CN109714444A - Registration management method, system and node - Google Patents

Abstract

A method, a system and a node for registration management comprise: after the father node authorizes and authenticates the child nodes, distributing corresponding child node identifiers for the child nodes; the child node may continue to assign (OID) the registration object for which registration is applied based on assigning the child node OID identifier. The embodiment of the invention realizes the OID distribution through the authorization node and perfects the function of OID registration management.

Description

A method, system and node for registration management

technical field

This article involves but is not limited to information processing technology, especially a method, system and node for registration management.

Background technique

With the continuous development of information technology, the performance of computer hardware equipment has been rapidly improved, and the network communication capabilities have also been continuously enhanced, which makes the traditional closed industries have the basic conditions for "digital" and "networked" development, and can realize various Network interconnection and remote coordinated development of heterogeneous systems. In this stage, the process-oriented system development method is gradually replaced by the object-oriented system development method. Objects are the basic elements in the program design process. The "object"-centered design and development method will realize the encapsulation and normalization of data and operations, and protect the reconfigurability of data and methods, as well as accurate operations in complex processing. Typical object-oriented programming languages, such as Java and C#, use objects (code modules that encapsulate data and data processing) to simulate objects in the objective world, and use the interrelationships and functions between objects to simulate the interrelationships and interactions between objects in the objective world. It optimizes the development method of the information system, avoids the code confusion caused by the program is too large, reduces the cost of code maintenance, and effectively improves the efficiency of multi-person collaborative coding and collaborative work between heterogeneous systems.

In this context, the object identifier (OID, object identifier) identification system came into being. OID is a global identification system jointly promoted by the International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) and the International Telecommunication Union (ITU). It is used to identify "anything in the world of communication and information processing", and to provide a globally unique "identification ID card" for various information processing objects in the network. At present, the OID identification system is mature, effectively realizing the network interconnection and information interoperability and integration between heterogeneous information systems.

In order to better promote the development of the OID identification system, various countries are developing their own OID identification registration management systems, but there are many technical defects, which make it difficult to meet the application needs of the current information technology industry for OID identification technology; A telecommunications company has developed an OID repository registration management system, which can only provide registration management functions for various organizations, standards and other objects. Or, the CNOID registration management system developed in our country, compared with the OID repository system, the system adds functions such as news release, OID registration publicity and release, and increases the OID review and approval process.

The above solution can only provide OID registration management functions for various organizations, standards and other objects, and the related functions of OID identification registration management are still not perfect, which is not conducive to the application and development of OID identification information.

SUMMARY OF THE INVENTION

The following is an overview of the topics detailed in this article. This summary is not intended to limit the scope of protection of the claims.

The embodiments of the present invention provide a method, system and node for registration management, which can improve the function of OID registration management.

An embodiment of the present invention provides a method for registration management, including:

After the parent node authorizes and authenticates the child nodes, it assigns the corresponding child node identifiers to each child node;

The child node assigns an object identifier OID to the registered object applying for registration according to the assigned child node identifier.

Optionally, the registration object includes some or all of the following objects:

Operating agency, entity object, metadata, security authentication object.

Optionally, the security authentication object includes one or more of the following objects:

The registered user, encryption algorithm, secure socket layer, transport layer security server and client of the security authentication certificate.

Optionally, according to the assigned child node identifier, the child node assigns an OID to the registration object applying for registration, including:

When the child node receives the registration application of the registration object, it generates an OID corresponding to the registration object according to the child node identifier assigned to itself and the object identification code determined according to the preset coding strategy;

The generated OID is assigned to the registration object.

Optionally, after the object identifier OID is allocated for the registration object applying for registration, the method further includes:

Generate an identification code corresponding to the OID according to the OID assigned to the registered object;

Obtain the identification code according to the received identification instruction, and parse the OID according to the identification code to obtain the relevant information of the registered object;

Wherein, the identification code includes one or more of the following codes: barcode and two-dimensional code.

Optionally, the method further includes querying the relevant information of the registered object in one or more of the following ways:

Browser client query, scan query of applications with scanning function, RFID scan query, World Wide Web page query.

Optionally, the relevant information includes full life cycle information; the full life cycle information includes some or all of the following information:

Manufacturing information, processing information, distribution information, usage information, maintenance information, and destruction information.

Optionally, when the registration object is metadata, the method further includes querying the metadata in one or more of the following ways:

query the metadata through the parent node or child node;

Query the metadata through a preset external application system call interface;

Query the metadata through excel import;

The metadata is queried by way of extensible markup language XML import.

Optionally, when the registered object is a registered user of a security authentication certificate, the method further includes:

Establish a communication connection between the security authentication system and the parent node and/or child node through a preset first interface;

When the registered user of the security authentication certificate applies for registration, the parent node and/or the child node receives the identity information of the registered user sent by the security authentication system through the first interface; wherein, the The identity information includes the identity information submitted by the registered user when the security authentication system applies for the security authentication certificate;

The parent node or child node that has received the identity information allocates an OID to the registered user according to the received identity information.

Optionally, the method further includes:

Establish a communication connection between the parent node and/or the child node and the security authentication system through a preset second interface;

The parent node and/or the child node sends the identity information of the registration object that applies for registration to the security authentication system through the second interface, so that the security authentication system can identify the registration object according to the received registration information. The registration object performs application processing for a security authentication certificate.

