A secure communication method, system, storage medium, and vehicle

Abstract

This invention provides a secure communication method, a system storage medium, and a vehicle. The method includes: upon receiving an authentication request from an in-vehicle communication box, sending a confirmation message to the in-vehicle communication box and entering extended mode; upon receiving a handshake request from the in-vehicle communication box based on the confirmation message, generating a random verification seed according to preset rules, sending the random verification seed to the in-vehicle communication box, and generating a local key based on the random verification seed using a preset encryption algorithm; upon receiving a mutual trust key generated by the in-vehicle communication box based on the random verification seed using a preset encryption algorithm, comparing the received mutual trust key with the local key to determine whether the in-vehicle communication box is trustworthy; and sending the verification result to the in-vehicle communication box so that the in-vehicle communication box can determine whether the verification was successful and decide whether to proceed with communication based on the verification result. This invention solves the problem of insufficient security in communication between smart gateways and in-vehicle communication boxes in the prior art.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and in particular to a secure communication method, system, storage medium, and vehicle. Background Technology

[0002] The in-vehicle communication box (t-box) in a connected vehicle system enables functions such as remotely starting the vehicle, turning on the air conditioning, adjusting the seat to a comfortable position, and communicating with other communication devices. A connected vehicle system consists of four parts: the main unit, the in-vehicle t-box, the mobile application, and the backend system. The main unit is primarily used for audio-visual entertainment and vehicle information display; the in-vehicle t-box is mainly used to communicate with the backend system / mobile application, enabling the mobile application to display and control vehicle information.

[0003] Due to their inherent characteristics, in-vehicle communication boxes are vulnerable to attacks from the internet. The smart gateway is the only path for the in-vehicle communication box to connect to the vehicle's network. To maximize the security of the vehicle network and reduce security risks associated with the in-vehicle communication box, existing in-vehicle communication boxes and smart gateways typically perform a handshake process before the in-vehicle communication box participates in vehicle network communication, ensuring the in-vehicle communication box is in a secure state. However, this handshake process is usually quite simple and easily cracked by external internet access, and a single authentication method is not sufficiently secure. Summary of the Invention

[0004] Based on this, the purpose of the present invention is to provide a secure communication method, system, storage medium, and vehicle, aiming to solve the problem of insufficient security in communication between smart gateways and vehicle communication boxes in the prior art.

[0005] According to an embodiment of the present invention, a secure communication method is applied to a smart gateway, wherein the smart gateway is communicatively connected to an in-vehicle communication box, and the method includes:

[0006] Upon receiving the authentication request from the vehicle communication box, a confirmation message is sent to the vehicle communication box and the system enters extended mode.

[0007] Upon receiving the handshake request sent by the vehicle communication box based on the confirmation information, a random verification seed is generated according to a preset rule, the random verification seed is sent to the vehicle communication box, and a local key is generated based on the random verification seed using a preset encryption algorithm.

[0008] After receiving the mutual trust key generated by the vehicle communication box using the preset encryption algorithm based on the random verification seed, the received mutual trust key is compared and verified with the local key to determine whether the vehicle communication box is trustworthy.

[0009] The verification result is sent to the vehicle communication box, so that the vehicle communication box can determine whether the verification was successful and decide whether to conduct communication based on the verification result.

[0010] In addition, the assisted driving function control method according to the above embodiments of the present invention may also have the following additional technical features:

[0011] Furthermore, the random verification seed is a random number generated according to a preset rule, which is:

[0012] Upon receiving the handshake request, the current time is obtained, and the value of the fractional part of the current time and the value of the second part of the current time are XORed to obtain the XOR value.

[0013] The XOR operation value is added to the total number of seconds of device operation time to obtain a random number.

[0014] Furthermore, the encryption algorithm is as follows:

[0015] The random number is shifted to obtain the first intermediate number;

[0016] The first intermediate number is moved to obtain the second intermediate number;

[0017] The local key or the mutual trust key is obtained by XORing the second intermediate number with the base number.

[0018] The base number is a preset four-digit number.

[0019] Furthermore, after sending the verification result to the vehicle communication box, so that the vehicle communication box can determine whether the verification was successful and decide whether to proceed with the communication step based on the verification result, the process further includes:

[0020] Upon receiving a command message generated by the vehicle communication box using a preset encryption algorithm, the command message is decrypted using the preset decryption rule.

[0021] The decrypted original command is then sent to the corresponding control unit of the vehicle to enable the vehicle communication box to remotely control the control unit.

[0022] Then, a control success signal is sent to the vehicle communication box so that the vehicle communication box can continue to send new command information.

