Exeley Inc.

Xin, Liu

Zhiqiang, Wei

International Journal of Advanced Network, Monitoring and Controls          Volume 03, No.04, 2018 
31 
Remote ECG System Data Encryption Scheme 
 
Liu Xin 
College of Information Science and Engineering 
Ocean University of China 
Qingdao, China 
e-mail: liuxinouc@126.com 
 
Wei Zhiqiang 
College of Information Science and Engineering 
Ocean University of China 
Qingdao, China 
 
 
 
Abstract—The remote ECG communicates over the public 
Internet, and the public Internet security is not sufficient to 
ensure the information security of the remote ECG system. 
User data disclosure poses a security threat to the system. The 
ECG information security solution proposed in this paper 
adopts the method of preset multi-key-per-machine at the 
factory to avoid leakage caused by personnel factors, and uses 
the hash function to generate a secondary password for 
communication encryption during network transmission. 
Experiments show that this program can effectively resist the 
existing various attack methods and fully protect patient data 
security. 
Keywords-Remote ECG System; Multi-Key-Per-Machine 
I. INTRODUCTION 
In the remote ECG system, because the terminals are 
distributed in the vast number of families, clinics, 
community hospitals, etc., there are problems in the 
management of physical equipment. Since the ECG data is 
communicated through the Internet, there is a problem that 
the communication data packet can be intercepted and 
monitored. Due to the diversification of commercial 
channels and construction teams, there is also a risk of 
technical confidentiality leaks. 
This paper proposes a remote ECG system data 
encryption mechanism, which generates unable-to-remember 
keys by means of a random number generator, establishes a 
multi-key model, and implements the encryption storage and 
secure communication technology for periodic replacement 
of keys. 
The core design concept of this program is: human 
beings as a confidential subject is also a key factor in 
generating leaks. If every link of encryption is implemented 
by an automatic algorithm and the artificial factors are 
completely eliminated, the patient data security can still be 
effectively protected in the presence of the above security 
management vulnerability. 
II. DESIGN OF INFORMATION SECURITY SCHEME FOR 
REMOTE ECG SYSTEM 
The key protocol developed in this paper contains 
mechanisms for key generation, storage, deployment, and 
verification. This scheme takes into account various attacks 
such as brute force cracking by attackers and interception of 
network communication packets. 
A. Hardware risk control scheme 
The hardware of the device may be disassembled, and the 
data on the storage device can be taken out. If the attacker 
can obtain two devices of the same model, the content of the 
key can be known through the content comparison. 
A common method of hardware attacks is the wiretap 
method. For example, a logic analyzer records and analyzes 
the timing of signals on the memory bus of the memory 
device. Practice has proved that ordinary memory devices, 
such as Nor Flash chip, Nand Flash chip or I2C bus serial 
memory cannot resist the wiretap method attack. 
Therefore, we must use the Tamper-Resistant Security 
Module (TRSM) to store the encryption key. In theory, pure 
software encryption cannot guarantee the security of the key 
when there is a possibility that the hardware is disassembled. 
This solution uses a TRSM with a capacity of 1k bytes, 
which costs about $0.50, and the cost increase for the entire 
device is negligible. 
B. Research on Key Agreement of multi-key-per-machine 
The template is used to format your paper and style the 
text. All margins, column widths, line spaces, and text fonts 
are prescribed; please do not alter them. You may note 
peculiarities. For example, the head margin in this template 
measures proportionately more than is customary. This 
measurement and others are deliberate, using specifications 
that anticipate your paper as one part of the entire 
proceedings, and not as an independent document. Please do 
not revise any of the current designations. 
A multi-key-per-machine encryption algorithm is used to 
encrypt patient data in the terminal device memory. Patient 
data can be sent to the cloud very quickly, but we need to 
consider the device features in the off-network state. So local 
storage is still an indispensable feature. 
Considering that the terminal equipment needs to deal 
with many tasks such as write memory, waveform curve 
drawing, network communication, alarm and other 
emergency processing, the encryption algorithm should not 
adopt an overly complex algorithm. The key point of 
prevention is to be able to prevent attackers from 
implementing bulk cracking on same model devices. 
Therefore, the key issue of encryption is the key design and 
the key storage. 
DOI: 10.21307/ijanmc-2019-018
International Journal of Advanced Network, Monitoring and Controls          Volume 03, No.04, 2018 
32 
C. Key design 
User data (patient ECG data) is encrypted using a block 
cipher encryption scheme. A block cipher is also called a 
symmetry cipher. When encrypting plaintext by using a 
block cipher, firstly, the plaintext needs to be grouped, each 
group has the same length, and then each set of plaintexts is 
separately encrypted to obtain a ciphertext of the same length. 
A block cipher is characterized by the same encryption key 
as the decryption key. This scheme adopts the DES 
encryption standard, the packet length is 64 bits, and the key 
length is also 64 bits. There are 8 parity bits in the key, and 
the actual key length is 56 bits. Although DES has been 
replaced by AES, the encryption strength is sufficient for this 
application and the computational complexity is lower than 
AES. The modular multiplication that AES needs to use is 
too computationally intensive for embedded processors and 
is not suitable for encrypting real-time collected ECG data 
streams. 
D. Key security strength 
Considering the possibility that the device-side key is 
forcibly cracked by an attacker, a mechanism for periodically 
changing the key can be adopted. In general, the life of an 