Optionally, allocating an OID to a registration object applying for registration includes:

When receiving a registration application for a registration object, allocate an OID to the registration object according to a preset first identification distribution rule;

When receiving registration applications from two or more registration objects, the corresponding OIDs are respectively allocated to the registration objects sending the registration applications according to the preset second identification distribution rule.

Optionally, after the child node is authenticated by the parent node, the method further includes:

The child node sets itself as a fully public node, a local area public node, or a private node according to the preset application scope rule.

Optionally, the method further includes:

The communication interface between the parent node and/or the child node and the registered object is encrypted using a preset signature encryption strategy.

On the other hand, an embodiment of the present invention also provides a method for registration management, including:

According to the preset authorization policy, determine one or more sub-nodes that need to be authorized and authenticated;

After authorizing and authenticating the sub-nodes, assign corresponding sub-node identifiers to each sub-node;

The child node identifier is used to determine the object identifier OID assigned to the registration object that initiates the registration application.

Optionally, the registration object includes some or all of the following objects:

Operating agency, entity object, metadata, security authentication object.

In another aspect, an embodiment of the present invention also provides a system for registration management, including: a parent node and a child node; wherein,

The parent node includes an authorization processing unit, which is used for: assigning a corresponding child node identifier to each child node after performing authorization and authentication on the child node;

The child node includes an allocation processing unit, configured to: according to the allocated child node identifier, allocate an object identifier OID to the registered object applying for registration.

Optionally, the registration object includes some or all of the following objects:

Operating agency, entity object, metadata, security authentication object.

Optionally, the security authentication object includes one or more of the following objects:

The registered user, encryption algorithm, secure socket layer, transport layer security server and client of the security authentication certificate.

Optionally, the allocation processing unit is specifically used for:

When the registration application of the registration object is received, the OID allocated to the registration object is generated according to the child node identifier allocated to itself and the object identification code determined according to the preset coding strategy.

Optionally, the second node further includes an encoding processing unit and the system further includes a parsing device; wherein,

The encoding processing unit is used for: generating an identification code corresponding to the OID according to the OID assigned to the registered object;

The parsing device is configured to: obtain the identification code according to the received identification instruction, and parse the OID according to the identification code to obtain the relevant information of the registered object;

Wherein, the identification code includes one or more of the following codes: barcode and two-dimensional code.

Optionally, the system further includes a query device for querying the relevant information of the registered object in one or more of the following ways:

Browser client query, scan query of applications with scanning function, RFID scan query, World Wide Web page query.

Optionally, the distribution processing unit includes a first distribution module and a second distribution module; wherein,

The first distribution module is used to: when receiving a registration application for a registration object, allocate an OID to the registration object according to a preset first identification distribution rule;

The second distribution module is used for: when receiving registration applications of two or more registration objects, respectively assigning corresponding OIDs to the registration objects sending the registration applications according to the preset second identification distribution rules.

Optionally, the system further includes a first interface unit, and the parent node and/or child node further includes a receiving unit; wherein,

The first interface unit is configured to: establish a communication connection between the security authentication system and the parent node and/or the child node through a preset first interface;

The receiving unit is configured to: when the registered user of the security authentication certificate applies for registration, receive the identity information of the registered user sent by the security authentication system through the first interface; wherein, the identity information It includes the identity information submitted by the registered user when the security authentication system applies for the security authentication certificate.

Optionally, the system further includes a second interface unit, and the parent node and/or the child node further includes a sending unit; wherein,

The second interface unit is configured to: establish a communication connection between the parent node and/or the child node and the security authentication system through a preset second interface;

The sending unit has: through the second interface, send the identity information of the registration object applying for registration to the security authentication system, so that the security authentication system can register the registration information according to the received registration information to the security authentication system. The object performs the application processing of the security authentication certificate.

In another aspect, an embodiment of the present invention further provides a node, including: a determination unit and an allocation processing unit; wherein,

The determining unit is used for: determining one or more sub-nodes that need to be authorized and authenticated according to the preset authorization policy;

The assigning processing unit is used for: assigning corresponding child node identifiers to each child node after performing authorization and authentication on the child node;

The child node identifier is used to determine the object identifier OID assigned to the registration object that initiates the registration application.

Optionally, the registration object includes some or all of the following objects:

Operating agency, entity object, metadata, security authentication object.

Compared with the related art, the technical solution of the present application includes: after the parent node performs authorization and authentication on the child nodes, assigns a corresponding child node identifier to each child node; the child node is the registered object applying for registration according to the assigned child node identifier. Assign an Object Identifier (OID). The embodiment of the present invention realizes OID allocation through the authorization node, and improves the function of OID registration management.

Other features and advantages of the present invention will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention may be realized and attained by the structure particularly pointed out in the description, claims and drawings.

Description of drawings

The accompanying drawings are used to provide a further understanding of the technical solutions of the present invention, and constitute a part of the specification. They are used to explain the technical solutions of the present invention together with the embodiments of the present application, and do not limit the technical solutions of the present invention.

