Vehicle-mounted controller authentication method, system, equipment and medium

By adding PIN code, random number and VIN digest data interception in the authentication of the vehicle controller, as well as multiple encryption algorithms with SK, combined with two-way authentication between the client and the server, the defects of simple and one-way authentication of the authentication algorithm in the prior art are solved, and higher security and reliability are achieved.

CN119583068APending Publication Date: 2025-03-07ANHUI DEEPWAY TECHNOLOGY CO LTD
View PDF 3 Cites 0 Cited by

Patent Information

Application Number
CN202411590326.4
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-11-07
Publication Date
2025-03-07

AI Technical Summary

Technical Problem

The authentication algorithm of existing vehicle controllers is simple, the random number is fixed and unchanged and is easily predicted and learned, and only one-way authentication is performed, which is easily deceived by single-ended.

Method used

The complexity of the authentication algorithm is improved by adding data interception after PIN code, random number and VIN digest, as well as multiple encryption algorithms with SK. At the same time, two-way authentication between the client and the server is realized to ensure that if either party’s authentication fails, the process will be terminated, and man-in-the-middle attacks and authentication frauds are eliminated.

Benefits of technology

It improves the cracking complexity of the authentication algorithm, reduces the cracking possibility, enhances security and reliability, and eliminates man-in-the-middle attacks and authentication fraud on the opponent.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119583068A_ABST
    Figure CN119583068A_ABST
Patent Text Reader

Abstract

The invention discloses an authentication method, system and device of a vehicle-mounted controller and a medium. The authentication method of the vehicle-mounted controller comprises the following steps: the vehicle-mounted controller generates a random number; obtaining first authentication information according to the PIN code, the VINTrunc, the SK code and the random number; obtaining a challenge message according to the first authentication information and the random number, and sending the challenge message to a server; obtaining second authentication information according to the first authentication information and the VINTrunc; obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information; and authenticating the vehicle-mounted controller according to a challenge message response message fed back by the server and the verification information. With the adoption of the method and the device, the cracking complexity of the authentication algorithm is increased, and the cracking possibility is reduced and the safety and the reliability are improved by increasing the data interception after the PIN code, the random number and the VIN digest and the multi-time encryption algorithm of the SK.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of vehicle technology, and in particular to an authentication method, system, device and medium for a vehicle-mounted controller. Background Art

[0002] In the related art, for the authentication of the vehicle controller, such as Figure 4 As shown, secure access uses "Seed (randomly generated by ECU, easy to predict and learn)" client sends "Request" service message; server responds with "Send Seed"; client sends "SendKey (Key, calculated by a certain algorithm based on the constant in the controller) service message containing the key; server verifies whether the received key is correct. There are the following technical problems:

[0003] The authentication algorithm is simple, the random number is fixed and unchanging, and it is easy to be predicted and learned; one-way authentication: only the server performs authentication, and the client does not perform authentication, which is easy to be deceived by one end. Summary of the invention

[0004] Based on this, it is necessary to provide a vehicle controller authentication method, system, device and medium for the above technical problems, increase the complexity of cracking the authentication algorithm, and reduce the possibility of cracking by adding PIN code, random number and data interception after VIN summary, as well as multiple encryption algorithms with SK. In addition, both the client and the server have performed two-way authentication. If either party fails the authentication, the process is terminated, eliminating man-in-the-middle attacks and authentication fraud on the other end, thereby improving security and reliability.

[0005] In a first aspect, a method for authenticating a vehicle controller is provided, comprising:

[0006] The on-board controller generates random numbers;

[0007] Obtain first authentication information according to the PIN code, VIN_Trunc, SK code and the random number;

[0008] Obtain a challenge message according to the first authentication information and the random number, and send the challenge message to a server;

[0009] Obtaining second authentication information according to the first authentication information and the VIN_Trunc;

[0010] Obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information;

[0011] The vehicle controller is authenticated according to the challenge message response message and the verification information fed back by the server.

[0012] In some examples, obtaining the first authentication information according to the PIN code, the VIN_Trunc, the SK code, and the random number includes:

[0013] Generate a first seed according to the PIN code, VIN_Trunc, SK code and the random number;

[0014] The first seed and the SK code are encrypted to obtain the first authentication information.

