Automatic encryption method and system for automobile product

Abstract

The invention provides an automatic encryption method of an automobile product, which comprises the following steps: S1, a transit server automatically downloads and sends a key file meeting requirements according to a key request sent by a local server; s2, extracting the key file by the local automatic encryption equipment, writing key information in the key file into the product, and encrypting the product; and S3, performing encryption verification on the encrypted product, and returning a verification result. The factory local server is erected, and the communication file and format content are defined, so that the communication problem of the factory automatic encryption equipment, the transit server and the automobile server is solved, and the functions of automatically downloading the secret key and feeding back verification information in real time are realized.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an automatic encryption method and system for automobile products. Background Art

[0002] With the development of intelligent and connected cars, the automatic encryption technology of automotive products has received increasing attention. At present, encryption technology has been widely used in the field of automotive data security. However, after the globalization of the industry, headquarters, transit, and factories are often distributed across regions, resulting in communication barriers, inability to directly connect, and inability to meet real-time requirements; and the encryption standards of different car companies are not unified, resulting in difficulties in the encryption process. One encryption system is difficult to meet the encryption needs of cars and factories in multiple different regions.

[0003] The Chinese patent document with publication number CN111191266A discloses a file encryption method system, the method comprising: a transit server receives a first file encrypted by a client using a first key; the transit server obtains the first key from the key system, and uses the first key to decrypt the first file to obtain a decrypted uploaded file; the transit server obtains a second key from the key system, and uses the second key to encrypt the uploaded file to obtain a second file; the transit server uploads the second file to the file server for storage. In this application, each file is uploaded, downloaded, and stored using a different random key for encryption and decryption in each link. Even if the key of a certain link of the same client sending the file is cracked, the file cannot be obtained, which increases the difficulty coefficient of file encryption / decryption cracking in each link of file upload, download, and storage, improves the security of the key, and increases the protection strength of the file. The encryption of this patent cannot select different encrypted files according to different clients, and there is no link to verify the encrypted information, making the encryption process incomplete.

[0004] Therefore, there is a need for an efficient, unified automatic encryption method and system for automotive instrument products that has the ability to defend against new types of attacks. Summary of the invention

[0005] In view of the defects in the prior art, an object of the present invention is to provide an automatic encryption method and system for automobile products.

[0006] An automatic encryption method for an automobile product provided by the present invention comprises:

[0007] Step S1: The transit server automatically downloads and sends a key file that meets the requirements according to the key request sent by the local server;

[0008] Step S2: The local automatic encryption device extracts the key file and writes the key information in the key file into the product to encrypt the product;

[0009] Step S3: Perform encryption verification on the encrypted product and return the verification result.

[0010] Preferably, the step S1 comprises:

[0011] Step S1.1: Instruct the local server to monitor the remaining number of keys in the internal key pool. When the number of keys is less than a set threshold, the download request file is automatically sent to the transit server.

[0012] The content of the request file includes: request ID, car server abbreviation, key type, project name, requested key quantity and key attributes;

[0013] Step S1.2: After receiving the request file, the transfer server converts the request file into a first format file that conforms to the preset format of the designated automobile server, and sends it to the corresponding automobile server;

[0014] Step S1.3: the automobile server verifies whether the format of the received first format file is consistent with the preset format;

[0015] If they are consistent, the requested number of key files are sent down and integrated into a second format file and sent back to the transit server, and the process goes to step S1.4;

[0016] If they are inconsistent, the received first format file is deleted and encryption is terminated;

[0017] Step S1.4: After receiving the second format file, the transit server automatically decrypts and divides the second format file into N individual key files, and then sends the individual key files to the local server.

[0018] Preferably, step S2 comprises:

[0019] Step S2.1: Instruct the local automatic encryption device to extract all the individual key files of the local server and write the key information in the individual key files into the product;

[0020] Step S2.2: The product calculates the corresponding verification information based on the written key information, and returns the verification information to the local automatic encryption device;

[0021] Step S2.3: Instruct the local automatic encryption device to record the verification information and upload it to the local server.

