An electronic anti-tampering method, system, readable storage medium and OBU device

Abstract

The present application provides an electronic anti-tampering method, system, readable storage medium and OBU device. The method includes: encrypting a first random number generated by a first public key and a hardware address of an Ethernet module of an OBU device to obtain a first encryption result; sending the first encryption result to a vehicle-mounted terminal; receiving a second encryption result from the vehicle-mounted terminal; decrypting the second encryption result by a second private key to obtain a second random number; judging whether the second random number is the same as the first random number; if so, the authentication is successful; if not, the authentication fails, and two-way authentication between the OBU device and the vehicle-mounted terminal is realized, solving the instability of mechanical anti-tampering and improving the security of electronic anti-tampering.

Description

Technical Field

[0001] The present application belongs to the technical field of vehicle-mounted units, and in particular, relates to an electronic anti-disassembly method, system, readable storage medium and OBU device. Background Art

[0002] In the ETC system, the OBU device uses DSRC technology to establish a microwave communication link with the RSU device. When the vehicle is moving, without stopping, it can realize vehicle identity recognition and electronic deduction, thereby achieving unmanned vehicle channel without stopping and card collection.

[0003] At present, the demand for pre-installed applications involving OBU devices is increasing, but the existing anti-dismantling means for pre-installed OBU devices have problems of instability and low safety, and cannot meet the anti-dismantling needs. Summary of the invention

[0004] The embodiments of the present application provide an electronic anti-disassembly method, system, readable storage medium and OBU device, which can solve the problem of unstable anti-disassembly means and low safety of the front-mounted OBU device.

[0005] In a first aspect, an embodiment of the present application provides an electronic anti-tampering method, comprising:

[0006] Encrypting the generated first random number and the hardware address of the Ethernet module of the OBU device by the first public key to obtain a first encryption result;

[0007] Sending the first encryption result to the vehicle-mounted terminal;

[0008] receiving a second encryption result from the vehicle-mounted terminal, where the second encryption result is obtained by the vehicle-mounted terminal decrypting the first encryption result using a first private key to obtain the first random number and the hardware address, and after determining that the hardware address is the same as a pre-stored hardware address, encrypting the first random number using a second public key;

[0009] Decrypting the second encryption result by using a second private key to obtain a second random number;

[0010] Determining whether the second random number is the same as the first random number;

[0011] If yes, the authentication succeeds; if no, the authentication fails.

[0012] Furthermore, the method further comprises:

[0013] If the authentication is successful, the DSRC module is started;

[0014] If the authentication fails, the ESAM module is controlled to fail and the DSRC module is activated.

[0015] Furthermore, before obtaining the first encryption result, the method further includes:

[0016] After generating the second public-private key pair, storing the second private key, and sending the hardware address and the second public key to the vehicle-mounted terminal through the Ethernet module of the OBU device;

[0017] The first public key from the vehicle-mounted terminal is received through the Ethernet module of the OBU device, and the first public key is stored.

[0018] In a second aspect, an embodiment of the present application provides an electronic anti-tampering method, comprising:

[0019] After receiving the first encryption result from the OBU device, decrypting the first encryption result by using the first private key to obtain a first random number and a hardware address of the Ethernet module of the OBU device;

[0020] Determining whether the hardware address is the same as a pre-stored hardware address;

[0021] If yes, encrypt the first random number using the second public key to obtain a second encryption result;

[0022] The second encryption result is sent to the OBU device.

[0023] Furthermore, after determining whether the hardware address is the same as the pre-stored hardware address, the method further includes:

[0024] If not, the execution process terminates.

[0025] Further, before receiving the first encryption result from the OBU device, it also includes:

[0026] After generating a first public-private key pair, storing the first private key, and sending the first public key to the OBU device through the Ethernet module of the vehicle-mounted terminal;

[0027] The second public key and the hardware address are received and stored from the OBU device.

