In-vehicle service authorization activation method, device and vehicle

Abstract

The present invention provides a method for in-vehicle service authorization and activation, comprising the steps of: receiving an in-vehicle service authorization and activation request sent by a vehicle, and pre-activating the vehicle; after the pre-activation is successful, generating a security file for in-vehicle service authorization and activation; sending the security file to the vehicle, so that the vehicle performs in-vehicle service authorization and activation based on the security file. In addition, the present invention also provides a vehicle for executing the in-vehicle service authorization and activation method. The method of the present invention first performs security authentication on the vehicle identity and other configuration information through a server, and sends a security file generated according to the vehicle configuration information to the authenticated vehicle, and then binds the serial number corresponding to the security file to the vehicle VIN code, and ensures that the same serial number is not reused, thereby ensuring the security of the in-vehicle service authorization and activation process and preventing the activation process from being cracked and forged.

Description

Technical Field

[0001] The present invention relates to the field of vehicle technology, and in particular to a vehicle service authorization activation method, device and vehicle. Background Art

[0002] Cars are rapidly developing towards intelligence and networking, and there are more and more applications and value-added services in cars. Among them, value-added services are purchased on demand and used for a fee. That is, users purchase license serial numbers through the mall and then activate the in-vehicle services through the authorized APP; after activation, users can use the purchased services within the validity period, and this license serial number is bound to the vehicle number and cannot be changed; if the activation is unsuccessful, this license serial number is not bound to the vehicle number and can continue to be bound to a different vehicle number.

[0003] However, there are two main challenges in the implementation of authorization activation: (1) Value-added services are expensive, and there is a huge profit space for activation through illegal means, such as bypassing activation restrictions through system design logic loopholes to activate multiple vehicles with one license number; or activating more vehicles by copying or forging license files, so the security requirements for the authorization activation process are very high. (2) Car manufacturers need to provide customers with an experience similar to the common mobile phone / PC system software activation as much as possible, but because vehicles are different from mobile phones or PCs, they face more complex vehicle conditions, such as service activation depends on the vehicle's software and hardware versions, or even third-party related services; and when the user is activating, the vehicle may be in operation, temporarily parked, or turned off / powered off, and may be in a network environment or an offline environment.

[0004] Moreover, the technical complexity and implementation of in-vehicle service authorization activation are fundamentally different from those of common mobile phone / PC system software authorization activation. The latter's related technologies cannot be directly applied to in-vehicle software authorization activation, and need to be specifically designed and optimized according to the characteristics of the car itself.

[0005] Therefore, the present invention mainly solves the problem of authorization activation for vehicle-mounted software, that is, based on the characteristics of vehicle network communication and automobile system, a system and method for authorization activation of vehicle-mounted software with high security and adaptability to complex vehicle conditions is designed. Summary of the invention

[0006] An embodiment of the present invention provides a method for activating vehicle-mounted service authorization, comprising the following steps:

[0007] Receive an in-vehicle service authorization activation request sent by the vehicle and pre-activate the vehicle;

[0008] After the pre-activation is successful, a security file for in-vehicle service authorization activation is generated;

[0009] The security file is sent to the vehicle so that the vehicle performs in-vehicle service authorization activation based on the security file.

[0010] The pre-activation process includes the following steps:

[0011] Determine whether the serial number and vehicle VIN number used for vehicle service authorization activation are valid;

[0012] Send a security password for identity authentication to the vehicle ECU with valid serial number and VIN code;

[0013] Synchronize the configuration information of the vehicle ECU that has successfully authenticated the identity to meet the conditions for authorization and activation of the in-vehicle service.

[0014] When the pre-activation process activates the specified VIN service, the controllable background authorization service actively initiates the activation notification, rather than the uncontrollable vehicle end, which verifies the identity through a one-time password. This communication method is different from other smart terminal methods, which not only effectively avoids various illegal activation attempts, but also facilitates efficient authentication on the service end.

[0015] Furthermore, a pre-activation process is performed each time the vehicle is powered on.

[0016] Preferably, the vehicle service authorization activation conditions include one or more of the following:

[0017] The vehicle is powered on, the vehicle is connected to the network, the software and hardware versions of the vehicle ECU match, and the vehicle ECU time is synchronized with the server.

[0018] Specifically, the generation of a security file for in-vehicle service authorization activation includes the following steps:

[0019] Receiving identity information and inspection information sent by the vehicle to characterize the vehicle identity;

[0020] Signing the identity information and verification information using a unique private key corresponding to the vehicle;

[0021] The signed information is packaged and encrypted to generate the security file for in-vehicle service authorization activation, wherein the encryption password is interactively generated by the vehicle and the server through an encryption algorithm during the pre-activation process.