[0022] Preferably, step S3 comprises:

[0023] Step S3.1: After receiving the verification information returned by the product, the local server automatically generates a first verification request file and uploads it to the transit server;

[0024] Step S3.2: After receiving the first verification request file, the transit server generates a second verification request file that meets the requirements of the designated automobile server and forwards it to the corresponding automobile server;

[0025] Step S3.3: Instructing the automobile server to verify whether the content of the received second verification request file is consistent with the preset file content;

[0026] If they are consistent, the verification feedback file is returned to the transit server and the process goes to step S3.4;

[0027] If they are inconsistent, deleting the received second verification request file;

[0028] Step S3.4: After receiving the verification feedback file, the transit server automatically converts it into a feedback file and sends it to the local server;

[0029] The feedback file content includes: total status code description, status code, product serial number;

[0030] Step S3.5: The local server automatically analyzes the feedback file and determines the feedback result; specifically, when the status code in the feedback file is 0, it means that the feedback file is normal and the encrypted product packaging is allowed to enter the warehouse; when the status code in the feedback file is 1, it means that the feedback file is abnormal and the product is refused to enter the warehouse.

[0031] Preferably, the step S2.1 comprises:

[0032] Step S2.1.1: Obtain key information from each single key file, and write the key information into the product through a preset diagnostic instruction;

[0033] The key information includes: key security code and key message authentication code;

[0034] Step S2.1.2: Based on the written key security code and key message authentication code, calculate and obtain the unique corresponding key security verification code and key message authentication code to verify the correctness of the key information.

[0035] An automatic encryption system for an automobile product provided according to the present invention comprises:

[0036] Module M1: The transit server automatically downloads and sends the key file that meets the requirements according to the key request sent by the local server;

[0037] Module M2: The local automatic encryption device extracts the key file and writes the key information in the key file into the product to encrypt the product;

[0038] Module M3: Perform encryption verification on the encrypted product and return the verification result.

[0039] Preferably, the module M1 comprises:

[0040] Module M1.1: Instruct the local server to monitor the remaining number of keys in the internal key pool. When the number of keys is less than the set threshold, it automatically sends a download request file to the transit server.

[0041] The content of the request file includes: request ID, car server abbreviation, key type, project name, requested key quantity and key attributes;

[0042] Module M1.2: After receiving the request file, the transfer server converts the request file into a first format file that conforms to the preset format of the designated automobile server, and sends it to the corresponding automobile server;

[0043] Module M1.3: instructing the automobile server to verify whether the format of the received first format file is consistent with the preset format;

[0044] If they are consistent, the requested number of key files will be sent down and integrated into a second format file and sent back to the transfer server to enter module M1.4;

[0045] If they are inconsistent, the received first format file is deleted and encryption is terminated;

[0046] Module M1.4: After receiving the second format file, the transit server automatically decrypts and divides the second format file into N individual key files, and then sends the individual key files to the local server.

[0047] Preferably, the module M2 comprises:

[0048] Module M2.1: Instruct the local automatic encryption device to extract all the individual key files of the local server and write the key information in the individual key files into the product;

[0049] Module M2.2: The product calculates the corresponding verification information based on the written key information and returns the verification information to the local automatic encryption device;

[0050] Module M2.3: Instruct the local automatic encryption device to record the verification information and upload it to the local server.

[0051] Preferably, the module M3 includes:

[0052] Module M3.1: After receiving the verification information returned by the product, the local server automatically generates the first verification request file and uploads it to the transit server;

[0053] Module M3.2: After receiving the first verification request file, the transit server generates a second verification request file that meets the requirements of the designated automobile server and forwards it to the corresponding automobile server;

[0054] Module M3.3: Instructing the automobile server to verify whether the content of the received second verification request file is consistent with the preset file content;

[0055] If they are consistent, the verification feedback file is returned to the transfer server and module M3.4 is entered;

[0056] If they are inconsistent, deleting the received second verification request file;

[0057] Module M3.4: After receiving the verification feedback file, the transit server automatically converts it into a feedback file and sends it to the local server;

[0058] The feedback file content includes: total status code description, status code, product serial number;

[0059] Module M3.5: The local server automatically analyzes the feedback file and determines the feedback result; specifically, when the status code in the feedback file is 0, it means that the feedback file is normal and the encrypted product packaging is allowed to enter the warehouse; when the status code in the feedback file is 1, it means that the feedback file is abnormal and the product is refused to enter the warehouse.

