Vehicle computer recycling method, device, system, equipment and medium

Abstract

The present disclosure relates to a vehicle computer recycling method, device, system, equipment and medium. The vehicle computer recycling method includes: receiving a target token sent by an electronic device while being connected to the electronic device in communication; performing an initialization operation on the vehicle computer when the target token passes the verification; after the initialization operation is completed, controlling the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state. According to the embodiments of the present disclosure, the vehicle computer can be changed from a commercial device to a research and development debugging device in terms of hardware, thereby preventing the vehicle computer from being hacked by root and improving the security of the vehicle computer during subsequent research and development debugging.

Description

Technical Field

[0001] The present disclosure relates to the technical field of vehicle machine recycling, and in particular to a vehicle machine recycling processing method, device, system, equipment and medium. Background Art

[0002] The car computer is an important part of the car. With the popularization of cars, the number of car computers that are repaired and replaced is increasing. In order to avoid the waste of resources and generation of electronic waste caused by directly scrapping the car computers, the car computers that are repaired and replaced can be used in research and development and debugging.

[0003] However, currently, when the car computers that have been repaired and replaced are transferred to R&D and debugging, the software is generally flashed and released to change the car computer from a commercial device to an R&D and debugging device in terms of software. However, the car computer is still a commercial device in terms of hardware, making it easy to be hacked by root users, which in turn leads to security issues in the subsequent R&D and debugging process. Summary of the invention

[0004] In order to solve the above technical problems, the present disclosure provides a vehicle machine recycling method, device, system, equipment and medium.

[0005] A first aspect of an embodiment of the present disclosure provides a vehicle machine recycling method, comprising:

[0006] In case of communication connection with the electronic device, receiving a target token sent by the electronic device;

[0007] When the target token passes the verification, the vehicle computer is initialized;

[0008] After the initialization operation is completed, the fuse in the control vehicle computer is irreversibly changed from the connected state to the disconnected state.

[0009] A second aspect of the disclosed embodiment provides a vehicle machine recycling method, including:

[0010] Get the target token sent by the security server;

[0011] When the vehicle computer is in communication connection, a target token is sent to the controller of the vehicle computer. The target token is used to enable the controller to perform initialization operations on the vehicle computer and control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state when the controller passes the verification.

[0012] A third aspect of the embodiments of the present disclosure provides a vehicle machine recycling and processing device, comprising:

[0013] A first receiving unit, configured to receive a target token sent by the electronic device when in communication connection with the electronic device;

[0014] The vehicle computer initialization unit is configured to perform an initialization operation on the vehicle computer when the target token passes the verification;

[0015] The fuse control unit is configured to control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state after the initialization operation is completed.

[0016] A fourth aspect of the embodiments of the present disclosure provides a vehicle machine recycling and processing device, comprising:

[0017] A first acquisition unit, configured to acquire a target token sent by a security server;

[0018] The first sending unit is configured to send a target token to the controller of the vehicle computer when it is connected to the vehicle computer for communication. The target token is used to enable the controller to perform initialization operations on the vehicle computer and control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state when it passes the verification of the controller.

[0019] A fifth aspect of the embodiments of the present disclosure provides a vehicle machine recycling processing system, including:

[0020] A security server, the security server is used to send a target token to the electronic device;

[0021] An electronic device, the electronic device is used to obtain a target token sent by a security server; and, when in communication connection with a vehicle computer, send the target token to a controller of the vehicle computer;

[0022] A controller of the vehicle computer, the controller is used to receive a target token sent by the electronic device when communicating with the electronic device; perform an initialization operation on the vehicle computer when the target token passes the verification; and after the initialization operation is completed, control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state.

[0023] A sixth aspect of an embodiment of the present disclosure provides a computing device, including:

[0024] processor;

[0025] A memory for storing executable instructions;

[0026] The processor is used to read executable instructions from the memory and execute the executable instructions to implement the vehicle machine recycling method provided in the first aspect or the second aspect.

[0027] A seventh aspect of an embodiment of the present disclosure provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the processor implements the vehicle machine recycling method provided in the first aspect or the second aspect.

[0028] Compared with the prior art, the technical solution provided by the embodiments of the present disclosure has the following advantages:

[0029] The vehicle computer recycling processing method, device, system, equipment and medium provided by the embodiments of the present disclosure, the controller of the vehicle computer can receive the target token sent by the electronic device and obtained from the security server when the vehicle computer is in communication connection with the electronic device, and verify the target token. If the target token passes the verification, the vehicle computer is initialized, and then after the initialization operation is completed, the fuse in the vehicle computer is controlled to be irreversibly changed from a connected state to a disconnected state. Since the fuse is a disposable component connected to the circuit board of the vehicle computer to protect the circuit board of the vehicle computer, when the vehicle computer is a commercial device in hardware, the fuse is in a connected state, and when the vehicle computer is a research and development debugging device in hardware, the fuse is irreversibly changed from a connected state to a disconnected state. Therefore, in the process of recycling the vehicle computer, after the vehicle computer is initialized, the fuse in the vehicle computer can be controlled to be irreversibly changed from a connected state to a disconnected state, so that the vehicle computer is changed from a commercial device to a research and development debugging device in hardware, thereby avoiding the vehicle computer from being rooted and improving the security of the vehicle computer in the subsequent research and development debugging process. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0031] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0032] Figure 1 It is a structural schematic diagram of a vehicle machine recycling and processing system provided by an embodiment of the present disclosure;

[0033] Figure 2 is a flow chart of a vehicle machine recycling method provided by an embodiment of the present disclosure;

[0034] Figure 3 is a flow chart of another vehicle machine recycling method provided by an embodiment of the present disclosure;

[0035] Figure 4 is a flow chart of another vehicle machine recycling method provided by an embodiment of the present disclosure;

[0036] Figure 5 is a flow chart of another vehicle machine recycling method provided by an embodiment of the present disclosure;

[0037] Figure 6 It is a structural schematic diagram of a vehicle machine recycling and processing device provided by an embodiment of the present disclosure;

[0038] Figure 7 is a structural schematic diagram of another vehicle machine recycling and processing device provided by an embodiment of the present disclosure;

[0039] Figure 8 It is a structural diagram of a computing device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0040] In order to more clearly understand the above-mentioned objectives, features and advantages of the present disclosure, the scheme of the present disclosure will be further described below. It should be noted that the embodiments of the present disclosure and the features in the embodiments can be combined with each other without conflict.

[0041] In the following description, many specific details are set forth to facilitate a full understanding of the present disclosure, but the present disclosure may also be implemented in other ways different from those described herein; it is obvious that the embodiments in the specification are only part of the embodiments of the present disclosure, rather than all of the embodiments.

[0042] It should be understood that the various steps described in the method embodiments of the present disclosure may be performed in different orders and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present disclosure is not limited in this respect.

[0043] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0044] It should be noted that the modifications of "one" and "plurality" mentioned in the present disclosure are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0045] In order to avoid the waste of resources and generation of electronic waste caused by directly scrapping the vehicle computer, the repaired and replaced vehicle computer can be used in research and development and debugging.

[0046] However, in the R&D and market launch life cycle of vehicle computers, there are essential differences between commercial equipment and R&D and debugging equipment. Commercial equipment has the characteristics of high confidentiality, high security level and corresponding low debuggability. Therefore, R&D and debugging equipment cannot be directly converted into commercial equipment, otherwise there will be a large number of security issues. Commercial equipment cannot be directly used for secondary R&D because it does not have debugging capabilities.

[0047] Currently, when a car computer that has been repaired and replaced is transferred to R&D and debugging, the software is generally flashed and released to change the car computer from a commercial device to an R&D and debugging device in terms of software. However, the car computer is still a commercial device in terms of hardware, making it easy to be hacked by root users, which in turn leads to a series of security issues in the subsequent R&D and debugging process.

[0048] In addition, the core chips such as the storage chip of the car computer do not have debugging capabilities. In order to improve the recycling rate of hardware resources, they need to be removed when used for research and development and debugging, and replaced with new related chips with debugging capabilities so that the car computer can be used for research and development and debugging. However, the operation of replacing the chip is complicated and inefficient, and there is a risk of leakage of user information in the chip after removal, and the security of user data cannot be guaranteed.

[0049] In order to solve the above-mentioned problems, the embodiments of the present disclosure provide a vehicle machine recycling method, device, system, equipment and medium.

[0050] For ease of understanding, the vehicle machine recycling and processing system provided by the embodiment of the present disclosure is first introduced below.

[0051] Figure 1 It is a structural schematic diagram of a vehicle machine recycling and processing system provided by an embodiment of the present disclosure.

[0052] like Figure 1 As shown, the vehicle machine recycling and processing system includes a vehicle machine controller 110 , an electronic device 120 and a security server 130 .

[0053] The vehicle computer is an in-vehicle infotainment device installed in the vehicle, and the vehicle computer can realize information communication between people and vehicles, vehicles and the outside world, such as vehicles and vehicles. In the embodiments of the present disclosure, the vehicle computer refers to the vehicle computer that needs to be recycled, including some simulated commercial vehicles for testing and vehicle computers replaced by commercial vehicles that have been in commercial use, without limitation.

