Password testing system, method, device and storage medium for vehicle-mounted terminal

By designing a password testing system in the on-board terminal, and using the interface communication simulation module and the test agent module to automatically test the passwords of each interface, the problem of low manual testing efficiency in the existing technology is solved, and an efficient password testing process is achieved.

CN118467322BActive Publication Date: 2025-01-14DINGXUAN COMMERCIAL PASSWORD EVALUATION TECH (SHENZHEN) CO LTD
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202410926477.6
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-07-11
Publication Date
2025-01-14
Estimated Expiration
2044-07-11

AI Technical Summary

Technical Problem

In password security testing of vehicle terminals, the existing technology requires manual activation of test processes for different communication scenarios, resulting in low testing efficiency.

Method used

Design a password testing system for on-board terminals, including a password testing terminal, an interface communication simulation module and a test proxy module. By generating test signals and calculating test ciphertexts, automatically test the passwords of each interface, and use the interface communication simulation module to establish a signal channel. Send the test signal to the on-board terminal, and calculate the target ciphertext through the test proxy module to realize automated testing.

Benefits of technology

It improves the password testing efficiency of each interface of the vehicle terminal, reduces the operating time of the tester, and realizes an automated password testing process.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN118467322B_ABST
    Figure CN118467322B_ABST
Patent Text Reader

Abstract

This application discloses a cryptographic testing system, method, device, and storage medium for an in-vehicle terminal, belonging to the field of cryptographic testing technology. The system includes: a cryptographic testing terminal running a cryptographic testing program to generate a test signal and determine the test result of the in-vehicle terminal after receiving target ciphertext; an interface communication simulation module for sending the test signal to the in-vehicle terminal and feeding back the target ciphertext calculated by the in-vehicle terminal to the cryptographic testing terminal; and a test proxy module located in the in-vehicle terminal for calling the cryptographic program of the in-vehicle terminal to calculate the target ciphertext based on the test signal. This application improves the cryptographic testing efficiency of various interfaces of the in-vehicle terminal by generating a test signal through the cryptographic testing terminal, transmitting the test signal to the in-vehicle terminal through the interface communication simulation module, and determining the test result after the cryptographic testing terminal receives the target ciphertext calculated by the in-vehicle terminal based on the test signal.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the technical field of password testing, and in particular to a password testing system, method, device and storage medium for a vehicle-mounted terminal. Background Art

[0002] As a key link in ensuring communication security, vehicle terminals involve password protection of multiple module interfaces. Before the vehicle terminals leave the factory, testers need to simulate actual communication scenarios and conduct security tests on the passwords of different interfaces to avoid leakage of important user data.

[0003] In related technologies, different interfaces have different simulated communication scenarios and corresponding test processes when performing password security tests. In this case, based on different communication scenarios, testers need to manually start the corresponding test processes one by one. Manually starting the test usually takes a certain amount of time, which reduces the efficiency of the vehicle terminal password security test.

[0004] The above contents are only used to assist in understanding the technical solution of the present application and do not constitute an admission that the above contents are prior art. Summary of the invention

[0005] The main purpose of the present application is to provide a password testing system, method, device and storage medium for a vehicle-mounted terminal, aiming to solve the technical problem of low testing efficiency of the password security of the vehicle-mounted terminal.

[0006] To achieve the above objectives, the present application provides a password testing system for a vehicle-mounted terminal, the system comprising:

[0007] A cryptographic test terminal, running a cryptographic test program, for generating a test signal, calculating a test ciphertext, and determining a test result of the vehicle terminal according to the test ciphertext and the target ciphertext after receiving the target ciphertext;

[0008] An interface communication simulation module, used for sending the test signal to the vehicle-mounted terminal, and feeding back the target ciphertext calculated by the vehicle-mounted terminal to the cryptographic test terminal;

[0009] The test agent module is arranged in the vehicle-mounted terminal and is used to call the cryptographic program of the vehicle-mounted terminal to calculate the target ciphertext based on the test signal.

[0010] In one embodiment, the interface communication simulation module establishes a signal channel with the target interface in the vehicle terminal, and after determining that the signal channel is successfully established, determines that the target interface protocol is implemented correctly, and sends the test signal to the vehicle terminal through the signal channel.

[0011] In one embodiment, the interface communication simulation module includes:

[0012] A bus simulation device, used to simulate the bus environment, establish the signal channel with the bus interface of the vehicle terminal after receiving the test signal, and send the test signal to the vehicle terminal;

[0013] A service test module, configured to establish the signal channel with the service interface of the vehicle-mounted terminal after receiving the test signal, and send the test signal to the vehicle-mounted terminal;

[0014] The service test module is arranged in the mobile terminal. After receiving the test signal, the signal channel is established with the service interface of the vehicle terminal or the service test module according to the test signal type, and the test signal is sent to the vehicle terminal or the service test module.

