Internet of vehicles access method and device

Abstract

The invention relates to an Internet of Vehicles access method and device. The method comprises the following steps: sending an end server authentication request to a cloud server based on user information of a target user, so that the cloud server interacts with a target vehicle based on the end server authentication request to obtain a vehicle service authentication request and a first session key returned by the target vehicle; and receiving a server side authentication request sent by the cloud server based on the vehicle service authentication request, and generating a second session key according to the server side authentication request. According to the method, the legality and authenticity of the target user, the cloud server and the target vehicle participating in communication are ensured through the strict authentication request and interaction process. The reliability of Internet of Vehicles communication is improved, and communication faults and safety risks caused by illegal access or false information are reduced.

Description

Technical Field

[0001] The present application relates to the field of vehicle networking security technology, and in particular to a vehicle networking access method and device. Background Art

[0002] With the rapid development of Internet of Things technology, the Internet of Vehicles, as a key area, is profoundly changing the way of transportation. By closely connecting communication entities such as vehicles, roadside units and cloud servers, the Internet of Vehicles enables information interaction and sharing between vehicles and vehicles, and between vehicles and infrastructure, creating huge opportunities for improving traffic efficiency, enhancing driving safety and providing personalized services.

[0003] However, the current Internet of Vehicles has many serious security issues when users access vehicles through cloud servers. For example, data eavesdropping may lead to the leakage of users' private information (such as driving trajectory, driving habits, etc.), posing a great threat to users' personal privacy. At the same time, data tampering may cause the vehicle to receive incorrect instructions, leading to the loss of vehicle control and causing serious safety accidents. Summary of the invention

[0004] Based on this, it is necessary to provide a method and device for accessing the Internet of Vehicles that can improve security in response to the above technical problems.

[0005] In a first aspect, the present application provides a method for accessing an Internet of Vehicles, the method comprising:

[0006] Sending a terminal service authentication request to the cloud server based on the user information of the target user, so that the cloud server interacts with the target vehicle based on the terminal service authentication request, and obtains the vehicle service authentication request and the first session key returned by the target vehicle;

[0007] Receiving a service-side authentication request sent by the cloud server based on the vehicle-side authentication request, and generating a second session key according to the service-side authentication request;

[0008] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0009] In one embodiment, the user information includes a user identity and a user password, and sending a terminal service authentication request to the cloud server based on the user information of the target user includes:

[0010] Performing identity authentication processing on the user identification and the user password to obtain a first authentication result;

[0011] When the first verification result meets the preset condition, determining a first random number;

[0012] Determine a client-server authentication request based on the first random number, the user identity identifier, and the user password;

[0013] Send a client authentication request to the cloud server.

[0014] In one of the embodiments, the terminal service authentication request includes at least one of a user identifier, a first calculation result, a second calculation result, a third calculation result, a fourth calculation result, a user signature result, and a first timestamp; and determining the terminal service authentication request according to the first random number, the user identifier, and the user password includes:

[0015] Performing an XOR operation on the first random number and the user identity to obtain a first calculation result;

[0016] Performing encryption and exponential operation on the user password and the first random number to obtain a second calculation result;

[0017] Determine a third calculation result according to the first operation function, the first random number and the user identity;

[0018] Performing hash operation processing and logical operation processing on the user password and the first random number to obtain a fourth operation result;

[0019] Perform digital signature operation on the acquired user private key to obtain the user signature result.

[0020] In one embodiment, the method further comprises:

[0021] Obtain the target user's registration information and send the registration information to the cloud server; so that the cloud server generates a smart card based on the selected security parameters and registration information to complete the registration of the target user.

[0022] In a second aspect, the present application also provides a method for accessing an Internet of Vehicles, the method comprising:

[0023] Get the service authentication request sent by the cloud server; the service authentication request is generated by the cloud server based on the client service authentication request; the client service authentication request is sent to the cloud server by the user based on user information;

[0024] Generate a vehicle-service authentication request and a first session key according to the vehicle-service authentication request, and send the vehicle-service authentication request to the cloud server, so that the cloud server sends a service-side authentication request to the user end based on the vehicle-service authentication request, and the user end generates a second session key according to the service-side authentication request;

[0025] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0026] In one embodiment, the service vehicle authentication request includes a second timestamp; generating a vehicle service authentication request and a first session key according to the service vehicle authentication request includes:

[0027] Verifying the second timestamp and the first equation acquired in advance respectively to obtain a first time verification result and a first equation verification result;

[0028] When both the first time verification result and the first equation verification result indicate that the verification is passed, determining a second random number;

[0029] Determine a vehicle service authentication request according to the second random number and the pre-acquired first key;

[0030] A first session key is determined according to the service vehicle authentication request, the second random number and the first key.

[0031] In one embodiment, the vehicle service authentication request includes a message encryption result, a first signature result, a vehicle signature result, a second signature result, and a third timestamp; determining the vehicle service authentication request according to the second random number and the pre-acquired first key includes:

[0032] Performing function operations on the pre-generated temporary key, the first key, and the second random number respectively to obtain an intermediate result;

[0033] Perform XOR operation on the intermediate result and the hash value to obtain the message encryption result;

[0034] Performing power operation on the second random number and the generator to obtain a vehicle signature result;

[0035] Hash operations are performed on the second random number, the first key and the vehicle signature result respectively to obtain a second signature result.

[0036] In one embodiment, the method further comprises:

[0037] Obtain vehicle information and send the vehicle information to a cloud server so that the cloud server sends a first key obtained based on the vehicle information to a target vehicle to complete the registration of the target vehicle; the first key is obtained based on a hash operation on the vehicle information and a second key pre-set in the cloud server.

