Vehicle remote control authentication method and system

Abstract

The present invention discloses a vehicle remote control authentication method and system, which relates to the field of vehicle control technology, including: responding to a remote control vehicle request, starting a multi-factor authentication process, and obtaining user authentication data; inputting the authentication data into a first generative adversarial network for data verification to obtain first real authentication data; encrypting the first real authentication data to obtain ciphertext data; sending the ciphertext data to a vehicle end, so that the vehicle end authenticates the first real authentication data based on the ciphertext data. Through a multi-level generative adversarial network, a complex encryption method and a dynamic monitoring mechanism, the security problems existing in the remote control system of new energy vehicles are innovatively solved from multiple dimensions, providing a safer and more reliable technical guarantee for the remote control of new energy vehicles.

Description

Technical Field

[0001] The present invention relates to the field of vehicle control technology, and in particular to a vehicle remote control authentication method and system. Background Art

[0002] With the rapid development and popularization of new energy vehicle technology, remote control function has become an important part of user experience and vehicle management. Remote control technology enables users to remotely operate vehicle start-up, unlocking, air conditioning adjustment and other functions through smart devices, greatly facilitating users' daily use.

[0003] However, the existing remote control systems for new energy vehicles face some serious security issues and technical challenges in practical applications, especially in terms of identity authentication and data communication security.

[0004] The above contents are only used to assist in understanding the technical solution of the present invention and do not constitute an admission that the above contents are prior art. Summary of the invention

[0005] The main purpose of the present invention is to provide a vehicle remote control authentication method and system, aiming to solve the technical problem of low security of identity authentication during the remote control process of new energy vehicles.

[0006] To achieve the above object, the present invention provides a vehicle remote control authentication method, which is applied to a user terminal and comprises the following steps:

[0007] Respond to the request for remote control of the vehicle, initiate the multi-factor authentication process, and obtain the user's authentication data;

[0008] Inputting the authentication data into a first generative adversarial network for data verification to obtain first true authentication data;

[0009] Encrypting the first real authentication data to obtain ciphertext data;

[0010] The ciphertext data is sent to the vehicle end, so that the vehicle end authenticates the first real authentication data based on the ciphertext data.

[0011] In one embodiment, the authentication data includes an input password, biometric information, and a dynamic password, and the step of inputting the authentication data into a first generative adversarial network for data verification to obtain first real authentication data includes:

[0012] Generate a first authentication parameter by using a hash function on the input password;

[0013] The biometric information is used to generate a second authentication parameter through a biometric feature extraction function;

[0014] Generate a third authentication parameter by using the dynamic password through a hash function;

[0015] The first authentication parameter, the second authentication parameter, and the third authentication parameter are input into a first generative adversarial network for data verification to obtain first true authentication data.

[0016] In one embodiment, the step of inputting the first authentication parameter, the second authentication parameter, and the third authentication parameter into a first generative adversarial network for data verification to obtain first real authentication data includes:

[0017] Obtaining the first authentication parameter, the second authentication parameter, the noise matrix corresponding to the third authentication parameter and the first session key;

[0018] Input a first generative adversarial network to generate false authentication data based on the first authentication parameter, the second authentication parameter, the third authentication parameter, a noise matrix corresponding to the first authentication parameter, the second authentication parameter, and the third authentication parameter, and a first session key;

[0019] Comparing and judging the first authentication parameter, the second authentication parameter, the third authentication parameter, and the false authentication data through the first generative adversarial network to obtain a first judgment result;

[0020] When the first judgment result meets a preset authenticity threshold, the first authentication parameter, the second authentication parameter and the third authentication parameter are determined to be first authentic authentication data.

[0021] In one embodiment, the step of encrypting the first real authentication data to obtain ciphertext data includes:

[0022] Obtaining a first session key, a first preset prime number, a first encryption coefficient, a second encryption coefficient, an encrypted data dimension value, a first frequency factor, and a first authentication data dimension value;

[0023] Generate a second session key through a hash function based on the first real authentication data, the first session key, the first preset prime number, the first encryption coefficient, and the first authentication data dimension value;

[0024] The first real authentication data is encrypted by the second encryption coefficient, the encrypted data dimension value, the first frequency factor and the second session key through a symmetric encryption algorithm to obtain ciphertext data.

[0025] In addition, to achieve the above-mentioned purpose, the present invention also provides a vehicle remote control authentication method, which is applied to a vehicle side and comprises the following steps:

[0026] Receive ciphertext data transmitted by the user end;

[0027] Decoding the ciphertext data to obtain first real authentication data;

[0028] Inputting the first true authentication data into a second generative adversarial network for verification to obtain second true authentication data;

[0029] Performing an integrity check on the second real authentication data to obtain an integrity check result;

[0030] When the integrity check result is passed, identity authentication is performed on the second real authentication data according to a preset authentication rule to obtain an identity authentication result;

[0031] When the identity authentication result is passed, the remote control authority of the user terminal is activated so that the user terminal can remotely control the vehicle.

