A method and system for verifying a TBOX security certificate

Abstract

The application discloses a TBOX security certificate verification method and system, when receiving a starting instruction, starting a security certificate verification timer, obtaining the last security certificate verification time, the current TBOX time and the security certificate validity verification request information, calculating the time difference between the current TBOX time and the last security certificate verification time, in the case that the time difference exceeds the set time of the security certificate verification timer, based on the security certificate validity verification request information, triggering the local verification operation of the TBOX security certificate validity of the locally stored TBOX security certificate information. The application realizes the local verification operation of the TBOX security certificate validity triggered at a fixed time in the case that the TBOX is in the starting state through the security certificate verification timer, so that the TBOX can actively obtain the TBOX security certificate state and complete the verification of the TBOX security certificate validity.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of TBOX, more particularly, to a TBOX security certificate verification method and system. BACKGROUND

[0002] TBOX (Telematics BOX, vehicle networking terminal) is mainly used for collecting vehicle related information, and transmitting the information to TSP (Telematics Service Provider, remote service provider) background through wireless communication. Users can issue instructions to the TBOX terminal through the TSP background to realize control operation of the vehicle. With the development of vehicle networking technology, the digitalization and intelligentization of automobiles are becoming higher and higher, and the network security problems are also increasing. In order to realize the communication security of TBOX and TSP background, a network communication environment based on PKI (Public Key Infrastructure, public key infrastructure) is constructed to ensure the validity of TBOX security certificate.

[0003] The existing TBOX security certificate verification method is usually based on CA (Certificate Authority, certificate authority) certificate database and implemented through LDAP (Lightweight Directory Access Protocol). After the TBOX is powered on, it connects the certificate management system to verify the validity of the TBOX security certificate. When the TBOX security certificate validity verification fails, the TBOX sends a certificate application instruction to the CA, receives the TBOX security certificate issued by the CA, verifies the validity of the TBOX security certificate again, and establishes a communication connection between the TBOX and the TSP background after the verification is passed.

[0004] In the prior art, if the TBOX security certificate validity verification fails, the TBOX security certificate needs to be re-applied and verified, which affects the normal communication between the TBOX and the TSP background. Therefore, how to verify the validity of the TBOX security certificate while ensuring that the TBOX is in the starting state has become a technical problem that technicians in the field need to solve. SUMMARY

[0005] Therefore, the present application discloses a TBOX security certificate verification method and system to verify the validity of the TBOX security certificate while the TBOX is in the starting state.

[0006] A TBOX security certificate verification method, comprising:

[0007] starting a security certificate verification timer after receiving a start instruction;

[0008] acquire a last security certificate verification time, a current TBOX time, and a security certificate validity verification request information;

[0009] calculate a time difference between the current TBOX time and the last security certificate verification time;

[0010] in a case where the time difference exceeds a set time of the security certificate verification timer, trigger a local verification operation of TBOX security certificate validity on the locally stored TBOX security certificate information based on the security certificate validity verification request information.

[0011] Optionally, after receiving the start instruction, the method further comprises:

[0012] connect a certificate management system, and acquire the TBOX security certificate information from the certificate management system;

[0013] trigger a network verification operation of TBOX security certificate validity on the acquired TBOX security certificate information.

[0014] Optionally, the method further comprises:

[0015] in a case where the TBOX security certificate passes the validity verification, set an effectiveness position of the TBOX security certificate as a verification pass identifier;

[0016] in a case where the TBOX security certificate does not pass the validity verification, set the effectiveness position as a verification fail identifier, and send a certificate application instruction to a certificate authority;

[0017] acquire a latest TBOX security certificate issued by the certificate authority;

[0018] perform validity verification on the latest TBOX security certificate;

[0019] when the latest TBOX security certificate passes the validity verification, establish a communication connection with a remote service provider background, and set the effectiveness position as the verification pass identifier.