[0038] In a third aspect, an embodiment of the present application further provides a method for accessing an Internet of Vehicles, the method comprising:

[0039] Obtain the client-server authentication request sent by the user end; the client-server authentication request is generated by the user end based on the user information of the target user;

[0040] Interact with the target vehicle according to the end-service authentication request, and obtain the vehicle-service authentication request and the first session key returned by the target vehicle;

[0041] Sending a server-side authentication request generated based on the vehicle-side authentication request to the user end, so that the user end generates a second session key according to the server-side authentication request;

[0042] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0043] In one embodiment, the method further comprises:

[0044] Determine a master key, a secret value, a system parameter, a cloud server identity and a second key; the system parameter includes at least one of a one-way hash function, a large prime number, a large prime factor, a class element and a real number to complete the initialization of the cloud server.

[0045] In a fourth aspect, the present application further provides a vehicle networking access device, the device comprising:

[0046] The terminal service request sending module is used to send a terminal service authentication request to the cloud server based on the user information of the target user, so that the cloud server interacts with the target vehicle based on the terminal service authentication request to obtain the vehicle service authentication request and the first session key returned by the target vehicle;

[0047] A server request receiving module, used to receive a server authentication request sent by the cloud server based on the vehicle server authentication request, and generate a second session key according to the server authentication request;

[0048] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0049] In a fifth aspect, the present application also provides a vehicle networking access device, the device comprising:

[0050] The service request acquisition module is used to obtain the service authentication request sent by the cloud server; the service authentication request is generated by the cloud server based on the client service authentication request; the client service authentication request is sent to the cloud server by the user end based on user information;

[0051] A request key generation module, used to generate a vehicle-service authentication request and a first session key according to the service-vehicle authentication request, and send the vehicle-service authentication request to the cloud server, so that the cloud server sends a service-side authentication request to the user end based on the vehicle-service authentication request, and the user end generates a second session key according to the service-side authentication request;

[0052] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0053] In a sixth aspect, the present application further provides a vehicle networking access device, the device comprising:

[0054] The terminal service request acquisition module is used to obtain the terminal service authentication request sent by the user terminal; the terminal service authentication request is generated by the user terminal based on the user information of the target user;

[0055] An interaction module, used to interact with the target vehicle according to the end-service authentication request, and obtain the vehicle-service authentication request and the first session key returned by the target vehicle;

[0056] A server request sending module, used to send a server authentication request generated based on the vehicle server authentication request to the user end, so that the user end generates a second session key according to the server authentication request;

[0057] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0058] In a seventh aspect, the present application further provides a user terminal, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the method of the first aspect when executing the computer program.

[0059] In an eighth aspect, the present application further provides a vehicle, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above-mentioned second aspect method when executing the computer program.

[0060] In a ninth aspect, the present application further provides a cloud server comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the method in the third aspect when executing the computer program.

[0061] In a tenth aspect, the present application also provides a computer-readable storage medium having a computer program stored thereon, which implements the steps of the above method when executed by a processor.

[0062] In an eleventh aspect, the present application also provides a computer program product, comprising a computer program, which implements the steps of the above method when executed by a processor.

[0063] The above-mentioned Internet of Vehicles access method and device sends an end-service authentication request to the cloud server based on the user information of the target user, so that the cloud server interacts with the target vehicle based on the end-service authentication request, and obtains the vehicle-service authentication request and the first session key returned by the target vehicle; receives the service-end authentication request sent by the cloud server based on the vehicle-service authentication request, and generates a second session key according to the service-end authentication request. This application ensures the legitimacy and authenticity of the target user, cloud server and target vehicle participating in the communication through strict authentication requests and interaction processes. This helps to improve the reliability of Internet of Vehicles communications and reduce communication failures and security risks caused by illegal access or false information. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] Figure 1 This is an application environment diagram of a vehicle networking access method in an embodiment;

[0065] Figure 2 A schematic diagram of a flow chart of a method for accessing an Internet of Vehicles (IoV) applied to a user terminal in an embodiment;

[0066] Figure 3 A schematic diagram of a process of sending a client service authentication request to a cloud server in one embodiment;

[0067] Figure 4 A schematic diagram of a flow chart of a method for connecting to a vehicle network applied to a vehicle in an embodiment;

[0068] Figure 5 A schematic diagram of a process of generating a vehicle-service authentication request and a first session key in one embodiment;

[0069] Figure 6 A schematic diagram of a flow chart of a method for accessing an Internet of Vehicles to a cloud server in one embodiment;

[0070] Figure 7 is a structural block diagram of a vehicle networking access device applied to a user end in one embodiment;

[0071] Figure 8 is a structural block diagram of a vehicle networking access device applied to a vehicle in one embodiment;

[0072] Fig. 9 is a structural block diagram of a vehicle networking access device applied to a cloud server in one embodiment;

[0073] Fig.10 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0074] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0075] First of all, before specifically introducing the technical solution of the embodiments of the present application, the technical background based on the embodiments of the present application is introduced.

[0076] With the rapid development of Internet of Things technology, the Internet of Vehicles, as an important component of it, is gradually becoming the core of the intelligent transportation system. By integrating multiple communication entities such as vehicles, roadside units, and cloud servers, the Internet of Vehicles realizes the exchange and sharing of information between vehicles and between vehicles and infrastructure, bringing great potential for improving traffic efficiency, ensuring driving safety, and providing personalized services. However, with the widespread popularization of Internet of Vehicles applications, its security issues have become increasingly prominent and have become a key factor restricting its further development.

