Wireless communication method, device and electronic equipment for vehicle data

Abstract

The present invention provides a vehicle data wireless communication method, device and electronic device, and relates to the technical field of data transmission security. The method comprises: receiving a random number sent by a universal domain controller based on a preset message format, wherein the random number is determined according to the preset message format and comprises eight bytes; generating an index number according to the first byte of the random number, and determining a target key group from a plurality of preset key groups through the index number; encrypting the target key group and the random number to obtain a new key; and wirelessly communicating vehicle data through the new key, thereby solving the problem that wireless transmission is easily attacked and cracked, and ensuring the security of data transmission.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission security, and in particular to a vehicle data wireless communication method, device and electronic equipment. Background Art

[0002] With the advancement of automobile technology, vehicle data can be transmitted using CAN communication and Ethernet communication.

[0003] However, too much Ethernet communication will increase the wiring harness cost in the vehicle body. In order to save such wiring harness cost, wireless communication is used instead of Ethernet communication for data transmission. However, wireless communication has the disadvantage of being easily attacked by criminals. Therefore, there is a problem of how to carry out safe and reliable wireless communication data transmission while controlling the cost. Summary of the invention

[0004] In view of this, the purpose of the present invention is to provide a wireless communication method, device and electronic device for vehicle data, which solves the problem that wireless transmission is easily attacked and cracked, and ensures the security of data transmission.

[0005] In a first aspect, an embodiment provides a wireless communication method for vehicle data, the method comprising:

[0006] Receiving a random number sent by a universal domain controller based on a preset message format, wherein the random number is determined according to the preset message format and includes eight bytes;

[0007] Generate an index number according to the first byte of the random number, and determine a target key group from a plurality of preset key groups by using the index number;

[0008] Encrypting the target key group and the random number to obtain a new key;

[0009] Wireless communication of vehicle data is performed via the new secret key.

[0010] In an optional implementation manner, the step of encrypting the target key group and the random number to obtain a new key includes:

[0011] Encrypting the first eight bytes of the target key group and the random number based on the digital encryption standard to obtain a new byte;

[0012] The new byte replaces the first eight bytes of the target key group to obtain a new key.

[0013] In an optional embodiment, the step of wirelessly communicating vehicle data using the new key includes:

[0014] The first byte of the new secret key is used to perform login authentication on the wireless access point.

[0015] In an optional implementation, the step of wirelessly communicating vehicle data using the new key further includes:

[0016] Based on a preset encryption algorithm and the new secret key, an encryption operation is performed on the vehicle data, wherein the byte length of the new secret key is determined by the preset encryption algorithm.

[0017] In an optional implementation, the step of generating an index number according to the first byte of the random number includes:

[0018] The first byte of the random number is processed accordingly according to the number of preset key groups to generate an index number.

[0019] In an optional implementation manner, before the step of receiving the random number sent by the universal domain controller based on the preset message format, the method further includes:

[0020] The target communication request is sent to the universal domain controller, triggering the universal domain controller to output the random number.

[0021] In an optional implementation manner, the random number is generated by an encryption chip in the universal domain controller when the universal domain controller receives a power-on signal.

[0022] In a second aspect, an embodiment provides a wireless communication device for vehicle data, the device comprising:

[0023] A receiving module, receiving a random number sent by a universal domain controller based on a preset message format, wherein the random number is determined according to the preset message format and includes eight bytes;

[0024] An index module, generating an index number according to the first byte of the random number, and determining a target key group from a plurality of preset key groups by using the index number;

[0025] An encryption module, encrypting the target key group and the random number to obtain a new key;

[0026] The communication module performs wireless communication of vehicle data through the new secret key.

[0027] In a third aspect, an embodiment provides an electronic device, including a memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the computer program, the steps of the method described in any of the aforementioned implementation methods are implemented.

[0028] In a fourth aspect, an embodiment provides a machine-readable storage medium, wherein the machine-readable storage medium stores machine-executable instructions. When the machine-executable instructions are called and executed by a processor, the machine-executable instructions prompt the processor to implement the steps of the method described in any one of the aforementioned implementations.

