Electric car encryption awakening system and method based on remote driving controller

Abstract

The invention provides an electric car encryption awakening system and method based on a remote driving controller. The system comprises a cloud platform, the remote driving controller, a main power source and a 12V power source. The cloud platform is electrically connected with the remote driving controller; the remote driving controller is bidirectionally and electrically connected with the cloud platform and comprises an SOC main control module, a 5G communication module, an MCU module and an SBC module; the SOC main control module is bidirectionally and electrically connected with the cloud platform; the 5G communication module is bidirectionally and electrically connected with the cloud platform; the MCU module is bidirectionally and electrically connected with the SOC main control module and is also electrically connected with the main power supply; the SBC module is electrically connected with the 5G communication module, the MCU module and the main power supply. According to the method, the security and data integrity of communication between the remote driving controller and the cloud platform can be ensured, higher operation speed and lower resource consumption can be realized in the aspects of asymmetric encryption and symmetric key encryption, and meanwhile, the security problem of a heartbeat packet and a wake-up instruction of a low-performance processor can be solved.

Description

Technical Field

[0001] The present invention relates to the technical field of driverless vehicles, and in particular to an electric vehicle encryption wake-up system and method based on a remote driving controller. Background Art

[0002] In recent years, driverless cars have become a field of great concern. In scenarios such as automatic parking and remote car-hailing, the remote start of driverless vehicles is an extremely critical link, because if the vehicle cannot be started, subsequent services will not be able to be provided.

[0003] Currently, driverless vehicles are equipped with powerful RCU units with remote driving capabilities, and the remote dormancy of many vehicles is directly realized by the SOC unit of the RCU. However, using this solution directly will cause the vehicle to still consume a lot of energy in the dormant state and lack safety.

[0004] At the same time, encryption measures are mostly used in the communication process between the on-board terminal and the cloud platform when the vehicle is awake. However, in the sleep state, due to the limited performance of the sleep state, encrypted communication is not used in the interaction with the heartbeat packet and wake-up command of the cloud platform. Once the communication is invaded, it will greatly affect the safety of the vehicle.

[0005] To sum up, it is necessary to make further innovations on existing technologies. Summary of the invention

[0006] In view of the technical problems existing in the above-mentioned background technology, the present invention proposes an electric vehicle encryption wake-up system and method based on a remote driving controller. The system and method have reasonable design and can ensure the security and data integrity of the communication between the remote driving controller and the cloud platform, and can achieve higher computing speed and lower resource consumption in asymmetric encryption and symmetric key encryption. The system and method can solve the problem of excessive energy consumption when the SOC main control module of the remote driving controller is used to maintain a sleep connection, and can also solve the security problem of the heartbeat packets and wake-up instructions of the low-performance processor.

[0007] In order to solve the above technical problems, the present invention provides a tram encryption wake-up system based on a remote driving controller, which includes a cloud platform, a remote driving controller, a main power supply and a 12V power supply;

[0008] The cloud platform is electrically connected to the remote driving controller, and is used to monitor whether the vehicle is online and issue sleep and wake-up instructions;

[0009] The remote driving controller is installed on the electric car, which is bidirectionally electrically connected to the cloud platform and includes a SOC main control module, a 5G communication module, an MCU module and an SBC module;

[0010] The SOC main control module is bidirectionally electrically connected to the cloud platform, and is responsible for maintaining the heartbeat with the cloud platform and receiving the sleep command of the cloud platform when the vehicle is awake;

[0011] The 5G communication module is bidirectionally electrically connected to the cloud platform, responsible for providing Internet access services for the remote driving controller, maintaining heartbeats with the cloud platform when the vehicle is in a dormant state, and listening to wake-up commands from the cloud platform when the vehicle is in a dormant state, thereby waking up other components;

[0012] The MCU module is bidirectionally electrically connected to the SOC main control module and is also electrically connected to the main power supply, and is responsible for power management of the remote driving controller;

[0013] The SBC module is electrically connected to the 5G communication module, the MCU module and the main power supply, respectively, and is responsible for powering the MCU module and waking it up;

[0014] The main power supply is used to supply power to the entire vehicle;

[0015] The 12V power supply is used to maintain the continuous operation of the 5G communication module after the main power supply is disconnected.

[0016] A tram encryption wake-up method based on a remote driving controller, based on the above tram encryption wake-up system based on a remote driving controller, mainly includes the following steps:

[0017] 1) Establish an encrypted session between the cloud platform and the 5G communication module in the remote driving controller of the tram

[0018] 1.1) Key exchange and authentication

[0019] That is, first generate a pair of asymmetric keys, namely a public key and a private key, through the cloud platform, and the cloud platform saves the private key in a safe place. Then connect the 5G communication module to the cloud platform and request to establish secure communication, and then the cloud platform sends the public key to the 5G communication module.