[0028] In a third aspect, an embodiment of the present application provides an OBU device, including: an Ethernet module, a main control module, an ESAM module, a DSRC module and a power module;

[0029] The Ethernet module is used to send the first encryption result to the vehicle-mounted terminal;

[0030] Used to receive a second encryption result from the vehicle-mounted terminal, where the second encryption result is obtained by the vehicle-mounted terminal decrypting the first encryption result by using a first private key to obtain a first random number and a hardware address of the Ethernet module, and after determining that the hardware address is the same as a pre-stored hardware address, encrypting the first random number by using a second public key;

[0031] The main control module is used to encrypt the generated first random number and the hardware address of the Ethernet module by using a first public key to obtain a first encryption result;

[0032] Used to decrypt the second encryption result by using a second private key to obtain a second random number;

[0033] Used to determine whether the second random number is the same as the first random number;

[0034] If yes, the authentication is successful and the DSRC module is started;

[0035] If not, the authentication fails, the ESAM module is controlled to be invalid, and the DSRC module is started;

[0036] A power module is used to provide power.

[0037] In a fourth aspect, an embodiment of the present application provides an electronic anti-tampering system, including an OBU device and a vehicle-mounted terminal;

[0038] The OBU device is used to encrypt the first random number generated and the hardware address of the Ethernet module of the OBU device through the first public key to obtain a first encryption result;

[0039] Used to send the first encryption result to the vehicle terminal;

[0040] Used to receive a second encryption result from the vehicle-mounted terminal;

[0041] Used to decrypt the second encryption result by using a second private key to obtain a second random number;

[0042] Used to determine whether the second random number is the same as the first random number;

[0043] If yes, the authentication is successful; if no, the authentication fails;

[0044] The vehicle-mounted terminal is used to decrypt the first encryption result by using a first private key after receiving the first encryption result from the OBU device to obtain a first random number and a hardware address of the Ethernet module of the OBU device;

[0045] Used to determine whether the hardware address is the same as the pre-stored hardware address;

[0046] If yes, encrypt the first random number by using a second public key to obtain a second encryption result;

[0047] Used to send the second encryption result to the OBU device.

[0048] In a fifth aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, it implements a method as described in any one of the first aspect or the second aspect above.

[0049] In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method as described in any one of the first aspect or the second aspect above is implemented.

[0050] In a seventh aspect, an embodiment of the present application provides a computer program product. When the computer program product is run on an electronic device, the electronic device executes any one of the methods in the first aspect or the second aspect.

[0051] Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

[0052] The embodiment of the present application encrypts the generated first random number and the hardware address of the Ethernet module of the OBU device through the first public key to obtain a first encryption result; sends the first encryption result to the vehicle-mounted terminal; receives a second encryption result from the vehicle-mounted terminal, the second encryption result is obtained by the vehicle-mounted terminal decrypting the first encryption result through the first private key to obtain the first random number and the hardware address, and after determining that the hardware address is the same as the pre-stored hardware address, encrypting the first random number through the second public key; decrypting the second encryption result through the second private key to obtain a second random number; determining whether the second random number is the same as the first random number; if so, the authentication is successful; if not, the authentication fails, thereby realizing two-way authentication between the OBU device and the vehicle-mounted terminal, which can solve the instability of mechanical anti-dismantling and improve the security of electronic anti-dismantling.

[0053] It can be understood that the beneficial effects of the second to seventh aspects mentioned above can be found in the relevant description of the first aspect mentioned above, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0055] Figure 1 It is a flowchart of an electronic anti-tampering method provided by an embodiment of the present application;

[0056] Figure 2 is a flowchart of an electronic anti-tampering method provided by another embodiment of the present application;

[0057] Figure 3 It is a structural diagram of an OBU device provided in an embodiment of the present application;

[0058] Figure 4 is a schematic diagram of the structure of an electronic anti-tampering system provided in an embodiment of the present application;

[0059] Figure 5 It is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0060] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0061] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, wholes, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or combinations thereof.

[0062] It should also be understood that the term “and / or” used in the specification and appended claims refers to any and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0063] As used in the specification and appended claims of this application, the term "if" can be interpreted as "when" or "uponce" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" can be interpreted as meaning "uponce it is determined" or "in response to determining" or "uponce [described condition or event] is detected" or "in response to detecting [described condition or event]", depending on the context.