[0015] In addition, to achieve the above-mentioned purpose, the present application also provides a password testing method for a vehicle-mounted terminal, which is applied to a password testing terminal, and the method comprises the following steps:

[0016] Determine a test signal of a target interface, and calculate a test ciphertext based on the test signal;

[0017] Sending the test signal to an interface communication simulation module corresponding to the interface, the interface communication simulation module is used to simulate the interface communication environment of the vehicle terminal, so that the vehicle terminal calculates and returns the target ciphertext based on the test signal;

[0018] After receiving the target ciphertext returned by the vehicle-mounted terminal through the target interface, the test ciphertext is compared with the target ciphertext, and the test result of the interface is determined according to the comparison result.

[0019] In one embodiment, the step of determining a test signal of a target interface and calculating a test ciphertext based on the test signal comprises:

[0020] Obtaining the algorithm identifier of the target interface from the database, and obtaining a preset test plaintext and test key;

[0021] Creating a data structure of the test signal, filling the test key, the test plaintext and the algorithm identifier into the data structure, and generating the test signal;

[0022] According to the algorithm identifier, the calculation steps of the test ciphertext are determined, and based on the calculation steps, the test key and the test plaintext, the test ciphertext is calculated.

[0023] In one embodiment, after receiving the target ciphertext returned by the vehicle terminal through the target interface, the step of comparing the test ciphertext with the target ciphertext and determining the test result of the interface according to the comparison result includes:

[0024] After receiving the target ciphertext from the vehicle-mounted terminal through the target interface, determining the test ciphertext of the test signal corresponding to the target interface;

[0025] Comparing the test ciphertext with the target ciphertext to determine the comparison result;

[0026] When the comparison results are the same, it is determined that the cryptographic program of the target interface is executed correctly;

[0027] Alternatively, when the comparison result is not the same, it is determined that there is an abnormality in the cryptographic program of the target interface, and a prompt message is output.

[0028] In one embodiment, after receiving the target ciphertext returned by the vehicle terminal through the target interface, comparing the test ciphertext with the target ciphertext, and determining the test result of the interface according to the comparison result, the method further includes:

[0029] Obtain the test results of a preset number of times of the target interface, and determine the test time corresponding to the test results;

[0030] Determine the average test time of the test results according to the test time and the preset number of times;

[0031] The average test time is used as the cryptographic algorithm performance of the cryptographic program corresponding to the target interface.

[0032] In one embodiment, after the step of sending the test signal to an interface communication simulation module corresponding to the interface, wherein the interface communication simulation module is used to simulate the interface communication environment of the vehicle terminal so that the vehicle terminal calculates and returns the target ciphertext based on the test signal, the method further includes:

[0033] Acquire channel data of the signal channel established by the interface communication simulation module;

[0034] Determining whether the signal channel is successfully established according to the channel protocol of the target interface and the channel data;

[0035] After the signal channel is successfully established, it is determined whether the channel protocol of the target interface is implemented correctly.

[0036] In addition, to achieve the above-mentioned purpose, the present application also provides a password testing device for a vehicle-mounted terminal, the device comprising: a memory, a processor, and a computer program stored on the memory and executable on the processor, the computer program being configured to implement the steps of the password testing method for the vehicle-mounted terminal as described above.

[0037] In addition, to achieve the above-mentioned purpose, the present application also provides a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by the processor, the steps of the password testing method of the vehicle terminal as described above are implemented.

[0038] One or more technical solutions proposed in this application have at least the following technical effects:

[0039] The present application generates test signals for each interface of the vehicle terminal through a cryptographic test terminal, calculates the test ciphertext of the interface according to the algorithm identifier corresponding to the test signal, creates a signal channel with the vehicle terminal to be tested through an interface communication simulation module, transmits the signal channel to the vehicle terminal, and through a test agent module, after the vehicle terminal receives the test signal, calls the cryptographic program of the vehicle terminal to calculate the target ciphertext, and then feeds it back to the cryptographic test terminal along the original route of the interface communication simulation module to determine the test result of the vehicle terminal, thereby realizing automated testing of different interfaces of the vehicle terminal and improving the efficiency of cryptographic testing of each interface. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0041] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0042] Figure 1 This is a functional module diagram of the first embodiment of the password testing system for the vehicle-mounted terminal of the present application;

[0043] Figure 2 This is a data transmission diagram of a password test of a vehicle-mounted terminal involved in the first embodiment of the password test system of the vehicle-mounted terminal of the present application;

[0044] Figure 3 This is a flow chart of the second embodiment of the password testing method for the vehicle-mounted terminal of the present application;

[0045] Figure 4This is a flow chart of a third embodiment of a password testing method for a vehicle-mounted terminal of the present application;

[0046] Figure 5 This is a flow chart of a fourth embodiment of a password testing method for a vehicle-mounted terminal of the present application;

[0047] Figure 6 A brief flowchart of the password testing method for the vehicle terminal of this application;

[0048] Figure 7 This is a structural diagram of a password testing device for a vehicle terminal in the hardware operating environment involved in an embodiment of the present application.

