A vehicle-mounted service information processing method and device and electronic equipment

Abstract

The application discloses a kind of processing method, device and electronic equipment of vehicle-mounted service information, it is related to the technical field of information processing.The method comprises: after successful bidirectional authentication with vehicle-mounted end, create security channel with vehicle-mounted end;After receiving the service instruction sent by vehicle-mounted end through security channel, whether the interface information to be verified is generated based on the service data carried by service instruction is confirmed;If the interface information to be verified is generated, display the interface information to be verified, and when receiving the reply instruction to the interface information to be verified, corresponding reply information is sent to vehicle-mounted end;If the interface information to be verified is not needed to be generated, confirmation instruction is directly generated and sent to vehicle-mounted end through security channel.The application has the advantages of security, convenience, improving user experience.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information processing, in particular to a vehicle-mounted service information processing method and device and electronic equipment. BACKGROUND

[0002] With the improvement of the intelligence level of automobiles, the service functions carried by the in-vehicle central control are gradually increasing. For example, a digital car key: loads the automobile and the information thereof into a user's mobile phone or other mobile device, and the user controls the automobile to perform operations such as opening the door and starting the engine through communication means such as NFC. In addition, vehicle-mounted payment service functions are also gradually emerging, such as purchasing a music package in the vehicle and paying for charging fees.

[0003] Currently, when the vehicle-mounted end processes service information, the pre-configuration process is relatively complex. When the vehicle owner lends the vehicle to others, the corresponding user's account needs to be associated in the vehicle in advance or the account needs to be replaced, otherwise the pre-bound account is likely to be consumed by others; or when the user pays for a service, the user needs to scan the two-dimensional code displayed on the in-vehicle central control screen through the mobile device to perform a payment operation. The above methods are usually relatively cumbersome and have low security, which brings inconvenience to the user or the vehicle owner in use. SUMMARY

[0004] The purpose of the present application is to provide a vehicle-mounted service information processing method, device, electronic equipment and storage medium, which improves the convenience of vehicle-mounted service operation, enhances security, and improves the user's experience.

[0005] Embodiments of the present application are implemented as follows:

[0006] The first aspect of the embodiment of the present application provides a vehicle-mounted service information processing method, which is applied to a mobile end. The method comprises: after successful bidirectional authentication with a vehicle-mounted end, creating a secure channel with the vehicle-mounted end; after receiving a service instruction sent by the vehicle-mounted end through the secure channel, confirming whether to generate interface information to be verified based on service data carried by the service instruction; if the interface information to be verified is generated, displaying the interface information to be verified, and when a reply instruction to the interface information to be verified is received, sending corresponding reply information to the vehicle-mounted end; if the interface information to be verified does not need to be generated, directly generating a confirmation instruction and sending it to the vehicle-mounted end through the secure channel.

[0007] In an embodiment, confirming whether to generate the interface information to be verified based on the service data carried by the service instruction comprises: confirming whether the payment amount included in the service data exceeds a preset payment threshold; and confirming whether to generate the interface information to be verified according to whether the payment amount exceeds the preset payment threshold.

[0008] In an embodiment, whether to generate the to-be-verified interface information is determined according to whether the payment amount exceeds a preset payment threshold, including: if the preset payment threshold is exceeded, the to-be-verified interface information is generated; and if the preset payment threshold is not exceeded, the to-be-verified interface information does not need to be generated.

[0009] In an embodiment, after determining whether to generate the to-be-verified interface information based on the service data carried by the service instruction, the method further includes: if the to-be-verified interface information is generated, sending a to-be-verified instruction to the vehicle terminal, so that the vehicle terminal continuously sends the latest service instruction at a preset frequency until a reply information is received.

[0010] In an embodiment, when the reply instruction to the to-be-verified interface information is received, the corresponding reply information is sent to the vehicle terminal, including: if the reply instruction is verified, the reply information is generated based on the service data carried by the service instruction and is marked as passed, and the marked reply information is sent to the vehicle terminal.

[0011] In an embodiment, after the secure channel is created with the vehicle terminal, the method further includes: based on the received default payment instruction, associating the digital key program with the payment program corresponding to the default payment instruction through an interface call.