[0032] In one embodiment, before the step of receiving the first real authentication data transmitted by the user terminal, the method further includes:

[0033] Establishing a communication connection with the user end through the Bluetooth protocol to generate a first secret key;

[0034] When a key is detected, the legitimacy of the key is verified, and when the legitimacy of the key is verified, a second secret key is generated;

[0035] The first secret key and the second secret key are processed by a hash function to obtain a first session key, and the session key is used to identify and match the user end.

[0036] In one embodiment, the step of inputting the first real authentication data into a second generative adversarial network for verification to obtain second real authentication data includes:

[0037] Obtain random encryption coefficients and generate data dimension values;

[0038] Inputting the random encryption coefficient, the generated data dimension value, the first real authentication data and the ciphertext data into a second generative adversarial network to generate forged communication data;

[0039] Performing data tampering simulation on the first authentic authentication data, the ciphertext data, and the forged communication data through a discriminant function to obtain a second judgment result;

[0040] When the second judgment result meets a preset authenticity threshold, the first authentic authentication data is determined to be second authentic authentication data.

[0041] In one embodiment, the step of performing an integrity check on the second real authentication data to obtain an integrity check result includes:

[0042] Obtain a second preset prime number and a second authentication data dimension value;

[0043] Performing an integrity check on the second preset prime number, the second authentication data dimension value, and the second real authentication data through a hash function to obtain an integrity check result;

[0044] When the integrity check result matches the preset integrity threshold, it is determined that the second authentic authentication data integrity check passes.

[0045] In one embodiment, the step of performing identity authentication on the second real authentication data according to a preset authentication rule to obtain an identity authentication result includes:

[0046] Obtain the second frequency factor and the authentication rule dimension value;

[0047] Authentication is performed on the second frequency factor, the authentication rule dimension value, and the second real authentication data to obtain an authentication result;

[0048] When the identity authentication result matches the preset identity authentication standard, it is determined that the second real authentication data identity authentication passes.

[0049] In addition, to achieve the above-mentioned purpose, the present invention also proposes a vehicle remote control authentication system, which includes a user end and a vehicle end, and the vehicle remote control authentication method described above is executed on the user end, and the vehicle remote control authentication method described above is executed on the vehicle end.

[0050] One or more technical solutions proposed in this application have at least the following technical effects:

[0051] In response to a request for remote control of a vehicle, a multi-factor authentication process is initiated to obtain the user's authentication data; the authentication data is input into a first generative adversarial network for data verification to obtain first real authentication data; the first real authentication data is encrypted to obtain ciphertext data; the ciphertext data is sent to a vehicle end, so that the vehicle end authenticates the first real authentication data based on the ciphertext data. Through a multi-level generative adversarial network, complex encryption methods and a dynamic monitoring mechanism, the security issues existing in the remote control system of new energy vehicles are innovatively solved from multiple dimensions, providing a safer and more reliable technical guarantee for the remote control of new energy vehicles. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0053] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0054] Figure 1 This is a flow chart of a first embodiment of a vehicle remote control authentication method applied to a user terminal of the present application;

[0055] Figure 2 A flow chart of the second embodiment of the vehicle remote control authentication method of the present application;

[0056] Figure 3 This is a flow chart of a first embodiment of a vehicle remote control authentication method applied to a vehicle side of the present application;

[0057] Figure 4 A structural block diagram of the vehicle remote control authentication method provided for this application;

[0058] Figure 5 This is a schematic diagram of the device structure of the hardware operating environment involved in the vehicle remote control authentication method in the embodiment of the present application.

[0059] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0060] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0061] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0062] In the communication process between new energy vehicles and user devices, especially when using Bluetooth technology for data transmission, traditional remote control systems also face security risks such as data tampering, man-in-the-middle attacks, and data interception. Although Bluetooth communication has good performance in short-range wireless communications, its signals are easily intercepted and interfered with, especially in public environments. Attackers can simulate legitimate devices or intercept signals to conduct man-in-the-middle attacks or forge communication data, thereby controlling the vehicle or obtaining sensitive information. In this case, existing technologies often lack effective protection measures and multi-level verification mechanisms, resulting in the system's inability to accurately identify and prevent potential security threats.

[0063] Therefore, the present invention solves the deficiencies and potential safety hazards in the prior art and improves the security and reliability of the system through a multi-level security protection mechanism and advanced encryption technology.

[0064] Based on this, the embodiment of the present application provides a vehicle remote control authentication method, referring to Figure 1 , Figure 1 This is a flow chart of a first embodiment of a vehicle remote control authentication method applied to a user terminal of the present application.

[0065] In this embodiment, the vehicle remote control authentication method includes steps S10 to S40:

[0066] Step S10, responding to the remote control vehicle request, starting a multi-factor authentication process, and obtaining the user's authentication data;

[0067] It should be noted that a multi-factor authentication process is started on a user device, and the multi-factor authentication process includes at least two authentication methods of entering a password, fingerprint recognition, facial recognition, and dynamic password verification.