[0054] Specifically, a fuse may be provided on the vehicle computer. A fuse, also known as a fuse, is a disposable component connected to the circuit board of the vehicle computer to protect the circuit board of the vehicle computer. Fuses are usually "etched" or "hard-coded" into the control chip of the vehicle computer, such as the controller 110 of the vehicle computer, and cannot be changed after the chip is completed, ensuring the basic safety of commercial equipment. However, using one-time programmable memory (eFuse) technology, the state of the fuse can be changed. Once the state of the fuse is changed, it cannot be restored. In other words, the eFuse technology only allows the fuse to be programmed once. Once programmed, the data will be permanently valid and cannot be modified, thereby achieving the irreversible change of the fuse state from a connected state to a disconnected state, causing the circuit on the chip to undergo irreversible changes during operation, and then causing the circuit board of the vehicle computer to undergo irreversible changes in hardware.

[0055] Furthermore, the controller 110 of the vehicle computer can exchange information with each chip on the circuit board of the vehicle computer, and control each chip on the circuit board of the vehicle computer to execute corresponding instructions. Among them, each chip on the circuit board of the vehicle computer can include a storage chip, an encryption chip, a central processing unit (CPU) chip, etc., which is not limited here. Specifically, the controller 110 of the vehicle computer can be a CPU chip on the circuit board of the vehicle computer.

[0056] Furthermore, the controller 110 of the vehicle computer can establish a communication connection with the electronic device 120 through an On-Board Diagnostics (OBD) interface of the vehicle computer.

[0057] The electronic device 120 may be a terminal device with a host computer function, such as a laptop computer, a tablet computer, or a desktop computer, and is not limited here.

[0058] Specifically, the electronic device 120 can be connected to the OBD interface of the vehicle computer through the vehicle diagnostic instrument. The vehicle diagnostic instrument is a professional instrument for vehicle detection, which can detect the performance of the vehicle in real time and send it back to the electronic device 120, and detect vehicle faults based on the commands issued by the electronic device 120. It is an essential tool for detecting vehicles. It can be seen that the electronic device 120 can exchange information with the controller 110 of the vehicle computer through the vehicle diagnostic instrument.

[0059] Furthermore, the electronic device 120 may establish a communication connection with the security server 130 via a wired network or a wireless network.

[0060] The security server 130 may be a security server based on a hardware security module (HSM), referred to as “HSM security server” for short.

[0061] In the disclosed embodiment, the security server 130 may be used to send a target token to the electronic device 120. The electronic device 120 may be used to obtain the target token sent by the security server 130, and send the target token to the controller 110 of the vehicle computer when in communication connection with the vehicle computer.

[0062] The communication connection between the electronic device 120 and the vehicle computer refers to the connection between the electronic device 120 and the OBD interface of the vehicle computer through the vehicle diagnostic instrument.

[0063] The target token is an identity authentication token, which is used to securely transmit identity-related information between the security server 130, the electronic device 120 and the vehicle controller 110, and enables the vehicle controller 110 to strengthen the identity authentication process for vehicle recovery, and the vehicle controller 110 authenticates and performs the recovery operation after the authentication is passed. Since the key of the HSM security server does not require software to participate in the management, the generation and acquisition of the key are both based on the hardware mechanism. Therefore, the target token generated based on the key can have a higher level of security.

[0064] The controller 110 of the vehicle computer can be used to receive a target token sent by the electronic device 120 when in communication connection with the electronic device, and perform an initialization operation on the vehicle computer when the target token passes verification, and after the initialization operation is completed, control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state.

[0065] The hardware of the controller 110 of the vehicle computer is designed based on the TrustZone security architecture. TrustZone is a hardware architecture designed by ARM for consumer electronic devices. Its purpose is to build a security framework for consumer electronic products to resist various possible attacks. TrustZone conceptually divides the hardware and software resources of the chip into two worlds: secure (Secure World) and non-secure (Normal World). All operations that need to be kept confidential are performed in the secure world. Therefore, the controller 110 of the vehicle computer can verify the target token in its secure world and control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state to improve the security of authentication.

[0066] In the disclosed embodiment, the controller of the vehicle computer can receive a target token obtained from a security server by the electronic device and verify the target token when the vehicle computer is communicatively connected to the electronic device. If the target token passes the verification, an initialization operation is performed on the vehicle computer. After the initialization operation is completed, the fuse in the vehicle computer is controlled to be irreversibly changed from a connected state to a disconnected state. Since the fuse is a disposable component connected to the circuit board of the vehicle computer to protect the circuit board of the vehicle computer, when the vehicle computer is a commercial device in hardware, the fuse is in a connected state, and when the vehicle computer is a research and development and debugging device in hardware, the fuse is irreversibly changed from a connected state to a disconnected state. Therefore, in the process of recycling the vehicle computer, after the vehicle computer is initialized, the fuse in the vehicle computer can be controlled to be irreversibly changed from a connected state to a disconnected state, so that the vehicle computer is changed from a commercial device to a research and development and debugging device in hardware, thereby avoiding the vehicle computer from being rooted and improving the security of the vehicle computer during subsequent research and development and debugging.

[0067] In some embodiments of the present disclosure, before the electronic device 120 obtains the target token sent by the security server 130, it can send a recovery instruction to the controller 110 of the vehicle computer when it is in communication connection with the vehicle computer. Before receiving the target token sent by the electronic device, the controller 110 of the vehicle computer can first receive the recovery instruction sent by the electronic device 120, and in response to the recovery instruction, send a token request to the electronic device 120, and the token request can carry the device identification of the vehicle computer. The electronic device 120 can receive the token request sent by the controller 110 of the vehicle computer in response to the recovery instruction, and in response to the token request, send an authorization request to the security server 130, and the authorization request carries the device identification of the vehicle computer. The security server 130 can authorize the recovery instruction sent by the electronic device 120 to the controller 110 of the vehicle computer based on the device identification of the vehicle computer, and obtain the target token, and then feed back the target token to the electronic device 120. The electronic device 120 can receive the target token fed back by the security server 130 and forward it to the controller 110 of the vehicle computer.

[0068] Therefore, in the embodiment of the present disclosure, when the security server 130 authorizes the recycling instruction sent by the electronic device 120 to the controller 110 of the vehicle computer, the target token can be sent to the electronic device 120, and the electronic device 120 forwards it to the controller 110 of the vehicle computer, so that the controller 110 of the vehicle computer can perform relevant operations of vehicle computer recycling with the authorization of the security server 130, thereby improving the security of vehicle computer recycling.

[0069] In some embodiments of the present disclosure, the target token may include a target device identifier and a target signature, and the target signature may be generated based on the target device identifier.

[0070] Among them, the controller 110 of the vehicle computer can also perform signature verification on the target signature. If the target signature fails to pass the signature verification, the controller 110 of the vehicle computer determines that the target token fails to pass the verification; if the target signature passes the signature verification, the controller 110 of the vehicle computer compares the target device identifier with the device identifier of the vehicle computer. If the target device identifier is the same as the device identifier, the controller 110 of the vehicle computer determines that the target token passes the verification; if the target device identifier is different from the device identifier, the controller 110 of the vehicle computer determines that the target token fails to pass the verification.

[0071] Therefore, in the embodiment of the present disclosure, the controller 110 of the vehicle computer can determine whether the target token has passed the verification by double verification of the target signature and the target device identification. On the one hand, it ensures the credibility of the source of the target token, and on the other hand, it ensures that the target token is used to authorize the controller 110 of the vehicle computer to perform relevant operations of vehicle computer recovery, further improving the security of vehicle computer recovery.

[0072] In some embodiments of the present disclosure, the register of the fuse may reserve a flag bit for identifying the fuse state. If the flag bit contains a conduction flag such as 0, the fuse is in a connected state, and at this time, the vehicle computer is a commercial device in terms of hardware; if the flag bit contains a fuse flag such as 1, the fuse is in a disconnected state, and at this time, the vehicle computer is a research and development debugging device in terms of hardware.

[0073] Among them, the controller 110 of the vehicle computer can write a fuse identifier to the register of the fuse, and the fuse identifier can be used to irreversibly change the fuse from a connected state to a disconnected state, thereby enabling the controller 110 of the vehicle computer to control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state.

[0074] Specifically, the controller 110 of the vehicle computer can use the eFuse technology to write a fuse identifier into the register of the fuse.

[0075] Therefore, in the disclosed embodiment, the controller 110 of the vehicle computer can change the hardware type of the vehicle computer by changing the state of the flag bit in the register of the fuse for identifying the fuse state, without structurally destroying the circuit board of the vehicle computer, thereby improving the reliability of the vehicle computer during subsequent research and development and debugging. At the same time, through the eFuse technology, mandatory protection can also be provided at the hardware level.