[0012] In an embodiment, before determining whether to generate the to-be-verified interface information based on the service data carried by the service instruction, the method further includes: decrypting the service instruction through the digital key program, so that the payment program obtains the service data carried by the service instruction through an interface.

[0013] The second aspect of the embodiments of the application provides a processing device for vehicle-mounted service information, which includes a creation module, a determination module, a display module, and a generation module. The creation module is configured to create a secure channel with a vehicle terminal after successful mutual authentication between the device and the vehicle terminal. The determination module is configured to determine whether to generate a to-be-verified interface information based on service data carried by a service instruction received through the secure channel. The display module is configured to display the to-be-verified interface information if the to-be-verified interface information is generated, and send corresponding reply information to the vehicle terminal when a reply instruction to the to-be-verified interface information is received. The generation module is configured to directly generate a confirmation instruction and send it to the vehicle terminal through the secure channel if the to-be-verified interface information does not need to be generated.

[0014] In an embodiment, the determination module is further configured to determine whether a preset payment threshold is exceeded based on a payment amount included in the service data, and determine whether to generate the to-be-verified interface information according to whether the payment amount exceeds the preset payment threshold.

[0015] In an embodiment, the determination module is further configured to generate the to-be-verified interface information if the preset payment threshold is exceeded, and not generate the to-be-verified interface information if the preset payment threshold is not exceeded.

[0016] In one embodiment, the vehicle service information processing device further includes: a sending module, configured to send a verification instruction to the vehicle terminal if verification interface information is generated, so that the vehicle terminal continuously sends the most recent service instruction at a preset frequency until a reply is received.

[0017] In one embodiment, the display module is further configured to: if the response instruction is verified, generate response information based on the business data carried by the business instruction and mark it as passed, and send the marked response information to the vehicle terminal.

[0018] In one embodiment, the in-vehicle service information processing device further includes: an association module, used to associate the digital key program with the payment program corresponding to the default payment instruction through a called interface based on the received default payment instruction.

[0019] In one embodiment, the in-vehicle business information processing device further includes: a decryption module, used to decrypt the business instruction through a digital key program, so that the payment program can obtain the business data carried by the business instruction through an interface.

[0020] A third aspect of this application provides an electronic device, which includes a processor and a memory for storing processor-executable instructions; wherein the processor is configured to execute a method for processing vehicle service information according to the first aspect of this application and any embodiment thereof.

[0021] A fourth aspect of this application provides a computer-readable storage medium storing a computer program. The computer program can be executed by a processor to perform the method for processing vehicle service information according to the first aspect of this application and any of its embodiments.

[0022] The advantages of this application compared to the prior art are:

[0023] This application addresses the issues of cumbersome procedures and poor security in payment processes for in-vehicle services, which vary depending on the car owner. By establishing a secure channel for business information transmission after successful two-way authentication between the user and the vehicle, and analyzing and processing received business information, this application enables users to directly match in-vehicle services with their user information using a digital key. The user experience is convenient, secure, and enhanced. Attached Figure Description

[0024] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of this application and should not be regarded as a limitation of the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0025] Figure 1 A schematic diagram illustrating an application scenario of the vehicle service information processing method provided in an embodiment of this application;

[0026] Figure 2 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application;

[0027] Figure 3 A flowchart illustrating a method for processing vehicle service information according to an embodiment of this application;

[0028] Figure 4 A flowchart illustrating a method for processing vehicle service information according to an embodiment of this application;

[0029] Figure 5 This is a schematic diagram of the structure of a vehicle service information processing device provided in an embodiment of this application.

[0030] Reference numerals: 1-Electronic device; 100-Mobile terminal; 110-eSE security chip; 120-User display interface; 10-Memory; 11-Bus; 12-Processor; 200-Vehicle terminal; 210-Vehicle system; 300-Service terminal; 400-Server terminal; 600-Processing device for vehicle service information; 610-Creation module; 620-Confirmation module; 630-Display module; 640-Generation module; 650-Sending module; 660-Association module; 670-Decryption module. Detailed Implementation

[0031] The technical solutions in the embodiments of this application will now be described with reference to the accompanying drawings.

