Certificate renewal methods, service platforms, control platforms, electronic devices and vehicles

Abstract

This disclosure provides a certificate update method, a service platform, a control platform, an electronic device, and a vehicle. The service platform and the control platform establish a connection based on a certificate. The method includes: after confirming that a historical certificate matches a first port, generating an updated certificate and sending the updated certificate to the control platform; setting a second port corresponding to the updated certificate; confirming receipt of a login request from the control platform, obtaining a target certificate from the control platform, and determining whether the target certificate matches the first port or the second port; wherein the target certificate includes: the historical certificate or the updated certificate; in response to confirming that the target certificate matches the first port or the second port, generating matching result information and sending the matching result information to the control platform, so that the control platform can establish a connection with the service platform based on the matching result information.

Description

Technical Field

[0001] This disclosure relates to the field of data processing technology, and in particular to a certificate renewal method, service platform, control platform, electronic device, and vehicle. Background Technology

[0002] With the development of communication, platforms can establish communication connections by matching certificates and ports, which can improve communication security. However, when the certificates in a platform expire, the connection between platforms cannot be established, resulting in connection failure.

[0003] Therefore, how to avoid platform connection failures due to expired certificates has become an urgent problem to be solved. Summary of the Invention

[0004] In view of this, the purpose of this disclosure is to provide a certificate renewal method, service platform, control platform, electronic device and vehicle to solve the problem of platform connection failure caused by certificate expiration in the prior art.

[0005] To achieve the above objectives, the first aspect of this disclosure proposes a certificate renewal method, which is applied to a service platform and a control platform, wherein the service platform establishes a connection based on a certificate, the service platform includes a first port matching historical certificates, and the method includes:

[0006] After confirming that the historical certificate matches the first port, an updated certificate is generated and sent to the control platform;

[0007] Set the second port corresponding to the updated certificate;

[0008] Upon confirming receipt of the login request from the control platform, the system retrieves the target certificate from the control platform and determines whether the target certificate matches the first port or the second port; wherein, the target certificate includes: the historical certificate or the updated certificate;

[0009] In response to confirming that the target certificate matches the first port or the second port, matching result information is generated and sent to the control platform so that the control platform can establish a connection with the service platform based on the matching result information.

[0010] Based on the same inventive concept, a second aspect of this disclosure proposes a certificate update method, which is applied to a control platform, wherein the control platform and a service platform establish a connection based on a certificate, and the control platform includes historical certificates matching a first port. The method includes:

[0011] Receive the updated certificate from the service platform and store the updated certificate;

[0012] A login request is sent to the service platform, so that the service platform can send a retrieval instruction to the control platform based on the login request;

[0013] Upon receiving the retrieval instruction from the service platform, the stored historical certificate and the updated certificate are sent to the service platform as target certificates, so that the service platform can match the target certificate with the first port or the second port to obtain matching result information;

[0014] Receive the matching result information sent by the service platform, and establish a connection with the service platform based on the matching result information.

[0015] Based on the same inventive concept, a third aspect of this disclosure proposes a service platform, wherein the service platform includes a first port matching the first certificate, comprising:

[0016] The update module is configured to generate an updated certificate after confirming that the historical certificate matches the first port, and send the updated certificate to the control platform;

[0017] The configuration module is configured to set a second port corresponding to the updated certificate;

[0018] The judgment module is configured to confirm receipt of a login request from the control platform, obtain a target certificate from the control platform, and determine whether the target certificate matches the first port or the second port; wherein, the target certificate includes: the historical certificate or the updated certificate;

[0019] The matching module is configured to generate matching result information in response to confirming that the target certificate matches the first port or the second port, and send the matching result information to the control platform so that the control platform can establish a connection with the service platform based on the matching result information.

[0020] Based on the same inventive concept, a fourth aspect of this disclosure proposes a control platform, wherein the control platform includes a first certificate matching a first port, comprising:

[0021] The receiving module is configured to receive the updated certificate sent by the service platform and store the updated certificate;

[0022] The first sending module is configured to send a login request to the service platform, so that the service platform can send a retrieval instruction to the control platform based on the login request;

[0023] The second sending module is configured to receive the retrieval instruction sent by the service platform, and send the stored historical certificate and the updated certificate as target certificates to the service platform, so that the service platform can match the target certificate with the first port or the second port to obtain matching result information;

[0024] The connection establishment module is configured to receive the matching result information sent by the service platform and establish a connection with the service platform based on the matching result information.