[0076] In some embodiments of the present disclosure, the controller 110 of the vehicle computer may further send a clear instruction to the storage chip of the vehicle computer before performing an initialization operation on the vehicle computer, where the clear instruction is used to enable the storage chip to permanently clear the data locally stored in the storage chip.

[0077] Specifically, the controller 110 of the vehicle computer can clear the user data in the storage chip in its secure world.

[0078] Furthermore, the controller 110 of the vehicle computer may send a clearing instruction to the storage chip of the vehicle computer, so that the storage chip directly executes an operation of permanently clearing the data locally stored in the storage chip without going through other processes.

[0079] Therefore, in the embodiment of the present disclosure, the controller 110 of the vehicle computer can ensure that the user data is completely and permanently deleted during the recovery of the vehicle computer, and the data clearing is realized in a secure world. At the same time, the data clearing is a permanent clearing operation performed inside the storage chip. Therefore, the data transmission of user data during the clearing process can be avoided, and the data can be avoided from being attacked when being transmitted between chips, so that the data clearing process will not be touched by anyone, thereby improving the security of user data.

[0080] In summary, the vehicle machine recycling and processing system provided by the embodiment of the present disclosure can use the eFuse fuse technology to distinguish the type of vehicle machines in hardware, provide mandatory protection at the hardware level, and blow the fuse with the vehicle machine controller 110 based on the ARM TrustZone security architecture, and can safely clear user data without contact, providing EL3 security level protection for the vehicle machine that has been replaced after repair when it is transferred to research and development debugging. This realizes the safe and effective recycling of vehicle machines, which can not only be used for secondary research and development, save the cost of vehicle development, achieve green energy-saving goals, but also effectively block the risk of user data leakage.

[0081] Reference below Figures 2 to 5 The following will continue to introduce the vehicle machine recycling method provided by the embodiment of the present disclosure.

[0082] Figure 2 It is a flow chart of a vehicle machine recycling method provided by an embodiment of the present disclosure.

[0083] In the embodiment of the present disclosure, the vehicle computer recycling method can be executed by a controller of the vehicle computer, for example Figure 1 The controller 110 of the vehicle computer.

[0084] like Figure 2 As shown, the vehicle machine recycling method may include the following steps.

[0085] S210. When the electronic device is in communication connection, receive a target token sent by the electronic device.

[0086] In the embodiment of the present disclosure, during the process of recycling the vehicle computer, when the controller of the vehicle computer establishes a communication connection with the electronic device, the controller of the vehicle computer can receive the target token sent by the electronic device.

[0087] Optionally, the vehicle computers that need to be recycled may include some simulated commercial vehicles for testing and vehicle computers that have been replaced by commercial vehicles that have been in commercial use, and there is no limitation here.

[0088] Optionally, the electronic device may be Figure 1 The electronic device 120 in the embodiment may specifically include a terminal device with a host computer function, such as a laptop computer, a tablet computer, and a desktop computer, and is not limited here. Specifically, the electronic device may be connected to the OBD interface of the vehicle computer through the vehicle diagnostic instrument to realize the communication connection between the controller of the vehicle computer and the electronic device, so that the electronic device may exchange information with the controller of the vehicle computer through the vehicle diagnostic instrument. The electronic device may send commands to the vehicle diagnostic instrument through the host computer function, and the vehicle diagnostic instrument may detect vehicle faults based on the commands sent by the electronic device.

[0089] In the disclosed embodiment, the target token is an identity authentication token, which may be an identity authentication token sent by an electronic device to a controller of a vehicle machine to be recycled for authentication and for performing a recycling operation after the authentication is passed.

[0090] S220: When the target token passes the verification, perform initialization operation on the vehicle computer.

[0091] In the disclosed embodiment, after receiving the target token, the controller of the vehicle computer can verify the target token, and if the target token passes the verification, it enters the recycling process and performs initialization operations on the vehicle computer. Otherwise, it does not enter the recycling process, and feeds back to the electronic device a prompt message to indicate that the recycling is terminated and that the target token has not passed the verification.

[0092] Furthermore, the initialization operation performed by the controller of the vehicle computer may include a clearing operation of user data and a restoring operation of vehicle computer parameters.

[0093] Among them, the clearing operation of user data refers to completely and permanently clearing the user data stored in each chip of the vehicle computer, and the restoring operation of the vehicle computer parameters refers to initializing the parameters of each chip and program of the vehicle computer to restore the parameters to the factory settings.

[0094] Thus, the controller of the vehicle computer can restore the software of the vehicle computer to the factory setting state through the initialization operation, thereby completing the recovery process of the software of the vehicle computer.

[0095] S230: After the initialization operation is completed, the fuse in the vehicle computer is controlled to irreversibly change from a connected state to a disconnected state.

[0096] In the disclosed embodiment, after completing the initialization operation, the controller of the vehicle computer can control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state, that is, blow the fuse of the vehicle computer.

[0097] Optionally, the fuse can be "etched" or "hard-coded" into the controller of the car computer. As the fuse of the controller of the car computer, if the fuse is in a connected state, the car computer is a commercial device in hardware. If the fuse is irreversibly changed from a connected state to a disconnected state, the car computer is a research and development and debugging device in hardware. That is to say, by changing the state of the fuse, the hardware state changes of all chips in the entire car computer system controlled by the controller of the car computer can be adjusted.

[0098] In the disclosed embodiment, the irreversible change of the fuse from a connected state to a disconnected state can be understood as the state change of the fuse is irreversible, that is, the fuse can only be changed from a connected state to a disconnected state, and once the fuse is changed from a connected state to a disconnected state, it cannot be changed back to a connected state. Therefore, the controller of the vehicle computer can control the programming number of the fuse in the vehicle computer to be once. Once programmed, the data will be permanently valid and cannot be modified or programmed. In this way, the fuse can only be irreversibly changed from a connected state to a disconnected state, and the state of the fuse cannot be changed back to a connected state, which causes the circuit on the chip to undergo irreversible changes during operation, and then causes the circuit board of the vehicle computer to undergo irreversible changes in hardware, thereby ensuring that the change in the hardware state of the vehicle computer in hardware is irreversible.

[0099] Therefore, the controller of the vehicle computer can complete the hardware recovery process of the vehicle computer by blowing out the fuse of the vehicle computer.

[0100] In the disclosed embodiment, the controller of the vehicle computer can receive a target token obtained from a security server by the electronic device and verify the target token when the vehicle computer is communicatively connected to the electronic device. If the target token passes the verification, an initialization operation is performed on the vehicle computer. After the initialization operation is completed, the fuse in the vehicle computer is controlled to be irreversibly changed from a connected state to a disconnected state. Since the fuse is a disposable component connected to the circuit board of the vehicle computer to protect the circuit board of the vehicle computer, when the vehicle computer is a commercial device in hardware, the fuse is in a connected state, and when the vehicle computer is a research and development and debugging device in hardware, the fuse is irreversibly changed from a connected state to a disconnected state. Therefore, in the process of recycling the vehicle computer, after the vehicle computer is initialized, the fuse in the vehicle computer can be controlled to be irreversibly changed from a connected state to a disconnected state, so that the vehicle computer is changed from a commercial device to a research and development and debugging device in hardware, thereby avoiding the vehicle computer from being rooted and improving the security of the vehicle computer during subsequent research and development and debugging.

[0101] In some embodiments of the present disclosure, in order to improve the safety of vehicle computer recycling, the controller of the vehicle computer needs to perform the recycling operation under authorized recycling conditions.

[0102] In these embodiments, before receiving the target token sent by the electronic device, the vehicle computer recycling processing method may further include: receiving a recycling instruction sent by the electronic device; and sending a token request to the electronic device in response to the recycling instruction.

[0103] Specifically, when the electronic device detects that a communication connection has been established between it and the vehicle computer, it can send a recovery instruction to the controller of the vehicle computer in response to the establishment of the communication connection. The recovery instruction can be used to enable the controller of the vehicle computer to request a token from the electronic device and perform subsequent operations based on the token. The controller of the vehicle computer can receive the recovery instruction sent by the electronic device, and send a token request to the electronic device in response to the recovery instruction.

[0104] The token request may carry the device identification of the vehicle computer, and the token request may be used to enable the electronic device to obtain and feedback the target token based on the device identification. The target token may be a token sent by the electronic device to the controller of the vehicle computer in response to the token request.

[0105] Specifically, the controller of the vehicle computer can send a token request carrying the device identification of the vehicle computer to the electronic device. After receiving the token request, the electronic device can obtain the target token based on the device identification and feed the target token back to the controller of the vehicle computer, so that the controller of the vehicle computer can receive the target token sent by the electronic device and further perform relevant operations of vehicle computer recycling when the vehicle computer is authorized to be recycled, thereby improving the security of vehicle computer recycling.

[0106] In some embodiments of the present disclosure, in order to improve the security of user data, the controller of the vehicle computer also needs to clear the user data before performing an initialization operation on the vehicle computer so that it cannot be accessed by anyone.

