Vehicle authentication method, device, equipment and storage medium

Abstract

The present invention discloses a car authentication method, device, equipment and storage medium, which relates to the field of automobile intelligent control technology, including: if an authentication request message sent by a user end is received, a first temporary information is generated; a vehicle-side session key is generated according to a user-side identification code, the first temporary information and a pre-stored vehicle root key; the first temporary information is sent to the user end so that the user end determines a second temporary information, a user-side session key is generated according to the user-side authentication key and the first temporary information, the second temporary information is encrypted with the user-side session key to obtain an encrypted authentication ciphertext, and the encrypted authentication ciphertext is returned; the encrypted authentication ciphertext is authenticated with the vehicle-side session key; if the authentication is successful, the target car is controlled to perform a corresponding operation. The present invention generates session keys respectively by a car authentication device and a user end, performs authentication and certification, and realizes near-field communication authentication between the car authentication device and the user end.

Description

Technical Field

[0001] The present invention relates to the field of automobile intelligent control technology, and in particular to an automobile authentication method, device, equipment and storage medium. Background Art

[0002] In related technologies, car NFC (Near Field Communication) keys are generated by cloud servers and simultaneously sent to the user end and the car authentication device for storage and use; while the car authentication device directly stores the car NFC key, which increases the exposure surface of the car NFC key and poses a risk of car NFC key information being leaked. Summary of the invention

[0003] The main purpose of the present invention is to provide a car authentication method, device, equipment and storage medium, aiming to solve the technical problem that the existing car authentication equipment directly stores the car NFC key and is prone to leakage.

[0004] To achieve the above object, the present invention adopts the following technical solution:

[0005] In a first aspect, the present invention provides a vehicle authentication method, which is applied to a vehicle authentication device, and the method comprises:

[0006] If the authentication request information sent by the user terminal is received, the first temporary information is generated; wherein the authentication request information includes the user terminal identification code;

[0007] Generate a vehicle-side session key according to the user-side identification code, the first temporary information and the pre-stored vehicle root key;

[0008] The first temporary information is sent to the user terminal so that the user terminal determines the second temporary information, generates a user terminal session key according to the user terminal authentication key and the first temporary information, encrypts the second temporary information with the user terminal session key to obtain an encrypted authentication ciphertext, and returns the encrypted authentication ciphertext. The user terminal authentication key is generated by the cloud platform according to the user terminal identification code and the vehicle root key, and is sent to the user terminal;

[0009] Authenticate the encrypted authentication ciphertext using the vehicle-side session key;

[0010] If the authentication is successful, the target car is controlled to perform the corresponding operation.

[0011] Optionally, generating a vehicle-side session key according to the user-side identification code, the first temporary information and a pre-stored vehicle root key includes:

[0012] Generate a vehicle-side authentication key based on the user-side identification code and the pre-stored vehicle root key;

[0013] Generate a vehicle-side session key based on the vehicle-side authentication key and the first temporary information.

[0014] Optionally, before generating the vehicle-side session key according to the vehicle-side authentication key and the first temporary information, the method further includes:

[0015] Receiving third temporary information sent by the user terminal;

[0016] Generate a vehicle-side session key according to the user-side identification code, the first temporary information and the pre-stored vehicle root key, including:

[0017] Generate a vehicle-side session key according to the user-side identification code, the first temporary information, the pre-stored vehicle root key and the third temporary information;

[0018] The first temporary information is sent to the user terminal so that the user terminal determines the second temporary information, and a user terminal session key is generated according to the user terminal authentication key and the first temporary information, including:

[0019] The first temporary information is sent to the user terminal so that the user terminal determines the second temporary information, and generates a user terminal session key according to the third temporary information, the user terminal authentication key and the first temporary information.

[0020] Optionally, the encrypted authentication ciphertext is authenticated using the vehicle-side session key, including:

[0021] Decrypting the encrypted authentication ciphertext using the vehicle-side session key to obtain fourth temporary information;

[0022] After decrypting the encrypted authentication ciphertext using the vehicle-side session key to obtain the fourth temporary information, the method further includes:

[0023] Receiving second temporary information sent by the user terminal;

[0024] comparing the second temporary information with the fourth temporary information;

[0025] If the authentication is successful, the target vehicle is controlled to perform corresponding operations, including:

[0026] If the second temporary information is the same as the fourth temporary information, the authentication is successful, and the target vehicle is controlled to perform a corresponding operation.

