CN116016168A - Software function activation method, device, equipment and storage medium - Google Patents

Abstract

The invention discloses a method, a device, equipment and a storage medium for activating software functions, wherein the method is applied to equipment ends, the equipment ends are provided with encryption chips, and the method comprises the following steps: generating device configuration data according to the function data of the function to be activated and the device data stored in the encryption chip; uploading the device configuration data to an activation server, and receiving activation verification data and activation function configuration data issued by the activation server based on the device configuration data; and when the activation verification data passes the data verification, activating the function to be activated according to the activation function configuration data. The software function of the equipment end can be activated according to the user demand, so that the flexibility of software function activation is improved, equipment data needed in the process of activating the software function are stored in the encryption chip, and the safety of software function activation is improved.

Description

Software function activation method, device, equipment and storage medium

technical field

The present invention relates to the technical field of industrial networks, in particular to a software function activation method, device, equipment and storage medium.

Background technique

Traditional software authorization methods include network authorization, license file authorization, and hardware dongle authorization, but network authorization and license file authorization are mainly general-purpose pure software authorization activation solutions, security cannot be guaranteed, and the cost of using hardware dongles is relatively high. High, and poor flexibility, scalability, and customization, it is difficult to quickly respond to products in iterative development and diverse authorization scenarios.

The above content is only used to assist in understanding the technical solution of the present invention, and does not mean that the above content is admitted as prior art.

Contents of the invention

The main purpose of the present invention is to provide a software function activation method, device, device and storage medium, aiming to solve the technical problem that the activation scheme adopted in the prior art has low security and cannot be applied to the requirements of industrial scenarios.

In order to achieve the above object, the present invention provides a software function activation method, the software function activation method is applied to the device end, the device end is provided with an encryption chip, and the method includes the following steps:

generating device configuration data according to the function data of the function to be activated and the device data stored in the encrypted chip;

uploading the device configuration data to an activation server, and receiving activation verification data and activation function configuration data issued by the activation server based on the device configuration data;

When the activation verification data passes the data verification, the function to be activated is activated according to the activation function configuration data.

Optionally, the activation verification data includes an encrypted chip authentication key, a verification hash value and an activation hash value;

The activating the function to be activated according to the activation function configuration data when the activation verification data passes the data verification includes:

Send random verification characters to the encryption chip, and obtain verification data fed back by the encryption chip based on the random verification characters;

Generate authentication request data according to the encryption chip authentication key and the random verification character, and when the authentication request data is consistent with the verification data, determine whether the verification hash value is consistent with the device hash value, so The device hash value is generated according to the device data;

If they are consistent, when the activation hash value is consistent with the function hash value, write the activation function configuration data into the encryption chip to activate the function to be activated, and the function hash value is based on the Functional data generation.

Optionally, the device data includes activated function configuration data, and the activation verification data further includes historical configuration data;

After the activation hash value is consistent with the function hash value, it also includes:

Obtaining the activated function configuration data stored in the encryption chip, and judging whether the activated function configuration data is consistent with the historical configuration data;

If they are consistent, write the activation function configuration data into the encryption chip to activate the function to be activated.

Optionally, before generating the device configuration data according to the function data of the function to be activated and the device data stored in the encryption chip, the method further includes:

Generate function data according to the function to be activated selected by the user;

When the verification of the ciphertext information input to the encryption chip is passed, the device data is read from the storage area of the encryption chip.

In order to achieve the above object, the present invention also proposes a method for activating software functions, the method for activating software functions is applied to an activation server, and the method includes the following steps:

Read the device identification information, device electronic label data, chip identification number, function data and activated function configuration data from the device configuration data uploaded by the device end, and judge the device end according to the device identification information and the function data Whether it has the function activation authority;

When the device end has the function activation authority, generate activation verification data according to the device identification information, the device electronic label data, the chip identification number, the function data and the activated function configuration data;

generating activation function configuration data based on said function data;

Sending the activation verification data and the activation function configuration data to the device end, so that the device end performs function activation.

Optionally, the generating activation verification data according to the device identification information, the device electronic label data, the chip identification number, the function data and the activated function configuration data includes:

generating an encrypted chip authentication key according to the device electronic tag data and the chip identification number;

performing hash processing on the device identification information to obtain a verification hash value, and performing hash processing on the functional data to obtain an activation hash value;

Activation verification data is generated based on the encrypted chip authentication key, the verification hash value, the activation hash value, and the activated function configuration data.

Optionally, the judging whether the device end has function activation authority according to the device identification information and the function data includes:

determining the authorized function data of the device according to the device identification information;

When the function data exists in the authorized function data, it is determined that the device has the function activation authority.

