A private protocol transmission system and method based on security for driving recorders

Abstract

The present invention discloses a private protocol transmission system and method for a driving recorder based on security. The system includes a vehicle terminal, an enterprise supervision platform, a user platform, a key generation module and an identity authentication module. The enterprise supervision platform is used to respond to the login request issued by the vehicle terminal and send the root key to the identity authentication module; the key generation module generates a random key when the vehicle terminal sends the login request, and sends it to the identity authentication module; the identity authentication module authenticates the vehicle terminal according to the root key and the random key information, and stores the authentication information after the authentication is passed; the user platform issues an operation instruction after the identity authentication is performed by the identity authentication module, and encrypts the sensitive data in the operation instruction through the encryption module. The present invention provides enhanced information security protection capabilities based on regulatory protocols, and meets the security requirements of general OEMs for vehicle control and vehicle sensitive data.

Description

Technical Field

[0001] The present invention relates to the technical field of vehicle communication protocols, and in particular to a private protocol transmission system and method for a safe driving recorder. Background Art

[0002] The communication protocols between vehicle terminal equipment and regulatory enterprise platforms (GB32960, JT / T808, etc.) issued by the mainstream domestic vehicle regulatory authorities have weak requirements for data security transmission, and the functions specified in the protocols are mainly focused on data collection and reporting; there are relatively few control functions for equipment and vehicles, and the security requirements are not high. Now many OEMs have put forward more and more requirements for online remote control of vehicles and OTA upgrades of in-vehicle equipment, so the solution to data security issues in network transmission has become more and more urgent.

[0003] For example, in order to supervise new energy vehicles and road transport vehicles, the relevant departments of the country have formulated and issued "GBT32960.3-2016-Electric Vehicle Remote Service and Management System Technical Specification Part 3: Communication Protocol and Data Format" and "JT / T 808-2019 Road Transport Vehicle Satellite Positioning System Terminal Communication Protocol and Data Format" and other protocol specifications. These protocol specifications are similar to ( Figure 2 The agreement specifies the data that national regulatory authorities need to collect and report, such as battery current and voltage, battery temperature, vehicle location data, vehicle and equipment alarm data, etc.

[0004] However, the existing protocol specifications have the following shortcomings: the existing vehicle terminal remote communication protocol specifications are generally for the needs of superior supervision, and are mainly based on the function of collecting data from the device and reporting platform data. They rarely involve safety-oriented functions such as vehicle online remote control and vehicle equipment online OTA upgrades. Therefore, the protocol specifications do not focus on data security issues in network transmission from the design perspective.

[0005] Although existing protocol specifications stipulate that data can be encrypted using encryption methods such as AES and RSA, they have not been effectively applied in real environments because they do not provide effective protection for keys and do not provide a mechanism for dynamic replacement. Summary of the invention

[0006] The first purpose of the present invention is to provide a private protocol transmission system for a secure driving recorder to solve the problem that the existing vehicle-mounted terminal remote communication protocol specifications are generally for the needs of superior supervision, mainly focusing on the function of collecting data from the device and reporting platform data, and rarely involving safety-oriented functions such as vehicle online remote control and vehicle-mounted equipment online OTA upgrades. Therefore, the protocol specifications do not focus on the technical issues of data security in network transmission from the design perspective.

[0007] The first objective of the present invention is achieved by adopting the following technical scheme: a private protocol transmission system for a secure driving recorder, comprising a vehicle-mounted terminal, an enterprise supervision platform and a user platform, and also comprising a key generation module and an identity authentication module, wherein the enterprise supervision platform is used to respond to a login request issued by the vehicle-mounted terminal and send a root key to the identity authentication module; the key generation module generates a random key when the vehicle-mounted terminal sends a login request, and sends it to the identity authentication module; the identity authentication module performs identity authentication on the vehicle-mounted terminal according to the root key and the random key information, and stores the authentication information after the authentication is passed; the user platform is used to issue operation instructions, and performs identity authentication through the identity authentication module, and after the identity authentication is passed, the sensitive data in the operation instructions is encrypte d through the encryption module, a command message is generated and transmitted to the execution module, and the execution module is used to complete the operation instructions issued by the user platform.