[0027] Optionally, the target vehicle is controlled to perform corresponding operations, including:

[0028] Determine the current state of the target car;

[0029] If the current state is unlocked, the target vehicle is controlled to perform a locking operation;

[0030] If the current state is a locked state, the target vehicle is controlled to perform an unlocking operation.

[0031] Optionally, after the step of controlling the target vehicle to perform an unlocking operation, the method further includes:

[0032] Get the car's start trigger signal;

[0033] According to the start trigger signal, the car is controlled to start.

[0034] Optionally, the user terminal identification code is generated by the cloud platform according to the authentication application request sent by the user terminal, and sent to the user terminal.

[0035] In a second aspect, the present invention further provides a vehicle authentication device, the device comprising:

[0036] An information generation module, configured to generate first temporary information if authentication request information sent by a user terminal is received; wherein the authentication request information includes a user terminal identification code;

[0037] A key generation module, used to generate a vehicle-side session key according to the user-side identification code, the first temporary information and a pre-stored vehicle root key;

[0038] An information sending module is used to send the first temporary information to the user terminal so that the user terminal can determine the second temporary information, generate a user terminal session key according to the user terminal authentication key and the first temporary information, encrypt the second temporary information with the user terminal session key to obtain an encrypted authentication ciphertext, and return the encrypted authentication ciphertext. The user terminal authentication key is generated by the cloud platform according to the user terminal identification code and the vehicle root key, and sent to the user terminal;

[0039] An authentication module, used to authenticate the encrypted authentication ciphertext using the vehicle-side session key;

[0040] The control module is used to control the target vehicle to perform corresponding operations if the authentication is successful.

[0041] In a third aspect, the present invention further provides a vehicle authentication device, comprising: a memory, a processor, and a vehicle authentication program stored in the memory and executable on the processor, the vehicle authentication program being configured to implement the steps of any of the above-mentioned vehicle authentication methods.

[0042] In a fourth aspect, the present invention further provides a computer-readable storage medium on which a vehicle authentication program is stored. When the vehicle authentication program is executed by a processor, the steps of any of the above-mentioned vehicle authentication methods are implemented.

[0043] The present invention provides a car authentication method, device, equipment and storage medium. If an authentication request message sent by a user end is received, first temporary information is generated; wherein the authentication request message includes a user end identification code; a vehicle end session key is generated according to the user end identification code, the first temporary information and a pre-stored vehicle root key; the first temporary information is sent to the user end so that the user end determines the second temporary information; a user end session key is generated according to the user end authentication key and the first temporary information; the second temporary information is encrypted using the user end session key to obtain an encrypted authentication ciphertext, and the encrypted authentication ciphertext is returned; the encrypted authentication ciphertext, the user end authentication key is generated by a cloud platform according to the user end identification code and the vehicle root key, and is sent to the user end; the encrypted authentication ciphertext is authenticated using the vehicle end session key; if the authentication is successful, the target car is controlled to perform a corresponding operation.

[0044] Therefore, the present application generates a vehicle-side session key according to the authentication request information, temporary information and pre-stored vehicle root key sent by the user side, authenticates the encrypted authentication ciphertext sent by the user side and encrypted with the user-side session key generated according to the user-side authentication key and temporary information, and performs corresponding operations according to the authentication result; session keys are generated respectively by the vehicle authentication device and the user side, and authentication is performed, thereby realizing near-field communication authentication between the vehicle authentication device and the user side, without directly storing the vehicle NFC key in the vehicle authentication device, avoiding the risk of vehicle NFC key information leakage, and improving the security of vehicle NFC authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying creative work.

[0046] Figure 1 It is a structural schematic diagram of the automobile authentication device of the present invention;

[0047] Figure 2 is a schematic diagram of the architecture of a vehicle authentication system provided by an exemplary embodiment;

[0048] Figure 3 A schematic diagram of a flow chart of a first embodiment of a vehicle authentication method of the present invention;

[0049] Figure 4 A schematic diagram of a flow chart of a second embodiment of a vehicle authentication method of the present invention;

[0050] Figure 5 A schematic diagram of a flow chart of a third embodiment of a vehicle authentication method of the present invention;

[0051] Figure 6 A schematic diagram of a flow chart of a fourth embodiment of a vehicle authentication method according to the present invention;

[0052] Figure 7 This is a module diagram of the first embodiment of the vehicle authentication device of the present invention.

