Authentication method and device for carrier and control equipment, medium and vehicle

Abstract

The invention provides an authentication method and device for a carrier and control equipment, a medium and a vehicle, and the method comprises the steps: responding to the establishment of a communication channel with the control equipment, and receiving a unique identifier sent by the control equipment based on the communication channel; obtaining a matching result between the unique identifier and a plurality of pieces of legal preset identifier information; when the matching result indicates that matching succeeds, authentication data of the carrier are sent to the control equipment; the authentication data represents that the control equipment and the carrier are successfully authenticated. By means of the method, the problem that in the prior art, the relation between the carrier and the control equipment is not flexible enough is solved.

Description

Technical Field

[0001] The present specification relates to the field of data interaction technology, and in particular to an authentication method, device, medium, and vehicle for a vehicle and a control device. Background Art

[0002] In addition to traditional direct-insert keys, vehicle keys also include remote control keys. When a user uses a remote control key to control a vehicle, a signal is sent to the vehicle through wireless technology to control various functions of the vehicle (such as locking and unlocking doors, opening or closing electric doors and windows). Therefore, the advantage of a remote control key is that the user can control the vehicle when he is near the vehicle without inserting the key into the door or the car.

[0003] In order to ensure the security of the remote control key, the vehicle needs to pair and authenticate the remote control key, send its own authentication data to the key, and realize the authentication between the vehicle and the key. The successfully authenticated key is regarded as the correct key, thus ensuring that only the user holding the correct key can control the car, improving the safety of the car.

[0004] In the prior art, the manufacturer usually completes the authentication between the key and the vehicle in advance, writes the authentication data directly into the key, and then sells it to the user through the dealer. After the user gets the key with the authentication data, he can directly control the vehicle. The disadvantage of this pre-authentication method is that the vehicle and the key must be sold according to the pre-authentication relationship, the sales method is not flexible enough, and once the key is lost, the only way is to contact the manufacturer to re-authenticate a new key, which is obviously more troublesome. Summary of the invention

[0005] In order to overcome the problems existing in the related art, this specification provides a method, device, medium, and vehicle for authenticating a vehicle and a control device.

[0006] According to a first aspect of an embodiment of this specification, a method for authenticating a vehicle and a control device is provided, which is applied to a vehicle, and the method includes:

[0007] In response to establishing a communication channel with a control device, receiving a unique identifier sent by the control device based on the communication channel, where different control devices have different unique identifiers;

[0008] Obtaining a matching result between the unique identifier and a plurality of legal preset identifier information;

[0009] When the matching result indicates a successful match, the authentication data of the vehicle is sent to the control device; the authentication data represents that the control device and the vehicle are successfully authenticated.

[0010] According to a second aspect of an embodiment of this specification, a method for authenticating a vehicle and a control device is provided, which is applied to the control device, and the method includes:

[0011] In response to establishing a communication channel with the vehicle, sending a unique identifier to the vehicle through the communication channel;

[0012] Receive authentication data of the vehicle sent by the vehicle; the authentication data is sent after the vehicle obtains a matching result that the unique identifier successfully matches a number of legal preset identification information; the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0013] According to a third aspect of an embodiment of this specification, a method for authenticating a vehicle and a control device is provided, which is applied to a cloud, wherein the cloud communicates with the vehicle, and the method includes:

[0014] Acquire a unique identifier sent by the vehicle; the unique identifier is received by the vehicle from the control device based on a communication channel established with the control device, and different control devices have different unique identifiers;

[0015] After matching the unique identifier with the plurality of legal preset identification information, a matching result is obtained, and the matching result is fed back to the vehicle, so that the vehicle obtains the matching result between the unique identifier and the plurality of legal preset identification information, and when the matching result indicates a successful match, the authentication data of the vehicle is sent to the control device; the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0016] According to a fourth aspect of an embodiment of this specification, there is provided an authentication device for a vehicle and a control device, which is applied to a vehicle, and the device includes:

[0017] A first receiving module, configured to, in response to establishing a communication channel with a control device, receive a unique identifier sent by the control device based on the communication channel, where different control devices have different unique identifiers;

[0018] A first acquisition module, used to obtain a matching result between the unique identifier and a plurality of legal preset identification information;

[0019] The first sending module is used to send the authentication data of the vehicle to the control device when the matching result indicates a successful match; the authentication data represents that the control device and the vehicle are successfully authenticated.