In addition, in order to achieve the above purpose, the present invention also proposes a software function activation device, which includes:

A generating module, configured to generate device configuration data according to the function data of the function to be activated and the device data stored in the encrypted chip;

An upload module, configured to upload the device configuration data to an activation server, and receive activation verification data and activation function configuration data issued by the activation server based on the device configuration data;

An activation module, configured to activate the function to be activated according to the activation function configuration data when the activation verification data passes the data verification.

In addition, in order to achieve the above object, the present invention also proposes a software function activation device, which includes: a memory, a processor, and a software function activation program stored in the memory and operable on the processor. The above-mentioned software function activation program is configured to realize the steps of the above-mentioned software function activation method.

In addition, in order to achieve the above object, the present invention also proposes a storage medium, on which a software function activation program is stored, and when the software function activation program is executed by a processor, the software function activation method as described above is realized. step.

The present invention proposes a method for activating a software function, which is applied to a device end. The device end is provided with an encryption chip. The method includes: generating device configuration data according to the function data of the function to be activated and the device data stored in the encryption chip; Upload the device configuration data to an activation server, and receive activation verification data and activation function configuration data issued by the activation server based on the device configuration data; when the activation verification data passes data verification, according to the activation The function configuration data activates the function to be activated. The present invention generates device configuration data according to the functional data of the function to be activated and the device data stored in the encryption chip, and performs data verification according to the activation verification data issued by the activation server based on the device configuration data, and when the data verification passes, according to the The activation function configuration data sent to activate the function to be activated can activate the software function of the device according to the user's needs, improve the flexibility of software function activation, and store the device data needed in the process of activating the software function into the encrypted chip. Improved security for software feature activation.

Description of drawings

Fig. 1 is a schematic structural diagram of a software function activation device of a hardware operating environment involved in the solution of an embodiment of the present invention;

Fig. 2 is a schematic flow chart of the first embodiment of the software function activation method of the present invention;

Fig. 3 is the synoptic diagram of activation network enhancement and Ether CAT function in one embodiment of software function activation method of the present invention;

4 is a schematic flowchart of a second embodiment of the software function activation method of the present invention;

FIG. 5 is a schematic flowchart of a third embodiment of the software function activation method of the present invention;

Fig. 6 is a structural block diagram of the first embodiment of the software function activation device of the present invention;

Fig. 7 is a structural block diagram of the third embodiment of the device for activating software functions according to the present invention.

The realization of the purpose of the present invention, functional characteristics and advantages will be further described in conjunction with the embodiments and with reference to the accompanying drawings.

Detailed ways

It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

Referring to FIG. 1 , FIG. 1 is a schematic structural diagram of a software function activation device in a hardware operating environment involved in an embodiment of the present invention.

As shown in FIG. 1, the software function activation device may include: a processor 1001, such as a central processing unit (Central Processing Unit, CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. Wherein, the communication bus 1002 is used to realize connection and communication between these components. The user interface 1003 may include a display screen (Display), an input unit such as a keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a Wireless-Fidelity (Wireless-Fidelity, WI-FI) interface). The memory 1005 may be a high-speed random access memory (Random Access Memory, RAM), or a stable non-volatile memory (Non-Volatile Memory, NVM), such as a disk memory. Optionally, the memory 1005 may also be a storage device independent of the aforementioned processor 1001 .

Those skilled in the art can understand that the structure shown in FIG. 1 does not constitute a limitation on the software function activation device, and may include more or less components than those shown in the figure, or combine some components, or arrange different components.

As shown in FIG. 1 , memory 1005 as a storage medium may include an operating system, a network communication module, a user interface module, and a software function activation program.

In the software function activation device shown in Figure 1, the network interface 1004 is mainly used for data communication with the network server; the user interface 1003 is mainly used for data interaction with the user; the processor 1001, the memory device in the software function activation device of the present invention 1005 may be set in the software function activation device, and the software function activation device invokes the software function activation program stored in the memory 1005 through the processor 1001, and executes the software function activation method provided by the embodiment of the present invention.