[0022] Furthermore, the step of generating a security file for authorization activation may further include the following steps before executing:

[0023] Determining the status of the serial number for in-vehicle service authorization activation;

[0024] Determining whether to generate a security file for authorization activation according to the status of the serial number;

[0025] Furthermore, the method further comprises the following steps:

[0026] Associating the security file for in-vehicle service authorization activation with the serial number for in-vehicle service authorization activation;

[0027] Bind the serial number to the vehicle VIN code;

[0028] Modify the serial number status for in-vehicle service authorization activation.

[0029] Among them, when the status of the serial number used for vehicle service authorization activation is sent and activated, the serial number becomes invalid.

[0030] Furthermore, the embodiment of the present invention further includes the following steps:

[0031] Receive notification information of successful receipt of safety documents from the vehicle;

[0032] The status of the serial number used for in-vehicle service authorization activation is modified to sent and activated.

[0033] The server sends the security file to the vehicle, and the vehicle replies to confirm receipt after receiving it. The server then binds the serial number to the vehicle VIN to ensure that the serial number cannot be used again, thus preventing one serial number from activating multiple vehicles.

[0034] Another embodiment of the present invention provides a method for activating vehicle service authorization, comprising the following steps:

[0035] Initiate an activation request to the server to trigger the pre-activation process;

[0036] When pre-activation is successful, receive the security file generated by the server for in-vehicle service authorization activation;

[0037] Decrypt the security document and verify its legitimacy;

[0038] It is determined whether the identity information stored in the security file is consistent with the identity information of the vehicle. If they are consistent, activation is successful.

[0039] Specifically, initiating an activation request to the server to trigger the pre-activation process includes the following steps:

[0040] Sending a vehicle service authorization activation request to the server;

[0041] Receive the pre-activation notification and security password for identity authentication sent by the server;

[0042] When the identity authentication is successful, the vehicle ECU configuration information is synchronized to meet the vehicle service authorization activation conditions.

[0043] Specifically, it further includes verifying the validity period of the security file; if it has not expired, the activation is successful; if it has expired, the activation fails.

[0044] Another embodiment of the present invention provides a vehicle-mounted service authorization activation device, comprising:

[0045] A pre-activation module, used to receive an in-vehicle service authorization activation request sent by a vehicle and pre-activate the vehicle;

[0046] A security file generation module, used to generate a security file for in-vehicle service authorization activation after the pre-activation is successful;

[0047] The sending module is used to send the security file to the vehicle so that the vehicle performs vehicle service authorization activation based on the security file.

[0048] Another embodiment of the present invention provides a vehicle-mounted service authorization activation device, comprising:

[0049] A request module, used to initiate an activation request to the server to trigger the pre-activation process;

[0050] A receiving module, used for receiving a security file generated by a server for authorization and activation of an in-vehicle service after the pre-activation is successful;

[0051] A decryption module, used to decrypt the security file and verify its legitimacy;

[0052] The activation module is used to determine whether the identity information stored in the security file is consistent with the identity information of the vehicle. If they are consistent, the activation is successful.

[0053] Another embodiment of the present invention provides a vehicle, comprising one or more processors, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed, implements any one of the above-mentioned vehicle service authorization activation methods.

[0054] Yet another embodiment of the present invention provides a computer storage medium having instructions stored thereon, which, when executed by one or more processors, enables the processors to execute any of the above-mentioned vehicle service authorization activation methods.

[0055] The in-vehicle service authorization and activation method of the present invention is that the server first performs security authentication on the vehicle identity and other configuration information, and sends a security file generated according to the vehicle configuration information to the authenticated vehicle, and then binds the serial number corresponding to the security file to the vehicle VIN code, and ensures that the same serial number is not reused, thereby ensuring the security of the in-vehicle service authorization and activation process and preventing the activation process from being cracked and forged. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0057] Figure 1 It is a flowchart of a method for activating vehicle-mounted service authorization disclosed in an embodiment of the present invention;

[0058] Figure 2 is a flow chart of the vehicle service authorization pre-activation method disclosed in an embodiment of the present invention;

[0059] Figure 3 is a flow chart of the method for generating the vehicle-mounted service authorization security file disclosed in an embodiment of the present invention;

[0060] Figure 4 is a flow chart of a method for activating vehicle service authorization disclosed in another embodiment of the present invention;

[0061] Figure 5 is a structural block diagram of a vehicle service authorization activation device disclosed in yet another embodiment of the present invention;

[0062] Figure 6 It is a structural block diagram of a vehicle service authorization activation device disclosed in yet another embodiment of the present invention. DETAILED DESCRIPTION

[0063] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0064] It should be noted that the terms "including" and "having" and any variations thereof in the embodiments of the present invention and the accompanying drawings are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device including a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to these processes, methods, products or devices.