[0053] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0054] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution in the embodiment of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiment of the present invention. Obviously, the described embodiment is only a part of the embodiment of the present invention, not all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0055] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0056] In the present invention, the term "includes", "comprising" or any other variation thereof is intended to cover non-exclusive inclusion, so that a device or system including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such a device or system. In the absence of more restrictions, an element defined by the sentence "comprising..." does not exclude the presence of other identical elements in the device or system including the element.

[0057] In view of the technical problem that the existing automobile authentication device directly stores the automobile NFC key and is prone to leakage, the present invention provides a vehicle authentication method, and the overall idea is as follows:

[0058] Applied to a car authentication device, the method includes: if an authentication request message sent by a user end is received, first temporary information is generated; wherein the authentication request message includes a user end identification code; a vehicle end session key is generated according to the user end identification code, the first temporary information and a pre-stored vehicle root key; the first temporary information is sent to the user end so that the user end determines the second temporary information, a user end session key is generated according to the user end authentication key and the first temporary information, the second temporary information is encrypted using the user end session key to obtain an encrypted authentication ciphertext, and the encrypted authentication ciphertext is returned, wherein the user end authentication key is generated by a cloud platform according to the user end identification code and the vehicle root key, and is sent to the user end; the encrypted authentication ciphertext is authenticated using the vehicle end session key; if the authentication is successful, the target car is controlled to perform a corresponding operation.

[0059] The present application generates a vehicle-side session key according to the authentication request information, temporary information and pre-stored vehicle root key sent by the user end, authenticates the encrypted authentication ciphertext sent by the user end and encrypted with the user-side session key generated according to the user-side authentication key and temporary information, and performs corresponding operations according to the authentication result; generates session keys respectively by the vehicle authentication device and the user end, performs authentication and certification, realizes near-field communication authentication between the vehicle authentication device and the user end, does not need to directly store the vehicle NFC key in the vehicle authentication device, avoids the risk of vehicle NFC key information leakage, and improves the security of vehicle NFC authentication.

[0060] The following is a detailed description of the vehicle authentication method, device, equipment and storage medium used in the technical implementation of the present invention:

[0061] Reference Figure 1 , Figure 1 It is a structural schematic diagram of the automobile authentication device of the present invention;

[0062] like Figure 1 As shown, the device may include: a processor 1001, such as a central processing unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. Among them, the communication bus 1002 is used to realize the connection and communication between these components. The user interface 1003 may include mobile terminals such as smart phones, tablet computers and smart bracelets, and the optional user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a wireless fidelity (Wireless-Fidelity, Wi-Fi) interface). The memory 1005 may be a high-speed random access memory (Random Access Memory, RAM) memory, or a stable non-volatile memory (Non-Volatile Memory, NVM), such as a disk memory. The memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0063] Those skilled in the art will understand that Figure 1 The structure shown in the figure does not constitute a limitation of the device, and may include more or less components than shown in the figure, or combine certain components, or arrange the components differently.

[0064] like Figure 1 As shown, the memory 1005 as a storage medium may include an operating system, a data storage module, a network communication module, a user interface module and a vehicle authentication program.

[0065] exist Figure 1In the device shown, the network interface 1004 is mainly used for data communication with other devices; the user interface 1003 is mainly used for data interaction with user devices; the processor 1001 and the memory 1005 in the vehicle authentication method of the present invention can be set in the device, and the vehicle authentication method calls the vehicle authentication program stored in the memory 1005 through the processor 1001, and executes the vehicle authentication method provided by the embodiment of the present invention.

[0066] Reference Figure 2 , Figure 2 FIG. 1 is a schematic diagram of the architecture of a vehicle authentication system provided by an exemplary embodiment. Figure 2 As shown, the system may include a cloud platform server 11 , a network 12 , a user terminal 13 and a vehicle authentication device 15 .

[0067] The cloud platform server 11 may be a physical server including an independent host, or the cloud platform server 11 may be a virtual server carried by a host cluster. During operation, the cloud platform server 11 may run a server-side program of a certain application to implement the relevant business functions of the application. For example, when the user terminal 13 sends a user terminal authentication key application, the cloud platform server 11 may serve as the server of the user terminal authentication key application application, complete the work of generating a user identification code and a user terminal authentication key and sending them to the user terminal 13.

[0068] The network 12 may include various types of wired or wireless networks. In one embodiment, the network 12 may include a public switched telephone network (PSTN) and the Internet. The user terminal 13 and the vehicle authentication device 15 may interact with the cloud platform server 11 through the network 12.