[0077] In the Internet of Vehicles system, users, vehicles and cloud servers are the three core communication entities. As the initiator and beneficiary of the service, users need to securely access vehicles through cloud servers to achieve functions such as remote control, status query, and route planning. As data collectors and executors, vehicles are responsible for real-time transmission of vehicle status information and responding to control instructions from users or cloud servers. As a central hub, cloud servers are responsible for processing user requests, managing vehicle data, and providing various services. However, users face many security challenges when accessing vehicles through cloud servers. First, since the Internet of Vehicles system usually uses wireless communication, the data transmission process is vulnerable to network attacks, such as data eavesdropping and tampering, resulting in user privacy leakage and loss of vehicle control. Secondly, vehicle data in the Internet of Vehicles system often contains sensitive information of users, such as driving trajectory, driving habits, etc. Once this information is leaked, it will have a serious impact on the user's personal privacy.

[0078] Based on this, the present application provides a method and device for accessing the Internet of Vehicles, aiming to solve the above-mentioned technical problems.

[0079] The vehicle networking access method provided in the embodiment of the present application can be applied to Figure 1In the application environment shown. Among them, the user terminal 102 communicates with the cloud server 104 through the network, and the cloud server 104 communicates with the vehicle 106 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the cloud server 104, or it can be placed on the cloud or other network servers. The user terminal sends an end-service authentication request to the cloud server based on the user information of the target user, so that the cloud server interacts with the target vehicle based on the end-service authentication request, and obtains the vehicle-service authentication request and the first session key returned by the target vehicle; receives the service-end authentication request sent by the cloud server based on the vehicle-service authentication request, and generates a second session key according to the service-end authentication request. Among them, the user terminal 102 can be but is not limited to various personal computers, laptops, smart phones and tablets. The cloud server 104 can be implemented with an independent server or a server cluster consisting of multiple servers.

[0080] In an exemplary embodiment, Figure 2 As shown, the present application provides a method for accessing an Internet of Vehicles, the method comprising the following steps:

[0081] S201, sending a terminal service authentication request to the cloud server based on the user information of the target user, so that the cloud server interacts with the target vehicle based on the terminal service authentication request, and obtains the vehicle service authentication request and the first session key returned by the target vehicle.

[0082] Among them, the target user refers to the individual or entity who uses the Internet of Vehicles service and has specific user information, such as user identity and user password.

[0083] The client-server authentication request is an authentication request sent by the client to the cloud server to start the Internet of Vehicles access process. The request contains user information so that the cloud server can verify the user's identity.

[0084] The vehicle-service authentication request refers to the authentication request sent by the target vehicle to the cloud server as a response to the end-service authentication request. The first session key is the key used to encrypt the data transmitted between the target vehicle and the cloud server to ensure the secure transmission of data between the vehicle and the cloud server.

[0085] In the embodiment of the present application, the user end encrypts the user information of the target user through a secure network connection and sends it to the cloud server. After the cloud server receives the end-service authentication request, it first decrypts and verifies the user information. If the verification is successful, the cloud server establishes a connection with the target vehicle and sends an authentication request. After receiving the request, the target vehicle performs corresponding verification and processing, and returns the vehicle-service authentication request and the first session key to the cloud server.

[0086] Another implementation method: The user end can use a digital certificate or other methods to sign and encrypt the user information, and then send it to the cloud server. The cloud server verifies the validity of the digital certificate to confirm the identity of the user and interact with the target vehicle. The target vehicle can use a device such as a hardware security module to protect its authentication process and generate the first session key.

[0087] S202, receiving a server-side authentication request sent by the cloud server based on the vehicle-server authentication request, and generating a second session key according to the server-side authentication request.

[0088] Among them, the service-side authentication request refers to the authentication request sent by the cloud server to the user side as a further processing of the vehicle-side authentication request.

[0089] The second session key refers to the key used to encrypt data transmitted between the user end and the cloud server, ensuring the secure transmission of data between the user and the cloud server.

[0090] In the embodiment of the present application, after the user receives the server authentication request sent by the cloud server, the second session key is generated according to the information in the request and the local parameters of the user. For example, a specific encryption algorithm and key generation function can be used to generate the second session key in combination with the user information and the parameters in the server authentication request.

[0091] Another implementation method: The client can interact with the cloud server multiple times to generate the second session key through a challenge-response mechanism. The cloud server sends a random challenge to the client, and the client calculates based on the challenge and local parameters and sends the response back to the cloud server. After multiple interactions, both parties determine the second session key.

[0092] The above-mentioned Internet of Vehicles access method and device sends an end-service authentication request to the cloud server based on the user information of the target user, so that the cloud server interacts with the target vehicle based on the end-service authentication request, and obtains the vehicle-service authentication request and the first session key returned by the target vehicle; receives the service-end authentication request sent by the cloud server based on the vehicle-service authentication request, and generates a second session key according to the service-end authentication request. This application ensures the legitimacy and authenticity of the target user, cloud server and target vehicle participating in the communication through strict authentication requests and interaction processes. This helps to improve the reliability of Internet of Vehicles communications and reduce communication failures and security risks caused by illegal access or false information.

[0093] In an exemplary embodiment, based on the above embodiment, see Figure 3 The user information of the embodiment of the present application includes a user identity and a user password. The embodiment of the present application relates to a process of sending a terminal service authentication request to a cloud server based on the user information of a target user, including the following steps:

[0094] S301, performing identity authentication processing on the user identification and the user password to obtain a first authentication result.

[0095] The first verification result refers to the result obtained after identity verification processing of the user identification and the user password, which is used to determine whether the user identity is legal.

[0096] In the embodiment of the present application, a hash algorithm may be used to process the user identity and the user password, and then compared with the hash value stored in the database to obtain a first verification result. If the two match, the verification is successful.

[0097] Another implementation method: identity authentication can be performed using a digital certificate. The user terminal provides a digital certificate, and the cloud server verifies the validity and authenticity of the digital certificate, thereby determining the legitimacy of the user identity and user password.

[0098] S302: When the first verification result meets a preset condition, determine a first random number.

[0099] The first random number refers to a number randomly generated to increase security and is used in the subsequent authentication request generation process.