[0064] In addition, in the description of the present application specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0065] References to "one embodiment" or "some embodiments" etc. described in the specification of this application mean that one or more embodiments of the present application include specific features, structures or characteristics described in conjunction with the embodiment. Therefore, the statements "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments", etc. that appear in different places in this specification do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways. The terms "including", "comprising", "having" and their variations all mean "including but not limited to", unless otherwise specifically emphasized in other ways.

[0066] Figure 1 1 is a flow chart of an electronic anti-tampering method provided by an embodiment of the present application. As an example and not a limitation, Figure 1 As shown, the method is applied to an OBU device, comprising:

[0067] S101: Encrypt a generated first random number and a hardware address of an Ethernet module of an OBU device using a first public key to obtain a first encryption result.

[0068] When the user uses the vehicle, after the vehicle is ignited, the OBU device is in working state, the OBU device generates a first random number, and uses the first public key to encrypt the first random number and the hardware address to obtain a first encryption result.

[0069] The hardware address is the MAC address of the Ethernet module. The Ethernet module is different from other communication modules, such as the CAN module (Controller Area Network), which can provide a hardware address.

[0070] S102: Sending a first encryption result to the vehicle-mounted terminal.

[0071] Specifically, the first encryption result is sent through the TCP link established between the Ethernet module in the OBU device and the vehicle-mounted terminal. The first random number and the hardware address are transmitted through the first encryption result, which can improve the security of the transmitted data, and the first random number is randomly generated and has changes, which can ensure the security of anti-disassembly.

[0072] S103: receiving a second encryption result from the vehicle-mounted terminal;

[0073] The second encryption result is obtained by the vehicle terminal decrypting the first encryption result with the first private key to obtain the first random number and the hardware address, and after determining that the hardware address is the same as the pre-stored hardware address, encrypting the first random number with the second public key.

[0074] Specifically, the second encryption result is received from the vehicle-mounted terminal via the TCP link.

[0075] S104: Decrypt the second encryption result using the second private key to obtain a second random number.

[0076] In the application, the second random number obtained by decrypting the second encryption result with the second private key is compared with the first random number to confirm the legitimacy of the vehicle terminal, thereby achieving the security of anti-tampering authentication.

[0077] S105: Determine whether the second random number is the same as the first random number.

[0078] S106: If yes, the authentication is successful.

[0079] If the authentication is successful, it means that the OBU device has not been disassembled.

[0080] S107: If not, the authentication fails.

[0081] If the authentication fails, it means that the OBU device has been disassembled.

[0082] The first encryption result and the second encryption result both encrypt the random number, that is, the random number generated by the OBU device is used as the basis for two-way authentication, which can reduce the instability caused by multiple data authentications.

[0083] It can be understood that the security of electronic anti-tampering can be improved through two-way multi-authentication between the OBU device and the vehicle-mounted terminal, and the instability of mechanical anti-tampering can be solved through electronic anti-tampering.

[0084] This embodiment encrypts the generated first random number and the hardware address of the Ethernet module through the first public key to obtain a first encryption result; sends the first encryption result to the vehicle-mounted terminal; receives a second encryption result from the vehicle-mounted terminal, the second encryption result is obtained by the vehicle-mounted terminal decrypting the first encryption result through the first private key to obtain the first random number and the hardware address, and after determining that the hardware address is the same as the pre-stored hardware address, encrypting the first random number through the second public key; decrypting the second encryption result through the second private key to obtain a second random number; determining whether the second random number is the same as the first random number; if so, the authentication is successful; if not, the authentication fails, thereby realizing two-way authentication between the OBU device and the vehicle-mounted terminal, which can solve the instability of mechanical anti-dismantling and improve the security of electronic anti-dismantling.

[0085] In another embodiment, the method further comprises:

[0086] If the authentication is successful, the DSRC module is started.