electrocardiograph is 10 years. If you change the key once a 
month, you need 120 keys for a total of 960 bytes. The cloud 
server's cost of storing 1 million groups of lifetime keys is 
960M, which is still affordable. 
E. Key generation 
The composition of the key on each terminal device: 120 
random numbers are stored as a key sequence, and the total 
length is 960 bytes. The server can generate a sequence of 
random numbers with a length of 960M at a time, and then 
sequentially intercept 960 bytes for each device. The key of 
the device and the offset of the key sequence in the server-
side master key are recorded in the device's secure memory. 
The server records the product serial number of each device 
and the corresponding random number sequence index value. 
As long as the random number is guaranteed not to be copied 
by internal spies during the manufacturing process, the 
security of the key can be ensured. 
F. Key deployment 
The device should have a 1K capacity of secure 
memory(TRSM). The 120 user data encryption keys (960 
bytes long random number) of the full life are loaded into the 
machine's secure memory at one time when the machine is 
shipped from the factory. If the device is out of service, you 
can use these keys in a rolling loop. The device does not 
update the key after it leaves the factory, preventing the key 
from being intercepted by the attacker during delivery. 
After the device leaves the factory, it is no longer 
necessary to transfer the user data encryption key under any 
condition, which eliminates the possibility of the key data 
packet being intercepted. 
G. Key verification 
The main purpose of key verification is to test whether 
the encryption-related hardware and software systems are 
defective. 
After the machine is assembled, read out the 120 key 
values in the secure memory, and the MD5 value of the keys 
is calculated and sent to the cloud server along with the 
product serial number. If the server-side verification is 
successful, the key can be considered to have been deployed 
correctly. If you are worried about the collision of MD5 
values, you can pre-calculate all device keys on the server 
side in advance, and delete the key segments with MD5 
duplicates. The probability of such a problem in theory is 
extremely small. 
H. Key synchronization 
Through the above steps, we deployed the same user data 
encryption key sequence on the terminal device and the 
cloud server, but how to use the two is still a problem. 
Ideally, using timestamp as a synchronization parameter is 
the best solution. The two parties can agree that, from the 
date of leaving the factory, the natural month is used as the 
measurement granularity, and a new key is replaced every 
natural month. 
The problem is that in the actual use environment, the 
time accuracy of the device side is completely unsecured. On 
the one hand, the RTC (Real Time Clock) devices based on 
quartz crystal oscillators do not achieve such precision, and 
some devices run faster than others. On the other hand, the 
RTC backup power failure is difficult to avoid, and the 
device cannot be abandoned because the clock is inaccurate. 
Furthermore, if the user is allowed to adjust the device time, 
the attacker can take advantage of this adjustment 
opportunity to detect the subsequent ciphertext form in 
advance, which will be a significant security hole. 
In the case of networking, the server can know the 
number of key-used-times on the terminal device. When the 
server finds that the consumption speed of the terminal key is 
too slow, it is expected that the pre-stored 120 keys will not 
be used in the entire product life cycle, and the maximum-
key-used-times value can be modified by the key agreement 
protocol (change the maximum-key-used-times to be small). 
First, a temporary communication key for modifying the 
maximum-key-used-times value is negotiated using the 
Diffie-Hellman key exchange protocol. The generator 
element p of the large prime number Q and the rational 
number domain FQ is required to be pre-agreed between the 
server and the device. Q and p are written into the device's 
TRSM at the factory. The algorithm for generating the 
temporary communication key K is as follows: 
 1, The server generates a random number x, 
calculates A = px mod Q, and sends it to the terminal; 
 2, The terminal generates a random number y, 
calculates B = py mod Q, and sends it to the server; 
 3, The terminal calculates K = Ay mod Q, and the 
server calculates K = Bx mod Q, which proves that 
the two K values are equal. 
International Journal of Advanced Network, Monitoring and Controls          Volume 03, No.04, 2018 
33 
In this way, the server and the terminal share the random 
number K as a temporary communication key for modifying 
the maximum-key-used-times, and the attacker cannot detect 
the communication content. Even if the content can be 
cracked by the attacker, it is only an index value, and the key 
cannot be derived. 
The server should record the timestamp of modify the 
maximum-key-used-times value to avoid modifying it too 
frequently. Modify it 1 to 3 times a month is enough. In the 
case where the hardware can ensure the security of the key, it 
is not necessarily meaningful to change the key too 
frequently. 
III. DATA COMPRESSION UPLOAD SCHEME DESIGN 
Channel eavesdropping is a common attack method. In 
the Internet environment, it is easy to intercept 
communication packets on the network line by means of 
route bypass. The scheme adopts data compression and then 
encrypts and transmits, as shown in Fig. 1, which further 
increases the attacking difficulty of the attacker while 
reducing the load of the network. After the cracker obtains 
the message, the compressed file can be restored by the 
exhaustive cracking method; since the key used for the two 
encryptions is different, the original data obtained from the 
compressed file needs to be cracked again. A legitimate 
cloud server stores the original key from the factory. It is 
easy to calculate the compression key from the original key. 
Conversely, since the hash function is irreversible, it is not 
feasible to derive the original key from the compression key, 
and the attacker can only crack it by the exhaustive method. 
 