[0100] In the embodiment of the present application, when the first verification result meets the preset condition, a random number generator is used to generate a first random number within a specific range. For example, a pseudo-random number generator can be used to generate an integer random number.

[0101] Another implementation method: a random number is selected from a pre-prepared random number list as the first random number. After verification, the random number list can be updated according to certain rules to increase security.

[0102] S303: Determine a terminal service authentication request according to the first random number, the user identity identifier and the user password, and send the terminal service authentication request to the cloud server.

[0103] In the embodiment of the present application, the first random number, the user identity and the user password are combined and encrypted using an encryption algorithm, and then determined as a terminal service authentication request and sent to the cloud server. For example, a symmetric encryption algorithm can be used to encrypt the combined information.

[0104] Another implementation method: When determining the client server authentication request, in addition to the first random number, user identity and user password, some additional information may be added, such as a timestamp, device identification, etc. Then, an asymmetric encryption algorithm is used to encrypt this information and send it to the cloud server.

[0105] In the embodiment of the present application, by authenticating the user identity and user password and generating an authentication request in combination with a random number, it is possible to effectively prevent illegal users from accessing the Internet of Vehicles and improve the security of the system.

[0106] In an exemplary embodiment, based on the above embodiments, the end-service authentication request of the embodiment of the present application includes at least one of a user identifier, a first calculation result, a second calculation result, a third calculation result, a fourth calculation result, a user signature result and a first timestamp; according to the first random number, the user identity identifier and the user password, the end-service authentication request is determined, including the following steps: performing an XOR operation on the first random number and the user identity identifier to obtain a first calculation result; encrypting and power-operating the user password and the first random number to obtain a second calculation result; determining the third calculation result according to the first operation function, the first random number and the user identity identifier; performing hash operation and logical operation on the user password and the first random number to obtain a fourth operation result; performing a digital signature operation on the obtained user private key to obtain a user signature result.

[0107] In the embodiment of the present application, the user terminal Place the smart card in a recognized terminal and enter the ID , Password ,Smart Card Computing , verify the equation If the equation is true, the smart card selects a random number. , GF(P), calculate , , , , , , , , ,in is the current timestamp, user Generate signature information The end service message user identifier, the first calculation result, the second calculation result, the third calculation result, the fourth calculation result, the user signature result and the first timestamp are: Sent to the cloud server via a public channel .

[0108] The embodiment of the present application ensures the authenticity and integrity of the end-to-end authentication request through a variety of complex calculations and digital signature processing, prevents illegal users from forging authentication requests, and improves the security of the Internet of Vehicles system.

[0109] In an exemplary embodiment, based on the above embodiment, the method of the embodiment of the present application also includes the following steps: obtaining the registration information of the target user and sending the registration information to the cloud server; so that the cloud server generates a smart card based on the selected security parameters and registration information to complete the registration of the target user.

[0110] Among them, registration information refers to the information provided by the target user for registration in the Internet of Vehicles system, which may include user identity, user password, contact information, etc.

[0111] Security parameters refer to the parameters selected by the cloud server to ensure registration and communication security, such as random numbers and encryption keys.

[0112] A smart card is a device generated by a cloud server and issued to a target user for identity authentication and secure communication, which may contain information such as encryption keys and digital certificates.

[0113] User side To cloud server To register, the specific steps are as follows:

[0114] User side Select an identity and password ,calculate ,user Register Request Send to via public channel .

[0115] Registration request received Then, select a random number ,calculate , Will Store the parameters in the database Deposit a smart card and distribute it securely to users.

[0116] The embodiment of the present application selects security parameters and generates smart cards through a cloud server, which can provide a higher level of security for target users. Smart cards can store sensitive information such as encryption keys and digital certificates to prevent such information from being illegally obtained. At the same time, the use of smart cards can prevent security threats such as identity forgery and replay attacks.

[0117] In one embodiment, Figure 4 As shown, the present application also provides a method for accessing an Internet of Vehicles, the method comprising:

[0118] S401, obtaining a service vehicle authentication request sent by a cloud server; the service vehicle authentication request is generated by the cloud server based on the terminal service authentication request.

[0119] Among them, the client-server authentication request is sent by the user to the cloud server based on user information.

[0120] In the embodiment of the present application, the target vehicle can receive the service vehicle authentication request sent by the cloud server through the Internet of Vehicles communication module. The communication module can be a wireless communication module, such as 4G, 5G, etc. After the vehicle receives the request, it stores it in the local memory and waits for further processing.

[0121] Another implementation method: The target vehicle can be equipped with a dedicated authentication receiving module, which continuously monitors the communication channel in the Internet of Vehicles, and immediately receives and processes a service vehicle authentication request sent by the cloud server.

[0122] S402, generate a vehicle-service authentication request and a first session key according to the vehicle-service authentication request, and send the vehicle-service authentication request to the cloud server, so that the cloud server sends a service-side authentication request to the user end based on the vehicle-service authentication request, and enables the user end to generate a second session key according to the service-side authentication request.

[0123] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0124] In the embodiment of the present application, the target vehicle generates a vehicle-service authentication request and a first session key using a specific key generation algorithm based on the information in the service-vehicle authentication request. For example, a key generation algorithm based on elliptic curve cryptography can be used to combine the vehicle's identity information and the parameters in the service-vehicle authentication request to generate a vehicle-service authentication request and a first session key. Then, the target vehicle sends the vehicle-service authentication request back to the cloud server through the Internet of Vehicles communication module.

[0125] Another implementation method: The target vehicle can use a hardware security module to generate a vehicle-service authentication request and a first session key. The hardware security module has higher security and can prevent the key from being stolen or tampered with. After generation, the vehicle sends the vehicle-service authentication request back to the cloud server and stores the first session key in a local secure storage area for subsequent data encryption transmission with the cloud server.