[0029] An embodiment of the present invention provides a vehicle data wireless communication method, device and electronic device, which determines a target key group from multiple key groups through a random number generated by a universal domain controller, and then combines the target key group with the random number to perform an encryption operation to obtain a new key, and realizes wireless communication of vehicle data based on the new key; through the above-mentioned multiple encryption rules, the problem of poor security of wireless communication data transmission is solved, and data security and reliability are provided.

[0030] Other features and advantages of the present disclosure will be set forth in the following description, or some features and advantages may be inferred or unambiguously determined from the description, or may be learned by implementing the above-mentioned technology of the present disclosure.

[0031] In order to make the above-mentioned objectives, features and advantages of the present disclosure more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1 A flow chart of a wireless communication method for vehicle data provided by an embodiment of the present invention;

[0034] Figure 2 A flow chart of another vehicle data wireless communication method provided by an embodiment of the present invention;

[0035] Figure 3 A functional module diagram of a wireless communication device for vehicle data provided by an embodiment of the present invention;

[0036] Figure 4 A schematic diagram of the hardware architecture of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0037] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0038] With the development of automobile intelligence and networking, the amount of data in the car is getting larger and larger. In addition to the use of CAN communication for data with high real-time requirements, many vehicles have added a large number of Ethernet connections to achieve large data transmission, but this adds a lot of wiring harness costs to the car body. For example, if the ECU on the front dashboard needs to communicate with the ECU on the rear of the car body, it needs a wiring harness of about three meters. This method greatly increases the cost and weight of the car body, and at the same time increases the difficulty of arranging the wiring harness of the whole vehicle.

[0039] On this basis, the strategy of combining wireless communication and wired CAN communication can effectively solve the real-time and security problems. However, the data transmission security of wireless communication is limited.

[0040] However, when using WiFi communication, compared with traditional wired communication, WiFi is also vulnerable to network attacks by criminals. The inventor has found that in order to ensure the security of vehicle communication, it is necessary to further encrypt the information based on the general information security algorithm to ensure information security.

[0041] Based on this, the embodiments of the present invention provide a vehicle data wireless communication method, device and electronic device, which ensure the wireless transmission security of vehicle data.

[0042] To facilitate understanding of this embodiment, a wireless communication method based on vehicle data disclosed in an embodiment of the present invention is first introduced in detail. This method can be applied to the electronic control unit (ECU) of the vehicle; it can be understood that the vehicle includes a universal domain controller and multiple electronic control units that can communicate with the universal domain controller, and each electronic control unit can use the method provided in the embodiment of the present invention to ensure the reliability of wireless transmission of vehicle data.

[0043] Figure 1 A flow chart of a wireless communication method for vehicle data provided by an embodiment of the present invention.

[0044] like Figure 1 As shown, the method comprises the following steps:

[0045] Step S102: receiving a random number sent by a universal domain controller based on a preset message format.

[0046] The random number is determined according to a preset message format, and the random number includes eight bytes. The preset message format generally includes the number of bytes transmitted at one time and the address ID for sending and receiving, as shown in Table 1 below.

[0047] Table 1

[0048]

[0049] In some embodiments, when the universal domain controller sends a message, the electronic control unit of the corresponding ID will receive the message according to the corresponding receiving ID in the preset message format; the embodiment of the present invention sets the random number to the number of bytes that can be transmitted each time the message is transmitted, so that the subsequent encryption algorithm can be implemented in one message transmission, saving service resources.

[0050] Step S104, generating an index number according to the first byte of the random number, and determining a target key group from a plurality of preset key groups by using the index number.

[0051] It can be understood that the eight-byte random number has a total of 64 bits, and the index number can be determined based on the first eight bits of the 64-bit random number, so as to find the target key group based on the index number. Among them, the universal domain controller and each electronic control unit are pre-set with the same multiple key groups, and the key group corresponds to a sorting number; if the index number matches the sorting number, the key group corresponding to the matching sorting number is the target key group.

[0052] Step S106, encrypt the target key group and the random number to obtain a new key.

[0053] In order to ensure the security of data transmission, the embodiment of the present invention adopts a new key to perform wireless transmission of data.