[0020] Optionally, the process of performing validity verification on the TBOX security certificate information comprises:

[0021] in a case where the preset information set exists, determine whether the TBOX security certificate information is empty;

[0022] when the TBOX security certificate information is not empty, acquire a TBOX security certificate validity period, and calculate an absolute value of a time difference between the TBOX security certificate validity period and the current TBOX time;

[0023] In a case where the absolute value of the time difference is less than the preset expiration threshold, it is determined that the TBOX security certificate is expired, and the validity position of the TBOX security certificate is set as a check-failed identifier;

[0024] In a case where the absolute value of the time difference is not less than the preset expiration threshold, it is determined that the TBOX security certificate passes the validity check, and the validity position is set as a check-passed identifier.

[0025] Optionally, the method further comprises:

[0026] In a case where the preset information subset exists, it is determined that the TBOX security certificate does not exist and the TBOX security certificate does not pass the validity check, and the validity position of the security certificate is set as an invalid identifier, wherein the TBOX security certificate is not included in the preset information subset;

[0027] In a case where the preset information subset does not exist, it is determined that the TBOX security certificate cannot be applied for, and the validity position of the security certificate is set as the invalid identifier.

[0028] Optionally, the method further comprises:

[0029] In a case where the TBOX security certificate information is empty, it is determined that the TBOX security certificate is damaged, and the validity position of the TBOX security certificate is set as a check-failed identifier.

[0030] Optionally, after it is determined that the TBOX security certificate is expired, a maintenance operation on the TBOX security certificate is triggered.

[0031] Optionally, the process of maintaining the TBOX security certificate comprises:

[0032] Obtaining a locally stored TBOX backup security certificate;

[0033] Covering the expired TBOX security certificate with the TBOX backup security certificate;

[0034] Performing a validity check on the TBOX backup security certificate;

[0035] When the TBOX backup security certificate passes the validity check, the validity position is set as a check-passed identifier.

[0036] Optionally, the method further comprises:

[0037] when the TBOX backup security certificate fails the validity check, if the number of times of certificate replacement does not exceed a set threshold, returning to acquire the TBOX backup security certificate stored locally again, and replacing the TBOX backup security certificate that fails the validity check last time with the TBOX backup security certificate acquired again;

[0038] if the number of times of certificate replacement exceeds the set threshold, waiting for the next start instruction to acquire the TBOX security certificate information from the certificate management system again based on the start instruction, and performing the TBOX security certificate validity check operation.

[0039] A TBOX security certificate check system, comprising:

[0040] a start unit configured to start a security certificate check timer when a start instruction is received;

[0041] a local information acquisition unit configured to acquire last security certificate check time, TBOX current time, and security certificate validity check request information;

[0042] a calculation unit configured to calculate a time difference between the TBOX current time and the last security certificate check time;

[0043] a local check triggering unit configured to trigger a local check operation of TBOX security certificate validity on TBOX security certificate information stored locally based on the security certificate validity check request information if the time difference exceeds a set time of the security certificate check timer.

[0044] According to the above technical solution, the application discloses a TBOX security certificate check method and system, a security certificate check timer is started when a start instruction is received, last security certificate check time, TBOX current time, and security certificate validity check request information are acquired, a time difference between the TBOX current time and the last security certificate check time is calculated, and a local check operation of TBOX security certificate validity is triggered on TBOX security certificate information stored locally based on the security certificate validity check request information if the time difference exceeds a set time of the security certificate check timer. The application realizes the local check operation of TBOX security certificate validity triggered at a fixed time when the TBOX is in a start state through the security certificate check timer, so that the TBOX can actively acquire the TBOX security certificate state and complete the verification of the TBOX security certificate validity. BRIEF DESCRIPTION OF DRAWINGS

[0045] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiments or prior art description. Obviously, the drawings in the following description only constitute a part of the embodiments of the present application, and for those skilled in the art, other drawings can also be obtained based on the disclosed drawings without creative labor.

[0046] Figure 1 A flow chart of a TBOX security certificate verification method disclosed by the embodiment of the present application is shown in the figure.

[0047] Figure 2 A flow chart of another TBOX security certificate verification method disclosed by the embodiment of the present application is shown in the figure.

[0048] Figure 3 A flow chart of a method for verifying the validity of TBOX security certificate information disclosed by the embodiment of the present application is shown in the figure.