[0032] Similar reference numerals and letters in the following figures indicate similar items; therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures. Furthermore, in the description of this application, terms such as "first," "second," etc., are used only to distinguish descriptions and should not be construed as indicating or implying relative importance.

[0033] The technical solution of this application will now be clearly and completely described with reference to the accompanying drawings.

[0034] Please see Figure 1 , Figure 1This is a schematic diagram illustrating an application scenario of the vehicle service information processing method provided in an embodiment of this application. For example... Figure 1 As shown, this application scenario includes a mobile terminal 100, an in-vehicle terminal 200, a service terminal 300, and a server terminal 400. The mobile terminal 100 can be a personal computer, tablet computer, smartphone, etc. The service terminal 300 or the server terminal 400 can be a server or a server cluster. In this application, the mobile terminal 100 can execute the in-vehicle service information processing method provided in this application embodiment and obtain data from the in-vehicle terminal 200. For ease of description, this application embodiment uses the mobile terminal 100 as the execution subject in its description.

[0035] In the application scenario of this application, the user's mobile terminal 100 is equipped with an eSE security chip 110, which enables the digital key program loaded on the chip to establish a two-way authentication relationship with the vehicle terminal 200 and establish a secure channel for business information transmission after opening the car door. When the user places an order for a certain service through the central control display of the vehicle system 210, the vehicle terminal 200 will respond with relevant data based on the service request placed by the user and the service terminal 300. After obtaining the corresponding data, the service data is encrypted and sent to the user's mobile terminal 100. After the payment program obtains the service data decrypted by the digital key program through the interface, it further judges the service data to confirm whether the user needs to further verify the service data on the mobile terminal 100. Then, the mobile terminal 100 sends the reply information to the vehicle terminal 200, so that the service terminal 300 deducts the payment through the server terminal 400 based on the reply data sent by the vehicle terminal 200.

[0036] Please see Figure 2 , Figure 2 This is a schematic diagram of the structure of an electronic device 1 provided in an embodiment of this application. The electronic device 1 can serve as the aforementioned mobile terminal 100, vehicle terminal 200, service terminal 300, and server terminal 400. For example... Figure 2 As shown, the electronic device 1 includes at least one processor 12 and a memory 10. Figure 2 Taking a processor 12 as an example. The processor 12 and the memory 10 are connected via a bus 11. The memory 10 stores instructions that can be executed by at least one processor 12. The instructions are executed by at least one processor 12 to cause at least one processor 12 to perform the vehicle service information processing method as described in the following embodiments.

[0037] Please see Figure 3 , Figure 3 This is a flowchart illustrating a method for processing vehicle service information according to an embodiment of this application. Figure 3 As shown, the method includes:

[0038] S410: After successful two-way authentication with vehicle terminal 200, a secure channel is created with vehicle terminal 200.

[0039] In this step, the user's mobile terminal 100 uses the digital key program within the mobile terminal 100 to achieve two-way authentication with the vehicle terminal 200 to open the car door or start the engine. At this time, the digital key program within the mobile terminal 100 and the vehicle system 210 of the vehicle terminal 200 will establish a secure channel so that when the user uses a certain service of the vehicle terminal 200 in the car, the vehicle terminal 200 and the mobile terminal 100 can transmit service data.

[0040] S420: After receiving the service instruction sent by the vehicle terminal 200 through the secure channel, confirm whether to generate the interface information to be verified based on the service data carried by the service instruction.

[0041] When a user clicks on a service on the central control display screen of the vehicle terminal 200, the vehicle terminal 200 automatically generates relevant service information or requests service-related data from the service terminal 300 via the network. The vehicle terminal 200 encrypts the automatically generated or acquired service data to obtain the service instruction and sends the instruction to the mobile terminal 100 through a secure channel. The mobile terminal 100 receives the service instruction, decrypts it, and based on the decrypted service data, determines whether to generate a verification interface. This verification interface information refers to the information that the user needs to confirm on the user display screen of the mobile terminal 100.

[0042] S430: If a verification interface is generated, display the verification interface information, and when a reply instruction for the verification interface is received, send the corresponding reply information to the vehicle terminal 200.

