Vehicle communication method and terminal, vehicle, and computer-readable storage medium

Abstract

The present application relates to a vehicle communication method and terminal, a vehicle, and a computer-readable storage medium. The method includes the following steps performed by the vehicle side: generating a seed key and presenting a graphical code about the seed key, wherein the information carried in the graphical code is encrypted by a password, and the graphical code is used for reading by a mobile side communicating with the vehicle side; negotiating with the mobile side to determine session information, and generating a session key by a key generation algorithm based on the seed key and the session information; encrypting the session content using the session key to generate encrypted session content; and sending the encrypted session content.

Description

Technical Field

[0001] The present application relates to the field of vehicle privacy protection, and more specifically, to a vehicle communication method and terminal, a vehicle, and a computer-readable storage medium. Background Art

[0002] With the development of intelligent, connected vehicles, communication security is gaining increasing attention from users. In the smart electric vehicle industry, data security is a crucial security area, as it impacts user privacy, property, and even life safety. As vehicles become increasingly intelligent and connected, they generate increasing amounts of data, much of which is related to user privacy. Leakage of this data can have significant impacts on user privacy, property, and even life safety. With the introduction of the Data Security Law and the Personal Information Protection Law, user privacy protection has become a compliance requirement. Protecting communication privacy is particularly important in real-time scenarios like remote viewing.

[0003] In view of this, an improved vehicle communication solution needs to be proposed. Summary of the Invention

[0004] Embodiments of the present application provide a vehicle communication method and terminal, a vehicle, and a computer-readable storage medium for improving the security of vehicle communications.

[0005] According to one aspect of the present application, a vehicle communication method is provided. The method includes the following steps performed by a vehicle: generating a seed key and presenting a graphical code related to the seed key, wherein information carried in the graphical code is encrypted using a password and the graphical code is read by a mobile terminal communicating with the vehicle; negotiating with the mobile terminal to determine session information, and generating a session key using a key generation algorithm based on the seed key and the session information; encrypting session content using the session key to generate encrypted session content; and transmitting the encrypted session content.

[0006] In some embodiments of the present application, optionally, the graphical code is a QR code.

[0007] In some embodiments of the present application, optionally, the information carried in the graphical code also includes a vehicle identification code of the vehicle end.

[0008] In some embodiments of the present application, optionally, the session information is determined according to at least one of the following: a timestamp, a random number.

[0009] In some embodiments of the present application, optionally, the conversation content includes: transmitting real-time images from the vehicle end to the mobile end.

[0010] In some embodiments of the present application, optionally, the method further includes: receiving second encrypted session content from the mobile terminal; and decrypting the second encrypted session content using the session key to obtain second session content.

[0011] According to another aspect of the present application, a vehicle communication method is provided. The method includes the following steps performed by a mobile terminal: reading a graphical code presented by a vehicle terminal communicating with the mobile terminal; decrypting information carried in the graphical code using a password to obtain a seed key; negotiating with the vehicle terminal to determine session information, and generating a session key using a key generation algorithm based on the seed key and the session information; receiving encrypted session content from the vehicle terminal; and decrypting the encrypted session content using the session key to obtain session content.

[0012] In some embodiments of the present application, optionally, the method further includes: encrypting the second session content using the session key to generate second encrypted session content; and sending the second encrypted session content.

[0013] According to another aspect of the present application, a vehicle communication terminal is provided. The terminal includes: a key management and encryption / decryption module configured to generate a seed key; a verification module configured to present a graphical code related to the seed key, wherein information carried in the graphical code is encrypted using a password for reading by a mobile terminal communicating with the vehicle terminal; and a session management module configured to negotiate with the mobile terminal to determine session information; wherein the key management and encryption / decryption module is further configured to generate a session key based on the seed key and the session information using a key generation algorithm, encrypt session content using the session key to generate encrypted session content, and transmit the encrypted session content.

[0014] In some embodiments of the present application, optionally, the graphical code is a QR code.

[0015] In some embodiments of the present application, optionally, the information carried in the graphical code also includes a vehicle identification code of the vehicle end.

[0016] In some embodiments of the present application, optionally, the session information is determined according to at least one of the following: a timestamp, a random number.

