A vehicle networking terminal supporting digital identity

Abstract

The present invention discloses a vehicle networking terminal supporting digital identity, which is externally connected to a TSP platform, and the TSP platform communicates with an authentication service system. The vehicle networking terminal includes: a main control chip, a communication module, and a security encryption chip. The main control chip collects the vehicle VIN code and transmits it to the communication module; the TSP platform obtains the VIN code from the communication module; the authentication service system obtains the owner's information and binds it to the VIN code, generates a digital identity after being authenticated by the Ministry of Public Security, and transmits it to the communication module through the TSP platform; the communication module encrypts the digital identity and transmits it to the security encryption chip for storage. The present invention supports digital identity while reducing hardware costs.

Description

Technical Field

[0001] The invention relates to a vehicle networking terminal. Background Art

[0002] The digital identity of the vehicle is the second-generation ID card of the car. It can be bound to the owner's ID card, driver's license, inspection mark, insurance, etc., eliminating the traditional paper credentials and forming electronic data. For car owners, there is no need to carry various certificates. For managers, they can use the digital identity of the vehicle to confirm the basic information of the vehicle. At present, the digital identity of vehicles is basically in the form of a single card, which is installed on the front windshield of the vehicle. This method has the risk of cheating. The card can be inserted and removed at will, and it is easy to be damaged. The installation operation is complicated. Summary of the invention

[0003] The object of the present invention is to provide a vehicle networking terminal (TBOX) that supports digital identity while reducing hardware costs.

[0004] The technical solution to achieve the above purpose is:

[0005] A vehicle networking terminal supporting digital identity is connected to an external TSP (vehicle plant system) platform. The TSP platform communicates with an authentication service system. The vehicle networking terminal includes: a main control chip (MCU), a communication module (MPU) and a security encryption chip (SE), wherein:

[0006] The main control chip collects the vehicle VIN (vehicle unique identification number) code and transmits it to the communication module;

[0007] The TSP platform obtains the VIN code from the communication module;

[0008] The authentication service system obtains the vehicle owner information and binds it to the VIN code. After being authenticated by the Ministry of Public Security, a digital identity is generated and transmitted to the communication module through the TSP platform;

[0009] The communication module encrypts the digital identity and transmits it to the secure encryption chip for storage.

[0010] Preferably, it also includes: a Bluetooth module (BLE) connected to the main control chip;

[0011] A CAN (Controller Area Network) receiver connected to the main control chip is used to collect the vehicle VIN code.

[0012] Preferably, the communication module includes: an instruction parsing module, an identity authentication module and a digital identity module.

[0013] The instruction parsing module parses digital identity related instructions from the TSP platform;

[0014] The identity authentication module performs identity authentication on the relationship between the communication module and the security encryption chip;

[0015] The digital identity module communicates with the security encryption chip and is used to encrypt, store and read the digital identity.

[0016] Preferably, the authentication service system reads the vehicle owner information through the authentication client.

[0017] Preferably, a power supply module for power supply is also included.

[0018] Preferably, the authentication client is an ID card reader, a liveness recognition device or a QR code recognition.

[0019] The beneficial effects of the present invention are:

[0020] The present invention adopts TBOX to add support for digital identity technology. In terms of hardware, only an SE chip needs to be added, or a digital identity applet needs to be developed in the original SE chip. There is no need to add a separate electronic and electrical structure, and the hardware cost increases little or no. An authentication mechanism is established between SE and MPU to ensure that MPU is a legitimate user and prevent SE from being used illegally. The digital identity can be read through a remote network or a near-end Bluetooth connection, which is convenient for reading and use. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 is a structural block diagram of the vehicle networking terminal of the present invention;

[0022] Figure 2 It is a flowchart of the working process of the Internet of Vehicles terminal of the present invention;

[0023] Figure 3 It is a business process diagram of the Internet of Vehicles terminal of the present invention. DETAILED DESCRIPTION

[0024] The present invention will be further described below in conjunction with the accompanying drawings.

[0025] See also Figure 1-3 The Internet of Vehicles terminal supporting digital identity of the present invention is externally connected to a TSP platform, and the TSP platform communicates with an authentication service system. The Internet of Vehicles terminal includes: a main control chip 1, a communication module 2 and a security encryption chip 3.

[0026] The main control chip 1 collects the vehicle VIN code through the CAN receiver and transmits it to the communication module 2; the TSP platform obtains the VIN code from the communication module 2; the authentication service system obtains the owner information and binds it to the VIN code, generates a digital identity after being authenticated by the Ministry of Public Security, and transmits it to the communication module 2 through the TSP platform.

[0027] The communication module 2 encrypts the digital identity and transmits it to the security encryption chip 3 for storage. The communication module 2 can read the digital identity from the security encryption chip 3. The main control chip 1 is connected to a Bluetooth module.

[0028] Among them, the communication module 2 communicates with the main control chip 1 through UART (Universal Asynchronous Receiver / Transmitter) and SPI (Serial Peripheral Interface), and the main control chip 1 controls the power supply and restart of the communication module 2 through the GPIO (general input and output) port. The backup battery supplies power to the main control chip 1 and the communication module 2 respectively through the power supply circuit. The main control chip 1 is connected to the security encryption chip 3 through I2C (integrated circuit bus) to encrypt and decrypt data.

