Information security testing method, system, equipment and storage medium for electronic anti-theft device

Abstract

The present application relates to an information security testing method, system, equipment and storage medium for an electronic anti-theft device, and to the technical field of information security testing technology, including triggering an identity authentication test between an electronic key module and an on-board communication module; multiple monitoring and capturing of interactive data during the identity authentication test to obtain multiple groups of target data; analyzing and processing each group of target data to obtain multiple target hash values; and determining whether the security authentication mechanism used for identity authentication is reliable based on the consistency between the multiple target hash values. Through the present application, the information security test of the electronic anti-theft device can be effectively implemented, which not only reduces the dependence on the professional experience and skill requirements of the tester, but also simplifies the detection process, avoiding the problem of inaccurate and inconsistent test results caused by human factors.

Description

Technical Field

[0001] The present application relates to the technical field of information security testing technology, and in particular to an information security testing method, system, equipment and storage medium for an electronic anti-theft device. Background Art

[0002] Car anti-theft devices are key components to ensure car safety, and improving the technical level of car anti-theft devices is an important means to ensure the personal and property safety of car owners, so as to curb the occurrence of car thefts at the source. Among them, with the development of intelligence and networking, as well as the advancement, expansion and integration of automobile technology, car anti-theft device systems are no longer limited to traditional mechanical anti-theft device forms, and new electronic anti-theft technologies such as smart keys and digital keys have emerged.

[0003] Based on the rapid development of new anti-theft devices, the National Automobile Technical Standards Committee has started the revision of GB15740 "Automobile Anti-theft Devices". In the face of special security issues of new anti-theft devices, this standard revision also puts forward information security requirements for electronic mechanical and electronic anti-theft devices, that is, before the electronic mechanical or electronic anti-theft control device is released, it should be authenticated with the electronic key, and before the power immobilizer is released, it should be authenticated with the electronic mechanical or electronic anti-theft control device, and the identity authentication should use reliable random number calculation comparison, timestamp calculation comparison or other security authentication mechanisms with equivalent security. It can be seen that information security testing (i.e. testing whether the security authentication mechanism used for identity authentication is reliable) is an indispensable test for electronic mechanical and electronic anti-theft device systems in security testing, and the current revision of the automobile anti-theft device standard puts forward requirements for the security and detection methods of electronic mechanical and electronic anti-theft device systems, that is, it provides a basis for conducting relevant compliance testing.

[0004] However, there is no mature testing system, tools and methods for information security testing of automotive electronic mechanical and electronic anti-theft devices. The testing process lacks unified specifications. Due to the large differences in test scenarios and test objects, the testing tools used are also relatively scattered, which not only requires a lot of manpower, but also requires high professional experience and skills of testers. The testing process is cumbersome and it is difficult to ensure the accuracy and consistency of the test results. In view of this, how to effectively implement information security testing of automotive electronic mechanical and electronic anti-theft devices is an urgent problem to be solved. Summary of the invention

[0005] The present application provides an electronic anti-theft device information security testing method, system, equipment and storage medium to effectively implement information security testing of automobile electronic mechanical and electronic anti-theft devices.

[0006] In a first aspect, a method for testing information security of an electronic anti-theft device is provided, comprising the following steps:

[0007] Trigger the identity authentication test between the electronic key module and the vehicle communication module;

[0008] The interactive data in the identity authentication test process is monitored and captured multiple times to obtain multiple sets of target data;

[0009] Analyze and process each group of target data separately to obtain multiple target hash values;

[0010] Whether the security authentication mechanism used for the identity authentication is reliable is determined based on the consistency between the multiple target hash values.

[0011] In some embodiments, before the step of triggering the identity authentication test between the electronic key module and the vehicle communication module, the method further includes:

[0012] External radio signals are shielded by a preset signal shielding module to form a test environment for identity authentication that is independent of the external environment.

[0013] In some embodiments, the interactive data in the identity authentication test process is monitored and captured multiple times to obtain multiple groups of target data, including:

[0014] The interactive data between the electronic key module and the anti-theft controller in the vehicle communication module during the identity authentication test is monitored and captured multiple times to obtain multiple groups of first target data;

[0015] The interactive data between the anti-theft controller and the power immobilization controller in the vehicle communication module during the identity authentication test is monitored and captured multiple times to obtain multiple groups of second target data.