[0068] It should be understood that the user's authentication data refers to the password entered by the user, the user's fingerprint, the user's facial information, and the dynamic verification code randomly generated by the device. Multi-Factor Authentication (MFA) is a security system that requires users to provide multiple independent authentication factors to confirm their identity. Remote control is a technology that allows users to operate computers, devices, or systems through a network or remote connection. Remote control is often used in scenarios such as technical support, server management, and home device control.

[0069] It can be understood that the present embodiment is applied to the user end, and the user end can be a mobile phone, a computer or other terminal through which the user can remotely connect to the car.

[0070] Step S20, inputting the authentication data into a first generative adversarial network for data verification to obtain first true authentication data;

[0071] In a specific implementation, the user's authentication data is input into the first generator of the first-layer generative adversarial network. The first generator of the first-layer generative adversarial network generates false authentication data with noise disturbance. The discriminator of the first-layer generative adversarial network compares the real authentication data with the generated false authentication data to distinguish and identify the forged authentication data. Only the real authentication data verified by the first discriminator of the first-layer generative adversarial network is further transmitted.

[0072] It should be noted that the first real authentication data is the authentication data of the user verified by the first generator.

[0073] Step S30, encrypting the first real authentication data to obtain ciphertext data;

[0074] It should be noted that the real authentication data verified by the first discriminator of the first-layer generative adversarial network is transmitted between the new energy vehicle and the user device through Bluetooth technology, and the real authentication data is encrypted by an encryption algorithm.

[0075] It should be understood that the ciphertext data is the real authentication data after encryption.

[0076] In a feasible implementation manner, step 30 includes steps A11 to A13:

[0077] Step A11: Obtain a first session key, a first preset prime number, a first encryption coefficient, a second encryption coefficient, an encrypted data dimension value, a first frequency factor, and a first authentication data dimension value;

[0078] It should be noted that the first preset prime number is a predefined large prime number P, and the first encryption coefficient is an encryption coefficient related to the authentication data. , the second encryption coefficient is the random encryption coefficient related to the real authentication data and , the encrypted data dimension value is the dimension m of the encrypted data, and the first frequency factor is the frequency factor , the first authentication data dimension value is the dimension n of the authentication data.

[0079] Step A12: Generate a second session key through a hash function based on the first real authentication data, the first session key, the first preset prime number, the first encryption coefficient, and the first authentication data dimension value;

[0080] It should be noted that in the first layer of the generative adversarial network, the first discriminator After verification, the real authentication data generated Encryption is required to generate a session key Used for data encryption, as follows:

[0081]

[0082] Where H(x) is a hash function. is the session key generated in step A33, i.e., the first session key, is the real authentication data verified by the first discriminator, For bitwise XOR operation, is a modulo operation, P is a predefined large prime number, i.e., a first preset prime number, is the first encryption coefficient related to the authentication data, n is the dimension value of the first authentication data, and e is the base of the natural logarithm. The second session key is .

[0083] Step A13: Encrypt the first real authentication data using the second encryption coefficient, the encrypted data dimension value, the first frequency factor and the second session key through a symmetric encryption algorithm to obtain ciphertext data.

[0084] In the specific implementation, the generated session key is used Authenticate data Encryption is performed using a symmetric encryption algorithm, as shown below:

[0085]

[0086] Among them, C is the encrypted ciphertext data, Indicates the use of session keys Perform AES encryption operations. and is a random encryption coefficient related to the real authentication data, i.e., the second encryption coefficient, is the first frequency factor, m is the encrypted data dimension value, is the matrix Hadamard product operation;

[0087] Step S40, sending the ciphertext data to the vehicle end, so that the vehicle end authenticates the first real authentication data based on the ciphertext data.

[0088] It should be noted that the encrypted ciphertext data C is transmitted through the Bluetooth module, and the Bluetooth low energy consumption is used during the transmission process. protocol, and attach an integrity check code during transmission , as follows:

[0089]

[0090] in, is a message authentication code used to verify data integrity, H(x) is a hash function, is the matrix Hadamard product operation, is the frequency factor related to the current transmitted data, q is the dimension of the transmitted data, and Q is the predefined modulus.

[0091] It can be understood that this strategy uses an encryption algorithm to encrypt the real authentication data, and introduces an integrity check code to ensure the integrity and reliability of the data during transmission. Before data transmission, the ciphertext data and check code generated by the session key and authentication data can effectively prevent the data from being intercepted or tampered with during transmission. At the same time, the check code is verified at the receiving end to ensure that the data has not been tampered with or forged, further enhancing the security of Bluetooth communication.