 
Figure 1.  Two encryption processes 
Both ciphers in Fig. 1 use the DES algorithm. The hash 
function uses the MD5 algorithm. MD5 requires a 64-byte 
input to generate a 16-byte output. In order to meet the input 
requirements of MD5, the consecutive 8 keys in the key 
queue are taken as a set of parameters. After the key expires 
and the next key is replaced, the parameter group is pushed 
back and used in turn. 
Data compression can use Shannon coding or Huffman 
coding. But today there are many mature methods that can be 
used, and there is no need to reinvent the wheel for a little 
performance boost. We use two classical algorithms to 
compress a 100M size data file. The performance is shown in 
Table 1. 
It can be seen that the data is de-duplicated and then 
compressed, and the compression ratio is the highest, which 
is beneficial to network transmission. The amount of data 
generated by the ECG machine per minute is about 0.7M, 
and the compression algorithm takes less than 2 seconds, 
which is equivalent to 1/30 processor occupancy, and the 
system can fully withstand this burden. 
TABLE I.  CLASSIC COMPRESSION ALGORITHM PERFORMANCE TEST 
Algorithm 
Compression 
Ratio 
Time Consuming 
 (Seconds) 
gzip (Compression) 36.2% 452 
dedup (Remove Duplicates) 51.5% 78 
First gzip and then dedub 26.8% 468 
First dedub and then gzip 14.6% 203 
 