[0015] In some examples, obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information includes:

[0016] Encrypting the second authentication information and the SK code to obtain the third authentication information;

[0017] Extracting bytes corresponding to the verification information from the third authentication information;

[0018] Put the intercepted fields into the comparator.

[0019] In some examples, authenticating the vehicle controller according to the challenge message response message fed back by the server and the verification information includes:

[0020] Reading a verification value from the challenge response message fed back by the server;

[0021] Determining whether the verification value is consistent with the verification information;

[0022] If yes, the vehicle controller is authenticated.

[0023] In some examples, this also includes:

[0024] The server receives a challenge message sent by the vehicle controller, and obtains a random number and a comparison value from the challenge message;

[0025] Obtain fourth authentication information according to the random number, PIN code, VIN_Trunc and SK code;

[0026] Obtain fifth authentication information according to the fourth authentication information and VIN_Trunc;

[0027] Obtaining sixth authentication information according to the fourth authentication information and the SK code;

[0028] Determining whether the comparison value is consistent with a corresponding value in the challenge message;

[0029] If yes, the message response message is generated according to the fifth authentication information and sent to the vehicle controller.

[0030] In some examples, obtaining fourth authentication information according to the random number, the PIN code, the VIN_Trunc and the SK code includes:

[0031] Generate a second seed according to the random number, PIN code and VIN_Trunc;

[0032] The second seed and the SK code are encrypted to obtain the fourth authentication information.

[0033] In a second aspect, a vehicle-mounted controller authentication system is provided, comprising: a vehicle-mounted controller, wherein the vehicle-mounted controller is used to:

[0034] Generate random numbers;

[0035] Obtain first authentication information according to the PIN code, VIN_Trunc, SK code and the random number;

[0036] Obtain a challenge message according to the first authentication information and the random number, and send the challenge message to a server;

[0037] Obtaining second authentication information according to the first authentication information and the VIN_Trunc;

[0038] Obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information;

[0039] The vehicle controller is authenticated according to the challenge message response message and the verification information fed back by the server.

[0040] In some examples, the further included is a server, the server being configured to:

[0041] Receiving a challenge message sent by the vehicle controller, and obtaining a random number and a comparison value from the challenge message;

[0042] Obtain fourth authentication information according to the random number, PIN code, VIN_Trunc and SK code;

[0043] Obtain fifth authentication information according to the fourth authentication information and VIN_Trunc;

[0044] Obtaining sixth authentication information according to the fourth authentication information and the SK code;

[0045] Determining whether the comparison value is consistent with a corresponding value in the challenge message;

[0046] If yes, the message response message is generated according to the fifth authentication information and sent to the vehicle controller.

[0047] In a third aspect, a computer device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the authentication method for the vehicle controller of the first aspect and any possible implementation of the first aspect are implemented.

[0048] In a fourth aspect, a computer-readable storage medium is provided, on which a computer program is stored. When the program is executed by a processor, the steps of the authentication method of the vehicle controller of the above-mentioned first aspect and any possible implementation method of the first aspect are implemented.

[0049] In a fifth aspect, a computer program product is provided, on which a computer program is stored. When the program is executed by a processor, the steps of the authentication method of the vehicle controller of the above-mentioned first aspect and any possible implementation method of the first aspect are implemented.

[0050] By adopting the embodiments of the present application, the simplicity of the authentication algorithm is solved by the application of keys and pseudo-random numbers, the predictability of the authentication results is reduced by the application of keys and pseudo-random numbers, and the deceptibility of one-way authentication is solved by both parties performing calculations and comparing the results. The complexity of cracking the authentication algorithm is increased, and the possibility of cracking is reduced by adding data interception after the PIN code, random number and VIN summary, as well as multiple encryption algorithms with SK. In addition, both the client and the server perform two-way authentication. If either party fails the authentication, the process is terminated, eliminating man-in-the-middle attacks and authentication fraud on the other end, thereby improving security and reliability. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] Other features, objects and advantages of the present application will become more apparent by reading the detailed description of non-limiting embodiments made with reference to the following drawings:

[0052] Figure 1 A flowchart of an authentication method for a vehicle controller provided in an embodiment of the present application;

[0053] Figure 2 A structural block diagram of an authentication system for a vehicle controller provided in an embodiment of the present application;

[0054] Figure 3 A structural block diagram of a computer device provided in an embodiment of the present application;

[0055] Figure 4 It is a schematic diagram of the authentication of the vehicle-mounted controller in the related art. DETAILED DESCRIPTION

[0056] The present application is further described in detail below in conjunction with the embodiments and drawings. It is to be understood that the specific embodiments described herein are only used to explain the relevant application, rather than to limit the application. It is also necessary to explain that, for ease of description, only the parts related to the application are shown in the drawings.

[0057] It should be noted that, in the absence of conflict, the embodiments of the present application, that is, the features of the embodiments, can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0058] The following describes in detail the authentication method, system, device and medium of the vehicle controller according to the embodiments of the present application in conjunction with the accompanying drawings.

[0059] Figure 1 FIG. 1 is a flow chart of an authentication method for a vehicle controller according to an embodiment of the present application. Figure 1 As shown, the authentication method of the vehicle controller according to the embodiment of the present application includes the following steps:

[0060] S101: The vehicle controller generates a random number.

[0061] S102: Obtain first authentication information according to the PIN code, VIN_Trunc, SK code and the random number.

[0062] In one embodiment of the present application, the first authentication information is obtained according to the PIN code, VIN_Trunc, SK code and the random number, including: generating a first seed according to the PIN code, VIN_Trunc, SK code and the random number; encrypting the first seed and the SK code to obtain the first authentication information.

[0063] S103: Obtain a challenge message according to the first authentication information and the random number, and send the challenge message to a server.

[0064] S104: Obtain second authentication information according to the first authentication information and the VIN_Trunc.

[0065] S105: Obtain third authentication information according to the second authentication information and the SK code, and obtain verification information from the third authentication information.

[0066] In one embodiment of the present application, third authentication information is obtained based on the second authentication information and the SK code, and verification information is obtained from the third authentication information, including: encrypting the second authentication information and the SK code to obtain the third authentication information; intercepting the bytes corresponding to the verification information from the third authentication information; and placing the intercepted fields into a comparator.

[0067] S106: Authenticate the vehicle controller according to the challenge message response message fed back by the server and the verification information.

[0068] In one embodiment of the present application, authenticating the vehicle-mounted controller based on the challenge message response message and the verification information fed back by the server includes: reading a verification value from the challenge message response message fed back by the server; determining whether the verification value is consistent with the verification information; if so, the vehicle-mounted controller is authenticated.

[0069] Specifically, the vehicle controller acts as a client, and the specific authentication process is as follows:

[0070] Before executing the authentication process, the client randomly generates a random number;

[0071] Combine the random number, PIN code and VIN_Trunc to generate Seed, which is encrypted with SK using the AES128 algorithm to generate AER1;

[0072] AER1 intercepts the upper 4 bytes and combines them with Random to generate the Client_AERReq message (where the upper 4 bytes of AER1 occupy the upper 4 bytes of Client_AERReq, and Random occupies the lower 4 bytes of Client_AERReq), and sends it to the server;

[0073] AER1 intercepts the lower 8 bytes and combines them with VIN_Trunc to generate AER2 (the lower 8 bytes of AER1 occupy the lower 8 bytes of AER2; VIN_Trunc occupies the upper 8 bytes of AER2);

[0074] AER2 and SK are encrypted with AES128 algorithm to generate AER;

[0075] Intercept the lower 8 bytes in AER and put them into the comparator;

[0076] Verify that the value in the comparator is consistent with the value in the Server_AERResp message.

[0077] In one embodiment of the present application, the authentication method of the vehicle controller further includes:

[0078] The server receives a challenge message sent by the vehicle controller, and obtains a random number and a comparison value from the challenge message;

[0079] Obtain fourth authentication information according to the random number, PIN code, VIN_Trunc and SK code;

[0080] Obtain fifth authentication information according to the fourth authentication information and VIN_Trunc;

[0081] Obtaining sixth authentication information according to the fourth authentication information and the SK code;

[0082] Determining whether the comparison value is consistent with a corresponding value in the challenge message;

[0083] If yes, the message response message is generated according to the fifth authentication information and sent to the vehicle controller.