[0065] The common system software activation process on mobile phones or computers is user-friendly and has a high user experience. Therefore, in order to provide customers with an experience similar to that of common system software activation on mobile phones / PCs, automobile manufacturers need to solve more complex problems in vehicle scenarios. For example, there will be many inconsistent versions of vehicle software, and a lot of pre-activation work needs to be done before activation. In addition, some hardware may be replaced and need to be reactivated after replacement, making the activation of in-vehicle services dependent on the software and hardware versions of the vehicle and third-party related services; for example, when the user is activating, the vehicle may be in operation, temporarily parked, or turned off / powered off, so the vehicle condition needs to be checked before activation. If it is powered on, it needs to ensure that it does not affect driving. If it is powered off, it needs to be remotely woken up, etc. The vehicle may also be in a networkless environment. If there is no network, the user needs to be reminded, and the activation process is triggered immediately when it is restored to a networked environment.

[0066] Moreover, the authorization and activation of in-vehicle services is fundamentally different from the authorization and activation of common mobile phone / PC system software in terms of technical complexity and implementation. The safe activation method for mobile phone / PC systems is to input the product key or activation code in the terminal, and the system will upload the collected hardware information to the server, and then obtain an authorization file, and finally determine whether the system is activated based on this authorization file; however, this logic cannot be directly used for the authorization and activation of in-vehicle software, and needs to be designed and optimized according to the characteristics of the car itself. Therefore, the present invention combines the communication characteristics of the Internet of Vehicles and the characteristics of the vehicle system to design a safe, simple and reliable method for authorization and activation of in-vehicle software. Among them,

[0067] The similarities among these designs include: 1) identity authentication based on hardware information, 2) generation of authorization files as the basis for terminal judgment; differences include: 1) mobile phone / PC is actively activated by the terminal, while the in-vehicle system is actively initiated by the server, and security is fully controlled by the trusted server; 2) when the mobile phone / PC is activated, the interaction between the terminal and the server is relatively simple, while the in-vehicle system is much more complicated and needs to handle the pre-activation process, the replacement of parts and re-activation process, etc. The complex pre-processing process also brings more security challenges to the activation of in-vehicle services.

[0068] Based on the above problems, an embodiment of the present invention discloses a method for activating in-vehicle service authorization, which is described in detail below.

[0069] Embodiment 1

[0070] refer to Figure 1 As shown, an embodiment of the present invention provides a method for activating vehicle-mounted service authorization, which is executed by a server. The server is used for vehicle information management and stores user information, vehicle information, service information and other contents, and stores them in a one-to-one matching manner. The method for activating vehicle-mounted service authorization includes the following steps:

[0071] S11, receiving a vehicle service authorization activation request sent by the vehicle, and pre-activating the vehicle;

[0072] The in-vehicle service refers to an application or value-added service that requires payment. Users need to purchase the application or service through online shopping malls, offline service stores and other channels. Users purchase it according to their personal needs, pay for it, and activate it through the purchased serial number. The in-vehicle services described in the present invention are the same as those defined here and will not be described in detail later. Specifically,

[0073] The user starts the vehicle service authorization activation process, the vehicle initiates an activation request to the server, and the server receives the vehicle's activation request, triggering the pre-activation process. The pre-activation specifically includes the following steps:

[0074] S110, determining whether the serial number and vehicle VIN code used for in-vehicle service authorization activation are valid;

[0075] The serial number used for in-vehicle service authorization activation is purchased in advance by the user, and then the authorization operation is started on the vehicle side, thereby triggering the corresponding in-vehicle service authorization activation process. Specifically, the authorization operation performed by the user can be to enter the serial number purchased in advance on the vehicle side, or to enter the serial number on other mobile terminals and send it to the vehicle side, or to start the authorization operation by other means such as scanning a code. Preferably, the user information, vehicle information and purchased service information are recorded in corresponding matching by the server. The user only needs to initiate the in-vehicle service activation instruction through manual operation, voice operation, etc. on the vehicle side or other smart terminals, and the vehicle side will receive the corresponding instruction and interact with the server to start the authorization operation.

[0076] In order to prevent the serial number from being misused, the serial number can only be used once. When it is activated, it is invalid. At the same time, the VIN code and the serial number are bound one by one. When the serial number is invalid, the corresponding VIN code can no longer activate the same service type, and the VIN code is also invalid.