[0060] Preferably, the module M2.1 comprises:

[0061] Module M2.1.1: Get key information from each single key file and write the key information into the product through preset diagnostic instructions;

[0062] The key information includes: key security code and key message authentication code;

[0063] Module M2.1.2: Based on the written key security code and key message authentication code, calculate the unique corresponding key security verification code and key message authentication code to verify the correctness of the key information.

[0064] Compared with the prior art, the present invention has the following beneficial effects:

[0065] 1. The present invention solves the communication problem between the factory automatic encryption equipment and the transfer server and the car server by setting up a factory local server and defining the communication file and format content, and realizes the functions of automatic key download and real-time feedback of verification information; at the same time, the key information used in the product encryption process is unique and secure, further improving the safety performance of the product;

[0066] 2. The present invention solves the problem of automatic encryption in the product production process by independently developing an automatic encryption program, realizes automatic production without manual intervention, improves production efficiency, and avoids quality problems that may be caused by manual operation;

[0067] 3. The local server of the present invention can monitor the remaining number of keys in the key pool and automatically send a download request when the number of keys is insufficient, thereby ensuring the timely supply and effective management of keys. In addition, the key file is divided into individual key files after downloading, which is convenient for management and use;

[0068] 4. After the encryption is completed, the present invention verifies the key information of the product through the automobile server and returns the verification result. This double verification mechanism ensures the accuracy and reliability of the encryption and avoids the potential risks caused by encryption errors. BRIEF DESCRIPTION OF THE DRAWINGS

[0069] Other features, objects and advantages of the present invention will become more apparent from the detailed description of non-limiting embodiments made with reference to the following drawings:

[0070] Figure 1 A flow chart of the automatic encryption method for the automobile product of the present invention;

[0071] Figure 2 This is a schematic diagram of the first part of Example 1 of the present invention;

[0072] Figure 3 This is a schematic diagram of the second part of Embodiment 1 of the present invention;

[0073] Figure 4 This is a schematic diagram of the third part of Embodiment 1 of the present invention;

[0074] Figure 5 Schematic diagram of the entire process of Example 1 of the present invention. DETAILED DESCRIPTION

[0075] The present invention is described in detail below in conjunction with specific embodiments. The following embodiments will help those skilled in the art to further understand the present invention, but are not intended to limit the present invention in any form. It should be noted that, for those of ordinary skill in the art, several changes and improvements can also be made without departing from the concept of the present invention. These all belong to the protection scope of the present invention.

[0076] Example 1

[0077] Part 1: Automatic key download

[0078] Step 1. The factory local server monitors the remaining number in the key pool. If it is less than the set threshold, it automatically sends the download request file Request.json to the transit server.

[0079] Define the contents of the Request.json file as follows:

[0080]

[0081] Step 2. After receiving the download request file Request.json, the transit server converts the request content into the format file IF107-01 specified by the car server and sends it to the car server.

[0082] Step 3. After receiving IF107-01, the car server verifies that the file is compliant. After completion, it sends the key file integration file IF108-01 containing the requested number to the transit server.

[0083] Step 4. After receiving the integrated file IF108-01, the transfer server automatically decrypts it and splits it into individual key files. The key files are forwarded to the key pool of the factory local server in the form of a compressed package.

[0084] Part 2: Product Automatic Encryption

[0085] Step 1. The factory automatic encryption device grabs a single key file from the factory local server and writes the key information into the product through the automatic encryption program.

[0086] Automatic encryption process:

[0087] 1.1 Get SafeKeyNumber from a single key file, a total of 16 bytes, and write it to the product through the instruction 2E diagnostic instruction. SafeKeyNumber is the ID of the key, generated by the car server, and is unique. After being written into the product, it plays an anti-theft and traceability role.