[0017] In some embodiments of the present application, optionally, the conversation content includes: transmitting real-time images from the vehicle end to the mobile end.

[0018] In some embodiments of the present application, optionally, the key management and encryption / decryption module is further configured to: receive second encrypted session content from the mobile terminal; and decrypt the second encrypted session content using the session key to obtain second session content.

[0019] According to another aspect of the present application, a mobile terminal for vehicle communication is provided. The mobile terminal includes: a verification module configured to read a graphical code presented by a vehicle terminal communicating with the mobile terminal; a key management and encryption / decryption module configured to decrypt information carried in the graphical code using a password to obtain a seed key; and a session management module configured to negotiate with the vehicle terminal to determine session information and receive encrypted session content from the vehicle terminal. The key management and encryption / decryption module is further configured to generate a session key based on the seed key and the session information using a key generation algorithm, and to decrypt the encrypted session content using the session key to obtain the session content.

[0020] In some embodiments of the present application, optionally, the key management and encryption / decryption module is further configured to: encrypt the second session content using the session key to generate second encrypted session content; and send the second encrypted session content.

[0021] According to another aspect of the present application, a vehicle communication terminal is provided, comprising: a memory configured to store instructions; and a processor configured to execute the instructions so as to perform any one of the vehicle communication methods described above.

[0022] According to another aspect of the present application, a vehicle is provided, wherein the vehicle includes any one of the vehicle communication terminals described above.

[0023] According to another aspect of the present application, a computer-readable storage medium is provided, in which instructions are stored. The computer-readable storage medium is characterized in that when the instructions are executed by a processor, the processor executes any one of the vehicle communication methods described above.

[0024] According to some embodiments of the present application, the vehicle communication method and terminal, the vehicle, and the computer-readable storage medium can establish a reliable communication link between the vehicle end and the mobile end, thereby ensuring the security of the signal transmitted between the two. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] The above and other objects and advantages of the present application will become more fully apparent from the following detailed description taken in conjunction with the accompanying drawings, wherein the same or similar elements are denoted by the same reference numerals.

[0026] Figure 1 A vehicle communication method according to an embodiment of the present application is shown;

[0027] Figure 2 A vehicle communication method according to an embodiment of the present application is shown;

[0028] Figure 3 A vehicle communication terminal according to an embodiment of the present application is shown;

[0029] Figure 4 A vehicle communication terminal according to an embodiment of the present application is shown;

[0030] Figure 5 A mobile terminal according to an embodiment of the present application is shown;

[0031] Figure 6 A vehicle communication system and its operating principle according to an embodiment of the present application are shown. DETAILED DESCRIPTION

[0032] For the purposes of brevity and illustration, the principles of the present application are described herein primarily with reference to exemplary embodiments thereof. However, those skilled in the art will readily recognize that the same principles are equally applicable to all types of vehicle communication methods and terminals, vehicles, and computer-readable storage media, and that the same or similar principles may be implemented therein, without departing from the true spirit and scope of the present application.

[0033] According to one aspect of the present application, a vehicle communication method is provided. Figure 1 As shown, a vehicle communication method 10 (hereinafter referred to as method 10) includes the following steps executed by the vehicle: in step S102, a seed key is generated and a graphical code related to the seed key is displayed; in step S104, session information is determined through negotiation with the mobile terminal, and a session key is generated using a key generation algorithm based on the seed key and session information; in step S106, the session content is encrypted using the session key to generate encrypted session content; and in step S108, the encrypted session content is transmitted. The above steps of method 10 synchronize the seed key between the vehicle and mobile terminal. Decrypting the seed key using a password ensures that even if it is intercepted, no information is leaked. The synchronized seed key and session information can be used for subsequent encrypted communications, thereby ensuring the reliability of data exchanged between the vehicle and mobile terminal. The specific working principles of the above steps of method 10 are described in detail below.