[0020] According to a fifth aspect of an embodiment of this specification, there is provided an authentication device for a vehicle and a control device, which is applied to a control device, and the device includes:

[0021] a second sending module, configured to send a unique identifier to the vehicle through the communication channel in response to establishing a communication channel with the vehicle;

[0022] The second receiving module is used to receive the authentication data of the vehicle sent by the vehicle; the authentication data is sent after the vehicle obtains the matching result of the unique identifier and a number of legal preset identification information; the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0023] According to the sixth aspect of the embodiments of this specification, a computer-readable storage medium is provided, on which a computer program is stored. When the program is executed by a processor, the steps of the vehicle and control device authentication method as described in any one of the embodiments provided in the first aspect, the second aspect, or the third aspect are implemented.

[0024] According to the seventh aspect of the embodiments of this specification, a vehicle is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor; wherein the processor is configured to execute the steps of the vehicle and control device authentication method as described in any one of the embodiments provided in the first aspect, the second aspect, or the third aspect.

[0025] The technical solutions provided by the embodiments of this specification may have the following beneficial effects:

[0026] In the embodiments of the present specification, when the control device approaches the vehicle, the vehicle and the control device can establish a communication channel based on a preset communication method (such as wireless communication). Since the control device and the vehicle have not yet been successfully authenticated, in order to achieve pairing authentication with the vehicle, the control device will send its own unique identifier to the vehicle through the communication channel to indicate its identity.

[0027] After receiving the unique identifier sent by the control device, the vehicle verifies whether the unique identifier is legitimate by obtaining the matching result between the unique identifier and several legitimate preset identification information. When the match is successful, the unique identifier is considered to be a legitimate identifier, and the control device is allowed to authenticate with the vehicle, so the authentication data of the vehicle is sent to the control device.

[0028] Through the above method, the authentication of the control device and the vehicle can be completed at any stage after the vehicle is produced (for example, after the user picks up the vehicle, the control device is placed close to the vehicle to establish a communication channel and then the authentication is completed), and the manufacturer does not need to write the authentication data of the vehicle into the control device in advance, nor does it need to bundle the control device with the vehicle for sale. This helps to solve the problem of insufficient flexibility in the relationship between the vehicle and the control device in the prior art.

[0029] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present specification. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the specification and, together with the description, serve to explain the principles of the specification.

[0031] Figure 1 An application scenario diagram of a vehicle and control device authentication method provided in an embodiment of this specification is shown.

[0032] Figure 2 A flow chart of a method for authenticating a vehicle and a control device provided in an embodiment of this specification is shown.

[0033] Figure 3 A flow chart of another method for authenticating a vehicle and a control device provided in an embodiment of this specification is shown.

[0034] Figure 4 A block diagram of the interaction between a cloud, a control device and a vehicle provided in an embodiment of the present specification is shown.

[0035] Figure 5 It is a hardware structure diagram of a vehicle in which an authentication device of a vehicle and a control device is located according to an exemplary embodiment shown in this specification. DETAILED DESCRIPTION

[0036] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this specification. Instead, they are merely examples of devices and methods consistent with some aspects of this specification as detailed in the appended claims.

[0037] The terms used in this specification are for the purpose of describing specific embodiments only and are not intended to limit this specification. The singular forms "a", "the" and "the" used in this specification and the appended claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0038] It should be understood that although the terms first, second, third, etc. may be used in this specification to describe various information, this information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of this specification, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0039] The vehicle in the embodiments of this specification refers to a tool or mechanical device for transporting people, goods or equipment. They can be land, water or air vehicles for moving and transporting in different environments. The types of vehicles are very wide, including but not limited to cars, trucks, trains, ships, airplanes, motorcycles, bicycles, etc. For easier understanding, the following is an exemplary description using a vehicle as an example.