[0126] The embodiment of the present application uses the first session key and the second session key to encrypt the data between the target vehicle and the cloud server, and between the user terminal and the cloud server, respectively, thereby effectively preventing the data from being stolen or tampered with during transmission, and improving the security of the Internet of Vehicles data.

[0127] In an exemplary embodiment, based on the above embodiment, see Figure 5The service vehicle authentication request of the embodiment of the present application includes a second timestamp; generating a vehicle service authentication request and a first session key according to the service vehicle authentication request includes the following steps:

[0128] S501, respectively verifying the second timestamp and the pre-acquired first equation to obtain a first time verification result and a first equation verification result; when both the first time verification result and the first equation verification result indicate that the verification is passed, determining a second random number.

[0129] Among them, the second timestamp refers to the time identifier in the service vehicle authentication request, which is used to verify the timeliness of the request. The first equation refers to a pre-set equation for verification, which may involve specific mathematical operations and parameters. The first time verification result refers to the result obtained after verifying the second timestamp, to determine whether the time is within a reasonable range. The first equation verification result refers to the result obtained after verifying the first equation, to determine whether the equation is valid. The second random number refers to the random number determined after the verification is passed, which is used to generate the service vehicle authentication request and the first session key. The first key refers to a pre-acquired key for encryption and authentication.

[0130] In the embodiment of the present application, after receiving the service vehicle authentication request, the target vehicle extracts the second timestamp therein. The current time is compared with the second timestamp. If the time difference is within the preset time range, the first time verification result is verification passed. For the verification of the first equation, the relevant parameters in the service vehicle authentication request can be substituted into the first equation for calculation. If the left and right sides of the equation are equal, the first equation verification result is verification passed. In the case of verification passed, a random number generator is used to generate a second random number.

[0131] Another implementation method: The target vehicle can set a time window, and when receiving the service vehicle authentication request, determine whether the second timestamp is within the time window. If so, the first time verification result is verification passed. For the verification of the first equation, a hash function can be used to process the parameters in the service vehicle authentication request, and then the processing result is substituted into the first equation for verification. If the verification passes, a random number is selected from a preset random number list as the second random number.

[0132] S502: Determine a vehicle service authentication request according to a second random number and a pre-acquired first key.

[0133] In the embodiment of the present application, the second random number is combined with the first key, for example, by concatenation or specific mathematical operation. The combined result is then encrypted to generate a vehicle service authentication request. The encryption algorithm may be a symmetric encryption algorithm or an asymmetric encryption algorithm.

[0134] Another implementation method: the first key may be transformed using the second random number, such as performing an XOR operation or a multiplication operation. The transformed first key is then combined with information such as the identity of the target vehicle to generate a vehicle service authentication request. The vehicle service authentication request may be signed using digital signature technology to increase its security.

[0135] S503, determining a first session key according to the service vehicle authentication request, the second random number and the first key.

[0136] In the embodiment of the present application, the relevant parameters in the service vehicle authentication request, the second random number and the first key can be used as input to generate the first session key through a specific key generation algorithm. For example, a hash function can be used to process these parameters, and then the processing result is used as the first session key.

[0137] Another implementation method: First, parse the service vehicle authentication request and extract the key information. Then combine the information with the second random number and the first key, and encrypt the combined result using a symmetric encryption algorithm. The encrypted result is used as part of the first session key, and then combined with other parameters (such as the identity of the target vehicle, etc.) to generate the final first session key.

[0138] The embodiment of the present application ensures the legitimacy and timeliness of the service vehicle authentication request by verifying the timestamp and equation. At the same time, the service vehicle authentication request and the first session key are generated using random numbers and keys, which increases the security and randomness of the authentication process and prevents attacks and cracking.

[0139] In an exemplary embodiment, based on the above embodiments, the vehicle service authentication request of the embodiment of the present application includes a message encryption result, a first signature result, a vehicle signature result, a second signature result and a third timestamp; according to the second random number and the first key, the vehicle service authentication request is determined, including the following steps: performing function operations on the pre-generated temporary key, the first key and the second random number, respectively, to obtain an intermediate result; performing XOR operations on the intermediate result and the hash value to obtain the message encryption result; performing power operations on the second random number and the generator to obtain the vehicle signature result; performing hash operations on the second random number, the first key and the vehicle signature result, respectively, to obtain a second signature result.

[0140] In the embodiment of the present application, the vehicle Receive service certification request After verification The effectiveness of calculation , verify the equation Is it true? If the equation is true, Pick a random number , GF(P), calculate , , calculate the session key ,calculate ,in is the current timestamp. Generate signature information And the message encryption result, the first signature result, the vehicle signature result, the second signature result and the third timestamp in the vehicle service authentication request are: Sent to the cloud server via a public channel .

[0141] In the embodiment of the present application, the timestamp and equation are verified to ensure the legitimacy and timeliness of the service vehicle authentication request. At the same time, the use of random numbers and keys to generate the vehicle service authentication request and the first session key increases the security and randomness of the authentication process and prevents attacks and cracking.

[0142] In an exemplary embodiment, based on the above embodiment, the method of the embodiment of the present application further includes:

[0143] The vehicle information is obtained and sent to the cloud server, so that the cloud server sends the first key obtained based on the vehicle information to the target vehicle to complete the registration of the target vehicle.

[0144] The first key is obtained based on a hash operation on the vehicle information and a second key pre-set in the cloud server.

[0145] In the embodiment of the present application, the vehicle To cloud server To register, follow these steps:

[0146] (1) Vehicle Select Identity VI , register the request Send via secure channel

[0147] (2) Receive message After that, for vehicles Calculate the key , and the key Safe distribution to vehicles .

[0148] (3) Vehicles Keep the first key secret .