IV. EXPERIMENT AND VERIFICATION 
In order to verify the effectiveness of the security system, 
the following practical application scenarios are designed to 
carry out crack attacks on the remote ECG system. 
Attack target: obtain the patient raw data. 
Experimental conditions: Provide 10 attack devices and 
an ECG signal generator to the attack team, and informed the 
key length and encryption algorithm, the attacker tried on an 
Intel E5-2660 (ten core) server, perform no more than 100 
hours of calculations on each machine to obtain its patient 
raw data. 
Experimental results: After several times of improving 
the attack plan, the attacker violently cracked the data 
records stored in the device by exhaustive cryptography, and 
successfully cracked two terminal devices within the 
specified calculation time, and the cracking time was 75 
hours and 40 hours respectively. 
In the case that the device is not disassembled, the 
communication message received by the network cannot be 
successfully cracked. 
Experiments prove that this system is not completely 
unbreakable in the case of hardware damage, but the cost of 
cracking is very expensive, and it is not worth the loss. 
V. CONCLUSION 
The ECG information security solution proposed in this 
paper adopts the method of preset multi-key-per-machine at 
the factory to avoid leakage caused by personnel factors, and 
uses the hash function to generate a secondary password for 
communication encryption during network transmission. 
Experiments show that this program can effectively resist the 
existing various attack methods and fully protect patient data 
security. 
ACKNOWLEDGMENT 
This work is supported by The Aoshan Innovation 
Project in Science and Technology of Qingdao National 
Laboratory for Marine Science and Technology 
(No.2016ASKJ07) 
 
International Journal of Advanced Network, Monitoring and Controls          Volume 03, No.04, 2018 
34 
REFERENCES 
[1] Chen, Zhuang, F. Qi, and C. Ye. "Research on Cloud Data Encryption 
Scheme Based on Chinese Cryptographic Algorithms." Journal of 
Information Security Research (2018). 
[2] Huang, Pei, et al. "A Robust and Reusable ECG-Based 
Authentication and Data Encryption Scheme for eHealth Systems." 
Global Communications Conference IEEE, 2017:1-6. 
[3] Quang, Do Vinh, T. N. K. Hoan, and I. Koo. "Energy-Efficient Data 
Encryption Scheme for Cognitive Radio Networks." IEEE Sensors 
Journal PP.99(2018):1-1. 
[4] Liang, Kaitai, et al. "An Efficient Cloud-Based Revocable Identity-
Based Proxy Re-encryption Scheme for Public Clouds Data Sharing." 
European Symposium on Research in Computer Security Springer, 
Cham, 2014:257-272. 
[5] Xu, Lei, X. Wu, and X. Zhang. "CL-PRE:a certificateless proxy re-
encryption scheme for secure data sharing with public cloud." ACM 
Symposium on Information, Computer and Communications Security 
ACM, 2012:87-88. 
[6] Gillies, Alan. "Improving the quality of information security 
management systems with ISO27000." Tqm Journal 23.4(2011):367-
376. 
[7] Publishing, It Governance. Iso27000 and Information Security: A 
Combined Glossary. It Governance Ltd, 2010. 
[8] Wang, Chi Hsiang, and D. R. Tsai. "Integrated installing ISO 9000 
and ISO 27000 management systems on an organization." 2009 
International Carnahan Conference on Security Technology IEEE, 
2009:265-267.
 


English

Remote ECG System Data Encryption Scheme

BIKS, Yuriy

RATUSHNYAK, Georgiy

RATUSHNYAK, Olga

ENERGY PERFORMANCE ASSESSMENT OF ENVELOPES FROM ORGANIC MATERIALS

ŻOŁNIERCZYK, Maciej

BARBUSIŃSKI, Krzysztof

PHYSICOCHEMICAL METHODS OF NITRATES REMOVAL FROM WASTEWATER

Wiafe, Yaw A.

Whitehead, Bill

Venables, Heather

Dassah, Edward T.