1 is a flowchart of a method for registration management according to an embodiment of the present invention;

2 is a flowchart of a method for registration management according to another embodiment of the present invention;

3 is a structural block diagram of a system for registration management according to an embodiment of the present invention;

4 is a structural block diagram of a node according to an embodiment of the present invention;

FIG. 5 is a schematic flow chart of registration management of metadata of an application example of the present invention.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention clearer, the embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, the embodiments in the present application and the features in the embodiments may be arbitrarily combined with each other if there is no conflict.

The steps shown in the flowcharts of the figures may be performed in a computer system, such as a set of computer-executable instructions. Also, although a logical order is shown in the flowcharts, in some cases the steps shown or described may be performed in an order different from that herein.

The inventor of the present application found that the existing OID registration management system could not provide the functions of node hosting, batch code assignment and application to many physical carriers such as RFID and QR code, and could not provide an element-oriented solution from the perspective of global architecture design. Flexible registration management and application functions for other types of objects such as data and security authentication policies.

The embodiments of the present invention can be applied to OID application fields such as electronic medical care, information security, etc., and can also be applied to fields that have not established an OID identification system, including the agricultural field, and provide a technical basis for realizing identification coding and traceability management of important agricultural products. , to meet the application requirements of OID identification in the agricultural field.

FIG. 1 is a flowchart of a method for registration management according to an embodiment of the present invention, as shown in FIG. 1 , including:

Step 101: After the parent node authorizes and authenticates the child nodes, assign corresponding child node identifiers to each child node;

It should be noted that the example node identifier in the embodiment of the present invention is used as the prefix part of the OID allocated to the registration object, and is an identification parameter that the parent node gives the child node to allocate the OID to the registration object.

Step 102: The child node assigns an object identifier OID to the registered object applying for registration according to the assigned child node identifier.

It should be noted that the network topology structure in this embodiment of the present invention may be a tree-like branch, the parent node at the top of the tree-like branch may be considered as a general operation management organization, and the child nodes may be considered as existing operation organizations in related technologies, and the operation organization obtains After the authorization and certification of the operation management organization, it becomes a management operation organization in the tree branch. The management operation organization can also authorize and authenticate other operation organizations to build more management operation organizations. Once the management operation organization is authorized, it can The OID is allocated to the registration object that initiates the application for registration; the allocated object may include an operating agency, and the registration object that obtains the OID becomes an OID node in the network.

In addition, based on the above-mentioned OID allocation, the embodiments of the present invention may refer to related technologies to perform operation and maintenance management on OID nodes.

Optionally, the registered objects in this embodiment of the present invention include some or all of the following objects:

Operating agency, entity object, metadata, security authentication object.

Optionally, the security authentication object in this embodiment of the present invention includes one or more of the following objects:

The registered user, encryption algorithm, secure socket layer, transport layer security server and client of the security authentication certificate.

Optionally, according to the allocated sub-node identifier, the instance node in this embodiment of the present invention allocates an OID to a registration object applying for registration, including:

When the child node receives the registration application of the registration object, it generates an OID corresponding to the registration object according to the child node identifier assigned to itself and the object identification code determined according to the preset coding strategy;

The generated OID is assigned to the registration object.

Optionally, after allocating the object identifier OID to the registration object applying for registration, the method according to the embodiment of the present invention further includes:

Generate an identification code corresponding to the OID according to the OID assigned to the registered object;

Obtain the identification code according to the received identification instruction, and parse the OID according to the identification code to obtain the relevant information of the registered object;

Wherein, the identification code includes one or more of the following codes: barcode and two-dimensional code.

Optionally, the method according to the embodiment of the present invention further includes querying the relevant information of the registered object in one or more of the following ways:

Browser client query, scan query of applications with scanning function, RFID scan query, World Wide Web page query.

Optionally, the information related to the embodiment of the present invention includes full life cycle information; the full life cycle information includes some or all of the following information:

Manufacturing information, processing information, distribution information, usage information, maintenance information, and destruction information.

Optionally, when the registration object is metadata, the method according to the embodiment of the present invention further includes querying the metadata in one or more of the following ways:

query the metadata through the parent node or child node;

Query the metadata through a preset external application system call interface;

Query the metadata through excel import;

The metadata is queried by way of extensible markup language XML import.

Optionally, when the registered object is a registered user of the security authentication certificate, the method according to the embodiment of the present invention further includes:

Establish a communication connection between the security authentication system and the parent node and/or child node through a preset first interface;

When the registered user of the security authentication certificate applies for registration, the parent node and/or the child node receives the identity information of the registered user sent by the security authentication system through the first interface; wherein, the The identity information includes the identity information submitted by the registered user when the security authentication system applies for the security authentication certificate;

The parent node and/or child node that has received the identity information allocates an OID to the registered user according to the received identity information.

Optionally, the method according to the embodiment of the present invention further includes:

Establish a communication connection between the parent node and/or the child node and the security authentication system through a preset second interface;

The parent node and/or the child node sends the identity information of the registration object that applies for registration to the security authentication system through the second interface, so that the security authentication system can identify the registration object according to the received registration information. The registration object performs application processing for a security authentication certificate.

Optionally, in this embodiment of the present invention, allocating an OID to a registration object applying for registration includes:

When receiving a registration application for a registration object, allocate an OID to the registration object according to a preset first identification distribution rule;

When receiving registration applications from two or more registration objects, the corresponding OIDs are respectively allocated to the registration objects sending the registration applications according to the preset second identification distribution rule.