[0034] To clearly illustrate the working principle of method 10, the following will be combined with Figure 6 The vehicle communication system shown in FIG. Figure 6As shown, the vehicle communication system includes the vehicle side and the mobile side. The following describes some examples of end-to-end encrypted (E2EE) communication using session keys. In this case, the data transmitted between the sender and receiver (including intermediate receivers) is E2EE encrypted data. The following operations are performed between these entities, and the sequence numbers of the operations below correspond to the sequence numbers in the diagram:

[0035] ①Scan the QR code. Figure 6 The illustrated solution can be an end-to-end encryption scheme for privacy protection in a real-time Internet of Vehicles (IoV) data transmission scenario. Before establishing a real-time session, a seed key must be synchronized via QR code scanning. This seed key serves as the basis for subsequent key rotation for the end-to-end encryption session. In addition to the seed key, the QR code can also contain vehicle-side identity information (e.g., the vehicle identification number). This information is protected by a password. After scanning the QR code on a mobile device, the password must be entered to decode the seed key and vehicle-side identity information.

[0036] ② Real-time session. In a real-time session scenario, the vehicle and mobile devices establish a real-time session connection. Both parties negotiate to generate real-time session-related information (referred to in this application as session information, which can be exchanged via a secure transmission channel). Finally, both parties use a key generation algorithm to generate the same real-time session key based on the session information and the seed key.

[0037] ③ Real-time data interaction. In a real-time session scenario, both ends of the session encrypt and decrypt the data exchanged between them using the real-time session key.

[0038] It should be noted that Figure 6 The above description is intended to provide readers with a sufficient but not necessarily complete solution so that readers can thoroughly understand the basic principles of the present application, but this solution is not intended to limit other embodiments.

[0039] return Figure 1, different from describing the communication system as a whole, method 10 mainly looks at how to execute the communication method from the perspective of the vehicle side. In step S102, method 10 generates a seed key and presents a graphical code about the seed key. Among them, the information carried in the graphical code can be encrypted by a password and can be used for reading by a mobile terminal that needs to communicate with the vehicle side. The seed key generated in step S102 will make it possible to encrypt information in subsequent processes through methods such as symmetric encryption. Subsequently, the receiving end (mobile terminal) of the seed key can extract the seed key from the information carried in the graphical code through a password. In some examples, the graphical code can be a QR code; in other examples, the graphical code can also be other graphic codes that can be read by a machine, such as a barcode. In some embodiments of the present application, the information carried in the graphical code also includes information such as the vehicle identification code of the vehicle side.

[0040] In step S104, method 10 negotiates with the mobile terminal to determine session information, and generates a session key using a key generation algorithm based on the seed key and session information. In some embodiments of the present application, the session information can be determined by negotiation between the two terminals based on a timestamp, a random number, etc. The generation of a session key for symmetric encryption based on the random session information and the seed key can be carried out according to existing techniques and will not be further described herein.

[0041] In step S106, method 10 encrypts the session content using the session key to generate encrypted session content. Session content encrypted using the session key is highly secure, preventing information leakage even if intercepted mid-transmission. Furthermore, because session information is continuously updated by both ends during a real-time conversation, the session key generated based on it is also continuously updated, making it more difficult for attackers to decrypt the information through brute force.

[0042] In step S108 , method 10 sends the encrypted session content to the mobile terminal in real time.

[0043] In this way, method 10 can use symmetric encryption to encrypt real-time conversation content, thereby ensuring communication security. Since the conversation content itself is large, it can be encrypted using a symmetric encryption method with a real-time key change. Symmetric encryption strikes a balance between security and efficiency.

[0044] In some embodiments of the present application, as described above, method 10 may be used for transmitting real-time data. For example, the conversation content may be transmitting a real-time image from the vehicle terminal to the mobile terminal.

[0045] The above steps primarily describe the scenario where the vehicle acts as the session initiator. Similarly, the vehicle can also act as the receiving end. Specifically, method 10 may further include the following steps (not shown): receiving encrypted session content from the mobile terminal (referred to as second encrypted session content for distinction); and decrypting the second encrypted session content using the session key to obtain session content (referred to as second session content for distinction).

[0046] According to another aspect of the present application, a vehicle communication method is provided. Figure 2 As shown, the vehicle communication method 20 (hereinafter referred to as method 20) includes the following steps performed by the mobile terminal: in step S202, a graphical code presented by the vehicle terminal communicating with the mobile terminal is read; in step S204, the information carried in the graphical code is decrypted by a password to obtain a seed key; in step S206, the session information is negotiated with the vehicle terminal to determine, and a session key is generated by a key generation algorithm based on the seed key and the session information; in step S208, the encrypted session content is received from the vehicle terminal; and in step S210, the encrypted session content is decrypted by the session key to obtain the session content.