Comparing intrapartum ultrasound and clinical examination in the assessment of fetal head position in African women

Guiping, Li

Lei, Xue

International Journal of Advanced Network, Monitoring and Controls          Volume 04, No.04, 2019 
DOI: 10.21307/ijanmc-2019-074                                                         74 
On the RFID Information Query Technology Based on 
IPV9 
Li Guiping 
The School of Computer Science and Engineering 
Xi’an Technological University, Xi’an, China 
E-mail: 15693685@qq.com 
 
 
 
Xue Lei 
Shandong University of Science and Technology 
223 Daizong Street, Tai’an City 
Shandong Province, 271000 
E-mail: Shirleyxue06@163.com 
 
Abstract—Since coding format of RF label is inconsistent with 
the protocol format of the information server's network, a 
design scheme of network architecture is proposed to achieve 
the connectivity between the decimal network based on IPV9 
and the Internet network based on IPV4/IPV6. And also, two 
ways of information’s Query and connectivity based on D-ONS 
and direct routing between the decimal network is devised by 
using the expert modules. The experiment results shows that 
both the two ways can provide efficient service of RFID 
Information Query . 
Keywords-IPV9 ; RFID; Domain Transformation; 
Information Query 
I. INTRODUCTION 
With the development of radio frequency 
technology, product-related information can be quickly 
obtained by the readers if RF tags are assigned to each 
product. Recently, people have began to adopt IPV6 
and even IPV9 protocol formats for RF tag coding 
since IPV4 address space has been used up. If the 
server storing product-related information is stored in 
an IPV4 or IPV6 network, how to query RF 
information across the network should be solved. This 
paper mainly studies the RF information query process 
of interconnection between decimal network and 
Internet network and the domain name conversion rules 
obtained by decimal network query server. 
II. IPV9 
IPV9, short for decimal network and the new 
generation of Internet, is the result of China's 
independent innovation of core technologies which has 
IPV9 protocol, IPV9 addressing, digital domain name 
system and other core technologies are adopted with 
original and independent intellectual property rights. 
Full digital text is used to represent the IP address. The 
address space is larger than that of IPV4 or IPV6. The 
1st-41th level of the address space is expressed as 
binary 256 bits, while using the decimal 256 bits to 
express the 42th. 
III. RFID 
Radio Frequency Identification(RFID) is a non-
contact automatic recognition technology. It 
communicates with other object using reflected power. 
It can automatically identify target objects and obtain 
relevant data through radio frequency signals, which 
can quickly track items and exchange data. And also, 
the identify ability need no one to participate in. A 
typical RFID system consists of electronic tag, reader 
(including antenna) and application system. 
Further, electronic tags are the data carrier of RFID 
system which consists of a label antenna and a label 
chip. It can receive the reader's electromagnetic field 
modulation signal and return the response signal to 
achieve the label identification code and memory data 
read or write operations. The reader is used to receive 
host commands and send the data stored in the sensor 
back to the host by the wired or wireless way. It 
contains a controller and an antenna. If the reading 
distance is long, the antenna will stand alone. The 
terminal computer of the application system interacting 
with the RFID system transmits the work instructions 
issued by the MIS application system. It makes 
electronic tags and readers be coordination through 
middleware, processes all data collected by RFID 
system, and carries out calculation, storage and data 
transmission. The process can be described as Fig.1and 
Fig.2. 
 
Figure 1. The requery process of information based on RFID 
Timin
g 
Data 
Energy  
RFID 
antenna 
RFID electronic label Computer 
control  
network 
RFID reader  
and writer 
International Journal of Advanced Network, Monitoring and Controls          Volume 04, No.04, 2019 
75 
 
