过读取并执行存储器802中存储的计算机程序指令，以实现图2至图7所示的安全通信方法。
在一个示例中，计算机设备还可包括通信接口803和总线804。如图8所示，处理器801、存储器802、通信接口803通过总线804连接并完成相互间的通信。
通信接口803，主要用于实现本公开实施例中各模块、装置、单元和/或设备之间的通信。
总线804包括硬件、软件或两者，将在线数据流量计费设备的部件彼此耦接在一起。举例来说而非限制，总线可包括加速图形端口(Accelerated Graphics Port，AGP)或其他图形总线、增强工业标准架构(Extended Industry Standard Architecture，EISA)总线、前端总线(Front Side Bus，FSB)、超传输(Hyper Transport，HT)互连、工业标准架构(Industry Standard Architecture，ISA)总线、无限带宽互连、低引脚数(LPC)总线、存储器总线、微信道架构(MCA)总线、外围组件互连(PCI)总线、PCI-Express(PCI-X)总线、串行高级技术附件(SATA)总线、视频电子标准协会局部(VLB)总线或其他合适的总线或者两个或更多个以上这些的组合。在合适的情况下，总线304可包括一个或多个总线。尽管本公开实施例描述和示出了特定的总线，但本公开考虑任何合适的总线或互连。
另外，结合上述实施例中的安全通信方法，本公开实施例可提供一种计算机存储介质来实现。该计算机存储介质上存储有计算机程序指令；该计算机程序指令被处理器执行时实现上述实施例中的任意一种安全通信方法。示例性的，该计算机存储介质可以是非暂时性计算机可读存储介质。
需要明确的是，本公开并不局限于上文所描述并在图中示出的特定配置和处理。为了简明起见，这里省略了对已知方法的详细描述。在上述实施例中，描述和示出了若干具体的步骤作为示例。但是，本公开的方法过程并不限于所描述和示出的具体步骤，本领域的技术人员可以在领会本公开的精神后，作出各种改变、修改和添加，或者改变步骤之间的顺序。
以上所述的结构框图中所示的功能块(模块)可以实现为硬件、软件、固件或者它们的组合。当以硬件方式实现时，其可以例如是电子电路、专用集成电路(Application Specific Integrated Circuit，ASIC)、适当的固件、插件、功能卡等等。当以软件方式实现时，本公开的组件/元件是被用于执行所需任务的程序或者代码段。程序或者代码段可以存储在机器可读介质中，或者通过载波中携带的数据信号在传输介质或者通信链路上传送。“机器可读介质”可以包括能够存储或传输信息的任何介质。机器可读介质的例子包括电子电路、半导体存储器设备、只读存储器(Read-Only Memory，ROM)、闪存、可擦除只读存储器(Erasable Read Only Memory，EROM)、软盘、只读光盘(Compact Disc Read-Only Memory，CD-ROM)、光盘、硬盘、光纤介质、射频(Radio Frequency，RF)链路，等等。代码段可以经由诸如因特网、内联网等的计算机网络被下载。
还需要说明的是，本公开中提及的示例性实施例，基于一系列的步骤或者装置描述一些方法或系统。但是，本公开不局限于上述步骤的顺序，也就是说，可以按照实施例中提及的顺序执行步骤，也可以不同于实施例中的顺序，或者若干步骤同时执行。
上面参考根据本公开的实施例的方法、装置(系统)和计算机程序产品的流程图和/或框图描述了本公开的各方面。应当理解，流程图和/或框图中的每个方框以及流程图和/或框图中各方框的组合可以由计算机程序指令实现。这些计算机程序指令可被提供给通用计算机、专用计算机、或其它可编程数据处理装置的处理器，以产生一种机器，使得经由计算机或其它可编程数据处理装置的处理器执行的这些指令使能对流程图和/或框图的一个或多个方框中指定的功能/动作的实现。这种处理器可以是但不限于是通用处理器、专用处理器、特殊应用处理器或者现场可编程逻辑电路。还可理解，框图和/或流程图中的每个方框以及框图和/或流程图中的方框的组合，也可以由执行指定的功能或动作的专用硬件来实现，或可由专用硬件和计算机指令的组合来实现。
以上所述，仅为本公开的具体实施方式，所属领域的技术人员可以清楚地了解到，为了描述的方便和简洁，上述描述的系统、模块和单元的具体工作过程，可以参考前述方法实施例中的对应过程，在此不再赘述。应理解，本公开的保护范围并不局限于此，任何熟悉本技术领域的技术人员在本公开揭露的技术范围内，可轻易想到各种等效的修改或替换，这些修改或替换都应涵盖在本公开的保护范围之内。

Claims (16)