[0049] Label:

[0050] Description of Figure Numbers:

[0051] 100. Password test terminal; 101. Password test program;

[0052] 200, interface communication simulation module; 201, bus simulation device; 202, business test module; 203, service test module;

[0053] 300. Test agent module.

[0054] The realization of the purpose, functional features and advantages of this application will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0055] It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0056] In order to better understand the above technical solution, the above technical solution will be described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0057] The main solution of the embodiment of the present application is: generate test signals for each interface of the vehicle terminal, and calculate test ciphertext based on the test signals; send the test signals to the interface communication simulation module corresponding to the interface; after receiving the feedback target ciphertext, compare the test ciphertext with the target ciphertext, and determine the test result of the interface based on the comparison result.

[0058] Before the vehicle terminal leaves the factory, the tester needs to simulate the actual communication scenario and conduct security tests on the passwords of different interfaces to avoid the leakage of important user data. However, when performing security tests on passwords on different interfaces, the simulated communication scenarios and corresponding test processes are different. In this case, based on different communication scenarios, the tester needs to manually start the corresponding test processes one by one. The manual start of the test usually takes a certain amount of time, which reduces the efficiency of the vehicle terminal password security test.

[0059] The present application generates test signals for each interface of the vehicle terminal through a cryptographic test terminal, calculates the test ciphertext of the interface according to the algorithm identifier corresponding to the test signal, and creates a signal channel with the vehicle terminal to be tested through an interface communication simulation module, transmits the signal channel to the vehicle terminal, and after the vehicle terminal receives the test signal, calls the cryptographic program of the vehicle terminal through the test agent module to calculate the target ciphertext, and then feeds it back to the cryptographic test terminal along the original route of the interface communication simulation module to determine the test result of the vehicle terminal, thereby realizing automated testing of different interfaces of the vehicle terminal and improving the efficiency of cryptographic testing of each interface.

[0060] In order to better understand the above technical solution, exemplary embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present application and to fully convey the scope of the present application to those skilled in the art.

[0061] The present application embodiment provides a password testing system for a vehicle terminal, referring to Figure 1 , Figure 1 This is a functional module diagram of the first embodiment of the password testing system for the vehicle terminal of the present application.

[0062] In this embodiment, the password testing system includes: a password testing terminal 100, an interface communication simulation module 200, and a test agent module 300. The password testing terminal 100 includes a password testing program 101, which is used to run the password testing program to generate a test signal, calculate a test ciphertext, and after receiving the target ciphertext, determine the test result of the vehicle terminal according to the test ciphertext and the target ciphertext, thereby initiating the password test of each interface and calculating and determining the test result. The interface communication simulation module 200 is used to send the test signal to the vehicle terminal, and to feed back the target ciphertext calculated by the vehicle terminal to the password testing terminal 100. The test agent module is installed in the vehicle terminal, and is used to call the cryptographic algorithm of the vehicle terminal. After being called, the cryptographic algorithm will calculate the target ciphertext based on the test signal, and return the target ciphertext to the password testing terminal 100 through the interface communication simulation module.

[0063] Specifically, one end of the interface communication simulation module 200 is connected to the vehicle terminal. By simulating the communication scenarios required by the vehicle terminal to test each interface and establishing a signal channel with each interface, it can be determined whether the interface correctly implements the channel protocol. After determining that the signal channel is successfully established and determining that the target interface protocol is correctly implemented, the interface communication simulation module 200 can send the test signal generated and sent by the password test terminal 100 to the vehicle terminal through the signal channel.

[0064] It should be noted that the test signal is generated by the cryptographic test terminal 100, which includes a test key, a test plaintext and an algorithm identifier. The test key is the key of the target interface to be tested, the test plaintext is the communication information used for testing during the test, and the algorithm identifier is used to determine the target interface and the cryptographic algorithm adopted by the target interface.

[0065] In one implementation, the interface communication simulation module 200 includes a bus simulation device 201 , a business test module 202 , and a service test module 203 .