[0077] Furthermore, it also includes the state that the serial number and VIN code itself are invalid, and forgery is not prevented. When the serial number or VIN code does not exist, it is also determined to be invalid. Of course, in addition to the examples listed in the present invention, other invalid situations can also be included.

[0078] The invalidation verification of the serial number and VIN code used for the authorization and activation of the vehicle service described in the present invention can further ensure the security of the subsequent pre-activation process.

[0079] S111, sending a security password for identity authentication to the vehicle with a valid serial number and VIN code;

[0080] In order to further ensure the security of the pre-activation process, the server sends a security password for identity authentication, such as a token, to vehicles with valid serial numbers and VIN codes. The password is a one-time password and is randomly generated and assigned to the vehicle by the server. The password for identity authentication is transmitted to the vehicle through a pre-activation notification message sent by the server to the vehicle. After the vehicle receives the pre-activation notification message, the vehicle-mounted ECU (electronic control unit) carries the security password and initiates an authorization service pre-activation request to the server.

[0081] S112. Synchronize the configuration information of the vehicle ECU that has successfully authenticated the identity to meet the vehicle service authorization activation conditions.

[0082] The vehicle ECU packages the configuration information and carries the above-mentioned security password to send a pre-activation request to the server. The configuration information at least includes the vehicle VIN code, ECU ID information, ECU software and hardware version numbers, and ECU current time.

[0083] The server receives the pre-activation request sent by the vehicle ECU and verifies whether the security password is valid. If it is valid, it checks whether the configuration information of the vehicle ECU meets the vehicle service authorization activation conditions. This includes: checking whether the software and hardware versions of the vehicle ECU match, that is, whether they meet the software and hardware requirements of the vehicle service to be authorized. If not, the vehicle ECU is upgraded through remote OTA (over-the-air download technology). At the same time, it checks whether the time of the current vehicle ECU is synchronized with the server to ensure that the activation time record is consistent. If the time is not synchronized, the ECU time is synchronized.

[0084] When performing vehicle service authorization activation, the vehicle may be in different states, such as power off, no network environment, driving, etc. Therefore, it is necessary to ensure that the vehicle meets the activation conditions before activation.

[0085] (1) If the vehicle is powered off and connected to the Internet during pre-activation, the vehicle control operation is linked to wake up the vehicle network and vehicle ECU, and then the vehicle ECU is notified to activate;

[0086] (2) If the vehicle is in driving state and has a network connection when pre-activation is performed, the vehicle status will be checked periodically and changed to parked state before notifying the vehicle ECU to activate;

[0087] (3) If the vehicle is disconnected from the network during pre-activation, the vehicle status will be checked regularly and if it is online and parked, the vehicle ECU will be notified to activate.

[0088] When the vehicle is powered on, the server is notified that the vehicle corresponding to the corresponding VIN code has been powered on. If the authorized service has a pre-activation or formal activation task to be executed, it can be triggered based on this notification.

[0089] The above detection process is repeated every time the vehicle ECU is powered on. The vehicle actively notifies the server every time it is powered on, and the server checks whether the task is not completed based on this notification, so that operations such as fast execution and automatic retry can be achieved after power-on.

[0090] S12. After the pre-activation is successful, a security file for in-vehicle service authorization activation is generated;

[0091] After the pre-activation is successful, the server packages the configuration information of the vehicle ECU and verification information such as validity period and status, and encrypts it to generate a security file for vehicle service authorization activation, wherein the configuration information at least includes the vehicle VIN code, ECU ID information, ECU software and hardware version numbers, and ECU current time.

[0092] Preferably, the server further verifies the validity of the serial number and the vehicle VIN code used for the authorization and activation of the vehicle service. If they are valid, an activation notification message is sent to the vehicle and a one-time security password is assigned. The vehicle ECU carries the security password and requests the security file from the server. The server verifies the validity of the security password and further tests the vehicle ECU that has passed the verification to detect the status of the serial number and the vehicle VIN code used for the authorization and activation of the vehicle service. If they meet the conditions, a security file for the authorization and activation of the vehicle service is generated.

[0093] Furthermore, the method further comprises the following steps:

[0094] Step 1, associating the security file for in-vehicle service authorization activation with the serial number for in-vehicle service authorization activation;

[0095] Step 2, bind the serial number and the vehicle VIN code accordingly;

[0096] Step 3. Modify the serial number status for in-vehicle service authorization activation.

