Vehicle controller-based security verification method, device, equipment and storage medium

Abstract

The present application relates to a vehicle controller-based security verification method, device, equipment and storage medium, by acquiring seed request data, the seed request data is used to request a verification seed to a vehicle controller; The seed request data is sent to the vehicle controller, and the request response of the vehicle controller is waited; When receiving the target verification seed sent by the vehicle controller, the target verification seed is operated according to the first algorithm, and the first verification key is obtained;And control the vehicle controller to operate a plurality of verification seeds in the vehicle controller according to the second algorithm, and obtain a verification key group;The first verification key and the second verification key in the verification key group are matched, and the matching result is obtained;And based on the matching result, the security verification is completed.The present application is pre-set in the vehicle controller Multiple verification seeds, after the operation of multiple verification seeds, a verification key group is obtained, then the first verification key obtained by the terminal operation is verified by the verification key group, which improves the verification compatibility.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of security verification, in particular to a security verification method and device based on a vehicle controller, equipment and a storage medium. BACKGROUND

[0002] With the popularization of intelligent vehicles, vehicle ECU (Electronic Control Unit) is widely used in vehicle systems such as car systems, navigation systems, and battery systems. Due to the importance of vehicle ECU, if the vehicle ECU is to be unlocked, the vehicle ECU needs to be securely authenticated, and the corresponding operation can be performed on the vehicle ECU after passing the security authentication.

[0003] The existing security verification method, such as Chinese patent CN113895222A, a heavy truck lock verification method based on MD5 algorithm, when verifying the engine ECU, needs to first obtain a seed from the engine ECU, then makes the terminal and the engine ECU respectively calculate the seed through MD5 algorithm (MD5 Message-Digest Algorithm, MD5 information digest algorithm) to obtain two passwords, then compares the passwords to complete the verification. However, the above technical solution generally only supports one-to-one comparison, that is, the ECU only saves one seed, and when verifying, only the verification between the terminal and the vehicle ECU is performed, and the compatibility is poor. SUMMARY

[0004] One of the purposes of the present application is to provide a security verification method, device, equipment and storage medium based on a vehicle controller to solve the problem of poor compatibility of vehicle controller verification in the prior art.

[0005] In order to achieve the above purpose, the technical solution adopted by the present application is as follows:

[0006] The security verification method based on the vehicle controller, the method comprises:

[0007] Obtain seed request data, the seed request data is used to request a verification seed from a vehicle controller;

[0008] Send the seed request data to the vehicle controller and wait for the request response of the vehicle controller;

[0009] When receiving the target verification seed sent by the vehicle controller, the target verification seed is operated according to the first algorithm to obtain the first verification key; and the vehicle controller is controlled to operate a plurality of verification seeds in the vehicle controller according to the second algorithm to obtain a verification key group; the plurality of verification seeds include the target verification seed;

[0010] matching the first check key and a second check key in the check key group, obtaining a matching result; and completing security check based on the matching result.

[0011] In an embodiment of the present application, sending the seed request data to the vehicle controller comprises:

[0012] obtaining extended session request data for establishing a session with the vehicle controller, and security authentication data for security authentication of the vehicle controller;

[0013] entering a default session mode, sending the extended session request data to the vehicle controller in the default session mode, and waiting for a first response from the vehicle controller, the first response comprising a first positive response and a first negative response;

[0014] switching from the default session mode to an extended session mode upon receiving the first positive response from the vehicle controller;

[0015] sending the security authentication data to the vehicle controller in the extended session mode, and waiting for a second response from the vehicle controller, the second response comprising a second positive response and a second negative response;

[0016] authenticating via security access upon receiving the second positive response from the vehicle controller;

[0017] sending the seed request data to the vehicle controller upon authenticating via security access.

[0018] In an embodiment of the present application, completing security check based on the matching result comprises:

[0019] passing the security check when the first check key matches any second check key in the check key group, and failing the security check when the first check key does not match any second check key in the check key group.