[0020] 1.2) After receiving the public key sent by the cloud platform, the 5G communication module generates a temporary symmetric key; the 5G communication module uses the public key of the cloud platform to encrypt the temporary symmetric key and sends the encrypted temporary symmetric key to the cloud platform; the 5G communication module uses the temporary symmetric key to encrypt a randomly generated challenge string and sends it to the cloud platform;

[0021] 1.3) The cloud platform receives the encrypted temporary key and challenge string sent by the 5G communication module; the cloud platform uses the private key to decrypt the temporary key and obtain the temporary key; the cloud platform uses the temporary key to decrypt the challenge string and verify its validity; the cloud platform generates a random session key;

[0022] 1.4) The 5G communication module and the cloud platform use session keys to symmetrically encrypt and decrypt communication data;

[0023] 2) Data integrity check

[0024] The heartbeat data packet content is saved in protobuf format. In the first data packet of successful communication authentication, both communicating parties will send a binary check sequence and a weight sequence of each binary bit to the other party to verify the integrity of the data.

[0025] The electric vehicle encryption wake-up method based on the remote driving controller, wherein: after the encrypted session between the cloud platform and the 5G communication module in the remote driving controller of the electric vehicle is successfully established, the 5G communication module will send authentication Json data to the cloud platform. After the cloud platform authentication is passed, it will send authentication success Json, and if the authentication fails, the session will be closed; if the authentication is successful, the 5G communication module will send heartbeat packets at a certain interval.

[0026] The electric vehicle encryption wake-up method based on the remote driving controller, wherein: the heartbeat packet contains basic vehicle information such as vehicle ID, power of the main power supply and power of the 12V power supply.

[0027] The electric vehicle encryption wake-up method based on the remote driving controller, wherein the process of using the session key between the 5G communication module and the cloud platform in step 1.4) to perform symmetric encryption operation on the communication data is as follows:

[0028] Initial state setting:

[0029] Set v0 and v1 to two 32-bit input data blocks, set the key key to four 32-bit subkeys, set the initial value of the constant sum to 0, set delta to the constant 0x9E3779B9, and set the S-box SBox to a 256-byte substitution table;

[0030] 1.4.1) Calculate the S-box input and output:

[0031] Perform S-box replacement on the input data block v1:

[0032] SBox_input_v1=v1&0xFF (1);

[0033] SBox_output_v1=SBox[SBox_input_v1] (2);

[0034] The lower 8 bits of the input data block v1 are taken and then replaced by the S-box to obtain SBox_output_v1;

[0035] 1.4.2) Update the input data block v0:

[0036] Use the replaced values ​​for shift, XOR, and addition operations:

[0037]

[0038]

[0039] 1.4.3) Update the constant sum:

[0040] sum+=delta(5);

[0041] 1.4.4) Calculate S-box input and output

[0042] Perform S-box replacement on the input data block v0:

[0043] SBox_input_v0=v0&0xFF (6);

[0044] SBox_output_v0=SBox[SBox_input_v0] (7);

[0045] The lower 8 bits of the input data block v0 are taken and then replaced by the S-box to obtain SBox_output_v0;

[0046] 1.4.5) Update input data block v1

[0047] Use the replaced values ​​for shift, XOR, and addition operations:

[0048]

[0049] After the encryption operation, the final encrypted outputs v0 and v1 are obtained, and part of the data block is replaced by the S-box in each round.

[0050] The electric vehicle encryption wake-up method based on the remote driving controller, wherein: in the step 1.4), the session key is used between the 5G communication module and the cloud platform to perform 32 rounds of symmetric encryption operations on the communication data.

[0051] The electric vehicle encryption wake-up method based on the remote driving controller, wherein the process of using the session key between the 5G communication module and the cloud platform to perform symmetric decryption operation on the communication data in step 1.4) is as follows:

[0052] Initial state setting:

[0053] Set v0 and v1 to two 32-bit input data blocks, set the key key to four 32-bit subkeys, set the initial value of the constant sum to 0, set delta to the constant 0x9E3779B9, and set the S-box to a 256-byte substitution table;

[0054] ① Update the input data block v1:

[0055] Use the replaced values ​​for shift, XOR, and addition operations:

[0056]

[0057] ②Update constant sum:

[0058] sum-=delta(10);

[0059] ③Update the input data block v0:

[0060] Extract the lower 8 bits from the input data block v1 and replace them with the S-box to get SBox_output_v1;

[0061] SBox_input_v0=v0&0xFF (11);

[0062] SBox_output_v1=SBox[SBox_input_v1] (12);

[0063] ④ Update the input data block v0 with the replaced value:

[0064]

[0065] After the decryption operation, the original encrypted data blocks v0 and v1 are restored to plaintext data blocks; in each round, the order of operations and the corresponding mathematical operations during encryption are reversed.

[0066] The electric vehicle encryption wake-up method based on the remote driving controller, wherein: in the step 1.4), 32 rounds of decryption operations are performed when the session key is used to decrypt communication data between the 5G communication module and the cloud platform.