[0097] After the security file for authorization and activation of the vehicle service is generated, it is associated with the authorization activation serial number, and the serial number is bound to the vehicle VIN code, so that the authorization status of the vehicle service can be determined by determining the serial number status. When the security file is generated but not sent to the vehicle, the serial number status is written as "generated, not activated"; when the vehicle receives the security file and activates successfully, it feeds back a notification message of completion to the server, and the server modifies the serial number status to "sent, activated", thereby ensuring that the same serial number cannot be used again, and the corresponding VIN code cannot repeatedly activate the same service type, preventing the forgery of vehicle services.

[0098] S13. Send the security file to the vehicle, so that the vehicle performs in-vehicle service authorization activation based on the security file.

[0099] The backend server sends the generated security file to the vehicle. After receiving the security file, the vehicle verifies the signature and decrypts it, and then uses the local key to perform transparent encryption and store it in the storage.

[0100] After receiving the security file, the vehicle feeds back a notification message of completion of receiving the security file to the server. The server receives the notification message and modifies the status of the serial number used for activation to "sent, activated", thereby completing the vehicle service authorization activation process.

[0101] The present invention initiates the activation notification actively by a controllable background server, rather than by an uncontrollable vehicle-mounted ECU. When initiating the notification, the background server allocates a token to the ECU, and the ECU carries this token to initiate a pre-activation process to the background server. This token is one-time and has a very short validity period. This design effectively avoids various illegal activation attempts and is conducive to efficient authentication on the server side. This communication method is also the difference between the vehicle-mounted service authorization activation method described in the present invention and existing smart terminals such as mobile phones and PCs.

[0102] To further illustrate the in-vehicle service authorization pre-activation process of the present invention, refer to Figure 2 As shown, the pre-activation process of the present invention is further described, and the pre-activation process includes the following steps:

[0103] Step S1: The user initiates an activation request to the backend authorization server, i.e. uses the license serial number to activate the vehicle with the specified VIN code;

[0104] Step S2: The backend authorization server checks the validity of the license serial number and the VIN code, that is, the license serial number has not been activated, and the VIN is not bound to any activated license serial number;

[0105] Step S3: The background authorization service notifies the vehicle ECU to pre-activate through the message center and allocates a one-time token;

[0106] Step S4: The vehicle ECU packages the in-vehicle information, including VIN, ECU ID, software and hardware version numbers, time, etc., and carries the received token to initiate a pre-activation request to the background authorization server;

[0107] Step S5: The backend authorization server verifies whether the token is valid. If it is invalid, the server exits. If it is valid, the server continues to execute step S6.

[0108] Step S6: The backend authorization server checks whether the ECU version of the vehicle matches. If not, the OTA is linked to upgrade the ECU version;

[0109] Step S7: The background authorization server checks whether the ECU time is synchronized. If not, the ECU time is synchronized to prepare the environment for the subsequent formal activation.

[0110] The pre-activation process described in this embodiment is initiated by the server, not the vehicle, so that the entire process can be fully controlled by a trusted server, increasing the security of the activation process. At the same time, due to the various complex situations of vehicles, such as no network, replacement of parts, ECU version mismatch, etc., the pre-activation process is used for pre-processing so that the vehicle environment meets the subsequent activation process.

[0111] refer to Figure 3 As shown, the activation file generation process described in the first embodiment of the present invention is further described through the following steps, which specifically include:

[0112] Step S1: Check again that the license serial number and VIN are valid: the license serial number has not been activated, and the VIN is not bound to any activated license serial number;

[0113] Step S2: The background authorization service notifies the vehicle ECU to activate through the message center and allocates a one-time token;

[0114] Step S3: The vehicle ECU carries the token and requests the license file from the authorization service;

[0115] Step S4: The background authorization service verifies whether the token is valid, and exits if it is invalid;

[0116] Step S5: Check the status of the license serial number + VIN. If the status of the license serial number is generated but not sent, it means that the license file has been generated, and further check S6; otherwise, the license file has not been generated, and execute S7;

[0117] Step S6: At this time, the license serial number status is generated but not sent, and the license file has been generated. It is necessary to further check whether the VIN or ECU ID to be activated is the same as the VIN or ECU ID contained in the license file. If they are different, it fails; otherwise, execute S9;

[0118] Step S7: Generate a specific license file. This file contains identity information such as VIN, ECU ID, timestamp, and verification information such as validity period and status; and is signed with a unique private key for each vehicle, and then packaged together with the corresponding public key to form license meta-information, which is then encrypted to generate the final license file, i.e., the security file for vehicle service authorization activation described in the present invention. This encryption password is generated by negotiation between the backend and the vehicle end in the pre-activation stage according to a specific algorithm;

[0119] Step S8: associate the license serial number with the license file, and bind the license serial number with the VIN; modify the license serial number status: generated, not activated;

[0120] Step S9: the authorization service sends the license file to the vehicle ECU;

[0121] Step S10: After the vehicle receives the license file, it verifies that the md5 is correct, and then uses the local tee unique key to transparently encrypt it and store it on the EMMC;

[0122] Step S11: The vehicle replies to the authorization service that receiving the license file is complete;

[0123] Step S12: Authorization service marks the license serial number status: sent, activated; this serial number cannot be used again, and the corresponding VIN cannot be used to repeatedly activate the same service type.