[0020] In an embodiment of the present application, sending the seed request data to the vehicle controller and waiting for a response from the vehicle controller further comprises:

[0021] failing the security check and ending the check procedure when the target check seed sent by the vehicle controller is not received.

[0022] In an embodiment of the present application, sending the extended session request data to the vehicle controller and waiting for a first response from the vehicle controller further comprises:

[0023] Upon receiving a first negative response from the vehicle controller, the mode switching fails and the verification procedure ends.

[0024] In an embodiment of the present application, after sending the security authentication data to the vehicle controller and waiting for a second response from the vehicle controller, further comprising:

[0025] Upon receiving a second negative response from the vehicle controller, the security authentication fails and the verification procedure ends.

[0026] In an embodiment of the present application, after the security verification, further comprising:

[0027] Performing a target operation on the vehicle controller, the target operation at least including remote upgrading, information modification.

[0028] The present application also provides a security verification device based on a vehicle controller, the device comprising:

[0029] A collection module configured to acquire seed request data, the seed request data being used to request a verification seed from the vehicle controller;

[0030] A sending module configured to send the seed request data to the vehicle controller and wait for a request response from the vehicle controller;

[0031] An operation module configured to, upon receiving a target verification seed sent by the vehicle controller, perform an operation on the target verification seed according to a first algorithm to obtain a first verification key; and control the vehicle controller to perform an operation on a plurality of verification seeds in the vehicle controller according to a second algorithm to obtain a verification key group; the plurality of verification seeds including the target verification seed;

[0032] A verification module configured to match the first verification key with a second verification key in the verification key group to obtain a matching result; and complete a security verification based on the matching result.

[0033] The present application also provides an electronic device comprising:

[0034] One or more processors;

[0035] A storage device configured to store one or more programs, when the one or more programs are executed by the one or more processors, the electronic device implements the security verification method based on a vehicle controller as described above.

[0036] The present application also provides a computer-readable storage medium having computer-readable instructions stored thereon, when the computer-readable instructions are executed by a processor of a computer, the computer performs the security verification method based on a vehicle controller as described above.

[0037] The application has the beneficial effects that: the vehicle controller-based security verification method, device, equipment and storage medium in the application, by acquiring seed request data, the seed request data is used to request a verification seed from a vehicle controller; the seed request data is sent to the vehicle controller, and a request response of the vehicle controller is waited for; when the target verification seed sent by the vehicle controller is received, the target verification seed is operated according to a first algorithm to obtain a first verification key; and the vehicle controller is controlled to operate a plurality of verification seeds in the vehicle controller according to a second algorithm to obtain a verification key group; the plurality of verification seeds include the target verification seed; the first verification key and a second verification key in the verification key group are matched to obtain a matching result; and the security verification is completed based on the matching result. The application predefines a plurality of verification seeds in the vehicle controller, obtains a verification key group after operating the plurality of verification seeds, and then verifies the verification key obtained by the terminal through the verification key group, thereby effectively improving the verification compatibility. BRIEF DESCRIPTION OF DRAWINGS

[0038] Figure 1 An application scenario diagram of the vehicle controller-based security verification method shown for an exemplary embodiment of the application;

[0039] Figure 2 A flowchart of the vehicle controller-based security verification method shown for an exemplary embodiment of the application;

[0040] Figure 3 An implementation flowchart of the vehicle controller-based security verification method shown for an exemplary embodiment of the application;

[0041] Figure 4 An implementation flowchart of the vehicle controller-based security verification method shown for another exemplary embodiment of the application;

[0042] Figure 5 A structure diagram of the vehicle controller-based security verification device shown for an exemplary embodiment of the application;

[0043] Figure 6 A structure diagram of a computer system of an electronic device suitable for implementing the embodiments of the application is shown. DETAILED DESCRIPTION

[0044] Other advantages and embodiments of the application will be more readily appreciated from the following description, taken in conjunction with the accompanying drawings, in which:

[0045] It should be noted that the drawings provided in the following embodiments are only schematic and are intended to provide the basic understanding of the application. In the drawings, the size, the shape and the relative positions of the constituent elements are not necessarily to scale and are shown merely to illustrate the principles of the application. The drawings in the various figures are not necessarily drawn to scale and relative dimensions of constituent elements within the drawings are intended to provide a clearer conceptual understanding of the application.