[0047] The above steps primarily describe the operating scenario when the mobile terminal serves as the receiving end of a session. Similarly, the mobile terminal can also serve as the initiating end. Specifically, method 20 may further include the following steps (not shown): encrypting the session content (referred to as the second session content for distinction) using the session key to generate encrypted session content (referred to as the second encrypted session content for distinction); and sending the second encrypted session content.

[0048] It should be noted that the vehicle side and the mobile side are in an unequal position only when scanning the code (the vehicle side needs to present the QR code and the mobile side needs to scan the QR code). In other cases, the two are equal and the work processes can refer to each other.

[0049] According to another aspect of the present application, a vehicle communication terminal is provided. Figure 3 As shown, a vehicle communication terminal 30 (hereinafter referred to as terminal 30 ) includes a memory 302 and a processor 304 . The processor 304 can read data from and write data to the memory 302 . The memory 302 can store instructions, and the processor 304 can execute the instructions stored in the memory 302 to perform any of the vehicle communication methods described above.

[0050] According to another aspect of the present application, a vehicle communication terminal is provided. Figure 4 As shown, the vehicle communication terminal 40 (hereinafter referred to as terminal 40 ) includes a key management and encryption / decryption module, a verification module, and a session management module.

[0051] The key management and encryption / decryption module of the terminal 40 can be used to generate a seed key. The verification module of the terminal 40 can be used to present a graphical code related to the seed key. The information carried in the graphical code is encrypted by a password for reading by a mobile terminal communicating with the vehicle terminal. In some examples, the graphical code can be a QR code; in other examples, the graphical code can also be other machine-readable graphical codes, such as a barcode. In addition, the information carried in the graphical code also includes the vehicle identification code of the vehicle terminal. Specifically, the verification module integrates the two functions of QR code generation and display. The QR code contains information such as the seed key (the seed key is derived from the master key), the vehicle terminal identity information, etc., which is encoded and then encrypted by a password. Random information can be added when encoding the QR code to ensure that the QR code generated each time is different, to prevent the QR code information from being reverse analyzed.

[0052] The session management module of terminal 40 can negotiate with the mobile terminal to determine session information. In some embodiments of the present application, the session information can be determined based on at least one of the following: a timestamp and a random number. Specifically, the session management module can be used for offline session management and real-time session management. The session management module manages session-related information for offline and real-time sessions, including vehicle-side identity information, mobile terminal identity information, timestamps, random numbers, and other information. This session information is synchronized to both ends via a secure encrypted channel. Both ends can use a key generation algorithm to generate a real-time session key based on the session information and a seed key for subsequent end-to-end data encryption transmission.

[0053] In addition, the key management and encryption / decryption module of the terminal 40 is further configured to generate a session key using a key generation algorithm according to the seed key and session information, encrypt the session content using the session key to generate encrypted session content, and send the encrypted session content.

[0054] Specifically, the key management and encryption / decryption modules manage the master key, seed key, session key, and other keys involved in end-to-end encryption, as well as encryption, decryption, and key derivation. The master key is generated by the real-time session initiator. The seed key is derived from the master key and synchronized to the real-time session receiver via a QR code scan. The session key is used for end-to-end data encryption transmission in both offline and real-time session scenarios. The encryption / decryption functions provide encryption / decryption interfaces, and the key derivation algorithm is used to generate session keys. The key generation algorithm uses the seed key and derives keys based on the application type and time factor, generating one-time session keys through rotation and permutation. This algorithm derives a one-time symmetric key, a one-time initialization vector, and a key digest based on event time. Data is encrypted using the one-time symmetric key and one-time initialization vector, and the key digest is used to verify the key.

[0055] On the other hand, the terminal 40 can also serve as the receiving end of the session. In this case, the key management and encryption / decryption module is further configured to: receive the encrypted session content from the mobile terminal (referred to as the second encrypted session content for distinction); and decrypt the second encrypted session content using the session key to obtain the session content (referred to as the second session content for distinction).