[0149] The embodiment of the present application generates a first key by performing a hash operation on the vehicle information and the second key in the cloud server, thereby ensuring the security and randomness of the key. At the same time, the use of encryption and digital signature technologies can prevent the vehicle information from being stolen or tampered with during transmission, thereby improving the security of the Internet of Vehicles system.

[0150] In an exemplary embodiment, see Figure 6 The embodiment of the present application also provides a method for accessing an Internet of Vehicles, the method comprising the following steps:

[0151] S601, obtaining a client-server authentication request sent by a client.

[0152] Among them, the client-server authentication request is generated by the user end based on the user information of the target user.

[0153] In the embodiment of the present application, the cloud server sets a special interface to receive the client service authentication request sent by the user. The interface can use a secure communication protocol, such as HTTPS, to ensure the secure transmission of the request. After receiving the request, the cloud server stores it in the database and waits for processing.

[0154] Another implementation method: The cloud server can use a message queue to receive client authentication requests. The client sends the request to the message queue, and the cloud server obtains the request from the message queue for processing. This method can improve the scalability and concurrent processing capabilities of the system.

[0155] S602, interact with the target vehicle according to the terminal service authentication request, and obtain the vehicle service authentication request and the first session key returned by the target vehicle.

[0156] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0157] In the embodiment of the present application, the cloud server parses the end-service authentication request and obtains the user information. Then, the cloud server searches for the corresponding target vehicle according to the user information and sends an authentication request to the target vehicle. After receiving the request, the target vehicle verifies and processes it, generates a vehicle-service authentication request and a first session key, and returns them to the cloud server.

[0158] Another implementation method: The cloud server can use broadcasting to send authentication requests to all vehicles. After receiving the request, the vehicle determines whether it is the target vehicle based on the user information in the request. If it is the target vehicle, it responds, generates a vehicle-server authentication request and a first session key, and returns them to the cloud server.

[0159] S603, sending a server authentication request generated based on the vehicle-server authentication request to the user end, so that the user end generates a second session key according to the server authentication request.

[0160] In the embodiment of the present application, after receiving the vehicle-server authentication request and the first session key, the cloud server generates a server-side authentication request based on this information. Then, the cloud server sends the server-side authentication request to the user end. After receiving the request, the user end verifies and processes it and generates a second session key.

[0161] Another implementation method: the cloud server can use push mode to send the server-side authentication request to the user. For example, the cloud server can send the server-side authentication request to the user via mobile phone text messages, push notifications, etc. After the user clicks the notification, the user side processes it and generates a second session key.

[0162] The embodiment of the present application uses the first session key and the second session key to encrypt the data between the target vehicle and the cloud server, and between the user terminal and the cloud server, respectively, thereby effectively preventing the data from being stolen or tampered with during transmission, and improving the security of the Internet of Vehicles data.

[0163] In an exemplary embodiment, based on the above embodiment, the method of the present application also includes: determining a master key, a secret value, system parameters, a cloud server identity and a second key; the system parameters include at least one of a one-way hash function, a large prime number, a large prime factor, a class element and a real number to complete the initialization of the cloud server.

[0164] Among them, the master key refers to the key key determined during the initialization of the cloud server, which is used for subsequent encryption and security processing. The secret value refers to a specific value used in the initialization of the cloud server, which usually participates in certain operations together with the master key. System parameters refer to one-way hash functions, large prime numbers, large prime factors, class elements and real numbers, etc., which are used to build the security foundation of the Internet of Vehicles system. A one-way hash function refers to a function that converts input data of any length into a fixed-length output, which has one-way and collision resistance. A large prime number refers to a larger prime number used to build the mathematical foundation in cryptography. A large prime factor refers to a factor of a large prime number, which may be used in a specific algorithm or operation. A class element refers to an element in a specific mathematical structure, which may be used in encryption or authentication processes. Real numbers refer to real numbers in mathematics, which may be used as parameters of Chebyshev polynomials in the Internet of Vehicles system.

[0165] In the embodiment of the present application, the cloud server Select the system master key , select a secret value ,calculate .Then Choose a one-way hash function , a large prime number , q is a large prime factor of P-1, is an element of order q in GF(P), and a real number As the parameters of the Chebyshev polynomial, select the identity , calculate the key , public parameters

[0166] The embodiment of the present application can provide a strong security foundation for the Internet of Vehicles system by determining the master key, secret value and system parameters, etc. Parameters such as one-way hash functions and large prime numbers can be used in the encryption and authentication process to prevent data from being tampered with and illegally accessed.

[0167] In an exemplary embodiment, based on the above embodiment, the method of the present application further includes the following steps:

[0168] Step 1: The user end obtains the registration information of the target user and sends the registration information to the cloud server; so that the cloud server generates a smart card according to the selected security parameters and registration information to complete the registration of the target user; the vehicle obtains the vehicle information and sends the vehicle information to the cloud server, so that the cloud server sends the first key obtained based on the vehicle information to the target vehicle to complete the registration of the target vehicle; the cloud server determines the master key, secret value, system parameters, cloud server identity and second key to complete the initialization of the cloud server;

[0169] Step 2: The user terminal performs identity authentication processing on the user identity identifier and the user password to obtain a first verification result; if the first verification result meets the preset conditions, a first random number is determined; based on the first random number, the user identity identifier and the user password, a terminal service authentication request is determined; and the terminal service authentication request is sent to the cloud server;

[0170] Step 3: The cloud server obtains the client-server authentication request sent by the user, generates a service-vehicle authentication request based on the client-server authentication request, and sends the service-vehicle authentication request to the target vehicle;

[0171] Step 4: The target vehicle obtains the service vehicle authentication request sent by the cloud server; the second timestamp in the service vehicle authentication request and the first equation obtained in advance are verified respectively to obtain the first time verification result and the first equation verification result; when the first time verification result and the first equation verification result both indicate that the verification is passed, the second random number is determined; the vehicle service authentication request is determined according to the second random number and the first key obtained in advance; the first session key is determined according to the service vehicle authentication request, the second random number and the first key, and the vehicle service authentication request is sent to the cloud server;

[0172] Step 5: The cloud server obtains the vehicle service authentication request, generates a server authentication request based on the vehicle service authentication request, and sends the server authentication request to the user end;

[0173] Step 6: The user end obtains the server end authentication request and generates a second session key according to the server end authentication request.