[0066] One end of the bus simulation device 201 is connected to the bus (CAN, Controller Area Network) interface of the vehicle terminal, and the other end is connected to the password test terminal 100. The bus simulation device 201 is used to simulate the automobile CAN bus, and after receiving the test signal of the password test module, it can establish a signal channel with the bus interface of the vehicle terminal and send the test signal to the vehicle terminal through the signal channel.

[0067] The service test module 203 is used to test the communication between the vehicle terminal and the third-party service provider to ensure that data leakage does not occur when the user uses the service items provided by the third-party service provider in the vehicle terminal. Therefore, during the test process, the service test module 203 needs to be connected to the business test module 202, and the business test module 202 receives the test signal sent by the password test terminal 100 and sends it to the service test module 203. After receiving the test signal sent by the business test module 202, the service test module 203 establishes a signal channel with the business interface of the vehicle terminal and sends the test signal to the vehicle terminal. The service test module can be deployed on the password test terminal or on a separate service test terminal.

[0068] The service test module 202 is set in the mobile terminal and is used to test the password of the vehicle terminal service function communication. The service test module 202 is connected to the vehicle terminal, the operation password test terminal and the service test module 203 at the same time. After receiving the test signal, the test signal type can be determined according to the algorithm identifier and other information in the test signal, and the sending target of the test signal can be determined. Among them, the sending target can be the vehicle terminal or the service test module 203. After establishing the signal channel with the service interface of the vehicle terminal or the service test module 203, the service test module 202 sends the test signal to the vehicle terminal or the service test module 203.

[0069] For example, Figure 2 As shown, Figure 2 The data transmission diagram of the vehicle terminal password test involved in this embodiment. Taking the vehicle network communication terminal (T-Box) as an example, during the test process of T-Box, it is necessary to perform password tests on the CAN interface, WiFi interface, Bluetooth interface and the Long-Term Evolution (LTE) interface of the vehicle telematics service provider (TSP). A sequencing program agent, namely the test agent module 300, is installed on the T-Box to call the T-Box password interface and respond to the test signal.

[0070] Reference Figure 2After generating the test signal, the password test terminal sends the test signal to the bus simulation device and the mobile terminal running the business test module. Among them, the mobile terminal runs the car remote operation business APP, and detects the correctness of the password usage of the three interfaces of LTE, Bluetooth, and WiFi through LTE, Bluetooth, and WiFi. The mobile terminal interacts with the device running the password detection program through USB, so that the password detection program can automatically send test signals and collect test results. The bus simulation device detects the correctness of the password usage of the bus interface of the T-Box. TSP simulates the car remote service provider, which is connected to T-Box through the public network LTE to detect the correctness and security of the password usage in the communication process between T-Box and TSP. The device simulating TSP can be optionally run on the same device as the password test terminal, or on multiple devices separately.

[0071] In addition, vehicle-mounted terminals such as the Internet of Vehicles OBD terminal and voice 4GTBOX terminal can also simulate scenarios and perform password tests through different interface communication simulation modules.

[0072] In an embodiment of the present application, the password testing system of the vehicle-mounted terminal includes three parts: a password testing terminal, an interface communication simulation module and a test agent module. The password testing terminal generates a test signal, establishes a signal channel with the vehicle-mounted terminal through the interface communication simulation module, sends the test signal to the vehicle-mounted terminal, and calls the password program through the test agent module in the vehicle-mounted terminal to calculate the target ciphertext, then returns to the password testing terminal to determine the test result. The password test of the interface to be tested can be automatically started at the same time, reducing the operation time required for the tester to start the password test and improving the password testing efficiency of the vehicle-mounted terminal.

[0073] Those skilled in the art will understand that Figure 1 The password test system structure of the vehicle-mounted terminal shown in the figure does not constitute a limitation on the password test system of the vehicle-mounted terminal, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0074] Based on the same inventive concept, the embodiment of the present application provides a password testing method for a vehicle-mounted terminal, which is applied to a password testing terminal, referring to Figure 3 , Figure 3 This is a flow chart of the second embodiment of the password testing method for the vehicle terminal of the present application.

[0075] It should be noted that the execution subject of this embodiment can be a password test terminal, or a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device that can realize the above functions, a password test device of a vehicle terminal, etc., and this embodiment does not specifically limit this. The following takes the password test terminal as an example to illustrate this embodiment and the following embodiments.

[0076] In this embodiment, the password testing method of the vehicle terminal includes steps S10 to S30:

[0077] Step S10: determining a test signal of a target interface, and calculating a test ciphertext based on the test signal;

[0078] In this embodiment, a password test program is run on the password test terminal. The password test program has an automatic sending script and a result collection script, can send a test signal and receive the target ciphertext, and schedule the various modules of the password test system through the test signal. Among them, the password test terminal can be a computer or a mobile terminal or other device that can run the password test program. The test signal is generated by the password test program and contains information such as test plaintext, test key and algorithm identifier. In order to facilitate the verification of the received target ciphertext, after the password test program generates and sends the test signal, it needs to calculate the test ciphertext according to the algorithm identifier in the test signal for verification of the target ciphertext. The target interface is the interface currently detected by the password test terminal among all the interfaces to be tested on the vehicle terminal.

