CN118250061A - A domestic encrypted digital authentication protection method for charging and swapping systems - Google Patents

Abstract

The invention is applicable to the technical field of data security, and provides a domestic cryptographic digital authentication protection method of a charging and changing system, which comprises the following steps: the user carries out digital authentication through the terminal equipment, and enters a system to carry out content request after the authentication is passed, and configuration information is generated according to the content request; carrying out hash operation and digital signature on the content request and the configuration information, encrypting and transmitting to a server, and decrypting and verifying after the server receives the content request and the configuration information; the invention is based on the combination of digital authentication protection and a charging and changing system, can effectively prevent the charging operation of an unauthorized person through the digital authentication protection, ensure the safety of user information and funds, prevent malicious attack and data leakage, and can effectively ensure the integrity of information only through carrying out digital signature on a content request, prevent data tampering and fraudulent conduct, reduce risks and cost, be favorable for simplifying the management flow of charging and changing business and improve the operation efficiency.

Description

A domestic encrypted digital authentication protection method for charging and swapping systems

Technical Field

The present invention belongs to the field of data security technology, and in particular relates to a domestic encrypted digital authentication protection method for a charging and swapping system.

Background technique

With the rapid development of network technology, its applications have been widely spread in various industries. While bringing convenience, it has also exposed many security issues. Users are paying more and more attention to the privacy of network data.

In the charging and swapping system of electric bicycles, existing technologies may include identity authentication systems based on RFID (radio frequency identification) or NFC (near field communication). These technical solutions use wireless communication technology to confirm and authorize user identities, ensuring that only authenticated users can perform battery charging and swapping operations. However, these existing technologies also have some disadvantages, such as relatively low security and the risk of being counterfeited or tampered with; in addition, the data transmission distance of RFID or NFC technology is relatively limited, and it is susceptible to signal interference or eavesdropping attacks; in addition, since some existing technologies rely on relevant equipment and technical standards of foreign manufacturers, there may be hidden dangers of low supply chain controllability and information leakage.

Therefore, in order to solve the above problems, a domestic encrypted digital authentication protection method for a charging and swapping system is proposed.

Summary of the invention

The present invention provides a domestic encrypted digital authentication protection method for a charging and swapping system, aiming to solve the problem of low security of existing digital authentication methods.

The present invention is implemented as follows: a domestic encrypted digital authentication protection method for a charging and swapping system comprises the following steps:

The user performs digital authentication through the terminal device, enters the system to make content requests after passing the authentication, and generates configuration information based on the content requests;

Perform hash operations and digital signatures on content requests and configuration information, encrypt them and transmit them to the server, which then decrypts and verifies them.

The server responds to the content request and performs processing, hashing and digitally signing the response, encrypting it and transmitting it to the user's terminal device for decryption and verification.

Preferably, the method further includes: obtaining a registration/login request from a user and performing identity verification to determine whether the user's identity information is unique.

Preferably, the method further includes: configuring the user's identity information and digital certificate, authenticating and digitally signing the digital certificate, and verifying the digital signature.

Preferably, the method further includes: after verifying the digital certificate, further verifying information such as the validity period and issuing authority of the digital certificate.

Preferably, the method further includes: configuring a cache area and erasure rules for the user's identity information and digital certificate according to the identification result of the terminal device.

Preferably, it also includes: deploying part or all of the identity information, digital certificates and control logic in the charging and swapping equipment terminal, and performing localized authentication and control through the charging and swapping equipment terminal.

Compared with the prior art, the present invention has the following beneficial effects:

The present invention is based on the combination of digital authentication protection and charging and swapping systems. Through digital authentication protection, it can effectively prevent unauthorized persons from performing charging operations, ensure the security of user information and funds, prevent malicious attacks and data leakage, and digitally sign content requests to effectively ensure the integrity of information, prevent data tampering and fraud, enhance the identity authentication strength of electronic authentication, thereby reducing the risk of false authentication and identity theft, and ensure that only authorized users can access specific resources, reduce risks and costs, and help simplify the management process of charging and swapping services and improve operational efficiency.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic diagram of the process of the present invention.