[0049] Figure 4 A flow chart of a method for maintaining TBOX security certificate disclosed by the embodiment of the present application is shown in the figure.

[0050] Figure 5 A structure diagram of a TBOX security certificate verification system disclosed by the embodiment of the present application is shown in the figure. DETAILED DESCRIPTION

[0051] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments only constitute a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of the present application.

[0052] The embodiment of the present application discloses a TBOX security certificate verification method and system. After receiving a start instruction, a security certificate verification timer is started, the last security certificate verification time, the current TBOX time and the security certificate validity verification request information are obtained, the time difference between the current TBOX time and the last security certificate verification time is calculated, and in the case that the time difference exceeds the set time of the security certificate verification timer, the local TBOX security certificate information is triggered to perform the local verification operation of the TBOX security certificate validity based on the security certificate validity verification request information. The present application realizes the local verification operation of the TBOX security certificate validity by the security certificate verification timer in the case that the TBOX is in the start state, so that the TBOX can actively obtain the TBOX security certificate state and complete the verification of the TBOX security certificate validity.

[0053] Referring to Figure 1 The embodiment of the present application discloses a TBOX security certificate verification method flow chart, the method is applied to TBOX, and the method comprises the following steps:

[0054] In step S101, after receiving a starting instruction, a security certificate verification timer is started.

[0055] In the embodiment, the timing time of the security certificate verification timer is period T0, and through the security certificate verification timer, the local verification operation of the validity of the TBOX security certificate is triggered.

[0056] The specific time value of period T0 is determined according to actual needs, and the present application does not limit the same.

[0057] In step S102, the last security certificate verification time, the current TBOX time and the security certificate validity verification request information are obtained.

[0058] The last security certificate verification time can be the last local verification time or the last network verification time.

[0059] In actual application, the TBOX obtains the last security certificate verification time, the current TBOX time and the security certificate validity verification request information from the memory of the TBOX.

[0060] The security certificate validity verification request information refers to whether the security certificate validity verification is initiated when the TBOX is started last time. In actual application, a global variable flag can be set to realize the same.

[0061] In step S103, the time difference between the current TBOX time and the last security certificate verification time is calculated.

[0062] In step S104, it is judged whether the time difference exceeds the set time of the security certificate verification timer, and if yes, step S105 is executed.

[0063] The local verification operation of the validity of the TBOX security certificate is triggered every period T0 in the embodiment, therefore, if the time difference between the current TBOX time and the last security certificate verification time exceeds the set time of the security certificate verification timer, it is indicated that the triggering time of the local verification operation is reached, and at this time, the local verification operation of the validity of the TBOX security certificate is triggered again.

[0064] It should be noted that when the time difference does not exceed the set time of the security certificate verification timer, the latest TBOX time is obtained again in step S102.

[0065] Step S105, based on the security certificate validity check request information, triggering the local check operation of the TBOX security certificate validity on the locally stored TBOX security certificate information.

[0066] In conclusion, the application discloses a kind of TBOX security certificate verification method, when receiving start instruction, start security certificate verification timer, obtain last security certificate verification time, TBOX current time and security certificate validity check request information, calculate the time difference of TBOX current time and last security certificate verification time, in the case where time difference exceeds the set time of security certificate verification timer, based on security certificate validity check request information, trigger the local check operation of the TBOX security certificate validity on the locally stored TBOX security certificate information.The application is realized by security certificate verification timer, in the case where TBOX is in the start state, the local check operation of the TBOX security certificate validity is triggered regularly, so that TBOX can actively obtain TBOX security certificate state, complete the verification of TBOX security certificate validity.

[0067] To avoid TBOX stored in local TBOX security certificate damage, cause TBOX obtained TBOX security certificate information error, cause TBOX security certificate validity judgment error.Therefore, TBOX can also carry out networking verification of TBOX security certificate validity after receiving start instruction.

[0068] Therefore, to further optimize the above embodiment, see Figure 2 The application embodiment discloses another TBOX security certificate verification method flow chart, and the verification method can include:

[0069] Step S201, when receiving start instruction, connect certificate management system, and obtain TBOX security certificate information from certificate management system.