[0087] Specifically, before the authentication is performed, the DSRC module (Dedicated Short Range Communication) is in a closed state. If the authentication is successful, it means that the OBU device has not been disassembled, and the DSRC module is started to start the DSRC function for the transmission of ETC transaction data.

[0088] If the authentication fails, the ESAM module will be disabled and the DSRC module will be activated.

[0089] Specifically, if the authentication fails, it means that the OBU device has been disassembled. Since the ESAM module stores vehicle information and ETC transaction key information, and also has an IC card file structure to store card information, the ESAM module (Embedded Secure Access Module) needs to be disabled to ensure that the vehicle's legitimate information is not stolen or used. At the same time, the DSRC module is started to meet the needs of subsequent users to reactivate the OBU device normally using the DSRC function.

[0090] Among them, the method of controlling the failure of the ESAM module is to modify the content of the ESAM module to make the ESAM module invalid.

[0091] In another embodiment, before obtaining the first encryption result, the method further includes:

[0092] First, after generating the second public-private key pair, the second private key is stored, and the hardware address and the second public key are sent to the vehicle-mounted terminal through the Ethernet module.

[0093] It can also be configured to store the second public key after the second public-private key pair is generated, so as to meet the user's subsequent needs for second public key operations.

[0094] Then, the first public key is received from the vehicle-mounted terminal through the Ethernet module, and the first public key is stored.

[0095] The first public key is used to encrypt random numbers and hardware addresses.

[0096] Specifically, during the automobile production stage and after-sales service stage, when the OBU device is installed and the vehicle is in the ignition state, the hardware address and the second public key are sent to the vehicle terminal through the TCP link established by the Ethernet module, and the first public key is received from the vehicle terminal. This process only needs to be executed once when the vehicle is in the ignition state, and does not need to be executed every time the OBU device authenticates the vehicle terminal.

[0097] And during the automobile production stage and after-sales service stage, when the OBU device is installed and the vehicle is in the ignition state, this process is executed, in this environment, other devices can be prevented from stealing the public key, hardware address and simulating and counterfeiting.

[0098] When the user is using the vehicle, only the public key and the hardware address of the Ethernet module of the OBU device are transmitted between the OBU device and the vehicle terminal, and the private key will not be transmitted, that is, the private key will not be stolen (the private key is generated and stored inside the device itself). On this basis, even if the public key and hardware address are stolen and simulated, when the simulation device simulates the vehicle terminal and authenticates with the OBU device, if the simulation device does not obtain the private key of the vehicle terminal, it will cause the authentication with the OBU device to fail, thereby improving the security of the electronic anti-tampering of the OBU device.

[0099] Figure 2 FIG. 1 is a flow chart of an electronic anti-tampering method provided by another embodiment of the present application. As an example and not a limitation, Figure 2 As shown, the method, applied to a vehicle-mounted terminal, includes:

[0100] S201: After receiving a first encryption result from the OBU device, the first encryption result is decrypted using a first private key to obtain a first random number and a hardware address of an Ethernet module of the OBU device.

[0101] Specifically, the first encryption result from the OBU device is received through a TCP link established between the Ethernet module in the vehicle-mounted terminal and the OBU device.

[0102] S202: Determine whether the hardware address is the same as the pre-stored hardware address.

[0103] S203: If yes, encrypt the first random number using the second public key to obtain a second encryption result.

[0104] Among them, it is judged that the hardware address is the same as the pre-stored hardware address, which means that the OBU device has not been disassembled. The on-board terminal confirms the legality of the OBU device, ensures the security of anti-dismantling, and can carry out subsequent authentication processes. Then, the first random number is encrypted to obtain the second encryption result. The first random number is transmitted through the second encryption result, which can improve the security of authentication.

[0105] S204: Send the second encryption result to the OBU device.

[0106] Specifically, the second encryption result is sent to the OBU device through a TCP link established between the Ethernet module in the vehicle-mounted terminal and the OBU device.