  1. 一种安全模组，所述安全模组包括通信模组和安全芯片；
    所述通信模组，用于基于第一加密协议进行数据加密或数据解密，其中所述第一加密协议是所述安全模组所在的终端内部的数据传输加密协议；
    所述安全芯片，用于基于安全芯片加密协议进行数据加密或数据解密，其中所述安全芯片加密协议是所述安全模组所在的终端与外部设备之间的数据传输加密协议。
  2. 根据权利要求1所述的安全模组，其中，所述通信模组还用于对所述第一加密协议的运行软件进行升级。
  3. 一种安全通信系统，所述安全通信系统包括权利要求1或2所述的安全模组，以及主控制器、服务器；
    所述安全模组与所述主控制器部署在同一终端；
    所述安全模组与所述主控制器之间基于第一加密协议进行加密数据传输；
    所述安全模组与所述服务器之间基于安全芯片加密协议进行加密数据传输；
    所述主控制器与所述服务器之间基于第二加密协议进行数据传输。
  4. 根据权利要求3所述的安全通信系统，其中，所述主控制器用于基于所述第一加密协议进行数据加密，得到第一加密数据，以及将所述第一加密数据发送至所述安全模组中的所述通信模组；
    所述通信模组，用于接收所述第一加密数据，以及基于所述第一加密协议对所述第一加密数据进行解密。
  5. 根据权利要求3所述的安全通信系统，其中，所述主控制器用于基于所述第二加密协议进行数据加密，得到第二加密数据，以及将所述第二加密数据转发至所述安全模组中的所述通信模组；
    所述安全芯片，用于接收所述第二加密数据，以及基于所述安全芯片加密协议对所述第二加密数据进行加密，得到第三加密数据；
    所述通信模组，用于接收所述安全芯片发送的所述第三加密数据，以及将所述第三加密数据转发至所述服务器；
    所述服务器，用于接收所述第三加密数据，以及基于所述安全芯片协议和所述第二加密协议对所述第三加密数据进行解密。
  6. 根据权利要求5所述的安全通信系统，其中，所述服务器包括物联网安全接入平台和物联网应用平台；
    所述物联网安全接入平台，用于接收所述第三加密数据，基于所述安全芯片加密协议对所述第三加密数据进行解密，得到所述第二加密数据，以及将所述第二加密数据转发至所述物联网应用平台；
    所述物联网应用平台，用于接收所述第二加密数据，以及基于所述第二加密协议对所述第二加密数据进行解密。
  7. 根据权利要求3所述的安全通信系统，其中，所述主控制器还用于接收所述服务器发送的第一升级指令，基于所述第一升级指令对所述主控制器中第一加密协议的运行软件进行升级；
    所述通信模组，还用于接收所述服务器发送的第二升级指令，以及基于所述第二升级指令对所述通信模组中第一加密协议的运行软件进行升级。
  8. 根据权利要求3所述的安全通信系统，其中，所述主控制器还用于接收所述服务器发送的第三升级指令，以及基于所述第三升级指令对所述主控制器中第二加密协议的运行软件进行升级。
  9. 一种安全通信方法，所述方法应用于权利要求3-8任一项所述的安全通信系统，所述方法包括：
    由所述主控制器基于所述第一加密协议进行数据加密，得到第一加密数据；
    由所述主控制器将所述第一加密数据发送至所述安全模组中的所述通信模组；以及
    由所述通信模组接收所述第一加密数据，并基于所述第一加密协议对所述第一加密数据进行解密。
  10. 根据权利要求9所述的方法，其中，所述主控制器基于所述第一加密协议进行数据加密，得到第一加密数据之前，所述方法还包括：
    由所述主控制器基于所述第二加密协议进行数据加密，得到第二加密数据，以及将所述第二加密数据发送至所述安全模组中的所述通信模组；
    由所述安全芯片接收所述第二加密数据，以及基于所述安全芯片加密协议对所述第二加密数据进行加密，得到第三加密数据；
    由所述通信模组接收所述第三加密数据，以及将所述第三加密数据转发至所述服务器；以及
    由所述服务器接收所述第三加密数据，以及基于所述安全芯片协议和所述第二加密协议对所述第三加密数据进行解密。
  11. 根据权利要求10所述的方法，其中，所述服务器包括物联网安全接入平台和物联网应用平台，所述服务器接收所述第三加密数据，以及基于所述安全芯片协议和所述第二加密协议对所述第三加密数 据进行解密包括：
    由所述物联网安全接入平台接收所述第三加密数据，基于所述安全芯片加密协议对所述第三加密数据进行解密，得到所述第二加密数据，以及将所述第二加密数据转发至所述物联网应用平台；
    由所述物联网应用平台接收所述第二加密数据，以及基于所述第二加密协议对所述第二加密数据进行解密。
  12. 根据权利要求9所述的方法，其中，所述主控制器基于所述第一加密协议进行数据加密，得到第一加密数据之前，所述方法还包括：
    由所述主控制器接收所述服务器发送的第一升级指令，以及基于所述第一升级指令对所述主控制器中第一加密协议的运行软件进行升级；以及
    由所述通信模组接收所述服务器发送的第二升级指令，以及基于所述第二升级指令对所述通信模组中第一加密协议的运行软件进行升级。
  13. 根据权利要求12所述的方法，其中，所述主控制器接收所述服务器发送的第一升级指令，基于所述第一升级指令对所述主控制器中第一加密协议的运行软件进行升级之后，所述方法还包括：
    由所述主控制器将所述第一加密协议的运行软件的升级结果发送至所述服务器；
    响应于升级成功，由所述服务器向所述通信模组发送所述第二升级指令；以及
    响应于升级失败，由所述服务器重新向所述主控制器发送所述第一升级指令。
  14. 根据权利要求10所述的方法，其中，所述主控制器基于所述第二加密协议进行数据加密，得到第二加密数据，将所述第二加密数据发送至所述安全模组中的所述通信模组之前，所述方法还包括：
    由所述主控制器接收所述服务器发送的第三升级指令，以及基于所述第三升级指令对所述主控制器中第二加密协议的运行软件进行升级。
  15. 一种计算机存储介质，其上存储有指令，所述指令被处理器执行时实现如权利要求9至14中任一项所述的方法。
  16. 一种包括指令的计算机程序产品，其中所述指令被处理器执行时，使得所述处理器执行如权利要求9至14中任一项所述的方法。
PCT/CN2024/113795 2023-11-29 2024-08-21 安全模组、安全通信系统及方法、存储介质和程序产品 Pending WO2025112698A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202311620399.9A CN118802235A (zh) 2023-11-29 2023-11-29 安全模组、安全通信系统及方法
CN202311620399.9 2023-11-29