[0043] After generating the interface information to be verified based on business data, the mobile terminal 100 will display the interface information to be verified on the user display interface 120. After the user clicks or enters the reply command corresponding to the information to be verified on the user display interface 120, the mobile terminal 100 will encrypt the reply information corresponding to the reply command and send it to the vehicle terminal 200 through a secure channel.

[0044] S440: If there is no need to generate the interface information to be verified, directly generate a confirmation command and send it to the vehicle terminal 200 through the secure channel.

[0045] Mobile terminal 100 confirms based on business data without generating a verification interface. It directly generates a default confirmation command, encrypts it, and sends it to vehicle terminal 200 through a secure channel. Vehicle terminal 200 decrypts the confirmation command and sends the information carried by the confirmation command to business terminal 300 to complete the business service required by the user.

[0046] Please see Figure 4 , Figure 4 This is a flowchart illustrating a method for processing vehicle service information according to an embodiment of this application. Figure 4As shown, the methods for processing vehicle-mounted service information include:

[0047] S510: After successful two-way authentication with the vehicle terminal 200, a secure channel is created with the vehicle terminal 200.

[0048] In one embodiment, the user's mobile terminal 100 uses a digital key program stored in the built-in eSE security chip 110 to open the car door or start the engine, and the user connects to the vehicle to implement the in-vehicle service described in the following embodiment. The in-vehicle terminal 200 and the mobile terminal 100 containing the digital key complete two-way authentication and establish a secure channel for transmitting service data between the in-vehicle terminal 200 and the mobile terminal 100 when the user uses a service inside the vehicle.

[0049] A digital key refers to the relevant data stored in the eSE security chip 110 within a mobile terminal 100, such as a mobile phone or wearable device, for the mobile terminal 100 and the vehicle terminal 200 to complete two-way authentication and subsequent business services through the digital key program. The digital key includes information for vehicle authentication, such as the vehicle's identifier, the key's identifier, and authentication key information (which can be symmetric or asymmetric algorithms). When the user uses the digital key program to open the door, the mobile terminal 100 and the vehicle terminal 200 will perform two-way authentication and establish a secure channel. The communication methods of the digital key include, but are not limited to, BLE (Bluetooth communication) or NFC (Near Field Communication). If the communication method is NFC, the connection between the mobile terminal 100 and the vehicle terminal 200 will be reset after the user opens the door. The vehicle system 210 also requires an NFC Reader (NFC virtual card reader) so that when the user needs the vehicle terminal 200 to provide vehicle business services again, the user can place the mobile terminal 100 on the NFC Reader (NFC virtual card reader) to re-establish the connection with the vehicle terminal 200. If Bluetooth communication is used, the connection between the mobile terminal 100 and the vehicle terminal 200 can be maintained indefinitely.

[0050] Digital key pairing can refer to publicly available specifications such as the CCC Digital Key specification or other proprietary standards of other automakers. This application requires that digital key pairing provide the necessary conditions for establishing a secure channel and that subsequent functions such as forwarding business information be implemented through the digital key program.

[0051] S520: Based on the received default payment instruction, associate the digital key program with the payment program corresponding to the default payment instruction through the called interface.

[0052] After the user's mobile terminal 100 is mutually authenticated with the vehicle terminal 200 through the digital key program, the vehicle terminal 200 directly provides business services to the corresponding user based on the stored authentication information, and correctly deducts fees based on user information when the business service is a paid item. This requires the mobile terminal 100 to be pre-configured so that the payment program in the mobile terminal 100 and the digital key program can be associated through the interface called.

[0053] The default payment instruction refers to the information generated after the mobile terminal 100 and the vehicle terminal 200 complete two-way authentication and the user pre-selects a default payment program on the user display interface 120. The eSE security chip 110 receives the specific payment information carried by the default payment instruction, stores it, and uses it as the payment instance when the user pays for vehicle services. This payment instance can be used as the default payment method when the user does not need to verify the service information again, or it can be used as the default payment method when the user needs to verify the service information. This process is called the payment program personalization configuration process, which is basically the same as the ordinary payment program binding process.