[0088] 1.2 Get Safe Key M1, M2, and M3 information from a single key file, a total of 64 bytes, generated by the car server, unique, and part of the key. After writing to the product through the 2E diagnostic instruction, the product automatically returns SafeKeyM4 and SafeKeyM5 verification information. SafeKeyM4 and SafeKeyM5 are automatically calculated by the product based on the written Safe Key M1, M2, and M3. They are unique and are used to verify whether the SafeKey is correctly written into the product. The device automatically records this information.

[0089] 1.3 Obtain MAC Key M1, M2, and M3 information from a single key file, totaling 64 bytes, generated by the car server, unique, and part of the key. Write to the product through the 2E diagnostic command, and the product automatically returns MACM4 and MACM5 verification information. MACM4 and MACM5 are automatically calculated by the product based on the written MAC Key M1, M2, and M3, and are unique and used to verify whether the MAC Key is correctly written into the product. The device automatically records this information

[0090] Step 2. The factory's automatic encryption device then uploads the verification information returned by the product to the factory's local server.

[0091] Part 3: Online verification of encrypted information

[0092] Step 1. After receiving the verification information returned by the product, the factory local server automatically generates the upload request file Upload.json and uploads it to the transit server.

[0093] Define the contents of the Upload.json file as follows:

[0094]

[0095]

[0096] Step 2. After receiving the upload request file Upload.json, the transit server automatically generates a verification request file IF109-01 that meets the requirements of the car and forwards it to the car server.

[0097] Step 3. After receiving the verification request file IF109-01, the automobile server automatically verifies the compliance of the file content and returns the verification feedback file IF110-01 to the transit server.

[0098] Step 4. After receiving the verification feedback file IF110-01, the transit server automatically converts it into the upload feedback file Upload_Response.json and sends it to the factory local server.

[0099] Define the contents of the Upload_Response.json file as follows:

[0100]

[0101]

[0102] Step 5. The factory local server automatically analyzes the uploaded feedback file Upload_Response.json in real time and determines the feedback result. If the value of Status_Code in the uploaded feedback file is 0, it means that there is no abnormality in the verification process, and the product packaging is allowed to enter the warehouse; if it is 1, it means that the verification failed, and the following error code is displayed:

[0103] 010:Input data error(Required item missing)

[0104] 011:Input data error(Attribute error)

[0105] 012:Input data error(Authentication error)

[0106] 020:Hash error(Hash value unmatch)

[0107] 090:Business regulation in progress(Function restricted)

[0108] 091:Business regulation in progress(User restricted)

[0109] 100:System error

[0110] Example 2

[0111] An automatic encryption method for an automobile product, comprising:

[0112] Step S1: The transit server automatically downloads and sends a key file that meets the requirements according to the key request sent by the local server;

[0113] Step S2: The local automatic encryption device extracts the key file and writes the key information in the key file into the product to encrypt the product;

[0114] Step S3: Perform encryption verification on the encrypted product and return the verification result.

[0115] Specifically, the step S1 includes:

[0116] Step S1.1: Instruct the local server to monitor the remaining number of keys in the internal key pool. When the number of keys is less than a set threshold, the download request file is automatically sent to the transit server.

[0117] The content of the request file includes: request ID, car server abbreviation, key type, project name, requested key quantity and key attributes;

[0118] Step S1.2: After receiving the request file, the transfer server converts the request file into a first format file that conforms to the preset format of the designated automobile server, and sends it to the corresponding automobile server;

[0119] Step S1.3: the automobile server verifies whether the format of the received first format file is consistent with the preset format;

[0120] If they are consistent, the requested number of key files are sent down and integrated into a second format file and sent back to the transit server, and the process goes to step S1.4;

[0121] If they are inconsistent, the received first format file is deleted and encryption is terminated;

[0122] Step S1.4: After receiving the second format file, the transit server automatically decrypts and divides the second format file into N individual key files, and then sends the individual key files to the local server.