[0008] Furthermore, the root key is stored in advance on the vehicle terminal by the enterprise supervision platform to encrypt the data exchanged by the vehicle terminal.

[0009] Furthermore, after the vehicle terminal is offline for testing, the root key needs to be updated online, and the online root key update includes the following steps:

[0010] a. Send a request to replace the root key to the enterprise supervision platform through the vehicle terminal;

[0011] b. The enterprise supervision platform generates a new root key and sends the new root key to the vehicle terminal;

[0012] c. The vehicle terminal updates the root key and re-logins into the enterprise supervision platform to store the updated authentication information.

[0013] Furthermore, when a potential safety hazard occurs in the operation and management of the vehicle-mounted terminal, it is necessary to actively update the root key, and the active update of the root key includes the following steps:

[0014] d. The user platform performs identity authentication through the identity authentication module;

[0015] e. After the user platform identity verification is passed, an instruction to actively update the root key is issued;

[0016] f. The execution module generates a new root key according to the active root key update instruction issued by the user platform and sends it to the vehicle terminal;

[0017] g. The vehicle terminal updates the root key and re-logins into the enterprise supervision platform to store the updated authentication information.

[0018] Furthermore, it also includes a storage module, which is used to store authentication information after the vehicle-mounted terminal is authenticated.

[0019] Furthermore, the steps of encrypting the sensitive data in the operation instruction by the encryption module are as follows:

[0020] h obtains the stored authentication information, the authentication information includes vehicle equipment identity information and a random key;

[0021] i. Encrypt sensitive data with a random key to generate and send message data.

[0022] Furthermore, it also includes a feedback module, which is used to feed back the execution result of the execution module to the user platform.

[0023] The second purpose of the present invention is to provide a private protocol transmission method for a secure driving recorder to solve the problem that the existing vehicle-mounted terminal remote communication protocol specifications are generally for the needs of superior supervision, and are mainly based on the function of collecting data from the device and reporting platform data. They rarely involve safety-oriented functions such as vehicle online remote control and vehicle-mounted equipment online OTA upgrades. Therefore, the protocol specifications do not focus on the technical issues of data security in network transmission from the design perspective.

[0024] The second object of the present invention is to be achieved by adopting the following technical means: a method for transmitting a private protocol of a safe driving recorder, comprising the following steps:

[0025] S1: The vehicle terminal sends a login request to the enterprise supervision platform;

[0026] S2: The enterprise supervision platform responds to the login request sent by the vehicle terminal and sends the root key to the identity authentication module. When the vehicle terminal sends a login request to the enterprise supervision platform, the key generation module generates a random key and sends it to the identity authentication module.

[0027] S3: The identity authentication module authenticates the vehicle terminal based on the root key and random key information, and stores the authentication information after the authentication is passed;

[0028] S4: The user platform issues an operation instruction and performs identity authentication through the identity authentication module;

[0029] S5: After the user platform identity authentication is passed, the sensitive data in the operation instruction is encrypted through the encryption module, and a command message is generated and transmitted to the execution module, and the execution module is used to complete the operation instruction issued by the user platform.

[0030] The beneficial effect of the present invention is that: on the basis of retaining the original functions and framework of the original regulatory protocol specifications, the present invention uses the extended messages provided by it to expand the regulatory protocol, add functions such as identity authentication, dynamic key exchange and verification, sensitive data encrypted transmission, and vehicle remote OTA upgrade, so as to provide enhanced information security protection capabilities on the basis of the regulatory protocol and meet the general OEM's security requirements for vehicle control and vehicle sensitive data. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying creative work.

[0032] Figure 1 is a system block diagram of the present invention;

[0033] Figure 2 Provides a framework diagram for traditional regulatory protocols;

[0034] Figure 3 This is a protocol specification framework diagram of the present invention;

[0035] Figure 4 It is a flow chart of the present invention. DETAILED DESCRIPTION

[0036] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0037] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0038] Some embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.

