CN107979813A - A kind of trustworthy location operation management method - Google Patents

Abstract

The invention provides a trusted location operation management method, which includes a trusted location generating device, a trusted location operation management platform, a trusted location using device and a trusted location user. The trusted location generating device of the present invention uses a trusted hardware chip as a trusted root node to generate a trusted location, and provides it to the trusted location management platform; the trusted location operation management platform generates a trust chain, and releases the trusted location and Charging standards; the trusted location using device reads and verifies the trusted location released by the trusted location management platform; the trusted location user obtains the trusted location through the trusted location using device. Therefore, the present invention adds a trusted location on the basis of the existing location-based service technology framework, which can avoid the harm caused by location masquerade, and can perform operations such as pricing and charging for the use of the trusted location, and realize the security of the trusted location. Operate effectively.

Description

A trusted location operation management method

technical field

The invention relates to the field of computers, in particular to a trusted location operation management method.

Background technique

Location services refer to services that provide geographical location information of objects. In the early days, they were mainly used to improve the scene of quickly locating rescuers in emergency situations. A large number of new applications have emerged during the development of the mobile Internet. These applications are combined with the mobile, locatable and portable characteristics of the terminal to provide users with personalized and location-related services. The current academic research fields are more focused on the user's personalized behavior and group intelligence. With the development and integration of mobile Internet and location-based service technology, there have been many commercialized products based on location-based services in the industry, such as car navigation software and hardware, WeChat, phone watches, etc. However, the continuous development of location camouflage technology and the unreliability of location information have greatly hindered the further commercialization of location-based service technology. With the development of the Internet of Things, the demand for the Internet of Everything makes the improvement of the credibility of location information a problem that must be solved. Moreover, the billing and charging requirements of location usage are not fully considered.

Contents of the invention

The invention adds a trusted location on the basis of the existing location-based service technology framework, which can avoid the harm caused by location masquerade, and can perform operations such as pricing and charging for the use of the trusted location, and realize safe and effective operation of the trusted location .

The technical solution adopted by the present invention to solve its technical problems is:

A trusted location operation management method includes a trusted location generating device, a trusted location operation management platform, a trusted location using device and a trusted location user. The trusted location generating device of the present invention uses a trusted hardware chip as a trusted root node to generate a trusted location, and provides it to the trusted location management platform; the trusted location operation management platform generates a trust chain, and releases the trusted location and Charging standards; the trusted location using device reads and verifies the trusted location released by the trusted location management platform; the trusted location user obtains the trusted location through the trusted location using device.

The trusted location management platform provides unified access to trusted location generation devices of different manufacturers and different operators; unified access to trusted location use devices of different manufacturers and different operators; provides trusted location Pricing and billing for use of trusted locations;

On the basis of any of the above embodiments, further, the trusted location information includes basic location information and additional trusted location information, wherein the basic location information is current geographic location information, and the additional trusted location information is The calculation result value generated by the trusted hardware chip according to a preset algorithm;

On this basis, further, the trusted position generation device cannot be changed at will after the input position coordinates are used for the first time, and is used to ensure the uniqueness of the position. The detection software is built in the device, and the position will be invalidated when the device moves. algorithm.

On the basis of any of the above embodiments, further, an application corresponds to a device using a trusted location, and an application sends the users, time points, and operations that can be performed at the location to the trusted location operation and management platform, and generates a whitelist chain of trust.

On the basis of any of the above embodiments, further, the trusted location usage device sends the trusted location usage key to the trusted location user.

On the basis of any of the above embodiments, further, the trusted location user sends the location usage key to the trusted location generation device, and establishes a connection with the trusted location.

The beneficial effects of the present invention are:

The present invention adds a trusted location on the basis of the existing location-based service technology framework, which can avoid the harm caused by location masquerade, and can perform operations such as pricing and charging for the use of the trusted location, so as to realize the effective operation of the trusted location. By using the trusted location provided by the present invention, it can be realized that one function of one application can only be used by one user at one reserved price at one trusted location. This not only improves the security of location services, but also provides a means of operating trusted locations. In summary, the present invention has the characteristics of good safety and economy.