[0107] In these embodiments, before performing the initialization operation on the vehicle computer, the vehicle computer recycling method may further include: sending a clearing instruction to the storage chip of the vehicle computer, where the clearing instruction is used to make the storage chip permanently clear the data stored locally in the storage chip.

[0108] The data locally stored in the storage chip may be user-related data stored in the storage chip.

[0109] Specifically, when the controller of the vehicle computer determines that the target token has passed the verification, it can first directly send a clear instruction to the storage chip of the vehicle computer, so that the storage chip permanently clears the data stored therein in response to the clear instruction, and then performs an initialization operation on the vehicle computer.

[0110] Optionally, the controller of the vehicle computer may send a clear instruction to the storage chip of the vehicle computer in its secure world, so that the storage chip permanently clears the data locally stored in the storage chip in response to the clear instruction in its secure world.

[0111] Therefore, in the disclosed embodiment, the controller of the vehicle computer can ensure that the user data is completely and permanently deleted during the recovery of the vehicle computer, and the data clearing is implemented in its secure world. At the same time, the data clearing is a permanent clearing operation performed inside the storage chip. Therefore, the data transmission of user data during the clearing process can be avoided, and the data can be avoided from being attacked when being transmitted between chips, so that the data clearing process will not be touched by anyone, thereby improving the security of user data.

[0112] In some embodiments of the present disclosure, the controller of the vehicle computer can control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state through eFuse technology, so as to provide mandatory protection at the hardware level.

[0113] In these embodiments, controlling the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state in S130 may specifically include: writing a fuse flag to a register of the fuse, the fuse flag being used to irreversibly change the fuse from a connected state to a disconnected state.

[0114] Optionally, the register of the fuse may reserve a flag bit for identifying the fuse state. If the flag bit contains a conduction flag such as 0, the fuse is in a connected state, and at this time, the vehicle computer is a commercial device in terms of hardware; if the flag bit contains a fuse flag such as 1, the fuse is in a disconnected state, and at this time, the vehicle computer is a research and development debugging device in terms of hardware.

[0115] Specifically, the controller of the vehicle computer can write the fuse flag to the register of the fuse through the eFuse technology. After writing the fuse flag, the flag bit of the register changes from the on flag to the blown flag. Since the change of the flag bit of the register can bring about a change in the state of the fuse, the controller of the vehicle computer writes the fuse flag to the register of the fuse through the eFuse technology, so that the flag bit of the register changes from the on flag to the blown flag, and then the blown flag can be used to irreversibly change the fuse from a connected state to a disconnected state, thereby enabling the controller of the vehicle computer to control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state.

[0116] Optionally, the controller of the vehicle computer can write a fuse identifier to the register of the fuse through the eFuse technology in its secure world, so that it can change the state of the fuse in the secure world.

[0117] Therefore, in the disclosed embodiment of the present invention, the controller 110 of the vehicle computer can change the hardware type of the vehicle computer by changing the state of the flag bit in the register of the fuse for identifying the fuse state, without structurally damaging the circuit board of the vehicle computer itself, thereby improving the reliability of the vehicle computer during subsequent research and development and debugging.

[0118] In another embodiment of the present disclosure, in order to further improve the security of vehicle machine recycling, the target token can be used to implement multiple verifications.

[0119] In some embodiments of the present disclosure, the target token may include a target device identification and a target signature.

[0120] The target device identifier may be a device tag included in the target token, which is used to verify whether the target token is used to authorize the controller of the vehicle to perform related operations of vehicle recovery. The target signature may be a signature included in the target token, which is used to verify whether the source of the target token is reliable.

[0121] The target device identifier may be a unique identifier corresponding to the vehicle computer. Specifically, the target device identifier may be an identifier assigned to the vehicle computer when it leaves the factory and used to distinguish it from other vehicle computers.

[0122] Optionally, the target device identifier may include a device identification code of a controller of the vehicle computer, may include a vehicle identification number (VIN) of the vehicle computer, or may include a device identification code of the controller of the vehicle computer and the VIN of the vehicle computer.

[0123] The target signature may be a signature generated based on the target device identification. Specifically, the target signature is a signature obtained by signing the verification information containing the target device identification using a preset signature algorithm.

[0124] Specifically, the preset signature algorithm can be any signature algorithm set as needed, and is not limited here.

[0125] Optionally, the preset signature algorithm may be a hash algorithm, and the target signature may be a hash value obtained by performing a hash operation on the verification information using a preset private key.

[0126] In some examples, when the target token includes a target device identifier and a target signature, the verification information only includes the target device identifier, and the target signature may be a hash value obtained by performing a hash operation on the target device identifier for signing using a preset private key.

[0127] In these embodiments, the vehicle machine recycling processing method may further include: performing signature verification on the target signature; if the target signature passes the signature verification, and the target device identifier is the same as the device identifier, determining that the target token passes the verification.

[0128] Specifically, after receiving the target token, the controller of the vehicle computer can perform signature verification on the target signature. If the target signature fails to pass the signature verification, the controller of the vehicle computer determines that the target token fails to pass the verification; if the target signature passes the signature verification, the controller of the vehicle computer further compares the target device identifier with the device identifier of the vehicle computer. If the target device identifier is the same as the device identifier, the controller of the vehicle computer determines that the target token passes the verification; if the target device identifier is different from the device identifier, the controller of the vehicle computer determines that the target token fails to pass the verification.

[0129] The controller of the vehicle computer can use a preset signature verification algorithm corresponding to a preset signature algorithm to perform signature verification on the target signature.

[0130] Specifically, the preset signature verification algorithm may be any algorithm for signature verification corresponding to the signature algorithm set as needed, and is not limited here.

[0131] Optionally, if the preset signature algorithm is a hash algorithm, the signature verification algorithm is also implemented based on the hash algorithm. A public key corresponding to the private key for verifying the signature may be preset in the controller of the vehicle computer. The controller of the vehicle computer may use the preset public key to perform a hash operation on the target device identifier for signature verification to obtain a hash value, and compare the hash value with the target signature. If the two are the same, it is determined that the target signature has passed the signature verification; otherwise, it is determined that the target signature has not passed the signature verification.

[0132] Furthermore, the controller of the vehicle computer may compare the characters of the target device identification with the device identification of the vehicle computer. If the characters are exactly the same, it is determined that the target device identification is the same as the device identification; otherwise, the target device identification is different from the device identification.

[0133] After the controller of the vehicle computer verifies the target token, if the target token passes the verification, it enters the recycling process and performs initialization operations on the vehicle computer. Otherwise, it does not enter the recycling process and feeds back to the electronic device a prompt message to prompt the termination of recycling and the failure of the target token to pass the verification.

[0134] Optionally, the controller of the vehicle computer may perform signature verification on the target signature in its secure world and compare the target device identification with the device identification of the vehicle computer, thereby verifying the target token in its secure world.

[0135] Therefore, in the disclosed embodiment of the present invention, the controller of the vehicle computer can determine whether the target token has passed the verification by double verification of the target signature and the target device identification. On the one hand, it ensures the credibility of the source of the target token, and on the other hand, it ensures that the target token is used to authorize the controller of the vehicle computer to perform relevant operations of vehicle computer recovery, further improving the security of vehicle computer recovery.

[0136] In some other embodiments of the present disclosure, the target token may include a target device identification, a target signature, and target security information.

[0137] The target device identifier may be a device tag included in the target token, which is used to verify whether the target token is used to authorize the controller of the vehicle to perform related operations of vehicle recovery. The target signature may be a signature included in the target token, which is used to verify whether the source of the target token is reliable.

[0138] The target device identifier may be a unique identifier corresponding to the vehicle computer. Specifically, the target device identifier may be an identifier assigned to the vehicle computer when it leaves the factory and used to distinguish it from other vehicle computers.

[0139] Optionally, the target device identifier may include a device identification code of a controller of the vehicle computer, may include a VIN of the vehicle computer, or may include a device identification code of the controller of the vehicle computer and a VIN of the vehicle computer.

[0140] The target signature may be a signature generated based on the target device identification. Specifically, the target signature is a signature obtained by signing the verification information containing the target device identification using a preset signature algorithm.

[0141] Specifically, the preset signature algorithm can be any signature algorithm set as needed, and is not limited here.

[0142] Optionally, the preset signature algorithm may be a hash algorithm, and the target signature may be a hash value obtained by performing a hash operation on the verification information using a preset private key.

[0143] In some examples, when the target token includes a target device identification, a target signature, and target security information, the verification information may include the target device identification and the target security information, and the target signature may be a hash value obtained by performing a hash operation on the target device identification and the target security information for signing using a preset private key.

[0144] In these embodiments, the vehicle machine recycling processing method may further include: performing signature verification on the target signature; if the target signature passes the signature verification and the target device identifier is the same as the device identifier, determining that the target token passes the verification.