[0067] The electric vehicle encryption wake-up method based on the remote driving controller, wherein the specific process of the data integrity check in step 2) is as follows:

[0068] In the initial state, set the binary sequence of the serialized protobuf data packet to a, the binary check sequence to check_seq, and the binary check sequence weight sequence to weight_seq;

[0069] 2.1) Convert the data packet into protobuf binary sequence a:

[0070] Assume a is a binary sequence of length n:

[0071] a={a 0 ,a 1 ,a2 ,...,a n-1} (14);

[0072] 2.2) Perform an AND operation on the Protobuf binary sequence a and its own binary check sequence check_seq to obtain the processed binary sequence b:

[0073] b i =a i &check s eq i for i=0,1,2,...n-1 (15);

[0074] The result is:

[0075] b={b 0 ,b 1 ,b 2 ,...,b n-1} (16);

[0076] 2.3) Multiply the processed binary sequence b and its own binary check sequence weight sequence bit by bit and add them together to obtain the integrity check code c:

[0077]

[0078] Assume weight_seq is:

[0079] weight s eq = {w 0 ,w 1 ,w 2 ,...,w n-1} (18);

[0080] but:

[0081]

[0082] 2.4) Convert the integrity check code c into a two-byte binary number c bin , concatenate it to the processed binary sequence b to obtain the final binary sequence d:

[0083] d = concat(c bin ,b) (20);

[0084] Among them, c bin for:

[0085] c bin ={c 0 ,c 1} (twenty one);

[0086] 2.5) The receiver receives and decrypts the final binary sequence d to verify data integrity.

[0087] The electric vehicle encryption wake-up method based on the remote driving controller, wherein the specific process of step 2.5) is:

[0088] 2.5.1) Extract the first two bytes from the decrypted binary sequence d:

[0089] c recv =d 0 +d 1 (twenty two);

[0090] Wherein, d0 and d1 in the above formula (22) represent the first byte and the second byte of the received decrypted binary sequence d respectively;

[0091] 2.5.2) After removing the first two bytes of the decrypted binary sequence d, the processed binary sequence b is obtained:

[0092] b={d 2 ,d 3 ,...d n+1} (twenty three);

[0093] 2.5.3) Recalculate the integrity check code c':

[0094]

[0095] 2.5.4) Compare the integrity check code c' with the first two bytes c of the decrypted binary sequence d recv , determine whether the data has been tampered with:

[0096] If c'≠c recv The data is tampered with.

[0097] The electric vehicle encryption wake-up method based on the remote driving controller, wherein: in the step 1.2), the 5G communication module uses the public key of the cloud platform to encrypt the temporary symmetric key using the NTRU algorithm based on lattice theory; in the step 1.3), the cloud platform uses the private key to decrypt the temporary key also using the NTRU algorithm based on lattice theory.

[0098] By adopting the above technical solution, the present invention has the following beneficial effects:

[0099] The electric vehicle encryption wake-up system based on the remote driving controller of the present invention has a simple and reasonable structural design. By using a communication module instead of SOC to maintain the connection with the cloud platform in the RCU sleep state, the power consumption of the RCU in the sleep state can be significantly reduced, and the excessive power loss when the vehicle is in sleep for a long time can be effectively avoided, thereby ensuring the stability of the vehicle's remote power on and off system, and ensuring that the remote driving controller can communicate stably with the cloud platform even in a sleep and low-power state.

[0100] The electric vehicle encryption wake-up method based on the remote driving controller of the present invention is reasonably conceived. It adopts a symmetric encryption and decryption communication algorithm suitable for embedded devices between the 5G communication module and the cloud platform for symmetric encryption and decryption. In particular, through the introduction of the nonlinear module S box, while increasing the computational cost less, the algorithm nonlinearity and cracking difficulty are improved, thereby avoiding the communication between the 5G communication module and the cloud platform being vulnerable to differential cryptanalysis and linear cryptanalysis attacks under certain conditions; at the same time, the present invention also uses the binary sequence of data and its corresponding weight sequence to generate an integrity check code through calculation to complete the data integrity check, which can ensure the security and data integrity of the communication between the remote driving controller and the cloud platform when the remote driving controller is in a dormant low-power state, and can also ensure the efficiency of communication.

[0101] The present invention selects the NTRU algorithm based on lattice theory for asymmetric identity authentication in the asymmetric encryption algorithm. Compared with the traditional RSA algorithm, the NTRU algorithm has lower computational complexity, smaller key length, and occupies less space. At the same time, it achieves a higher computing speed without much loss of security. BRIEF DESCRIPTION OF THE DRAWINGS

[0102] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings in the following description are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0103] Figure 1 This is a structural principle diagram of the electric vehicle encryption wake-up system based on the remote driving controller of the present invention;

[0104] Figure 2 This is a flow chart for starting various components involved in the electric vehicle encryption wake-up system based on the remote driving controller of the present invention when the vehicle is powered on for the first time;

[0105] Figure 3 A schematic diagram of the encrypted session establishment process involved in the electric vehicle encrypted wake-up method based on the remote driving controller of the present invention;

[0106] Figure 4 It is a schematic diagram of the integrity verification process involved in the electric vehicle encryption wake-up method based on the remote driving controller of the present invention;

[0107] Figure 5 This is a flow chart of remote power-off of a vehicle involved in the electric vehicle encryption wake-up system based on a remote driving controller of the present invention;

[0108] Figure 6 The present invention is a flowchart of the remote power-on of a vehicle involved in the electric vehicle encryption wake-up system based on the remote driving controller. DETAILED DESCRIPTION

[0109] The technical solution of the present invention will be described clearly and completely below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0110] The present invention is further explained below in conjunction with specific implementation modes.

[0111] like Figure 1 As shown, the electric vehicle encryption wake-up system based on the remote driving controller provided in this embodiment includes a cloud platform 1, a remote driving controller 2, a main power supply 3 and a 12V power supply 4.