[0092] This embodiment provides a vehicle remote control authentication method, which responds to a request for remote control of a vehicle, starts a multi-factor authentication process, and obtains user authentication data; inputs the authentication data into a first generative adversarial network for data verification to obtain first real authentication data; encrypts the first real authentication data to obtain ciphertext data; and sends the ciphertext data to a vehicle end, so that the vehicle end authenticates the first real authentication data based on the ciphertext data. Through a multi-level generative adversarial network, a complex encryption method, and a dynamic monitoring mechanism, the security issues existing in the remote control system of new energy vehicles are innovatively solved from multiple dimensions, providing a safer and more reliable technical guarantee for the remote control of new energy vehicles.

[0093] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 2 , Figure 2 This is a flow chart of the second embodiment of the vehicle remote control authentication method applied to the user end of the present application, step S20 includes steps S201 to S204:

[0094] Step S201, generating a first authentication parameter by using a hash function on the input password;

[0095] In the specific implementation, the multi-factor authentication process is started on the user's device, and the user enters the password Perform the first step of verification, password Through the hash function Generate hash value , generate the authentication parameter matrix , as follows:

[0096]

[0097] in, is the session key, and is a randomly selected encryption coefficient, is the predefined authentication transformation matrix, As initial authentication data input to the first generator of the first layer of the generative adversarial network .

[0098] It should be noted that the first authentication parameter is the authentication parameter matrix ; A hash function is a one-way cryptographic system that transforms an input of arbitrary length into an output of fixed length, which is the hash value.

[0099] Step S202, generating a second authentication parameter from the biometric information through a biometric feature extraction function;

[0100] In the specific implementation, the session key is used , biometric authentication on the user's device, including fingerprint recognition and facial recognition At least one of them is respectively subjected to the biometric feature extraction function and Generate feature vectors and and the session key Generate a biometric authentication matrix by combining , as follows:

[0101]

[0102] in, and is the random encryption coefficient related to biometrics, As the second set of authentication data input to the first generator of the first layer of the generative adversarial network .

[0103] It should be noted that the second authentication parameter is the biometric authentication matrix .

[0104] Step S203, generating a third authentication parameter by using a hash function to generate the dynamic password;

[0105] In the specific implementation, dynamic password verification is performed on the user device, and the dynamic password Generated by time synchronization algorithm, dynamic password data Through the hash function Generate hash value , generate the time synchronization authentication matrix , as follows:

[0106]

[0107] in, is the frequency factor related to the current time t, As the third set of authentication data input to the first generator .

[0108] It should be noted that the third authentication parameter is the time synchronization authentication matrix .

[0109] Step S204: input the first authentication parameter, the second authentication parameter, and the third authentication parameter into the first generative adversarial network for data verification to obtain first true authentication data.

[0110] In a feasible implementation, step S204 includes steps A21 to A24:

[0111] Step A21: Obtain the noise matrix corresponding to the first authentication parameter, the second authentication parameter, the third authentication parameter, and the first session key;

[0112] It should be noted that the noise matrices corresponding to the first authentication parameter, the second authentication parameter, and the third authentication parameter are , , .

[0113] Step A22: generating false authentication data by inputting a first generative adversarial network based on the first authentication parameter, the second authentication parameter, the third authentication parameter, the noise matrix corresponding to the first authentication parameter, the second authentication parameter, the third authentication parameter, and the first session key;

[0114] In the specific implementation, the first generator of the first layer of the generative adversarial network Receive authentication parameter matrix , Biometric Authentication Matrix , Time Synchronization Authentication Matrix Then, generate fake authentication data with noise perturbation , as follows:

[0115]

[0116] in, , , For the corresponding noise matrix, through the session key and random perturbation generation, is the matrix Hadamard product operation, Input to the discriminator as fake authentication data .

[0117] Step A23: using a first generative adversarial network to compare and judge the first authentication parameter, the second authentication parameter, the third authentication parameter, and the false authentication data to obtain a first judgment result;

[0118] In the specific implementation, the first discriminator of the first layer of the generative adversarial network Receive and compare real authentication data With the generated fake authentication data , the first discriminator Use the discriminant function D(x) for judgment, as follows:

[0119]

[0120] in, represents the trace of the matrix, Represents the Frobenius norm of the matrix, the discriminant result is the output value of the discriminant function.

[0121] Step A24: When the first judgment result meets the preset authenticity threshold, the first authentication parameter, the second authentication parameter and the third authentication parameter are determined to be the first authentic authentication data.

[0122] In the specific implementation, verification through the first-layer generative adversarial network is allowed only when the discrimination result meets the preset authenticity threshold.

[0123] This strategy introduces GAN into the identity authentication of new energy vehicles, greatly improving the security of authentication. Traditional remote control systems mostly rely on a single authentication method, such as static passwords or biometrics, which are vulnerable to various forms of network attacks. To solve this problem, this application scheme introduces a two-layer generative adversarial network to strictly verify the user's identity authentication data. Specifically, the first layer of the generative adversarial network (GAN) first generates false authentication data with noise perturbations, and then compares the real authentication data with the generated false authentication data through a discriminator. Only through the real authentication data can it enter the next layer of verification. This method effectively increases the difficulty for attackers to forge authentication data and fundamentally improves the security of the system.