[0054] Step S108 , wireless communication of vehicle data is performed using the new key.

[0055] In a preferred embodiment of actual application, a target key group is determined from multiple key groups through a random number generated by a universal domain controller, and then the target key group is combined with the random number for encryption operation to obtain a new key, and wireless communication of vehicle data is achieved based on the new key; through the above-mentioned multiple encryption rules, the problem of poor security of wireless communication data transmission is solved, thereby providing data security and reliability.

[0056] In some embodiments, the secret key may be updated multiple times at specific triggering times to make the data in the wireless communication less susceptible to successful attacks. As an example, before step S102, the method further includes:

[0057] Step 1.1), sending the target communication request to the universal domain controller, triggering the encryption chip in the universal domain controller to generate the random number.

[0058] If there is a request for the electronic control unit to communicate with the universal domain controller, the universal domain controller is triggered to generate a random number to ensure data encryption operations before wireless data communication.

[0059] As an optional embodiment, at least one target communication request may be preset, that is, a communication request issued by an electronic control unit that matches the preset target communication request, or a communication request of business data that matches the preset target communication request, to trigger the generation of a random number. Among them, since only the business data corresponding to the preset target communication request involves encryption, only such business data may be subsequently encrypted to achieve the purpose of saving computing resources.

[0060] As another optional embodiment, the secret key may be updated every time the universal domain controller of the vehicle is powered on or the network service is awakened, so that the data in the wireless communication is less likely to be successfully attacked. Exemplarily, the random number is also generated when the universal domain controller is powered on, and then subsequent operations such as step S102 are performed.

[0061] In some embodiments, a new key may be obtained through a more flexible encryption method to make data transmission more secure and reliable. As an example, step S106 includes:

[0062] Step 2.1), encrypt the first eight bytes of the target key group and the random number based on the digital encryption standard DES to obtain new bytes.

[0063] The new byte is eight bytes, that is, 64 bits of data.

[0064] Step 2.2), replace the first eight bytes of the target key group with the new byte to obtain a new key.

[0065] It can be understood that the number of bits of the new key remains consistent with that of the target key group, and only the first 64 bits of the target key group are replaced by the new bytes.

[0066] It should be noted that the ECU combines the first 64 bits of the corresponding target key group with the 64-bit random number obtained from the universal domain controller through the CAN protocol, encrypts it through the DES algorithm to generate new 64-bit data, replaces the original first 64 bits in the target key group, and obtains a new key.

[0067] In some embodiments, a wireless communication scheme for vehicle data can be implemented based on the new secret key, so that the data in the wireless communication mode will not be easily attacked successfully, thereby protecting data security. As an example, step S108 can also be implemented by the following steps, specifically including:

[0068] Step 3.1), using the first byte of the new secret key to log in and authenticate the wireless access point.

[0069] Among them, the electronic control unit can perform identity authentication by using the first byte, log in to the wireless access point, and realize the wireless communication function.

[0070] Step 3.2), based on a preset encryption algorithm and the new secret key, encrypt the vehicle data, wherein the byte length of the new secret key is determined by the preset encryption algorithm.

[0071] Among them, the byte length of the new key, that is, the length of the key group, is determined by the number of key bits required by the data encryption algorithm.

[0072] For example, if WiFi data encryption uses this new key to encrypt all data using the AES256 algorithm, the byte length of the new key and each key group is 32 bytes, or 256 bits.

[0073] For example, if WiFi data encryption uses this key to encrypt all data using the AES128 algorithm, the byte length of the new key and each key group is 16 bytes, or 128 bits.

[0074] In some embodiments, based on the above step S104, the target key group can be determined according to the index number, so that a new key can be flexibly generated based on the target key group. As an example, the step of generating the index number according to the first byte of the random number includes:

[0075] Step 4.1), process the first byte of the random number accordingly according to the number of preset key groups to generate an index number.

[0076] It should be noted that, according to the above steps, the index number is used to locate the target key group, so the index number and the sorting number of the preset key group can be matched, or there is a corresponding relationship between the two.