[0046] Figure 1 is an application scenario diagram of the vehicle controller-based security verification method according to an exemplary embodiment of the present application, as shown in Figure 1 The client communicates with the vehicle ECU through a data bus; the data bus can be a CAN (Controller Area Network) bus, a LIN (Local Interconnect Network) bus, a FlexRay bus, or a MOST (Media Oriented System Transport) bus; the client can be a car machine, a tablet, a smart terminal, or any other device supporting data bus communication; the client requests a verification seed from the vehicle ECU through the data bus, obtains the verification seed through the data bus, performs operations on the verification seed, and then exchanges the verification key / verification key group obtained through the operations through the data bus, so as to perform comparison verification. After verification, the client obtains corresponding permissions and performs various operations on the vehicle ECU through the data bus, such as upgrading, information access, information modification, information download, etc.

[0047] As shown in Figure 2 In an exemplary embodiment, the vehicle controller-based security verification method includes steps S210 to S240, which are described in detail as follows:

[0048] S210, obtaining seed request data, the seed request data being used to request a verification seed from a vehicle controller;

[0049] In the embodiment, the seed request data is pre-stored in the memory of the client, and the client reads the corresponding seed request data from the memory when it needs to perform different operations on the vehicle controller; meanwhile, different security levels exist for different operations, and the corresponding seed request data is different; for example, seed request data from 0x00 to 0xFF can be used for different security levels, and by default, all odd values are used for seed requests, and the next even value (with a security level of 1 for seed requests) is used to send a security key to the vehicle controller using a secure access service identifier (such as 0x27) to unlock.

[0050] S220, sending the seed request data to the vehicle controller and waiting for a request response from the vehicle controller;

[0051] In the embodiment, according to the pre-set communication protocol, the vehicle controller will verify the seed request data after receiving the seed request data, and return a verification seed corresponding to the seed request data to the vehicle controller after verification. Therefore, after sending the seed request data to the vehicle controller, only the response of the vehicle controller is needed, and if there is no response, that is, when no verification seed sent by the vehicle controller is received, the security verification of the vehicle controller fails and the verification process ends.

[0052] S230, when the target verification seed sent by the vehicle controller is received, performing operation on the target verification seed according to a first algorithm to obtain a first verification key; and controlling the vehicle controller to perform operation on a plurality of verification seeds in the vehicle controller according to a second algorithm to obtain a verification key group; the plurality of verification seeds include the target verification seed;

[0053] In step S230, the first algorithm and the second algorithm can be the same algorithm, and when the first algorithm and the second algorithm are the same algorithm, the subsequent matching of the first verification key and the verification key group is essentially a comparison of the keys; the target verification seed sent by the vehicle controller is one of a plurality of verification seeds existing in the vehicle controller, and the plurality of verification seeds in the vehicle controller can be verification seeds of the host manufacturer and related manufacturers, for example, the sent verification seed is used to verify the verification seed of manufacturer A, and when the verification seeds are pre-stored, the verification seeds of the subsidiaries and branches of manufacturer A can also be stored in the vehicle controller to improve the verification compatibility.

[0054] For example, originally in the LevelOneKeyArith function of the bootloader project, only one seed AppKeyConst: 0x*******B (company A) is included, and after receiving a request, the seed is used to calculate a security key, and the calculated security key is sent to the client. Now, in order to be compatible with the seed of company B, another seed 0X*******A (company B) is added.

[0055] S240, matching the first check key and the second check key in the check key group to obtain a matching result; and completing security check based on the matching result.

[0056] In step S240, the first check key calculated by the client is compared with the second check keys in the check key group one by one, and when the first check key matches any second check key in the check key group, the security check is passed; when the first check key does not match all the second check keys in the check key group, the security check is not passed.