[0016] In some embodiments, the analyzing and processing each set of target data to obtain multiple target hash values ​​includes:

[0017] Analyze and process each group of first target data respectively to obtain multiple first target hash values ​​corresponding to the first target data;

[0018] Each group of second target data is analyzed and processed respectively to obtain a plurality of second target hash values ​​corresponding to the second target data.

[0019] In some embodiments, determining whether the security authentication mechanism used for the identity authentication is reliable based on the consistency between the multiple target hash values ​​includes:

[0020] When at least two of the plurality of first target hash values ​​are consistent or at least two of the plurality of second target hash values ​​are consistent, determining that the security authentication mechanism used for the identity authentication is unreliable;

[0021] When the plurality of first target hash values ​​are completely inconsistent with each other and the plurality of second target hash values ​​are completely inconsistent with each other, it is determined that the security authentication mechanism used for the identity authentication is reliable.

[0022] In some embodiments, the signal mode corresponding to the interactive data between the electronic key module and the anti-theft controller in the vehicle communication module is any one of a radio frequency signal, a Bluetooth signal and an NFC signal.

[0023] In a second aspect, an electronic anti-theft device information security testing system is provided, comprising:

[0024] A trigger module, which is used to trigger an identity authentication test between the electronic key module and the vehicle communication module;

[0025] A monitoring and capturing module is used to monitor and capture the interactive data during the identity authentication test multiple times to obtain multiple sets of target data;

[0026] An analysis and processing module, which is used to analyze and process each group of target data respectively to obtain multiple target hash values;

[0027] A judgment module is used to judge whether the security authentication mechanism used for the identity authentication is reliable according to the consistency between multiple target hash values.

[0028] In some embodiments, the device further comprises a signal shielding module, which is used to:

[0029] Shield external radio signals to form a test environment for identity authentication that is independent of the external environment.

[0030] In a third aspect, an electronic anti-theft device information security testing device is provided, comprising: a memory and a processor, wherein the memory stores at least one instruction, and the at least one instruction is loaded and executed by the processor to implement the aforementioned electronic anti-theft device information security testing method.

[0031] In a fourth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the aforementioned electronic anti-theft device information security testing method is implemented.

[0032] The beneficial effects brought about by the technical solution provided by the present application include: effectively realizing information security testing of electronic anti-theft devices.

[0033] The present application provides an electronic anti-theft device information security testing method, system, equipment and storage medium, including triggering an identity authentication test between an electronic key module and an on-board communication module; monitoring and capturing the interactive data during the identity authentication test multiple times to obtain multiple groups of target data; analyzing and processing each group of target data separately to obtain multiple target hash values; judging whether the security authentication mechanism used for the identity authentication is reliable based on the consistency between the multiple target hash values. Through the present application, the interactive data during the identity authentication test can be monitored and captured, and the captured interactive data can be analyzed and processed at the same time, and whether the security authentication mechanism used for the identity authentication is reliable can be judged based on the analysis and processing results, so as to form a set of standardized test steps and test processes, thereby effectively realizing the information security test of the electronic anti-theft device, which not only reduces the dependence on the professional experience and skill requirements of the testers, but also simplifies the detection process, avoiding the problem of inaccurate and inconsistent test results caused by human factors. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0035] Figure 1 A flowchart of an information security testing method for an electronic anti-theft device provided in an embodiment of the present application;

[0036] Figure 2 A schematic diagram of a specific process of the information security testing method for an electronic anti-theft device provided in an embodiment of the present application;

[0037] Figure 3 A schematic diagram of the interaction between the various modules provided in the embodiment of the present application;

[0038] Figure 4 A schematic diagram of the structure of an information security testing system for an electronic anti-theft device provided in an embodiment of the present application;

[0039] Figure 5 A schematic diagram of the structure of an electronic anti-theft device information security testing device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0040] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0041] The embodiments of the present application provide an electronic anti-theft device information security testing method, system, device and storage medium to effectively implement information security testing of automotive electronic mechanical and electronic anti-theft devices.