[0107] After receiving the first encryption result from the OBU device, this embodiment decrypts the first encryption result by using the first private key to obtain a first random number and the hardware address of the Ethernet module of the OBU device; determines whether the hardware address is the same as the pre-stored hardware address; if so, encrypts the first random number by using the second public key to obtain a second encryption result; sends the second encryption result to the OBU device, realizes two-way authentication between the OBU device and the vehicle-mounted terminal, and can solve the instability of mechanical anti-dismantling and improve the security of electronic anti-dismantling.

[0108] In another embodiment, after determining whether the hardware address is the same as the pre-stored hardware address, the method further includes:

[0109] If not, the execution process terminates.

[0110] Specifically, if it is determined that the hardware address is not the same as the pre-stored hardware address, it means that the OBU device has been disassembled, and there is no need to proceed to the next step, and the process is directly terminated. At this time, the DSRC module of the OBU device is in a closed state, and the DSRC function is not started.

[0111] You can also set the following to occur after the process terminates:

[0112] Execute alarm operation.

[0113] In another embodiment, before receiving the first encryption result from the OBU device, the method further includes:

[0114] Firstly, after generating a first public-private key pair, the first private key is stored, and the first public key is sent to the OBU device through the Ethernet module of the vehicle-mounted terminal.

[0115] In the application, the first public key is sent to the OBU device through a TCP link established between the Ethernet module in the vehicle-mounted terminal and the OBU device.

[0116] It can also be configured to store the first public key after the first public-private key pair is generated, so as to meet the user's subsequent needs for operating the first public key.

[0117] Then, the second public key and the hardware address from the OBU device are received and stored.

[0118] Specifically, the second public key is used to encrypt the random number.

[0119] After storing the hardware address from the OBU device, the pre-stored hardware address is obtained; by pre-storing the hardware address of the OBU device, it is subsequently determined whether the received hardware address is the same as the pre-stored hardware address to determine whether the OBU device is disassembled.

[0120] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0121] Corresponding to the method described in the above embodiment, for the convenience of explanation, only the part related to the embodiment of the present application is shown.

[0122] Figure 3 Schematic diagram of the structure of the OBU device provided in the embodiment of the present application. As an example and not a limitation, Figure 3 As shown, the device comprises: an Ethernet module 10, a main control module 11, a DSRC module 12, an ESAM module 13 and a power module 14;

[0123] The Ethernet module 10 is used to send the first encryption result to the vehicle terminal;

[0124] Used to receive a second encryption result from the vehicle-mounted terminal, the second encryption result is obtained by the vehicle-mounted terminal decrypting the first encryption result through the first private key, obtaining the first random number and the hardware address of the Ethernet module, and then encrypting the first random number through the second public key after determining that the hardware address is the same as the pre-stored hardware address.

[0125] Among them, based on Ethernet module communication, large amounts of data can be transmitted.

[0126] The main control module 11 is used to encrypt the generated first random number and the hardware address of the Ethernet module by using the first public key to obtain a first encryption result;

[0127] Used to decrypt the second encryption result by using the second private key to obtain a second random number;

[0128] Used to determine whether the second random number is the same as the first random number;

[0129] If yes, the authentication is successful and the DSRC module 12 is started;

[0130] If not, the authentication fails, the ESAM module 13 is controlled to be invalid, and the DSRC module 12 is started;

[0131] The power module 14 is used to provide power.

[0132] In another embodiment, the main control module is further used to store the second private key and the first public key after generating the second public-private key pair;

[0133] The Ethernet module is also used to send the hardware address and the second public key to the vehicle terminal;

[0134] A first public key is received from the vehicle-mounted terminal.