[0174] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0175] Based on the same inventive concept, the embodiment of the present application also provides a vehicle network access device for implementing the vehicle network access method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more vehicle network access device embodiments provided below can refer to the limitations of the vehicle network access method above, and will not be repeated here.

[0176] In one embodiment, Figure 7 As shown, a vehicle networking access device 700 is provided, and the device includes:

[0177] The terminal service request sending module 701 is used to send a terminal service authentication request to the cloud server based on the user information of the target user, so that the cloud server interacts with the target vehicle based on the terminal service authentication request to obtain the vehicle service authentication request and the first session key returned by the target vehicle;

[0178] The server request receiving module 702 is used to receive the server authentication request sent by the cloud server based on the vehicle server authentication request, and generate a second session key according to the server authentication request;

[0179] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0180] In one embodiment, the terminal service request sending module includes:

[0181] The identity verification unit is used to perform identity verification processing on the user identification and the user password to obtain a first verification result;

[0182] A first random number determination unit, configured to determine a first random number if the first verification result meets a preset condition;

[0183] A request determination unit, configured to determine a terminal service authentication request according to a first random number, a user identity identifier and a user password;

[0184] The request sending unit is used to send a client authentication request to the cloud server.

[0185] In one embodiment, the terminal service authentication request includes at least one of a user identifier, a first calculation result, a second calculation result, a third calculation result, a fourth calculation result, a user signature result, and a first timestamp; and the request determination unit includes:

[0186] A first result determination subunit, configured to perform an XOR operation on the first random number and the user identity identifier to obtain a first calculation result;

[0187] A second result determination subunit is used to perform encryption processing and power operation processing on the user password and the first random number to obtain a second calculation result;

[0188] A third result determination subunit, used to determine a third calculation result according to the first operation function, the first random number and the user identity;

[0189] The fourth result determination subunit is used to perform hash operation processing and logic operation processing on the user password and the first random number to obtain a fourth operation result;

[0190] The signature determination subunit is used to perform digital signature operation processing on the acquired user private key to obtain the user signature result.

[0191] In one embodiment, the above device further comprises:

[0192] The user registration module is used to obtain the registration information of the target user and send the registration information to the cloud server; so that the cloud server generates a smart card according to the selected security parameters and registration information to complete the registration of the target user.

[0193] In one embodiment, Figure 8 As shown, a vehicle networking access device 800 is provided, and the device includes:

[0194] The service request acquisition module 801 is used to acquire the service authentication request sent by the cloud server; the service authentication request is generated by the cloud server based on the end service authentication request; the end service authentication request is sent by the user end to the cloud server based on the user information;

[0195] The request key generation module 802 is used to generate a vehicle-service authentication request and a first session key according to the service-vehicle authentication request, and send the vehicle-service authentication request to the cloud server, so that the cloud server sends a service-side authentication request to the user end based on the vehicle-service authentication request, and the user end generates a second session key according to the service-side authentication request;

[0196] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0197] In one embodiment, the service vehicle authentication request includes a second timestamp; the request key generation module includes:

[0198] A verification result determination unit, used to perform verification processing on the second timestamp and the pre-acquired first equation respectively, to obtain a first time verification result and a first equation verification result;

[0199] A second random number determination unit, configured to determine a second random number when both the first time verification result and the first equation verification result indicate that the verification is passed;

[0200] A vehicle service request determination unit, configured to determine a vehicle service authentication request according to a second random number and a pre-acquired first key;

[0201] The first key determination unit is used to determine a first session key according to the service vehicle authentication request, the second random number and the first key.

[0202] In one embodiment, the vehicle service authentication request includes a message encryption result, a first signature result, a vehicle signature result, a second signature result and a third timestamp; the vehicle service request determination unit includes:

[0203] A result determination subunit is used to perform function operation processing on the pre-generated temporary key, the first key and the second random number respectively to obtain an intermediate result;

[0204] The encryption subunit is used to perform XOR operation on the intermediate result and the hash value to obtain the message encryption result;

[0205] An operation subunit, used for performing a power operation on the second random number and the generator to obtain a vehicle signature result;

[0206] The hash operation subunit is used to perform hash operation processing on the second random number, the first key and the vehicle signature result respectively to obtain a second signature result.

[0207] In one embodiment, the above device further comprises:

[0208] The information processing module is used to obtain vehicle information and send the vehicle information to a cloud server so that the cloud server sends a first key obtained based on the vehicle information to a target vehicle to complete the registration of the target vehicle; the first key is obtained based on a hash operation on the vehicle information and a second key pre-set in the cloud server.

[0209] In one embodiment, Fig. 9 As shown, a vehicle networking access device 900 is provided, and the device includes:

[0210] The terminal service request acquisition module 901 is used to acquire the terminal service authentication request sent by the user terminal; the terminal service authentication request is generated by the user terminal based on the user information of the target user;

[0211] An interaction module 902 is used to interact with the target vehicle according to the terminal service authentication request, and obtain the vehicle service authentication request and the first session key returned by the target vehicle;

[0212] The server request sending module 903 is used to send a server authentication request generated based on the vehicle server authentication request to the user end, so that the user end generates a second session key according to the server authentication request;

[0213] Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

[0214] In one embodiment, the above device further comprises:

[0215] The parameter determination module is used to determine the master key, secret value, system parameters, cloud server identity and second key; the system parameters include at least one of a one-way hash function, a large prime number, a large prime factor, a class element and a real number to complete the initialization of the cloud server.