At present, software authorization methods mainly include network authorization, license file authorization and hardware dongle authorization. Network authorization mainly means that the authorization program will obtain hardware information such as the device's own network card MAC and CPU, generate a device ID based on the obtained hardware information, and send The remote server inquires whether the device is authorized; the authorization of the license file mainly puts the specific data known only to the manufacturer in the specified file, and the content of the file is checked during the working process of the authorized software to determine whether it is authorized; hardware encryption The dog is generally bound to a dedicated security encryption device, and a specific authentication function library is integrated in the software to communicate with the dedicated encryption device. The activation scheme using network authorization and license file authorization has low security, and network authorization needs to maintain network connection all the time, which does not meet the application scenarios of industrial sites; the activation scheme using hardware dongle is relatively expensive, and the activation scheme is flexible, The scalability and customization are poor, and it cannot respond quickly to products in iterative development and diversified authorization scenarios.

Based on the above problems, the embodiment of the present invention provides a software function activation method, the software function activation method is applied to the device end, and the device end is provided with an encryption chip, referring to Figure 2, Figure 2 is the software function activation method of the present invention Schematic flow chart of the first embodiment.

In this embodiment, the software function activation method includes the following steps:

Step S10: Generate device configuration data according to the function data of the function to be activated and the device data stored in the encryption chip.

It should be noted that the execution subject of this embodiment may be a computing service device with data processing, network communication and program running functions, or an electronic device capable of realizing the above functions, a software function activation device or a device to be activated wait. The following takes the device to be activated (referred to as the device end) as an example to illustrate this embodiment and the following embodiments.

It can be understood that the function to be activated may be the software function that needs to be activated on the device side; the function data may be the data generated by the program on the device side based on the function to be activated, for example, the function to be activated and the function data are stored in a mapping relationship, and the user-selected The function is the mobile terminal control support function. The device side determines the function data corresponding to the mobile terminal control support function according to the above mapping relationship, or the device side performs hash processing on the character "mobile terminal control support" to obtain the corresponding function of the mobile terminal control support function Data, function data can also be generated in other ways, and this embodiment is not limited here; the encryption chip can be a chip set on the device side for storing device data, and the device data includes the identity data of the device side, and the activated function of the device side. Configuration data, etc.; the device configuration data can be data that can uniquely locate the device and the authorization function of the device, and the device configuration data can be written into a file in a preset format.

In the specific implementation, the user selects the software function to be activated in the program on the device side, the device side determines the function to be activated according to the software function selected by the user, generates the corresponding function data according to the function to be activated, and the device side reads from the storage data of the encryption chip. Get device data, write function data and device data into a file with preset format, and obtain device configuration data.

Step S20: Upload the device configuration data to an activation server, and receive activation verification data and activation function configuration data issued by the activation server based on the device configuration data.

In this embodiment, the activation server may be a server for activating the software function of the device; the activation verification data may be data for verifying whether the device has the right to activate the software function. The activation function configuration data may be data for parameter configuration of the software function to be activated.

Step S30: when the activation verification data passes the data verification, activate the function to be activated according to the activation function configuration data.

In the specific implementation, the user selects the software function to be activated on the device side, and the device side determines that the software function selected by the user is the function to be activated, and generates function data according to the function to be activated, and reads the identity of the device side from the internal encryption chip Data, write function data and identity data into a file with a preset format to generate a device configuration file, upload the device configuration file to the activation server, and receive activation verification data and activation function configuration data issued by the activation server based on the device configuration file , the device side verifies the activation authority of the device side based on the activation verification data, and when the activation authority verification passes, writes the activation function configuration data into the encryption chip, and configures the parameters of the software function to be activated according to the configuration data written into the encryption chip configuration to activate the corresponding software functions.

In another implementation, the device side generates function data according to the function to be activated selected by the user, reads the identity data of the device side and the configuration data of the activated function from the encrypted chip, and converts the function data, identity data and configuration data of the activated function The configuration data is written into a file with a preset format, a device configuration file is generated, and the device configuration file is uploaded to the activation server. The authority verification is performed according to the activation verification data issued by the activation server based on the device configuration file. The feature configuration data activates user-selected software features.

It is understandable that in order to improve the security of software function activation, the device can use the private key of the RSA key pair to encrypt the device configuration data and upload it to the activation server. After the activation server receives the encrypted data, it needs to use the RSA key pair The public key to decrypt the encrypted data to obtain the device configuration data.

In this embodiment, for example, referring to Fig. 3, Fig. 3 is a schematic diagram of activating network enhancement and Ether CAT functions, assuming that the user selects network enhancement and Ether CAT functions in the function activation program on the device side, and the activation program determines that the function to be activated is the network Enhancement and Ether CAT, generate function data according to network enhancement and Ether CAT, the function activation program reads the device ID from the encryption chip, generates a device configuration file according to the function data and device ID, and then uploads the device configuration file to the activation server after exporting it. In order to enable the activation server to issue permission verification data and configuration data corresponding to network enhancement and Ether CAT functions according to the device configuration file, the function activation program in the device side can check whether the device side has network enhancement and Ether CAT function permissions according to the verification data. Verification, and when the functional permission verification is passed, the configuration data of network enhancement and Ether CAT is written into the encryption chip, and parameter configuration is performed according to the configuration data to activate the network enhancement and Ether CAT functions on the device side.