[0069] The user terminal 13 may include a mobile terminal such as a smart phone, a tablet computer, and a smart bracelet, and one or more embodiments of this specification are not limited to this. During operation, the user terminal 13 may run the user terminal program of the vehicle authentication application to implement the relevant business functions of the application.

[0070] The vehicle authentication device 15 may include a vehicle NFC card reader and a vehicle NFC controller, and the vehicle NFC controller may be a vehicle central control system; one or more embodiments of this specification are not limited to this. During operation, the vehicle authentication device 15 may run a user-side authentication key authentication program to implement the relevant business functions of the application.

[0071] It is worth mentioning that each terminal of the system in the present application, such as the user terminal 13 and the vehicle authentication device 15, uses the same encryption algorithm and key generation algorithm.

[0072] The vehicle authentication method, device, equipment and storage medium of the present invention are described in detail below with reference to the accompanying drawings and specific implementation methods.

[0073] Based on the above hardware structure but not limited to the above hardware structure, refer to Figure 3 , Figure 3 This is a flow chart of a first embodiment of a vehicle authentication method of the present invention. This embodiment provides a vehicle authentication method, which is applied to a vehicle authentication device. The method includes:

[0074] Step S100: if the authentication request information sent by the user terminal is received, the first temporary information is generated; wherein the authentication request information includes the user terminal identification code;

[0075] In this embodiment, the execution subject is a car authentication device, which may include a vehicle NFC card reader and a vehicle NFC controller, and the vehicle NFC controller may be a car central control system. The user terminal may be a mobile terminal such as a smart phone, tablet computer, and smart bracelet with NFC function. The first temporary information may be any random number. When the user terminal approaches the vehicle NFC card reader, an authentication request message is sent to the car authentication device; the NFC card reader may be an NFC chip, which is set on the target vehicle according to actual needs.

[0076] Step S110: Generate a vehicle-side session key according to the user-side identification code, the first temporary information and the pre-stored vehicle root key;

[0077] Specifically, the user terminal identification code is generated by the cloud platform according to the authentication application request sent by the user terminal, and is sent to the user terminal.

[0078] In this embodiment, the cloud platform can be a server that pre-stores the vehicle root key. The user terminal needs to pre-set account information related to the target vehicle on the cloud platform. After the user terminal logs in to the account, it can initiate a user terminal authentication key application for the target vehicle to the cloud platform. After the cloud platform queries the user terminal based on the account information and finds that the user terminal has the user terminal authentication key application authority, it randomly generates a user terminal identification code, and then generates a user terminal authentication key based on the user identification code and the vehicle root key, and sends the user terminal authentication key and the user terminal identification code to the user terminal; it can be understood that the user terminal identification code is variable.

[0079] Optionally, the user terminal can periodically initiate a user terminal authentication key application for the target vehicle to the cloud platform according to a preset period. At this time, the user terminal can periodically store and update the user terminal authentication key and the user terminal identification code. When there is no network environment or the user terminal is in a network-off state, the stored user terminal authentication key and the user terminal identification code can also be used to implement the target vehicle unlocking function; or, the user terminal can also initiate a user terminal authentication key application for the target vehicle to the cloud platform in real time when approaching the vehicle authentication device, and receive a temporary user terminal authentication key and a temporary user terminal identification code returned by the cloud platform; it can be understood that the user terminal identification code is the user terminal authentication key identification code.

[0080] In addition, the vehicle root key is the root key corresponding to the target vehicle. Different vehicles have different corresponding vehicle root keys. The vehicle root key is pre-set by the vehicle production line and stored in the cloud platform and the vehicle authentication device.

[0081] Step S120: Send the first temporary information to the user terminal so that the user terminal determines the second temporary information, generates a user terminal session key according to the user terminal authentication key and the first temporary information, encrypts the second temporary information with the user terminal session key to obtain an encrypted authentication ciphertext, and returns the encrypted authentication ciphertext. The user terminal authentication key is generated by the cloud platform according to the user terminal identification code and the vehicle root key, and is sent to the user terminal;

[0082] In this embodiment, the second temporary information is randomly generated by the user terminal, and the second temporary information may be any random number different from the first temporary information.

[0083] In the specific implementation, the first temporary information is sent to the user end, and the user end generates a user end session key based on the user end authentication key and the first temporary information generated by the cloud platform according to the user end identification code and the vehicle root key. Then, the user end randomly generates the second temporary information, encrypts the second temporary information according to the user end session key, obtains the encrypted authentication ciphertext, and returns the encrypted authentication ciphertext to the vehicle authentication device.