[0023] Furthermore, the preset encryption algorithm is:

[0024] Obtain the current time and use it as the end of the original command to form the encrypted command information.

[0025] Furthermore, the step of decrypting the command information according to the preset decryption rule after receiving the command information generated by the vehicle communication box using a preset encryption algorithm includes:

[0026] Obtain the current time and remove the characters corresponding to the current time from the end of the command information to decrypt the command information.

[0027] Furthermore, the smart gateway and the vehicle communication box communicate via the UDS protocol.

[0028] Another object of the present invention is to provide a secure communication system, the system comprising:

[0029] The authentication module is used to send confirmation information to the vehicle communication box and enter extended mode after receiving the authentication request from the vehicle communication box;

[0030] The handshake module is used to generate a random verification seed according to a preset rule after receiving a handshake request sent by the vehicle communication box based on the confirmation information, send the random verification seed to the vehicle communication box, and generate a local key according to the random verification seed through a preset encryption algorithm.

[0031] The judgment module is used to compare and verify the received mutual trust key with the local key after receiving the mutual trust key generated by the vehicle communication box according to the random verification seed through the preset encryption algorithm, and to determine whether the vehicle communication box is trustworthy.

[0032] The feedback module is used to send the verification result to the vehicle communication box, so that the vehicle communication box can determine whether the verification is successful and decide whether to conduct communication based on the verification result.

[0033] Another objective of this invention is to provide a storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the aforementioned secure communication method.

[0034] Another object of the present invention is to provide a vehicle including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the steps of the above-described secure communication method.

[0035] This invention, after confirming the two communicating parties as a smart gateway and an in-vehicle communication box through an authentication request, then initiates a handshake communication process via a handshake request. Following this, a mutual trust step is performed. The smart gateway sends a random verification seed to the in-vehicle communication box and generates a local key based on the random verification seed and preset rules. The in-vehicle communication box generates a mutual trust key based on the random verification seed and preset rules and sends it to the smart gateway. The smart gateway compares the received authentication key with the local key and sends the verification result to each in-vehicle communication box. The in-vehicle communication box then determines whether mutual trust is successful based on the verification result and decides whether to communicate with the smart gateway. Compared to existing technologies, this invention adds a mutual trust step, requiring more authentication steps for communication between the smart gateway and the in-vehicle communication box, thereby improving the security of their communication. Furthermore, the preset rules are user-defined and differ from the conventional handshake process, making them more difficult to crack and further enhancing the security of communication between the smart gateway and the in-vehicle communication box. Attached Figure Description

[0036] Figure 1 This is a flowchart of the secure communication method in the first embodiment of the present invention;

[0037] Figure 2 This is a schematic diagram of the result of the secure communication system in the third embodiment of the present invention;

[0038] Figure 3 This is a schematic diagram of the vehicle structure in the fourth embodiment of the present invention.

[0039] The following detailed description, in conjunction with the accompanying drawings, will further illustrate the present invention. Detailed Implementation

[0040] To facilitate understanding of the present invention, a more complete description will be given below with reference to the accompanying drawings. Several embodiments of the invention are illustrated in the drawings. However, the invention can be implemented in many different forms and is not limited to the embodiments described herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete.

[0041] It should be noted that when a component is said to be "fixed to" another component, it can be directly on the other component or there may be an intervening component. When a component is said to be "connected to" another component, it can be directly connected to the other component or there may be an intervening component. The terms "vertical," "horizontal," "left," "right," and similar expressions used in this document are for illustrative purposes only.

[0042] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. The terminology used herein in the description of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The term "and / or" as used herein includes any and all combinations of one or more of the associated listed items.

[0043] Example 1

[0044] Please see Figure 1 The diagram shows a secure communication method in the first embodiment of the present invention, which is applied to a smart gateway. The smart gateway is connected to a vehicle communication box. The method specifically includes steps S10-S13.

[0045] Step S10: Upon receiving the authentication request from the vehicle communication box, send confirmation information to the vehicle communication box and enter extended mode;

[0046] In practical implementation, the vehicle communication box sends an authentication request to the intelligent gateway via the UDS protocol. Upon receiving the authentication request, the intelligent gateway then sends a confirmation message to the vehicle communication box via the UDS protocol and enters extended mode. It should be noted that the intelligent gateway is part of the vehicle's computer. After the vehicle computer starts up, it enters a default session, which only provides basic authentication and diagnostic services. To perform subsequent handshake authentication and diagnostic services, it needs to enter an extended session, i.e., the intelligent gateway enters extended mode. The diagnostic and authentication service process of the extended session is defined by the user. It should also be noted that UDS (Unified Diagnostic Service) is a commonly used device maintenance protocol in the entire automotive system. It mainly follows ISO-15765 and ISO-14229, and its main protocol mode is derived from the OBD (On-board Diagnostic) protocol. It is frequently used in various electronic control units of the vehicle and is one of the essential protocols developed for vehicle electronic control units.