[0112] The cloud platform 1 is connected to the remote driving controller 2 to monitor whether the vehicle is online and issue sleep and wake-up instructions.

[0113] The remote driving controller 2 is referred to as RCU, which is bidirectionally electrically connected to the cloud platform 1 and includes a SOC main control module 21, a 5G communication module 22, an MCU module 23 and an SBC module 24.

[0114] The SOC main control module 21 is bidirectionally electrically connected to the cloud platform 1, and is responsible for maintaining the heartbeat with the cloud platform 1 and receiving the sleep command of the cloud platform 1 when the vehicle is awake. The SOC main control module 21 uses a chip model IMX8QM.

[0115] The 5G communication module 22 is bidirectionally electrically connected to the cloud platform 1, responsible for providing Internet access services for the remote driving controller 2, and maintaining heartbeats with the cloud platform 1 when the vehicle is in a dormant state and listening to the wake-up instructions of the cloud platform 1 when the vehicle is in a dormant state, thereby waking up other components. Among them, the 5G communication module 22 is a low-computing device and is powered by a 12V power supply 4. The 5G communication module 22 uses a chip model AG551.

[0116] The MCU module 23 is bidirectionally electrically connected to the SOC main control module 21 and is also electrically connected to the main power supply 3, and is responsible for the power management of the remote driving controller 2. The MCU module 23 uses a chip of model TC397.

[0117] The SBC module 24 is electrically connected to the 5G communication module 22, the MCU module 23 and the main power supply 3 respectively, and is responsible for powering the MCU module 23 and waking it up.

[0118] The main power supply 3 is used to supply power to the entire vehicle.

[0119] The 12V power supply 4 is responsible for maintaining the 5G communication module 22 to continue working after the main power supply 3 is disconnected.

[0120] like Figure 2 As shown, when the vehicle is powered on for the first time, the remote driving controller 2 is in the awake state, and the SOC main control module 21 first establishes a connection with the cloud platform and waits for the cloud platform to issue a sleep command; when the SOC main control module 21 receives the sleep command issued by the cloud platform 1, the main power supply 3 of the vehicle is disconnected. At this time, the remote driving controller 2 is powered by a 12V power supply. The remote driving controller 2 has other components except the 5G communication module 22. The 5G communication module 22 replaces the SOC main control module 21 to maintain a connection with the cloud platform 1; when the cloud platform 1 issues a power-on command, the 5G communication module 22 wakes up the SOC main control module 21 to enable it to continue working; the 5G communication module 22 disconnects from the cloud platform 1, and the SOC main control module 21 establishes a connection with the cloud platform 1; according to the following Figure 2 As shown, after receiving the wake-up command, the 5G communication module 22 first wakes up the SBC module 24, and after the SBC module 24 is awakened, the MCU module 23 is awakened, and after the MCU module 23 is awakened, the SOC main control module 21 is awakened. After the MCU module 23 is awakened, the main power supply 3 is powered on again, and the remote driving controller 2 reconnects to the main power supply 3.

[0121] The startup process of the electric vehicle encryption wake-up system based on the remote driving controller of the present invention is:

[0122] Before the vehicle is powered on for the first time, all components of the vehicle are in a power-off state; at the first startup, the 12V power supply 4 and the main power supply 3 will be powered on at the same time; first, the 5G communication module 22 is powered on (the initial state is low power consumption) and receives the ignition signal from the main power supply 3, which will wake up the SBC module 24; after the SBC module 24 is awakened, it will further wake up the MCU module 23; after the MCU module 23 is awakened, it is first responsible for powering on the SOC main control module 21, and then sending a wake-up signal to the 5G communication module 22 to make it exit the low power consumption state; after the SOC main control module 21 and the 5G communication module 22 are powered on, they will establish a connection with the cloud platform 1 to complete the entire initial startup process.

[0123] like Figure 5 As shown in the figure, the process of remote power-off of the vehicle is as follows:

[0124] When the SOC main control module 21 and the 5G communication module 22 are connected to the cloud platform 1, a communication link for transmitting instructions is established between the vehicle side and the cloud side; when the vehicle needs to be powered off remotely, the cloud platform 1 will send a power-off instruction to the SOC main control module 21; after receiving the power-off instruction, the SOC main control module 21 will first send a sleep instruction to the MCU module 23; after receiving the sleep instruction, the MCU module 23 will first control the main power supply 3 to be disconnected; after the main power supply 3 is disconnected, the ignition signal will be turned off, and at this time, the SBC module 24 will turn off the power of the MCU module 23 if there is no ignition signal; before the power of the MCU module 23 is turned off, the MCU module 23 will send a sleep signal to the 5G communication module 22 and disconnect the power of the SOC main control module 21; after that, the 5G communication module 22 will enter a low power consumption state, but retain the connection with the cloud platform 1, and resume normal operation when the next wake-up instruction arrives.