Detailed ways

In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

The charging and swapping system performs charging and swapping transaction services, account service services, financial management services, and payment services;

The charging and swapping transaction business includes orders, recharges, refunds, profit sharing, order settlement, wallets, and transaction flow. The charging and swapping transaction business uses the SM4 algorithm for symmetric encryption and decryption to protect privacy information;

Account service business includes user information management (C-end user management, tenant management, pile owner management, property user management, platform management user management), permission management, account service business execution, calling SM2 algorithm to implement signature verification during login process, and realize secure login in compliance with national encryption;

Financial management services include fund transaction management, settlement management, wallet management, and financial statistics and analysis management. The SM4 algorithm is used for symmetric encryption and decryption of financial management services to protect privacy information.

The payment service integrates multi-channel payment capabilities, uses the SM4 algorithm for symmetric encryption and decryption of payment services to protect privacy information.

Please refer to FIG1 . For the above-mentioned charging and swapping system, a domestic encrypted digital authentication protection method for the charging and swapping system is proposed, which includes the following steps:

S1. Obtain the user's registration/login request and perform identity authentication to determine whether the user's identity information is unique;

The method also includes obtaining the identifier of the terminal device through which the user makes a registration/login request, and identifying the terminal device, wherein the terminal device includes a PC terminal, a mobile terminal, and a charging device terminal (charging pile). The identifier is the code and information of the terminal device, and the information of the terminal device includes the model and brand.

Specifically, after the user enters the system application through the terminal device, the system parameters are initialized and the public key is generated through the SM2 algorithm;

Users enter their identity information in the system's application interface through browsers, mini-programs, and apps. The identity information includes user name, password, mobile phone number, and ID number;

After the identity information is entered, the user's identity information is encrypted by the public key. The server obtains the encrypted identity information and then decrypts it by the public key. The decrypted user information is queried in the database to verify the uniqueness of the identity information. If it has been registered, it will be fed back to the user for login. If it has not been registered, a corresponding private key will be generated for the user and sent to the user terminal for registration.

S2. Configure the user's identity information and digital certificate, authenticate and digitally sign the digital certificate, and verify the digital signature;

If the user's identity information has not been registered, the public key and identity information are submitted to the digital certificate issuing authority. After verifying the user's identity, the public key and identity information are bound to generate a digital certificate. The digital signature is generated through public key encryption, and the server decrypts it to verify the consistency of the digital signature and the digital certificate.

After verifying the digital certificate, further verify the validity period, issuing authority and other information of the digital certificate to ensure the validity of the digital certificate;

The digital certificate also contains the user's digital identity information, which is protected by an encryption algorithm and can only be decrypted and verified by a digital certificate authority (CA) or an authorized agency to further protect the user's identity information security;

S3. Configure a cache area and erasure rules for the user's identity information and digital certificate based on the identification result of the terminal device;

If the user sends a request through a PC, mobile terminal, or charging device terminal, the client and server establish a secure link, deploy the identity information and digital certificate on the storage device of the terminal device, encrypt the private key with the user's identity information and password, and store it on the server; after a single use or logout, the charging device terminal erases the identity information, digital certificate, digital signature, and private key from the storage device;

S4. The user performs digital authentication through the terminal device, enters the system to make a content request after passing the authentication, and generates configuration information according to the content request;

During the digital authentication login process, a multi-factor authentication mechanism is used, such as a password, fingerprint biometrics, dynamic verification code or other personal identification information to perform login identity authentication to enhance the security of authentication;

The content requests include related requests for charging and swapping transaction services, account service services, financial management services and payment services. The content requests for charging and swapping transaction services include charging and swapping operation requests such as generating orders, account recharge, refund processing, profit-sharing settlement, order settlement, and transaction records; the content requests for account service services include account management operation requests including user management, information management, and authority management, wherein user management and information management include personnel and information management of users, tenants, pile owners, properties, platforms, and other aspects; the content requests for financial management services include transaction operation requests including fund transaction functions, settlement functions, wallet functions, and financial statistical analysis; the content requests for payment services include payment operation requests through multiple channels;