[0145] Specifically, after receiving the target token, the controller of the vehicle computer can perform signature verification on the target signature. If the target signature fails to pass the signature verification, the controller of the vehicle computer determines that the target token fails to pass the verification; if the target signature passes the signature verification, the controller of the vehicle computer further compares the target device identifier with the device identifier of the vehicle computer. If the target device identifier is the same as the device identifier, the controller of the vehicle computer determines that the target token passes the verification; if the target device identifier is different from the device identifier, the controller of the vehicle computer determines that the target token fails to pass the verification.

[0146] The controller of the vehicle computer can use a preset signature verification algorithm corresponding to a preset signature algorithm to perform signature verification on the target signature.

[0147] Specifically, the preset signature verification algorithm may be any algorithm for signature verification corresponding to the signature algorithm set as needed, and is not limited here.

[0148] Optionally, if the preset signature algorithm is a hash algorithm, the signature verification algorithm is also implemented based on the hash algorithm. A public key corresponding to the private key for verifying the signature may be preset in the controller of the vehicle computer. The controller of the vehicle computer may use the preset public key to perform a hash operation on the target device identification and target security information for signature verification to obtain a hash value, and compare the hash value with the target signature. If the two are the same, it is determined that the target signature has passed the signature verification; otherwise, it is determined that the target signature has not passed the signature verification.

[0149] Furthermore, the controller of the vehicle computer may compare the characters of the target device identification with the device identification of the vehicle computer. If the characters are exactly the same, it is determined that the target device identification is the same as the device identification; otherwise, the target device identification is different from the device identification.

[0150] After the controller of the vehicle computer verifies the target token, if the target token passes the verification, it enters the recycling process and performs initialization operations on the vehicle computer. Otherwise, it does not enter the recycling process and feeds back to the electronic device a prompt message to prompt the termination of recycling and the failure of the target token to pass the verification.

[0151] Optionally, the controller of the vehicle computer may perform signature verification on the target signature in its secure world and compare the target device identification with the device identification of the vehicle computer, thereby verifying the target token in its secure world.

[0152] In these embodiments, the target security information may be security information included in the target token, which is used to perform vehicle safety management and control during vehicle recovery. Specifically, the target security information may include a valid recovery period and a valid recovery boot times, etc., which are not limited here.

[0153] The effective recycling period refers to the period during which the target token authorizes the controller of the vehicle to recycle the vehicle. If the effective recycling period is exceeded, the controller of the vehicle does not have the authorization to recycle the vehicle and cannot perform related operations of recycle the vehicle. Specifically, the effective recycling period is calculated from the moment when the controller of the vehicle receives the target token.

[0154] Specifically, the effective recycling period can be any period set as needed and is not limited here.

[0155] For example, the effective recycling period may be 30 days. If the vehicle computer controller does not perform vehicle computer recycling operations within 30 days of receiving the target token, vehicle computer recycling operations will not be performed after 30 days.

[0156] The effective recovery boot times refer to the number of boot times allowed by the target token to the controller of the vehicle before the vehicle is recovered. If the number of effective recovery boot times exceeds the number, the controller of the vehicle does not have the authorization for vehicle recovery and cannot perform related operations of vehicle recovery. Specifically, the effective recovery boot times are calculated from the moment the controller of the vehicle receives the target token.

[0157] Specifically, the number of effective recovery startup times can be any number set as needed and is not limited here.

[0158] For example, the number of effective recovery startups can be 10 times. If the vehicle computer controller does not perform vehicle computer recovery related operations within 10 startups after receiving the target token, the vehicle computer recovery related operations will not be able to be performed after more than 10 startups.

[0159] In these embodiments, optionally, when the target token passes the verification, before performing the initialization operation on the vehicle computer, the controller of the vehicle computer may also detect whether the reception time of the target token exceeds the valid recycling period and whether the number of times the controller of the vehicle computer is powered on after receiving the target token exceeds the valid recycling power-on number. If the reception time does not exceed the valid recycling period and the number of times the controller is powered on after receiving the target token does not exceed the valid recycling power-on number, the controller of the vehicle computer may perform the initialization operation on the vehicle computer to perform the relevant operations of vehicle computer recycling; if the reception time exceeds the valid recycling period or the number of times the controller is powered on after receiving the target token exceeds the valid recycling power-on number, the controller of the vehicle computer does not enter the recycling process, and feeds back to the electronic device a prompt message for prompting the termination of recycling and the invalidation of the target token.

[0160] Therefore, in the disclosed embodiment of the present invention, the controller of the vehicle computer can determine whether the target token has passed the verification by performing triple verification of the target signature, target device identification and target security information. On the one hand, it ensures the credibility of the source of the target token, and on the other hand, it ensures that the target token is used to authorize the controller of the vehicle computer to perform relevant operations of vehicle computer recovery. On the other hand, it ensures that the target token is in a valid state, further improving the security of vehicle computer recovery.

[0161] In some other embodiments of the present disclosure, the target token may also be an encrypted token.

[0162] The target token may be encrypted using a preset symmetric encryption algorithm. Specifically, the preset symmetric encryption algorithm may be any algorithm for symmetric encryption set as required, and is not limited here.

[0163] In these embodiments, before verifying the target token, the vehicle computer recycling method may further include: decrypting the target token to obtain a decrypted target token.

[0164] Specifically, after receiving the target token, the controller of the vehicle computer may first decrypt the target token to obtain the decrypted target token, and then verify the decrypted target token.

[0165] The controller of the vehicle computer can decrypt the target signature using a preset symmetric decryption algorithm corresponding to the preset symmetric encryption algorithm. Specifically, the preset symmetric decryption algorithm can be any algorithm for symmetric decryption corresponding to the symmetric encryption algorithm set as needed, and is not limited here.

[0166] Therefore, in the disclosed embodiment, the controller of the vehicle computer can receive the target token transmitted in ciphertext, decrypt it into plaintext and then verify it, thereby further improving the security of vehicle computer recovery.

[0167] Below Figure 3 As an example, an example of a vehicle machine recycling method provided by an embodiment of the present disclosure is described. Figure 3 As shown, the vehicle machine recycling method may include the following steps.

[0168] S310: When the communication connection with the electronic device is established, receiving a recycling instruction sent by the electronic device.

[0169] S320: In response to the recycling instruction, send a token request to the electronic device.

[0170] S330: Receive the target token fed back by the electronic device based on the token request.

[0171] S340, perform signature verification on the target signature in the target token, and determine whether the target signature passes the signature verification. If so, execute S350, otherwise execute S360.

[0172] S350. Compare the target device identification in the target token with the device identification, and determine whether the target device identification is the same as the device identification. If so, execute S370, otherwise execute S360.

[0173] S360: Feedback to the electronic device a prompt message indicating that the recycling is terminated and the target token has not passed the verification.

[0174] S370: Send a clearing instruction to the storage chip of the vehicle computer, so that the storage chip permanently clears the data stored locally in the storage chip.

[0175] S380: After the storage chip completes data clearing, the vehicle computer is initialized.

[0176] S390: After the initialization operation is completed, the fuse in the vehicle computer is controlled to irreversibly change from a connected state to a disconnected state.

[0177] Therefore, in the disclosed embodiment, during the process of recycling the vehicle computer, after the vehicle computer is initialized, the fuse in the vehicle computer can be controlled to irreversibly change from a connected state to a disconnected state, so that the vehicle computer is changed from a commercial device to a research and development debugging device in terms of hardware, thereby avoiding the vehicle computer from being rooted and improving the security of the vehicle computer during subsequent research and development debugging. At the same time, the controller of the vehicle computer can ensure that the user data is completely and permanently deleted during the recycling of the vehicle computer, which can avoid the data transmission of user data during the clearing process, thereby avoiding attacks on the data when it is transmitted between chips, so that the data clearing process will not be touched by anyone, improving the security of user data. In addition, the target token implements double verification, which on the one hand ensures the credibility of the source of the target token, and on the other hand ensures that the target token is used to authorize the controller of the vehicle computer to perform related operations of vehicle computer recycling, further improving the security of vehicle computer recycling.

[0178] Figure 4 This is a flow chart of another vehicle machine recycling method provided by an embodiment of the present disclosure.

[0179] In the disclosed embodiment, the vehicle machine recycling method may be executed by an electronic device, for example Figure 1 The electronic device 120 in the embodiment. The electronic device may be a terminal device having a host computer function, such as a notebook computer, a tablet computer, a desktop computer, etc., which is not limited here.

[0180] like Figure 4 As shown, the vehicle machine recycling method may include the following steps.

[0181] S410: Obtain a target token sent by a security server.

[0182] The security server can be Figure 1 The security server 130 in the embodiment. The security server may be a HSM security server.

[0183] In the disclosed embodiment, the security server may send the target token to the electronic device via a wired network or a wireless network established with the electronic device, so that the electronic device acquires the target token sent by the security server.

[0184] In the disclosed embodiment, the target token is an identity authentication token, which may be an identity authentication token sent by an electronic device to a controller of a vehicle machine to be recycled for authentication and for performing a recycling operation after the authentication is passed.

[0185] S420. When the vehicle computer is in communication connection, a target token is sent to the controller of the vehicle computer. The target token is used to enable the controller to perform initialization operations on the vehicle computer and control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state when the controller passes the verification.