[0077] Among them, if the number of preset key groups is 64, the index number obtained by dividing the first 8 bits of the random number by 4 and rounding it up can correspond to the number of preset key groups.

[0078] Figure 2 A flow chart of another vehicle data wireless communication method provided by an embodiment of the present invention.

[0079] Reference Figure 2 First, the encryption chip HSM in the domain controller generates a 64-bit random number; the 64-bit random number is sent to other electronic control units through the CAN ID in the preset message format; secondly, the electronic control unit extracts the byte0 data of the received message, a total of 8 bits, divided by 4 and rounded to get an index number of 0-63, and the electronic control unit retrieves the 256-bit key in the pre-stored target key group according to the index number; the obtained 64-bit random number is used to replace the original initial 64 bits of the initial 64 bits of the target key group 256-bit key using the DES algorithm to obtain a new 64-bit new byte to obtain a new key; and the access key of the WiFi access point is set to the first 64 bits of the new key obtained by the DES algorithm; after successful access, the 256-bit new key is used to encrypt all communication data.

[0080] The embodiment of the present invention presets 64 key groups (each with 256 bits of keys) in the domain controller and the ECU communicating with it. These 64 key groups generate a 64-bit random number through the encryption chip HSM of the domain controller every time the vehicle network is awakened (when CAN is awakened), and the specific message CANID sends this random number to other ECUs through a frame message. The first 8 bits of the random number are extracted to generate a key index number. The domain controller and the ECU communicating with the domain controller will find the corresponding target key group according to the index number, and then generate a new key based on the target key group and the random number. The new key determined in the above manner can greatly enhance the security of WiFi communication, and improve the security of WiFi authentication keys and data communications in a targeted manner.

[0081] like Figure 3 As shown, the embodiment of the present invention further provides a wireless communication device 200 for vehicle data, the device comprising:

[0082] The receiving module 201 receives a random number sent by a general domain controller based on a preset message format, wherein the random number is determined according to the preset message format and includes eight bytes;

[0083] An index module 202, generating an index number according to the first byte of the random number, and determining a target key group from a plurality of preset key groups by using the index number;

[0084] The encryption module 203 encrypts the target key group and the random number to obtain a new key;

[0085] The communication module 204 performs wireless communication of vehicle data through the new key.

[0086] In some embodiments, the encryption module 203 is further specifically used to encrypt the first eight bytes of the target key group and the random number based on the digital encryption standard to obtain a new byte; and replace the first eight bytes of the target key group with the new byte to obtain a new key.

[0087] In some embodiments, the communication module 204 is further configured to perform login authentication on the wireless access point through the first byte of the new secret key.

[0088] In some embodiments, the communication module 204 is further used to perform encryption operations on the vehicle data based on a preset encryption algorithm and the new secret key, wherein the byte length of the new secret key is determined by the preset encryption algorithm.

[0089] In some embodiments, the index module 202 is further configured to perform corresponding processing on the first byte of the random number according to the number of preset key groups to generate an index number.

[0090] In some embodiments, the device also includes a trigger module, which is used to send a target communication request to the universal domain controller before the receiving module receives the random number sent by the universal domain controller based on a preset message format, triggering the encryption chip in the universal domain controller to generate the random number.

[0091] In some embodiments, the random number is also generated when the universal domain controller is powered on.

[0092] Figure 4 Schematic diagram of the hardware architecture of the electronic device 300 provided in an embodiment of the present invention. Figure 4 As shown, the electronic device 300 includes: a machine-readable storage medium 301 and a processor 302, and may also include a non-volatile storage medium 303, a communication interface 304 and a bus 305; wherein the machine-readable storage medium 301, the processor 302, the non-volatile storage medium 303 and the communication interface 304 communicate with each other through the bus 305. The processor 302 can execute the method described in the above embodiment by reading and executing the machine-executable instructions in the machine-readable storage medium 301.

[0093] The machine-readable storage medium mentioned in this article can be any electronic, magnetic, optical or other physical storage device that can contain or store information, such as executable instructions, data, etc. For example, the machine-readable storage medium can be: RAM (Radom Access Memory), volatile memory, non-volatile memory, flash memory, storage drive (such as hard disk drive), any type of storage disk (such as CD, DVD, etc.), or similar storage medium, or a combination thereof.