[0216] Each module in the above-mentioned vehicle networking access device can be implemented in whole or in part by software, hardware and their combination. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the corresponding operations of each of the above modules.

[0217] In one embodiment, an electronic device is provided. The electronic device may be a cloud server, a user terminal or a vehicle. The internal structure diagram thereof may be as follows: Fig.10As shown. The electronic device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the electronic device is used to provide computing and control capabilities. The memory of the electronic device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the electronic device is used to exchange information between the processor and an external device. The communication interface of the electronic device is used to communicate with an external user terminal through a network connection. When the computer program is executed by the processor, a method for accessing the Internet of Vehicles is implemented.

[0218] Those skilled in the art will understand that Fig.10 The structure shown in the figure is merely a block diagram of a partial structure related to the scheme of the present application, and does not constitute a limitation on the electronic device to which the scheme of the present application is applied. The specific electronic device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0219] According to some embodiments of the present application, there is also provided a non-transitory computer-readable storage medium including instructions, such as a memory including instructions, and the above instructions can be executed by a processor of an electronic device to complete the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0220] According to some embodiments of the present application, a computer program product is also provided, and when the computer program is executed by a processor, the above method can be implemented. The computer program product includes one or more computer instructions. When these computer instructions are loaded and executed on a computer, part or all of the above method can be implemented in whole or in part according to the process or function described in the embodiment of the present application.

[0221] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0222] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0223] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for accessing an Internet of Vehicles, characterized in that: The method comprises: Sending a terminal service authentication request to the cloud server based on the user information of the target user, so that the cloud server interacts with the target vehicle based on the terminal service authentication request, and obtains the vehicle service authentication request and the first session key returned by the target vehicle; Receiving a service-side authentication request sent by the cloud server based on the vehicle-server authentication request, and generating a second session key according to the service-side authentication request; Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

2. The method according to claim 1, characterized in that The user information includes a user identity and a user password, and the sending of a terminal service authentication request to the cloud server based on the user information of the target user includes: Performing identity authentication processing on the user identification and the user password to obtain a first authentication result; If the first verification result meets a preset condition, determining a first random number; Determining the terminal service authentication request according to the first random number, the user identity identifier and the user password; Send the client server authentication request to the cloud server.

3. The method according to claim 2, characterized in that The method further comprises: The registration information of the target user is obtained and sent to the cloud server; so that the cloud server generates a smart card according to the selected security parameters and the registration information to complete the registration of the target user.

4. A method for accessing an Internet of Vehicles, characterized in that: The method comprises: Obtaining a service authentication request sent by a cloud server; the service authentication request is generated by the cloud server based on a client service authentication request; the client service authentication request is sent by a user end to the cloud server based on user information; Generate a vehicle-server authentication request and a first session key according to the vehicle-server authentication request, and send the vehicle-server authentication request to the cloud server, so that the cloud server sends a server-side authentication request to the user terminal based on the vehicle-server authentication request, and the user terminal generates a second session key according to the server-side authentication request; Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

5. The method according to claim 4, characterized in that The service vehicle authentication request includes a second timestamp; and generating a vehicle service authentication request and a first session key according to the service vehicle authentication request includes: Verifying the second timestamp and the pre-acquired first equation respectively to obtain a first time verification result and a first equation verification result; When both the first time verification result and the first equation verification result indicate that the verification is passed, determining a second random number; Determine the vehicle service authentication request according to the second random number and the pre-acquired first key; The first session key is determined according to the service vehicle authentication request, the second random number and the first key.

6. The method according to claim 5, characterized in that The method further comprises: Acquire vehicle information and send the vehicle information to the cloud server, so that the cloud server sends the first key obtained based on the vehicle information to the target vehicle to complete the registration of the target vehicle; the first key is obtained based on a hash operation on the vehicle information and a second key pre-set in the cloud server.

7. A method for accessing an Internet of Vehicles, characterized in that: The method comprises: Acquire a terminal service authentication request sent by a user terminal; the terminal service authentication request is generated by the user terminal based on user information of a target user; Interacting with the target vehicle according to the terminal service authentication request, obtaining the vehicle service authentication request and the first session key returned by the target vehicle; Sending a server-side authentication request generated based on the vehicle-server authentication request to the user end, so that the user end generates a second session key according to the server-side authentication request; Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

8. The method according to claim 7, characterized in that The method further comprises: Determine a master key, a secret value, a system parameter, a cloud server identity and a second key; the system parameter includes at least one of a one-way hash function, a large prime number, a large prime factor, a class element and a real number to complete the initialization of the cloud server.

9. A vehicle networking access device, characterized in that: The device comprises: A terminal service request sending module, used to send a terminal service authentication request to a cloud server based on user information of a target user, so that the cloud server interacts with a target vehicle based on the terminal service authentication request to obtain a vehicle service authentication request and a first session key returned by the target vehicle; A server request receiving module, used to receive a server authentication request sent by the cloud server based on the vehicle server authentication request, and generate a second session key according to the server authentication request; Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

10. A vehicle networking access device, characterized in that: The device comprises: A service request acquisition module is used to acquire a service authentication request sent by a cloud server; the service authentication request is generated by the cloud server based on a terminal service authentication request; the terminal service authentication request is sent by a user terminal to the cloud server based on user information; A request key generation module, used to generate a vehicle-service authentication request and a first session key according to the service-vehicle authentication request, and send the vehicle-service authentication request to the cloud server, so that the cloud server sends a service-side authentication request to the user terminal based on the vehicle-service authentication request, and the user terminal generates a second session key according to the service-side authentication request; Among them, the first session key is used to encrypt the data transmitted between the target vehicle and the cloud server; the second session key is used to encrypt the data transmitted between the user terminal and the cloud server.

Images