[0186] In the disclosed embodiment, after the electronic device obtains the target token, it can send the target token to the controller of the vehicle computer while being connected to the vehicle computer for communication, so that the controller of the vehicle computer can verify the target token after receiving the target token, and if the target token passes the verification, it enters the recovery process, performs initialization operations on the vehicle computer, and controls the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state; if the target token fails the verification, it does not enter the recovery process.

[0187] In the disclosed embodiment, the controller of the vehicle computer can receive a target token obtained from a security server by the electronic device and verify the target token when the vehicle computer is communicatively connected to the electronic device. If the target token passes the verification, an initialization operation is performed on the vehicle computer. After the initialization operation is completed, the fuse in the vehicle computer is controlled to be irreversibly changed from a connected state to a disconnected state. Since the fuse is a disposable component connected to the circuit board of the vehicle computer to protect the circuit board of the vehicle computer, when the vehicle computer is a commercial device in hardware, the fuse is in a connected state, and when the vehicle computer is a research and development and debugging device in hardware, the fuse is irreversibly changed from a connected state to a disconnected state. Therefore, in the process of recycling the vehicle computer, after the vehicle computer is initialized, the fuse in the vehicle computer can be controlled to be irreversibly changed from a connected state to a disconnected state, so that the vehicle computer is changed from a commercial device to a research and development and debugging device in hardware, thereby avoiding the vehicle computer from being rooted and improving the security of the vehicle computer during subsequent research and development and debugging.

[0188] In some embodiments of the present disclosure, in order to improve the safety of vehicle computer recycling, the electronic device needs to enable the controller of the vehicle computer to perform the recycling operation under authorized recycling conditions.

[0189] In these embodiments, before S410, the vehicle computer recycling processing method may further include: sending a recycling instruction to the controller of the vehicle computer when in communication connection with the vehicle computer; and receiving a token request sent by the controller of the vehicle computer in response to the recycling instruction.

[0190] In the disclosed embodiment, when the electronic device detects that a communication connection has been established between the electronic device and the vehicle computer, the electronic device may send a recovery instruction to the controller of the vehicle computer in response to the establishment of the communication connection. The recovery instruction may be used to enable the controller of the vehicle computer to request a token from the electronic device and perform subsequent operations based on the token. The controller of the vehicle computer may receive the recovery instruction sent by the electronic device, and in response to the recovery instruction, send a token request to the electronic device, so that the electronic device may receive the token request sent by the controller of the vehicle computer in response to the recovery instruction.

[0191] The token request may carry the device identification of the vehicle computer, and the token request may be used to enable the electronic device to obtain and feedback the target token to the controller of the vehicle computer based on the device identification. The target token may be a token sent by the electronic device to the controller of the vehicle computer in response to the token request.

[0192] Further, S410 may specifically include: in response to the token request sent by the controller, sending an authorization request to the security server, the authorization request carries a device identifier, and the authorization request is used to enable the security server to generate a target token based on the device identifier; and receiving the target token fed back by the security server.

[0193] Specifically, after receiving the token request sent by the controller, the electronic device can send an authorization request to the security server. Since the authorization request carries the device identification, the security server can generate and feedback the target token based on the device identification after receiving the authorization request, so that the electronic device receives the target token fed back by the security server. At this time, the target token can further be a token fed back by the security server to the electronic device in response to the authorization request.

[0194] Therefore, in the embodiment of the present disclosure, when the security server authorizes the recycling instruction sent by the electronic device to the controller of the vehicle computer, the target token can be sent to the electronic device, and forwarded by the electronic device to the controller of the vehicle computer, so that the controller of the vehicle computer can perform relevant operations of vehicle computer recycling with the authorization of the security server, thereby improving the security of vehicle computer recycling.

[0195] In another embodiment of the present disclosure, in order to further improve the security of vehicle machine recycling, the target token can be used to implement multiple verifications.

[0196] In some embodiments of the present disclosure, the target token may include a target device identifier and a target signature. The target signature may be a signature generated based on the target device identifier, which has been described in the above embodiments and will not be repeated here.

[0197] In these embodiments, after receiving the authorization request sent by the electronic device, the security server can obtain the device identification of the vehicle computer carried in the authorization request, and query whether the device identification of the vehicle computer exists in a pre-stored vehicle computer recovery authorization table. If so, a token can be generated based on the device identification of the vehicle computer, otherwise, no token is generated.

[0198] The security server can use a preset signature algorithm to sign the verification information containing the device identification of the vehicle computer to obtain a signature in the token.

[0199] Specifically, the preset signature algorithm can be any signature algorithm set as needed, and is not limited here.

[0200] Optionally, the preset signature algorithm may be a hash algorithm, a preset private key may be pre-stored in the security server, and the signature may be a hash value obtained by performing a hash operation on the verification information using the preset private key.

[0201] In some examples, when the token includes a device identification and a signature, the verification information may include the device identification, and the signature may be a hash value obtained by performing a hash operation on the device identification for signing using a preset private key.

[0202] At this time, the controller of each vehicle computer managed by the security server can pre-store the public key corresponding to the private key stored in the security server and the signature verification algorithm corresponding to the preset signature algorithm used by the security server to perform signature verification on the signature generated by the security server.

[0203] Furthermore, the security server can combine the device identification and signature of the vehicle computer to obtain a token.

[0204] Therefore, in the disclosed embodiment, the target token can achieve dual verification, which on the one hand ensures the credibility of the source of the target token, and on the other hand ensures that the target token is used to authorize the controller of the vehicle computer to perform relevant operations of vehicle computer recovery, further improving the security of vehicle computer recovery.

[0205] In some other embodiments of the present disclosure, the target token may include a target device identifier, a target signature and target security information. The target signature may be a signature generated based on the target device identifier, which has been described in the above embodiments and will not be repeated here.

[0206] In these embodiments, after receiving the authorization request sent by the electronic device, the security server can obtain the device identification of the vehicle computer carried in the authorization request, and query whether the device identification of the vehicle computer exists in a pre-stored vehicle computer recovery authorization table. If so, the security information corresponding to the device identification of the vehicle computer in the pre-stored vehicle computer recovery authorization table can be obtained, and a token can be generated based on the device identification and security information of the vehicle computer. Otherwise, no token is generated.

[0207] At this time, the safety information may be information stored in the vehicle computer recycling authorization table and pre-set as needed for performing vehicle computer safety management and control during the vehicle computer recycling process.

[0208] The security server can use a preset signature algorithm to sign the verification information containing the device identification of the vehicle computer to obtain a signature in the token.

[0209] Specifically, the preset signature algorithm can be any signature algorithm set as needed, and is not limited here.

[0210] Optionally, the preset signature algorithm may be a hash algorithm, a preset private key may be pre-stored in the security server, and the signature may be a hash value obtained by performing a hash operation on the verification information using the preset private key.

[0211] In some examples, when the token includes a device identification, a signature, and security information, the verification information may include the device identification and security information, and the signature may be a hash value obtained by performing a hash operation on the device identification and security information for signing using a preset private key.

[0212] At this time, the controller of each vehicle computer managed by the security server can pre-store the public key corresponding to the private key stored in the security server and the signature verification algorithm corresponding to the preset signature algorithm used by the security server to perform signature verification on the signature generated by the security server.

[0213] Furthermore, the security server can combine the device identification, security information and signature of the vehicle computer to obtain a token.

[0214] Therefore, in the embodiment of the present disclosure, the target token can achieve triple verification. On the one hand, it ensures the credibility of the source of the target token; on the other hand, it ensures that the target token is used to authorize the controller of the vehicle computer to perform relevant operations for vehicle computer recovery; on the other hand, it ensures that the target token is in a valid state, further improving the security of vehicle computer recovery.

[0215] In some other embodiments of the present disclosure, the target token may also be an encrypted token.

[0216] In these embodiments, before feeding back the token to the electronic device, the security server may further encrypt the token using a preset symmetric encryption algorithm to obtain an encrypted token.

[0217] Specifically, the preset symmetric encryption algorithm may be any algorithm for symmetric encryption set as required, and is not limited here.

[0218] At this time, the controller of each vehicle computer managed by the security server may pre-store a symmetric decryption algorithm corresponding to the preset symmetric encryption algorithm used by the security server to decrypt the token generated by the security server.

[0219] Therefore, in the disclosed embodiment, the target token can be transmitted in ciphertext and verified after being decrypted into plaintext by the controller of the vehicle computer, thereby further improving the security of vehicle computer recovery.

[0220] In some further embodiments of the present disclosure, when the target token fails to pass the verification, the controller of the vehicle computer can feedback to the electronic device a prompt message to prompt the termination of recycling and the failure of the target token to pass the verification, and the electronic device can receive and store the prompt message for recording for subsequent viewing.

[0221] In some further embodiments of the present disclosure, when the target token expires, the controller of the vehicle computer may feed back prompt information to the electronic device to indicate the termination of recycling and the expiration of the target token, and the electronic device may receive and store the prompt information for recording for subsequent viewing.