[0054] Users can also choose not to select the default payment method when verifying business information. The eSE security chip 110 in the mobile device 100 pre-stores the AID (application identifier) ​​of multiple associated payment programs. When the actual payment requires the user to verify business information, it will be displayed on the user display interface 120, and the user can then select the specific application.

[0055] Applications within the 100-bit internal storage of mobile devices can communicate via shared interface objects. Since the providers of payment applications and digital key applications are generally not the same business entity, their respective business entities need to establish a cooperative relationship. If the payment application requires authentication, the necessary authentication information must be configured into the corresponding application instance of the digital key application via APDU (Application Protocol Data Unit). Before calling the payment application interface, the digital key application needs to perform an authentication process, using a symmetric key system, an asymmetric key system, or other custom authentication methods.

[0056] To implement the above process, the in-vehicle application needs to be pre-configured, providing interfaces for inter-program calls based on the existing payment program. These interfaces must be consistent with the contactless functionality of the relevant programs, enabling in-vehicle contactless payment without altering the payment program's transaction logic. Additionally, the mobile terminal 100 needs to be pre-added with the ability to pass through (or forward) business information APDUs (Application Protocol Data Units) within the secure channel using the digital key program for transmitting business data. The in-vehicle terminal 200 and the business terminal 300 need to jointly implement the payment program's transaction logic to adapt to different payment logics for different payment programs on the mobile terminal 100, such as implementing PBOC transaction logic or Alipay program transaction logic.

[0057] After completing the above configuration and association, the vehicle terminal 200 can provide business services to the corresponding users through the configured vehicle application. The vehicle application includes a digital key program and a payment program, so that users can pay for the corresponding business services when using the corresponding vehicle.

[0058] S530: After receiving the business instruction sent by the vehicle terminal 200, it decrypts the business instruction through the digital key program so that the payment program can obtain the business data carried by the business instruction through the interface.

[0059] After authentication is completed and a secure channel is established between the mobile terminal 100 and the vehicle terminal 200, when a user places an order for a service through the central control interface on the vehicle terminal 200, the vehicle terminal 200 can generate corresponding service data based on its stored information; alternatively, it can request the relevant service order information from the service terminal 300 (the service terminal 300 may also need to request payment data from the relevant service terminal 400 and send it to the vehicle terminal 200 together), and receive the relevant service response data. The vehicle terminal 200 encrypts the service data and converts it into a service instruction in APDU (Application Protocol Data Unit) mode, then sends it to the digital key program loaded on the mobile terminal 100 through the secure channel. The digital key program decrypts the service instruction to obtain the service data carried by the instruction and forwards it to the payment program through the interface.

[0060] In one embodiment, when the vehicle terminal 200 receives an order instruction, it can determine whether to perform a service deduction operation on the mobile terminal 100 based on a preset vehicle terminal 200 security policy. The security policy can be configured as a distance security policy according to the user's needs. For example, the vehicle terminal 200 can preset that the mobile terminal 100, where the current digital key is located, can only initiate payment when it is inside the vehicle or when the distance between it and the vehicle terminal 200 is less than a preset distance threshold. Otherwise, no payment will be made, so as to realize seamless payment for users at close range.

[0061] S540: Based on the business data carried by the business instruction, confirm whether to generate the interface information to be verified.

[0062] Mobile device 100 will also pre-configure payment security policies according to user needs. For example, a payment threshold can be pre-set. When the payment amount included in the business data received by the payment program is lower than the payment threshold, seamless payment can be made without user verification or confirmation. However, when the payment amount is higher than the payment threshold, the user needs to confirm or verify relevant identity information on the user display interface 120 of mobile device 100.

[0063] In this step, after obtaining the business data carried by the business instruction, the payment program determines whether the payment amount exceeds a preset payment threshold based on the business data. Then, depending on whether the payment amount exceeds the preset payment threshold, it determines whether to generate a verification interface. Specifically: if the payment amount exceeds the preset payment threshold, a verification interface is generated for the user to subsequently confirm payment information or verify user identity on the user display interface 120 of the corresponding mobile terminal 100; if the payment amount does not exceed the preset payment threshold, the mobile terminal 100 payment program does not need to generate a verification interface.