[0135] Figure 4 Schematic diagram of the structure of the electronic anti-tampering system provided in the embodiment of the present application. As an example and not a limitation, Figure 4 As shown, the system includes an OBU device 20 and a vehicle-mounted terminal 21;

[0136] The OBU device 20 is used to encrypt the generated first random number and the hardware address of the Ethernet module of the OBU device by using the first public key to obtain a first encryption result;

[0137] Used to send the first encryption result to the vehicle-mounted terminal;

[0138] Used to receive a second encryption result from the vehicle-mounted terminal;

[0139] Used to decrypt the second encryption result by using the second private key to obtain a second random number;

[0140] Used to determine whether the second random number is the same as the first random number;

[0141] If yes, the authentication is successful; if no, the authentication fails;

[0142] The vehicle-mounted terminal 21 is used for decrypting the first encryption result by using the first private key after receiving the first encryption result from the OBU device to obtain the first random number and the hardware address of the Ethernet module of the OBU device;

[0143] Used to determine whether the hardware address is the same as the pre-stored hardware address;

[0144] If yes, encrypt the first random number by using the second public key to obtain a second encryption result;

[0145] Used to send the second encryption result to the OBU device.

[0146] In another embodiment, the vehicle-mounted terminal is further configured to execute a process termination operation if no.

[0147] In another embodiment, the vehicle-mounted terminal is further used to generate the first public-private key pair, store the first private key, and send the first public key to the OBU device;

[0148] Receive and store the second public key and the hardware address from the OBU device.

[0149] Figure 5 This is a schematic diagram of the structure of an electronic device provided by an embodiment of the present application. Figure 5 As shown, the electronic device 3 of this embodiment includes: at least one processor 30 ( Figure 5 Only one is shown in the figure), a memory 31, and a computer program 32 stored in the memory 31 and executable on the at least one processor 30, wherein the processor 30 implements the steps of any of the above-mentioned method embodiments when executing the computer program 32.

[0150] The electronic device 3 may be an OBU device or a vehicle-mounted terminal. The electronic device 3 may include, but is not limited to, a processor 30 and a memory 31. Those skilled in the art will appreciate that Figure 5 It is only an example of the electronic device 3 and does not constitute a limitation on the electronic device 3. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, it may also include input and output devices, network access devices, etc.

[0151] The processor 30 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0152] In some embodiments, the memory 31 may be an internal storage unit of the electronic device 3, such as a hard disk or memory of the electronic device 3. In other embodiments, the memory 31 may also be an external storage device of the electronic device 3, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the electronic device 3. Further, the memory 31 may also include both an internal storage unit of the electronic device 3 and an external storage device. The memory 31 is used to store an operating system, an application program, a boot loader (BootLoader), data, and other programs, such as the program code of the computer program, etc. The memory 31 may also be used to temporarily store data that has been output or is to be output.

[0153] It should be noted that the information interaction, execution process, etc. between the above-mentioned devices / units are based on the same concept as the method embodiment of the present application. Their specific functions and technical effects can be found in the method embodiment part and will not be repeated here.

[0154] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0155] An embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in the above-mentioned method embodiments can be implemented.

[0156] An embodiment of the present application provides a computer program product. When the computer program product runs on an electronic device, the electronic device can implement the steps in the above-mentioned method embodiments when executing the computer program product.

[0157] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium can at least include: any entity or device that can carry the computer program code to the camera / terminal device, recording medium, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, RandomAccess Memory), electric carrier signal, telecommunication signal and software distribution medium. For example, a USB flash drive, a mobile hard disk, a magnetic disk or an optical disk. In some jurisdictions, according to legislation and patent practice, computer-readable media cannot be electric carrier signals and telecommunication signals.

[0158] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0159] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0160] In the embodiments provided in the present application, it should be understood that the disclosed devices / network equipment and methods can be implemented in other ways. For example, the device / network equipment embodiments described above are merely schematic. For example, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0161] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0162] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. An electronic anti-tampering method, characterized in that: Applicable to OBU devices, including: Encrypting the generated first random number and the hardware address of the Ethernet module of the OBU device by the first public key to obtain a first encryption result; Sending the first encryption result to the vehicle-mounted terminal; receiving a second encryption result from the vehicle-mounted terminal, wherein the second encryption result is obtained by the vehicle-mounted terminal decrypting the first encryption result by using a first private key to obtain the first random number and the hardware address, and determining that the hardware address is the same as a pre-stored hardware address, and then encrypting the first random number by using a second public key; if the vehicle-mounted terminal determines that the hardware address is different from the pre-stored hardware address, then terminating the execution process; Decrypting the second encryption result by using a second private key to obtain a second random number; Determining whether the second random number is the same as the first random number; If yes, the authentication is successful; if no, the authentication fails; If the authentication is successful, the DSRC module is started; If the authentication fails, the ESAM module is controlled to fail and the DSRC module is activated.