The configuration information includes business information and configuration changes thereof;

S5. Perform hash operation and digital signature on the content request and configuration information, encrypt and transmit to the server, and the server decrypts and verifies after receiving;

Specifically, a hash operation is performed on the plain text of the content request and the configuration information to obtain an information digest;

The information summary is encrypted by the user's private key through the SM4 algorithm to obtain a digital signature;

A key is randomly generated, and the content request and configuration information are encrypted using the key to form a ciphertext;

The randomly generated key is encrypted by the server's public key through the SM4 algorithm, and the encrypted key is transmitted together with the ciphertext;

The server decrypts the encrypted key using the private key to obtain the key, and decrypts the ciphertext using the key to obtain the plaintext of the content request and configuration information;

Then, the user's public key is used to perform the same hash operation on the plain text of the content request and configuration information to obtain a new information digest;

Compare the information digest obtained by decryption with the new information digest to see if they are consistent and verify whether the data has been modified;

S6. The server responds to the content request and performs processing, performs hashing and digital signature on the response result, encrypts it and transmits it to the user's terminal device for decryption and verification;

Specifically, the server processes the content request after the response, and performs a hash operation on the plain text information of the response result to obtain an information summary;

The information summary is encrypted by the server's private key through the SM4 algorithm to obtain a digital signature;

A key is randomly generated and the response result is encrypted with the key to form a ciphertext;

Through the SM4 algorithm, the randomly generated key is encrypted by the user's public key, and the encrypted key is transmitted together with the ciphertext;

The user decrypts the encrypted key with the private key to obtain the key, and decrypts the ciphertext with the key to obtain the plaintext response result of the content request;

Then use the server's public key to perform the same hash operation on the plaintext of the response result to obtain a new information summary;

Compare the decrypted information digest with the new information digest to see if they are consistent and verify whether the data has been modified.

Furthermore, step S3 also includes: deploying part or all of the identity information, digital certificates and control logic in the charging and swapping equipment terminal, and performing localized authentication and control through the charging and swapping equipment terminal to ensure that safe charging and swapping operations can be performed even without a reliable network connection;

Further, step S5 also includes: when the terminal device performs a charging or swapping operation, the terminal device and the server respectively generate a one-time dynamic password for authentication according to the operation factor, and the server compares the generated dynamic password to complete the dynamic password authentication;

Specifically, when the content request includes a charging or swapping operation, a one-time dynamic password is generated according to the shared key, random parameters and cryptographic algorithm between the server and the content request and configuration information, and step S5 is performed;

After decryption, the server generates a one-time dynamic password based on the shared key, the same random parameters and the same cryptographic algorithm, and compares it with the dynamic password obtained by decryption. If the comparison results are consistent, the server responds to the request for charging and swapping operations, thereby improving the security of the charging and swapping operations.

The above-mentioned domestic encrypted digital authentication protection method for the charging and swapping system is applied to the charging and swapping system, involving the following businesses of the charging and swapping system:

1. User information management and identity authentication: Users first need to authenticate their identities and call the SM2 algorithm to perform digital signatures and verification during the registration and login process. The user's identity information is confirmed through passwords, fingerprint scanning, face recognition, etc. This ensures that only users who have been correctly authenticated can perform account service operations and charging and swapping business operations.

2. Generate an order: After the user selects the charging and battery swapping service, the system generates corresponding charging business orders and battery swapping business orders. The charging business order records the charging start time, charging pile number, initial power, charging amount and other related information. The battery swapping business order includes the battery swapping start time, charging pile number, battery code, battery power, and calls the SM4 algorithm to encrypt and decrypt the data to protect privacy information. After the order is generated, the order information is digitally signed and encrypted to ensure the integrity and credibility of the order information.