[0029] The communication module 2 includes: an instruction parsing module, an identity authentication module and a digital identity module.

[0030] The instruction parsing module parses the digital identity related instructions from the TSP platform. The identity authentication module performs identity authentication on the relationship between the communication module 2 and the security encryption chip 3. The digital identity module communicates with the security encryption chip 3 and is used to encrypt, store and read the digital identity.

[0031] The authentication service system reads the owner's information through the authentication client, which can be an ID card reader, a liveness recognition device, or a QR code recognition device.

[0032] In addition, it also includes a power module, which includes a main power supply and a backup battery. If an accident occurs and the main power supply is damaged, the backup battery will be immediately activated to ensure normal data upload.

[0033] like Figure 3 , the vehicle networking terminal of the present invention performs the following business process:

[0034] 1. Digital identity generation / storage:

[0035] 11) TBOX collects the vehicle VIN code and uploads it to the TSP platform, which then binds the VIN code and TBOX.

[0036] 12) Use the authentication client to read the owner's information and transmit the data to the authentication service system;

[0037] 13) The authentication service system obtains the VIN code through the TSP platform, and the VIN code is bound to the vehicle owner’s information;

[0038] 14) The authentication service system submits the identity information to the Ministry of Public Security for real-name verification. After the authentication is passed, a digital identity is generated and sent to TBOX;

[0039] 15) After receiving the digital identity, the MPU encrypts the digital identity and performs identity authentication with the SE. After the authentication is successful, the MPU transmits the encrypted digital identity to the SE for storage.

[0040] 2. Application of near-end equipment:

[0041] 21) Use the proximal device to connect to TBOX via the Bluetooth module;

[0042] 22) MPU and SE perform identity authentication. After the authentication is passed, MPU reads the digital identity in SE and decrypts it;

[0043] 23) TBOX transmits the read digital identity to the near-end device via Bluetooth;

[0044] 24) Proximal devices can perform payment or law enforcement services based on digital identities.

[0045] 3. Remote device application:

[0046] The remote device application is the same as the local device. The local device is connected via Bluetooth, and the remote device is connected via the network. The rest is the same.

[0047] 4. Update digital identity:

[0048] When the vehicle owner changes, the digital identity change operation can be performed in the background. After TBOX receives the digital identity change operation, MPU and SE perform identity authentication. After the authentication is passed, the digital identity is updated.

[0049] 5. Deleting digital identity:

[0050] When a vehicle is scrapped, the digital identity needs to be deleted, and the deletion operation can be performed in the background. After TBOX receives the deletion operation, MPU and SE perform identity authentication, and the digital identity is deleted after the authentication is passed.

[0051] In the figure, POWER means power supply; applet means Java applet in SE; CTID means online function certificate of resident ID card; RST means reset pin.

[0052] The above digital identity-based services can be used for related payments: refueling / car washing / mechanical repair / parking / road and bridge tolls, etc., or as traffic law enforcement credentials: traffic violations / electronic communication certificate management / operating vehicle supervision, etc.

[0053] The above embodiments are only used to illustrate the present invention, rather than to limit the present invention. Those skilled in the relevant technical field may make various changes or modifications without departing from the spirit and scope of the present invention. Therefore, all equivalent technical solutions should also belong to the scope of the present invention and should be defined by the claims.

Claims

1. A vehicle networking terminal supporting digital identity, connected to an external TSP platform, the TSP platform communicates with an authentication service system, characterized in that: The Internet of Vehicles terminal includes: main control chip, communication module and security encryption chip, among which: The main control chip collects the vehicle VIN code and transmits it to the communication module; The TSP platform obtains the VIN code from the communication module; The authentication service system obtains the vehicle owner information and binds it to the VIN code. After being authenticated by the Ministry of Public Security, a digital identity is generated and transmitted to the communication module through the TSP platform; The communication module encrypts the digital identity and transmits it to the secure encryption chip for storage; The communication module includes: an instruction parsing module, an identity authentication module and a digital identity module. The instruction parsing module parses digital identity related instructions from the TSP platform; The identity authentication module performs identity authentication on the relationship between the communication module and the security encryption chip; The digital identity module communicates with the security encryption chip and is used to encrypt, store and read the digital identity.

2. The vehicle networking terminal supporting digital identity according to claim 1, characterized in that: Also includes: A Bluetooth module connected to the main control chip; A CAN receiver connected to the main control chip for collecting the vehicle VIN code.

3. The vehicle networking terminal supporting digital identity according to claim 1, characterized in that: The authentication service system reads the vehicle owner information through the authentication client.

4. The vehicle networking terminal supporting digital identity according to claim 1, characterized in that: A power module is also included for supplying power.

5. The vehicle networking terminal supporting digital identity according to claim 3, characterized in that: The authentication client is an ID card reader, a liveness recognition device or a QR code recognition.

Images