[0079] Specifically, after determining the interface to be tested, the password testing program of the password testing terminal can obtain the algorithm identification of the target interface from the database storing the algorithm identification of each of the interfaces, and obtain the preset test plaintext and test key for testing. The password testing program can generate a test signal by creating a data structure of the test signal and filling the test key, test plaintext and algorithm identification into the data structure. At the same time, the password testing program can determine the cryptographic algorithm corresponding to the interface according to the algorithm identification of the test signal, that is, the calculation steps of the interface ciphertext during the password testing process. Based on the calculation steps, as well as the test key and the test plaintext, the test ciphertext is calculated.

[0080] As a feasible implementation method for calculating the test ciphertext, after obtaining the algorithm identifier, the cryptographic test terminal can determine the calculation steps of the test ciphertext according to the cryptographic algorithm corresponding to the algorithm identifier. In the process of calculating the test ciphertext, the cryptographic test program encrypts the test ciphertext based on the test key to generate the test ciphertext. The test ciphertext is used to represent the data structure after the test plaintext is encrypted.

[0081] For example, taking the symmetric encryption algorithm (AES, Advanced Encryption Standard) as an example, when the algorithm corresponding to the algorithm identifier is a symmetric encryption algorithm, the test plaintext can be evenly divided first, and the test key is used to perform multiple rounds of encryption operations on each of the divided parts, and the encrypted data is used as the test ciphertext. After receiving the test signal, the vehicle terminal can also encrypt the test plaintext based on the same operation to generate the target ciphertext.

[0082] Step S20: sending the test signal to an interface communication simulation module corresponding to the interface, wherein the interface communication simulation module is used to simulate the interface communication environment of the vehicle terminal, so that the vehicle terminal calculates and returns the target ciphertext based on the test signal;

[0083] Step S30: after receiving the target ciphertext returned by the vehicle-mounted terminal through the target interface, comparing the test ciphertext with the target ciphertext, and determining the test result of the interface according to the comparison result.

[0084] In this embodiment, after the password test terminal sends the test signal to the interface communication simulation module corresponding to the target interface currently being tested, the test signal can operate the interface communication simulation module to simulate the interface communication environment of the vehicle terminal, and establish a signal channel based on the channel protocol of the target interface. After the interface communication simulation module sends the test signal to the vehicle terminal through the signal channel and receives the target ciphertext calculated and returned by the test proxy module in the vehicle terminal calling the password program, it will return the target ciphertext to the password test terminal through the signal channel. The password test program will determine whether the password program corresponding to the target interface is executed correctly by comparing whether the target ciphertext and the test ciphertext are consistent.

[0085] Specifically, after receiving the target ciphertext returned by the target interface, the password test terminal needs to determine the test signal corresponding to the target ciphertext and the test ciphertext calculated based on the algorithm identifier in the test signal. The comparison result can be determined by whether the test ciphertext and the target ciphertext are the same. When the comparison result is the same, the password test terminal determines that the password program of the target interface is implemented correctly, or, when the comparison result is different, it determines that there is an abnormality in the password program of the target interface, and outputs a prompt message on the display interface or to the administrator terminal.

[0086] In one embodiment, after the vehicle terminal obtains the test signal, the test agent module will call the cryptographic program in the vehicle terminal, can determine the cryptographic algorithm according to the algorithm identifier in the test signal, and take the same encryption steps as the cryptographic test terminal, encrypt the test plaintext based on the test key, and generate the target ciphertext.

[0087] In another embodiment, the password test module can detect the decryption of the vehicle terminal in addition to the encryption of the vehicle terminal. In this case, the test signal can be replaced by the test ciphertext instead of the test plaintext, and the test agent module in the vehicle terminal, when recognizing that the test signal contains the test ciphertext, can call the password program of the vehicle terminal, decrypt the test ciphertext based on the test key, obtain the target plaintext and return it. After receiving the target plaintext, the password test module can compare the target plaintext with the test plaintext before encryption to determine the test result.