The above description is only an overview of the technical solutions of the present invention. In order to understand the technical means of the present invention more clearly and implement them according to the contents of the description, the preferred embodiments of the present invention and accompanying drawings are described in detail below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating a preferred embodiment and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same parts. In the attached picture:

Fig. 1 shows a schematic diagram of a trusted location operation management method provided by Embodiment 1 of the present invention;

Fig. 2 shows a schematic diagram of a specific case of a trusted location operation management method provided by Embodiment 1 of the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

An embodiment of the present invention provides a trusted location operation management method, including a trusted location generating device, a trusted location operation management platform, a trusted location using device, and a trusted location user. The technical effect of the embodiment of the present invention is achieved like this:

As shown in FIG. 1 : in S101 , the trusted location generation device uses a trusted hardware chip as a trusted root node to generate a trusted location, and provides it to the trusted location management platform. The trusted location information includes basic location information and additional trusted location information, the basic location information is current geographic location information, and the additional trusted location information is a calculation result value generated by the trusted hardware chip according to a preset algorithm.

In S102, the trusted location management platform receives the trusted location information sent by the trusted location generating device, generates an adapter according to the type of the trusted location generating device, and accesses the trusted location management platform. With the trusted hardware chip built into the trusted location management platform as the root and the six-tuple (application, trusted location, user, time point, operation, price) information as the input, a whitelist trust chain is generated. And publish a trusted location with public key information.

In S103, the trusted location using device reads and verifies the trusted location issued by the trusted location management platform. In the embodiment of the present invention, the device for using the trusted location will verify the trusted location through an algorithm built in the device. Since both the trusted location use device and the trusted location generation device perform trust chain generation and verification work through the trusted location management platform, the trusted location use device and the trusted location generation device in the present invention are mutual in terms of key usage. Transparently, this also guarantees the security of trusted locations.

In S104, the trusted location user obtains the trusted location through the trusted location using device, and obtains the application service in the whitelist. Here, the trusted location user can use the functions on the whitelist of the trusted location usage device after receiving the confirmation information from the trusted location usage device; and further transmit the trusted location usage information to the trusted location operation management platform.

Furthermore, after the trusted location generating device uses the input location coordinates for the first time, it cannot be changed arbitrarily to ensure the uniqueness of the location. Detection software is built into the device, and if the device moves, the location invalidation algorithm will be activated. This ensures the security of the root of trust location.

On the basis of any of the above embodiments, further, the trusted location management platform provides a price for the provision of the trusted location, charges for the use of the trusted location, and provides a means for operating the trusted location.

On the basis of any of the above embodiments, further, the trusted location generating device is loaded on a field device, and the field device may be a trusted signal source fixed on a wall.

On the basis of any of the above embodiments, further, the apparatus for using a trusted location is loaded on a central device, and the central device may be a trusted server or a trusted computer.

The present invention also provides an embodiment. As shown in FIG. 2 , the embodiment of the present invention uses a mobile phone or a PC as a user device, and a PC server as a central device.

In the first step, the trusted location generation device is initialized, and the trusted location is generated according to the physical location of the device, the built-in encryption algorithm of the TCM chip of the device, and the key. For example: a trusted location service company takes the physical location information of No. L01 positioning device in Area B of Changbei Airport parking lot as input to generate trusted location information of TL01 trusted location; if the physical location information changes, the built-in device The location detection module starts the location invalidation algorithm of TL01, and identifies the location device of L01 as an untrusted location. The trusted location generating device regularly sends the trusted location information to the trusted location operation management platform through the location sending module.

The trusted location operation management platform verifies the received trusted location information, and uses the verified trusted location information as the root to generate an initial trust chain. This chain of trust is responsible for validating a user's permissions to application services at that trusted location.

In the second step, the trusted location using device queries the trusted location operation and management platform to obtain the trusted location and usage price required by the application service, and uses the application service that a certain user can access in this trusted location as input information, write Enter the trusted location to use the reservation module, and update the trust chain of the trusted location. For example: Li Ming, a user of a vehicle rental system, can use the vehicle unlock and vehicle return functions when he is in the trusted location of TL01.

In the third step, when a trusted location user invokes a certain application service in a certain location, he needs to first visit the trusted location using device, and inquire about the trusted location where the application service is available. For example: the trusted location of Li Ming's mobile phone in Changbei Airport is the trusted location of TL01 in Area B of the parking lot.

In the fourth step, the device for using the trusted location sends the trusted location and location usage key available for the application service at the location to the user of the trusted location. For example: the trusted location use device of a certain vehicle rental system sends the trusted location verification key of No. TL01, Area B, Changbei Airport parking lot, to the mobile phone of user Li Ming.