Further, in order to improve the activation security, before the step S10, it also includes: generating function data according to the function to be activated selected by the user; Read device data in the area.

It can be understood that the ciphertext information may be verification information for determining whether there is an authority to read data from the encryption chip, for example, the ciphertext information is a preset password or a public key of the encryption chip.

In the specific implementation, the device side generates function data according to the function to be activated selected by the user through the function activation program of the device side, and obtains the verification password entered by the user, and judges whether the device side has the authority to read device data according to the verification password. , the device data is read from the storage area of the encryption chip.

In this embodiment, since the device configuration data is generated according to the function data of the function to be activated and the device data stored in the encryption chip in this embodiment, and the software function is activated according to the activation function configuration data issued by the activation server based on the device configuration data, If the software function activation method proposed in this embodiment is applied to products in iterative development, when a new function is added to a product in iterative development, only the corresponding function data needs to be added, which has high flexibility and can support iterative development. Quickly respond to mid-range products and diversified authorization scenarios, and store device data through the encryption chip on the device side, which reduces costs and improves activation security; if the software function activation method proposed in this embodiment is applied to non-iterative development The product can be extended and customized according to the function of the product. While improving the security of the activation, it makes the activation solution more scalable and customizable, and can be applied to the needs of more application scenarios.

This embodiment proposes a method for activating a software function, which is applied to a device end. The device end is provided with an encryption chip. The method includes: generating device configuration data according to the function data of the function to be activated and the device data stored in the encryption chip. ; Upload the device configuration data to the activation server, and receive the activation verification data and activation function configuration data issued by the activation server based on the device configuration data; when the activation verification data passes the data verification, according to the The activation function configuration data activates the function to be activated. In this embodiment, the device configuration data is generated according to the function data of the function to be activated and the device data stored in the encryption chip, and the data verification is performed according to the activation verification data issued by the activation server based on the device configuration data, and when the data verification is passed, according to the activation server The issued activation function configuration data activates the function to be activated, which can activate the software function of the device according to the user's needs, improves the flexibility of software function activation, and stores the device data needed in the process of activating the software function into the encryption chip , improving the security of software function activation.

Referring to FIG. 4 , FIG. 4 is a schematic flowchart of a second embodiment of a software function activation method according to the present invention.

Based on the first embodiment above, in this embodiment, the activation verification data includes an encrypted chip authentication key, a verification hash value and an activation hash value; the step S30 includes:

Step S301: Send a random verification character to the encryption chip, and obtain verification data fed back by the encryption chip based on the random verification character.

It can be understood that the encryption chip authentication key may be a secret key for verifying authority when writing data into the encryption chip; the random verification character may be a randomly generated character for generating verification data. An encryption chip verification key is stored inside the encryption chip. After receiving a random verification character, the encryption chip generates verification data according to the internally stored encryption chip verification key and random verification characters, and feeds back the generated verification data.

Step S302: Generate authentication request data according to the encryption chip authentication key and the random verification character, and when the authentication request data is consistent with the verification data, determine whether the verification hash value and the device hash value Consistent, the device hash value is generated according to the device data.

In this embodiment, the device side generates authentication request data according to the encryption chip authentication key and random verification characters. Authentication request data. When the authentication request data is consistent with the verification data, it is determined that the authentication is passed, and the subsequent verification is continued; otherwise, it is determined that the activation of the software function fails.

It can be understood that the verification hash value may be the hash value obtained by the activation server through the SHA256 algorithm on the received device data in the device configuration data; the activation hash value may be the activation server through the SHA256 algorithm on the received The hash value obtained by hashing the functional data in the received device configuration data; the device hash value may be a hash value generated by the device side based on the device data stored in the encryption chip.

Step S303: If they are consistent, when the activation hash value is consistent with the function hash value, write the activation function configuration data into the encryption chip to activate the function to be activated, and the function hash value Generated from the functional data.

In this embodiment, the function hash value may be a hash value generated by the device according to the function data of the function to be activated; when the activation hash value is consistent with the function hash value, it is determined that the software function issued by the activation server is received The device that activates the data is the same device that uploads the device configuration data.