[0042] See also Figure 1 and Figure 2 As shown, the embodiment of the present application provides an information security testing method for an electronic anti-theft device, comprising the following steps:

[0043] Step S10: triggering an identity authentication test between the electronic key module and the vehicle communication module;

[0044] For example, it should be understood that, during the application process, electromechanical or electronic anti-theft devices often involve two aspects of identity authentication, namely, before the anti-theft control device is released, identity authentication should be performed with the electronic key, and before the power immobilizer is released, identity authentication should be performed with the anti-theft control device; therefore, when conducting information security testing of electromechanical or electronic anti-theft devices, it is also necessary to test whether the random number calculation and comparison, timestamp calculation and comparison or other security authentication mechanisms with equivalent security used in the above two identity authentication processes are reliable.

[0045] Therefore, in this embodiment, the reliability of the security authentication mechanism used in the above two identity authentication processes will be tested. Specifically, the identity authentication test between the electronic key module and the anti-theft controller in the vehicle communication module and the identity authentication test between the anti-theft controller in the vehicle communication module and the power immobilizer controller will be triggered.

[0046] Furthermore, before the step of triggering the identity authentication test between the electronic key module and the vehicle communication module, the method further includes:

[0047] External radio signals are shielded by a preset signal shielding module to form a test environment for identity authentication that is independent of the external environment.

[0048] Exemplarily, in this embodiment, in order to prevent interference and influence from external signals, a signal shielding module for shielding external radio signals will be started before identity authentication to form a closed test environment independent of the external environment, thereby isolating the information security test environment from the external radio environment, thereby effectively ensuring the accuracy of the information security test.

[0049] Step S20: monitoring and capturing the interaction data during the identity authentication test process multiple times to obtain multiple groups of target data;

[0050] Exemplarily, it can be understood that before triggering the identity authentication test between the electronic key module and the vehicle communication module, the monitoring and capturing module will be started to monitor and capture the data packets generated by the communication interaction between the vehicle communication components during the identity authentication test; at the same time, in order to ensure the accuracy of the information security test results, multiple identity authentication interaction tests will be performed, and the interaction data during each identity authentication test will be monitored and captured to obtain multiple sets of target data. It should be noted that the number of identity authentication interaction tests can be determined according to actual needs, such as 3 times, 5 times, etc., and is not limited here.

[0051] For example, take the example of performing three identity authentication tests between the electronic key module A and the vehicle communication module B: the electronic key module A and the vehicle communication module B perform the first identity authentication test, and after monitoring, the first group of target data X1 will be captured; then the electronic key module A and the vehicle communication module B perform the second identity authentication test, and after monitoring, the second group of target data X2 will be captured; similarly, the electronic key module A and the vehicle communication module B perform the third identity authentication test, and after monitoring, the third group of target data X3 will be captured.

[0052] Furthermore, the interactive data in the identity authentication test process is monitored and captured multiple times to obtain multiple groups of target data, including:

[0053] The interactive data between the electronic key module and the anti-theft controller in the vehicle communication module during the identity authentication test is monitored and captured multiple times to obtain multiple groups of first target data; wherein the signal mode corresponding to the interactive data between the electronic key module and the anti-theft controller in the vehicle communication module is any one of a radio frequency signal, a Bluetooth signal and an NFC signal;

[0054] The interactive data between the anti-theft controller and the power immobilization controller in the vehicle communication module during the identity authentication test is monitored and captured multiple times to obtain multiple groups of second target data.

[0055] For example, it should be noted that in this embodiment, the data interaction form between the electronic key module and the anti-theft controller in the vehicle communication module can be a radio frequency signal, a Bluetooth signal, or an NFC (Near Field Communication) signal. The specific data interaction method can be determined according to actual needs and is not limited here.