[0084] In this example, fourth authentication information is obtained according to the random number, PIN code, VIN_Trunc and SK code, including: generating a second seed according to the random number, PIN code and VIN_Trunc; and encrypting the second seed and the SK code to obtain the fourth authentication information.

[0085] Specifically, the server authentication process is as follows: After the server receives the Client_AERReq message, the upper 4 bytes are split into Random and the lower 4 bytes are placed in the comparator;

[0086] Combine the random number, PIN code and VIN_Trunc to generate Seed, which is encrypted with SK using the AES128 algorithm to generate AER1;

[0087] AER1 intercepts the lower 8 bytes and combines them with VIN_Trunc to generate AER2 (the lower four bytes of AER1 occupy the lower 8 bytes of AER2; VIN_Trunc occupies the upper 8 bytes of AER2);

[0088] AER1 and SK are encrypted with AES128 algorithm to generate AER;

[0089] AER intercepts the upper 4 bytes and verifies whether the value in the comparator is consistent with the value in Client_AERReq;

[0090] The lower 8 bytes in AER2 are intercepted to generate the Server_AERResp message (consistent with the byte order of Client_AERReq), and sent to the client.

[0091] In the above description, the PIN code contains 4 bytes, which is randomly generated by the vehicle manufacturer's production data management server and written into the EEPROM by the EOL diagnostic instrument when performing anti-theft offline configuration. The PIN code can only be read and written before the ECU is unlocked. Once locked, reading and writing are prohibited. Each vehicle corresponds to a PIN code, and the PIN codes of different vehicles should be different. The PIN code is uniformly managed by the vehicle manufacturer's production data management server. When the owner loses the PIN code, he can ask the after-sales service center for it according to the management query process as the authority for after-sales anti-theft matching.

[0092] The VIN code contains 17 bytes, which is allocated by the production data server and written by the diagnostic instrument / offline system during the anti-theft offline configuration. The default value of the VIN code when the ECU leaves the factory is 0x00 or 0xFF. When the vehicle is produced, if the VIN code written into the ECU by the diagnostic instrument is 0xFF or 0x00 or does not conform to the VIN code definition rules of the vehicle manufacturer, the controller will not perform the write operation and give a negative response.

[0093] VIN_Trunc contains 8 bytes. The diagnostic instrument triggers the corresponding anti-theft controller by writing the VIN code. The controller writes the lower 8 bytes of the VIN hash value into the EEPROM.

[0094] The SK code contains 16 bytes, which is randomly generated by the controller triggered by the diagnostic instrument and written into the EEPROM. The SK code can also be learned by other controllers. When the controller's PIN code, SK code, and VIN code are successfully written, it can be locked only once.

[0095] The embodiments of the present application rely on PIN, VIN, SK, Random parameters and AES128CBC algorithm, where PIN and VIN are essential parameters of the vehicle; SK is stored in a secure area of ​​the controller and is obtained by other controllers through learning; Random is generated by pseudo-random numbers, and the Random for each authentication is different; AES128 CBC algorithm is a symmetric algorithm, which takes a short time and is supported by basically all controllers.

[0096] According to the authentication method of the vehicle controller of the embodiment of the present application, the simplicity of the authentication algorithm is solved by the application of keys and pseudo-random numbers, the predictability of the authentication results is reduced by the application of keys and pseudo-random numbers, and the deceptibility of one-way authentication is solved by both parties performing calculations and comparing the results. The complexity of cracking the authentication algorithm is increased, and the possibility of cracking is reduced by increasing the data interception after the PIN code, random number and VIN summary, as well as multiple encryptions with SK such as the AES128 algorithm. In addition, both the client and the server perform two-way authentication. If either party fails the authentication, the process terminates, eliminating man-in-the-middle attacks and authentication deception on the other end, thereby improving security and reliability.