[0070] Step S202, trigger the networking verification operation of the TBOX security certificate validity on the obtained TBOX security certificate information.

[0071] It should be noted that the local check of TBOX security certificate validity means: obtaining TBOX security certificate information from the local storage of TBOX, and carrying out validity check.

[0072] The networking verification of TBOX security certificate validity means: obtaining TBOX security certificate information from the outside of TBOX (that is, certificate management system), and carrying out validity check.

[0073] To further optimize the above embodiment, the verification method can also include:

[0074] Step S203, judging whether the TBOX security certificate passes the validity check, if yes, executing step S204, if not, executing step S205.

[0075] Step S204, setting the validity position of the TBOX security certificate as a check-passing identifier.

[0076] In practical application, the check-passing identifier can be set as 1, that is, when the TBOX security certificate passes the validity check, the validity position of the TBOX security certificate is set as 1.

[0077] Step S205, setting the validity position as a check-failing identifier, and sending a certificate application instruction to the certificate authority.

[0078] In practical application, the check-passing identifier can be set as 0, that is, when the TBOX security certificate fails the validity check, the validity position of the TBOX security certificate is set as 0.

[0079] Step S206, obtaining the latest TBOX security certificate issued by the certificate authority.

[0080] Step S207, performing the validity check on the latest TBOX security certificate.

[0081] Step S208, when the latest TBOX security certificate passes the validity check, establishing a communication connection with the remote service provider background, and setting the validity position as a check-passing identifier.

[0082] In the embodiment, when the TBOX security certificate fails the validity check, the latest TBOX security certificate is re-applied to the certificate authority, and the latest TBOX security certificate is checked, only when the latest TBOX security certificate passes the validity check, a communication connection is established with the remote service provider background, and the validity position is set as a check-passing identifier, otherwise, the validity position is set as a check-failing identifier.

[0083] As can be seen from the above, the TBOX security certificate information is obtained from the certificate management system to realize the networked check on the validity of the TBOX security certificate, so that the situation that the TBOX security certificate information obtained by the TBOX is wrong due to the damage of the TBOX security certificate stored in the local, and the validity of the TBOX security certificate is wrongly judged is effectively avoided, and the reliability of the validity check on the TBOX security certificate is greatly improved.

[0084] From Figure 1 and Figure 2The embodiment shown can know that the application adopts two ways of local verification and network verification to verify the validity of the TBOX security certificate, so as to guarantee the long-term validity of the TBOX local security certificate.

[0085] It should be noted that when the validity of the TBOX security certificate information is verified, whether the local verification or the network verification is adopted, the process of verifying the validity of the TBOX security certificate information is the same.

[0086] Therefore, in order to further optimize the above-mentioned embodiment, referring to Figure 3 The embodiment of the application discloses a method flow chart for verifying the validity of TBOX security certificate information, and the method comprises the following steps:

[0087] Step S301, judging whether the preset information set in the TBOX exists, if yes, executing step S302.

[0088] The preset information set can include: TBOX local private key, TBOX security certificate, root certificate, SYNCP key and EndPoint file (containing TBOX identity identification).

[0089] Step S302, judging whether the TBOX security certificate information is empty, if no, executing step S303.

[0090] In actual application, the stored TBOX security certificate information can be read through the OpenSSL library function.

[0091] Step S303, obtaining the validity period of the TBOX security certificate.

[0092] Step S304, calculating the absolute value of the time difference between the validity period of the TBOX security certificate and the current time of the TBOX.

[0093] Step S305, judging whether the absolute value of the time difference is not less than the preset expiration threshold, if no, executing step S306, if yes, executing step S307.

[0094] Supposing that the current time of the TBOX is represented by T2, the validity period of the TBOX security certificate is represented by T3, and the preset expiration threshold is represented by T4, then the embodiment judges whether |T3-T2| is greater than or equal to T4.