[0039] Embodiment 1:

[0040] See also Figure 1 A private protocol transmission system for a driving recorder based on security includes a vehicle-mounted terminal, an enterprise supervision platform and a user platform, and also includes a key generation module and an identity authentication module. The enterprise supervision platform is used to respond to a login request issued by the vehicle-mounted terminal and send a root key to the identity authentication module; the key generation module generates a random key when the vehicle-mounted terminal sends a login request, and sends it to the identity authentication module; the identity authentication module authenticates the vehicle-mounted terminal according to the root key and the random key information, and stores the authentication information after the authentication is passed; the user platform is used to issue an operation instruction and perform identity authentication through the identity authentication module. After the identity authentication is passed, the encryption module encrypts the sensitive data in the operation instruction, generates a command message and transmits it to the execution module, and the execution module is used to complete the operation instruction issued by the user platform.

[0041] In this embodiment, the root key is stored in advance on the vehicle-mounted terminal by the enterprise supervision platform, and is used to encrypt the data exchanged by the vehicle-mounted terminal.

[0042] The identity authentication module has the functions of vehicle terminal identity authentication and user platform identity authentication. It mainly establishes a secure channel between the device and the platform for authentication. Only after passing the identity authentication can it be proved that the device and the platform are safe. Temporary keys (random keys) are exchanged during the authentication process. When secure data transmission is required during the current connection between the device and the platform, the temporary key is used for data encryption. After the connection is disconnected, the temporary key becomes invalid. After the next connection is established, identity authentication must be performed again and a new temporary key must be exchanged. Specifically, the authentication information of the vehicle terminal identity authentication includes the vehicle equipment identity information and the random key, and is encrypted using the root key pre-issued by the enterprise supervision platform. The root key is used to decrypt the authentication information, obtain the identity information and the random key, and save the relevant data after successfully verifying the identity information. For the normal Loop regulatory protocol message, there is no need to judge the identity authentication status. The vehicle terminal and the enterprise supervision platform can transmit real-time data and location information through the original regulatory protocol framework. For Opt Alt Loop sensitive data, it is necessary to judge whether the identity authentication has passed, and the user platform needs to be authenticated. The user or manager logs in through the user platform. After the identity authentication, the operation instruction can be issued. After the user platform issues the operation instruction, it is necessary to perform a security logic judgment on the vehicle terminal. When the vehicle status is safe, the stored random key is obtained through the encryption module, and the sensitive data is encrypted using the random key to generate the issued message data, and transmit it to the execution module to execute the operation instruction. It is through this dynamic key method that the security of data transmission is guaranteed.

[0043] In order to ensure the security of data transmission, when the vehicle-mounted terminal performs identity authentication, it needs to provide a root key stored in the vehicle-mounted terminal in advance to encrypt the interactive data. In order to ensure the security of this root key, the root key needs to be updated online after the vehicle-mounted terminal equipment is loaded and offline for inspection. In addition, during operation management, if any security risks are found in the equipment, the management personnel can also actively update the root key of the equipment through the platform.

[0044] Specifically, after the vehicle terminal is offline for testing, the root key needs to be updated online, and the online root key update includes the following steps:

[0045] a. Send a request to replace the root key to the enterprise supervision platform through the vehicle terminal;

[0046] b. The enterprise supervision platform generates a new root key and sends the new root key to the vehicle terminal;

[0047] c. The vehicle terminal updates the root key and re-logins into the enterprise supervision platform to store the updated authentication information.

[0048] Specifically, when a security risk occurs in the operation and management of the vehicle terminal, it is necessary to actively update the root key, and the active update of the root key includes the following steps:

[0049] d. The user platform performs identity authentication through the identity authentication module;

[0050] e. After the user platform identity verification is passed, an instruction to actively update the root key is issued;

[0051] f. The execution module generates a new root key according to the active root key update instruction issued by the user platform and sends it to the vehicle terminal;

[0052] g. The vehicle terminal updates the root key and re-logins into the enterprise supervision platform to store the updated authentication information.

[0053] In this embodiment, a storage module is also included, and the storage module is used to store authentication information after the vehicle-mounted terminal passes authentication.

[0054] In this embodiment, the steps of encrypting the sensitive data in the operation instruction by the encryption module are as follows:

[0055] h obtains the stored authentication information, the authentication information includes vehicle equipment identity information and a random key;

[0056] i. Encrypt sensitive data with a random key to generate and send message data.