[0124] The present invention uses a key system for security design to prevent copying and forgery. For each VIN service, the authorization service will generate a specific license file: containing specific identity information (VIN or ECU ID) and time, status information, etc.; and signed with a unique private key for each vehicle, as well as key encryption negotiated by the background authorization service and the vehicle-side ECU, ensuring that cracking and forgery are very difficult.

[0125] Furthermore, since there is a possibility that the ECU may be replaced during the vehicle maintenance process, when the ECU is replaced with a new part, the security file originally stored in the ECU for the authorization and activation of the in-vehicle service becomes invalid, and the new ECU needs to re-initiate the activation process. Specifically, the activation process can be initiated by after-sales service, thereby re-executing the pre-activation process and the generation process of the security file for the authorization and activation of the in-vehicle service, wherein the serial number used for the authorization and activation remains unchanged, and the security file used for the authorization and activation of the in-vehicle service is a regenerated file. Thus, the authorization and activation of the in-vehicle service are re-performed according to the process described in the above method or steps. It should be noted that when the new ECU regains the new security file and activates the in-vehicle service, the security file in the old ECU does not need to be deleted. It will expire due to the built-in detection mechanism and become unavailable. The serial number will not be unavailable because the security file in the old ECU has not been deleted.

[0126] After the vehicle receives the security file for authorization and activation of the in-vehicle service, the authorization and activation of the in-vehicle service is completed by executing the following steps.

[0127] S1: When a security file needs to be verified, first use the local tee unique key to transparently decrypt it into the memory to obtain the original security file issued by the authorization service;

[0128] S2: Decrypt the security file to obtain plaintext security file meta-information. The decryption password is generated by the backend and the vehicle end according to a specific algorithm during the pre-activation phase;

[0129] S3: Use the root authentication certificate preset in the vehicle ECU to verify whether the public key in the security file meta-information is legal. If it is legal, continue to S4, otherwise fail;

[0130] S4: Use the public key to verify whether the signature information in the security file meta-information is correct. If it is correct, continue to S5; otherwise, fail;

[0131] S5: Check whether the identity information VIN and ECU ID recorded in the security file meta-information are consistent with the actual information of the vehicle. If they are consistent, proceed to S6; otherwise, fail;

[0132] S6: Check whether the validity period in the security file meta-information has expired, etc.; if it has not expired, the verification succeeds, otherwise it fails.

[0133] Embodiment 2

[0134] In order to further explain the in-vehicle service authorization and activation process, the in-vehicle server authorization and activation process executed by the in-vehicle terminal corresponds to the execution process of the server mentioned above, and the authorization of the in-vehicle service is completed through collaborative interaction. Figure 4 As shown, the present invention also provides a method for activating vehicle-mounted service authorization, comprising the following steps:

[0135] S401, initiating an activation request to a server to trigger a pre-activation process;

[0136] This step is mainly initiated by the user through operations such as entering the purchased serial number to start the activation, triggering the vehicle to initiate an activation request to the server, and the server initiates the pre-activation process.

[0137] S402: When the pre-activation is successful, receiving a security file generated by the server for in-vehicle service authorization activation;

[0138] After receiving the security file sent by the server, the vehicle replies to the server with a reply message indicating that it has been received.

[0139] S403, decrypting the security file and verifying its legitimacy;

[0140] After the vehicle receives the security file, it verifies the integrity of the file and uses the local tee unique key (unique password in an executable environment), which is the preset security password built into the vehicle system, to transparently encrypt the file and store it on the embedded multimedia card EMMC (Embeded MultiMedia Card); this ensures that the security file cannot be obtained even by disassembling the hardware.

[0141] Then, the received security file is decrypted and the legitimacy is verified. Each time the security file needs to be verified, the local tee unique key is first used to transparently decrypt it into the memory to obtain the security file issued by the authorization server. The decryption and verification process includes the following steps:

[0142] 1. Decrypt the security file to obtain the original security file meta-information;

[0143] 2. Use the root CA (root certification certificate) to verify whether the public key in the security file meta-information is legal; if the public key is legal, use the public key to verify whether the signature in the security file meta-information is correct; if the signature is correct, the security file is determined to be legal.