[0056] In some embodiments of the present application, the conversation content may be a real-time image transmitted from the vehicle end to the mobile end.

[0057] In addition, the terminal 40 may also include a hardware security module (not shown in the figure), which can be an abstract layer of the vehicle-side underlying security hardware module HSM, used to provide key generation, management and data encryption and decryption capabilities.

[0058] According to another aspect of the present application, a mobile terminal for vehicle communication is provided. Figure 5 As shown, the mobile terminal 50 includes a key management and encryption and decryption module, a verification module, and a session management module. Among them, the key management and encryption and decryption module and the session management module of the mobile terminal 50 can have the same functions as the corresponding modules of the terminal 40, specifically:

[0059] The verification module of the mobile terminal 50 can read the graphical code presented by the vehicle terminal in communication with the mobile terminal. The verification module of the mobile terminal 50 integrates a QR code scanning function. By scanning the QR code information of the vehicle terminal, the mobile terminal can decrypt the encrypted password and obtain the vehicle terminal's seed key, vehicle terminal identity information, timestamp, signature, and other information.

[0060] The key management and encryption / decryption module of the mobile terminal 50 can decrypt the information contained in the graphical code using a password to obtain a seed key. The session management module of the mobile terminal 50 can negotiate with the vehicle terminal to determine session information and can receive encrypted session content and session information from the vehicle terminal. The key management and encryption / decryption module is further configured to generate a session key using a key generation algorithm based on the seed key and session information, and to decrypt the encrypted session content using the session key to obtain the session content.

[0061] On the other hand, the mobile terminal 50 can also serve as the initiator of the session. At this time, the key management and encryption / decryption module is further configured to: use the session key to encrypt the session content (referred to as the second session content for distinction) to generate encrypted session content (referred to as the second encrypted session content for distinction); and send the second encrypted session content.

[0062] Similarly, the mobile terminal 50 may also include a hardware security module (not shown in the figure), which may be an abstract layer of the vehicle-side underlying security hardware module HSM, and is used to provide key generation, management, and data encryption and decryption capabilities.

[0063] According to another aspect of the present application, a vehicle is provided. The vehicle includes any of the vehicle communication terminals described above. This application does not limit the vehicle's layout (e.g., wheeled vehicle, tracked vehicle, etc.) or driving force (e.g., electric motor, gasoline engine, etc.). The vehicles of this application encompass various vehicles currently known in the art as well as vehicles developed in the future.

[0064] According to another aspect of the present application, a computer-readable storage medium is provided, wherein instructions are stored. When the instructions are executed by a processor, the processor is caused to perform any of the vehicle communication methods described above. The computer-readable medium referred to in the present application includes various types of computer storage media, and can be any available medium that can be accessed by a general-purpose or special-purpose computer. For example, the computer-readable medium can include RAM, ROM, EPROM, E 2 PROM, register, hard disk, removable disk, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage device, or any other temporary or non-temporary medium that can be used to carry or store desired program code units in the form of instructions or data structures and can be accessed by a general or special purpose computer, or a general or special purpose processor. As used herein, disks typically reproduce data magnetically, while discs use lasers to reproduce data optically. The above combinations should also be included within the scope of protection of computer-readable media. The exemplary storage medium is coupled to the processor so that the processor can read and write information from / to the storage medium. In an alternative solution, the storage medium can be integrated into the processor. The processor and storage medium can reside in an application-specific integrated circuit (ASIC). The ASIC can reside in a user terminal. In an alternative solution, the processor and storage medium can reside in the user terminal as discrete components.

[0065] The above are only specific embodiments of the present application, but the scope of protection of the present application is not limited thereto. Those skilled in the art can think of other feasible changes or replacements based on the technical scope disclosed in this application, and such changes or replacements are all included in the scope of protection of the present application. In the absence of conflict, the embodiments of the present application and the features in the embodiments can also be combined with each other. The scope of protection of the present application shall be based on the description of the claims.