[0040] Both the control device and the vehicle are equipped with wireless communication modules for realizing wireless communication between the vehicle and the control device (such as low-power Bluetooth communication, near-field communication, etc.). Common remote control devices include: mobile phones, tablets, vehicle-specific keys (such as vehicle remote control keys with buttons), etc.

[0041] In order to ensure the safety of the control device, the vehicle needs to pair and authenticate the control device, send its own authentication data to the control device, and realize the authentication between the vehicle and the control device. The successfully authenticated control device is used as the correct key (for the convenience of description, the control device is referred to as the key below), thereby ensuring that only the user holding the correct key can control the car, thereby improving the safety of the car.

[0042] In the prior art, the manufacturer usually completes the authentication between the key and the vehicle in advance, writes the authentication data directly into the key, and then sells it to the user through the dealer. After the user gets the key carrying the authentication data, he can directly control the vehicle. Figure 1 The following diagram shows an application scenario of a vehicle and a control device authentication method provided by an embodiment of the present specification. Figure 1 As shown: when the vehicle's authentication data is stored in the key, after the key enters a specific area of ​​the vehicle (the range covered by the communication), a communication channel can be established between the vehicle and the key. The key can send control instructions carrying the authentication data to the vehicle through the communication channel. After verifying that the authentication data is correct, the vehicle executes the control instructions sent by the key.

[0043] However, this method of pre-writing authentication data into the key leads to the following problems:

[0044] For users: If the manufacturer matches 4 keys to each vehicle by default, then when the user wants 5 keys (or loses a key and needs to obtain a new key), the dealer cannot directly configure it for the user. He needs to negotiate with the manufacturer, and then the manufacturer will write the authentication information of the vehicle purchased by the user into the new key, and then redistribute the new key to the dealer, and then the dealer will deliver it to the user. This is obviously more troublesome.

[0045] For manufacturers and dealers: in the process of producing and selling vehicles, the keys paired with the vehicles must be maintained, and the binding relationship between the keys and the vehicles cannot be separated. This means that on the one hand, the keys for writing vehicle authentication data may be redundant (for example, some customers only need mechanical direct-insert keys, or some customers only need to activate the remote control key function on their mobile phones), and on the other hand, the binding relationship between the vehicle and the key must be maintained at all times. If the wrong key is used, the user will not be able to control the vehicle normally.

[0046] In response to the above problems, the embodiments of this specification provide a method, device, medium, and vehicle for authenticating a vehicle and a control device, which do not require the manufacturer to write the vehicle's authentication data into the control device in advance, thereby solving the problem that the control device and the vehicle must be sold as a bundle.

[0047] Next, the embodiments of this specification are described in detail:

[0048] When the vehicle authentication data is not stored in the control device (i.e., the manufacturer does not need to write the vehicle authentication data into the key in advance), pairing authentication must first be performed between the control device and the vehicle so that the control device can control the vehicle to perform specific operations after pairing authentication is completed.

[0049] In order to complete the pairing authentication between the vehicle and the control device, Figure 2 A flowchart of a method for authenticating a vehicle and a control device provided in an embodiment of this specification is shown. Figure 2 As shown, the method is applied to a vehicle (for example, a central processing unit of the vehicle), and the method comprises the following steps:

[0050] Step 201 : in response to establishing a communication channel with a control device, receiving a unique identifier sent by the control device based on the communication channel, where different control devices have different unique identifiers.

[0051] To complete the pairing authentication between the control device and the vehicle, you need to establish a communication channel between the control device and the vehicle. The following are some examples of how to establish a communication channel between the vehicle and the control device:

[0052] Method 1: The vehicle performs periodic detection at specific time intervals to determine whether there is a control device approaching. Figure 1 As shown in the figure, when the control device enters the communication coverage of the vehicle), it can initiate a broadcast signal to prompt all potential control devices around it to initiate a pairing authentication request. This broadcast signal usually contains some identification marks so that the control device can distinguish requests from different vehicles. After the control device receives the broadcast signal of the vehicle, it initiates a pairing authentication request to the vehicle, thereby pairing and authenticating with the vehicle. Through the above operations, the control device can establish a secure communication channel with the vehicle.