[0025] Based on the same inventive concept, a fifth aspect of this disclosure provides an electronic device including a memory, a processor, and a computer program stored in the memory and executable by the processor, wherein the processor implements the method described above when executing the computer program.

[0026] Based on the same inventive concept, a sixth aspect of this disclosure provides a non-transitory computer-readable storage medium that stores computer instructions for causing a computer to perform the method described above.

[0027] Based on the same inventive concept, the seventh aspect of this disclosure proposes a vehicle, the vehicle including the service platform of the third aspect, the control platform of the fourth aspect, the electronic equipment of the fifth aspect, or the storage medium of the sixth aspect.

[0028] As described above, this disclosure provides a certificate update method, service platform, control platform, electronic device, and vehicle. When a historical certificate matches a first port, an updated certificate is generated and sent to the control platform. A second port corresponding to the updated certificate is set. Thus, when a historical certificate expires, the updated certificate can be matched with the second port to establish a connection between platforms, avoiding the problem of platforms being unable to establish a connection due to certificate expiration. Upon receiving a login request from the control platform, the target certificate in the control platform is obtained, and a judgment is made on whether the target certificate matches the first or second port. In response to confirming that the target certificate matches the first or second port, matching result information is generated and sent to the control platform, allowing the control platform to establish a connection with the service platform based on the matching result information. Platforms can establish connections based on the historical certificate before the update or based on the updated certificate, using multiple connection authentication methods to ensure that platforms can still establish a connection normally even after the historical certificate expires. Attached Figure Description

[0029] To more clearly illustrate the technical solutions in this disclosure or related technologies, the accompanying drawings used in the description of the embodiments or related technologies will be briefly introduced below. Obviously, the accompanying drawings described below are only embodiments of this disclosure. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0030] Figure 1 This is a flowchart of a certificate update method according to an embodiment of the present disclosure;

[0031] Figure 2 This is a flowchart of a certificate update method according to another embodiment of the present disclosure;

[0032] Figure 3 This is a flowchart illustrating the TBOX platform requesting a certificate update according to an embodiment of this disclosure;

[0033] Figure 4 This is a flowchart illustrating the issuance of updated certificates by the TSP platform according to an embodiment of this disclosure.

[0034] Figure 5 This is a schematic diagram of the structure of the service platform according to an embodiment of the present disclosure;

[0035] Figure 6 This is a schematic diagram of the control platform according to an embodiment of the present disclosure;

[0036] Figure 7 This is a schematic diagram of the structure of an electronic device according to an embodiment of the present disclosure. Detailed Implementation

[0037] To make the objectives, technical solutions, and advantages of this disclosure clearer, the following detailed description is provided in conjunction with specific embodiments and the accompanying drawings.

[0038] It should be noted that, unless otherwise defined, the technical or scientific terms used in the embodiments of this disclosure should have the ordinary meaning understood by one of ordinary skill in the art to which this disclosure pertains. The terms "first," "second," and similar terms used in the embodiments of this disclosure do not indicate any order, quantity, or importance, but are merely used to distinguish different components. Terms such as "comprising" or "including" mean that the element or object preceding the word encompasses the elements or objects listed following the word and their equivalents, without excluding other elements or objects. Terms such as "connected" or "linked" are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. Terms such as "upper," "lower," "left," and "right" are used only to indicate relative positional relationships; when the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0039] As mentioned above, how to avoid platform connection failures due to certificate expiration has become an important research question.

[0040] Based on the above description, such as Figure 1 As shown in this disclosure, an embodiment of the certificate update method is proposed. The method is applied to a service platform, and the service platform and the control platform establish a connection based on a certificate. The service platform includes a first port that matches historical certificates.

[0041] When the certificate update method is applied to the vehicle field, the service platform is a Telematics Services Provider (TSP platform) and the control platform is a Telematics Box (TBOX platform).

[0042] The method includes:

[0043] Step 101: After confirming that the historical certificate matches the first port, generate an updated certificate and send the updated certificate to the control platform.

