The invention discloses a vehicle-mounted safety diagnosis method and
system based on
authority control. The
system comprises a DoIP diagnosis
server side and a DoIP diagnosis
client side, and the DoIP diagnosis
server side and the DoIP diagnosis
client side carry out bidirectional
authentication; meanwhile, a permission
signature file is defined to manage and control diagnosis behaviors of the DoIP diagnosis
client and the DoIP diagnosis
server which pass
authentication; after the bidirectional
authentication is passed, session secret
key exchange is carried out;
encryption diagnosis is carried out through the exchanged
session key, and the diagnosis operation in the process is controlled by the diagnosis permission file. According to the invention, through a bidirectional authentication mode, the problem that all diagnosis operations are
encryption authentication operations when an illegal DoIP client is accessed is solved, and the behavior that data are maliciously tampered is prevented; through the permission
signature file, it is ensured that the diagnosis client is authorized by the OEM manufacturer, the vehicle cannot accept the connection of the unauthorized diagnosis client, and the unauthorized diagnosis behavior cannot be processed.