In the fifth step, the trusted location user sends the location usage key to the trusted location generation device, and establishes a connection with the trusted location. For example, the vehicle rental system APP deployed on Li Ming's user's mobile phone establishes a connection with the trusted location of TL01.

In the sixth step, the trusted location generating device sends confirmation information to the trusted location user. For example, the trusted location of TL01 sends trusted location confirmation information to the vehicle rental system APP deployed on Li Ming's user's mobile phone. At this time, the vehicle rental system APP deployed on Li Ming's user's mobile phone can use the vehicle unlocking function.

The trusted location operation and management platform will use the above confirmation information as the basis for using the trusted location to perform billing operations.

In the seventh step, the trusted location operation and management platform records the usage and cost information of the trusted location. And the trusted location usage bill is sent to the trusted location usage device, which is used as a sign of the end of the trusted location usage. For example, a vehicle rental system receives a bill for the use of trusted location TL01 in Area B of Changbei Airport parking lot.

As can be seen from the above example, by using the trusted location provided by the present invention, after Li Ming user of a vehicle rental system arrives at Changbei Airport, he can see an available trusted location TL01 located in the parking lot B area on his mobile phone . While providing effective positioning for the users of the carriage rental system, it also limits that the trusted location TL01 can only be used by paid location usage devices, which not only improves the security of location services, but also provides a trusted location means of operation. In summary, the present invention has the characteristics of good safety and economy.

It should be noted that, for the foregoing method embodiments, for the sake of simple description, they are expressed as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the described action sequence. Because of the present invention, certain steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification belong to preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

In the foregoing embodiments, the descriptions of each embodiment have their own emphases, and for parts not described in detail in a certain embodiment, reference may be made to relevant descriptions of other embodiments.

It can be understood that the above methods and related features in the switch can refer to each other. In addition, "first", "second" and so on in the above embodiments are used to distinguish each embodiment, and do not represent the advantages and disadvantages of each embodiment.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the method, device and unit described above can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not specific to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline this disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the invention are sometimes grouped together in a single embodiment, figure, or its description. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the apparatus in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings), as well as any method or method so disclosed, may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments described herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement some or all functions of some or all components in the device provided according to the embodiments of the present invention. The present invention can also be implemented as an apparatus or an apparatus program (for example, a computer program and a computer program product) for performing a part or all of the methods described herein. Such a program for realizing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet site, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names.

Claims (7)

1. A trusted location operation and management method, characterized in that: the method comprises: The trusted location generation device uses the trusted hardware chip as the trusted root node to generate the trusted location and provides it to the trusted location management platform; The trusted location operation and management platform generates a chain of trust, and publishes the trusted location and charging standards; The trusted location usage device reads and verifies the trusted location issued by the trusted location management platform; A trusted location user obtains a trusted location through a trusted location using device. 2. A trusted location operation and management method according to claim 1, characterized in that: said trusted location generation device uses a trusted hardware chip as a trusted root node to generate trusted location information; said trusted location The information includes basic location information and additional trusted location information, wherein the basic location information is current geographic location information, and the additional trusted location information is a calculation result value generated by the trusted hardware chip according to a preset algorithm. 3. A trusted location operation and management method according to claim 1, characterized in that: the trusted location generating device cannot be changed arbitrarily after inputting the location coordinates for the first use, and is used to ensure the uniqueness of the location , the detection software is built in the device, and the location failure algorithm is started when the device moves. 4. A trusted location operation and management method according to claim 1, characterized in that: the trusted location operation and management platform uniformly accesses trusted location generating devices of different manufacturers and different operators; Provide unified access to the trusted location using devices of different operators and operators; price the provision of trusted location, and charge for the use of trusted location. 5. A trusted location operation and management method according to claim 1, characterized in that: one application corresponds to a trusted location using device, and one application sends the user, time point, and operation that can be performed at the location to the trusted location. Trust location operation and management platform, and generate a whitelist trust chain. 6. A trusted location operation and management method according to claim 1, characterized in that: the trusted location using device sends the trusted location using key to the trusted location user. 7. A trusted location operation and management method according to claim 1, characterized in that: the trusted location user sends the location use key to the trusted location generating device, and establishes a connection with the trusted location to obtain white list of application services.