[0123] Specifically, step S2 includes:

[0124] Step S2.1: Instruct the local automatic encryption device to extract all the individual key files of the local server and write the key information in the individual key files into the product;

[0125] Step S2.2: The product calculates the corresponding verification information based on the written key information, and returns the verification information to the local automatic encryption device;

[0126] Step S2.3: Instruct the local automatic encryption device to record the verification information and upload it to the local server.

[0127] Specifically, step S3 includes:

[0128] Step S3.1: After receiving the verification information returned by the product, the local server automatically generates a first verification request file and uploads it to the transit server;

[0129] Step S3.2: After receiving the first verification request file, the transit server generates a second verification request file that meets the requirements of the designated automobile server and forwards it to the corresponding automobile server;

[0130] Step S3.3: Instructing the automobile server to verify whether the content of the received second verification request file is consistent with the preset file content;

[0131] If they are consistent, the verification feedback file is returned to the transit server and the process goes to step S3.4;

[0132] If they are inconsistent, deleting the received second verification request file;

[0133] Step S3.4: After receiving the verification feedback file, the transit server automatically converts it into a feedback file and sends it to the local server;

[0134] The feedback file content includes: total status code description, status code, product serial number;

[0135] Step S3.5: The local server automatically analyzes the feedback file and determines the feedback result; specifically, when the status code in the feedback file is 0, it means that the feedback file is normal and the encrypted product packaging is allowed to enter the warehouse; when the status code in the feedback file is 1, it means that the feedback file is abnormal and the product is refused to enter the warehouse.

[0136] Specifically, the step S2.1 includes:

[0137] Step S2.1.1: Obtain key information from each single key file, and write the key information into the product through a preset diagnostic instruction;

[0138] The key information includes: key security code and key message authentication code;

[0139] Step S2.1.2: Based on the written key security code and key message authentication code, calculate and obtain the unique corresponding key security verification code and key message authentication code to verify the correctness of the key information.

[0140] The present invention also provides an automatic encryption system for an automobile product. The automatic encryption system for an automobile product can be implemented by executing the process steps of the automatic encryption method for the automobile product. That is, those skilled in the art can understand the automatic encryption method for the automobile product as a preferred implementation of the automatic encryption system for the automobile product.

[0141] An automatic encryption system for automobile products includes: module M1: a transfer server automatically downloads and sends a key file that meets the requirements according to a key request sent by a local server; module M2: a local automatic encryption device extracts the key file, writes the key information in the key file into the product, and encrypts the product; module M3: performs encryption verification on the encrypted product and returns the verification result.

[0142] Specifically, the module M1 includes: Module M1.1: instruct the local server to monitor the remaining number of keys in the internal key pool, and when the number of keys is less than the set threshold, automatically send a download request file to the transit server; wherein the content of the request file includes: request ID, car server abbreviation, key type, project name, requested key number and key attributes; Module M1.2: after the transit server receives the request file, it converts the request file into a first format file that conforms to the preset format of the specified car server, and sends it to the corresponding car server; Module M1.3: instruct the car server to verify whether the format of the received first format file is consistent with the preset format; if consistent, issue the requested number of key files, and integrate them into a second format file and send it back to the transit server, and enter module M1.4; if inconsistent, delete the received first format file and end encryption; Module M1.4: after the transit server receives the second format file, it automatically decrypts and divides the second format file into N single key files, and then sends the single key file to the local server.

[0143] Specifically, the module M2 includes: Module M2.1: instruct the local automatic encryption device to extract all single key files of the local server, and write the key information in the single key file into the product; Module M2.2: the product calculates the corresponding verification information based on the written key information, and returns the verification information to the local automatic encryption device; Module M2.3: instruct the local automatic encryption device to record the verification information and upload it to the local server.