[0057] In an embodiment of the present application, the process of sending the seed request data to the vehicle controller can further include steps S310 to S360, which are described in detail as follows:

[0058] S310, obtaining extended session request data for establishing a session with the vehicle controller and security authentication data for security authentication of the vehicle controller;

[0059] S320, entering a default session mode, in which the extended session request data is sent to the vehicle controller, and a first response of the vehicle controller is waited for, the first response including a first positive response and a first negative response;

[0060] In the embodiment, the default session mode of the client and the vehicle controller is the default session mode, and in order to ensure the security of the vehicle controller, the client needs to be security authenticated before requesting the seed from the vehicle controller; in the embodiment, before security authentication of the client, the default session mode of the client needs to be switched to an extended session mode; therefore, the client sends the extended session request data to the vehicle controller to request switching of the default session mode to the extended session mode.

[0061] S330, when the first positive response from the vehicle controller is received, the default session mode is switched to the extended session mode; when the first negative response from the vehicle controller is received, the mode switching fails and the check process ends.

[0062] In step S330, the vehicle controller returns the first positive response, indicating that the vehicle controller agrees to switch the default session mode to the extended session mode, at which time the switching success is displayed in the client, and the extended session mode is entered. If no first positive response from the vehicle controller is received within a predetermined time, or a first negative response from the vehicle controller is received, the mode switching failure is directly displayed in the client, and the verification process is ended.

[0063] S340, the security authentication data is sent to the vehicle controller in the extended session mode, and a second response from the vehicle controller is waited for, the second response including a first positive response and a second negative response.

[0064] In step S340, the security access authentication can be performed in the extended session mode, i.e., the security authentication data inside the client is sent to the vehicle controller, and the vehicle controller performs the security authentication on the client by using the security authentication data.

[0065] S350, when the second positive response from the vehicle controller is received, the security access authentication is passed; when the second negative response from the vehicle controller is received, the security authentication fails, and the verification process is ended.

[0066] In step S350, the vehicle controller returns the second positive response, indicating that the vehicle controller passes the security access authentication on the client, at which time the security access authentication passing is displayed in the client. If no second positive response from the vehicle controller is received within a predetermined time, or a second negative response from the vehicle controller is received, the security access authentication failure is directly displayed in the client, and the verification process is ended.

[0067] S360, when the security access authentication is passed, the seed request data is sent to the vehicle controller.

[0068] In step S360, after the security access authentication is passed, it indicates that the vehicle controller at this time can interact with the client in data other than the authentication data, i.e., the seed request data can be sent to the vehicle controller, requesting the vehicle controller to return the verification seed.

[0069] In an embodiment of the present application, the process after the verification of the vehicle controller can further include step S410, which is described in detail as follows:

[0070] S410, a target operation is performed on the vehicle controller, the target operation including at least remote upgrading and information modification.

[0071] In the embodiment, when the security check is passed, that is, the operation permission corresponding to the check seed is obtained, the corresponding remote upgrade, information modification and other operations on the vehicle controller can be performed.

[0072] Figure 3 The implementation flowchart of the vehicle controller-based security check method shown in the exemplary embodiment of the present application is shown in FIG. 1. Figure 3 As shown in FIG. 1, the vehicle controller-based security check method in the present application includes the following steps.

[0073] Client: The client enters the default session mode and sends the extended session request data to the vehicle controller.

[0074] Vehicle controller: After receiving the extended session request data, the vehicle controller checks the extended session request data. When the check is passed, a first positive response is returned. When the check is failed, a first negative response is returned.

[0075] Client: When the first positive response is received, the client switches the default session mode to the extended session mode and sends the security access request data to the vehicle controller. When the first negative response is received, the client displays the session mode switching failure and ends the check process.

[0076] Vehicle controller: When the security access request data is received, the vehicle controller checks the security access request data. When the check of the security access request data is passed, a second positive response is returned. When the check of the security access request data is failed, a second negative response is returned.