[0124] This embodiment provides a vehicle remote control authentication method, introduces a multi-factor authentication process, and enhances the system's anti-attack capability by combining at least two authentication methods of password, fingerprint recognition, facial recognition, and dynamic password verification, and further utilizing a two-layer generative adversarial network to verify authentication data and identify forged data. By performing noise perturbation on the input multi-factor authentication data and verifying it with a two-layer generative adversarial network, it is possible to effectively identify and prevent forged authentication data and man-in-the-middle attacks, thereby ensuring that only authentic and strictly verified user identities can obtain remote control permissions.

[0125] Based on the first and second embodiments of the present application applied to the user terminal, the same or similar contents as the above embodiments can be referred to the above introduction, and will not be repeated in the following. Figure 3 , Figure 3 This is a flow chart of a first embodiment of a vehicle remote control authentication method applied to a vehicle side of the present application.

[0126] In this embodiment, the vehicle remote control authentication method includes steps S50 to S100:

[0127] Step S50, receiving ciphertext data transmitted by the user terminal;

[0128] It should be noted that the present embodiment is applied to the vehicle side, that is, various vehicles that can be remotely controlled.

[0129] In the specific implementation, on the car side, the ciphertext data C and the message authentication code are received through the Bluetooth module , verify the correctness of the message authentication code.

[0130] In a feasible implementation manner, before step S50, steps A31 to A33 are also included:

[0131] Step A31: Establishing a communication connection with the user terminal through the Bluetooth protocol and generating a first secret key;

[0132] It should be noted that an initial communication connection is established between the user device and the new energy vehicle, the devices are bound through Bluetooth technology, and a physical key is used for the first authentication to ensure a unique match between the user device and the new energy vehicle.

[0133] In the specific implementation, the Bluetooth module of the user device is started, and the Bluetooth pairing mode is activated in the control system of the new energy vehicle. Realize the initial communication connection between user equipment and new energy vehicles, including Indicates the Bluetooth version used. After the initial communication connection is established, a random key is generated. The random key is stored in the control system of the user device and the new energy vehicle. Unique matching for communication.

[0134] It should be understood that the first secret key is a random secret key. .

[0135] Step A32: When the key is detected, the legitimacy of the key is verified, and when the legitimacy of the key is verified, a second secret key is generated;

[0136] It should be noted that the key is a physical key, a car key.

[0137] In the specific implementation, a physical key is used to authenticate the new energy vehicle for the first time. The physical key communicates with the near field communication module of the new energy vehicle. Perform data exchange, verify the legitimacy of physical keys, and generate keys ,in An authentication key generated from a physical key.

[0138] It should be understood that the second secret key is the authentication key .

[0139] Step A33: Process the first key and the second key through a hash function to obtain a first session key, which is used to identify and match the user end;

[0140] In the specific implementation, the random key Key generated with physical key Combined, a unique session key is generated through the hash function H(x) , as follows:

[0141]

[0142] in, Represents a bitwise exclusive OR operation, Serves as the encryption key for all subsequent communications between the user device and the new energy vehicle.

[0143] It should be noted that after successfully generating and verifying the session key After that, the binding relationship between the user device and the new energy vehicle is confirmed, and the unique identifier of the user device is Unique identifier for new energy vehicles Perform associated storage so that the relationship between the user device and the vehicle can be uniquely identified and matched each time communication occurs;

[0144] After the binding is completed, the Bluetooth module will automatically disconnect the initial pairing connection to prevent unauthorized devices from attempting to connect. At this time, the unique match between the user device and the new energy vehicle is completed.

[0145] It should be understood that the first session key is the only session key .

[0146] Step S60, decoding the ciphertext data to obtain first real authentication data;

[0147] In the specific implementation, on the vehicle side, the ciphertext data C and the message authentication code are received through the Bluetooth module , verify the correctness of the message authentication code, as follows:

[0148]

[0149] in, is the received ciphertext data, is the received message authentication code, H(x) is the hash function, if the received Attached to the transmission If they are consistent, it is confirmed that the data has not been tampered with, and the receiving end proceeds to the next step of decryption operation;

[0150] The decryption operation uses the session key known to the receiving end Decrypt to get the original real authentication data , as follows:

[0151]

[0152]

[0153] in, L means use session key Perform AES decryption operation, It is the real authentication data after decryption.

[0154] Step S70, inputting the first real authentication data into the second generative adversarial network for verification to obtain second real authentication data;

[0155] It should be noted that some solutions on the market may lack dynamic monitoring of the connection status and authentication validity after authentication. Once authentication is completed, the user's device may be unmonitored for a long time, increasing the risk of being attacked;

[0156] This strategy continuously monitors the connection status and authentication validity of the user's device, ensuring that the remote control operation is immediately interrupted and an alert is sent to the user in a timely manner once an abnormality is found. This highly sensitive security monitoring mechanism is difficult to provide with other solutions.