In the specific implementation, the device side generates the device hash value according to the device data stored in the encryption chip, and generates the function hash value according to the function data of the function to be activated. When the device side receives the software function activation data issued by the activation server, Generate a random verification character first, and receive the verification data generated by the encryption chip based on the random verification character, and generate the authentication request data according to the encryption chip authentication key and the random verification character, if the verification data is consistent with the authentication request data; then judge the software function activation data Check whether the verification hash value in the device is consistent with the device hash value. If they are consistent, continue to judge whether the activation hash value in the software function activation data is consistent with the function hash value. The device that activates the software function data and the device that uploads the device configuration data are the same device. At this time, the configuration data of the activation function is written into the encryption chip to activate the corresponding software function.

Further, in order to improve the security of activation, the device data includes activated function configuration data, and the activation verification data also includes historical configuration data, when the activation hash value is consistent with the function hash value After that, it also includes: obtaining the activated function configuration data stored in the encryption chip, and judging whether the activated function configuration data is consistent with the historical configuration data; if they are consistent, writing the activated function configuration data into The encryption chip is used to activate the function to be activated.

It can be understood that the activated function configuration data may be the configuration data corresponding to the activated software function stored in the encrypted chip; the historical configuration data may be the configuration data contained in the device configuration data uploaded by the device; the activated function configuration data When it is consistent with the historical configuration data, it is determined that the device that received the activation function configuration data issued by the activation server is the same device as the device that uploaded the device configuration data. At this time, the activation function configuration data is written into the encryption chip to activate the corresponding software function .

In the specific implementation, the verification and activation data issued by the activation server includes historical configuration data. The device first uses the encryption chip authentication key to request authentication from the encryption chip. If the authentication fails, it is determined that the activation of the software function has failed; if the authentication passes, Then judge whether the device hash value is consistent with the verification hash value. If they are not consistent, the activation will fail. If they are consistent, then judge whether the activation hash value is consistent with the function hash value. Whether the historical configuration data is consistent with the activated function configuration data, if not, the activation fails, if consistent, write the latest configuration data of the function to be activated into the encryption chip to activate the function to be activated, further, the encryption chip can also be The activated function configuration data stored in the internal memory is cleared, and only the latest configuration data corresponding to the function to be activated is retained. Through various verifications, the activation security is further improved.

In this embodiment, a random verification character is sent to the encryption chip, and the verification data fed back by the encryption chip based on the random verification character is obtained; authentication request data is generated according to the encryption chip authentication key and the random verification character, and When the authentication request data is consistent with the verification data, it is judged whether the verification hash value is consistent with the device hash value, and the device hash value is generated according to the device data; When the hash value is consistent with the function hash value, the activation function configuration data is written into the encryption chip to activate the function to be activated, and the function hash value is generated according to the function data. In this embodiment, multiple verifications are performed by encrypting the chip authentication key, the verification hash value, and the activation hash value. When the multiple verifications pass, the software function is activated, which further improves the security of software function activation.

Referring to FIG. 5 , FIG. 5 is a schematic flowchart of a third embodiment of a software function activation method according to the present invention.

Based on the above embodiments, in this embodiment, the software function activation method is applied to an activation server, including:

Step S01: Read the device identification information, device electronic label data, chip identification number, function data and activated function configuration data from the device configuration data uploaded by the device, and judge the device according to the device identification information and the function data. Whether the above-mentioned device has the function activation authority.

It should be noted that the execution subject of this embodiment may be a computing service device with data processing, network communication and program running functions, or an electronic device capable of realizing the above functions, software function activation device or activation server, etc. . The following uses an activation server as an example to illustrate this embodiment and the following embodiments.

It can be understood that the device identification information may be information that can uniquely identify the device, for example, the device identification information includes device ID, device number, etc.; the activation server maintains a mapping relationship between the device identification information and the functional data with activation rights, according to the mapping The relationship can determine whether the device that uploads the device configuration data has the function activation permission.

It should be understood that the device electronic tag data may be data capable of identifying device attributes in detail, for example, the device electronic tag data includes: device manufacturer, operating system, version, and so on. The chip identification number can also be called the chip ID, which can uniquely identify the encryption chip. The activated function data may be configuration data of functions already activated on the device side.

Step S02: When the device has function activation authority, generate activation verification data according to the device identification information, the device electronic label data, the chip identification number, the function data and the activated function configuration data .

In the specific implementation, when the device has the function activation authority, the activation verification data is generated according to the device identification information, device electronic label data, chip identification number, function data and activated function configuration data in the device configuration data, and according to the device configuration The function data in the data generates activation function configuration data.