[0095] It should be noted that in actual application, the value of the preset expiration threshold is determined based on the application security certificate time and the security certificate utilization rate, for example, five days, and the specific value is determined according to actual needs, which is not limited in the application.

[0096] Step S306, determining that the TBOX security certificate is expired, and setting the validity position of the TBOX security certificate as a verification failure identification.

[0097] When the TBOX security certificate expires, the actual TBOX security certificate can still be normally used, but the normal communication between the TBOX and the remote service provider background is not guaranteed, when the time difference between the TBOX security certificate validity period and the current TBOX time is less than the preset expiration threshold, the maintenance of the expired TBOX security certificate is applied.

[0098] Step S307, determine that the TBOX security certificate passes the validity check, and set the validity position to the check pass identifier.

[0099] In practical application, the check pass identifier can be represented by 0, and the check pass identifier can be represented by 1.

[0100] As can be known from the above, the preset expiration threshold is set, when the time difference between the TBOX security certificate validity period and the current TBOX time is less than the preset expiration threshold, it is determined that the TBOX security certificate expires, at this time, the maintenance of the TBOX security certificate can be applied to ensure the long-term validity of the TBOX security certificate.

[0101] To further optimize the above embodiment, when the step S301 is determined to be no, further comprising:

[0102] Step S308, determine whether the preset information subset in the preset information set exists, if yes, execute step S309, if no, execute step S310.

[0103] The preset information subset includes: the TBOX local private key, the root certificate and the SYNCP key.

[0104] Step S309, determine that the TBOX security certificate does not exist and the TBOX security certificate does not pass the validity check, and set the security certificate validity position to the invalid identifier.

[0105] It should be particularly pointed out that the TBOX security certificate is not included in the preset information subset. Therefore, when the preset information subset in the preset information set does not exist, it is determined that the TBOX security certificate does not exist, at this time, it is determined that the TBOX security certificate does not pass the validity check.

[0106] Step S310, determine that the TBOX security certificate cannot be applied, and set the security certificate validity position to the invalid identifier.

[0107] To further optimize the above embodiment, when the step S302 is determined to be yes, further comprising:

[0108] Step S311, determine that the TBOX security certificate is damaged, and set the validity position of the TBOX security certificate to the check pass identifier.

[0109] It should be noted that, in order to ensure the long-term validity of the TBOX security certificate, the maintenance operation of the TBOX security certificate is triggered after the expiration of the TBOX security certificate is determined.

[0110] Referring to Figure 4 The embodiment of the application discloses a method flow chart for maintaining the TBOX security certificate, which comprises the following steps:

[0111] Step S401, obtaining the locally stored TBOX backup security certificate.

[0112] Step S402, covering the expired TBOX security certificate with the TBOX backup security certificate.

[0113] Step S403, performing validity verification on the TBOX backup security certificate.

[0114] In order to ensure the validity of the TBOX backup security certificate, when the TBOX backup security certificate is used to cover the expired TBOX security certificate, validity verification needs to be performed on the TBOX backup security certificate. The specific verification process can be referred to the corresponding part of the above embodiment, which will not be described here.

[0115] Step S404, when the TBOX backup security certificate passes the validity verification, setting the validity position as a verification pass identifier.

[0116] In order to further optimize the above embodiment, the following steps can also be included:

[0117] Step S405, when the TBOX backup security certificate fails the validity verification, determining whether the certificate covering times exceed a set number threshold, if not, returning to step S401 to obtain the locally stored TBOX backup security certificate again, and covering the TBOX backup security certificate that fails the validity verification with the TBOX backup security certificate obtained again, if yes, performing step S406;

[0118] The value of the set number threshold is determined according to actual needs, for example, 3 times, which is not limited in the application.

[0119] Step S406, waiting for the next start instruction to obtain the TBOX security certificate information from the certificate management system again based on the start instruction, and performing the TBOX security certificate validity verification operation.

[0120] In actual application, the TBOX security certificate validity verification time can also be recorded.

[0121] As can be seen from the above, by maintaining the TBOX security certificate, the long-term validity of the TBOX security certificate is ensured.

[0122] Corresponding to the method embodiments, the application further discloses a TBOX security certificate verification system.