[0057] In this embodiment, a feedback module is further included, and the feedback module is used to feed back the execution result of the execution module to the user platform.

[0058] See also Figure 4 , a secure driving recorder private protocol transmission method, comprising the following steps:

[0059] S1: The vehicle terminal sends a login request to the enterprise supervision platform;

[0060] S2: The enterprise supervision platform responds to the login request sent by the vehicle terminal and sends the root key to the identity authentication module. When the vehicle terminal sends a login request to the enterprise supervision platform, the key generation module generates a random key and sends it to the identity authentication module.

[0061] S3: The identity authentication module authenticates the vehicle terminal based on the root key and random key information, and stores the authentication information after the authentication is passed;

[0062] S4: The user platform issues an operation instruction and performs identity authentication through the identity authentication module;

[0063] S5: After the user platform identity authentication is passed, the sensitive data in the operation instruction is encrypted through the encryption module, and a command message is generated and transmitted to the execution module, and the execution module is used to complete the operation instruction issued by the user platform.

[0064] Furthermore, the present invention can realize remote control of vehicles. With the popularization of intelligent automobiles, many offline application scenarios or scenarios that cannot be realized offline can be solved online, such as the following common application scenarios: remote locking, speed limit, and torque limit functions of commercial vehicle sales and loan business; mobile phone APP unlocking car doors and engine ignition functions of car rental business; remote air conditioning start, remote defrosting, remote door unlocking and locking functions of passenger cars, etc. The above functions involve driving safety and can only be operated when the vehicle status allows. In addition, the security of the transmission link must be guaranteed when the control command is issued, and the transmitted data must be encrypted and other security measures must be taken.

[0065] Specifically, the process of vehicle remote control is as follows: first, the vehicle terminal is authenticated through the identity authentication module, and the vehicle terminal authentication information is stored after the authentication is passed. The manager or user logs in through the user platform and authenticates through the identity authentication module. After the identity authentication is passed, the remote control command is issued (at this time, it is necessary to judge the online status of the vehicle terminal device and whether the vehicle is stopped, because some remote control services can only be performed when the vehicle is stopped), and a random key is obtained through the encryption module, and the remote control command is encrypted to generate and send the message data to the execution module. The execution module needs to judge the vehicle status again, and then send it to the controller to complete the command. After the controller completes the command, the feedback module will feedback the result of the remote control execution to the user platform.

[0066] Furthermore, the present invention can also realize the OTA upgrade of the vehicle terminal. The full name of automobile OTA is "Over-The-Air technology", that is, air download technology, which realizes remote management of software through the mobile communication interface. The traditional practice is to go to the 4S shop to upgrade the software of the corresponding ECU through the vehicle OBD. Automobile OTA upgrade is like the upgrade of the computer Windows system, and can also be understood as the upgrade of the mobile phone system. Each upgrade can improve, patch vulnerabilities or obtain more functions, performance improvement or visual effect improvement. This update is through online detection and version matching after networking, downloading the new code to the local, and then executing installation, verification and other procedures. The emergence of OTA makes 4S shops no longer a necessary link in the process of automobile upgrades, and the entire OTA architecture and process are not complicated. It can be achieved by generating update packages, transmitting update packages and installing updates. Although OTA is very convenient, it will also bring some unexpected security risks, so it is necessary to establish a secure transmission channel. The OTA upgrade process can add corresponding software and hardware version verification, installation package MD5 verification, platform and device confirmation, status notification result feedback and other interactive processes to the vehicle remote control process to ensure the security of the link and software package. The specific steps for OTA upgrade of the vehicle terminal are the same as those for vehicle remote control.

[0067] See also Figure 2 , Figure 3The present invention uses the custom message type provided by the regulatory protocol framework without destroying the original regulatory protocol framework, and adds a custom sub-frame message protocol in its message body. On the basis of the existing regulatory communication protocol framework, a sub-protocol framework is added to complete identity authentication, key replacement, vehicle control, sensitive data encryption transmission, vehicle remote OTA upgrade, etc., and secondary encryption processing is performed on the basis of not changing the original protocol framework. For the existing equipment and platform of the host factory, it only needs to add the corresponding sub-protocol stack processing module to the newly manufactured equipment to connect with the original platform function, so as to provide enhanced information security protection capabilities on the basis of the regulatory protocol, and meet the general host factory's security requirements for vehicle control and vehicle sensitive data.