Step S03: Generate activation function configuration data according to the function data;

Step S04: sending the activation verification data and the activation function configuration data to the device, so that the device performs function activation according to the software function activation data.

It should be noted that, in order to improve the security of software function activation, the activation server can use the public key of the RAS key pair to encrypt the activation verification data and activation function configuration data, and send the encrypted data to the device. The terminal needs to use the private key of the RAS key pair to decrypt the encrypted data before proceeding to the next step.

Further, in order to improve the security of software function activation, the generating software function activation data according to the device configuration data includes: generating an encrypted chip authentication key according to the device electronic label data and the chip identification number; Perform hash processing on the device identification information to obtain a verification hash value, and perform hash processing on the functional data to obtain an activation hash value; according to the encryption chip authentication key, the verification hash value, the The activation hash value and the activated function configuration data generate activation verification data.

In the specific implementation, for example, the activation server performs hash processing on the device electronic label data and chip identification number to obtain the encrypted chip authentication key; after the activation server receives the device configuration data uploaded by the device end, it uses the SHA256 algorithm to The function data of the device is hashed to obtain the activation hash value, and the device data in the device configuration data is hashed by the SHA256 algorithm to obtain the verification hash value, and the chip authentication key, verification hash value, and activation hash are encrypted. The value and activated feature configuration data constitute the activation verification data.

Further, in order to determine whether the device end has the function activation authority to improve the security of software function activation, the determining whether the device end has the function activation authority according to the device identification information and the function data includes: according to the The device identification information determines the authorized function data of the device; when the function data exists in the authorized function data, it is determined that the device has the function activation authority.

It can be understood that the authorized function data may be the software function data that the device end has the activation authority; if the function data of the function to be activated exists in the authorized function data, it is determined that the device end has the activation authority of the function to be activated.

In specific implementation, continue to refer to Fig. 3, Fig. 3 is the synoptic diagram of activating network enhancement and Ether CAT function, suppose the user selects network enhancement and Ether CAT function in the function activation program of device end, and activation procedure determines that the function to be activated is network enhancement and Ether CAT function Ether CAT, according to network enhancement and Ether CAT to generate functional data, the function activation program reads the device ID, device electronic label data, chip ID and activated function configuration data from the encrypted chip, generates a device configuration file based on the above data, and activates the device The configuration file is exported, and the device configuration file is encrypted by the private key of the RSA key pair and uploaded to the activation server. After the activation server receives the encrypted file, the encrypted file is decrypted by the public key of the RSA key pair to obtain the device configuration file. , the activation server judges whether the device has the function activation authority according to the device ID and function data in the device configuration file, and if so, generates an encrypted chip authentication key according to the device electronic label data and chip ID; and performs hash processing on the function data to obtain Activate the hash value, hash the device data to obtain the verification hash value, and obtain the activation function configuration data corresponding to network enhancement and Ether CAT, encrypt the chip authentication key, activation hash value, verification hash value and historical configuration The data constitutes the activation verification data. The public key pair of the RAS key is used to encrypt the activation verification data and activation function configuration data and then send it to the device. After receiving the encrypted file, the device uses the private key pair of the RSA key pair to encrypt The file is decrypted to obtain activation verification data and activation function configuration data, and an authentication request is sent to the encryption chip according to the encryption chip authentication key in the activation verification data. If the authentication request fails, the activation fails; if the authentication request passes, the device obtains the The terminal's own functional data and the device data in the encryption chip generate a function hash value and a device hash value, and compare whether the device hash value is consistent with the verification hash value. If they are not consistent, the activation fails. If they are consistent, compare Whether the function hash value is consistent with the activation hash value. If they are inconsistent, the activation fails. If they are consistent, compare whether the historical configuration data is consistent with the configuration data stored in the encrypted chip. If they are inconsistent, the activation fails. Write the configuration data of network enhancement and Ether CAT into the encryption chip, and perform parameter configuration according to the configuration data to activate the network enhancement and Ether CAT functions on the device side.

In this embodiment, the device identification information, device electronic label data, chip identification number, function data, and activated function configuration data are read from the device configuration data uploaded by the device side, and the device identification information and the function data are used to determine the Whether the device end has the function activation authority; when the device end has the function activation authority, according to the device identification information, the device electronic label data, the chip identification number, the function data and the activated function Generate activation verification data from the configuration data; generate activation function configuration data according to the function data; send the activation verification data and the activation function configuration data to the device end, so that the device end performs function activation. In this embodiment, when judging that the device has function activation authority according to the device identification information and function data in the device configuration data, the activation verification data and activation function configuration data are sent to the device, so that the device passes the data verification in the activation verification data Finally, the software function is activated according to the activation function configuration data, and the software function can be activated according to user requirements, which improves the flexibility and security of software function activation, and is applicable to industrial application scenarios.