[0047] Step S11: After receiving the handshake request sent by the vehicle communication box according to the confirmation information, a random verification seed is generated according to the preset rules, the random verification seed is sent to the vehicle communication box, and a local key is generated according to the random verification seed through the preset encryption algorithm.

[0048] In practical implementation, after receiving the handshake request sent by the vehicle communication box, the smart gateway obtains the current time, then performs an XOR operation on the value of the fractional part of the current time and the value of the second part of the current time to obtain the XOR value. The XOR value is then added to the total number of seconds of device operation time to obtain a random number, which is the random verification seed. The smart gateway then sends the random verification seed to the vehicle communication box and generates a local key based on the random verification seed using a preset encryption algorithm.

[0049] Step S12: After receiving the mutual trust key generated by the vehicle communication box according to the random verification seed through the preset encryption algorithm, the received mutual trust key is compared and verified with the local key to determine whether the vehicle communication box is trustworthy.

[0050] Specifically, after receiving the random verification seed, the vehicle communication box obtains a mutual trust key according to the preset encryption algorithm, and then sends the mutual trust key to the smart gateway. After receiving the mutual trust key, the smart gateway compares and verifies it with the local key. If the mutual trust key and the local key are the same, the verification result is yes; if the mutual trust key and the local key are different, the verification result is no.

[0051] As an example, and not a limitation, in some optional embodiments, the preset encryption algorithm is as follows: a random number is used as input and shifted to obtain a first intermediate number; the first intermediate number is then shifted to obtain a second intermediate number; finally, the second intermediate number is XORed with a base number to obtain a local key or a mutual trust key. Specifically, the random number can be left-shifted by 2 bits to obtain the first intermediate number, the first intermediate number can be right-shifted by 1 bit to obtain the second intermediate number, and the second intermediate number is then XORed with a preset four-bit number, i.e., the base number, to obtain the local key or the mutual trust key.

[0052] Step S13: Send the verification result to the vehicle communication box so that the vehicle communication box can determine whether the verification was successful and decide whether to conduct communication based on the verification result.

[0053] Specifically, if the verification result received by the vehicle communication box is yes, it will start communicating with the smart gateway to transmit instructions; if the verification result received by the vehicle communication box is no, the process will terminate.

[0054] It should be noted that since the smart gateway obtains the time from the car's built-in system clock, while the in-vehicle communication box obtains the time from the external network clock, to ensure consistency between the two clocks, during the handshake process between the in-vehicle communication box and the smart gateway, the smart gateway sends the current clock time within the car system along with a random check seed to the in-vehicle communication box. The in-vehicle communication box compares the network clock time with the time within the car system. If they match, a mutual trust key is obtained according to the random check seed and a preset encryption algorithm, following the normal procedure. If they do not match, a mutual trust key is obtained using both the random check seed and the clock time within the car system, through a preset encryption algorithm. This comparison and subsequent calculation of the mutual trust key by the in-vehicle communication box is more complex and provides stronger confidentiality and security compared to directly calculating the mutual trust key from the time sent by the smart gateway and the random check seed.

[0055] In summary, the secure communication method in the above embodiments of the present invention confirms that the two communicating parties are a smart gateway and an in-vehicle communication box after an authentication request. Then, a handshake request prepares the two parties for handshake communication. Following this, a mutual trust step is performed. The smart gateway sends a random verification seed to the in-vehicle communication box and generates a local key based on the random verification seed and preset rules. The in-vehicle communication box generates a mutual trust key based on the random verification seed and preset rules and sends it to the smart gateway. The smart gateway compares and verifies the received authentication key with the local key and sends the verification structure to each in-vehicle communication box. The in-vehicle communication box then determines whether mutual trust is successful based on the verification result and decides whether to communicate with the smart gateway. Compared to existing technologies, this method adds a mutual trust step, requiring more authentication steps for communication between the smart gateway and the in-vehicle communication box, thereby improving the security of communication between them. Furthermore, the preset rules are user-defined rules, different from the conventional handshake process, making them more difficult to crack and further enhancing the security of communication between the smart gateway and the in-vehicle communication box.