[0125] like Figure 6 As shown in the figure, the process of remote power-on of the vehicle is as follows:

[0126] When the cloud platform 1 issues a wake-up command, the 5G communication module 22 is first awakened. After the 5G communication module 22 is awakened, the 5G communication module 22 will wake up the SBC module 24; after the SBC module 24 is awakened, the SBC module 24 will wake up the MCU module 23. The MCU module 23 will first restore the power supply of the SOC main control module 21 to reconnect it to the cloud platform 1, and then the MCU module 23 will control the main power supply 3 to reconnect; if the main power supply 3 still does not send an ignition signal within 3 minutes, the MCU module 23 will re-enter the power-off process, and the MCU module 23 will disconnect the connection between the SOC main control module 21 and the cloud platform 1. At this time, the cloud platform 1 determines that the power-on is abnormal. In the process of remote power-off of the vehicle, the cooperation of the 5G communication module 22, the SBC module 24 and the MCU module 23 ensures the orderly awakening of the system, and the control of the SOC main control module 21 and the main power supply 3 by the MCU module 23 ensures that the system is restored to connection; if there is an abnormality in the main power supply 3, the MCU module 23 can identify and take power-off measures in time and report the abnormality to the platform.

[0127] The electric vehicle encryption wake-up method based on the remote driving controller of the present invention mainly solves the problem that the device is in a dormant low-power state and communication encryption resources are insufficient.

[0128] When the communication module communicates with the cloud platform, the SSL protocol is no longer used. Instead, encryption and data integrity verification methods are added on the basis of TCP to avoid the problem of excessive resource consumption and inability to guarantee real-time performance at the SSL protocol layer.

[0129] Common encryption schemes include symmetric encryption and asymmetric encryption. Symmetric encryption is suitable for data encryption, while asymmetric encryption is more suitable for key management and identity authentication. The present invention combines the advantages of both.

[0130] The invention provides a tram encryption wake-up method based on a remote driving controller and the tram encryption wake-up system described above, and specifically includes the following steps:

[0131] S100, 5G communication module 22 and the cloud platform 1 establish an encrypted session (such as Figure 3 (shown)

[0132] S110, key exchange and authentication

[0133] The cloud platform 1 generates a pair of asymmetric keys, namely a public key and a private key. The cloud platform 1 stores the private key in a safe location. The 5G communication module 22 connects to the cloud platform 1 and requests to establish secure communication. The cloud platform 1 sends the public key to the 5G communication module 22.

[0134] S120, 5G communication module 22 encryption

[0135] After receiving the public key sent by the cloud platform 1, the 5G communication module 22 generates a temporary symmetric key; the 5G communication module 22 uses the public key of the cloud platform 1 to encrypt the temporary symmetric key using the NTRU algorithm based on lattice theory and sends the encrypted temporary symmetric key to the cloud platform 1; the 5G communication module 22 uses the temporary symmetric key to encrypt a randomly generated challenge string and sends it to the cloud platform 1;

[0136] S130, Cloud Platform 1 Decryption

[0137] Cloud platform 1 receives the encrypted temporary key and challenge string sent by 5G communication module 22; Cloud platform 1 uses the private key to decrypt the temporary key using the NTRU algorithm based on lattice theory to obtain the temporary key; Cloud platform 1 uses the temporary key to decrypt the challenge string and verify its validity; Cloud platform 1 generates a random session key;

[0138] S140, the 5G communication module 22 and the cloud platform 1 use the session key to symmetrically encrypt and decrypt the communication data;

[0139] The process of using the session key for symmetric encryption between the 5G communication module 22 and the cloud platform 1 in the above step S140 is as follows:

[0140] Initial state:

[0141] Input data blocks: v0 and v1 are two 32-bit data blocks;

[0142] Key: key is four 32-bit subkeys, recorded as key[0], key[1], key[2], key[3].

[0143] Constants: The initial value of sum is 0; delta is the constant 0x9E3779B9;

[0144] S-box: SBox is a 256-byte substitution table;

[0145] The encryption process performs 32 rounds of encryption operations. For the i-th round (i ranges from 0 to 31), the steps of each round of encryption operation are as follows:

[0146] S141. Calculate the S-box input and output:

[0147] Perform S-box replacement on v1:

[0148] SBox_input_v1=v1&0xFF (1);

[0149] SBox_output_v1=SBox[SBox_input_v1] (2);

[0150] The lower 8 bits of v1 are taken and then replaced through the S-box to obtain SBox_output_v1.

[0151] S142, Update v0:

[0152] Use the replaced values ​​for shift, XOR, and addition operations:

[0153]

[0154] S143. Update sum:

[0155] sum+=delta(5);

[0156] S144. Calculate the S-box input and output:

[0157] Perform S-box replacement on v0:

[0158] SBox_input_v0=v0&0xFF (6);

[0159] SBox_output_v0=SBox[SBox_input_v0] (7);

[0160] The lower 8 bits of v0 are taken and then replaced by the S-box to obtain SBox_output_v0.

[0161] S145, used to update v1:

[0162] Use the replaced values ​​for shift, XOR, and addition operations:

[0163]

[0164] After 32 rounds of operations, the final encrypted outputs v0 and v1 are obtained; in each round, part of the data block is replaced by the S-box, which enhances the nonlinearity and complexity of the algorithm, making the encryption result more secure and difficult to crack.

[0165] In the above step S140, when the 5G communication module 22 and the cloud platform 1 use the session key to decrypt the communication data, 32 rounds of decryption operations are also performed, but the operation sequence is opposite to that of encryption. The operation steps of each round of decryption are as follows:

[0166] Initial state:

[0167] Input data blocks: v0 and v1 are two 32-bit data blocks;

[0168] Key: key is four 32-bit subkeys, recorded as key[0], key[1], key[2], key[3].