Optionally, after the child node passes the authorization and authentication of the parent node, the method according to the embodiment of the present invention further includes:

The child node sets itself as a fully public node, a local area public node, or a private node according to the preset application scope rule.

Optionally, the method according to the embodiment of the present invention further includes:

The communication interface between the parent node and/or the child node and the registered object is encrypted using a preset signature encryption strategy.

Compared with the related art, the technical solution of the present application includes: after the parent node performs authorization and authentication on the child nodes, assigns a corresponding child node identifier to each child node; the child node is the registered object applying for registration according to the assigned child node identifier. Assign object identifier OID. The embodiment of the present invention realizes OID allocation through the authorization node, and improves the function of OID registration management.

FIG. 2 is a flowchart of a method for registration management according to another embodiment of the present invention, as shown in FIG. 2 , including:

Step 201, according to a preset authorization policy, determine one or more sub-nodes that need to be authorized and authenticated;

Step 202: After performing authorization and authentication on the sub-nodes, assign corresponding sub-node identifiers to each sub-node;

The child node identifier is used to determine the object identifier OID assigned to the registration object that initiates the registration application.

It should be noted that the network topology structure in this embodiment of the present invention may be a tree-like branch, the parent node at the top of the tree-like branch may be considered as a general operation management organization, and the child nodes may be considered as existing operation organizations in related technologies, and the operation organization obtains After the authorization and certification of the operation management organization, it becomes a management operation organization in the tree branch. The management operation organization can also authorize and authenticate other operation organizations to build more management operation organizations. Once the management operation organization is authorized, it can The OID is allocated to the registration object that initiates the application for registration; the allocated objects may include operating agencies.

Optionally, the registered objects in this embodiment of the present invention include some or all of the following objects:

Operating agency, entity object, metadata, security authentication object.

Compared with the related art, the technical solution of the present application includes: after the parent node performs authorization and authentication on the child nodes, assigns a corresponding child node identifier to each child node; the child node is the registered object applying for registration according to the assigned child node identifier. Assign object identifier OID. The embodiment of the present invention realizes OID allocation through the authorization node, and improves the function of OID registration management.

FIG. 3 is a structural block diagram of a system for registration management according to an embodiment of the present invention. As shown in FIG. 3 , it includes: a parent node and a child node; wherein,

The parent node includes an authorization processing unit, which is used for: assigning a corresponding child node identifier to each child node after performing authorization and authentication on the child node;

The child node includes an allocation processing unit, configured to: according to the allocated child node identifier, allocate an object identifier OID to the registered object applying for registration.

It should be noted that the network topology structure in this embodiment of the present invention may be a tree-like branch, the parent node at the top of the tree-like branch may be considered as a general operation management organization, and the child nodes may be considered as existing operation organizations in related technologies, and the operation organization obtains After the authorization and certification of the operation management organization, it becomes a management operation organization in the tree branch. The management operation organization can also authorize and authenticate other operation organizations to build more management operation organizations. Once the management operation organization is authorized, it can The OID is allocated to the registration object that initiates the application for registration; the allocated objects may include operating agencies.

Optionally, the registered objects in this embodiment of the present invention include some or all of the following objects:

Operating agency, entity object, metadata, security authentication object.

Optionally, the security authentication object in this embodiment of the present invention includes one or more of the following objects:

The registered user, encryption algorithm, secure socket layer, transport layer security server and client of the security authentication certificate.

Optionally, the allocation processing unit in this embodiment of the present invention is specifically configured to:

When the registration application of the registration object is received, the OID allocated to the registration object is generated according to the child node identifier allocated to itself and the object identification code determined according to the preset coding strategy.

Optionally, the second node in this embodiment of the present invention further includes an encoding processing unit, and the system further includes a parsing device; wherein,

The encoding processing unit is used for: generating an identification code corresponding to the OID according to the OID assigned to the registered object;

The parsing device is configured to: obtain the identification code according to the received identification instruction, and parse the OID according to the identification code to obtain the relevant information of the registered object;

Wherein, the identification code includes one or more of the following codes: barcode and two-dimensional code.

Optionally, the system according to the embodiment of the present invention further includes a query device, configured to query the relevant information of the registered object in one or more of the following ways:

Browser client query, scan query of applications with scanning function, RFID scan query, World Wide Web page query.

Optionally, the information related to the embodiment of the present invention includes full life cycle information; the full life cycle information includes some or all of the following information:

Manufacturing information, processing information, distribution information, usage information, maintenance information, and destruction information.

Optionally, when the registration object is metadata, the embodiment of the present invention further includes querying the metadata in one or more of the following ways:

query the metadata through the parent node or child node;

Query the metadata through a preset external application system call interface;

Query the metadata through excel import;

The metadata is queried by way of extensible markup language XML import.

Optionally, the distribution processing unit in this embodiment of the present invention includes a first distribution module and a second distribution module; wherein,

The first distribution module is used to: when receiving a registration application for a registration object, allocate an OID to the registration object according to a preset first identification distribution rule;

The second distribution module is used for: when receiving registration applications of two or more registration objects, respectively assigning corresponding OIDs to the registration objects sending the registration applications according to the preset second identification distribution rules.

Optionally, the example node in this embodiment of the present invention further includes an application setting unit, configured to:

According to the preset application scope rules, the node to which it belongs is set as a fully public node, a local area public node, or a private node.