[0068] It should be noted that, for the above embodiments, for the sake of simplicity, they are all described as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the order of the actions described, because according to the present application, some steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification belong to preferred embodiments, and the actions involved are not necessarily required by the present application.

[0069] The above embodiments describe the basic principles and main features of the present invention and the advantages of the present invention. Those skilled in the art should understand that the present invention is not limited by the above embodiments, and the above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the changes and modifications made by those skilled in the art shall be within the scope of protection of the appended claims of the present invention without departing from the spirit and scope of the present invention.

Claims

1. A secure driving recorder private protocol transmission system, including a vehicle terminal, an enterprise supervision platform and a user platform, characterized in that: It also includes a key generation module and an identity verification module. The enterprise supervision platform is used to respond to the login request issued by the vehicle terminal and send the root key to the identity verification module; The key generation module generates a random key when the vehicle terminal issues a login request, and sends it to the identity authentication module; the identity authentication module authenticates the vehicle terminal according to the root key and the random key information, and stores the authentication information after the authentication is passed; the user platform is used to issue operation instructions, and the identity authentication module performs identity authentication, and after the identity authentication is passed, the encryption module encrypts the sensitive data in the operation instructions, generates a command message and transmits it to the execution module, and the execution module is used to complete the operation instructions issued by the user platform; After the vehicle terminal is offline for testing, the root key needs to be updated online. The online root key update includes the following steps: a. Send a request to replace the root key to the enterprise supervision platform through the vehicle terminal; b. The enterprise supervision platform generates a new root key and sends the new root key to the vehicle terminal; c. The vehicle terminal updates the root key and re-logins into the enterprise supervision platform to store the updated authentication information; When a security risk occurs in the operation and management of the vehicle terminal, it is necessary to actively update the root key, and the active update of the root key includes the following steps: d. The user platform performs identity authentication through the identity authentication module; e. After the user platform identity verification is passed, an instruction to actively update the root key is issued; f. The execution module generates a new root key according to the active root key update instruction issued by the user platform and sends it to the vehicle terminal; g. The vehicle terminal updates the root key and re-logins into the enterprise supervision platform to store the updated authentication information; The steps to encrypt sensitive data in operation instructions through the encryption module are as follows: h obtains the stored authentication information, the authentication information includes vehicle equipment identity information and a random key; i. Encrypt sensitive data with a random key to generate and send message data.

2. A secure driving recorder private protocol transmission system as claimed in claim 1, characterized in that: The root key is stored in advance on the vehicle terminal by the enterprise supervision platform and is used to encrypt the data exchanged by the vehicle terminal.

3. A secure driving recorder private protocol transmission system as claimed in claim 1, characterized in that: It also includes a storage module, which is used to store authentication information after the vehicle-mounted terminal passes authentication.

4. A secure driving recorder private protocol transmission system as claimed in claim 1, characterized in that: It also includes a feedback module, which is used to feed back the execution result of the execution module to the user platform.

5. A method for transmitting a private protocol of a driving recorder based on security, using a system for transmitting a private protocol of a driving recorder based on security as claimed in any one of claims 1 to 4, characterized in that: The steps include: S1: The vehicle terminal sends a login request to the enterprise supervision platform; S2: The enterprise supervision platform responds to the login request sent by the vehicle terminal and sends the root key to the identity authentication module. When the vehicle terminal sends a login request to the enterprise supervision platform, the key generation module generates a random key and sends it to the identity authentication module. S3: The identity authentication module authenticates the vehicle terminal based on the root key and random key information, and stores the authentication information after the authentication is passed; S4: The user platform issues an operation instruction and performs identity authentication through the identity authentication module; S5: After the user platform identity authentication is passed, the sensitive data in the operation instruction is encrypted through the encryption module, and a command message is generated and transmitted to the execution module, and the execution module is used to complete the operation instruction issued by the user platform.

Images