[0053] Or in method 2, the control device actively sends a broadcast signal to the vehicle, and the vehicle feeds back a pairing authentication request to the control device after receiving the broadcast signal. After the control device receives the pairing authentication request from the vehicle, it establishes a secure communication channel with the vehicle.

[0054] After the control device and the vehicle establish a communication channel in the above manner, the control device performs pairing authentication with the vehicle by sending a unique identifier to the vehicle.

[0055] When the control device and the vehicle establish a communication channel through other means, the unique identifier can be actively sent by the control device to the vehicle, thereby starting the pairing authentication process.

[0056] The unique identifier is used to distinguish different control devices and can indicate whether the control device is qualified to complete pairing authentication with the vehicle. The unique identifier can be the identity identifier of the control device, or the unique activation key of the control device, or the binding relationship between the identity identifier and the activation key. The unique identifier is set for this key during the key production (generation) process and stored in the key's secure storage space.

[0057] Step 202: Obtain a matching result between the unique identifier and a plurality of legal preset identifier information.

[0058] When several legal preset identification information are stored in the vehicle, the matching result can be obtained by the vehicle matching the unique identification with several legal preset identification information; when several legal preset identification information are not stored in the vehicle, the matching result can be the matching result returned after the vehicle sends the unique identification to the area storing several legal preset identification information and the area storing several legal preset identification information queries.

[0059] When the unique identifier is consistent with any preset identification information, the matching result indicates that the match is successful; when the unique identifier is inconsistent with any preset identification information, the matching result indicates that the match fails.

[0060] Step 203, when the matching result indicates a successful match, the authentication data of the vehicle is sent to the control device; the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0061] When the matching result indicates a successful match, it indicates that this control device can be used as the correct key to control the vehicle, so the authentication data of the vehicle is sent to the control device.

[0062] The authentication data can be generated by the vehicle itself or written into the vehicle by the manufacturer when the vehicle is produced. The authentication data includes but is not limited to: the authentication key (used by the subsequent control device to control the vehicle, which is different from the activation key), key usage permissions, validity period, etc.

[0063] In the embodiments of the present specification, when the control device approaches the vehicle, the vehicle and the control device can establish a communication channel based on a preset communication method (such as wireless communication). Since the control device and the vehicle have not yet been successfully authenticated, in order to achieve pairing authentication with the vehicle, the control device will send its own unique identifier to the vehicle through the communication channel to indicate its identity.

[0064] After receiving the unique identifier sent by the control device, the vehicle verifies whether the unique identifier is legitimate by obtaining the matching result between the unique identifier and several legitimate preset identification information. When the match is successful, the unique identifier is considered to be a legitimate identifier, and the control device is allowed to authenticate with the vehicle, so the authentication data of the vehicle is sent to the control device.

[0065] Through the above method, the authentication of the control device and the vehicle can be completed at any stage after the vehicle is produced (for example, after the user picks up the vehicle, the control device is placed close to the vehicle to establish a communication channel and then the authentication is completed), and the manufacturer does not need to write the authentication data of the vehicle into the control device in advance, nor does it need to bundle the control device with the vehicle for sale. This helps to solve the problem of insufficient flexibility in the relationship between the vehicle and the control device in the prior art.

[0066] In a feasible implementation scheme, when the unique identifier is stored in the control device, and the unique identifier includes: the identity identifier of the control device, and / or the activation key of the control device, when executing step 202 to obtain the matching result between the unique identifier and a plurality of legal preset identification information, the following three situations are included:

[0067] Case 1: when the unique identifier is the identity identifier, a matching result between the identity identifier and the plurality of legal preset identification information is obtained, and the preset identification information is a legal identity identifier.

[0068] Among them, when the identity identifier is the identity identifier that comes with the control device, after the legitimate manufacturer produces each batch of control devices, the identity identifier that comes with each control device can be directly obtained as the legitimate identity identifier, thereby obtaining a number of legitimate preset identification information. Alternatively, the identity identifier can be a unique identity identifier that is pre-assigned to each control device produced by the legitimate manufacturer, and these assigned unique identity identifiers are used as legitimate identity identifiers to obtain a number of legitimate preset identification information.