[0169] Constants: The initial value of sum is 0; delta is the constant 0x9E3779B9;

[0170] S-box: SBox is a 256-byte substitution table;

[0171] The operation steps of round i (i from 31 to 0):

[0172] ①Update v1:

[0173] Use the replaced values ​​for shift, XOR, and addition operations:

[0174]

[0175] ②Update sum:

[0176] sum-=delta(10);

[0177] ③Update v0:

[0178] Extract the lower 8 bits from v1 and replace them with the S-box to get SBox_output_v1;

[0179] SBox_input_v0=v0&0xFF (11);

[0180] SBox_output_v1=SBox[SBox_input_v1] (12);

[0181] ④Update v0 with the replaced value:

[0182]

[0183] After 32 rounds of decryption operations, the original encrypted data blocks v0 and v1 are restored to plaintext data blocks; each round of decryption gradually eliminates the nonlinearity and complexity introduced in the encryption process by reversing the order of operations and the corresponding mathematical operations during encryption, thereby restoring the original plaintext data.

[0184] Among them, after the encrypted session is successfully established, the 5G communication module 22 will send authentication Json data to the cloud platform 1 (including the vehicle's ID, self-compatible communication protocol, used by the cloud platform 1 to determine whether the access party is a legal device). After the authentication is passed, the cloud platform 1 will send an authentication success Json, and if the authentication fails, the session will be closed; if the authentication is successful, the 5G communication module 22 will send a heartbeat packet at a certain interval; among them, the heartbeat packet contains basic vehicle information such as vehicle ID, the power of the main power supply 3 and the power of the 12V power supply 4.

[0185] S200, data integrity check

[0186] In the past, data integrity schemes for encrypted data packets mostly used message authentication codes, digital signatures, hash functions and other methods. These methods often require large amounts of computation and are not suitable for the 5G communication module in the present invention. To address this problem, the present invention proposes a lightweight data integrity verification method that uses the protobuf format to save the heartbeat data packet content. In the first data packet that successfully communicates, both parties will send a binary check sequence for verifying data integrity and a weight sequence for each binary bit to the other party; Figure 4 As shown, the process of data integrity verification is as follows:

[0187] Initial state

[0188] Assumptions:

[0189] The binary sequence after serialization of the protobuf data packet is a;

[0190] The binary check sequence is check_seq;

[0191] The binary checksum weight sequence is weight_seq;

[0192] S210, data packet converted to protobuf binary sequence (a):

[0193] Assume a is a binary sequence of length n:

[0194] a={a 0 ,a 1 ,a 2,... , a n-1} (14);

[0195] S220, performing an AND operation on the Protobuf binary sequence and its own binary check sequence to obtain a processed binary sequence (b);

[0196] The binary sequence a and the check sequence check_seq are ANDed bit by bit:

[0197] b i =a i &check s eq i for i=0,1,2,...n-1 (15);

[0198] The result is:

[0199] b={b 0 ,b 1 ,b 2 ,...,b n-1} (16);

[0200] S230, multiplying the processed binary sequence (b) bit by bit with its own binary check sequence weight sequence and adding them together to obtain an integrity check code (c);

[0201] Calculate the integrity check code c:

[0202]

[0203] Assume weight_seq is:

[0204] weight s eq = {w 0 ,w 1 ,w 2 ,...,w n-1} (18);

[0205] but:

[0206]

[0207] S240, convert the integrity check code (c) into a binary number and occupy two bytes, and concatenate it to the protobuf binary sequence (b) to obtain the final binary sequence (d);

[0208] The integrity check code c is converted into a two-byte binary number c bin , and concatenated in front of the processed binary sequence b to obtain the final binary sequence d:

[0209] d = concat(c bin ,b) (20);

[0210] Among them, c bin for:

[0211] c bin ={c 0 ,c 1} (twenty one);

[0212] S250: The receiver verifies data integrity

[0213] The binary sequence d received and decrypted by the receiver is:

[0214] S251. Extract the first two bytes (integrity check code) from the decrypted binary sequence d:

[0215] c recv =d 0 +d 1 (twenty two);

[0216] S252. After removing the first two bytes of the decrypted binary sequence d, a processed binary sequence b is obtained:

[0217] b={d 2 ,d 3 ,...d n+1} (twenty three);

[0218] (S253, recalculate the integrity check code c':

[0219]

[0220] S254, compare c' and c recv , determine whether the data has been tampered with:

[0221] If c'≠c recv The data is tampered with.

[0222] The above data integrity verification method ensures the integrity of data by utilizing the sensitivity of data. If the data packet is tampered with during transmission, even a small modification to the data packet will cause the calculation result of the checksum to be inconsistent with the result calculated by the receiver; by transmitting the checksum together with the original data, the receiver can verify it after receiving the data; the receiver will perform the same calculation process as the sender, multiplying and adding the received binary sequence and the weight sequence bit by bit to obtain a checksum; then, the receiver compares the checksum with the checksum in the original data packet; if the two are inconsistent, then the receiver can determine that the data packet has been tampered with.