[0088] The embodiment of the present application generates test signals for each interface of the vehicle terminal through a password test terminal, and calculates the test ciphertext of the interface according to the algorithm identifier corresponding to the test signal, and creates a signal channel with the vehicle terminal to be tested through an interface communication simulation module, and transmits the signal channel to the vehicle terminal, and through a test agent module, after the vehicle terminal receives the test signal, calls the password program of the vehicle terminal to calculate the target ciphertext, and then feeds it back to the password test terminal along the original route of the interface communication simulation module to determine the test result of the vehicle terminal, thereby realizing automated testing of different interfaces of the vehicle terminal and improving the password testing efficiency of each interface.

[0089] Based on the same inventive concept, the present application also provides a third embodiment, referring to Figure 4 , Figure 4 This is a flow chart of the third embodiment of the password testing method for a vehicle network of the present application.

[0090] In this embodiment, after receiving the feedback target ciphertext as described in step S30, comparing the test ciphertext with the target ciphertext, and determining the test result of the interface according to the comparison result, steps S31 to S33 are also included:

[0091] Step S31: obtaining the test results of the target interface for a preset number of times, and determining the test time corresponding to the test results;

[0092] Step S32: determining an average test time of the test results according to the test time and the preset number of times;

[0093] Step S33: Using the average test time as the cryptographic algorithm performance of the cryptographic program corresponding to the target interface.

[0094] In this embodiment, the cryptographic test terminal can also test the cryptographic algorithm performance of each interface of the vehicle terminal, wherein the cryptographic algorithm performance is evaluated based on the calculation speed of the cryptographic program of the interface.

[0095] Specifically, the password test terminal can repeatedly perform the password test of the target interface based on a preset number of times, and determine the test time corresponding to the test result of each test of the target interface. According to the test time and the preset number of tests, the average test time of the test result is calculated and determined, and the average test time can be used as the password algorithm performance of the password program corresponding to the target interface.

[0096] Optionally, the password test terminal can also count the test abnormalities during the repeated password test. The test abnormalities include the test time being greater than a preset threshold and the test result being abnormal. The stability of the password program of the target interface is determined based on the proportion of the test abnormalities in the number of repeated password tests.

[0097] In an embodiment of the present application, the cryptographic testing terminal can repeatedly perform the cryptographic test a preset number of times, and calculate the average test time of the test results based on the test time corresponding to the test result of each test and the preset number of tests, as the cryptographic algorithm performance of the target interface, thereby evaluating the algorithm performance of the cryptographic program of the target interface.

[0098] Since the system introduced in the third embodiment of the present application is a system used to implement the method of the first embodiment of the present application, based on the method introduced in the first embodiment of the present application, the person skilled in the art can understand the specific structure and deformation of the system, so it is not repeated here. All systems used in the method of the first embodiment of the present application belong to the scope of protection of the present application.

[0099] Based on the same inventive concept, the present application also provides a fourth embodiment, referring to Figure 5 , Figure 5 This is a flow chart of the fourth embodiment of the password testing method for a vehicle network of the present application.

[0100] In this embodiment, after sending the test signal to the interface communication simulation module corresponding to the interface as described in step S20, steps S21 to S23 are also included:

[0101] Step S21: Acquire channel data of the signal channel established by the interface communication simulation module;

[0102] Step S22: judging whether the signal channel is successfully established according to the channel protocol of the target interface and the channel data;

[0103] Step S23: After the signal channel is successfully established, it is determined whether the channel protocol of the target interface is implemented correctly.

[0104] In this embodiment, the password test system also needs to detect whether the interface can correctly implement the channel protocol to ensure the normal communication of relevant data during the password test. The password test terminal can obtain the channel data in the communication module through the packet capture tool, and determine whether the signal channel is successfully established based on the channel data. After the signal channel is successfully established, it can be determined that the channel protocol of the target interface is correctly implemented.

[0105] Exemplarily, the cryptographic test terminal can check the handshake message, capture and analyze the handshake message during the communication process, verify whether the encryption parameters and session keys are successfully negotiated, and after the signal channel is established, try to send an encrypted data packet and receive a response. If the data packet can be successfully transmitted and the content is correct, it means that the signal channel has been successfully established. At the same time, the cryptographic test terminal can also confirm whether there is a success or failure message related to the establishment of the signal channel by checking the logs or event records of the vehicle terminal and the client.

[0106] Optionally, the interface communication simulation module can also determine whether the signal channel is successfully established based on the channel data, and send the establishment success information to the password test terminal. After receiving the establishment success information, the password test terminal determines that the channel protocol of the target interface is implemented correctly.

[0107] In an embodiment of the present application, the cryptographic testing system can determine whether the channel protocol of the target interface is correctly implemented based on whether the signal channel is successfully established, thereby further testing the cryptographic communication process of the target interface.