Figure 2. Electronic tags 
The operating principle of RFID system is to 
receive the radio frequency signal emitted by the reader 
when an item with an electronic tag enters the radiation 
range of the reader antenna. The passive tag sends data 
stored in the tag chip using the energy generated by the 
induced current, while active electronic tags can send 
data stored in the tag chip, actively. Generally, readers 
are equipped with middleware of certain functions. 
Hence, it can read data, decode and directly carry out 
simple data processing, then send to the application 
system. The application system judges the legitimacy 
of electronic tags according to the logic operation, and 
carries out corresponding processing and control for 
different Settings, thus realizing the basic functions of 
RFID system. 
IV. NETWORK ARCHITECTURE BASED ON IPV9 RFID 
INFORMATION QUERY TECHNOLOGY 
RFID information query technology can provide 
people with the function of inquiring information 
related to products through the RFID tag. The 
information related to RFID tags is stored on the 
information server and is generally maintained by the 
manufacturer of the product. In view of the actual use 
of the Internet, it is necessary to design a network 
architecture for interconnection between the decimal 
network and the Internet, which meets certain 
conditions. On this basis, RFID tag information query 
service is implemented. The overall network 
architecture design scheme is as follows. 
A. Overall design of network architecture 
The architecture of RFID tag information query 
service on Internet is based on IPV4 and IPV6 
protocols. Routing adopts IPV4 and IPV6 protocols, 
and resource positioning is completed by SNS and 
PSNS. The architecture of electronic tag information 
location query service based on decimal network is a 
network architecture based on IPV9 protocol, including 
the following two ways. 
(1) Using the routing to locate the information 
server directly. The route uses the IPV9 protocol 
without the DNS resolver. 
(2) Adopting the parsing service of the application 
layer with U-code Resolution Server. DONS uses host 
domain name resolution to provide IPV4, IPV6 and 
IPV9 addresses, while using IPV4, IPV6 and IPV9 
protocols as routing protocols .Resource positioning is 
done by D-ONS. 
The network architecture of RFID tag information 
query service mainly includes the decimal network 
information query service technology system and the 
Internet information query service technology system. 
Specifically, the decimal network architecture includes 
middleware, information server, D-ONS server, DDNS 
and IPV9 direct router. Internet architecture includes 
SNS server, PSNS server, information server, .cn root 
DNS server, DDNS server and.cn root. DNS server 
through the domain name resolution forwarding digital 
domain name and English domain name connectivity. 
B. The key module of network architecture -- expert 
module 
The expert module is the middleware used between 
the decimal network and the Internet to realize the 
interconnection between the two, and the data 
exchange format between the two is XML. It includes 
the following interfaces. 
 RF information query of Decimal network and 
architecture of discovery technology input 
product and service digital identifiers to query 
the Internet RF information, through the expert 
module, discovery technology architecture 
request to return the product and service 
specific information storage address or URI. 
 RF information query of Internet and 
architecture of discovery technology input 
product and service digital identifiers to query 
the Decimal network RF information, through 
the expert module, discovery technology 
architecture request to return the product and 
service specific information storage address or 
URI. 
 RF information query of Decimal network and 
architecture of discovery technology input 
product and service digital identifiers to query 
the Internet RF information, through the expert 
module, discovery technology architecture 
request to return the product and service 
specific information. 
International Journal of Advanced Network, Monitoring and Controls          Volume 04, No.04, 2019 
76 
 RF information query of Internet and 
architecture of discovery technology input 
product and service digital identifiers to query 
the Decimal network RF information, through 
the expert module, discovery technology 
architecture request to return the product and 
service specific information. 
V. RESEARCH ON INFORMATION QUERY PROCESS 
Based on the above network architecture, the 
implementation of RFID tag information query service 
based on IPV9 can be designed in two ways: D-ONS 
based decimal network and Internet network 
information query and direct routing mode of exchange 
visits between decimal network information query 
service system and Internet information query service 
system. 
A. Exchange query process Between D-ons-based 
decimal network and Internet network information 
query service system  
When the related product information is stored in 
the Internet information server and label coding format 
is using able format, the decimal network based on D-
ONS accessing the information query process of 
Internet mainly involves the following several key 
modules: decimal network query server, decimal 
network, expert module, information server 
middleware, the SNS and PSNS server. The access 
relationship between these modules is shown in figure 
3. 
 
Decimal 
network
label
readers
Require server Expert modul
middleware
SNS server
PSNS server
Information 
server
a)
b)
c)
d)
i)
e)
j)
f)
g)
h)
 identifiers of 
product and 
service
Domain of product 
and server
 standard 
identifiers and 
identifiers of 
product and 
service
Domain of 
product and 
server
NAPTR 
resource 
record
Address of 
information 
server
conneccti
on
Internet
Identifiers of 
product and 
service
 
Figure 3. The process of accessing the Internet on a D-ONS- based decimal network. 
 