[0056] Example 2

[0057] The second embodiment of the present invention also provides a secure communication method. The difference between the secure communication method in this embodiment and the secure communication method in the first embodiment is that:

[0058] The step of sending the verification result to the vehicle communication box, so that the vehicle communication box can determine whether the verification was successful and decide whether to proceed with the communication step based on the verification result, further includes:

[0059] Upon receiving a command message generated by the vehicle communication box using a preset encryption algorithm, the command message is decrypted using the preset decryption rule.

[0060] The decrypted original command is then sent to the corresponding control unit of the vehicle to enable the vehicle communication box to remotely control the control unit.

[0061] Then, a control success signal is sent to the vehicle communication box so that the vehicle communication box can continue to send new command information.

[0062] In other words, in this embodiment, after the smart gateway and the vehicle communication box complete the handshake and mutual trust, when the vehicle communication box sends a remote control command to the smart gateway, it encrypts each original command using a preset encryption algorithm to generate command information, which is then sent to the smart gateway. Upon receiving the command information, the smart gateway decrypts it using a preset decryption rule to obtain the original command information, and then sends the original command information to the corresponding vehicle control unit, enabling the vehicle communication box to remotely control the vehicle's control unit. Afterwards, the smart gateway sends a control success signal to the vehicle communication box to allow it to continue sending command information. Adding the step of encrypting the original commands makes the communication between the smart gateway and the vehicle communication box more secure.

[0063] Furthermore, the preset encryption algorithm involves obtaining the current time from the vehicle communication box and using that time as the end of the original command to obtain the encrypted command information. The preset decryption rule involves obtaining the current time from the smart gateway and removing the character corresponding to the current time from the end of the command information to obtain the decrypted original command.

[0064] It should be noted that the above embodiments and their features can be freely combined without conflict. Therefore, by adding a mutual trust step of comparing the local key and the mutual trust key after the handshake process, and by encrypting the transmission of commands from the vehicle communication box to the smart gateway, the present invention significantly improves the communication security between the smart gateway and the vehicle communication box.

[0065] Example 3

[0066] Please see Figure 2 The diagram shown is a structural block diagram of a secure communication system proposed in the third embodiment of the present invention. The secure communication system 200 includes: an authentication module 21, a handshake module 22, a judgment module 23, and a feedback module 24, wherein:

[0067] The authentication module 21 is used to send confirmation information to the vehicle communication box and enter extended mode after receiving the authentication request from the vehicle communication box;

[0068] The handshake module 22 is used to generate a random verification seed according to a preset rule after receiving a handshake request sent by the vehicle communication box according to the confirmation information, send the random verification seed to the vehicle communication box, and generate a local key according to the random verification seed through a preset encryption algorithm.

[0069] The judgment module 23 is used to compare and verify the received mutual trust key with the local key after receiving the mutual trust key generated by the vehicle communication box according to the random verification seed through the preset encryption algorithm, and to determine whether the vehicle communication box is trustworthy.

[0070] Feedback module 24 is used to send the verification result to the vehicle communication box, so that the vehicle communication box can determine whether the verification is successful and decide whether to conduct communication based on the verification result.

[0071] Furthermore, in other embodiments of the present invention, the secure communication system 200 further includes:

[0072] The decryption module, upon receiving command information generated by the vehicle communication box using a preset encryption algorithm, obtains the current time and decrypts the command information using the preset decryption rules.

[0073] The command transmission module is used to send the decrypted original command to the corresponding control unit of the vehicle to realize the remote control of the control unit by the vehicle communication box;

[0074] The signal module is used to subsequently send a control success signal to the vehicle communication box so that the vehicle communication box can continue to send new command information.

[0075] The functions or operation steps implemented by the above modules are largely the same as those in the above method embodiments, and will not be repeated here.

[0076] Example 4

[0077] In another aspect, the present invention also proposes a vehicle, please refer to [link / reference needed]. Figure 3 The vehicle shown is a fourth embodiment of the present invention, including a memory 20, a processor 10, and a computer program 30 stored in the memory and executable on the processor. When the processor 10 executes the computer program 30, it implements the assisted driving function control method as described above.

[0078] In some embodiments, the processor 10 may be an electronic control unit (ECU), a central processing unit (CPU), a controller, a microcontroller, a microprocessor, or other data processing chip, used to run program code stored in the memory 20 or process data, such as executing access restriction programs.

[0079] The memory 20 includes at least one type of readable storage medium, such as flash memory, hard disk, multimedia card, card-type memory (e.g., SD or DX memory), magnetic memory, magnetic disk, optical disk, etc. In some embodiments, the memory 20 may be an internal storage unit of the vehicle, such as the vehicle's hard disk. In other embodiments, the memory 20 may be an external storage device of the vehicle, such as a plug-in hard disk, SmartMedia Card (SMC), Secure Digital (SD) card, Flash Card, etc. Furthermore, the memory 20 may include both internal and external storage devices. The memory 20 can be used not only to store application software and various types of data installed in the vehicle, but also to temporarily store data that has been output or will be output.