[0044] In practice, before generating the updated certificate, the service platform may generate the updated certificate by receiving a certificate update instruction from the control platform; or the service platform may automatically generate the updated certificate at any time after the historical certificate is matched with the first port; or the service platform may generate the updated certificate by receiving a certificate update instruction from the user.

[0045] The service platform can update certificates based on historical certificates and generate updated certificates; alternatively, it can generate updated certificates randomly.

[0046] Step 102: Set the second port corresponding to the updated certificate.

[0047] In practice, certificates are bound to corresponding ports for authentication. The service platform has a first port configured with each historical certificate. The service platform and the control platform can establish a connection through the historical certificate and the first port.

[0048] After generating the updated certificate, a second port corresponding to the updated certificate is set, so that the service platform and the control platform can also establish a connection through the updated certificate and the second port.

[0049] Step 103: Confirm receipt of the login request from the control platform, obtain the target certificate from the control platform, and determine whether the target certificate matches the first port or the second port; wherein, the target certificate includes: the historical certificate or the updated certificate.

[0050] In practice, once the updated certificate is generated and the second port is configured, the service platform and the control platform can establish a connection using either the historical certificate or the updated certificate.

[0051] The process of establishing a connection between the service platform and the control platform is as follows: After receiving a login request from the control platform, the service platform obtains the target certificate from the control platform. The target certificate is a certificate stored in the control platform's certificate list, and includes pre-stored historical certificates or updated certificates.

[0052] The service platform matches and determines the target certificate and port (first port or second port) obtained.

[0053] The process of matching the target certificate with the first port or the second port is as follows: The parameter information of the target certificate is obtained, and a judgment is made as to whether the parameter information of the target certificate matches the parameter information of the first port or the second port. If the parameter information of the target certificate matches the parameter information of the first port, then the target certificate is a historical certificate, and a connection is established between the service platform and the control platform based on the historical certificate. If the parameter information of the target certificate matches the parameter information of the second port, then the target certificate is a new certificate, and a connection is established between the service platform and the control platform based on the new certificate. The parameter information includes at least one of the following: bandwidth parameter information and address parameter information.

[0054] When a target certificate and port cannot be matched, the next target certificate is retrieved from the control platform's certificate list, and a matching check is performed on the next target certificate and port. This achieves a polling check of target certificates during the matching process.

[0055] Step 104: In response to confirming that the target certificate matches the first port or the second port, generate matching result information and send the matching result information to the control platform so that the control platform can establish a connection with the service platform based on the matching result information.

[0056] In practice, once the target certificate matches the first or second port, a matching result is generated. This result includes: a successful match message, the target certificate, and the port to which the target certificate was successfully matched.

[0057] The service platform sends the matching result information to the control platform. Upon receiving the successful matching information, the control platform establishes a connection through the target certificate and the corresponding successfully matched port.

[0058] In the above embodiments, when a historical certificate matches a first port, an updated certificate is generated and sent to the control platform. A second port corresponding to the updated certificate is set. This achieves certificate updates and avoids the problem of platforms being unable to establish connections due to expired certificates. Upon receiving a login request from the control platform, the target certificate in the control platform is obtained, and a judgment is made on whether the target certificate matches the first or second port. In response to confirming that the target certificate matches the first or second port, matching result information is generated and sent to the control platform so that the control platform can establish a connection with the service platform based on the matching result information. Platforms can establish connections based on historical certificates before the update or on updated certificates, using multiple connection authentication methods to ensure that platforms can still establish connections normally even after historical certificates expire.

[0059] In some embodiments, after step 104, the method further includes:

[0060] Step 104A: In response to confirming that the historical certificate has expired, the first port corresponding to the historical certificate is designated as a backup port for matching with the third certificate obtained after the update.

[0061] In practice, each certificate has a corresponding validity period. When a historical certificate expires, the first port matched with that historical certificate becomes idle. This first port is then used as a backup port. When the service platform updates the certificate and obtains the updated third certificate, it binds the third certificate to the first port (the backup port) for authentication. In this way, after obtaining the updated third certificate, the service platform and the control platform can also establish a connection through the third certificate and the first port.

[0062] In the above scheme, after a historical certificate expires, the first port corresponding to the historical certificate is used as a backup port to match the newly updated third certificate. This way, only the first and second ports are needed to establish a connection between the service platform and the control platform, saving resources.