1) The access process can be described as follows 
a) Using RFID readers to read IPV9 identifiers 
and product and service identifiers from electronic tags. 
b) Submitting the read identifiers and product 
and service identifiers to the query server in the 
decimal network. 
c) Calling decimal network query server and 
Internet interface expert modules to access the Internet. 
d) The Internet interface of the expert module 
accesses the middleware of the Internet architecture 
through standard identifiers and identifiers of product 
and service . 
e) The service middleware converts the standard 
identifier to the domain name format and sends it to 
the SNS server to request the resolution service. 
f) The SNS server returns the conversion rules of 
PSID domain name by the form of regular expressions 
to the service middleware. 
g) Service middleware issues query request to 
PSNS server based on PSID domain name.  
International Journal of Advanced Network, Monitoring and Controls          Volume 04, No.04, 2019 
77 
h) PSNS returns the NAPTR record containing 
the product and service information service or PSDS 
address. 
i) The service middleware returns the results to 
the expert module, whose decimal network interface 
returns service of the product and information  or 
NAPTR records of PSDS address to the query server. 
j) Querying the server request and finally getting 
the product information returned by the information 
server. 
When product-related information is stored in the 
information server of the decimal network, and the 
label encoding format is IPV4 or IPV6 format, the D-
ONS based decimal network needs to be accessed 
through the Internet network. The access process 
involves the key modules: Internet query server, expert 
module, D-ons server, information server. The access 
process is shown in figure 4. 
 
decimal 
network
D-ONS resolve 
server
D-ONS server
Information 
server
Domain 
resolve 
server
Expert modul
label
reader
Requery server
a)
b)
c)
f)
d)
e)
g)
tandard id code 
and domain 
name onversion
Network distributed 
query control
product and service 
domain name
Address of 
information server
identifiers of 
product and 
service.
 identifiers of 
product and 
service.
Internet
 
Figure 4. The process of Internet accessing to a decimal network based on the d-ons protocol. 
2) The access process can be described as follows 
a) Using Rf readers to read product and service 
identifiers from electronic tags encoded in IPV4 and 
IPV6 formats. 
b) Submitting the identifier and identifiers of 
product and service to the query server. 
c) Calling by the query server the expert 
module's decimal network interface between the 
Internet network and the decimal network. 
d) The decimal network interface of the expert 
module sends a request to the D-ONS server of the 
decimal network architecture to inquire the 
information of the server domain name where the 
product information is stored through the identifier and 
product and service. 
e) The D-ONS server receives the request and 
returns information of the product and service domain 
name.  
f) The information server of decimal network  
queries the Internet server for product information. 
g) The query server returns product information. 
B. Directly routing the decimal network information 
query service and the Internet information query 
service system exchange query process  
The process of mutual visits between the system of 
decimal network information query service with direct 
routing and the Internet information query service 
system are shown in figure 5 and figure 6. It involve 
the query server, expert module, middleware, 
information server, SNS server and PSNS server.  
International Journal of Advanced Network, Monitoring and Controls          Volume 04, No.04, 2019 
78 
The interconnection of IPV4, IPV6 and IPV9 can 
realize the mutual visits between IPV4, IPV6 and IPV9 
through protocol conversion. Specifically, a protocol 
conversion server needs to be set up, and all data 
packets are converted into specified protocols to satisfy 
the data communication between different protocols. 
 
Decimal 
network
label
reader
Requery 
server
Internet
middleware
SNS server
PSNS server
Information 
server
a)
b)
c)
j)
d)
i)
e)
k)
f)
g)
h)
identifier of 
product and 
service
identifier of product 
and service
Domain of product and 
server
NAPTR
resource 
record
Address of 
information 
server
connection
Expert modul
Protocl 
transerformation
IPV9
IPV4/
IPV6
 