[0064] S550: If a verification interface is generated, the verification interface is displayed, and a verification instruction is sent to the vehicle terminal 200, so that the vehicle terminal 200 continuously sends the most recent service instruction at a preset frequency until a reply is received.

[0065] If the transaction amount exceeds a preset payment threshold, the payment program needs to generate verification interface information (e.g., HCI - Human-Computer Interaction Information) to be displayed on the user display interface 120 of the mobile terminal 100, allowing the user to confirm the payment information or verify user information. The payment program can first return a message requiring user confirmation as a verification instruction to the digital key program, which then forwards it to the vehicle terminal 200. Upon receiving the verification instruction, the vehicle terminal 200 periodically sends the most recent transaction instruction to the digital key program of the mobile terminal 100 at a preset frequency until it receives the corresponding response information, at which point it stops automatically sending the instruction.

[0066] S551: If there is no need to generate the interface information to be verified, directly generate a confirmation command and send it to the vehicle terminal 200 through the secure channel.

[0067] If the payment amount does not exceed the preset payment threshold, the mobile payment program does not need to generate a verification interface. Instead, it directly generates a confirmation instruction based on stored business data. This confirmation instruction can include the user's account information, payment method, business name, payment amount, and direct payment permission—all relevant data for deducting fees for that service. The payment program sends the confirmation instruction to the digital key program via an interface. The digital key program then encrypts the confirmation instruction and sends it to the business system at the vehicle terminal 200. The vehicle terminal 200 business system decrypts the instruction and sends it to the corresponding business terminal 300 via a network interface. The business terminal 300 then connects to the corresponding server terminal 400 payment channel to deduct fees from the user for the relevant service.

[0068] S560: If the reply instruction is verified, generate reply information based on the business data carried by the business instruction and mark it as passed, and send the marked reply information to the vehicle terminal 200.

[0069] If the user confirms payment on the user display interface 120 of the mobile terminal 100, or if the user information verification is successful, the payment process generates a response message based on the aforementioned verification or confirmation information and the business data carried by the business instruction. The response message includes relevant data regarding the deduction of fees from the user for the business service, as well as identifier data indicating that the user has authorized the deduction; that is, the response message is marked as approved. The aforementioned identifier data is associated with the transaction amount and transaction counter, and both the mobile terminal 100 and the vehicle terminal 200 have corresponding security mechanisms to prevent tampering, fraudulent transactions, and other malicious operations.

[0070] The payment program sends the reply information to the digital key program through the interface, so that the digital key program encrypts the reply information and sends it to the business system of the vehicle terminal 200. The vehicle terminal 200 system decrypts the information and sends it to the corresponding business terminal 300 through the network interface. The business terminal 300 then connects to the corresponding server terminal 400 payment channel to perform the relevant business service deduction operation on the user.

[0071] After the above deduction operation is completed, the vehicle terminal 200 and the mobile terminal 100 receive a response message to confirm that the business transaction has been processed, and the corresponding user-allowed deduction related identification data needs to be cleared.

[0072] S561: If the reply instruction is that the verification failed, generate reply information based on the business data carried by the business instruction and mark it as failed, and send the marked reply information to the vehicle terminal 200.

[0073] If a user refuses to pay on the user display interface 120 of the mobile terminal 100, or fails to verify user information, the payment program generates a response message based on the above information and the business data carried by the business instruction. The response message includes relevant data on the deduction of fees from the user for the business service and identification data of the refusal to deduct fees. That is, the response message is a response message marked as unsuccessful.

[0074] The payment process sends the response information to the digital key program via an interface. The digital key program then encrypts the response information and sends it to the business system of the vehicle terminal 200. The business system of vehicle terminal 200 decrypts the response and generates a notification of payment failure based on the failed response, which is displayed on the central control interface of vehicle terminal 200 to inform the user of the payment failure. Vehicle terminal 200 can also directly send the failed response information to business terminal 300, where the business terminal confirms the termination of the service and related payment operations.

[0075] The above embodiments all rely on the eSE security chip 110 to achieve secure payment for business services. In other embodiments of this application, a TEE (Trusted Execution Environment) can be used to execute the in-vehicle business information processing method, and communication between different TAs (Trusted Applications) running within the TEE is implemented by the TAs themselves. In the above embodiments, the interface between the associated digital key program and the payment program is in the form of data transmission, which can also be replaced by forwarding by the upper-layer application.