3. Account recharge: When a user recharges his account, the SM4 algorithm is called to digitally authenticate the user's recharge request, including confirmation of the user's identity and secure transmission of transaction data.

4. Refund processing: When a user needs a refund, the SM4 algorithm is called to ensure the legitimacy of the refund application through digital authentication and perform the corresponding refund operation.

5. Profit sharing and settlement: If there are relevant partners or third parties involved in the charging business, which involves sharing the charging revenue, the SM4 algorithm is called to digitally authenticate the settlement operation to ensure the rights and interests of the partners.

6. Wallet management: The user's account will hold a certain amount of balance. When charging, the balance needs to be deducted accordingly. The deduction operation can only be performed after calling the SM4 algorithm for digital authentication.

7. Flow record: record the user's charging flow, including charging time, charging location, charging consumption and other detailed information. During the statistical process, call the SM4 algorithm for corresponding digital signature to ensure the integrity of the data.

In the above business process, the domestic encrypted digital authentication protection method of the charging and swapping system can ensure the security, credibility and user privacy of the charging business.

The domestic encrypted digital authentication protection method for charging and swapping systems has the following advantages and beneficial effects in the charging and swapping business process of electric bicycles:

1. Improved security: Digital authentication can effectively prevent unauthorized persons from performing charging operations, protect the security of user information and funds, and prevent malicious attacks and data leaks;

2. Data integrity assurance: Digital signatures and other technical means can ensure the integrity of business orders, recharges, refunds, profit sharing, settlement and other operational information, effectively preventing data tampering and fraud;

3. Convenient and fast: Users can authenticate their identities and confirm transactions through passwords, fingerprints or face recognition, which is more convenient and faster than traditional methods;

4. Improve trust: Digital authentication can make users more confident in the safety and reliability of charging services, and promote users' willingness to use and consume;

5. Compliance and legal risk reduction: Digital certification can better meet relevant compliance requirements and reduce legal risks involved in charging business;

6. Reduce management costs: The application of digital authentication can simplify the management process of charging business, reduce human resource costs and improve operational efficiency;

To sum up, the application of domestic encrypted digital authentication protection methods for charging and swapping systems in the electric bicycle charging and swapping business processes will improve safety, reliability and convenience, while bringing higher user experience and management efficiency.

The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims (6)

1. A domestic encrypted digital authentication protection method for a charging and swapping system, characterized by comprising the following steps: The user performs digital authentication through the terminal device, enters the system to make content requests after passing the authentication, and generates configuration information based on the content requests; Perform hash operations and digital signatures on content requests and configuration information, encrypt them and transmit them to the server, which then decrypts and verifies them. The server responds to the content request and performs processing, hashing and digitally signing the response, encrypting it and transmitting it to the user's terminal device for decryption and verification. 2. A domestic encrypted digital authentication protection method for a charging and swapping system as described in claim 1, characterized in that it also includes: obtaining a user's registration/login request and performing identity verification to determine whether the user's identity information is unique. 3. A domestic encrypted digital authentication protection method for a charging and swapping system as described in claim 2, characterized in that it also includes: configuring the user's identity information and digital certificate, authenticating and digitally signing the digital certificate, and verifying the digital signature. 4. A domestic encrypted digital authentication protection method for a charging and swapping system as described in claim 2, characterized in that it also includes: after verifying the digital certificate, further verifying the validity period, issuing authority and other information of the digital certificate. 5. A domestic encrypted digital authentication protection method for a charging and swapping system as described in claim 3, characterized in that it also includes: configuring a cache area and erasure rules for the user's identity information and digital certificate based on the identification result of the terminal device. 6. A domestic encrypted digital authentication protection method for a charging and swapping system as described in claim 3 is characterized in that it also includes: deploying part or all of the identity information, digital certificates and control logic in the charging and swapping equipment terminal, and performing localized authentication and control through the charging and swapping equipment terminal.