[0069] In this way, when the identity identifiers of these control devices are received, a legal identity identifier that matches the identity identifier can be found in a number of preset identification information, thereby obtaining a successful matching result.

[0070] However, when the identity identifiers of the keys produced illegally are received, since the identity identifiers of the keys produced illegally are not stored in the preset identification information, a matching result of failed matching will be obtained.

[0071] Or in case 2, when the unique identifier is the activation key, a matching result between the activation key and the plurality of legal preset identification information is obtained, and the preset identification information is a legal activation key.

[0072] The unique identifier may also be an activation key, excluding the identity identifier. For example, the activation key may be a unique activation key pre-assigned to each control device produced by a legitimate manufacturer, and these assigned unique activation keys are used as legitimate activation keys to obtain a number of legitimate preset identification information.

[0073] When the activation keys of these control devices are received, a legal activation key matching the activation key can be found in a number of preset identification information, thereby obtaining a successful matching result.

[0074] However, when receiving activation keys of keys produced illegally, since the activation keys of the keys produced illegally are not stored in the preset identification information, a matching failure result will be obtained. In addition, since the activation keys of different control devices are different, even if an illegal person obtains one of the activation keys, it is limited to the theft of this control device, and it is impossible to copy more control devices for controlling other vehicles based on the activation key of this control device.

[0075] Or in case three, when the unique identifier includes the identity identifier and activation key of the control device, obtain the matching result between the binding relationship between the identity identifier and the activation key and the several legal preset identification information; the preset identification information includes: the binding relationship between the legal identity identifier and the legal activation key.

[0076] The identity identifier and activation key are generated in the aforementioned manner, which will not be described in detail here. After the identity identifier and activation key of each control device are determined, a binding relationship between the identity identifier and the activation key is generated.

[0077] It should be noted that when the activation key is written to the control device, the information sent by the control device can be encrypted by the activation key, further improving the communication security between the vehicle and the control device.

[0078] In a feasible implementation scheme, the vehicle communicates with the cloud, and the preset identification information is stored in the cloud.

[0079] If the preset identification information is stored in the cloud, then the unique identification in the control device is also written into the control device after the cloud interacts with the manufacturer of the control device.

[0080] When the unique identifier includes the identity identifier and activation key of the control device, Figure 3 A flowchart of another vehicle and control device authentication method provided in an embodiment of this specification is shown. Figure 3 As shown, when executing step 202 to obtain the matching result between the unique identifier and a plurality of legal preset identifier information, the following steps are included:

[0081] Step 301: Send the identity identifier to the cloud; and receive a legal activation key that matches the identity identifier and is queried by the cloud.

[0082] Since the cloud stores several legal preset identification information including the binding relationship between legal identity and legal activation key, after receiving the identity sent by the vehicle, the cloud can determine whether the identity matches any legal identity. If so, the legal activation key bound to the legal identity is further determined. The legal activation key is used as the legal activation key matching the identity and sent to the vehicle.

[0083] Step 302, obtaining a matching result between the activation key and the legal activation key; the matching result is used to indicate whether the binding relationship between the identity identifier and the activation key matches the binding relationship between the identity identifier and the legal activation key.

[0084] The activation key can be directly compared with the legal activation key. If the comparison is consistent, it means that the binding relationship between the identity identifier and the legal activation key is recorded in the preset identification information, which is the same as the binding relationship between the legal identity identifier and the legal activation key in the preset identification information. (In which, since the legal activation key matching the identity identifier has been queried in step 301, it means that the preset identification information stored in the cloud includes a legal identity identifier that is consistent with the identity identifier. At this time, the legal identity identifier in step 302 is the same as the identity identifier).

[0085] Alternatively, if the unique identifier sent by the control device is received based on the communication channel during step 201, the method includes:

[0086] Based on the communication channel, target information sent by the control device is received; the target information includes the identity identifier and encrypted data obtained by encrypting designated data with an activation key.

[0087] Then, when the activation key is sent to the vehicle in a non-plaintext manner, when executing step 303 to obtain the matching result between the activation key and the legal activation key, the following steps are included:

[0088] The encrypted data is decrypted based on the legal activation key to obtain a matching result of whether the decryption is successful.