[0063] In some embodiments, step 101 includes:

[0064] Step 101A: After confirming that the historical certificate matches the first port, the system receives a certificate update instruction from the control platform based on the connection channel established between the historical certificate and the first port, updates the certificate according to the certificate update instruction, and generates the updated certificate.

[0065] Step 101B: Send the updated certificate to the control platform.

[0066] In practice, the control platform sends a certificate update command to the service platform, requesting the service platform to update the certificate. The control platform can determine the validity period of historical certificates. When the validity period of a historical certificate is less than a preset time threshold (i.e., when the historical certificate is about to expire), the control platform generates a certificate update certificate and sends it to the service platform.

[0067] After receiving the certificate update instruction from the control platform, the service platform generates an updated certificate. The certificate update process can either generate an updated certificate based on the original certificate, or it can generate a randomly generated updated certificate.

[0068] In the above scheme, upon receiving a certificate update instruction, an updated certificate is generated and sent to the control platform. This certificate update ensures that the control platform can log in to the service platform using the updated certificate after the previous certificate expires.

[0069] In some embodiments, step 101 includes:

[0070] Step 101a: Confirm any time point after the historical certificate matches the first port, and generate the updated certificate.

[0071] Step 101b: Receive the trigger operation of the control corresponding to the update certificate and obtain the identification information of the control platform.

[0072] Step 101c: Wake up the control platform based on the identification information and send the updated certificate to the control platform.

[0073] In practice, at any point in time after confirming that the historical certificate matches the first port, the service platform generates an updated certificate and stores it. When it receives a remotely triggered instruction to issue an updated certificate, the service platform issues the updated certificate to the control platform.

[0074] The process by which the service platform issues an updated certificate to the control platform is as follows: After receiving the trigger operation of the issuance control corresponding to the updated certificate, the service platform obtains the identification information of the control platform, determines the control platform to which the certificate should be issued based on the identification information, wakes up the corresponding control platform, and sends the updated certificate to the corresponding control platform. For example, after a user triggers the issuance control corresponding to the updated certificate, the service platform obtains the identification information of the corresponding control platform and sends the updated certificate to the corresponding control platform based on the identification information.

[0075] When the TSP platform receives a remotely triggered instruction to issue an update certificate, the process of issuing the update certificate to the TBOX platform is as follows: After receiving the trigger operation of the issuance control corresponding to the update certificate, the TSP platform obtains the identification information of the TBOX platform, determines the TBOX platform to be issued to based on the identification information (such as the vehicle's VIN code), wakes up the corresponding TBOX platform, and sends the update certificate to the corresponding TBOX platform.

[0076] In the above solution, even if the control platform does not send a certificate update command or request a certificate update, the service platform can issue an update certificate after receiving a trigger operation from the control. This ensures that update certificates can be issued in various scenarios, guaranteeing certificate updates.

[0077] In this embodiment, since the service platform has not received the certificate update instruction from the control platform, it needs to determine the control platform to which the update certificate should be sent before sending it. By obtaining the identification information of the control platform, the corresponding control platform is activated based on the identification information, thereby enabling the issuance of the update certificate. This ensures the accuracy of the update certificate issuance and avoids errors in the issuance of the update certificate.

[0078] like Figure 2 As shown, another embodiment of this disclosure proposes a certificate update method, which is applied to a control platform. The control platform includes historical certificates matching a first port. The method includes:

[0079] Step 201: Receive the updated certificate from the service platform and store the updated certificate.

[0080] Step 202: Send a login request to the service platform so that the service platform can send a retrieval instruction to the control platform based on the login request.

[0081] Step 203: Upon receiving the retrieval instruction from the service platform, the stored historical certificate and the updated certificate are sent to the service platform as target certificates, so that the service platform can match the target certificate with the first port or the second port to obtain matching result information.

[0082] Step 204: Receive the matching result information sent by the service platform, and establish a connection with the service platform based on the matching result information.

[0083] In practice, the control platform includes a certificate list, which pre-stores historical certificates. When the control platform receives an updated certificate from the service platform, it adds the updated certificate to the certificate list. Once the certificate in the control platform successfully matches the port of the service platform, authentication is successful, and a connection can be established between the platforms.