[0076] In this embodiment, the vehicle owner does not need to pre-enter their payment information on the in-vehicle terminal 200 to pay for services ordered by the user on the in-vehicle terminal 200. The digital key and the in-vehicle terminal 200 perform two-way authentication and establish a secure channel, ensuring high security. This application achieves seamless payment through the distance security strategy of the in-vehicle terminal 200 and the payment security strategy of the mobile terminal. When the vehicle is used by a different person, the service fee deduction corresponds to the current user's account funds and will not deduct funds from other associated accounts, eliminating the risk of incorrect deductions. The user will also be prompted for confirmation when the payment amount exceeds a preset threshold. The mobile terminal 100, such as the user's mobile phone (wearable device), can also perform the above operations without an internet connection. In this embodiment, the user's mobile payment process for in-vehicle services is convenient and secure, improving the user experience.

[0077] Please see Figure 5 , Figure 5 This is a schematic diagram of the structure of a vehicle service information processing device 600 provided in an embodiment of this application. Figure 5 As shown, the device includes: a creation module 610, a confirmation module 620, a display module 630, and a generation module 640.

[0078] The creation module 610 is used to create a secure channel with the vehicle terminal 200 after successful two-way authentication; the confirmation module 620 is used to confirm whether to generate interface information to be verified based on the business data carried by the business instruction after receiving the business instruction sent by the vehicle terminal 200 through the secure channel; the display module 630 is used to display the interface information to be verified if it is generated, and send the corresponding reply information to the vehicle terminal 200 when a reply instruction to the interface information to be verified is received; the generation module 640 is used to directly generate a confirmation instruction and send it to the vehicle terminal 200 through the secure channel if it is not necessary to generate the interface information to be verified.

[0079] The confirmation module 620 is also used to: confirm whether the payment amount included in the business data exceeds the preset payment threshold; and confirm whether to generate verification interface information based on whether the payment amount exceeds the preset payment threshold.

[0080] The confirmation module 620 is also used to: generate verification interface information if the payment threshold is exceeded; and not generate verification interface information if the payment threshold is not exceeded.

[0081] The vehicle service information processing device 600 further includes a sending module 650, which, if a verification interface information is generated, sends a verification instruction to the vehicle terminal 200, so that the vehicle terminal 200 continuously sends the most recent service instruction at a preset frequency until a reply is received.

[0082] The display module 630 is also used to: if the reply instruction is verified, generate reply information based on the business data carried by the business instruction and mark it as passed, and send the marked reply information to the vehicle terminal 200.

[0083] The vehicle service information processing device 600 also includes an association module 660, which is used to associate the digital key program with the payment program corresponding to the default payment instruction through a called interface based on the received default payment instruction.

[0084] The vehicle-mounted business information processing device 600 also includes a decryption module 670, used to decrypt business instructions through a digital key program, so that the payment program can obtain the business data carried by the business instructions through an interface.

[0085] The implementation process of the functions and roles of each module in the above-mentioned device is detailed in the implementation process of the corresponding steps in the above-mentioned vehicle service information processing method, and will not be repeated here.

[0086] The apparatuses and methods disclosed in the several embodiments provided in this application can also be implemented in other ways. The apparatus embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of apparatuses, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code, which contains one or more executable instructions for implementing a specified logical function. In some alternative implementations, the functions marked in the blocks may occur in a different order than those marked in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram and / or flowchart, and combinations of blocks in block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0087] In addition, the functional modules in the various embodiments of this application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0088] This application provides a computer-readable storage medium storing a computer program. The computer program can be executed by a processor 12 to perform a method for processing vehicle-mounted business information.