[0123] Referring to Figure 5 The TBOX security certificate verification system disclosed by the embodiments of the application has the structure as shown in the figure, and the system comprises:

[0124] The starting unit 501 is configured to start the security certificate verification timer when receiving the starting instruction.

[0125] The timing time of the security certificate verification timer in the embodiment is period T0, and the security certificate verification timer is used to realize the local verification operation of the TBOX security certificate validity triggered at a timing.

[0126] The local information acquisition unit 502 is configured to acquire the last security certificate verification time, the TBOX current time and the security certificate validity verification request information.

[0127] The last security certificate verification time can be the last local verification time or the last network verification time.

[0128] In actual application, the TBOX acquires the last security certificate verification time, the TBOX current time and the security certificate validity verification request information from the memory of the TBOX.

[0129] The calculation unit 503 is configured to calculate the time difference between the TBOX current time and the last security certificate verification time.

[0130] The local verification operation of the TBOX security certificate validity is triggered every period T0 in the embodiment, and therefore, if the time difference between the TBOX current time and the last security certificate verification time exceeds the set time of the security certificate verification timer, it is indicated that the triggering time of the local verification operation is reached, and at this time, the local verification operation of the TBOX security certificate validity is triggered again.

[0131] The local verification triggering unit 504 is configured to trigger the local verification operation of the TBOX security certificate validity based on the security certificate validity verification request information on the locally stored TBOX security certificate information in the case that the time difference exceeds the set time of the security certificate verification timer.

[0132] In conclusion, the application discloses a TBOX security certificate verification system, when receiving a starting instruction, starting a security certificate verification timer, obtaining last security certificate verification time, TBOX current time and security certificate validity verification request information, calculating the time difference between TBOX current time and last security certificate verification time, in the case that the time difference exceeds the set time of the security certificate verification timer, based on the security certificate validity verification request information, triggering the local verification operation of TBOX security certificate validity for the locally stored TBOX security certificate information.

[0133] To further optimize the above embodiment, the verification system can further comprise:

[0134] An external information acquisition unit is configured to connect to the certificate management system and acquire TBOX security certificate information from the certificate management system after receiving the starting instruction.

[0135] A network verification triggering unit is configured to trigger a network verification operation of TBOX security certificate validity for the acquired TBOX security certificate information.

[0136] To further optimize the above embodiment, the verification system can further comprise:

[0137] An effectiveness judgment unit is configured to judge whether the TBOX security certificate passes the validity verification.

[0138] A verification passing unit is configured to set the validity position of the TBOX security certificate to a verification passing identifier when the effectiveness judgment unit judges that the TBOX security certificate passes the validity verification.

[0139] A verification failing unit is configured to set the validity position to a verification failing identifier and send a certificate application instruction to the certificate issuing authority.

[0140] A latest certificate acquisition unit is configured to acquire the latest TBOX security certificate issued by the certificate issuing authority.

[0141] A latest certificate verification unit is configured to perform validity verification on the latest TBOX security certificate.

[0142] A connection unit is configured to establish a communication connection with a remote service provider background when the latest TBOX security certificate passes the validity verification, and set the validity position to a verification passing identifier.

[0143] To further optimize the above embodiment, the verification system can further comprise:

[0144] information checking unit, configured to perform validity checking on the TBOX security certificate information.

[0145] The information checking unit can be specifically configured to:

[0146] determine whether a preset information set in the TBOX exists;

[0147] if the preset information set exists, determine whether the TBOX security certificate information is empty;

[0148] if the TBOX security certificate information is not empty, obtain a validity period of the TBOX security certificate;

[0149] calculate an absolute value of a time difference between the validity period of the TBOX security certificate and a current time of the TBOX;

[0150] determine whether the absolute value of the time difference is not less than a preset expiration threshold;

[0151] if the absolute value of the time difference is less than the preset expiration threshold, determine that the TBOX security certificate is expired, and set an effectiveness position of the TBOX security certificate to a check-failed identifier;

[0152] if the absolute value of the time difference is not less than the preset expiration threshold, determine that the TBOX security certificate passes the validity checking, and set the effectiveness position to a check-passed identifier.