[0084] After the certificate is updated and stored, the process of establishing a connection between the service platform and the control platform is as follows: The control platform sends a login request to the service platform. Upon receiving the login request, the service platform retrieves the target certificate from the control platform and determines whether the target certificate matches the first or second port. If the target certificate matches the first or second port successfully, it generates matching result information and sends it to the control platform. The control platform then establishes a connection with the service platform based on the matching result information.

[0085] Before a historical certificate expires and an updated certificate is generated, the control platform and the service platform connect by matching the historical certificate with the first port. After a historical certificate expires and an updated certificate is generated, the control platform and the service platform connect by matching the historical certificate with the first port or matching the updated certificate with the second port. If an updated certificate is generated but the historical certificate expires, the control platform and the service platform connect by matching the updated certificate with the second port.

[0086] In the above embodiments, the control platform stores the received update certificate, thereby establishing a connection with the service platform using the pre-stored historical certificate or the updated certificate.

[0087] In some embodiments, prior to step 201, the method further includes:

[0088] Step 201A: Determine whether the validity period of the historical certificate is equal to a preset time threshold.

[0089] Step 201B: In response to the effective time being less than the time threshold, a certificate update instruction is sent to the service platform.

[0090] In practice, the control platform compares the validity period of historical certificates with a preset time threshold. When the validity period is less than the threshold, it sends a certificate update command to the service platform. In other words, when a historical certificate is about to expire, a certificate update command is sent to the service platform, requesting the platform to issue an updated certificate.

[0091] In the above scheme, when a historical certificate is about to expire, a certificate renewal instruction is sent to the service platform. This ensures that the service platform issues an updated certificate when the historical certificate is about to expire, preventing the control platform from being unable to establish a connection with the service platform after the historical certificate expires, and avoiding situations where the control platform cannot log in to the service platform due to the expiration of the historical certificate.

[0092] In the above embodiments, the control platform and the service platform collaborate to update certificates, thereby preventing the inability to establish a connection between them after historical certificates expire. Furthermore, in different scenarios, the updated certificate can be sent to the control platform via a certificate update command or a distribution control, enabling multiple methods to trigger the issuance of updated certificates and avoiding a single triggering method. In addition, after a historical certificate expires, the first port corresponding to the historical certificate is used as a backup port. This backup port can then be bound to a subsequently generated third certificate for authentication, achieving port reuse and saving resources.

[0093] It should be noted that the embodiments of this disclosure can also be further described in the following ways:

[0094] like Figure 3 As shown, Figure 3 This is a flowchart illustrating a certificate update request from the TBOX platform, as described in this embodiment of the disclosure.

[0095] In a scenario where the TBOX platform requests a certificate update from the TSP platform, the process of updating the certificate and logging into the TSP platform is as follows:

[0096] Step 301: When the TBOX platform logs into the TSP platform for the first time, after the TBOX platform sends a login request to the TSP platform for the first time, the TBOX platform and the TSP platform establish a connection through the historical certificate and the first port, and the TBOX platform logs into the TSP platform.

[0097] After logging into the TSP platform, the TBOX platform checks the validity period of its historical certificates. If the validity period is less than a preset threshold, indicating that the historical certificate is about to expire, the TBOX platform sends a certificate update command to the TSP platform to obtain an updated certificate. Upon receiving the certificate update command, the TSP platform returns the updated certificate to the TBOX platform.

[0098] Step 302: After the TBOX platform receives and stores the updated certificate, when the TBOX platform logs into the TSP platform for the second time, the TBOX platform sends a login request to the TSP platform for the second time. The TSP platform then polls to determine whether the target certificate (historical certificate or updated certificate) in the TBOX platform matches the first port or the second port. When the target certificate successfully matches the corresponding port, the TBOX platform and the TSP platform establish a connection based on the target certificate and the corresponding port.

[0099] In addition, the TBOX platform also reports the certificate update results to the TSP platform.

[0100] like Figure 4 As shown, Figure 4 This is a flowchart illustrating the issuance of updated certificates by the TSP platform in an embodiment of this disclosure.

[0101] In the scenario where the TBOX platform does not request a certificate update from the TSP platform, and the TSP platform issues the updated certificate to the TBOX, the certificate update and TSP platform login process is as follows:

[0102] Step 401: When the TBOX platform logs into the TSP platform for the first time, the TSP receives the trigger operation of the control corresponding to the updated certificate and sends the updated certificate to the TBOX platform.