[0222] Below Figure 5As an example, an example of a vehicle machine recycling process of the vehicle machine recycling processing system provided by the embodiment of the present disclosure is described. Figure 5 As shown, the vehicle machine recycling method may include the following steps.

[0223] S501. When the electronic device detects that a communication connection has been established between the electronic device and the vehicle computer, the electronic device may send a recovery instruction to the controller of the vehicle computer in response to the establishment of the communication connection.

[0224] S502: The controller of the vehicle receives and responds to the recycling instruction and sends a token request to the electronic device.

[0225] S503: The electronic device receives and responds to the token request sent by the controller, and sends an authorization request to the security server.

[0226] S504: The security server receives and responds to the authorization request, and generates a target token based on the device identification of the vehicle computer.

[0227] S505: The security server feeds back the target token to the electronic device.

[0228] S506 , the electronic device receives and feeds back the target token to the controller of the vehicle computer.

[0229] S507, the controller of the vehicle receives and performs signature verification on the target signature in the target token, and determines whether the target signature passes the signature verification. If so, execute S508, otherwise execute S509.

[0230] S508. The controller of the vehicle computer compares the target device identification in the target token with the device identification, and determines whether the target device identification is the same as the device identification. If so, execute 510, otherwise execute S509.

[0231] S509: The controller of the vehicle computer feeds back to the electronic device a prompt message indicating that the recycling is terminated and the target token has not passed the verification.

[0232] S510: The controller of the vehicle computer sends a clearing instruction to the storage chip of the vehicle computer, so that the storage chip permanently clears the data stored locally in the storage chip.

[0233] S511: After the storage chip completes data clearing, the controller of the vehicle computer performs an initialization operation on the vehicle computer.

[0234] S512: After the initialization operation is completed, the fuse in the vehicle computer is controlled to irreversibly change from a connected state to a disconnected state.

[0235] Therefore, in the disclosed embodiment, during the process of recycling the vehicle computer, after the vehicle computer is initialized, the fuse in the vehicle computer can be controlled to irreversibly change from a connected state to a disconnected state, so that the vehicle computer is changed from a commercial device to a research and development debugging device in terms of hardware, thereby avoiding the vehicle computer from being rooted and improving the security of the vehicle computer during subsequent research and development debugging. At the same time, the controller of the vehicle computer can ensure that the user data is completely and permanently deleted during the recycling of the vehicle computer, which can avoid the data transmission of user data during the clearing process, thereby avoiding attacks on the data when it is transmitted between chips, so that the data clearing process will not be touched by anyone, improving the security of user data. In addition, the target token implements double verification, which on the one hand ensures the credibility of the source of the target token, and on the other hand ensures that the target token is used to authorize the controller of the vehicle computer to perform related operations of vehicle computer recycling, further improving the security of vehicle computer recycling.

[0236] Reference below Figure 6 to Figure 7 The following will continue to introduce the vehicle machine recycling and processing device provided in the embodiment of the present disclosure.

[0237] Figure 6 It is a structural schematic diagram of a vehicle machine recycling and processing device provided in an embodiment of the present disclosure.

[0238] In the disclosed embodiment, the vehicle computer recycling and processing device may be disposed in a controller of the vehicle computer.

[0239] like Figure 6 As shown, the vehicle machine recycling processing device 600 may include a first receiving unit 610 , a vehicle machine initialization unit 620 and a fuse control unit 630 .

[0240] The first receiving unit 610 may be configured to receive a target token sent by the electronic device when in communication connection with the electronic device.

[0241] The vehicle computer initialization unit 620 can be configured to perform an initialization operation on the vehicle computer when the target token passes the verification.

[0242] The fuse control unit 630 may be configured to control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state after the initialization operation is completed.

[0243] In the disclosed embodiment, the controller of the vehicle computer can receive a target token obtained from a security server by the electronic device and verify the target token when the vehicle computer is communicatively connected to the electronic device. If the target token passes the verification, an initialization operation is performed on the vehicle computer. After the initialization operation is completed, the fuse in the vehicle computer is controlled to be irreversibly changed from a connected state to a disconnected state. Since the fuse is a disposable component connected to the circuit board of the vehicle computer to protect the circuit board of the vehicle computer, when the vehicle computer is a commercial device in hardware, the fuse is in a connected state, and when the vehicle computer is a research and development and debugging device in hardware, the fuse is irreversibly changed from a connected state to a disconnected state. Therefore, in the process of recycling the vehicle computer, after the vehicle computer is initialized, the fuse in the vehicle computer can be controlled to be irreversibly changed from a connected state to a disconnected state, so that the vehicle computer is changed from a commercial device to a research and development and debugging device in hardware, thereby avoiding the vehicle computer from being rooted and improving the security of the vehicle computer during subsequent research and development and debugging.

[0244] In some embodiments of the present disclosure, the vehicle machine recycling processing device 600 may further include a recycling instruction receiving unit and a token request sending unit.

[0245] The recycling instruction receiving unit may be configured to receive a recycling instruction sent by the electronic device before receiving a target token sent by the electronic device.

[0246] The token request sending unit can be configured to send a token request to the electronic device in response to the recycling instruction, the token request carries the device identification of the vehicle computer, and the token request is used to enable the electronic device to feedback the target token based on the device identification.

[0247] In some embodiments of the present disclosure, the vehicle machine recycling processing device 600 may further include a clearing instruction sending unit.

[0248] The clear instruction sending unit may be configured to send a clear instruction to the storage chip of the vehicle computer before performing an initialization operation on the vehicle computer, wherein the clear instruction is used to enable the storage chip to permanently clear the data locally stored in the storage chip.

[0249] In some embodiments of the present disclosure, the fuse control unit 630 may be specifically configured to write a blown fuse flag into a register of the fuse, where the blown fuse flag is used to irreversibly change the fuse from a connected state to a disconnected state.

[0250] In some embodiments of the present disclosure, the target token includes a target device identification and a target signature.

[0251] Correspondingly, the vehicle machine recycling processing device 600 may further include a signature verification unit and a first determination unit.

[0252] The signature verification unit may be configured to perform signature verification on a target signature.

[0253] The first determination unit may be configured to determine that the target token passes verification if the target signature passes signature verification and the target device identification is the same as the device identification.

[0254] It should be noted that Figure 6 The vehicle machine recycling processing device 600 shown can perform Figures 2 to 3 The various steps in the method embodiment shown in the figure are implemented Figures 2 to 3 The various processes and effects in the method embodiment shown are not described in detail here.

[0255] Figure 7 It is a structural schematic diagram of another vehicle machine recycling and processing device provided in an embodiment of the present disclosure.

[0256] In the disclosed embodiment, the vehicle machine recycling and processing device can be arranged in an electronic device, wherein the electronic device can be a terminal device with a host computer function, such as a laptop computer, a tablet computer, a desktop computer, etc., which is not limited here.

[0257] like Figure 7 As shown, the vehicle machine recycling processing device 700 may include a first acquisition unit 710 and a first sending unit 720 .

[0258] The first acquiring unit 710 may be configured to acquire a target token sent by a security server.

[0259] The first sending unit 720 can be configured to send a target token to the controller of the vehicle computer when it is connected to the vehicle computer for communication. The target token is used to enable the controller to perform initialization operations on the vehicle computer and control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state when it passes the verification of the controller.

[0260] In the disclosed embodiment, the controller of the vehicle computer can receive a target token obtained from a security server by the electronic device and verify the target token when the vehicle computer is communicatively connected to the electronic device. If the target token passes the verification, an initialization operation is performed on the vehicle computer. After the initialization operation is completed, the fuse in the vehicle computer is controlled to be irreversibly changed from a connected state to a disconnected state. Since the fuse is a disposable component connected to the circuit board of the vehicle computer to protect the circuit board of the vehicle computer, when the vehicle computer is a commercial device in hardware, the fuse is in a connected state, and when the vehicle computer is a research and development and debugging device in hardware, the fuse is irreversibly changed from a connected state to a disconnected state. Therefore, in the process of recycling the vehicle computer, after the vehicle computer is initialized, the fuse in the vehicle computer can be controlled to be irreversibly changed from a connected state to a disconnected state, so that the vehicle computer is changed from a commercial device to a research and development and debugging device in hardware, thereby avoiding the vehicle computer from being rooted and improving the security of the vehicle computer during subsequent research and development and debugging.

[0261] In some embodiments of the present disclosure, the vehicle machine recycling processing device 700 may further include a recycling instruction sending unit and a token request receiving unit.

[0262] The recycling instruction sending unit can be configured to send a recycling instruction to the controller when the vehicle computer is in communication connection before acquiring the target token sent by the security server.

[0263] The token request receiving unit may be configured to receive a token request sent by the controller in response to a recycling instruction, wherein the token request carries a device identification of the vehicle computer.

[0264] In some embodiments of the present disclosure, the first obtaining unit 710 may include an authorization request sending subunit and a target token receiving subunit.