[0157] In a feasible implementation, step S70 includes steps A41 to A44:

[0158] Step A41: Obtain random encryption coefficients and generate data dimension values;

[0159] It should be noted that the random encryption coefficient is the random encryption coefficient related to the real authentication data and the ciphertext data. , and , generate data dimension value, that is, generate data dimension r.

[0160] Step A42: inputting the random encryption coefficient, the generated data dimension value, the first real authentication data and the ciphertext data into the second generative adversarial network to generate forged communication data;

[0161] In the specific implementation, after the ciphertext data C is transmitted to the receiving end of the new energy vehicle via Bluetooth, the second layer of the generative adversarial network is started, in which the second generator Simulate potential man-in-the-middle attacks and generate forged communication data , to simulate data tampering;

[0162] Second Generator Based on the real authentication data received and ciphertext data C to generate forged communication data , as follows:

[0163]

[0164]

[0165] in, , and is the random encryption coefficient related to the real authentication data and ciphertext data, r is the dimension of the generated data, Represents the generation process of the generator, It is a bitwise XOR operation.

[0166] Step A43: using a discriminant function to simulate data tampering on the first real authentication data, the ciphertext data, and the forged communication data to obtain a second judgment result;

[0167] In the specific implementation, the second discriminator Receive and compare real authentication data The corresponding communication data C and the forged communication data , discriminator Use the discriminant function to compare the two, as follows:

[0168]

[0169] in, represents the trace of the matrix, represents the Frobenius norm of the matrix, t is the dimension of the discriminant data, is the output value of the discriminant function.

[0170] It should be noted that the second judgment result is .

[0171] Step A44: When the second judgment result meets the preset authenticity threshold, the first authentic authentication data is determined to be the second authentic authentication data.

[0172] In the specific implementation, if the judgment result If the preset authenticity threshold is met, the received authentication data is confirmed to be authentic The corresponding communication data C has not been tampered with and the communication process is safe. Otherwise, it is determined to be a man-in-the-middle attack, the communication data is rejected, and a security alert is sent to the user device.

[0173] It should be noted that after the first true authentication data passes the verification of the second-layer generative adversarial network, the authentication data used is determined to be the second true authentication data.

[0174] Step S80, performing an integrity check on the second real authentication data to obtain an integrity check result;

[0175] In the specific implementation, the new energy vehicle receives the real authentication data verified by the double-layer generative adversarial network. Afterwards, the system performs an integrity check on the received authentication data to verify whether the received authentication data complies with the preset integrity rules.

[0176] In a feasible implementation, step S80 includes steps A51 to A53:

[0177] Step A51: Obtain a second preset prime number and a second authentication data dimension value;

[0178] It should be noted that the second preset prime number is a predefined large prime number , the second authentication data dimension value is the dimension v of the authentication data.

[0179] Step A52: Performing an integrity check on the second preset prime number, the second authentication data dimension value, and the second real authentication data through a hash function to obtain an integrity check result;

[0180] In the specific implementation, as shown in the following formula:

[0181] ;

[0182] in, is the integrity check result, H(x) is the hash function, For bitwise XOR operation, is a predefined large prime number, and v is the dimension of the authentication data.

[0183] Step A53: When the integrity check result matches the preset integrity threshold, it is determined that the second authentic authentication data integrity check passes.

[0184] In the specific implementation, if If the result matches the preset integrity threshold, the authentication data is complete, otherwise the data is rejected.

[0185] Step S90, when the integrity check result is passed, identity authentication is performed on the second real authentication data according to a preset authentication rule to obtain an identity authentication result;

[0186] It should be noted that when confirming the authentication data After completion, the new energy vehicle performs identity verification according to the preset authentication rules.

[0187] In a feasible implementation, step S90 includes steps A61 to A63:

[0188] Step A61: Obtain the second frequency factor and the authentication rule dimension value;

[0189] It should be noted that the second frequency factor is the frequency factor related to the authentication data. , the authentication rule dimension value is the dimension z of the authentication rule.

[0190] Step A62: Authentication is performed on the second frequency factor, the authentication rule dimension value, and the second real authentication data to obtain an authentication result;

[0191] In the specific implementation, the authentication rule R is defined as follows:

[0192]

[0193] in, and is the verification coefficient associated with the authentication data, is the frequency factor related to the authentication data, and z is the dimension of the authentication rule.

[0194] It should be noted that the identity authentication result is the calculation result of the authentication rule R.

[0195] Step A63: When the identity authentication result matches the preset identity authentication standard, it is determined that the second real authentication data identity authentication is passed.

[0196] In the specific implementation, the system compares the calculation result with the predefined identity authentication standard. If it meets the standard, the identity authentication is passed.

[0197] Step S100, when the identity authentication result is passed, activating the remote control authority of the user terminal so that the user terminal can remotely control the vehicle.

[0198] In the specific implementation, after the identity authentication is passed, the new energy vehicle activates the user's remote control authority, based on the verified real authentication data and session key Unlock corresponding remote control functions, including starting the engine, unlocking the doors, or other specified operations.