[0084] It is worth mentioning that in this embodiment, since the user end and the vehicle authentication device are both configured in the same system, the key generation algorithm used by the two in the key generation process is consistent, and the encryption and decryption algorithms of the two for the ciphertext are also consistent. That is, the user end generates the user end session key based on the first key generation algorithm, and the vehicle authentication device generates the vehicle end session key based on the first key generation algorithm. The user end encrypts the authentication ciphertext based on the first encryption algorithm, and similarly, the vehicle authentication device decrypts the encrypted authentication ciphertext based on the first encryption algorithm.

[0085] Specifically, Figure 4 As shown, Figure 4 This is a flow chart of the second embodiment of the vehicle authentication method of the present invention, step S110 includes:

[0086] Step S111: Generate a vehicle-side unlocking key according to the user-side identification code and the pre-stored vehicle root key;

[0087] In this embodiment, the vehicle-side unlocking key is a temporary vehicle-side unlocking key corresponding to the user-side identification code generated according to the user-side identification code sent by the user-side and the pre-stored vehicle root key.

[0088] Step S112: Generate a vehicle-side session key based on the vehicle-side unlocking key and the first temporary information.

[0089] In this embodiment, the user-side authentication key is generated by the cloud platform according to the user-side authentication key application periodically sent by the user-side, and is sent to the user-side for storage.

[0090] In the specific implementation, after receiving the user terminal identification code sent by the user terminal, a vehicle-side authentication key is generated according to the user terminal identification code and the pre-stored vehicle root key; then, a first temporary information is generated, and a vehicle-side session key is generated according to the first temporary information and the vehicle-side authentication key; and the first temporary information is sent to the user terminal so that the user terminal determines the second temporary information, and a user-side session key is generated according to the first temporary information and the user terminal authentication key.

[0091] Step S130: authenticating the encrypted authentication ciphertext using the vehicle-side session key;

[0092] Step S140: If the authentication is successful, the target vehicle is controlled to perform corresponding operations.

[0093] In this embodiment, if the vehicle-side session key successfully decrypts the encrypted authentication ciphertext, it means that the user-side authentication key is successfully authenticated. The vehicle authentication device can generate unlocking instructions, locking instructions and start instructions, and send them to the vehicle central control system, so that the vehicle central control system controls the vehicle to perform unlocking operations, locking operations and start operations.

[0094] In a specific implementation, when the user terminal approaches a vehicle authentication device installed on a target vehicle, the vehicle authentication device receives the authentication request information sent by the user terminal, and generates a vehicle authentication key according to the user terminal identification code and the pre-stored vehicle root key in the authentication request information; then, a first temporary information is generated, and a vehicle session key is generated according to the first temporary information and the vehicle authentication key; the first temporary information is sent to the user terminal, and the user terminal generates a user session key according to the user terminal authentication key and the first temporary information; then, the user terminal randomly generates a second temporary information, encrypts the second temporary information according to the user terminal session key, obtains an encrypted authentication ciphertext, and returns the encrypted authentication ciphertext to the vehicle authentication device; the vehicle authentication device authenticates the encrypted authentication ciphertext using the vehicle session key; if the authentication is successful, the target vehicle is controlled to perform a corresponding operation.

[0095] This embodiment provides a car authentication method, which generates a car session key according to the authentication request information, temporary information and pre-stored vehicle root key sent by the user end, authenticates the encrypted authentication ciphertext encrypted by the user end session key generated according to the temporary information and the user end authentication key, and performs corresponding operations according to the authentication result. Therefore, in this embodiment, the car authentication device stores the vehicle root key, and the user end stores the user end authentication key and the user end identification code. In each authentication process, the car authentication device and the user end respectively combine the same temporary information with the authentication key generated according to the vehicle root key and the same user end identification code, and use the same encryption algorithm to generate a matching session key, and then perform authentication according to the session key, thereby realizing near field communication authentication between the car authentication device and the user end, so that there is no need to directly store the car NFC key in the car authentication device, avoiding the risk of car NFC key information leakage, and improving the security of car NFC authentication.

[0096] This embodiment also generates user authentication keys periodically, so that the user end can periodically store the user authentication keys and user identification codes. When the user end is in a networkless environment, the target vehicle unlocking function can be realized, thereby improving the user experience. Moreover, in this embodiment, only the user end needs to interact with the cloud platform to generate and issue the user authentication key, and no vehicle authentication device needs to interact with the cloud platform, thereby simplifying the user authentication key generation and issuance process.