[0265] The authorization request sending subunit may be configured to send an authorization request to a security server in response to a token request sent by the controller, wherein the authorization request carries a device identifier, and the authorization request is used to enable the security server to generate a target token based on the device identifier.

[0266] The target token receiving subunit may be configured to receive a target token fed back by a security server.

[0267] In some embodiments of the present disclosure, the target token includes a target device identification and a target signature.

[0268] It should be noted that Figure 7 The vehicle machine recycling processing device 700 shown can perform Figure 4 The various steps in the method embodiment shown in the figure are implemented Figure 4 The various processes and effects in the method embodiment shown are not described in detail here.

[0269] Reference below Figure 8 The following describes the computing device provided by the embodiments of the present disclosure.

[0270] Figure 8 It is a structural diagram of a computing device provided in an embodiment of the present disclosure.

[0271] In the disclosed embodiment, Figure 8 The computing device shown may be a controller of a vehicle computer or an electronic device, wherein the electronic device may be a terminal device with a host computer function such as a notebook computer, a tablet computer, a desktop computer, etc., which is not limited here.

[0272] like Figure 8 As shown, the computing device may include a processor 810 and a memory 820 storing computer program instructions.

[0273] Specifically, the processor 810 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present disclosure.

[0274] The memory 820 may include a large capacity memory for information or instructions. By way of example and not limitation, the memory 820 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a tape, or a universal serial bus (USB) drive or a combination of two or more of these. Where appropriate, the memory 820 may include a removable or non-removable (or fixed) medium. Where appropriate, the memory 820 may be inside or outside the integrated gateway device. In a particular embodiment, the memory 820 is a non-volatile solid-state memory. In a particular embodiment, the memory 820 includes a read-only memory (ROM). Where appropriate, the ROM may be a mask-programmed ROM, a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (Electrically Erasable Programmable ROM, EEPROM), an electrically rewritable ROM (EAROM) or a flash memory, or a combination of two or more of these.

[0275] The processor 810 reads and executes the computer program instructions stored in the memory 820 to perform the steps of the vehicle machine recycling method provided in the embodiment of the present disclosure.

[0276] In one example, the computing device may further include a transceiver 830 and a bus 840. Figure 8 As shown, the processor 810, the memory 820 and the transceiver 830 are connected via a bus 840 and communicate with each other.

[0277] The bus 840 includes hardware, software, or both. For example, but not limitation, the bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Extended Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hyper Transport (HT) interconnect, an Industrial Standard Architecture (ISA) bus, an InfiniBand interconnect, a Low Pin Count (LPC) bus, a memory bus, a MicroChannel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local Bus (VLB) bus, or other suitable buses or a combination of two or more of these. Where appropriate, the bus 840 may include one or more buses. Although embodiments of the present application describe and illustrate a particular bus, the present application contemplates any suitable bus or interconnect.

[0278] The embodiment of the present disclosure further provides a computer-readable storage medium, which may store a computer program. When the computer program is executed by a processor, the processor implements the vehicle machine recycling processing method provided by the embodiment of the present disclosure.

[0279] The storage medium may include, for example, a memory 820 of computer program instructions, and the instructions may be executed by a processor 810 of a computing device to complete the vehicle machine recycling method provided in the embodiment of the present disclosure. Optionally, the storage medium may be a non-temporary computer-readable storage medium, for example, a non-temporary computer-readable storage medium may be a ROM, a random access memory (RAM), a compact disc read-only memory (CD-ROM), a magnetic tape, a floppy disk, an optical data storage device, etc.

[0280] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the term "comprising" is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0281] The above description is only a specific embodiment of the present disclosure, so that those skilled in the art can understand or implement the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments described herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A vehicle machine recycling method, characterized in that: The method is executed by a controller of a vehicle computer, and includes: In the case of communication connection with the electronic device, receiving a target token sent by the electronic device, wherein the target token is generated by the security server after receiving the authorization request sent by the electronic device, based on the device identification of the vehicle computer carried in the authorization request, and fed back to the electronic device; When the target token passes the verification, performing initialization operation on the vehicle computer; After the initialization operation is completed, controlling the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state; The controlling the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state includes: A blown fuse flag is written into a register of the fuse, wherein the blown fuse flag is used to irreversibly change the fuse from a connected state to a disconnected state.

2. The method according to claim 1, characterized in that Before receiving the target token sent by the electronic device, the method further includes: receiving a recycling instruction sent by the electronic device; In response to the recycling instruction, a token request is sent to the electronic device, the token request carries the device identification of the vehicle computer, and the token request is used to enable the electronic device to feedback the target token based on the device identification.

3. The method according to claim 1, characterized in that Before performing the initialization operation on the vehicle computer, the method further includes: A clearing instruction is sent to the storage chip of the vehicle computer, wherein the clearing instruction is used to make the storage chip permanently clear the data locally stored in the storage chip.

4. The method according to claim 1, characterized in that The target token includes a target device identifier and a target signature, and the method further includes: Performing signature verification on the target signature; If the target signature passes the signature verification, and the target device identification is the same as the device identification of the vehicle computer, it is determined that the target token passes the verification.

5. A vehicle machine recycling method, characterized in that: The method is performed by an electronic device, comprising: Obtaining a target token sent by a security server, wherein the target token is generated by the security server after receiving an authorization request sent by the electronic device, based on the device identification of the vehicle computer carried in the authorization request, and fed back to the electronic device; When the communication connection with the vehicle computer is established, the target token is sent to the controller of the vehicle computer. The target token is used to enable the controller to perform initialization operations on the vehicle computer and write a fuse flag to the register of the fuse in the vehicle computer when the target token passes the verification of the controller, so as to control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state. The fuse flag is used to irreversibly change the fuse from a connected state to a disconnected state.

6. The method according to claim 5, characterized in that Before obtaining the target token sent by the security server, the method further includes: When in communication connection with the vehicle computer, sending a recovery instruction to the controller; A token request is received from the controller in response to the recycling instruction, wherein the token request carries a device identification of the vehicle computer.

7. The method according to claim 5 or 6, characterized in that: The step of obtaining the target token sent by the security server includes: In response to the token request sent by the controller, an authorization request is sent to the security server, wherein the authorization request carries the device identification of the vehicle computer, and the authorization request is used to enable the security server to generate the target token based on the device identification; Receive the target token fed back by the security server.

8. The method according to claim 5, characterized in that The target token includes a target device identification and a target signature.

9. A vehicle machine recycling and processing device, characterized in that: The controller configured in the vehicle includes: A first receiving unit is configured to receive a target token sent by the electronic device when in communication connection with the electronic device, wherein the target token is generated by the security server after receiving the authorization request sent by the electronic device, based on the device identification of the vehicle computer carried in the authorization request, and fed back to the electronic device; A vehicle computer initialization unit, configured to perform an initialization operation on the vehicle computer if the target token passes the verification; A fuse control unit, configured to control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state after the initialization operation is completed; The fuse control unit is specifically configured to write a blown fuse flag into a register of the fuse, wherein the blown fuse flag is used to irreversibly change the fuse from a connected state to a disconnected state.

10. A vehicle machine recycling and processing device, characterized in that: Configured in electronic equipment, including: A first acquisition unit is configured to acquire a target token sent by a security server, wherein the target token is generated by the security server after receiving the authorization request sent by the electronic device, based on the device identification of the vehicle computer carried in the authorization request, and fed back to the electronic device; The first sending unit is configured to send the target token to the controller of the vehicle computer when it is communicatively connected with the vehicle computer. The target token is used to enable the controller to perform initialization operations on the vehicle computer and write a fuse flag to the register of the fuse in the vehicle computer when it passes the verification of the controller, so as to control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state. The fuse flag is used to irreversibly change the fuse from a connected state to a disconnected state.

11. A vehicle machine recycling system, characterized in that: include: A security server, the security server is used to send a target token to the electronic device, the target token is generated by the security server after receiving the authorization request sent by the electronic device, based on the device identification of the vehicle computer carried in the authorization request, and fed back to the electronic device; The electronic device is used to obtain the target token sent by the security server; and, in a state of being communicatively connected with a vehicle computer, sending the target token to a controller of the vehicle computer; A controller of the vehicle computer, the controller being used to receive a target token sent by the electronic device when in communication connection with the electronic device; When the target token passes the verification, an initialization operation is performed on the vehicle computer; and after the initialization operation is completed, a fuse flag is written to the register of the fuse in the vehicle computer to control the fuse in the vehicle computer to irreversibly change from a connected state to a disconnected state, and the fuse flag is used to irreversibly change the fuse from a connected state to a disconnected state.

12. A computing device, characterized in that: include: processor; A memory for storing executable instructions; Wherein, the processor is used to read the executable instructions from the memory and execute the executable instructions to implement the vehicle machine recycling method described in any one of claims 1-4 or 5-8.

13. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and the computer program is executed by a processor to implement the vehicle machine recycling method described in any one of claims 1-4 or 5-8.

Images