In addition, an embodiment of the present invention also proposes a storage medium, on which a software function activation program is stored, and when the software function activation program is executed by a processor, the steps of the method for activating the software function as described above are implemented.

Referring to FIG. 6 , FIG. 6 is a structural block diagram of the first embodiment of the device for activating software functions according to the present invention.

As shown in Figure 6, the software function activation device proposed by the embodiment of the present invention includes:

A generating module 10, configured to generate device configuration data according to the function data of the function to be activated and the device data stored in the encryption chip;

The upload module 20 is configured to upload the device configuration data to an activation server, and receive activation verification data and activation function configuration data issued by the activation server based on the device configuration data;

The activation module 30 is configured to activate the function to be activated according to the activation function configuration data when the activation verification data passes the data verification.

In this embodiment, the device configuration data is generated according to the function data of the function to be activated and the device data stored in the encryption chip, and the data verification is performed according to the activation verification data issued by the activation server based on the device configuration data, and when the data verification is passed, according to the activation server The issued activation function configuration data activates the function to be activated, which can activate the software function of the device according to the user's needs, improves the flexibility of software function activation, and stores the device data needed in the process of activating the software function into the encryption chip , improving the security of software function activation.

Based on the above first embodiment of the software function activating device of the present invention, a second embodiment of the software function activating device of the present invention is proposed.

In this embodiment, the activation module 30 is further configured to send a random verification character to the encryption chip, and obtain verification data fed back by the encryption chip based on the random verification character; Generate authentication request data with the random verification character, and when the authentication request data is consistent with the verification data, judge whether the verification hash value is consistent with the device hash value, and the device hash value is based on the Device data generation; if consistent, when the activation hash value is consistent with the function hash value, write the activation function configuration data into the encryption chip to activate the function to be activated, and the function hash value A value is generated based on the function data; the activation verification data includes an encrypted chip authentication key, a verification hash value, and an activation hash value.

The activation module 30 is also used to obtain the activated function configuration data stored in the encryption chip, and judge whether the activated function configuration data is consistent with the historical configuration data; Configuration data is written into the encryption chip to activate the function to be activated; the device data includes configuration data of activated functions, and the activation verification data also includes historical configuration data.

The generation module 10 is also used to generate function data according to the function to be activated selected by the user; when the verification of the ciphertext information input to the encryption chip is passed, read the device data from the storage area of the encryption chip.

Referring to FIG. 7 , FIG. 7 is a structural block diagram of a third embodiment of an apparatus for activating software functions according to the present invention.

As shown in Figure 7, the software function activation device proposed by the embodiment of the present invention includes:

Judgment module 40, configured to read device identification information, device electronic tag data, chip identification number, function data and activated function configuration data from the device configuration data uploaded by the device side, and according to the device identification information and the function Data to determine whether the device has the function activation authority;

The verification data generating module 50 is configured to, when the device has function activation authority, configure the device according to the device identification information, the device electronic tag data, the chip identification number, the function data and the activated function Data generation activates verification data;

Configuration data generating module 60, configured to generate activation function configuration data according to the function data

A sending module 70, configured to send the activation verification data and the activation function configuration data to the device end, so that the device end performs function activation.

Further, the verification data generation module 50 is also used to generate an encrypted chip authentication key according to the device electronic label data and the chip identification number; perform hash processing on the device identification information to obtain a verification hash value , and perform hash processing on the function data to obtain an activation hash value; generate activation according to the encryption chip authentication key, the verification hash value, the activation hash value, and the activated function configuration data verify the data.

Further, the judging module 40 is further configured to determine the authorized function data of the device according to the device identification information; when the function data exists in the authorized function data, determine that the device has the function activation authority .

For other embodiments or specific implementations of the device for activating software functions of the present invention, reference may be made to the above-mentioned method embodiments, which will not be repeated here.

It should be noted that, as used herein, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article or system comprising a set of elements includes not only those elements, It also includes other elements not expressly listed, or elements inherent in the process, method, article, or system. Without further limitations, an element defined by the phrase "comprising a..." does not preclude the presence of additional identical elements in the process, method, article or system comprising that element.