[0144] Specifically, the module M3 includes: module M3.1: after receiving the verification information returned by the product, the local server is ordered to automatically generate a first verification request file and upload it to the transit server; module M3.2: after receiving the first verification request file, the transit server generates a second verification request file that meets the requirements of the specified automobile server and forwards it to the corresponding automobile server; module M3.3: the automobile server is ordered to verify whether the content of the received second verification request file is consistent with the preset file content; if consistent, the verification feedback file is returned to the transit server and module M3.4 is entered; if inconsistent, the received second verification request file is deleted; module M3.4: after receiving the verification feedback file, the transit server automatically converts it into a feedback file and sends it to the local server; the feedback file content includes: total status code description, status code, product serial number; module M3.5: the local server automatically analyzes the feedback file and determines the feedback result; specifically, when the status code in the feedback file is 0, it means that the feedback file is normal and the encrypted product packaging is allowed to be put into storage; when the status code in the feedback file is 1, it means that the feedback file is abnormal and the product is refused to be put into storage.

[0145] Specifically, the module M2.1 includes: module M2.1.1: obtaining key information from each single key file, and writing the key information into the product through preset diagnostic instructions; the key information includes: key security code and key message authentication code; module M2.1.2: based on the written key security code and key message authentication code, calculating the unique corresponding key security verification code and key message verification code to verify the correctness of the key information.

[0146] Those skilled in the art know that, in addition to realizing the system and its various devices, modules, and units provided by the present invention in a purely computer-readable program code, it is entirely possible to realize the same functions in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers by logically programming the method steps. Therefore, the system and its various devices, modules, and units provided by the present invention can be considered as a hardware component, and the devices, modules, and units included therein for realizing various functions can also be regarded as structures within the hardware component; the devices, modules, and units for realizing various functions can also be regarded as both software modules for realizing the method and structures within the hardware component.

[0147] The above describes the specific embodiments of the present invention. It should be understood that the present invention is not limited to the above specific embodiments, and those skilled in the art can make various changes or modifications within the scope of the claims, which does not affect the essence of the present invention. In the absence of conflict, the embodiments of the present application and the features in the embodiments can be combined with each other arbitrarily.

Claims

1. An automatic encryption method for automobile products, characterized in that: include: Step S1: The transit server automatically downloads and sends a key file that meets the requirements according to the key request sent by the local server; Step S2: The local automatic encryption device extracts the key file and writes the key information in the key file into the product to encrypt the product; Step S3: Perform encryption verification on the encrypted product and return the verification result.

2. The automatic encryption method for automobile products according to claim 1, characterized in that: The step S1 comprises: Step S1.1: Instruct the local server to monitor the remaining number of keys in the internal key pool. When the number of keys is less than a set threshold, the download request file is automatically sent to the transit server. The content of the request file includes: request ID, car server abbreviation, key type, project name, requested key quantity and key attributes; Step S1.2: After receiving the request file, the transfer server converts the request file into a first format file that conforms to the preset format of the designated automobile server, and sends it to the corresponding automobile server; Step S1.3: the automobile server verifies whether the format of the received first format file is consistent with the preset format; If they are consistent, the requested number of key files are sent down and integrated into a second format file and sent back to the transit server, and the process goes to step S1.4; If they are inconsistent, the received first format file is deleted and encryption is terminated; Step S1.4: After receiving the second format file, the transit server automatically decrypts and divides the second format file into N individual key files, and then sends the individual key files to the local server.

3. The automatic encryption method for automobile products according to claim 1, characterized in that: The step S2 comprises: Step S2.1: Instruct the local automatic encryption device to extract all individual key files of the local server and write the key information in the individual key files into the product; Step S2.2: The product calculates the corresponding verification information based on the written key information, and returns the verification information to the local automatic encryption device; Step S2.3: Instruct the local automatic encryption device to record the verification information and upload it to the local server.

4. The automatic encryption method for automobile products according to claim 1, characterized in that: The step S3 comprises: Step S3.1: After receiving the verification information returned by the product, the local server automatically generates a first verification request file and uploads it to the transit server; Step S3.2: After receiving the first verification request file, the transit server generates a second verification request file that meets the requirements of the designated automobile server and forwards it to the corresponding automobile server; Step S3.3: Instructing the automobile server to verify whether the content of the received second verification request file is consistent with the preset file content; If they are consistent, the verification feedback file is returned to the transit server and the process goes to step S3.4; If they are inconsistent, deleting the received second verification request file; Step S3.4: After receiving the verification feedback file, the transit server automatically converts it into a feedback file and sends it to the local server; The feedback file content includes: total status code description, status code, product serial number; Step S3.5: The local server automatically analyzes the feedback file and determines the feedback result; specifically, when the status code in the feedback file is 0, it means that the feedback file is normal and the encrypted product packaging is allowed to enter the warehouse; when the status code in the feedback file is 1, it means that the feedback file is abnormal and the product is refused to enter the warehouse.