2. The method according to claim 1, characterized in that Before obtaining the first encryption result, the method further includes: After generating the second public-private key pair, storing the second private key, and sending the hardware address and the second public key to the vehicle-mounted terminal through the Ethernet module of the OBU device; The first public key from the vehicle-mounted terminal is received through the Ethernet module of the OBU device, and the first public key is stored.

3. An electronic anti-tampering method, applied to a vehicle-mounted terminal, characterized in that: include: After receiving the first encryption result from the OBU device, decrypting the first encryption result by using the first private key to obtain a first random number and a hardware address of the Ethernet module of the OBU device; Determining whether the hardware address is the same as a pre-stored hardware address; If not, the execution process terminates the operation; If yes, encrypt the first random number using the second public key to obtain a second encryption result; Sending the second encryption result to the OBU device; so that the OBU device executes: decrypting the second encryption result by using the second private key to obtain a second random number, and determining whether the second random number is the same as the first random number, if so, the authentication succeeds; if not, the authentication fails; If the authentication is successful, the DSRC module is started; If the authentication fails, the ESAM module is controlled to fail and the DSRC module is activated.

4. The method according to claim 3, characterized in that Before the receiving of the first encryption result from the OBU device, it also includes: After generating a first public-private key pair, storing the first private key, and sending the first public key to the OBU device through the Ethernet module of the vehicle-mounted terminal; The second public key and the hardware address are received and stored from the OBU device.

5. An OBU device, characterized in that: include: Ethernet module, main control module, ESAM module, DSRC module and power module; The Ethernet module is used to send the first encryption result to the vehicle-mounted terminal; Used to receive a second encryption result from the vehicle-mounted terminal, where the second encryption result is obtained by the vehicle-mounted terminal decrypting the first encryption result with the first private key, obtaining a first random number and the hardware address of the Ethernet module, and determining that the hardware address is the same as the pre-stored hardware address, and then encrypting the first random number with the second public key; if the vehicle-mounted terminal determines that the hardware address is different from the pre-stored hardware address, then the execution process terminates the operation; The main control module is used to encrypt the generated first random number and the hardware address of the Ethernet module by using a first public key to obtain a first encryption result; Used to decrypt the second encryption result by using a second private key to obtain a second random number; Used to determine whether the second random number is the same as the first random number; If yes, the authentication is successful and the DSRC module is started; If not, the authentication fails, and the ESAM module is controlled to fail, and the DSRC module is started; A power module is used to provide power.

6. An electronic anti-tampering system, characterized in that: Including OBU device and vehicle terminal; The OBU device is used to encrypt the first random number generated and the hardware address of the Ethernet module of the OBU device through the first public key to obtain a first encryption result; Used to send the first encryption result to the vehicle terminal; Used to receive a second encryption result from the vehicle-mounted terminal; Used to decrypt the second encryption result by using a second private key to obtain a second random number; Used to determine whether the second random number is the same as the first random number; If yes, the authentication is successful and the DSRC module is started; If not, the authentication fails, the ESAM module is controlled to fail, and the DSRC module is started; The vehicle-mounted terminal is used to decrypt the first encryption result by using a first private key after receiving the first encryption result from the OBU device to obtain a first random number and a hardware address of the Ethernet module of the OBU device; Used to determine whether the hardware address is the same as the pre-stored hardware address; If yes, encrypt the first random number by using a second public key to obtain a second encryption result; Used to send the second encryption result to the OBU device; If not, the execution process terminates.

7. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 2 or claims 3 to 4 is implemented.

8. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 2 or claims 3 to 4 is implemented.

Images