[0153] To further optimize the above embodiment, the information checking unit can be specifically configured to:

[0154] if the preset information set does not exist, continue to determine whether a preset information subset in the preset information set exists;

[0155] if the preset information subset exists, determine that the TBOX security certificate does not exist and the TBOX security certificate does not pass the validity checking, and set an effectiveness position of the security certificate to an invalid identifier, wherein the preset information subset does not include the TBOX security certificate;

[0156] if the preset information subset does not exist, determine that the TBOX security certificate cannot be applied, and set the effectiveness position of the security certificate to the invalid identifier.

[0157] To further optimize the above embodiment, the information checking unit can be specifically configured to:

[0158] if the TBOX security certificate information is empty, determine that the TBOX security certificate is damaged, and set the effectiveness position of the TBOX security certificate to the check-failed identifier.

[0159] To further optimize the above embodiment, the information checking unit can be specifically configured to:

[0160] After determining that the TBOX security certificate is expired, a certificate maintenance unit is triggered for maintenance operation of the TBOX security certificate.

[0161] The maintenance unit can be specifically used for:

[0162] acquiring a locally stored TBOX backup security certificate;

[0163] covering the expired TBOX security certificate with the TBOX backup security certificate;

[0164] performing validity verification on the TBOX backup security certificate;

[0165] when the TBOX backup security certificate passes the validity verification, setting an effectiveness position as a verification pass identifier.

[0166] when the TBOX backup security certificate fails the validity verification, determining whether a certificate coverage number exceeds a set number threshold;

[0167] if not, returning to acquire the locally stored TBOX backup security certificate again, and covering the TBOX backup security certificate that fails the validity verification last time with the TBOX backup security certificate acquired again;

[0168] if yes, waiting for a next start instruction to acquire TBOX security certificate information from the certificate management system again based on the start instruction, and performing TBOX security certificate validity verification operation.

[0169] It should be particularly noted that the specific working principles of the components in the system embodiment can be seen in the corresponding parts of the method embodiment, which will not be repeated here.

[0170] Finally, it should be further noted that in this document, relationship terms such as first and second are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. Moreover, the terms “include”, “contain” or any other variants thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such process, method, article or device. Without more limitations, the element defined by the statement “including a…” does not exclude the presence of other identical elements in the process, method, article or device including the element.

[0171] The various embodiments described in this specification are intended to be illustrative only and in no way limit the scope of the application. Changes and modifications can be made by those skilled in the art, which employ the principles of the application, without departing from the scope of the application. Accordingly, the application is not limited to the embodiments described herein, but instead has scope to encompass any choice whatsoever that is dependent on, or can be substituted in, the principal, new and inventive features that are disclosed and claimed herein.

[0172] The above description of disclosed embodiments is intended to be illustrative only and not limiting of the application. Numerous modifications to these embodiments can be made by those skilled in the art without departing from the spirit or scope of the application. The scope of the application is not limited to the embodiments described herein, but rather extends to any that are dependent on, or can be substituted in, the principal, new and inventive features that are disclosed and claimed herein.

Claims

1. A method for verifying TBOX security certificates, characterized in that, include: Upon receiving the start command, a security certificate verification timer is started to periodically trigger the local verification operation of the TBOX security certificate validity. Retrieve the last security certificate verification time, the current TBOX time, and the security certificate validity verification request information; Calculate the time difference between the current time of the TBOX and the last security certificate verification time; If the time difference exceeds the set time of the security certificate verification timer, a local verification operation of the TBOX security certificate validity is triggered on the locally stored TBOX security certificate information based on the security certificate validity verification request information. The process of validating the TBOX security certificate information includes: If the preset information set exists, determine whether the TBOX security certificate information is empty; When the TBOX security certificate information is not empty, obtain the validity period of the TBOX security certificate and calculate the absolute value of the time difference between the validity period of the TBOX security certificate and the current time of the TBOX. If the absolute value of the time difference is less than a preset expiration threshold, the TBOX security certificate is determined to be expired, and the validity position of the TBOX security certificate is set to a verification failure flag. If the absolute value of the time difference is not less than the preset expiration threshold, the TBOX security certificate is determined to have passed the validity verification, and the validity position is set as the verification passed identifier.