[0056] Among them, see Figure 3 As shown, if the data interaction form is a radio frequency signal, the radio frequency signal between the radio frequency key (i.e., the electronic key module) and the test vehicle (i.e., the anti-theft controller in the vehicle communication module) can be captured through the radio frequency signal monitoring and capture module, and the captured radio frequency signal and data can be transmitted to the corresponding signal analysis and processing module; specifically, the CC1101 chip can be used, which can support the radio frequency signal scanning function and can work in multiple frequency bands and bands, such as 300-348MHz, 400-464MHz and 800-928MHz and other commonly used frequency bands; the CC1101 chip detects the radio frequency signal of the corresponding frequency during operation, and identifies whether there is a significant fluctuation in its signal strength, thereby detecting the operating frequency of the target device. At the same time, this embodiment can also use hardware devices such as HackRFOne or USRP to allow custom radio frequency signal frequency, signal sampling rate, bandwidth and signal gain, so that the radio frequency signal of the corresponding frequency band can be captured and saved in the form of signal data to the data analysis software.

[0057] If the data interaction is in the form of Bluetooth signals, the Bluetooth signal monitoring and capturing module (that is, the module is responsible for searching for the target Bluetooth and obtaining detailed information of the target, and sniffing and capturing nearby Bluetooth traffic) can be used to automatically scan the Bluetooth signal, capture the Bluetooth data packets between the Bluetooth key and the test vehicle, and transmit the captured signals and data to the signal analysis and processing module; specifically, the UbertoothOne Bluetooth chip and the OST-105 Bluetooth adapter can be used to scan the Bluetooth device address, Bluetooth version, Bluetooth device address type, Bluetooth device name, Bluetooth device connection status, GATT service data and other information.

[0058] If the data interaction form is NFC signal, the communication data packet between the NFC key and the test vehicle can be captured by the NFC signal monitoring and capture module, and the captured signal and data can be transmitted to the signal analysis and processing module; specifically, the Proxmark hardware device can be used to communicate with the NFC key or the test vehicle, and the communication data packet captured by monitoring can be transmitted to the corresponding signal analysis and processing module.

[0059] Taking the radio frequency signal as an example of data interaction, the radio frequency key and the anti-theft controller are subjected to the first identity authentication test and monitored, that is, the radio frequency signal monitoring and capturing module will search for the signal of the specified frequency (such as 315MHz, 433MHz, 868MHz, 915MHz) in real time, and start recording the signal after detecting the radio frequency signal of the corresponding frequency, thereby capturing the first group of first target data X11; then the radio frequency key and the anti-theft controller are subjected to the second identity authentication test, and after monitoring, the second group of first target data X12 will be captured; similarly, the radio frequency key and the anti-theft controller are subjected to the third identity authentication test, and after monitoring, the third group of first target data X13 will be captured.

[0060] It is understandable that the anti-theft controller and the power immobilization controller in the vehicle communication module often exchange data in the form of bus signals; therefore, the vehicle bus signal monitoring and capturing module can be used to monitor the process of bus data interaction in the vehicle, and the captured vehicle bus data packets can be sent to the signal analysis and processing module. Thus, when the anti-theft controller and the power immobilization controller perform the first identity authentication test, after monitoring, the first group of second target data X21 will be captured; then the anti-theft controller and the power immobilization controller perform the second identity authentication test, after monitoring, the second group of second target data X22 will be captured; similarly, when the anti-theft controller and the power immobilization controller perform the third identity authentication test, after monitoring, the third group of second target data X23 will be captured.

[0061] It can be seen that in the process of triggering the identity authentication between the electronic key module and the vehicle-mounted communication module, the communication process data packet between the electronic key module and the anti-theft controller will be monitored and captured by the RF signal monitoring and capture module, the Bluetooth signal monitoring and capture module or the NFC signal monitoring and capture module, while the communication process data packet between the anti-theft controller and the power immobilizer controller on the vehicle side will be monitored and captured by the vehicle-mounted bus signal monitoring and capture module.

[0062] Step S30: Analyze and process each group of target data respectively to obtain multiple target hash values;

[0063] Exemplarily, in this embodiment, after the corresponding target data is captured by monitoring, the target data will be processed and analyzed, such as demodulation, decoding, hashing, etc., to obtain the target hash value corresponding to each group of target data. It should be understood that when implementing the processing and analysis of the target data, after a group of target data is captured by monitoring, the group of target data can be processed and analyzed immediately to obtain the target hash value corresponding to the group of target data; of course, after a preset number of groups of target data are captured by monitoring, each group of target data can be analyzed and processed separately to obtain the target hash value corresponding to each group of target data. The specific form can be determined according to actual needs and is not limited here.