[0097] Figure 2 FIG. 1 is a structural block diagram of an authentication system for a vehicle controller according to an embodiment of the present application. Figure 2 As shown, according to an embodiment of the present application, the authentication system of the vehicle controller includes: a vehicle controller 210 and a server 220, wherein the vehicle controller 210 is used to:

[0098] Generate random numbers;

[0099] Obtain first authentication information according to the PIN code, VIN_Trunc, SK code and the random number;

[0100] Obtain a challenge message according to the first authentication information and the random number, and send the challenge message to a server;

[0101] Obtaining second authentication information according to the first authentication information and the VIN_Trunc;

[0102] Obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information;

[0103] The vehicle controller is authenticated according to the challenge message response message and the verification information fed back by the server.

[0104] Server 220 is used for:

[0105] Receiving a challenge message sent by the vehicle controller, and obtaining a random number and a comparison value from the challenge message;

[0106] Obtain fourth authentication information according to the random number, PIN code, VIN_Trunc and SK code;

[0107] Obtain fifth authentication information according to the fourth authentication information and VIN_Trunc;

[0108] Obtaining sixth authentication information according to the fourth authentication information and the SK code;

[0109] Determining whether the comparison value is consistent with a corresponding value in the challenge message;

[0110] If yes, the message response message is generated according to the fifth authentication information and sent to the vehicle controller.

[0111] According to the authentication system of the vehicle controller of the embodiment of the present application, the simplicity of the authentication algorithm is solved by the application of keys and pseudo-random numbers, the predictability of the authentication results is reduced by the application of keys and pseudo-random numbers, and the deceptibility of one-way authentication is solved by both parties performing calculations and comparing the results. The complexity of cracking the authentication algorithm is increased, and the possibility of cracking is reduced by increasing the data interception after the PIN code, random number and VIN summary, as well as multiple AES128 algorithms with SK. In addition, both the client and the server perform two-way authentication. If either party fails the authentication, the process terminates, eliminating man-in-the-middle attacks and authentication deception on the other end, thereby improving security and reliability.

[0112] For the specific definition of the authentication system of the vehicle controller, please refer to the definition of the authentication method of the vehicle controller mentioned above, which will not be repeated here. The various modules of the authentication system of the above-mentioned vehicle controller can be implemented in whole or in part by software, hardware and their combination. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0113] In one embodiment, a computer device is provided. Figure 3 This is a block diagram of the computer device provided in the embodiment of the present application, refer to Figure 3 The computer device includes a memory and a processor. The memory stores a computer program. When the processor executes the computer program, the authentication method embodiment of the vehicle controller is implemented. For example, the vehicle controller generates a random number;

[0114] Obtain first authentication information according to the PIN code, VIN_Trunc, SK code and the random number;

[0115] Obtain a challenge message according to the first authentication information and the random number, and send the challenge message to a server;

[0116] Obtaining second authentication information according to the first authentication information and the VIN_Trunc;

[0117] Obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information;

[0118] The vehicle controller is authenticated according to the challenge message response message and the verification information fed back by the server.

[0119] The embodiment of the present application further provides a computer-readable storage medium, the computer-readable storage medium stores a computer program, and the processor implements the above-mentioned vehicle controller authentication method embodiment when executing the computer program. For example, the vehicle controller generates a random number;

[0120] Obtain first authentication information according to the PIN code, VIN_Trunc, SK code and the random number;

[0121] Obtain a challenge message according to the first authentication information and the random number, and send the challenge message to a server;

[0122] Obtaining second authentication information according to the first authentication information and the VIN_Trunc;

[0123] Obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information;

[0124] The vehicle controller is authenticated according to the challenge message response message and the verification information fed back by the server.

[0125] The present application embodiment provides a computer program product, which includes instructions. When the instructions are executed, the method described in the embodiment of the present application is executed. For example, it can be executed Figure 1 The various steps of the authentication method of the vehicle-mounted controller shown, for example, are performed: the vehicle-mounted controller generates a random number;

[0126] Obtain first authentication information according to the PIN code, VIN_Trunc, SK code and the random number;

[0127] Obtain a challenge message according to the first authentication information and the random number, and send the challenge message to a server;

[0128] Obtaining second authentication information according to the first authentication information and the VIN_Trunc;

[0129] Obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information;

[0130] The vehicle controller is authenticated according to the challenge message response message and the verification information fed back by the server.