[0097] Specifically, Figure 5 As shown, Figure 5 This is a flow chart of a third embodiment of the vehicle authentication method of the present invention. Before step S110, the method further includes:

[0098] Step S150: receiving third temporary information sent by the user terminal;

[0099] In this embodiment, the third temporary information is randomly generated by the user terminal, and the third temporary information is an arbitrary random number different from the first temporary information and the second temporary information.

[0100] Specifically, step S110 includes:

[0101] Step S113: Generate a vehicle-side session key according to the user-side identification code, the first temporary information, the pre-stored vehicle root key and the third temporary information.

[0102] Specifically, step S120 includes:

[0103] Step S121: Send the first temporary information to the user end so that the user end determines the second temporary information, generates a user end session key according to the third temporary information, the user end authentication key and the first temporary information, and uses the user end session key to encrypt the second temporary information to obtain an encrypted authentication ciphertext.

[0104] In this embodiment, the vehicle-side session key is obtained by the vehicle-side unlocking key combined with the first temporary information generated by the vehicle-side and the third temporary information generated by the user-side, and the corresponding user-side session key is obtained by the user-side authentication key combined with the first temporary information generated by the vehicle-side and the third temporary information generated by the user-side.

[0105] In a specific implementation, when the user terminal approaches a car authentication device set on a target vehicle, the car authentication device receives the authentication request information sent by the user terminal, and at the same time receives the third temporary information sent by the user terminal, and first generates a car unlocking key according to the user terminal identification code and the pre-stored vehicle root key; then, generates the first temporary information, and generates a car session key according to the car unlocking key, the first temporary information and the third temporary information; sends the first temporary information to the user terminal, and the user terminal generates a user session key according to the user terminal authentication key, the first temporary information and the third temporary information sent by the cloud platform, and then generates the second temporary information, encrypts the second temporary information with the user terminal session key, obtains the encrypted authentication ciphertext, and returns the encrypted authentication ciphertext to the car authentication device; the car authentication device authenticates the encrypted authentication ciphertext with the car session key; if the authentication is successful, the target car is controlled to perform the corresponding operation.

[0106] Specifically, step S130 includes:

[0107] Step S131, decrypting the encrypted authentication ciphertext using the vehicle-side session key to obtain fourth temporary information;

[0108] In this embodiment, the fourth temporary information is an arbitrary random number obtained by the vehicle authentication device decrypting the encrypted authentication ciphertext sent by the user end using the vehicle-end session key.

[0109] After step S131, the method further includes:

[0110] Step S160: receiving the second temporary information sent by the user terminal;

[0111] Step S170: Compare the second temporary information with the fourth temporary information;

[0112] Step S140 includes:

[0113] Step S141: If the second temporary information is the same as the fourth temporary information, the authentication is successful, and the target vehicle is controlled to perform a corresponding operation.

[0114] In this embodiment, when the user terminal returns the encrypted authentication ciphertext to the vehicle authentication device, the second temporary information can be returned at the same time. If the fourth temporary information is the same as the second temporary information, the authentication is successful, indicating that the vehicle-side authentication key and the user-side authentication key are the same, and the vehicle authentication device can generate a control instruction to control the target vehicle to perform the corresponding operation.

[0115] This embodiment provides a vehicle authentication method, which improves the reliability of the session key by using temporary information sent to each other when the vehicle authentication device generates a vehicle-side session key and the user-side generates a user-side session key.

[0116] Specifically, Figure 6 As shown, Figure 6 This is a flow chart of a fourth embodiment of the vehicle authentication method of the present invention, step S140 includes:

[0117] Step S142: Determine the current state of the target vehicle;

[0118] Step S143: If the current state is unlocked, the target vehicle is controlled to perform a locking operation;

[0119] Step S144: If the current state is a locked state, the target vehicle is controlled to perform an unlocking operation.

[0120] In this embodiment, after the user terminal approaches the car authentication device, if the user terminal authentication key is successfully authenticated, it is necessary to determine whether to perform an unlocking operation or a locking operation according to the current state of the car; specifically, the car authentication device can generate an unlocking instruction or a locking instruction to control the execution module of the car central control system to perform the unlocking operation or the locking operation. The current state of the car is obtained by the control module of the car central control system.