[0223] The above-mentioned data integrity verification method is to use the binary sequence and the weight sequence to multiply and add bit by bit to obtain the integrity check code, and add it to the original data packet. After receiving the data packet, the receiver removes the first two bytes and performs operations with the received binary check sequence and weight sequence. The result is compared with the removed first two bytes. If they are inconsistent, it is judged that the data has been tampered with.

[0224] The present invention has a reasonable concept and can solve the problem of excessive energy consumption when using a remote driving controller SOC to maintain a sleep connection, while also solving the security issues of heartbeat packets and wake-up instructions of low-performance processors.

[0225] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A tram encryption wake-up system based on a remote driving controller, characterized in that : The electric vehicle encryption wake-up system comprises a cloud platform (1), a remote driving controller (2), a main power supply (3) and a 12V power supply (4); The cloud platform (1) is electrically connected to the remote driving controller (2) and is used to monitor whether the vehicle is online and issue sleep and wake-up instructions; The remote driving controller (2) is installed on the electric vehicle, is bidirectionally electrically connected to the cloud platform (1) and comprises a SOC main control module (21), a 5G communication module (22), an MCU module (23) and an SBC module (24); The SOC main control module (21) is bidirectionally electrically connected to the cloud platform (1) and is responsible for maintaining the heartbeat with the cloud platform (1) when the vehicle is in an awake state and receiving sleep instructions from the cloud platform (1); The 5G communication module (22) is bidirectionally electrically connected to the cloud platform (1), and is responsible for providing Internet access services for the remote driving controller (2), and maintaining a heartbeat with the cloud platform (1) when the vehicle is in a dormant state, and monitoring a wake-up command from the cloud platform (1) when the vehicle is in a dormant state, thereby waking up other components; The MCU module (23) is bidirectionally electrically connected to the SOC main control module (21), and is also electrically connected to the main power supply (3), and is responsible for power management of the remote driving controller (2); The SBC module (24) is electrically connected to the 5G communication module (22), the MCU module (23) and the main power supply (3) respectively, and is responsible for supplying power to the MCU module (23) and waking it up; The main power supply (3) is used to supply power to the entire vehicle; The 12V power supply (4) is used to maintain the 5G communication module (22) in continuous operation after the main power supply (3) is disconnected.

2. A tram encryption wake-up method based on a remote driving controller, based on the tram encryption wake-up system based on a remote driving controller as described in claim 1 above; characterized in that: The main steps include: 1) Establish an encrypted session between the cloud platform (1) and the 5G communication module (22) in the remote driving controller (2) 1.1) Key exchange and authentication That is, firstly, a pair of asymmetric keys, namely a public key and a private key, is generated through the cloud platform (1), and the cloud platform (1) stores the private key in a safe location. Then, the 5G communication module (22) is connected to the cloud platform (1) and a request is made to establish secure communication. Then, the cloud platform (1) sends the public key to the 5G communication module (22); 1.2) The 5G communication module (22) generates a temporary symmetric key after receiving the public key sent by the cloud platform (1); the 5G communication module (22) encrypts the temporary symmetric key using the public key of the cloud platform (1) and sends the encrypted temporary symmetric key to the cloud platform (1); the 5G communication module (22) encrypts a randomly generated challenge string using the temporary symmetric key and sends it to the cloud platform (1); 1.3) The cloud platform (1) receives the encrypted temporary key and challenge string sent by the 5G communication module (22); the cloud platform (1) uses the private key to decrypt the temporary key and obtain the temporary key; the cloud platform (1) uses the temporary key to decrypt the challenge string and verify its validity; the cloud platform (1) generates a random session key; 1.4) The 5G communication module (22) and the cloud platform (1) use a session key to symmetrically encrypt and decrypt communication data; 2) Data integrity check The heartbeat data packet content is saved in protobuf format. In the first data packet of successful communication authentication, both communicating parties will send a binary check sequence and a weight sequence of each binary bit to the other party to verify the integrity of the data.

3. The electric vehicle encryption wake-up method based on the remote driving controller as claimed in claim 2 is characterized in that: After the cloud platform (1) and the 5G communication module (22) in the remote driving controller (2) of the tram have successfully established an encrypted session, the 5G communication module (22) will send authentication Json data to the cloud platform (1). After the cloud platform (1) passes the authentication, it will send an authentication success Json. If the authentication fails, the session will be closed. If the authentication is successful, the 5G communication module (22) will send a heartbeat packet at a certain interval.

4. The electric vehicle encryption wake-up method based on the remote driving controller as claimed in claim 3 is characterized in that: The heartbeat packet contains basic vehicle information such as vehicle ID, the power level of the main power supply (3) and the power level of the 12V power supply (4).