[0144] S404: Determine whether the identity information stored in the security file is consistent with the identity information of the vehicle. If they are consistent, activation is successful.

[0145] The identity information (VIN or ECU ID) recorded in the security file is compared with the actual information of the vehicle to see if they are consistent. If they are inconsistent, activation fails. If they are consistent, activation succeeds.

[0146] Furthermore, it also includes checking whether the validity period of the security document has expired. If it has not expired, the verification is successful, otherwise it fails. The validity period is pushed to the vehicle by the server during the pre-activation process. Specifically,

[0147] The pre-activation process includes the following steps:

[0148] Sending a vehicle service authorization activation request to the server;

[0149] Receive the pre-activation notification and security password for identity authentication sent by the server;

[0150] When the identity authentication is successful, the vehicle ECU configuration information is synchronized to meet the vehicle service authorization activation conditions.

[0151] Preferably, in order to improve the success rate and efficiency of activation task retry when the vehicle is powered on from off to on, or when it moves from an off-network environment to a networked environment, the vehicle actively notifies the background authorization service to check whether there is an activation task each time it is powered on.

[0152] It should be noted that the server, authorization server, and background authorization server mentioned in the present invention all refer to servers used for in-vehicle service authorization activation within the scope of the present invention, and different names are used only for the convenience of expression.

[0153] To sum up, the embodiments of the present invention fully combine the in-vehicle configuration information, the Internet of Vehicles communication mechanism, the key system, and the activation state machine to design a security file for the authorization and activation of in-vehicle services; and add a pre-activation process. Before the formal activation, the vehicle and the background authorization server check the required ECU software version and time information, etc., and the authorization activation cannot affect driving safety, thereby realizing a safer and more suitable in-vehicle service authorization method for the vehicle environment.

[0154] Embodiment 3

[0155] like Figure 5 As shown, another embodiment of the present invention provides a vehicle-mounted service authorization activation device, which is applied to a server and includes:

[0156] A pre-activation module, used to receive an in-vehicle service authorization activation request sent by a vehicle and pre-activate the vehicle;

[0157] A security file generation module, used to generate a security file for in-vehicle service authorization activation after the pre-activation is successful;

[0158] The sending module is used to send the security file to the vehicle so that the vehicle performs vehicle service authorization activation based on the security file.

[0159] Each module executes corresponding steps respectively according to the in-vehicle service authorization activation method described in the above embodiment 1. For details, please refer to the in-vehicle service authorization activation method described in the above embodiment, which will not be repeated here.

[0160] like Figure 6 As shown, another embodiment of the present invention provides a vehicle-mounted service authorization activation device, which is applied to a vehicle-mounted terminal, comprising:

[0161] A request module, used to initiate an activation request to the server to trigger the pre-activation process;

[0162] A receiving module, used for receiving a security file generated by a server for authorization and activation of an in-vehicle service after the pre-activation is successful;

[0163] A decryption module, used to decrypt the security file and verify its legitimacy;

[0164] The activation module is used to determine whether the identity information stored in the security file is consistent with the identity information of the vehicle. If they are consistent, the activation is successful.

[0165] Each module executes corresponding steps respectively according to the in-vehicle service authorization activation method described in the above embodiment 2. For details, please refer to the in-vehicle service authorization activation method described in the above embodiment, which will not be repeated here.

[0166] The present invention also provides a vehicle, comprising one or more processors, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program implements the above-described vehicle service authorization activation method when executed.

[0167] An embodiment of the present invention further discloses a computer-readable storage medium, wherein the computer-readable storage medium stores program code, wherein the program code includes instructions for executing part or all of the steps of the method or system in the above method embodiments.

[0168] The embodiments of the present invention further disclose a computer program product, wherein when the computer program product is run on a computer, the computer is enabled to execute part or all of the steps of the methods in the above method embodiments.

[0169] An embodiment of the present invention further discloses an application publishing platform, wherein the application publishing platform is used to publish a computer program product, wherein when the computer program product runs on a computer, the computer executes part or all of the steps of the method in the above method embodiments.

[0170] It should be understood that the "embodiments of the present invention" mentioned throughout the specification means that the specific features, structures or characteristics related to the embodiments are included in at least one embodiment of the present invention. Therefore, the "in embodiments of the present invention" appearing in various places throughout the specification does not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. Those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present invention.