[0121] In the specific implementation, after the encrypted authentication ciphertext is successfully authenticated using the vehicle-side session key, the current state of the car is determined to be unlocked or locked; if the current state is unlocked, a locking instruction is generated to control the car execution module to perform the locking operation; if the current state is locked, an unlocking instruction is generated to control the car execution module to perform the unlocking operation.

[0122] Specifically, after step S144, the method further includes:

[0123] Get the car's start trigger signal;

[0124] According to the start trigger signal, the car is controlled to start.

[0125] In this embodiment, the start trigger signal is obtained by the power control module of the automobile central control system, and the power control module can be a car start button and a start key, etc.; after the car is authenticated, the user can generate a start trigger signal by operating the car start button and the start key, and the car authentication device generates a start command to control the start of the car based on the received start trigger signal.

[0126] This embodiment provides a car authentication method. When the user-side authentication key is authenticated successfully, the car is controlled to perform corresponding operations by judging the current state of the car, thereby realizing the unlocking function of the user-side authentication key.

[0127] Based on the same inventive concept, the embodiment of the present invention also provides a vehicle authentication device, referring to Figure 7 , Figure 7 This is a module diagram of the first embodiment of the vehicle authentication device of the present invention; the device comprises:

[0128] The information generating module 10 is used to generate the first temporary information if the authentication request information sent by the user terminal is received; wherein the authentication request information includes the user terminal identification code;

[0129] The key generation module 20 is used to generate a vehicle-side session key according to the user-side identification code, the first temporary information and the pre-stored vehicle root key;

[0130] The information sending module 30 is used to send the first temporary information to the user terminal so that the user terminal determines the second temporary information, generates a user terminal session key according to the user terminal authentication key, the first temporary information and the pre-stored vehicle root key, encrypts the second temporary information with the user terminal session key to obtain an encrypted authentication ciphertext, and returns the encrypted authentication ciphertext. The user terminal authentication key is generated by the cloud platform according to the user terminal identification code and the vehicle root key, and sent to the user terminal;

[0131] An authentication module 40, used to authenticate the encrypted authentication ciphertext using the vehicle-side session key;

[0132] The control module 50 is used to control the target vehicle to perform corresponding operations if the authentication is successful.

[0133] This embodiment provides a car authentication device, which generates a car session key according to authentication request information, temporary information and a pre-stored vehicle root key sent by a user terminal, authenticates an encrypted authentication ciphertext sent by the user terminal and encrypted with the user terminal session key generated according to the user terminal authentication key and temporary information, and performs corresponding operations according to the authentication result; the car authentication device and the user terminal generate session keys respectively, and perform authentication and certification, thereby realizing near-field communication authentication between the car authentication device and the user terminal, without directly storing the car NFC key in the car authentication device, avoiding the risk of car NFC key information leakage, and improving the security of car NFC authentication.

[0134] For more implementation details of the specific implementation of the above-mentioned vehicle authentication device, please refer to the description of the specific implementation of the vehicle authentication method in any one of the above-mentioned embodiments 1 to 4. For the sake of brevity of the specification, they will not be repeated here.

[0135] In addition, an embodiment of the present invention further proposes a computer storage medium, on which a car authentication program is stored, and when the car authentication program is executed by a processor, the steps of the car authentication method as described above are implemented. Therefore, it will not be repeated here. In addition, the description of the beneficial effects of adopting the same method will not be repeated. For technical details not disclosed in the computer-readable storage medium embodiment involved in this application, please refer to the description of the method embodiment of this application. As an example, program instructions can be deployed to be executed on one computing device, or on multiple computing devices located at one location, or on multiple computing devices distributed at multiple locations and interconnected by a communication network.

[0136] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the above-mentioned program can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, the above-mentioned storage medium can be a disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc.

[0137] The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A vehicle authentication method, characterized in that: Applied to automobile authentication equipment, the method comprises: If the authentication request information sent by the user terminal is received, the first temporary information is generated; wherein the authentication request information includes the user terminal identification code; Generate a vehicle-side session key according to the user-side identification code, the first temporary information and a pre-stored vehicle root key; The first temporary information is sent to the user terminal so that the user terminal determines the second temporary information, generates a user terminal session key according to the user terminal authentication key and the first temporary information, encrypts the second temporary information with the user terminal session key to obtain an encrypted authentication ciphertext, and returns the encrypted authentication ciphertext, wherein the user terminal authentication key is generated by the cloud platform according to the user terminal identification code and the vehicle root key, and is sent to the user terminal; Authenticating the encrypted authentication ciphertext using the vehicle-side session key; If the authentication is successful, the target car is controlled to perform the corresponding operation; The generating a vehicle-side session key according to the user-side identification code, the first temporary information and a pre-stored vehicle root key includes: Generate a vehicle-side authentication key according to the user-side identification code and a pre-stored vehicle root key; The vehicle-side session key is generated based on the vehicle-side authentication key and the first temporary information. The user-side periodically initiates a user-side authentication key application for the target vehicle to the cloud platform according to a preset period to update the user-side authentication key and the user-side identification code, so that when the user-side is in a network-free environment or a network-off state, the stored user-side authentication key and user-side identification code are used to implement the unlocking function of the target vehicle.