Claims

1. A vehicle communication method, characterized in that: The method comprises the following steps performed by the vehicle side: generating a seed key and presenting a graphical code related to the seed key, wherein information carried in the graphical code is encrypted by a password, and the graphical code is used to be read by a mobile terminal communicating with the vehicle terminal; Negotiate with the mobile terminal to determine session information, and generate a session key using a key generation algorithm based on the seed key and the session information; encrypting the session content using the session key to generate encrypted session content; and sending the encrypted session content, The session information is updated by the vehicle terminal and the mobile terminal during the real-time session.

2. The method according to claim 1, wherein The graphical code is a QR code.

3. The method according to claim 1, wherein The information carried in the graphical code also includes the vehicle identification code of the vehicle end.

4. The method according to claim 1, wherein The session information is determined according to at least one of the following: a timestamp and a random number.

5. The method according to claim 1, wherein The conversation content includes: transmitting real-time images from the vehicle end to the mobile end.

6. The method according to claim 1, further comprising: receiving second encrypted session content from the mobile terminal; as well as The second encrypted session content is decrypted using the session key to obtain the second session content.

7. A vehicle communication method, characterized in that: The method includes the following steps performed by the mobile terminal: reading a graphical code presented by a vehicle terminal communicating with the mobile terminal; Decrypting the information carried in the graphical code using a password to obtain a seed key; Negotiate with the vehicle end to determine session information, and generate a session key using a key generation algorithm based on the seed key and the session information; Receiving encrypted session content from the vehicle end; as well as Decrypting the encrypted session content using the session key to obtain the session content, The session information is updated by the vehicle terminal and the mobile terminal during the real-time session.

8. The method according to claim 7, further comprising: encrypting the second session content using the session key to generate second encrypted session content; as well as The second encrypted session content is sent.

9. A vehicle communication terminal, characterized in that: The terminal includes: a key management and encryption / decryption module configured to generate a seed key; a verification module configured to present a graphical code related to the seed key, wherein information carried in the graphical code is encrypted by a password for reading by a mobile terminal communicating with the vehicle terminal; and A session management module configured to negotiate with the mobile terminal to determine session information; wherein, The key management and encryption / decryption module is further configured to generate a session key using a key generation algorithm according to the seed key and the session information, encrypt the session content using the session key to generate encrypted session content, and send the encrypted session content. The session information is updated by the vehicle terminal and the mobile terminal during the real-time session.

10. The terminal according to claim 9, wherein: The graphical code is a QR code. The terminal according to claim 9 , wherein: The information carried in the graphical code also includes the vehicle identification code of the vehicle end.

12. The terminal according to claim 9, wherein: The session information is determined according to at least one of the following: a timestamp and a random number.

13. The terminal according to claim 9, wherein: The conversation content includes: transmitting real-time images from the vehicle end to the mobile end. The terminal according to claim 9 , wherein: The key management and encryption / decryption module is further configured to: receiving a second encrypted session content from the mobile terminal; and The second encrypted session content is decrypted using the session key to obtain the second session content.

15. A mobile terminal for vehicle communication, characterized in that: The mobile terminal includes: a verification module configured to read a graphical code presented by a vehicle terminal in communication with the mobile terminal; a key management and encryption / decryption module configured to decrypt the information carried in the graphical code using a password to obtain a seed key; A session management module configured to negotiate with the vehicle end to determine session information and receive encrypted session content from the vehicle end; wherein, The key management and encryption / decryption module is further configured to generate a session key using a key generation algorithm according to the seed key and the session information, and to decrypt the encrypted session content using the session key to obtain the session content. The session information is updated by the vehicle terminal and the mobile terminal during the real-time session.

16. The mobile terminal according to claim 15, wherein: The key management and encryption / decryption module is further configured to: encrypting the second session content using the session key to generate second encrypted session content; and The second encrypted session content is sent.

17. A vehicle communication terminal, characterized in that: The terminal includes: a memory configured to store instructions; and A processor configured to execute the instructions so as to perform the method according to any one of claims 1 to 6.

18. A computer-readable storage medium storing instructions, characterized in that: When the instructions are executed by a processor, the processor is caused to perform the method according to any one of claims 1 to 8.

19. A vehicle, characterized in that: The vehicle includes the vehicle communication terminal according to any one of claims 9 to 14 and 17.

Images