[0131] Those of ordinary skill in the art can understand that all or part of the processes in the methods for implementing the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory or optical memory, etc. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM).

[0132] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0133] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the patent application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent application shall be subject to the attached claims.

Claims

1. A method for authenticating a vehicle controller, characterized in that: include: The on-board controller generates random numbers; Obtain first authentication information according to the PIN code, VIN_Trunc, SK code and the random number; Obtain a challenge message according to the first authentication information and the random number, and send the challenge message to a server; Obtaining second authentication information according to the first authentication information and the VIN_Trunc; Obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information; The vehicle controller is authenticated according to the challenge message response message and the verification information fed back by the server.

2. The vehicle controller authentication method according to claim 1, characterized in that: The obtaining of the first authentication information according to the PIN code, VIN_Trunc, SK code and the random number includes: Generate a first seed according to the PIN code, VIN_Trunc, SK code and the random number; The first seed and the SK code are encrypted to obtain the first authentication information.

3. The vehicle controller authentication method according to claim 1, characterized in that: The step of obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information includes: Encrypting the second authentication information and the SK code to obtain the third authentication information; Extracting bytes corresponding to the verification information from the third authentication information; Put the intercepted fields into the comparator.

4. The vehicle controller authentication method according to any one of claims 1 to 3, characterized in that: The authenticating the vehicle controller according to the challenge message response message fed back by the server and the verification information includes: Reading a verification value from the challenge response message fed back by the server; Determining whether the verification value is consistent with the verification information; If yes, the vehicle controller is authenticated.

5. The vehicle controller authentication method according to claim 1, characterized in that: Also includes: The server receives a challenge message sent by the vehicle controller, and obtains a random number and a comparison value from the challenge message; Obtain fourth authentication information according to the random number, PIN code, VIN_Trunc and SK code; Obtain fifth authentication information according to the fourth authentication information and VIN_Trunc; Obtaining sixth authentication information according to the fourth authentication information and the SK code; Determining whether the comparison value is consistent with a corresponding value in the challenge message; If yes, the message response message is generated according to the fifth authentication information and sent to the vehicle controller.

6. The vehicle controller authentication method according to claim 5, characterized in that: The fourth authentication information is obtained according to the random number, PIN code, VIN_Trunc and SK code, including: Generate a second seed according to the random number, PIN code and VIN_Trunc; The second seed and the SK code are encrypted to obtain the fourth authentication information.

7. An authentication system for a vehicle controller, characterized in that: include: The vehicle-mounted controller is used for: Generate random numbers; Obtain first authentication information according to the PIN code, VIN_Trunc, SK code and the random number; Obtain a challenge message according to the first authentication information and the random number, and send the challenge message to a server; Obtaining second authentication information according to the first authentication information and the VIN_Trunc; Obtaining third authentication information according to the second authentication information and the SK code, and obtaining verification information from the third authentication information; The vehicle controller is authenticated according to the challenge message response message and the verification information fed back by the server.

8. The vehicle controller authentication system according to claim 7, characterized in that: Also includes: A server, the server being used for: Receiving a challenge message sent by the vehicle controller, and obtaining a random number and a comparison value from the challenge message; Obtain fourth authentication information according to the random number, PIN code, VIN_Trunc and SK code; Obtain fifth authentication information according to the fourth authentication information and VIN_Trunc; Obtaining sixth authentication information according to the fourth authentication information and the SK code; Determining whether the comparison value is consistent with a corresponding value in the challenge message; If yes, the message response message is generated according to the fifth authentication information and sent to the vehicle controller.

9. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the authentication method of the vehicle controller according to any one of claims 1-6 is implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the authentication method of the vehicle-mounted controller according to any one of claims 1-6 is implemented.

Citation Information

Patent Citations

  • A security authentication method and system

    CN109862040A

  • Vehicle-mounted equipment authentication method, device and system, vehicle and readable storage medium

    CN116506166A

  • Lightweight identity authentication and key agreement method for Internet of Vehicles based on PUF (Physical Unclonable Function)

    CN118748592A