2. The method according to claim 1, characterized in that Before generating the vehicle-side session key according to the vehicle-side authentication key and the first temporary information, the method further includes: Receiving third temporary information sent by the user terminal; The generating a vehicle-side session key according to the user-side identification code, the first temporary information and a pre-stored vehicle root key includes: generating the vehicle-side session key according to the user-side identification code, the first temporary information, a pre-stored vehicle root key and the third temporary information; The sending the first temporary information to the user terminal so that the user terminal determines the second temporary information, and generating a user terminal session key according to the user terminal authentication key and the first temporary information, includes: The first temporary information is sent to the user terminal so that the user terminal determines the second temporary information, and generates the user terminal session key according to the third temporary information, the user terminal authentication key and the first temporary information.

3. The method according to claim 1, characterized in that The authenticating the encrypted authentication ciphertext by using the vehicle-side session key includes: Decrypting the encrypted authentication ciphertext using the vehicle-side session key to obtain fourth temporary information; After decrypting the encrypted authentication ciphertext using the vehicle-side session key to obtain the fourth temporary information, the method further includes: receiving the second temporary information sent by the user terminal; Comparing the second temporary information with the fourth temporary information; If the authentication is successful, the target vehicle is controlled to perform corresponding operations, including: If the second temporary information is the same as the fourth temporary information, the authentication is successful, and the target vehicle is controlled to perform a corresponding operation.

4. The method according to claim 1, characterized in that The step of controlling the target vehicle to perform a corresponding operation includes: Determining a current state of the target vehicle; If the current state is an unlocked state, controlling the target vehicle to perform a locking operation; If the current state is a locked state, the target vehicle is controlled to perform an unlocking operation.

5. The method according to claim 4, characterized in that After the step of controlling the target vehicle to perform an unlocking operation, the method further includes: Obtaining a start trigger signal of the target vehicle; According to the start trigger signal, the target vehicle is controlled to start.

6. The method according to any one of claims 1 to 5, characterized in that: The user terminal identification code is generated by the cloud platform according to the authentication application request sent by the user terminal, and is sent to the user terminal.

7. A vehicle authentication device, characterized in that: The device comprises: An information generation module, configured to generate first temporary information if authentication request information sent by a user terminal is received; wherein the authentication request information includes a user terminal identification code; A key generation module, used to generate a vehicle-side session key according to the user-side identification code, the first temporary information and a pre-stored vehicle root key; An information sending module, used to send the first temporary information to the user terminal so that the user terminal determines the second temporary information, generates a user terminal session key according to the user terminal authentication key and the first temporary information, encrypts the second temporary information with the user terminal session key to obtain an encrypted authentication ciphertext, and returns the encrypted authentication ciphertext, wherein the user terminal authentication key is generated by the cloud platform according to the user terminal identification code and the vehicle root key, and is sent to the user terminal; An authentication module, used for authenticating the encrypted authentication ciphertext using the vehicle-side session key; A control module, used to control the target vehicle to perform corresponding operations if the authentication is successful; The key generation module is also used to generate a vehicle-side authentication key based on the user-side identification code and the pre-stored vehicle root key; generate the vehicle-side session key based on the vehicle-side authentication key and the first temporary information. The user-side periodically initiates a user-side authentication key application for the target vehicle to the cloud platform according to a preset period to update the user-side authentication key and the user-side identification code, so that when the user-side is in a network-free environment or a network-off state, the stored user-side authentication key and user-side identification code are used to realize the unlocking function of the target vehicle.

8. A vehicle authentication device, characterized in that: The device comprises: a memory, a processor and a car authentication program stored in the memory and executable on the processor, and the car authentication program is configured to implement the steps of the car authentication method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The storage medium stores a vehicle authentication program, and when the vehicle authentication program is executed by the processor, the steps of the vehicle authentication method according to any one of claims 1 to 6 are implemented.

Images