[0077] Client: When the second positive response is received, the client displays the security access authentication success and sends the seed request data to the vehicle controller. When the second negative response is received, the client displays the security access authentication failure and ends the check process.

[0078] Vehicle controller: When the seed request data is received, the vehicle controller searches according to the seed request data, finds the check seed corresponding to the seed request data, returns the check seed to the client, and uses a related algorithm to operate the check seed and other check seeds to obtain a check key group.

[0079] Client: After receiving the check seed, the client operates the check seed according to the related algorithm to obtain a first check key and sends the first check key to the vehicle controller.

[0080] Vehicle controller: After receiving the first check key, the vehicle controller matches the first check key with the check key group one by one. When any second check key in the check key group is consistent with the first check key, the security check of the client is passed. Otherwise, the check fails.

[0081] Figure 4 For the implementation flowchart of the vehicle controller-based security verification method shown in another exemplary embodiment of the present application, specific cases are as follows:

[0082] The seed preset in the vehicle controller includes A company: 0X*******B, B company: 0X*******A; the battery pack battery management controller assembly (hereinafter referred to as BMS) cannot be upgraded by OTA, and it is confirmed that the seed currently used in the OTA upgrade test of the BMS is 0X*******A (B company). However, in some cases, A company needs to be upgraded by OTA, and the seed of A company corresponds to 0x*******B (A company). Therefore, when A company upgrades the vehicle controller by OTA, the seed 0X*******A preset in the vehicle controller can be successfully verified, thereby realizing the function of compatible A company client.

[0083] The vehicle controller-based security verification method in the present application, by acquiring seed request data, the seed request data is used to request a verification seed to a vehicle controller; the seed request data is sent to the vehicle controller, and the response of the vehicle controller is waited; when receiving the verification seed sent by the vehicle controller, the verification seed is operated according to the first algorithm, and the verification key is obtained; and the vehicle controller is controlled to operate the verification seed in the vehicle controller and the related seed of the verification seed according to the second algorithm, and the verification key group is obtained; the verification key and the verification key group are matched to obtain a matching result; and the verification of the vehicle controller is completed based on the matching result. The present application predefines multiple verification seeds in the vehicle controller, operates multiple verification seeds to obtain a verification key group, and then verifies the verification key obtained by the terminal operation through the verification key group, thereby effectively improving the verification compatibility of the vehicle controller.

[0084] As Figure 5 shown, the present application also provides a vehicle controller-based security verification device, which comprises:

[0085] The acquisition module is used to acquire seed request data, and the seed request data is used to request a verification seed to a vehicle controller;

[0086] The sending module is used to send the seed request data to the vehicle controller, and wait for the request response of the vehicle controller;

[0087] The operation module is configured to, when the target verification seed sent by the vehicle controller is received, operate the target verification seed according to a first algorithm to obtain a first verification key; and control the vehicle controller to operate a plurality of verification seeds in the vehicle controller according to a second algorithm to obtain a verification key group; the plurality of verification seeds include the target verification seed;

[0088] The verification module is configured to match the first verification key and a second verification key in the verification key group to obtain a matching result; and complete security verification based on the matching result.

[0089] It should be noted that the vehicle controller-based security verification apparatus provided in the above embodiments and the vehicle controller-based security verification method provided in the above embodiments belong to the same concept, and the specific manner in which each module and unit performs operations has been described in detail in the method embodiments, which will not be described here. The vehicle controller-based security verification apparatus provided in the above embodiments can be used in actual applications, and the above functions can be completed by different functional modules according to needs, that is, the internal structure of the apparatus is divided into different functional modules to complete all or part of the functions described above, and this is not limited herein.

[0090] Embodiments of the present application also provide an electronic device, including: one or more processors; a storage device configured to store one or more programs, when the one or more programs are executed by the one or more processors, the electronic device implements the vehicle controller-based security verification method provided in each of the above embodiments.

[0091] Figure 6 The structure of the computer system of the electronic device suitable for implementing the embodiments of the present application is shown. It should be noted that, Figure 6 The computer system 600 of the electronic device shown is only an example, and should not limit the functions and use range of the embodiments of the present application.