[0064] Furthermore, each set of target data is analyzed and processed separately to obtain multiple target hash values, including:

[0065] Analyze and process each group of first target data respectively to obtain multiple first target hash values ​​corresponding to the first target data;

[0066] Each group of second target data is analyzed and processed respectively to obtain a plurality of second target hash values ​​corresponding to the second target data.

[0067] Exemplarily, in this embodiment, the communication data packets between the electronic key module and the anti-theft controller (i.e., the first target data) and the communication data packets between the anti-theft controller and the power immobilizer controller (i.e., the second target data) captured by monitoring are analyzed and processed respectively to obtain corresponding target hash values.

[0068] Among them, since the data interaction between the electronic key module and the anti-theft controller may be a radio frequency signal, a Bluetooth signal or an NFC signal; therefore, see Figure 3 As shown, this embodiment will provide different analysis and processing modules for different signal forms, that is, if the signal mode of the first target data is a radio frequency signal, the radio frequency signal analysis and processing module will be used to demodulate the target data (specifically, the corresponding reverse analysis can be performed according to the actual modulation method, such as demodulation through a demodulation algorithm corresponding to modulation methods such as FSK, ASK, PSK, etc.), decode (specifically, the corresponding reverse analysis can be performed according to the actual encoding method, such as decoding through a decoding algorithm corresponding to encoding methods such as NRZ, PWM and Manchester, etc.), hash calculation (for example, hash calculation is performed through algorithms such as MD5, SHA-1, SHA-256, etc., to quickly compare signal data result values), data comparison, result output, and other processing.

[0069] If the signal mode of the first target data is a Bluetooth signal, the Bluetooth signal analysis and processing module will perform protocol analysis, hash calculation, data comparison, result output and other processing on the sniffed GATT communication data (i.e., the first target data); if the signal mode of the first target data is an NFC signal, the NFC signal analysis and processing module will use the NFC communication protocol to analyze the response mechanism in the verification process, and the NFC signal will be demodulated (specifically, the corresponding reverse demodulation can be performed according to the actual modulation method, such as demodulation by a demodulation algorithm corresponding to modulation methods such as OOK and BPSK), decoded (specifically, the corresponding reverse decoding can be performed according to the actual encoding method, such as decoding by a decoding algorithm corresponding to encoding methods such as NRZ-L, Modified Miller and Manchester), hash calculation, data comparison, result output and other processing.

[0070] If the anti-theft controller and the power immobilizer controller exchange data in the form of bus signals, the vehicle bus signal (i.e., the second target data) will be processed by the vehicle bus signal analysis and processing module, including data screening, hash calculation, data comparison, and result output.

[0071] It can be seen that when the monitoring and capturing module sends the target data captured by the monitoring to the analysis and processing module, the RF signal will be demodulated, decoded, and hashed by the RF signal analysis and processing module to obtain a string of hash result values ​​of fixed length (i.e., the first target hash value); the Bluetooth signal will be parsed and hashed by the Bluetooth signal analysis and processing module to obtain a string of hash result values ​​of fixed length (i.e., the first target hash value); the NFC signal will be demodulated, decoded, and hashed by the NFC signal analysis and processing module to obtain a string of hash result values ​​of fixed length (i.e., the first target hash value); the vehicle bus signal will be screened and hashed by the vehicle bus signal analysis and processing module to obtain a string of hash result values ​​of fixed length (i.e., the second target hash value).

[0072] Specifically, taking the data interaction form of radio frequency signal between the electronic key module and the anti-theft controller as an example, after obtaining three groups of data, namely the first target data X11, the first target data X12 and the first target data X13, X11, X12 and X13 will be analyzed and processed respectively to obtain the first target hash value Y11 corresponding to X11, the first target hash value Y12 corresponding to X12 and the first target hash value Y13 corresponding to X13.