[0108] Since the system introduced in the fourth embodiment of the present application is a system used to implement the method of the first embodiment of the present application, based on the method introduced in the first embodiment of the present application, the person skilled in the art can understand the specific structure and deformation of the system, so it is not repeated here. All systems used in the method of the first embodiment of the present application belong to the scope of protection of this application.

[0109] For example, in order to help understand the implementation process of the password testing method of the vehicle terminal obtained by combining this embodiment with the above-mentioned embodiment 1, as shown in FIG. Figure 6 As shown, Figure 6 A brief flow chart of a password testing method for a vehicle terminal is provided, specifically:

[0110] Reference Figure 6 ,The cryptographic test of the vehicle terminal mainly involves whether the ,channel protocol is implemented correctly, whether the cryptographic algorithm of the vehicle ,terminal is correct, and the algorithm performance of the target interface.

[0111] Among them, after the cryptographic test system generates a test signal, it establishes a signal channel through the bus simulation device, business test module and service test module respectively, transmits the test signal to the vehicle terminal, calculates the test ciphertext at the same time, and establishes the signal channel to determine whether the signal channel is successfully established.

[0112] After the vehicle-mounted terminal calculates the target ciphertext, it compares the target ciphertext with the test ciphertext. When the target ciphertext and the test ciphertext are the same, it is determined that the cryptographic program is executed correctly. At the same time, the cryptographic test of the cryptographic program is reread, and the cryptographic algorithm performance of the cryptographic program is determined based on the average test time of the cryptographic test.

[0113] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the password testing method of the vehicle terminal of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0114] The present application provides a password testing device for a vehicle-mounted terminal, the device comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the password testing method for the vehicle-mounted terminal in the above-mentioned embodiment one.

[0115] Reference below Figure 7 , which shows a schematic diagram of the structure of a password test device for a vehicle-mounted terminal suitable for implementing an embodiment of the present application. The password test device for a vehicle-mounted terminal in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 7 The password testing device of the vehicle-mounted terminal shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0116] like Figure 7As shown, the password test device of the vehicle terminal may include a processing device 1001 (such as a core processor, a graphics processor, etc.), which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM: Read Only Memory) 1002 or the program loaded from the storage device 1003 to the random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the password test device of the vehicle terminal are also stored. The processing device 1001, ROM1002 and RAM1004 are connected to each other through a bus 1005. The input / output (I / O) interface 1006 is also connected to the bus. Typically, the following systems can be connected to the I / O interface 1006: input devices 1007 including, for example, a touch screen, a touchpad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; output devices 1008 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; storage devices 1003 including, for example, a magnetic tape, a hard disk, etc.; and communication devices 1009. The communication device 1009 can allow the password test device of the vehicle terminal to communicate wirelessly or wired with other devices to exchange data. Although the figure shows the password test device of the vehicle terminal with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems may be implemented or have alternatively.

[0117] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0118] The password testing device for the vehicle terminal provided by the present application adopts the password testing method for the vehicle terminal in the above embodiment, which can solve the technical problem of low efficiency of the password testing of the vehicle terminal. Compared with the prior art, the beneficial effects of the password testing device for the vehicle terminal provided by the present application are the same as the beneficial effects of the password testing method for the vehicle terminal provided by the above embodiment, and the other technical features of the password testing device for the vehicle terminal are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0119] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0120] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0121] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the password testing method for the vehicle-mounted terminal in the above-mentioned embodiment.

[0122] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM: Random Access Memory), a read-only memory (ROM: Read Only Memory), an erasable programmable read-only memory (EPROM: Erasable Programmable Read Only Memory or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM: CD-Read Only Memory), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency: Radio Frequency), etc., or any suitable combination of the above.

[0123] The computer-readable storage medium may be included in the password testing device of the vehicle-mounted terminal; or may exist independently without being assembled into the password testing device of the vehicle-mounted terminal.

[0124] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the cryptographic testing device of the vehicle terminal, the cryptographic testing device of the vehicle terminal: determines the test signal of the target interface, and calculates the test ciphertext based on the test signal; sends the test signal to the interface communication simulation module corresponding to the interface, and the interface communication simulation module is used to simulate the interface communication environment of the vehicle terminal, so that the vehicle terminal calculates and returns the target ciphertext based on the test signal; after receiving the target ciphertext returned by the vehicle terminal through the target interface, compares the test ciphertext with the target ciphertext, and determines the test result of the interface according to the comparison result.

[0125] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0126] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0127] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0128] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned password testing method for the vehicle-mounted terminal, and can solve the technical problem of low efficiency of password testing for the vehicle-mounted terminal. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the password testing method for the vehicle-mounted terminal provided by the above-mentioned embodiment, and will not be described in detail here.