Optionally, the system according to the embodiment of the present invention further includes an encryption processing device, configured to:

The communication interface between the parent node and/or the child node and the registered object is encrypted using a preset signature encryption strategy.

Optionally, the system in this embodiment of the present invention further includes a first interface unit, and the parent node and/or child node further includes a receiving unit; wherein,

The first interface unit is configured to: establish a communication connection between the security authentication system and the parent node and/or the child node through a preset first interface;

The receiving unit is configured to: when the registered user of the security authentication certificate applies for registration, receive the identity information of the registered user sent by the security authentication system through the first interface; wherein, the identity information It includes the identity information submitted by the registered user when the security authentication system applies for the security authentication certificate.

Optionally, the system according to the embodiment of the present invention further includes a second interface unit, and the parent node and/or child node further includes a sending unit; wherein,

The second interface unit is configured to: establish a communication connection between the parent node and/or the child node and the security authentication system through a preset second interface;

The sending unit has: through the second interface, send the identity information of the registration object applying for registration to the security authentication system, so that the security authentication system can register the registration information according to the received registration information to the security authentication system. The object performs the application processing of the security authentication certificate.

FIG. 4 is a structural block diagram of a node according to an embodiment of the present invention. As shown in FIG. 4 , it includes: a determination unit and an allocation processing unit; wherein,

The determining unit is used for: determining one or more sub-nodes that need to be authorized and authenticated according to the preset authorization policy;

The assigning processing unit is used for: assigning corresponding child node identifiers to each child node after performing authorization and authentication on the child node;

The child node identifier is used to determine the object identifier OID assigned to the registration object that initiates the registration application.

It should be noted that the network topology structure in this embodiment of the present invention may be a tree-like branch, the parent node at the top of the tree-like branch may be considered as a general operation management organization, and the child nodes may be considered as existing operation organizations in related technologies, and the operation organization obtains After the authorization and certification of the operation management organization, it becomes a management operation organization in the tree branch. The management operation organization can also authorize and authenticate other operation organizations to build more management operation organizations. Once the management operation organization is authorized, it can The OID is allocated to the registration object that initiates the application for registration; the allocated objects may include operating agencies.

Optionally, the registered objects in this embodiment of the present invention include some or all of the following objects:

Operating agency, entity object, metadata, security authentication object.

The method of the embodiments of the present invention will be described clearly and in detail below through application examples. The application examples are only used to describe the present invention, and are not used to limit the protection scope of the present invention.

Application example

The registration management of the related art OID identification is realized by an integrated platform to realize the registration application of the OID identification; the application example of the present invention uses the integrated platform as the uppermost structure of the network topology, and sets the operation organization as the operation management organization; assuming that the integrated platform is the first node, then The operation organization set by the integrated platform as the operation management structure is the second node relative to the integrated platform; if the operation management structure sets the lower-level operation organization as the operation management organization again, the relationship between the two can be considered as the first node and the second node. After the second node of the application example of the present invention obtains authorization and authentication, it synchronizes OID resources with the integrated platform with reference to related technologies, and all operation management agencies jointly participate in the verification of registered users.

The OID registration management process of related technologies mainly includes: the operating organization first logs in to the OID registration management system, and after submitting the relevant identity information of the organization (such as the organization's Chinese and English name, address, contact information, OID application scope, etc.), submit the OID registration application; OID registration application; After the registration management system reviews (approves) the submitted registration application, it gives the operating agency a unique OID, and the operating agency that is given the OID becomes a node under the registration management system.

The registration management process of the application example of the present invention mainly includes: when an operating organization registers and applies for an OID and becomes an OID node, it can independently select the registered OID node as a fully public node, a private node or a partial area public node according to requirements, and fill in the The registration information of the node is submitted to the higher-level operation management agency; after the higher-level operation management agency receives the registration application, it uses the node identifier as its identification prefix to assign a unique OID to the registration object; after the operation agency obtains the OID, It can be regarded as an OID node; in the application example of the present invention, the operating organization can submit its own IP address to the higher-level operation management organization, independently maintain the data dictionary and security certification related to the platform application, and be responsible for allocating unique registration objects under the node. OID; OID resources that can be allocated to registered objects can be allocated according to the allocation rules agreed with the superior operation management agency in advance. If the applicant organization successfully registers, obtains a unique OID, and selects the nature of the node as a private node, it may not provide an IP address to the outside world.

The processing process of the application example registration management of the present invention mainly includes:

Assign corresponding node identifiers to operators with code assignments (authorized operation management agencies) according to a preset allocation strategy, and operators with code assignments generate assignments based on the node identifiers assigned to themselves and in combination with the object identification code. OID to the registered object;

Accept registration applications from lower-level operating institutions and assign unique OIDs to them; cover a series of registration processing matters such as acceptance, qualification review, approval, publicity, release, storage, and filing of registration applications of the applicant company or institution.

Accept the registration application of the information platform (system) directly connected to the system, and assign a unique OID to it. Registration objects can include entity objects, metadata, and security authentication objects.

The application example of the present invention builds an object-oriented node service framework, supports OID node operation and maintenance organizations, and grants OID identifier allocation authority to each node operation organization through a node authorization method. The system in this embodiment of the present invention may have a tree-like branch structure, and may distribute the OID assignment authority level by level according to the actual application situation; It can also assign codes to other institutions under the jurisdiction of the organization. Other institutions can also continue to assign codes to various registered objects under their jurisdiction under the registered OID nodes.