[0073] Similarly, taking the bus signal as an example of data interaction between the anti-theft controller and the power stop controller, after obtaining the second target data X21, the second target data X22 and the second target data X23, X21, X22 and X23 will be analyzed and processed respectively to obtain the second target hash value Y21 corresponding to X21, the second target hash value Y22 corresponding to X22 and the second target hash value Y23 corresponding to X23.

[0074] Step S40: determining whether the security authentication mechanism used for the identity authentication is reliable according to the consistency between the multiple target hash values.

[0075] Exemplarily, in this embodiment, after obtaining a fixed-length hash result value (i.e., the target hash value) obtained each time the electronic key module and the vehicle-mounted communication module perform identity authentication, all hash result values ​​will be automatically compared to see if they are consistent, so as to determine whether a reliable random number calculation and comparison, timestamp calculation and comparison, or other security authentication mechanisms with equivalent security are used in the identity authentication, and a result report will be generated, thereby completing the information security test.

[0076] It can be seen that through this embodiment, the interaction data in the identity authentication test process can be monitored and captured, and the captured interaction data can be analyzed and processed at the same time, and whether the security authentication mechanism used for the identity authentication is reliable can be determined based on the analysis and processing results, so as to form a set of standardized test steps and test processes, thereby effectively realizing the information security test of the electronic anti-theft device, which not only reduces the dependence on the professional experience and skill requirements of the testers, but also simplifies the detection process, avoiding the problem of inaccurate and inconsistent test results caused by human factors.

[0077] Further, the determining whether the security authentication mechanism used for the identity authentication is reliable according to the consistency between the multiple target hash values ​​includes:

[0078] When at least two of the plurality of first target hash values ​​are consistent or at least two of the plurality of second target hash values ​​are consistent, determining that the security authentication mechanism used for the identity authentication is unreliable;

[0079] When the plurality of first target hash values ​​are completely inconsistent with each other and the plurality of second target hash values ​​are completely inconsistent with each other, it is determined that the security authentication mechanism used for the identity authentication is reliable.

[0080] Exemplarily, in this embodiment, in the process of determining whether the security authentication mechanism used for identity authentication is reliable, it is necessary to comprehensively consider the identity authentication between the electronic key module and the anti-theft controller and the identity authentication between the anti-theft controller and the power immobilizer controller.

[0081] Specifically, taking the data interaction form between the electronic key module and the anti-theft controller as a radio frequency signal as an example, the multiple first target hash values ​​are Y11, Y12 and Y13 respectively. At the same time, taking the data interaction form between the anti-theft controller and the power stop controller as a bus signal as an example, the multiple second target hash values ​​are Y21, Y22 and Y23 respectively. Assuming that Y11, Y12 and Y13 are all different, and Y21, Y22 and Y23 are also all different, it is determined that the security authentication mechanism used for the identity authentication is reliable.

[0082] If Y11 is the same as Y12 and Y13 is different from both Y11 and Y12, or Y11, Y12 and Y13 are all the same, in general, as long as at least two of Y11, Y12 and Y13 are the same, it can be determined that the security authentication mechanism used for the identity authentication is unreliable; similarly, Y21 is the same as Y22 and Y23 is different from both Y21 and Y22, or Y21, Y22 and Y23 are all the same, in general, as long as at least two of Y21, Y22 and Y23 are the same, it can also be determined that the security authentication mechanism used for the identity authentication is unreliable.

[0083] In summary, this embodiment provides an information security testing process and method for automotive electronic mechanical and electronic anti-theft devices, wherein a signal shielding module is provided to prevent interference and influence of external radio signals, and radio frequency, Bluetooth, NFC and vehicle bus signal testing functions are integrated, which can meet the information security testing of automotive electronic mechanical and electronic anti-theft devices, fill the gap in testing technology, and solve the problem of inaccurate and inconsistent test results caused by human factors by standardizing test steps and test process methods.

[0084] See also Figure 4 As shown, the embodiment of the present application also provides an electronic anti-theft device information security testing system, including:

[0085] A trigger module, which is used to trigger an identity authentication test between the electronic key module and the vehicle communication module;

[0086] A monitoring and capturing module is used to monitor and capture the interactive data during the identity authentication test multiple times to obtain multiple sets of target data;

[0087] An analysis and processing module, which is used to analyze and process each group of target data respectively to obtain multiple target hash values;

[0088] A judgment module is used to judge whether the security authentication mechanism used for the identity authentication is reliable according to the consistency between multiple target hash values.