[0080] It should be pointed out that, Figure 3 The structure shown does not constitute a limitation on the vehicle. In other embodiments, the vehicle may include fewer or more components than shown, or combine certain components, or have different component arrangements.

[0081] This invention also proposes a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements the assisted driving function control method described above.

[0082] Those skilled in the art will understand that the logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequential list of executable instructions for implementing logical functions, and can be embodied in any computer-readable storage medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable storage medium" can mean any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device.

[0083] More specific examples (a non-exhaustive list) of computer-readable storage media include: electrical connections (electronic devices) having one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable storage media can even be paper or other suitable media on which the program can be printed, since the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0084] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0085] In the description of this specification, references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0086] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of this patent should be determined by the appended claims.

Claims

1. A secure communication method, characterized in that, Applied in a smart gateway, wherein the smart gateway is communicatively connected to an in-vehicle communication box, the method includes: Upon receiving the authentication request from the vehicle communication box, a confirmation message is sent to the vehicle communication box and the system enters extended mode. Upon receiving the handshake request sent by the vehicle communication box based on the confirmation information, a random verification seed is generated according to a preset rule, the random verification seed is sent to the vehicle communication box, and a local key is generated based on the random verification seed using a preset encryption algorithm. After receiving the mutual trust key generated by the vehicle communication box using the preset encryption algorithm based on the random verification seed, the received mutual trust key is compared and verified with the local key to determine whether the vehicle communication box is trustworthy. The verification result is sent to the vehicle communication box so that the vehicle communication box can determine whether the verification was successful and decide whether to conduct communication based on the verification result. The random verification seed is a random number generated according to a preset rule, which is: Upon receiving the handshake request, the current time is obtained, and the value of the fractional part of the current time and the value of the second part of the current time are XORed to obtain the XOR value. Add the XOR operation value to the total number of seconds of device operation time to obtain a random number; The encryption algorithm is as follows: The random number is shifted to obtain the first intermediate number; The first intermediate number is moved to obtain the second intermediate number; The local key or the mutual trust key is obtained by XORing the second intermediate number with the base number. The base number is a preset four-digit number.

2. The secure communication method according to claim 1, characterized in that, The step of sending the verification result to the vehicle communication box, so that the vehicle communication box can determine whether the verification was successful and decide whether to proceed with the communication step based on the verification result, further includes: Upon receiving a command message generated by the vehicle communication box using a preset encryption algorithm, the command message is decrypted using a preset decryption rule. The decrypted original command is then sent to the corresponding control unit of the vehicle to enable the vehicle communication box to remotely control the control unit. Then, a control success signal is sent to the vehicle communication box so that the vehicle communication box can continue to send new command information.

3. The secure communication method according to claim 2, characterized in that, The preset encryption algorithm is: Obtain the current time and use it as the end of the original command to form the encrypted command information.

4. The secure communication method according to claim 3, characterized in that, The step of decrypting the command information according to the preset decryption rule after receiving the command information generated by the vehicle communication box using a preset encryption algorithm includes: Obtain the current time and remove the characters corresponding to the current time from the end of the command information to decrypt the command information.

5. The secure communication method according to any one of claims 1 to 4, characterized in that, The communication between the vehicle-mounted communication box and the device is via the UDS protocol.

6. A secure communication system, characterized in that, The system for implementing the secure communication method according to any one of claims 1 to 5 comprises: The authentication module is used to send confirmation information to the vehicle communication box and enter extended mode after receiving an authentication request from the vehicle communication box; The handshake module is used to generate a random verification seed according to a preset rule after receiving a handshake request sent by the vehicle communication box based on the confirmation information, send the random verification seed to the vehicle communication box, and generate a local key according to the random verification seed through a preset encryption algorithm. The judgment module is used to compare and verify the received mutual trust key with the local key after receiving the mutual trust key generated by the vehicle communication box according to the random verification seed through the preset encryption algorithm, and to determine whether the vehicle communication box is trustworthy. The feedback module is used to send the verification result to the vehicle communication box, so that the vehicle communication box can determine whether the verification is successful and decide whether to conduct communication based on the verification result.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the steps of the secure communication method as described in any one of claims 1 to 5.

8. A vehicle, characterized in that, It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the program, implements the secure communication method as described in any one of claims 1-5.

Images