5. The automatic encryption method for automobile products according to claim 3, characterized in that: The step S2.1 comprises: Step S2.1.1: Obtain key information from each single key file, and write the key information into the product through a preset diagnostic instruction; The key information includes: key security code and key message authentication code; Step S2.1.2: Based on the written key security code and key message authentication code, calculate and obtain the unique corresponding key security verification code and key message authentication code to verify the correctness of the key information.

6. An automatic encryption system for automobile products, characterized in that: include: Module M1: The transit server automatically downloads and sends the key file that meets the requirements according to the key request sent by the local server; Module M2: The local automatic encryption device extracts the key file and writes the key information in the key file into the product to encrypt the product; Module M3: Perform encryption verification on the encrypted product and return the verification result.

7. The automatic encryption system for automobile products according to claim 6, characterized in that: The module M1 comprises: Module M1.1: Instruct the local server to monitor the remaining number of keys in the internal key pool. When the number of keys is less than the set threshold, it automatically sends a download request file to the transit server. The content of the request file includes: request ID, car server abbreviation, key type, project name, requested key quantity and key attributes; Module M1.2: After receiving the request file, the transfer server converts the request file into a first format file that conforms to the preset format of the designated automobile server, and sends it to the corresponding automobile server; Module M1.3: instructing the automobile server to verify whether the format of the received first format file is consistent with the preset format; If they are consistent, the requested number of key files will be sent down and integrated into a second format file and sent back to the transfer server to enter module M1.4; If they are inconsistent, the received first format file is deleted and encryption is terminated; Module M1.4: After receiving the second format file, the transit server automatically decrypts and divides the second format file into N individual key files, and then sends the individual key files to the local server.

8. The automatic encryption system for automobile products according to claim 6, characterized in that: The module M2 comprises: Module M2.1: Instruct the local automatic encryption device to extract all the individual key files of the local server and write the key information in the individual key files into the product; Module M2.2: The product calculates the corresponding verification information based on the written key information and returns the verification information to the local automatic encryption device; Module M2.3: Instruct the local automatic encryption device to record the verification information and upload it to the local server.

9. The automatic encryption system for automobile products according to claim 6, characterized in that: The module M3 comprises: Module M3.1: After receiving the verification information returned by the product, the local server automatically generates the first verification request file and uploads it to the transit server; Module M3.2: After receiving the first verification request file, the transit server generates a second verification request file that meets the requirements of the designated automobile server and forwards it to the corresponding automobile server; Module M3.3: Instructing the automobile server to verify whether the content of the received second verification request file is consistent with the preset file content; If they are consistent, the verification feedback file is returned to the transfer server and module M3.4 is entered; If they are inconsistent, deleting the received second verification request file; Module M3.4: After receiving the verification feedback file, the transit server automatically converts it into a feedback file and sends it to the local server; The feedback file content includes: total status code description, status code, product serial number; Module M3.5: The local server automatically analyzes the feedback file and determines the feedback result; specifically, when the status code in the feedback file is 0, it means that the feedback file is normal and the encrypted product packaging is allowed to enter the warehouse; when the status code in the feedback file is 1, it means that the feedback file is abnormal and the product is refused to enter the warehouse.

10. The automatic encryption system for automobile products according to claim 8, characterized in that: The module M2.1 comprises: Module M2.1.1: Get key information from each single key file and write the key information into the product through preset diagnostic instructions; The key information includes: key security code and key message authentication code; Module M2.1.2: Based on the written key security code and key message authentication code, calculate the unique corresponding key security verification code and key message authentication code to verify the correctness of the key information.

Images