2. The verification method according to claim 1, characterized in that, Upon receiving the startup command, the system may further include: Connect to the certificate management system and obtain the TBOX security certificate information from the certificate management system; The obtained TBOX security certificate information triggers an online verification operation to check the validity of the TBOX security certificate.

3. The verification method according to claim 2, characterized in that, Also includes: If the TBOX security certificate passes the validity verification, the validity position of the TBOX security certificate is set to the verification passed indicator; If the TBOX security certificate fails the validity verification, the validity position is set to the verification failure flag, and a certificate application instruction is sent to the certificate authority. Obtain the latest TBOX security certificate issued by the certificate authority; The validity of the latest TBOX security certificate is verified. When the latest TBOX security certificate passes the validity verification, a communication connection is established with the remote service provider's backend, and the validity location is set to the verification pass identifier.

4. The verification method according to claim 1, characterized in that, Also includes: When the preset information set does not exist, if the preset information subset exists, it is determined that the TBOX security certificate does not exist and the TBOX security certificate has failed the validity check, and the valid position of the security certificate is set to an invalid flag, wherein the preset information subset does not contain the TBOX security certificate; If the preset information subset does not exist, it is determined that the TBOX security certificate cannot be applied for, and the valid position of the security certificate is set to the invalid identifier.

5. The verification method according to claim 1, characterized in that, Also includes: If the TBOX security certificate information is empty, it is determined that the TBOX security certificate is corrupt, and the validity position of the TBOX security certificate is set to the verification failure flag.

6. The verification method according to claim 1, characterized in that, Once it is determined that the TBOX security certificate has expired, a maintenance operation for the TBOX security certificate is triggered.

7. The verification method according to claim 6, characterized in that, The process of maintaining the TBOX security certificate includes: Obtain the TBOX backup security certificate for local storage; Overwrite the expired TBOX security certificate with the TBOX backup security certificate; The validity of the TBOX backup security certificate is verified. When the TBOX backup security certificate passes the validity verification, the validity location is set to the verification pass flag.

8. The verification method according to claim 7, characterized in that, Also includes: When the TBOX backup security certificate fails the validity check, if the number of certificate overwrites has not exceeded the set threshold, return to obtain the TBOX backup security certificate stored locally again, and use the newly obtained TBOX backup security certificate to overwrite the TBOX backup security certificate that failed the validity check last time. If the number of times the certificate is overwritten exceeds the set threshold, wait for the next startup command, and then retrieve the TBOX security certificate information from the certificate management system again based on the startup command to perform the TBOX security certificate validity verification operation.

9. A verification system for TBOX security certificates, characterized in that, include: The startup unit is used to start a security certificate verification timer after receiving a startup command, so as to trigger the local verification operation of the validity of the TBOX security certificate at regular intervals through the security certificate verification timer; The local information acquisition unit is used to acquire the last security certificate verification time, the current time of the TBOX, and security certificate validity verification request information. The calculation unit is used to calculate the time difference between the current time of the TBOX and the last security certificate verification time; The local verification triggering unit is used to trigger a local verification operation on the TBOX security certificate validity based on the security certificate validity verification request information when the time difference exceeds the set time of the security certificate verification timer. The process of validating the TBOX security certificate information includes: If the preset information set exists, determine whether the TBOX security certificate information is empty; When the TBOX security certificate information is not empty, obtain the validity period of the TBOX security certificate and calculate the absolute value of the time difference between the validity period of the TBOX security certificate and the current time of the TBOX. If the absolute value of the time difference is less than a preset expiration threshold, the TBOX security certificate is determined to be expired, and the validity position of the TBOX security certificate is set to a verification failure flag. If the absolute value of the time difference is not less than the preset expiration threshold, the TBOX security certificate is determined to have passed the validity verification, and the validity position is set as the verification passed identifier.

Images