5. The electric vehicle encryption wake-up method based on the remote driving controller as claimed in claim 2 is characterized in that: The process of using the session key to perform symmetric encryption operation on communication data between the 5G communication module (22) and the cloud platform (1) in step 1.4) is as follows: Initial state setting: Set v0 and v1 to two 32-bit input data blocks, set the key key to four 32-bit subkeys, set the initial value of the constant sum to 0, set delta to the constant 0x9E3779B9, and set the S-box SBox to a 256-byte substitution table; 1.4.1) Calculate the S-box input and output: Perform S-box replacement on the input data block v1: SBox_input_v1=v1&0xFF (1); SBox_output_v1=SBox[SBox_input_v1] (2); The lower 8 bits of the input data block v1 are taken and then replaced by the S-box to obtain SBox_output_v1; 1.4.2) Update the input data block v0: Use the replaced values ​​for shift, XOR, and addition operations: 1.4.3) Update the constant sum: sum+=delta(5); 1.4.4) Calculate S-box input and output Perform S-box replacement on the input data block v0: SBox_input_v0=v0&0xFF (6); SBox_output_v0=SBox[SBox_input_v0] (7); The lower 8 bits of the input data block v0 are taken and then replaced by the S-box to obtain SBox_output_v0; 1.4.5) Update input data block v1 Use the replaced values ​​for shift, XOR, and addition operations: After the encryption operation, the final encrypted outputs v0 and v1 are obtained, and part of the data block is replaced by the S-box in each round.

6. The electric vehicle encryption wake-up method based on the remote driving controller as claimed in claim 5 is characterized in that: In the step 1.4), the 5G communication module (22) and the cloud platform (1) use a session key to perform 32 rounds of symmetric encryption operations on the communication data.

7. The electric vehicle encryption wake-up method based on the remote driving controller as claimed in claim 2 is characterized in that: The process of using the session key to perform symmetric decryption operation on communication data between the 5G communication module (22) and the cloud platform (1) in step 1.4) is as follows: Initial state setting: Set v0 and v1 to two 32-bit input data blocks, set the key key to four 32-bit subkeys, set the initial value of the constant sum to 0, set delta to the constant 0x9E3779B9, and set the S-box to a 256-byte substitution table; ① Update the input data block v1: Use the replaced values ​​for shift, XOR, and addition operations: ②Update constant sum: sum-=delta(10); ③Update the input data block v0: Extract the lower 8 bits from the input data block v1 and replace them with the S-box to get SBox_output_v1; SBox_input_v0=v0&0xFF (11); SBox_output_v1=SBox[SBox_input_v1] (12); ④Update the input data block v0 with the replaced value: After the decryption operation, the original encrypted data blocks v0 and v1 are restored to plaintext data blocks; in each round, the order of operations and the corresponding mathematical operations during encryption are reversed.

8. The electric vehicle encryption wake-up method based on the remote driving controller as claimed in claim 7 is characterized in that : In the step 1.4), 32 rounds of decryption operations are performed between the 5G communication module (22) and the cloud platform (1) when using the session key to decrypt the communication data.

9. The electric vehicle encryption wake-up method based on the remote driving controller as claimed in claim 2 is characterized in that: The specific process of data integrity verification in step 2) is as follows: In the initial state, set the binary sequence of the serialized protobuf data packet to a, the binary check sequence to check_seq, and the binary check sequence weight sequence to weight_seq; 2.1) Convert the data packet into protobuf binary sequence a: Assume a is a binary sequence of length n: <h2 style=";text-align:left;direction:ltr">a = {a0,a1,a2,...,a<h2 style=";text-align:left;direction:ltr"> n-1 <h2 style=";text-align:left;direction:ltr"> (14) 2.2) Perform an AND operation on the Protobuf binary sequence a and its own binary check sequence check_seq to obtain the processed binary sequence b: b i =a i &check s eq i for i=0,1,2,...n-1 (15); The result is: b={b0,b1,b2,...,b n-1 } (16); 2.3) Multiply the processed binary sequence b and its own binary check sequence weight sequence bit by bit and add them together to obtain the integrity check code c: Assume weight_seq is: weight s eq={w0,w1,w2,...,w n-1 } (18); but: 2.4) Convert the integrity check code c into a two-byte binary number c bin , concatenate it to the processed binary sequence b to obtain the final binary sequence d: d=concat(c bin ,b) (20); Among them, c bin for: c bin ={c0,c1} (21); 2.5) The receiver receives and decrypts the final binary sequence d to verify data integrity.

10. The electric vehicle encryption wake-up method based on the remote driving controller as claimed in claim 9 is characterized in that: The specific process of step 2.5) is as follows: 2.5.1) Extract the first two bytes from the decrypted binary sequence d: c recv =d0+d1 (22); Wherein, d0 and d1 in the above formula (22) represent the first byte and the second byte of the received decrypted binary sequence d respectively; 2.5.2) After removing the first two bytes of the decrypted binary sequence d, the processed binary sequence b is obtained: <h2 style=";text-align:left;direction:ltr">b = {d2,d3,...d<h2 style=";text-align:left;direction:ltr"> n+1 <h2 style=";text-align:left;direction:ltr"> (23) 2.5.3) Recalculate the integrity check code c': 2.5.4) Compare the integrity check code c' with the first two bytes c of the decrypted binary sequence d recv , determine whether the data has been tampered with: If c'≠c recv The data is tampered with.

11. The electric vehicle encryption wake-up method based on the remote driving controller as claimed in claim 2 is characterized in that : In the step 1.2), the 5G communication module (22) uses the public key of the cloud platform (1) to encrypt the temporary symmetric key using the NTRU algorithm based on lattice theory; In the step 1.3), the cloud platform (1) uses the private key to decrypt the temporary key using the NTRU algorithm based on lattice theory.

Images