[0103] Step 402: After the TBOX platform receives and stores the updated certificate, when the TBOX platform logs into the TSP platform for the second time, the TBOX platform sends a login request to the TSP platform for the second time. The TSP platform then polls to determine whether the target certificate (historical certificate or updated certificate) in the TBOX platform matches the first port or the second port. When the target certificate successfully matches the corresponding port, the TBOX platform and the TSP platform establish a connection based on the target certificate and the corresponding port.

[0104] It should be noted that the method of this disclosure embodiment can be executed by a single device, such as a computer or server. The method of this embodiment can also be applied to a distributed scenario, where multiple devices cooperate to complete the task. In such a distributed scenario, one of these devices may execute only one or more steps of the method of this disclosure embodiment, and the multiple devices will interact with each other to complete the method described.

[0105] It should be noted that the above description describes some embodiments of this disclosure. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in a different order than that shown in the above embodiments and still achieve the desired result. Furthermore, the processes depicted in the drawings do not necessarily require a specific or sequential order to achieve the desired result. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0106] Based on the same inventive concept, corresponding to the method of the above embodiment, this disclosure also provides a service platform, which includes a first port matching historical certificates.

[0107] refer to Figure 5 The service platform includes:

[0108] The update module 501 is configured to generate an updated certificate after confirming that the historical certificate matches the first port, and send the updated certificate to the control platform.

[0109] The setting module 502 is configured to set a second port corresponding to the updated certificate;

[0110] The judgment module 503 is configured to confirm receipt of a login request from the control platform, obtain a target certificate from the control platform, and determine whether the target certificate matches the first port or the second port; wherein, the target certificate includes: the historical certificate or the updated certificate;

[0111] The matching module 504 is configured to generate matching result information in response to confirming that the target certificate matches the first port or the second port, and send the matching result information to the control platform so that the control platform can establish a connection with the service platform based on the matching result information.

[0112] In some embodiments, the service platform further includes:

[0113] The polling module is configured to, in response to confirming that the historical certificate has expired, use the first port corresponding to the historical certificate as a backup port, so that the backup port can be matched with the third certificate obtained after the update.

[0114] In some embodiments, the update module 501 includes:

[0115] The first update unit is configured to, after confirming that the historical certificate matches the first port, receive a certificate update instruction from the control platform based on the connection channel established between the historical certificate and the first port, update the certificate according to the certificate update instruction, and generate the updated certificate.

[0116] The first sending unit is configured to send the updated certificate to the control platform.

[0117] In some embodiments, the update module 501 includes:

[0118] The second update unit is configured to generate the updated certificate at any time point after confirming that the historical certificate matches the first port.

[0119] The identification information acquisition unit is configured to receive the trigger operation of the control corresponding to the update certificate and acquire the identification information of the control platform.

[0120] The second sending unit is configured to wake up the control platform based on the identification information and send the update certificate to the control platform.

[0121] Based on the same inventive concept, corresponding to the method of another embodiment described above, this disclosure also provides a control platform, which includes a historical certificate matching the first port.

[0122] refer to Figure 6 The control platform includes:

[0123] The receiving module 601 is configured to receive the updated certificate sent by the service platform and store the updated certificate;

[0124] The first sending module 602 is configured to send a login request to the service platform, so that the service platform can send a retrieval instruction to the control platform based on the login request;

[0125] The second sending module 603 is configured to receive the retrieval instruction sent by the service platform, and send the stored historical certificate and the updated certificate as target certificates to the service platform, so that the service platform can match the target certificate with the first port or the second port to obtain matching result information;

[0126] The connection establishment module 604 is configured to receive the matching result information sent by the service platform and establish a connection with the service platform based on the matching result information.

[0127] In some embodiments, the control platform further includes:

[0128] The validity period determination module is configured to determine the validity period of the historical certificate against a preset time threshold.

[0129] The update instruction sending module is configured to send a certificate update instruction to the service platform in response to the effective time being less than the time threshold.

[0130] For ease of description, the above apparatus is described in terms of its functions, divided into various modules. Of course, in implementing this disclosure, the functions of each module can be implemented in one or more software and / or hardware.

[0131] The apparatus described above is used to implement the corresponding certificate update method in any of the foregoing embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0132] Based on the same inventive concept, corresponding to the methods of any of the above embodiments, this disclosure also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the certificate update method described in any of the above embodiments.