The application example of the present invention can generate an identification code corresponding to the OID according to the OID assigned to the registered object; when receiving a preset identification instruction, the identification code can be obtained, and the OID can be parsed according to the identification code to obtain the relevant information of the registered object ; Wherein, the identification code includes one or more of the following codes: barcode, two-dimensional code. Taking the entity object as the registration object as an example, the following is an example to illustrate this part: after the entity object applies for registration, the OID assigned to the entity object is obtained; according to the generated OID application example of the present invention, a two-dimensional code corresponding to the OID is generated; Take the agricultural product manufacturer as an example, it may include: the agricultural product manufacturer invokes the OID interface or the node function of the registration management system to obtain the unique OID of the entity object such as the product to be identified; and generates the corresponding QR code according to the obtained OID. The manufacturer can print the generated QR code and attach the QR code to the corresponding entity object; through the QR code, the OID registration management system can be accessed, and the OID of the entity object can be accessed. How to realize the embedding of the address of the OID registration management system and access the registration management system by the QR code can be realized by referring to related technologies.

The application example of the present invention can analyze the OID by scanning, reading, etc.; wherein, RFID identification: identify the target object through radio frequency signals and obtain relevant data. Taking the traceability of wine products as an example, various wine bottles are attached with RFID electronic tags at the packaging, and mobile phones that support NFC, in the NFC function mode, can analyze and obtain the relevant information of OID through close-range perception.

The application example of the present invention can display the full life cycle information of the registered object according to the received query instruction after the OID is allocated to the registered object; the registered objects include but are not limited to: entity objects, metadata and security authentication objects. Taking an entity object as an example, the whole life cycle information may include some or all of the following information: the manufacturing, processing, circulation, use, maintenance, destruction and other information of the registered object. Optionally, the application example of the present invention supports one or more of the following query methods: browser client query, scanning query of an application with scanning function (for example, an instant messaging application with scanning function), radio frequency identification (RFID) ) scan query, query of World Wide Web (WEB) page; wherein, the query of WEB page includes the query of the World Wide Web (WEB) page with the ability to parse and access the corresponding OID identification of the Uniform Resource Name (URN); the application example of the present invention has the ability to parse and access the URN The corresponding WEB pages with OID identification capabilities can include: used in browsers such as Sogou, Internet Search (IE), Google, etc. The browser is compatible with the URN:OID toolkit, has the ability to directly parse and access the OID corresponding to the URN, and supports direct parsing Access the OID object field of the Extensible Markup Language (XML) document, which is used for locating and indexing the OID identification object resource in various WEB documents.

The metadata stated in the above examples of the present invention may include data describing data, and may include standardized basic metadata, mainly including information describing data attributes, to support functions such as indicating storage locations, historical data, resource search, file records, etc.; wherein , standardized basic metadata, used to obtain and save various types of electronic document template data; metadata can be regarded as an electronic catalog, containing information about data organization, data domains and their relationships. Metadata can be embodied as a certain XML document template or a component of a specific editing.

The following uses the registration object as metadata to illustrate the embodiment of the present invention. The application example of the present invention assigns a unique OID to each metadata to form a metadata database; the application example of the present invention uses the metadata database as the metadata that has been registered and used. A collection is a collection of standard data element definitions used by various information systems. The application example of the present invention can provide a metadata catalog that can be accessed and invoked by developers and computer systems. The OID of the metadata can be registered by the registration agency, and written into the metadata database after the registration is completed; after the registration is completed, the management personnel and registrants can query and compare the metadata with the corresponding query authority and the existing metadata by providing a unified standard specification to the outside world. Users can query and download the metadata information they need, and provide standard and normative support for their use. FIG. 5 is a schematic flowchart of registration management of application example metadata of the present invention, as shown in FIG. 5 , including:

Step 501, receive metadata;

Step 502, auditing the received metadata;

Step 503, adding the approved metadata to the metadata database;

Step 504: Compare the newly added metadata with the existing metadata information.

The application example of the present invention can provide the query service of metadata, including but not limited to: supporting the query carried out inside the system; realizing the query of metadata through external application system call interface, excel import, extensible markup language (XML) import, etc. Query; relying on the construction of the Web site, the query and download of XML and excel tables of metadata can be realized.

The application example of the present invention can provide the registration management function of metadata including various manufacturers and equipments in the machinery industry. When receiving the OID filled in by the user, check whether the OID is legal by connecting to the OID system interface. If it is legal, continue the OID registration application. If it is illegal, you can submit an application to obtain the correct OID.