[0199] It should be noted that if the authentication data is found to be incomplete or identity verification fails during the verification process, the system will reject the user's remote control request and send a security alert to the user's device through an encrypted communication channel to alert of possible security risks.

[0200] This embodiment provides a vehicle remote control authentication method, through the construction of a two-layer data verification mechanism, the first layer of the generative adversarial network simulates possible man-in-the-middle attack behavior by generating and verifying forged communication data, and the second layer of the generative adversarial network verifies the data again to ensure that all transmitted data during the communication process has not been tampered with. This two-layer data verification mechanism effectively enhances the reliability and security of data transmission.

[0201] like Figure 4 As shown, the user end binds the device with the vehicle end through Bluetooth to establish an initial communication connection. The user end verifies the authentication data for the first time through the first generative adversarial network to obtain the first real authentication data, which is encrypted and input into the vehicle end. The first real authentication data is verified for the second time through the second generative adversarial network to obtain the second real authentication data. The real authentication data verified by the double-layer generative adversarial network is verified on the vehicle end, and the identity is authenticated according to the preset authentication rules. If all authentication steps are passed, the user is allowed to remotely control the new energy vehicle.

[0202] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the vehicle remote control authentication method of the present application. More simple transformations based on this technical concept are all within the protection scope of the present application.

[0203] The present application provides a vehicle remote control authentication device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the vehicle remote control authentication method in the above-mentioned embodiment one.

[0204] Reference below Figure 5, which shows a schematic diagram of the structure of a vehicle remote control authentication device suitable for implementing the embodiment of the present application. The vehicle remote control authentication device in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 5 The vehicle remote control authentication device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0205] like Figure 5 As shown, the vehicle remote control authentication device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the vehicle remote control authentication device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the vehicle remote control authentication device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows a vehicle remote control authentication device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0206] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0207] The vehicle remote control authentication device provided by the present application adopts the vehicle remote control authentication method in the above embodiment, which can solve the technical problem of low security of identity authentication in the remote control process of new energy vehicles. Compared with the prior art, the beneficial effects of the vehicle remote control authentication device provided by the present application are the same as the beneficial effects of the vehicle remote control authentication method provided by the above embodiment, and the other technical features in the vehicle remote control authentication device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0208] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0209] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0210] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the vehicle remote control authentication method in the above-mentioned embodiment.

[0211] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM: Random Access Memory), a read-only memory (ROM: Read Only Memory), an erasable programmable read-only memory (EPROM: Erasable Programmable Read Only Memory or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM: CD-Read Only Memory), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency: Radio Frequency), etc., or any suitable combination of the above.

[0212] The computer-readable storage medium may be included in the vehicle remote control authentication device; or may exist independently without being assembled into the vehicle remote control authentication device.

[0213] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the vehicle remote control authentication device, the vehicle remote control authentication device: responds to the remote control vehicle request, starts the multi-factor authentication process, and obtains the user's authentication data; inputs the authentication data into the first generative adversarial network for data verification to obtain first real authentication data; encrypts the first real authentication data to obtain ciphertext data; and sends the ciphertext data to the vehicle end, so that the vehicle end authenticates the first real authentication data based on the ciphertext data.

[0214] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0215] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0216] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0217] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned vehicle remote control authentication method, and can solve the technical problem of low security of identity authentication during the remote control process of new energy vehicles. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the vehicle remote control authentication method provided by the above-mentioned embodiment, and will not be repeated here.

[0218] The present application also provides a computer program product, including a computer program, which implements the steps of the vehicle remote control authentication method as described above when executed by a processor.

[0219] The computer program product provided by the present application can solve the technical problem of low security of identity authentication during remote control of new energy vehicles. Compared with the prior art, the beneficial effects of the computer program product provided by the present application are the same as the beneficial effects of the vehicle remote control authentication method provided by the above embodiment, which will not be repeated here.

[0220] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A vehicle remote control authentication method, characterized in that: The vehicle remote control authentication method is applied to a user terminal, and the vehicle remote control authentication method comprises the following steps: Respond to the request for remote control of the vehicle, initiate the multi-factor authentication process, and obtain the user's authentication data; Inputting the authentication data into a first generative adversarial network for data verification to obtain first true authentication data; Encrypting the first real authentication data to obtain ciphertext data; The ciphertext data is sent to the vehicle end so that the vehicle end authenticates the first real authentication data based on the ciphertext data, and the authentication step includes: decoding the ciphertext data to obtain the first real authentication data; inputting the first real authentication data into the second generative adversarial network for verification to obtain the second real authentication data; performing an integrity check on the second real authentication data to obtain an integrity check result; when the integrity check result is passed, authenticating the second real authentication data through a preset authentication rule to obtain an authentication result.