[0133] Figure 7 This embodiment illustrates a more specific hardware structure of an electronic device, which may include a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, memory 1020, input / output interface 1030, and communication interface 1040 are interconnected internally via the bus 1050.

[0134] The processor 1010 can be implemented using a general-purpose CPU (Central Processing Unit), microprocessor, application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0135] The memory 1020 can be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 1020 can store the operating system and other applications. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program code is stored in the memory 1020 and is called and executed by the processor 1010.

[0136] The input / output interface 1030 is used to connect input / output modules to realize information input and output. Input / output modules can be configured as components within the device (not shown in the figure) or externally connected to the device to provide corresponding functions. Input devices may include keyboards, mice, touchscreens, microphones, various sensors, etc., while output devices may include displays, speakers, vibrators, indicator lights, etc.

[0137] The communication interface 1040 is used to connect a communication module (not shown in the figure) to enable communication between this device and other devices. The communication module can communicate via wired means (such as USB (Universal Serial Bus), network cable, etc.) or wireless means (such as mobile network, WIFI (Wireless Fidelity), Bluetooth, etc.).

[0138] Bus 1050 includes a pathway for transmitting information between various components of the device, such as processor 1010, memory 1020, input / output interface 1030, and communication interface 1040.

[0139] It should be noted that although the above-described device only shows the processor 1010, memory 1020, input / output interface 1030, communication interface 1040, and bus 1050, in specific implementations, the device may also include other components necessary for normal operation. Furthermore, those skilled in the art will understand that the above-described device may only include the components necessary for implementing the embodiments of this specification, and not necessarily all the components shown in the figures.

[0140] The electronic devices described above are used to implement the corresponding certificate update methods in any of the foregoing embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0141] Based on the same inventive concept, corresponding to the methods of any of the above embodiments, this disclosure also provides a non-transitory computer-readable storage medium storing computer instructions for causing the computer to execute the certificate update method as described in any of the above embodiments.

[0142] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transfer medium that can be used to store information accessible by a computing device.

[0143] The computer instructions stored in the storage medium of the above embodiments are used to cause the computer to execute the certificate update method as described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0144] Based on the same inventive concept, corresponding to the methods of any of the above embodiments, this application also provides a vehicle, including the service platform, or control platform, or electronic device, or storage medium in the above embodiments, wherein the vehicle device implements the certificate update method described in any of the above embodiments.

[0145] The vehicles described in the above embodiments are used to implement the certificate update method described in any of the foregoing embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0146] Those skilled in the art should understand that the discussion of any of the above embodiments is merely exemplary and is not intended to imply that the scope of this disclosure (including the claims) is limited to these examples; within the framework of this disclosure, the technical features of the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other variations of different aspects of the embodiments of this disclosure as described above, which are not provided in detail for the sake of brevity.

[0147] Additionally, to simplify the description and discussion, and to avoid obscuring the embodiments of this disclosure, the provided drawings may or may not show well-known power / ground connections to integrated circuit (IC) chips and other components. Furthermore, the apparatus may be shown in block diagram form to avoid obscuring the embodiments of this disclosure, and this also takes into account the fact that the details of implementation of these block diagram apparatuses are highly dependent on the platform on which the embodiments of this disclosure will be implemented (i.e., these details should be fully understood by those skilled in the art). While specific details (e.g., circuitry) have been set forth to describe exemplary embodiments of this disclosure, it will be apparent to those skilled in the art that the embodiments of this disclosure may be implemented without these specific details or with variations thereof. Therefore, these descriptions should be considered illustrative rather than restrictive.

[0148] Although this disclosure has been described in conjunction with specific embodiments thereof, many substitutions, modifications, and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may be used with the embodiments discussed.

[0149] This disclosure is intended to cover all such substitutions, modifications, and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this disclosure should be included within the scope of protection of this disclosure.