The application example of the present invention supports the registration management of the OID of the security authentication object, and the definition of the security authentication object and its registration management are exemplified below:

The security authentication object is developed based on the public key infrastructure (PKI) system and follows the standardized authentication technology. Based on the electronic certificate, the security communication function between different application systems is performed by building a series of trust relationships; The trust organization manages the user's public key, for example, manages the user's public key by issuing a CA certificate through the certification center (CA), and associates the user's public key with the user's other identification object information (name, Email), etc., to verify in the Internet environment user ID. For the security authentication object, the objects identified by the OID may include: encryption algorithm, Secure Sockets Layer (SSL), Transport Layer Security (TLS) server and client, and the like. The following is an example of the OID registration management of the security authentication object:

Users apply for a security certificate from the Registration Center (RA) and become a certificate holder. The security certificate holder may include various users, devices, systems, etc. holding the security certificate; the application example of the present invention The security certificate holder may be a dedicated/general device reading client, various traceability object application systems, and heterogeneous Connect with communication entities such as application systems. The RA client/server serves as an intermediate channel between the user and the authentication center, and is mainly used to obtain and authenticate the identity of the user, and to make a certificate request to the CA. In order to obtain a CA certificate, the user of the application example of the present invention can submit an application to the RA in the following ways: the application example of the present invention establishes the connection between the CA authentication system and the registration management system, and the CA authentication system can call the interface for OID registration, and the user passes the Submit an application to the RA or call the security authentication interface to submit the user's identity information when applying for a CA certificate to apply for OID registration; optionally, submit identity information, a signature public key, and a randomly selected piece of information through the CA authentication system and signature for registration application for OID. The application information format and registration interface requirements can be designed and implemented with reference to the relevant technical specifications. When issuing a CA certificate for a user, the RA needs to confirm the user's identity information, require that the registration application information submitted by the user is consistent with the identity information, and at the same time verify that the user has the signature private key corresponding to the signature public key. The application example of the present invention can use existing methods in the related art to verify the user's identity information, including: by querying and calling the OID registration information in the OID registration management system or querying other security application system user data, automatic information calling And verification. Optionally, it includes the authentication that the user wishes to appear in the certificate including information such as job title, email, address, domain name, etc., as well as the verification of the user's payment status, contract signing, criminal record and other information.

OID registration applications in the related art are generally only oriented to organizations, and the application example of the present invention to allocate OIDs includes: OID allocation oriented to a single object and batch distribution of OIDs.

The distribution processing process of the OID application example of the present invention may include:

According to the preset first identification distribution rule, when an OID identification application is received, an OID is allocated to the user. Usually, manual allocation is for users of node hosting services who have completed OID registration and activated the OID system node service function. Under the registered OID node, the OID is directly allocated according to the first identification distribution rule preset in the system.

When an application example of the present invention receives a registration application for a batch registration object, the batch users can be assigned an OID code according to a preset second identification distribution rule.

Those of ordinary skill in the art can understand that all or part of the steps in the above method can be completed by instructing relevant hardware (such as a processor) through a program, and the program can be stored in a computer-readable storage medium, such as a read-only memory, a magnetic disk or an optical disk Wait. Optionally, all or part of the steps in the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the above-mentioned embodiments can be implemented in the form of hardware, for example, an integrated circuit to implement its corresponding function, or it can be implemented in the form of a software function module, for example, a processor executes a function stored in a memory. program/instruction to achieve its corresponding function. The present invention is not limited to any particular form of combination of hardware and software.

Although the embodiments disclosed in the present invention are as above, the described contents are only the embodiments adopted to facilitate the understanding of the present invention, and are not intended to limit the present invention. Any person skilled in the art to which the present invention belongs, without departing from the spirit and scope disclosed by the present invention, can make any modifications and changes in the form and details of the implementation, but the scope of the patent protection of the present invention still needs to be The scope defined by the appended claims shall prevail.

Claims (26)