[0089] Furthermore, the device also includes a signal shielding module, which is used to:

[0090] Shield external radio signals to form a test environment for identity authentication that is independent of the external environment.

[0091] Furthermore, the monitoring and capturing module is specifically used for:

[0092] The interactive data between the electronic key module and the anti-theft controller in the vehicle communication module during the identity authentication test is monitored and captured multiple times to obtain multiple groups of first target data;

[0093] The interactive data between the anti-theft controller and the power immobilization controller in the vehicle communication module during the identity authentication test is monitored and captured multiple times to obtain multiple groups of second target data.

[0094] Furthermore, the analysis and processing module is specifically used for:

[0095] Analyze and process each group of first target data respectively to obtain multiple first target hash values ​​corresponding to the first target data;

[0096] Each group of second target data is analyzed and processed respectively to obtain a plurality of second target hash values ​​corresponding to the second target data.

[0097] Furthermore, the judgment module is specifically used for:

[0098] When at least two of the plurality of first target hash values ​​are consistent or at least two of the plurality of second target hash values ​​are consistent, determining that the security authentication mechanism used for the identity authentication is unreliable;

[0099] When the plurality of first target hash values ​​are completely inconsistent with each other and the plurality of second target hash values ​​are completely inconsistent with each other, it is determined that the security authentication mechanism used for the identity authentication is reliable.

[0100] Furthermore, the signal mode corresponding to the interactive data between the electronic key module and the anti-theft controller in the vehicle-mounted communication module is any one of a radio frequency signal, a Bluetooth signal and an NFC signal.

[0101] It should be noted that those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working process of the above-described device and each unit can refer to the corresponding process in the aforementioned electronic anti-theft device information security testing method embodiment, and will not be repeated here.

[0102] The apparatus provided in the above embodiment may be implemented in the form of a computer program. The computer program may be Figure 5The electronic anti-theft device information shown is run on a security test device.

[0103] An embodiment of the present application also provides an electronic anti-theft device information security testing device, comprising: a memory, a processor and a network interface connected via a system bus, wherein at least one instruction is stored in the memory, and the at least one instruction is loaded and executed by the processor to implement all or part of the steps of the aforementioned electronic anti-theft device information security testing method.

[0104] The network interface is used for network communication, such as sending assigned tasks, etc. Those skilled in the art will understand that Figure 5 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0105] The processor may be a CPU, or other general-purpose processors, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, etc. The processor is the control center of a computer device, and uses various interfaces and lines to connect various parts of the entire computer device.

[0106] The memory can be used to store computer programs and / or modules. The processor realizes various functions of the computer device by running or executing the computer programs and / or modules stored in the memory and calling the data stored in the memory. The memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, an application required for at least one function (such as a video playback function, an image playback function, etc.), etc.; the data storage area can store data created according to the use of the mobile phone (such as video data, image data, etc.), etc. In addition, the memory can include a high-speed random access memory, and can also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (SmartMediaCard, SMC), a secure digital (Securedigital, SD) card, a flash card (FlashCard), at least one disk storage device, a flash memory device or other volatile solid-state storage device.

[0107] The embodiment of the present application further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, all or part of the steps of the aforementioned electronic anti-theft device information security testing method are implemented.

[0108] The embodiment of the present application implements all or part of the aforementioned process, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of each of the above methods when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form, etc. The computer-readable medium may include: any entity or device capable of carrying computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electric carrier signal, telecommunication signal and software distribution medium, etc. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, the computer-readable medium does not include electric carrier signals and telecommunication signals.

[0109] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, servers or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) that contain computer-usable program code.

[0110] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems) and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0111] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or system including the element.

[0112] The above description is only a specific implementation of the present application, so that those skilled in the art can understand or implement the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest range consistent with the principles and novel features applied for herein.