Claims

1. A certificate renewal method, characterized in that, The method is applied to a service platform, which establishes a connection with a control platform based on a certificate. The service platform includes a first port that matches historical certificates. The method includes: After confirming that the historical certificate matches the first port, an updated certificate is generated and sent to the control platform; Set the second port corresponding to the updated certificate; Upon confirming receipt of the login request from the control platform, the system retrieves the target certificate from the control platform and determines whether the target certificate matches the first port or the second port; wherein, the target certificate includes: the historical certificate or the updated certificate; In response to confirming that the target certificate matches the first port or the second port, matching result information is generated and sent to the control platform so that the control platform can establish a connection with the service platform based on the matching result information; In response to the confirmation that the target certificate does not match the first port and the second port, the next target certificate in the certificate list of the control platform is obtained, and the next target certificate is matched with the first port and the second port. The method further includes: In response to the confirmation that the historical certificate has expired, the first port corresponding to the historical certificate is designated as a backup port for matching with the third certificate obtained after the update, and the third certificate is bound to the first port designated as the backup port for authentication.

2. The method according to claim 1, characterized in that, After confirming that the historical certificate matches the first port, an updated certificate is generated and sent to the control platform, including: After confirming that the historical certificate matches the first port, the system receives a certificate update instruction from the control platform based on the connection channel established between the historical certificate and the first port, updates the certificate according to the certificate update instruction, and generates the updated certificate. The updated certificate is sent to the control platform.

3. The method according to claim 1, characterized in that, After confirming that the historical certificate matches the first port, an updated certificate is generated and sent to the control platform, including: Once the historical certificate is confirmed to match the first port at any point in time, an updated certificate is generated. Upon receiving the trigger operation of the control corresponding to the updated certificate, the identification information of the control platform is obtained; The control platform is activated based on the identification information, and the updated certificate is sent to the control platform.

4. A certificate renewal method, characterized in that, The method is applied to a control platform, which establishes a certificate-based connection with the service platform according to any one of claims 1 to 3, wherein the control platform includes historical certificates matching the first port, and the method includes: Receive the updated certificate from the service platform and store the updated certificate; A login request is sent to the service platform, so that the service platform can send a retrieval instruction to the control platform based on the login request; Upon receiving the retrieval instruction from the service platform, the stored historical certificate and the updated certificate are sent to the service platform as target certificates, so that the service platform can match the target certificate with the first port or the second port to obtain matching result information; Receive the matching result information sent by the service platform, and establish a connection with the service platform based on the matching result information.

5. The method according to claim 4, characterized in that, Before receiving the updated certificate from the service platform, the following is also included: The validity period of the historical certificate is compared with a preset time threshold. In response to the effective time being less than the time threshold, a certificate update instruction is sent to the service platform.

6. A service platform, the service platform including a first port matching historical certificates, characterized in that, include: The update module is configured to generate an updated certificate after confirming that the historical certificate matches the first port, and send the updated certificate to the control platform; The configuration module is configured to set a second port corresponding to the updated certificate; The judgment module is configured to confirm receipt of a login request from the control platform, obtain a target certificate from the control platform, and determine whether the target certificate matches the first port or the second port; wherein, the target certificate includes: the historical certificate or the updated certificate; The matching module is configured to generate matching result information in response to confirming that the target certificate matches the first port or the second port, and send the matching result information to the control platform so that the control platform can establish a connection with the service platform based on the matching result information; The matching and judgment module is configured to, in response to confirming that the target certificate does not match the first port and the second port, obtain the next target certificate from the certificate list of the control platform and perform a matching judgment on the next target certificate with the first port and the second port; The polling module is configured to, in response to confirming that the historical certificate has expired, use the first port corresponding to the historical certificate as a backup port, so that the backup port can be matched with the third certificate obtained after the update, and bind the third certificate to the first port used as the backup port for authentication.

7. A control platform, wherein the control platform includes a historical certificate matching a first port, characterized in that, include: The receiving module is configured to receive the updated certificate sent by the service platform as described in claim 6, and to store the updated certificate; The first sending module is configured to send a login request to the service platform, so that the service platform can send a retrieval instruction to the control platform based on the login request; The second sending module is configured to receive the retrieval instruction sent by the service platform, and send the stored historical certificate and the updated certificate as target certificates to the service platform, so that the service platform can match the target certificate with the first port or the second port to obtain matching result information; The connection establishment module is configured to receive the matching result information sent by the service platform and establish a connection with the service platform based on the matching result information.

8. An electronic device, characterized in that, It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the program, implements the method as described in any one of claims 1 to 5.

9. A vehicle, characterized in that, Includes the electronic device as described in claim 8.

Images