2. The vehicle remote control authentication method according to claim 1, characterized in that: The authentication data includes an input password, biometric information, and a dynamic password. The step of inputting the authentication data into a first generative adversarial network for data verification to obtain first real authentication data includes: Generate a first authentication parameter by using a hash function on the input password; The biometric information is used to generate a second authentication parameter through a biometric feature extraction function; Generate a third authentication parameter by using the dynamic password through a hash function; The first authentication parameter, the second authentication parameter, and the third authentication parameter are input into a first generative adversarial network for data verification to obtain first true authentication data.

3. The vehicle remote control authentication method according to claim 2, characterized in that: The step of inputting the first authentication parameter, the second authentication parameter, and the third authentication parameter into a first generative adversarial network for data verification to obtain first real authentication data includes: Obtaining the first authentication parameter, the second authentication parameter, the noise matrix corresponding to the third authentication parameter and the first session key; Input a first generative adversarial network to generate false authentication data based on the first authentication parameter, the second authentication parameter, the third authentication parameter, a noise matrix corresponding to the first authentication parameter, the second authentication parameter, and the third authentication parameter, and a first session key; Comparing and judging the first authentication parameter, the second authentication parameter, the third authentication parameter, and the false authentication data through the first generative adversarial network to obtain a first judgment result; When the first judgment result meets a preset authenticity threshold, the first authentication parameter, the second authentication parameter and the third authentication parameter are determined to be first authentic authentication data.

4. The vehicle remote control authentication method according to claim 1, characterized in that: The step of encrypting the first real authentication data to obtain ciphertext data includes: Obtaining a first session key, a first preset prime number, a first encryption coefficient, a second encryption coefficient, an encrypted data dimension value, a first frequency factor, and a first authentication data dimension value; Generate a second session key through a hash function based on the first real authentication data, the first session key, the first preset prime number, the first encryption coefficient, and the first authentication data dimension value; The first real authentication data is encrypted by the second encryption coefficient, the encrypted data dimension value, the first frequency factor and the second session key through a symmetric encryption algorithm to obtain ciphertext data.

5. A vehicle remote control authentication method, characterized in that: The vehicle remote control authentication method is applied to the vehicle side, and the vehicle remote control authentication method comprises the following steps: Receive ciphertext data transmitted by the user end; Decoding the ciphertext data to obtain first real authentication data, where the first real authentication data is obtained by inputting the authentication data into a first generative adversarial network for data verification; Inputting the first true authentication data into a second generative adversarial network for verification to obtain second true authentication data; Performing an integrity check on the second real authentication data to obtain an integrity check result; When the integrity check result is passed, identity authentication is performed on the second real authentication data according to a preset authentication rule to obtain an identity authentication result; When the identity authentication result is passed, the remote control authority of the user terminal is activated so that the user terminal can remotely control the vehicle.

6. The vehicle remote control authentication method according to claim 5, characterized in that: Before the step of receiving the first real authentication data transmitted by the user terminal, the method further includes: Establishing a communication connection with the user end through the Bluetooth protocol to generate a first secret key; When a key is detected, the legitimacy of the key is verified, and when the legitimacy of the key is verified, a second secret key is generated; The first secret key and the second secret key are processed by a hash function to obtain a first session key, and the session key is used to identify and match the user end.

7. The vehicle remote control authentication method according to claim 5, characterized in that: The step of inputting the first real authentication data into a second generative adversarial network for verification to obtain second real authentication data includes: Obtain random encryption coefficients and generate data dimension values; Inputting the random encryption coefficient, the generated data dimension value, the first real authentication data and the ciphertext data into a second generative adversarial network to generate forged communication data; Performing data tampering simulation on the first authentic authentication data, the ciphertext data, and the forged communication data through a discriminant function to obtain a second judgment result; When the second judgment result meets a preset authenticity threshold, the first authentic authentication data is determined to be second authentic authentication data.

8. The vehicle remote control authentication method according to claim 5, characterized in that: The step of performing an integrity check on the second real authentication data to obtain an integrity check result comprises: Obtain a second preset prime number and a second authentication data dimension value; Performing an integrity check on the second preset prime number, the second authentication data dimension value, and the second real authentication data through a hash function to obtain an integrity check result; When the integrity check result matches the preset integrity threshold, it is determined that the second authentic authentication data integrity check passes.

9. The vehicle remote control authentication method according to claim 5, characterized in that: The step of performing identity authentication on the second real authentication data according to a preset authentication rule to obtain an identity authentication result includes: Obtain the second frequency factor and the authentication rule dimension value; Authentication is performed on the second frequency factor, the authentication rule dimension value, and the second real authentication data to obtain an authentication result; When the identity authentication result matches the preset identity authentication standard, it is determined that the second real authentication data identity authentication passes.

10. A vehicle remote control authentication system, characterized in that: The vehicle remote control authentication system includes a user end and a vehicle end. The user end executes the vehicle remote control authentication method as described in any one of claims 1 to 4, and the vehicle end executes the vehicle remote control authentication method as described in any one of claims 5 to 9.

Images