[0089] If a function is implemented as a software module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, a portable hard drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0090] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

Claims

1. A method for processing vehicle-mounted service information, characterized in that, The method is applied to a mobile device, and the method includes: After successful two-way authentication with the vehicle terminal, a secure channel is created between the vehicle terminal and the mobile terminal to transmit business data; the mobile terminal uses a digital key program to achieve two-way authentication with the vehicle terminal to open the car door or start the engine. After successful two-way authentication between the mobile terminal and the vehicle terminal, the vehicle terminal provides vehicle service based on the stored authentication information, and when the vehicle service is a paid item, it correctly deducts the fee from the successfully authenticated mobile terminal; wherein, when the vehicle terminal receives an order instruction, it determines whether to perform the vehicle service deduction operation on the mobile terminal based on a preset distance security policy. After receiving the service instruction sent by the vehicle terminal through the secure channel, the system determines whether to generate a verification interface based on the service data carried by the service instruction. If the interface information to be verified is generated, the interface information to be verified is displayed, and when a reply instruction for the interface information to be verified is received, the corresponding reply information is sent to the vehicle terminal. If there is no need to generate the interface information to be verified, a confirmation command is directly generated and sent to the vehicle terminal through the secure channel. After establishing a secure channel with the vehicle terminal, the method further includes: associating the digital key program with the payment program corresponding to the default payment instruction through a called interface based on the received default payment instruction; Before confirming whether to generate the interface information to be verified based on the business data carried by the business instruction, the method further includes: decrypting the business instruction through the digital key program, so that the payment program can obtain the business data carried by the business instruction through the interface.

2. The method according to claim 1, characterized in that, The step of confirming whether to generate verification interface information based on the business data carried by the business instruction includes: Based on the payment amount included in the business data, confirm whether it exceeds the preset payment threshold; Whether to generate a verification interface depends on whether the payment amount exceeds a preset payment threshold.

3. The method according to claim 2, characterized in that, The step of determining whether to generate verification interface information based on whether the payment amount exceeds a preset payment threshold includes: If the preset payment threshold is exceeded, the verification interface information is generated. If the preset payment threshold is not exceeded, there is no need to generate the verification interface information.

4. The method according to claim 1, characterized in that, After confirming whether to generate verification interface information based on the business data carried by the business instruction, the method further includes: If the interface information to be verified is generated, a verification instruction is sent to the vehicle terminal, so that the vehicle terminal continuously sends the most recent service instruction at a preset frequency until the reply information is received.

5. The method according to claim 1, characterized in that, The step of sending the corresponding reply information to the vehicle terminal upon receiving a reply instruction for the interface information to be verified includes: If the response instruction passes verification, a response message is generated based on the business data carried by the business instruction and marked as passed. The marked response message is then sent to the vehicle terminal.

6. A device for processing vehicle-mounted service information, characterized in that, For use on mobile devices, the device includes: A creation module is used to create a secure channel with the vehicle terminal after successful two-way authentication, so that the vehicle terminal and the mobile terminal can transmit business data. The mobile terminal realizes two-way authentication with the vehicle terminal through the digital key program to open the car door or start the engine. After successful two-way authentication between the mobile terminal and the vehicle terminal, the vehicle terminal provides vehicle service based on the stored authentication information, and when the vehicle service is a paid item, it correctly deducts the fee from the successfully authenticated mobile terminal; wherein, when the vehicle terminal receives an order instruction, it determines whether to perform the vehicle service deduction operation on the mobile terminal based on a preset distance security policy. The confirmation module is used to confirm whether to generate a verification interface information based on the service data carried by the service instruction after receiving the service instruction sent by the vehicle terminal through the security channel. The display module is used to display the interface information to be verified if the interface information to be verified is generated, and to send the corresponding reply information to the vehicle terminal when a reply instruction for the interface information to be verified is received. The generation module is used to directly generate a confirmation command and send it to the vehicle terminal through the secure channel if it is not necessary to generate the interface information to be verified. The creation module is further configured to: associate the digital key program with the payment program corresponding to the default payment instruction through a called interface based on the received default payment instruction; the confirmation module is further configured to: decrypt the business instruction through the digital key program so that the payment program can obtain the business data carried by the business instruction through the interface.

7. An electronic device, characterized in that, The electronic device includes: processor; Memory used to store processor-executable instructions; The processor is configured to execute the vehicle service information processing method according to any one of claims 1-5.

8. A computer-readable storage medium, characterized in that, The storage medium stores a computer program, which can be executed by a processor to perform the vehicle service information processing method according to any one of claims 1-5.

Images