Publications (1)

Publication Number Publication Date
WO2025112698A1 true WO2025112698A1 (zh) 2025-06-05

Family

ID=93026632

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2024/113795 Pending WO2025112698A1 (zh) 2023-11-29 2024-08-21 安全模组、安全通信系统及方法、存储介质和程序产品

Country Status (2)

Country Link
CN (1) CN118802235A (zh)
WO (1) WO2025112698A1 (zh)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160196437A1 (en) * 2013-09-06 2016-07-07 Dongguan Levetop Technology Co., Ltd. Method of using touch screen device for system encryption and protection
CN107277320A (zh) * 2017-07-13 2017-10-20 北京视博融合科技有限公司 一种安全摄像设备加密方法及安全摄像设备
CN111683367A (zh) * 2020-06-17 2020-09-18 郑州信大捷安信息技术股份有限公司 安全通信模组、安全通信系统、方法及可读存储介质
CN112887263A (zh) * 2020-12-29 2021-06-01 美的集团股份有限公司 设备内数据传输方法、实现设备内数据传输的方法及装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160196437A1 (en) * 2013-09-06 2016-07-07 Dongguan Levetop Technology Co., Ltd. Method of using touch screen device for system encryption and protection
CN107277320A (zh) * 2017-07-13 2017-10-20 北京视博融合科技有限公司 一种安全摄像设备加密方法及安全摄像设备
CN111683367A (zh) * 2020-06-17 2020-09-18 郑州信大捷安信息技术股份有限公司 安全通信模组、安全通信系统、方法及可读存储介质
CN112887263A (zh) * 2020-12-29 2021-06-01 美的集团股份有限公司 设备内数据传输方法、实现设备内数据传输的方法及装置

Also Published As

Publication number Publication date
CN118802235A (zh) 2024-10-18

Similar Documents

Publication Publication Date Title
US11930360B2 (en) Method and system for updating certificate issuer public key, and related device
US12238515B2 (en) Apparatus and method for SSP device and server to negotiate digital certificates
US10223096B2 (en) Logging operating system updates of a secure element of an electronic device
EP2884692B1 (en) Updating software on a secure element
US11134376B2 (en) 5G device compatibility with legacy SIM
KR20250069514A (ko) 인증서 관리 및 검증 방법 및 장치
US12395835B2 (en) Method for routing access, user equipment, and storage medium
CN109831775B (zh) 一种处理器、基带芯片以及sim卡信息传输方法
CN113439449A (zh) 用于链接esim简档的隐私增强方法
WO2014012468A1 (zh) 通用集成电路卡的数据配置方法、装置、系统、计算机程序及存储介质
CN105376059A (zh) 基于电子钥匙进行应用签名的方法和系统
CN116097636A (zh) 用于设备之间的链接或配置文件传输的装置和方法
CN111788836A (zh) 数据传输的方法和ble设备
CN109040147B (zh) 一种基于tee+se的加解密的方法和系统
CN114095277A (zh) 配电网安全通信方法、安全接入设备及可读存储介质
WO2025112698A1 (zh) 安全模组、安全通信系统及方法、存储介质和程序产品
US20250203372A1 (en) Method For Authenticating To A Remote Server Using Service-Specific Credentials Stored In The eUICC
CN105516083A (zh) 一种数据安全管理的方法、装置及系统
CN115004634B (zh) 信息处理方法、装置、设备及存储介质
CN114205237B (zh) 应用程序的鉴权方法、装置、电子设备及计算机存储介质
CN114625987A (zh) 二维码地址生成方法、装置、设备及计算机存储介质
CN113709849A (zh) 待入网设备的入网方法和装置、存储介质及电子装置
CN106797387A (zh) 设备认证方法、装置、认证设备、无人机和遥控器
EP4513915B1 (en) Method and control unit for transferring esim profile data
CN119865815A (zh) 数据处理的方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 24895799

Country of ref document: EP

Kind code of ref document: A1