[0092] As Figure 6As shown, the computer system 600 includes a central processing unit (CPU) 601 that can perform various suitable actions and processes in accordance with programs stored in a read-only memory (ROM) 602 or loaded into a random access memory (RAM) 603 from a storage section 608, such as performing the methods in the above-described embodiments. Various programs and data required for the operation of the system are also stored in the RAM 603. The CPU 601, the ROM 602, and the RAM 603 are connected to each other through a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0093] Connected to the I / O interface 605 are an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a display such as a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN (Local Area Network) card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as necessary. A removable recording medium 611 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc. is attached to the drive 610 as necessary, so that a computer program read therefrom is installed into the storage section 608 as necessary.

[0094] In particular, in accordance with embodiments of the present application, the processes described above with reference to the flowcharts can be implemented as a computer software program. For example, embodiments of the present application include a computer program product comprising a computer program carried on a computer readable medium, the computer program containing computer programs for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via the communication section 609, and / or installed from the removable recording medium 611. When the computer program is executed by the central processing unit (CPU) 601, various functions defined in the system of the present application are performed.

[0095] It should be noted that the computer-readable medium in the embodiments of the present application can be a computer-readable signal medium or a computer-readable storage medium or any combination thereof. The computer-readable storage medium may, for example, be an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or apparatus, or any combination thereof. More specific examples of the computer-readable storage medium can include, but are not limited to, an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this application, the computer-readable signal medium can include a data signal propagated in a baseband or as a carrier wave in a propagated data signal, in which the computer-readable computer program is carried. Such a propagated data signal can take on many forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination thereof. The computer-readable signal medium can also be any computer-readable medium other than the computer-readable storage medium, which can send, propagate, or transmit the program for use by or in connection with an instruction execution system, apparatus, or device. The computer program contained on the computer-readable medium can be transmitted in any suitable medium, including but not limited to wireless, wired, or the like, or any suitable combination thereof.

[0096] The flowcharts and block diagrams in the drawings illustrate the possible architectures, functions, and operations of systems, methods, and computer program products according to various embodiments of the present application. Each block in the flowcharts or block diagrams can represent a module, a program segment, or a portion of code, which contains one or more executable instructions for implementing the specified logical functions. It should also be noted that in some alternative implementations, the functions noted in the blocks can occur in a different order than that shown in the figures. For example, two blocks noted in succession can actually be executed substantially concurrently, or they can sometimes be executed in reverse order, depending on the functionality involved. It should also be noted that each block in the flowcharts or block diagrams, and combinations of blocks in the flowcharts or block diagrams, can be implemented by special-purpose hardware-based systems, which perform the specified functions or operations, or can be implemented by a combination of special-purpose hardware and computer instructions.

[0097] The units described in the embodiments of the present application can be implemented in the form of software, or can be implemented in the form of hardware, and the described units can also be arranged in a processor. In some cases, the names of the units do not constitute a limitation on the units themselves.

[0098] Another aspect of the present application also provides a computer readable storage medium, which stores a computer program. When the computer program is executed by a processor of a computer, the computer performs the vehicle controller-based security verification method as described above. The computer readable storage medium can be included in the electronic device described in the above embodiments, or can exist separately and not be assembled into the electronic device.

[0099] Another aspect of the present application also provides a computer program product or a computer program, which includes computer instructions stored in a computer readable storage medium. A processor of a computer device reads the computer instructions from the computer readable storage medium, and the processor executes the computer instructions, so that the computer device performs the vehicle controller-based security verification method provided in each of the above embodiments.

[0100] The above embodiments are only preferred embodiments of the present application, and the protection scope of the present application is not limited thereto. Any equivalent replacement or transformation made by those skilled in the art based on the present application is within the protection scope of the present application.