 
Figure 5. The accessing process of Direct routing of decimal network to the Internet  
1) The process of searching the product 
information stored in the Internet and encoding 
format used IPV9 can be described as follows. 
RF reader reads IPV9 identifier and the identifier of 
product and service from electronic tag. 
Submitting identifiers of product and service to the 
query server on a decimal network. 
a) The query server calls the expert module's 
Internet interface. 
b) The Internet interface of the expert module 
accesses the middleware of the Internet architecture 
through identifiers of product and service. 
c) Internet middleware delivers product and 
service domain names to the SNS server. 
d) SNS server returns the middle results to the 
middleware . 
e) The middleware returns the results to the 
expert module. 
f) The expert module requests product 
information from the information server according to 
the address information inquired. 
g) The expert module returns the product 
information to the query server of decimal network  to 
complete the process of product information query. 
In the direct routing mode, if the product's RF tags 
are encoded in IPV4 and IPV6 protocols, and the 
product-related information is stored in the server of 
the decimal network, the query process needs to 
involve IPV9 router, information server, expert module 
and query server. 
 
International Journal of Advanced Network, Monitoring and Controls          Volume 04, No.04, 2019 
79 
Decimal 
network
IPV9 direct 
routing server
Information server
Internet
label
reader
Requery server
a)
b)
c)f)
e)identifier of 
product and 
service
Transformation 
ruler of domain 
of product and 
server
identifier 
of product 
and service
Non-decimal 
product identifier
Expert modul
Protocol 
transformation
h)
IPV9
IPV4/
IPV6
 
Figure 6. The access process from Internet to decimal network under the direct routing 
 
2) The access process can be described as follows. 
a) RF readers read IPV4 or IPV6 identifiers and 
identifiers of product and service from electronic tags. 
b) Submitting identifiers of product and service 
to the query server over the Internet network. 
c) The query server calls the expert module's 
decimal network interface. 
d) The expert module of decimal network 
interface accesses the IPV9 router for the decimal 
network architecture through identifiers of product and 
service . 
e) The PV9 router converts the product and 
service digital identifiers to the IP address of the 
product information server. 
f) The IPV9 router accesses the information 
server and requests product information. 
g) The IPV9 router returns product information 
to the Internet user via the expert module. 
In the above process, the expert module between the 
two network systems realizes the translation and 
conversion of the data formats of the two systems. The 
protocol conversion module can translate the IP address, 
message and header. 
VI. CONCLUSION 
This paper proposes two kinds of information query 
exchange services between decimal network and 
Internet to solve the problem that the encoding format 
of radio frequency tag is not uniform with the network 
protocol format of product information server. 
Experimental results show that both methods can 
provide efficient rf information query service. 
 
REFERENCES 
[1] SJ/T  CCCCC-CCCC Digital identity format specification for 
information processing products and services.  
[2] SJ/T DDDDD-DDDD Rf-based domain name specification for 
products and services 
[3] IETF  RFC 1034 Domain names-concepts and facilities 
[4] IETF RFC 1035 Domain names-implementation and specification 
[5] IETF  RFC 1347 TCP and UDP with Bigger Addresses 
[6] IETF  RFC 1561 ISO Use of ISO CLNP in TUBA Environments 
[7] IETF RFC 1606 A Historical Perspective On The Usage Of IP 
Version 9 
[8] IETF  RFC 1607 A VIEW FROM THE 21ST CENTURY 
[9] IETF  RFC 1700 - Assigned Numbers） 
 
 


On the RFID Information Query Technology Based on IPV9

Huai, Sun

Zhang, Liu

Comparative Research on Key Technologies from IPv4, IPv6 to IPV9

Płaczkiewicz, Jagoda

AVOIDANCE OF MECHANISMS OF INNATE IMMUNE RESPONSE BY NEISSERIA GONORRHOEAE

ADAMSKI, MARIUSZ

PIETR, STANISLAW J.

Biodiversity of Bacteria Associated with Eight Pleurotus ostreatus (Fr.) P. Kumm. Strains from Poland, Japan and the USA

HANISZEWSKI, Tomasz

MICHTA, Agata

PRELIMINARY STUDIES OF VERTICAL ACCELERATION OF A PASSENGER CAR PASSING THROUGH THE SPEED BUMP FOR VARIOUS DRIVING SPEEDS

Myszkowski, Marcin

The usefulness of respiratory ultrasound assessment for modifying the physiotherapeutic algorithm in children after congenital heart defect surgeries

Not a member yet