[0094] The non-volatile medium may be a non-volatile memory, a flash memory, a storage drive (such as a hard drive), any type of storage disk (such as a CD, DVD, etc.), or a similar non-volatile storage medium, or a combination thereof.

[0095] It can be understood that the specific operation methods of each functional module in this embodiment can refer to the detailed description of the corresponding steps in the above method embodiment, and will not be repeated here.

[0096] The computer-readable storage medium provided in the embodiment of the present invention stores a computer program. When the computer program code is executed, the method described in any of the above embodiments can be implemented. For specific implementation, please refer to the method embodiment, which will not be described in detail here.

[0097] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system and device described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0098] In addition, in the description of the embodiments of the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0099] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance.

[0100] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present invention, which are used to illustrate the technical solutions of the present invention rather than to limit them. The protection scope of the present invention is not limited thereto. Although the present invention has been described in detail with reference to the aforementioned embodiments, those of ordinary skill in the art should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the aforementioned embodiments within the technical scope disclosed by the present invention, or can easily conceive of changes, or make equivalent replacements for some of the technical features therein. Such modifications, changes or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be covered within the protection scope of the present invention.

Claims

1. A wireless communication method for vehicle data, characterized in that: The method comprises: Receiving a random number sent by a universal domain controller based on a preset message format, wherein the random number is determined according to the preset message format and includes eight bytes; Generate an index number according to the first byte of the random number, and determine a target key group from a plurality of preset key groups by using the index number; Encrypting the target key group and the random number to obtain a new key; Wireless communication of vehicle data using the new secret key; Before the step of receiving the random number sent by the universal domain controller based on the preset message format, the method further includes: If the target communication request is a communication request for business data that matches the preset target communication request, the generation of a random number is triggered.

2. The method according to claim 1, characterized in that The step of encrypting the target key group and the random number to obtain a new key includes: Encrypting the first eight bytes of the target key group and the random number based on the digital encryption standard to obtain a new byte; The new byte replaces the first eight bytes of the target key group to obtain a new key.

3. The method according to claim 1, characterized in that The step of wirelessly communicating vehicle data using the new secret key comprises: The first byte of the new secret key is used to perform login authentication on the wireless access point.

4. The method according to claim 1 or 3, characterized in that: The step of wirelessly communicating vehicle data using the new secret key also includes: Based on a preset encryption algorithm and the new secret key, an encryption operation is performed on the vehicle data, wherein the byte length of the new secret key is determined by the preset encryption algorithm.

5. The method according to claim 1, characterized in that The step of generating an index number according to the first byte of the random number comprises: The first byte of the random number is processed accordingly according to the number of preset key groups to generate an index number.

6. The method according to claim 1, characterized in that Before the step of receiving a random number sent by a universal domain controller based on a preset message format, the method further includes: The target communication request is sent to the universal domain controller, triggering the universal domain controller to output the random number.

7. The method according to claim 6, characterized in that The random number is generated by an encryption chip in the universal domain controller when the universal domain controller receives a power-on signal.

8. A wireless communication device for vehicle data, characterized in that: The device comprises: A receiving module, receiving a random number sent by a universal domain controller based on a preset message format, wherein the random number is determined according to the preset message format and includes eight bytes; An index module, generating an index number according to the first byte of the random number, and determining a target key group from a plurality of preset key groups by using the index number; An encryption module, encrypting the target key group and the random number to obtain a new key; a communication module for wirelessly communicating vehicle data via the new secret key; Wherein, before receiving the random number sent by the general domain controller based on the preset message format, the device further includes a generation module: The generating module is used to trigger the generation of a random number if the target communication request is a communication request for business data that matches a preset target communication request.

9. An electronic device comprising a memory and a processor, wherein the memory stores a computer program that can be run on the processor, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A machine-readable storage medium, characterized in that: The machine-readable storage medium stores machine-executable instructions. When the machine-executable instructions are called and executed by a processor, the machine-executable instructions prompt the processor to implement the steps of the method described in any one of claims 1 to 7.

Images