[0089] Among them, since the unique identifier includes both the identity identifier and the activation key, the activation key can be generated by encrypting the specified data and then sending the encrypted data to the vehicle. In this way, the activation key can be sent to the vehicle indirectly without sending it to the vehicle in plain text, preventing the plain text activation key from being intercepted or stolen during the information exchange process, and further ensuring the data communication security between the vehicle and the control device.

[0090] Since the activation key is transmitted in the form of encrypting the specified data, the legal activation key can be used directly to decrypt the encrypted data. If the decryption is successful, it means that the activation key encrypted for the specified data is consistent with the legal activation key. At this time, it means that the binding relationship between the identity identifier and the legal activation key is recorded in the preset identification information, which is the same as the binding relationship between the legal identity identifier and the legal activation key in the preset identification information, and the matching result indicates a successful match. On the contrary, if the decryption fails, it means that the activation key encrypted for the specified data is inconsistent with the legal activation key, so the matching result indicates a failed match.

[0091] Through the above method, on the one hand, by storing the preset identification information in the cloud, the storage in the vehicle can be released. When the vehicle needs to query whether the unique identification is legal, it only needs to obtain the corresponding data from the cloud and then match it. It is also convenient to obtain the latest preset identification information through the cloud in time after the cloud is updated; on the other hand, since the unique identification also includes an activation key, the security of information interaction can be further improved through the binding relationship between the activation key and the identity identification.

[0092] It should be noted that when the unique identifier only includes the identity identifier of the control device, the identity identifier can be sent to the cloud, and the cloud obtains a legal identity identifier that is the same as the identity identifier from the preset identification information, and determines that the matching result is a successful match. Alternatively, all the preset identification information in the cloud is obtained and then matched one by one to obtain the matching result.

[0093] Similarly, when the unique identifier only includes the activation key of the control device, matching can also be performed in the above manner.

[0094] In a feasible implementation scheme, the vehicle communicates with the cloud, and the preset identification information is stored in the cloud.

[0095] At this time, the matching can be completed directly through the cloud, and the matching result can be obtained from the cloud. Therefore, when executing step 202 to obtain the matching result between the unique identifier and a plurality of legal preset identification information, the following steps are included:

[0096] The unique identifier is sent to the cloud. A matching result fed back by the cloud for the unique identifier is received; the matching result is determined by the cloud after matching the unique identifier with the plurality of legal preset identification information.

[0097] The following methods can be adopted for the above three situations respectively:

[0098] Case 1: The unique identifier only includes the identity identifier. The identity identifier is sent to the cloud, and the cloud determines whether there is a legal identity identifier that is consistent with the identity identifier of the control device based on the legal identity identifier corresponding to the preset identification information. If so, a matching result indicating a successful match is generated.

[0099] Case 2: The unique identifier only includes the activation key. The activation key is sent to the cloud, and the cloud determines whether there is a legitimate activation key that is consistent with the activation key of the control device based on the legitimate activation key corresponding to the preset identification information. If so, a matching result indicating a successful match is generated.

[0100] Alternatively, the encrypted data encrypted with the activation key is sent to the cloud, and the cloud uses each legal activation key to decrypt it, and uses the legal activation key that can successfully decrypt the encrypted data as the legal activation key that matches the activation key of the control device, and generates a matching result indicating a successful match. If each legal activation key cannot successfully decrypt the encrypted data, a matching result indicating a failed match is generated.

[0101] Case 3: The unique identifier includes the identity identifier and the activation key. Then both the identity identifier and the activation key can be sent to the cloud, allowing the cloud to determine whether there is a binding relationship between a legal identity identifier and a legal activation key that is the same as the binding relationship between the identity identifier and the activation key in the preset identification information. If so, a matching result indicating a successful match is generated.

[0102] Alternatively, the identity and the encrypted data encrypted by the activation key are sent to the cloud, and the cloud first obtains the legal identity matching the identity and the legal activation key corresponding to the legal identity. The encrypted data is then decrypted by the legal activation key, and if the decryption is successful, a matching result indicating a successful match is generated.