[0171] In various embodiments of the present invention, it should be understood that the size of the serial numbers of the above-mentioned processes does not necessarily mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0172] In addition, the terms "system" and "network" are often used interchangeably in this article. It should be understood that the term "and / or" in this article is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0173] In the embodiments provided by the present invention, it should be understood that "B corresponding to A" means that B is associated with A, and B can be determined according to A. However, it should also be understood that determining B according to A does not mean determining B only according to A, and B can also be determined according to A and / or other information.

[0174] Those skilled in the art will appreciate that all or part of the steps in the various methods of the above embodiments may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, the storage medium including a read-only memory (ROM), a random access memory (RAM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), a one-time programmable read-only memory (OTPROM), an electronically-erasable programmable read-only memory (EEPROM), a compact disc (CD-ROM) or other optical disc storage, magnetic disk storage, magnetic tape storage, or any other computer-readable medium that can be used to carry or store data.

[0175] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0176] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0177] If the above integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-accessible memory. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a memory and includes several requests for a computer device (which can be a personal computer, a server or a network device, etc., specifically a processor in a computer device) to perform some or all of the steps of the above methods of various embodiments of the present invention.

[0178] The above is a detailed introduction to the in-vehicle service authorization activation method, device and vehicle disclosed in the embodiments of the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for general technical personnel in this field, according to the ideas of the present invention, there will be changes in the specific implementation methods and application scopes. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A method for activating vehicle service authorization, characterized in that: The following steps are involved: Receive an in-vehicle service authorization activation request sent by the vehicle and pre-activate the vehicle; The pre-activation process includes the following steps: determining whether the serial number and vehicle VIN code used for vehicle service authorization activation are valid; sending a security password for identity authentication to a vehicle with a valid serial number and VIN code; synchronizing the configuration information of the vehicle ECU with successful identity authentication to meet the vehicle service authorization activation conditions; after the pre-activation is successful, generating a security file for vehicle service authorization activation; sending the security file to the vehicle; associating the security file for vehicle service authorization activation with the serial number for vehicle service authorization activation; correspondingly binding the serial number and the vehicle VIN code; modifying the serial number status for vehicle service authorization activation; so that the vehicle performs vehicle service authorization activation based on the security file.

2. The vehicle-mounted service authorization activation method according to claim 1, characterized in that: Further including that a pre-activation process is performed each time the vehicle is powered on.

3. The vehicle-mounted service authorization activation method according to claim 1, characterized in that: The vehicle service authorization activation conditions include one or more of the following: the vehicle is powered on, the vehicle is connected to the network, the software and hardware versions of the vehicle ECU match, and the vehicle ECU time is synchronized with the server.

4. The vehicle-mounted service authorization activation method according to claim 1, characterized in that: The generation of a security file for in-vehicle service authorization activation includes the following steps: receiving identity information and inspection information sent by a vehicle for characterizing the identity of the vehicle; signing the identity information and inspection information using a unique private key corresponding to the vehicle; packaging and encrypting the signed information to generate the security file for in-vehicle service authorization activation, wherein the encryption password is interactively generated by the vehicle and the server through an encryption algorithm during the pre-activation process.

5. The vehicle-mounted service authorization activation method according to claim 4, characterized in that: Before executing the step of generating a security file for authorization activation, the following steps are also included: determining the status of the serial number used for authorization activation of the vehicle service; and determining whether to generate a security file for authorization activation based on the status of the serial number.

6. The vehicle-mounted service authorization activation method according to claim 1, characterized in that: The following steps are also included: Receive notification information of successful receipt of the security file fed back by the vehicle; and modify the status of the serial number used for the in-vehicle service authorization activation to sent and activated.

7. The vehicle-mounted service authorization activation method according to claim 5 or 6, characterized in that: When the status of the serial number used for in-vehicle service authorization activation is sent and activated, the serial number becomes invalid.

8. A vehicle-mounted service authorization activation device, characterized in that: include: A pre-activation module, used to receive an in-vehicle service authorization activation request sent by a vehicle and pre-activate the vehicle; The pre-activation process includes the following steps: determining whether the serial number and vehicle VIN code used for vehicle service authorization activation are valid; sending a security password for identity authentication to a vehicle with a valid serial number and VIN code; synchronizing the configuration information of the vehicle ECU with successful identity authentication to meet the vehicle service authorization activation conditions; a security file generation module, used to generate a security file for vehicle service authorization activation after the pre-activation is successful; associating the security file for vehicle service authorization activation with the serial number for vehicle service authorization activation; correspondingly binding the serial number and the vehicle VIN code; modifying the serial number status for vehicle service authorization activation; a sending module, used to send the security file to the vehicle so that the vehicle performs vehicle service authorization activation based on the security file.

Images