Internet-of-vehicles embedded type system vehicle telephone control password verifying method

Abstract

The invention relates to the technical field of information safety, in particular to an internet-of-vehicles embedded type system vehicle telephone control password verifying method. The method particularly comprises the following steps: S1, sharing a secret key and HASH in a mobile phone APP and an ARM mainboard; S2, when controlling the vehicle by using the mobile phone APP, generating the password in real time and transmitting the password to the ARM mainboard through a DTMF mode; and S3, performing verification by the ARM mainboard according to the password acquired by DTMF. A time synchronous dynamic password is adopted, the password can be acquired in real time, the password safety is high, the risk cost is reduced, and the hidden danger and the defects in the existing static password are overcome.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for verifying vehicle phone control passwords in an embedded system of the Internet of Vehicles. Background technique [0002] The digital passwords used by the user's phone to control the vehicle are all statically generated by the control password. The password mentioned in the traditional "account + password" authentication method is a static password, which is a string of static data set by the user. Once the static password is set, it will remain unchanged unless the user changes it. This also leads to the security shortcomings of static passwords, such as being easy to peek, guess, dictionary attack, brute force cracking, stealing, monitoring, replay attack, Trojan horse attack, etc. In order to improve the security of static passwords to a certain extent, users can change passwords regularly, but this leads to difficulties in the use and management o...

AI Technical Summary

Problems solved by technology

[0004] (1) Ease of use and security of static passwords are mutually exclusive, and the two cannot be balanced. Simple and easy-to-remember passwords are weak in security, and complex static passwords are highly secure but difficult to remember and maintain;

[0005] (2) Static passwords have low security and are vulnerable to various forms of security attacks;

[0006] (3) The risk and cost of static passwords is high. Once leaked, it may cause the greatest loss, and before the loss occurs, it is usually not known that the static password has been leaked

Images