Claims

1. An information security testing method for an electronic anti-theft device, characterized in that: The following steps are involved: Trigger the identity authentication test between the electronic key module and the vehicle communication module; The interactive data in the identity authentication test process is monitored and captured multiple times to obtain multiple sets of target data; Analyze and process each group of target data separately to obtain multiple target hash values; Determining whether the security authentication mechanism used for the identity authentication is reliable based on the consistency between the multiple target hash values; The interactive data in the identity authentication test process is monitored and captured multiple times to obtain multiple groups of target data, including: The interactive data between the electronic key module and the anti-theft controller in the vehicle communication module during the identity authentication test is monitored and captured multiple times to obtain multiple groups of first target data; The interactive data between the anti-theft controller and the power immobilization controller in the vehicle communication module during the identity authentication test is monitored and captured multiple times to obtain multiple sets of second target data; The method analyzes and processes each group of target data to obtain multiple target hash values, including: Analyze and process each group of first target data respectively to obtain multiple first target hash values ​​corresponding to the first target data; Analyze and process each group of second target data respectively to obtain multiple second target hash values ​​corresponding to the second target data; The determining whether the security authentication mechanism used for the identity authentication is reliable according to the consistency between the multiple target hash values ​​includes: When at least two of the plurality of first target hash values ​​are consistent or at least two of the plurality of second target hash values ​​are consistent, determining that the security authentication mechanism used for the identity authentication is unreliable; When the plurality of first target hash values ​​are completely inconsistent with each other and the plurality of second target hash values ​​are completely inconsistent with each other, it is determined that the security authentication mechanism used for the identity authentication is reliable.

2. The information security testing method of the electronic anti-theft device according to claim 1, characterized in that: Before the step of triggering the identity authentication test between the electronic key module and the vehicle-mounted communication module, the method further includes: External radio signals are shielded by a preset signal shielding module to form a test environment for identity authentication that is independent of the external environment.

3. The information security testing method of the electronic anti-theft device according to claim 1, characterized in that: The signal mode corresponding to the interactive data between the electronic key module and the anti-theft controller in the vehicle-mounted communication module is any one of a radio frequency signal, a Bluetooth signal and an NFC signal.

4. An information security testing system for an electronic anti-theft device, characterized in that: include: A trigger module, which is used to trigger an identity authentication test between the electronic key module and the vehicle communication module; A monitoring and capturing module is used to monitor and capture the interactive data during the identity authentication test multiple times to obtain multiple sets of target data; An analysis and processing module, which is used to analyze and process each group of target data respectively to obtain multiple target hash values; A judgment module, which is used to determine whether the security authentication mechanism used for the identity authentication is reliable according to the consistency between multiple target hash values; The monitoring and capturing module is specifically used to: monitor and capture the interactive data between the electronic key module and the anti-theft controller in the vehicle communication module during the identity authentication test multiple times to obtain multiple groups of first target data; monitor and capture the interactive data between the anti-theft controller in the vehicle communication module and the power immobilizer controller during the identity authentication test multiple times to obtain multiple groups of second target data; The analysis and processing module is specifically used to: analyze and process each group of first target data respectively to obtain a plurality of first target hash values ​​corresponding to the first target data; analyze and process each group of second target data respectively to obtain a plurality of second target hash values ​​corresponding to the second target data; The judgment module is specifically used to: when at least two first target hash values ​​among multiple first target hash values ​​are consistent or at least two second target hash values ​​among multiple second target hash values ​​are consistent, determine that the security authentication mechanism used for the identity authentication is unreliable; when the multiple first target hash values ​​are completely inconsistent and the multiple second target hash values ​​are completely inconsistent, determine that the security authentication mechanism used for the identity authentication is reliable.

5. The electronic anti-theft device information security testing system as claimed in claim 4, characterized in that: The device also includes a signal shielding module, which is used for: Shield external radio signals to form a test environment for identity authentication that is independent of the external environment.

6. An information security testing device for an electronic anti-theft device, characterized in that: include: A memory and a processor, wherein the memory stores at least one instruction, and the at least one instruction is loaded and executed by the processor to implement the information security testing method for an electronic anti-theft device according to any one of claims 1 to 3.

7. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the information security testing method for an electronic anti-theft device according to any one of claims 1 to 3 is implemented.

Images