The serial numbers of the above embodiments of the present invention are for description only, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus a necessary general-purpose hardware platform, and of course also by hardware, but in many cases the former is better implementation. Based on this understanding, the technical solution of the present invention can be embodied in the form of software products in essence or in other words, the part that contributes to the prior art, and the computer software products are stored in a storage medium (such as read-only memory/random access memory, magnetic disk, optical disk), including several instructions to make a terminal device (which can be a mobile phone, computer, server, air conditioner, or network equipment, etc.) execute the methods described in various embodiments of the present invention.

The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process conversion made by using the description of the present invention and the contents of the accompanying drawings, or directly or indirectly used in other related technical fields , are all included in the scope of patent protection of the present invention in the same way.

Claims (10)

1. The software function activating method is characterized in that the software function activating method is applied to a device side, the device side is provided with an encryption chip, and the method comprises the following steps:

generating equipment configuration data according to the function data of the function to be activated and the equipment data stored in the encryption chip;

uploading the equipment configuration data to an activation server, and receiving activation verification data and activation function configuration data which are issued by the activation server based on the equipment configuration data;

and when the activation verification data passes the data verification, activating the function to be activated according to the activation function configuration data.

2. The method of claim 1, wherein the activation verification data comprises a cryptographic chip authentication key, a verification hash value, and an activation hash value;

when the activation verification data passes the data verification, activating the function to be activated according to the activation function configuration data, including:

transmitting a random verification character to the encryption chip, and acquiring verification data fed back by the encryption chip based on the random verification character;

generating authentication request data according to the encryption chip authentication key and the random verification character, and judging whether the verification hash value is consistent with a device hash value or not when the authentication request data is consistent with the verification data, wherein the device hash value is generated according to the device data;

If the function hash value is consistent with the function hash value, writing the activation function configuration data into the encryption chip to activate the function to be activated, wherein the function hash value is generated according to the function data.

3. The method of claim 2, wherein the device data comprises activated function configuration data, the activation verification data further comprising historical configuration data;

the method further includes, after the activating hash value is consistent with the functional hash value:

acquiring activated function configuration data stored in the encryption chip, and judging whether the activated function configuration data is consistent with the historical configuration data or not;

and if the configuration data is consistent, writing the configuration data of the activated function into the encryption chip to activate the function to be activated.

4. A method according to any one of claims 1-3, characterized in that before said generating device configuration data from the function data of the function to be activated and the device data stored in said cryptographic chip, it further comprises:

generating function data according to the function to be activated selected by the user;

and when the ciphertext information input to the encryption chip passes verification, reading the device data from the storage area of the encryption chip.

5. A software function activating method, wherein the software function activating method is applied to an activation server, the method comprising:

reading equipment identification information, equipment electronic tag data, a chip identification number, function data and activated function configuration data from equipment configuration data uploaded by an equipment end, and judging whether the equipment end has function activation authority according to the equipment identification information and the function data;

when the equipment end has a function activation right, activating verification data are generated according to the equipment identification information, the equipment electronic tag data, the chip identification number, the function data and the activated function configuration data;

generating activated function configuration data according to the function data;

and sending the activation verification data and the activation function configuration data to the equipment end so as to enable the equipment end to activate functions.

6. The method of claim 5, wherein the generating activation verification data from the device identification information, the device electronic tag data, the chip identification number, the function data, and the activated function configuration data comprises:

Generating an encryption chip authentication key according to the equipment electronic tag data and the chip identification number;

carrying out hash processing on the equipment identification information to obtain a verification hash value, and carrying out hash processing on the functional data to obtain an activation hash value;

and generating activation verification data according to the encryption chip authentication key, the verification hash value, the activation hash value and the activated function configuration data.

7. The method as claimed in claim 5 or 6, wherein said determining whether the device side has a function activation right according to the device identification information and the function data comprises:

determining authorization function data of the equipment end according to the equipment identification information;

and when the function data exists in the authorized function data, judging that the equipment end has the function activation authority.

8. A software function activation device, the device comprising:

the generating module is used for generating equipment configuration data according to the function data of the function to be activated and the equipment data stored in the encryption chip;

the uploading module is used for uploading the equipment configuration data to an activation server and receiving activation verification data and activation function configuration data which are issued by the activation server based on the equipment configuration data;

And the activation module is used for activating the function to be activated according to the activation function configuration data when the activation verification data passes the data verification.

9. A software function activating apparatus, the apparatus comprising: a memory, a processor and a software function activation program stored on the memory and executable on the processor, the software function activation program being configured to implement the steps of the software function activation method of any one of claims 1 to 4 or any one of claims 5 to 7.

10. A storage medium having stored thereon a software function activation program which, when executed by a processor, implements the steps of the software function activation method of any one of claims 1 to 4 or any one of claims 5 to 7.

Images