[0129] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A password testing system for a vehicle terminal, characterized in that: The password testing system of the vehicle-mounted terminal includes: A password test terminal, running a password test program, the password test program is used to obtain an algorithm identifier of a target interface, generate a test signal according to the algorithm identifier, and calculate a test ciphertext according to the cryptographic algorithm of the algorithm identifier, and after receiving the target ciphertext, compare the test ciphertext with the target ciphertext to see if they are consistent, and determine the test result of the vehicle-mounted terminal according to the comparison result, wherein, when the comparison result is the same, the password test terminal determines that the cryptographic program of the target interface is implemented correctly, or, when the comparison result is not the same, it is determined that there is an abnormality in the cryptographic program of the target interface, and the test signal includes a test plaintext, a test key and the algorithm identifier; An interface communication simulation module is used to establish a signal channel based on the channel protocol of the target interface, send the test signal to the vehicle terminal through the signal channel, and determine whether the target interface correctly implements the channel protocol, and feed back the target ciphertext calculated by the vehicle terminal to the password test terminal, the interface communication simulation module includes a bus simulation device, a service test module and a business test module; The test agent module is arranged in the vehicle terminal, and is used to call the cryptographic algorithm corresponding to the vehicle terminal according to the algorithm identifier of the received test signal, calculate the target ciphertext based on the test signal, and feed back the target ciphertext to the cryptographic test terminal.

2. The system according to claim 1, characterized in that The interface communication simulation module establishes the signal channel with the target interface in the vehicle terminal, and after determining that the signal channel is successfully established, determines that the target interface protocol is implemented correctly, and sends the test signal to the vehicle terminal through the signal channel.

3. A password testing method for a vehicle-mounted terminal, characterized in that: Applied to a password testing terminal, the method comprises the following steps: Obtain the algorithm identifier of the target interface from the database, and obtain the preset test plaintext and test key; Creating a data structure of a test signal, filling the test key, the test plaintext and the algorithm identifier into the data structure, and generating the test signal; Determine, according to the algorithm identifier, a calculation step of the test ciphertext, and calculate the test ciphertext based on the calculation step, the test key and the test plaintext; Sending the test signal to an interface communication simulation module corresponding to the interface, the interface communication simulation module is used to simulate the interface communication environment of the vehicle terminal, so that the vehicle terminal calculates and returns the target ciphertext based on the test signal; After receiving the target ciphertext returned by the vehicle-mounted terminal through the target interface, the test ciphertext and the target ciphertext are compared for consistency, and the test result of the interface is determined based on the comparison result, wherein, when the comparison result is the same, it is judged that the cryptographic program of the target interface is implemented correctly, or, when the comparison result is different, it is judged that there is an abnormality in the cryptographic program of the target interface.

4. The method according to claim 3, characterized in that After receiving the target ciphertext returned by the vehicle terminal through the target interface, the step of comparing the test ciphertext with the target ciphertext and determining the test result of the interface according to the comparison result includes: After receiving the target ciphertext from the vehicle-mounted terminal through the target interface, determining the test ciphertext of the test signal corresponding to the target interface; Comparing the test ciphertext with the target ciphertext to determine the comparison result; When the comparison results are the same, it is determined that the cryptographic program of the target interface is executed correctly; Alternatively, when the comparison result is not the same, it is determined that there is an abnormality in the cryptographic program of the target interface, and a prompt message is output.

5. The method according to claim 4, characterized in that After the step of comparing the test ciphertext with the target ciphertext after receiving the target ciphertext returned by the vehicle terminal through the target interface, and determining the test result of the interface according to the comparison result, the method further includes: Obtain the test results of a preset number of times of the target interface, and determine the test time corresponding to the test results; Determine the average test time of the test results according to the test time and the preset number of times; The average test time is used as the cryptographic algorithm performance of the cryptographic program corresponding to the target interface.

6. The method according to claim 5, characterized in that After the step of sending the test signal to the interface communication simulation module corresponding to the interface, wherein the interface communication simulation module is used to simulate the interface communication environment of the vehicle terminal so that the vehicle terminal calculates and returns the target ciphertext based on the test signal, the method further includes: Acquire channel data of the signal channel established by the interface communication simulation module; Determining whether the signal channel is successfully established according to the channel protocol of the target interface and the channel data; After the signal channel is successfully established, it is determined whether the channel protocol of the target interface is implemented correctly.

7. A password testing device for a vehicle terminal, characterized in that: The device comprises: a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the password testing method for the vehicle-mounted terminal as described in any one of claims 3 to 6.

8. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the password testing method for the vehicle terminal as described in any one of claims 3 to 6 are implemented.

Citation Information

Patent Citations

  • Automobile electronic control unit (ECU) secret key simulation implementation method and system and verification method thereof

    CN102779089A