Claims

1. A method for security verification based on a vehicle controller, characterized in that, The method comprises: acquiring seed request data, the seed request data being used to request a verification seed from a vehicle controller; sending the seed request data to the vehicle controller and waiting for a request response from the vehicle controller; upon receiving a target verification seed sent by the vehicle controller, performing an operation on the target verification seed according to a first algorithm to obtain a first verification key, and controlling the vehicle controller to perform an operation on a plurality of verification seeds in the vehicle controller according to a second algorithm to obtain a verification key group, the plurality of verification seeds including the target verification seed; matching the first verification key with a second verification key in the verification key group to obtain a matching result, and completing a security check based on the matching result; sending the seed request data to the vehicle controller, comprising: acquiring extended session request data used to establish a session with the vehicle controller and security authentication data used to perform a security authentication on the vehicle controller; entering a default session mode, in which the extended session request data is sent to the vehicle controller and a first response from the vehicle controller is waited for, the first response including a first positive response and a first negative response; switching from the default session mode to an extended session mode upon receiving the first positive response from the vehicle controller; sending the security authentication data to the vehicle controller in the extended session mode and waiting for a second response from the vehicle controller, the second response including a first positive response and a second negative response; performing a security access authentication upon receiving the second positive response from the vehicle controller; sending the seed request data to the vehicle controller upon passing the security access authentication.

2. The vehicle controller based security verification method of claim 1, wherein: completing the security check based on the matching result, comprising: passing the security check when the first verification key matches any second verification key in the verification key group, and failing the security check when the first verification key does not match all second verification keys in the verification key group.

3. The vehicle controller based security verification method of claim 1, wherein: after sending the seed request data to the vehicle controller and waiting for a response from the vehicle controller, further comprising: failing the security check and ending the verification process upon failing to receive the target verification seed sent by the vehicle controller.

4. The vehicle controller based security verification method of claim 1, wherein: after sending the extended session request data to the vehicle controller and waiting for the first response from the vehicle controller, further comprising: failing the mode switching and ending the verification process upon receiving the first negative response from the vehicle controller.

5. The vehicle controller based security verification method of claim 1, wherein, after sending the security authentication data to the vehicle controller and waiting for the second response from the vehicle controller, further comprising: failing the security authentication and ending the verification process upon receiving the second negative response from the vehicle controller.

6. The vehicle controller based security verification method of claim 2, wherein: after passing the security check, further comprising: performing a target operation on the vehicle controller, the target operation including at least remote upgrading and information modification.

7. A safety check device based on a vehicle controller, characterized by The device comprises: a collection module configured to acquire seed request data, the seed request data being used to request a verification seed from a vehicle controller; The sending module is configured to send the seed request data to the vehicle controller and wait for a request response from the vehicle controller. The operation module is configured to, when the target verification seed sent by the vehicle controller is received, perform operation on the target verification seed according to a first algorithm to obtain a first verification key, and control the vehicle controller to perform operation on a plurality of verification seeds in the vehicle controller according to a second algorithm to obtain a verification key group, wherein the plurality of verification seeds include the target verification seed. The verification module is configured to match the first verification key with a second verification key in the verification key group to obtain a matching result, and complete security verification based on the matching result. The sending module is specifically configured to obtain extended session request data for establishing a session with the vehicle controller, security authentication data for performing security authentication on the vehicle controller, enter a default session mode, send the extended session request data to the vehicle controller in the default session mode, and wait for a first response from the vehicle controller, wherein the first response includes a first positive response and a first negative response, switch from the default session mode to an extended session mode when the first positive response from the vehicle controller is received, send the security authentication data to the vehicle controller in the extended session mode, and wait for a second response from the vehicle controller, wherein the second response includes a second positive response and a second negative response, perform security access authentication when the second positive response from the vehicle controller is received, and send the seed request data to the vehicle controller when the security access authentication is passed.

8. An electronic device, comprising: One or more processors; The storage device is configured to store one or more programs, which, when executed by the one or more processors, cause the electronic device to implement the vehicle controller-based security verification method according to any one of claims 1 to 6. A computer readable instruction is stored thereon, which, when executed by a processor of a computer, causes the computer to perform the vehicle controller-based security verification method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that, ​

Images