1. a method for registration management, is characterized in that, comprises: After the parent node authorizes and authenticates the child nodes, it assigns the corresponding child node identifiers to each child node; The child node assigns an object identifier OID to the registered object applying for registration according to the assigned child node identifier. 2. The method according to claim 1, wherein the registered objects include some or all of the following objects: Operating agency, entity object, metadata, security authentication object. 3. The method according to claim 2, wherein the security authentication object comprises one or more of the following objects: The registered user, encryption algorithm, secure socket layer, transport layer security server and client of the security authentication certificate. 4. The method according to any one of claims 1 to 3, wherein the sub-node assigning an OID to a registration object applying for registration according to the assigned sub-node identifier comprises: When the child node receives the registration application of the registration object, it generates an OID corresponding to the registration object according to the child node identifier assigned to itself and the object identification code determined according to the preset coding strategy; The generated OID is assigned to the registration object. 5. The method according to any one of claims 1 to 3, wherein after allocating an object identifier OID to a registration object applying for registration, the method further comprises: Generate an identification code corresponding to the OID according to the OID assigned to the registered object; Obtain the identification code according to the received identification instruction, and parse the OID according to the identification code to obtain the relevant information of the registered object; Wherein, the identification code includes one or more of the following codes: barcode and two-dimensional code. 6. The method according to claim 5, characterized in that, the method further comprises querying the relevant information of the registered object by one or more of the following methods: Browser client query, scan query of applications with scanning function, RFID scan query, World Wide Web page query. 7. The method according to claim 5, wherein the related information comprises full life cycle information; and the full life cycle information comprises part or all of the following information: Manufacturing information, processing information, distribution information, usage information, maintenance information, and destruction information. 8. The method according to claim 2, wherein when the registration object is metadata, the method further comprises querying the metadata by one or more of the following methods: query the metadata through the parent node or child node; Query the metadata through a preset external application system call interface; Query the metadata through excel import; The metadata is queried by way of extensible markup language XML import. 9. The method according to claim 3, wherein when the registered object is a registered user of a security authentication certificate, the method further comprises: Establish a communication connection between the security authentication system and the parent node and/or child node through a preset first interface; When the registered user of the security authentication certificate applies for registration, the parent node or child node receives the identity information of the registered user sent by the security authentication system through the first interface; wherein the identity information Including the identity information submitted by the registered user when the security authentication system applies for the security authentication certificate; The parent node or child node that has received the identity information allocates an OID to the registered user according to the received identity information. 10. The method of claim 3, wherein the method further comprises: Establish a communication connection between the parent node or the child node and the security authentication system through a preset second interface; The parent node and/or the child node sends the identity information of the registration object applying for registration to the security authentication system through the second interface, so that the security authentication system can make The registration object performs application processing for a security authentication certificate. The method according to any one of claims 1 to 3, wherein the assigning an OID to a registration object applying for registration comprises: When receiving a registration application for a registration object, allocate an OID to the registration object according to a preset first identification distribution rule; When receiving registration applications from two or more registration objects, the corresponding OIDs are respectively allocated to the registration objects sending the registration applications according to the preset second identification distribution rule. 12 . The method according to claim 1 , wherein after the child node passes the authorization and authentication of the parent node, the method further comprises: 12 . The child node sets itself as a fully public node, a local area public node, or a private node according to the preset application scope rule. 13. The method according to any one of claims 1 to 3, wherein the method further comprises: The communication interface between the parent node and/or the child node and the registered object is encrypted using a preset signature encryption strategy. 14. A method for registration management, comprising: According to the preset authorization policy, determine one or more sub-nodes that need to be authorized and authenticated; After authorizing and authenticating the sub-nodes, assign corresponding sub-node identifiers to each sub-node; The child node identifier is used to determine the object identifier OID assigned to the registration object that initiates the registration application. 15. The method according to claim 14, wherein the registration object includes some or all of the following objects: Operating agency, entity object, metadata, security authentication object. 16. A system for registration management, comprising: a parent node and a child node; wherein, The parent node includes an authorization processing unit, which is used for: assigning a corresponding child node identifier to each child node after performing authorization and authentication on the child node; The child node includes an allocation processing unit, configured to: according to the allocated child node identifier, allocate an object identifier OID to the registered object applying for registration. 17. The system according to claim 16, wherein the registration object includes some or all of the following objects: Operating agency, entity object, metadata, security authentication object. 18. The system according to claim 17, wherein the security authentication object comprises one or more of the following objects: The registered user, encryption algorithm, secure socket layer, transport layer security server and client of the security authentication certificate. 19. The system according to any one of claims 16 to 18, wherein the allocation processing unit is specifically configured to: When the registration application of the registration object is received, the OID allocated to the registration object is generated according to the child node identifier allocated to itself and the object identification code determined according to the preset coding strategy. 20. The system according to any one of claims 16 to 18, wherein the second node further comprises an encoding processing unit and the system further comprises a parsing device; wherein, The encoding processing unit is used for: generating an identification code corresponding to the OID according to the OID assigned to the registered object; The parsing device is configured to: obtain the identification code according to the received identification instruction, and parse the OID according to the identification code to obtain the relevant information of the registered object; Wherein, the identification code includes one or more of the following codes: barcode and two-dimensional code. 21. The system according to claim 20, wherein the system further comprises a query device for querying the relevant information of the registered object through one or more of the following methods: Browser client query, scan query of applications with scanning function, RFID scan query, World Wide Web page query. 22. The system according to any one of claims 16 to 18, wherein the distribution processing unit comprises a first distribution module and a second distribution module; wherein, The first distribution module is used to: when receiving a registration application for a registration object, allocate an OID to the registration object according to a preset first identification distribution rule; The second distribution module is used for: when receiving registration applications of two or more registration objects, respectively assigning corresponding OIDs to the registration objects sending the registration applications according to the preset second identification distribution rules. 23. The system according to claim 18, wherein the system further comprises a first interface unit, and the parent node and/or the child node further comprises a receiving unit; wherein, The first interface unit is configured to: establish a communication connection between the security authentication system and the parent node or child node through a preset first interface; The receiving unit is configured to: when the registered user of the security authentication certificate applies for registration, receive the identity information of the registered user sent by the security authentication system through the first interface; wherein, the identity information It includes the identity information submitted by the registered user when the security authentication system applies for the security authentication certificate. 24. The system according to claim 18, wherein the system further comprises a second interface unit, and the parent node and/or the child node further comprises a sending unit; wherein, The second interface unit is configured to: establish a communication connection between the parent node or the child node and the security authentication system through a preset second interface; The sending unit has: through the second interface, send the identity information of the registration object applying for registration to the security authentication system, so that the security authentication system can register the registration information according to the received registration information to the security authentication system. The object performs the application processing of the security authentication certificate. 25. A node, comprising: a determination unit and an allocation processing unit; wherein, The determining unit is used for: determining one or more sub-nodes that need to be authorized and authenticated according to the preset authorization policy; The assigning processing unit is used for: assigning corresponding child node identifiers to each child node after performing authorization and authentication on the child node; The child node identifier is used to determine the object identifier OID assigned to the registration object that initiates the registration application. 26. The node according to claim 25, wherein the registration object includes some or all of the following objects: Operating agency, entity object, metadata, security authentication object.