[0103] Through the above method, on the one hand, by storing the preset identification information in the cloud, the storage in the vehicle can be released; on the other hand, the matching of the unique identification can be completed in the cloud, releasing the computing power of the vehicle. The vehicle only needs to obtain the matching result to complete the pairing authentication with the control device.

[0104] In a feasible implementation manner, after executing step 203 to send the authentication data of the vehicle to the control device, the method further includes the following steps:

[0105] A control instruction for controlling the vehicle to perform a specific operation is received from the control device; the control instruction is generated by the control device in response to a control operation of a user, and the control instruction carries the authentication data. After determining that the vehicle is successfully authenticated with the control device based on the authentication data, the specific operation is performed.

[0106] Specific operations may be, for example, opening a door, closing a door, unlocking, locking, starting, opening a window, closing a window, etc. When the control device generates a control instruction, it processes the control instruction according to the authentication data stored in itself, for example, using the authentication key in the authentication data to encrypt or sign the control instruction. In this way, after the vehicle receives the control instruction, it will also use the authentication key to decrypt the control instruction. If the decryption is successful, it means that the control device has the authority to control the vehicle, and the vehicle executes the control instruction normally.

[0107] The user's control operation can be generated by the user pressing a designated button (physical button or virtual button), for example, the user pressing a "lock vehicle" button; the user's control operation can also be automatically generated in response to the user's voice. When the control device receives the user's control operation, it generates a control instruction for controlling the vehicle to complete a specific operation. The control operation corresponds to the specific operation.

[0108] After the vehicle receives the control instruction, since the control instruction includes authentication data (or at least part of the authentication data), it can determine whether the control device has successfully authenticated itself. If the authentication is successful, the control instruction is considered to be issued by a legitimate control device, and the control instruction can be executed to allow the vehicle to complete a specific operation.

[0109] In a feasible implementation, a method for authenticating a vehicle and a control device is provided, which is applied to the control device, and the method includes:

[0110] In response to establishing a communication channel with the vehicle, the unique identifier is sent to the vehicle through the communication channel.

[0111] Receive authentication data of the vehicle sent by the vehicle; the authentication data is sent after the vehicle obtains a matching result that the unique identifier successfully matches a number of legal preset identification information; the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0112] After receiving the authentication data of the vehicle sent by the vehicle, the method further includes the following steps:

[0113] In response to a user's control operation, a control instruction for controlling the vehicle to perform a specific operation is generated; the control instruction carries the authentication data.

[0114] The control instruction is sent to the vehicle so that the vehicle performs the specific operation after determining that the vehicle and the control device are successfully authenticated based on the authentication data.

[0115] The relevant contents in the above steps have been introduced in the above embodiments and will not be repeated here.

[0116] Figure 4 A block diagram of the interaction between a cloud, a control device and a vehicle provided in an embodiment of this specification is shown, such as Figure 4 As shown, a method for completing vehicle and control device authentication through the cloud, the vehicle and the control device is introduced, including the following steps:

[0117] Step 401, generate a unique identifier and write it into a control device.

[0118] When the authentication between the vehicle and the control device is completed through the cloud, a unique identifier in the control device is generated through the cloud and stored in the secure storage area of ​​the control device.

[0119] Among them, if the control device is produced by a key manufacturer, then the encrypted unique identifier can be transmitted through the communication channel (public channel) between the cloud and the key manufacturer for secure transmission. Alternatively, the unique identifier is transmitted through a dedicated communication channel between the cloud and the key manufacturer (which can be encrypted or not). Among them, a dedicated communication channel is a dedicated physical or logical channel, such as a dedicated channel negotiated between two endpoints through a dedicated program (such as a protocol for secure transmission on the network through encryption technology, or a logical transmission channel), and the data transmitted in this transmission channel only serves to activate the exchange of keys. Alternatively, it can be transmitted through manual emails, messages, calls, etc.

[0120] Step 402: The vehicle generates authentication data. The authentication data includes at least an authentication key, which is different for different vehicles. The authentication key can be written into the vehicle by the vehicle manufacturer (stored in a secure area) or automatically generated by the vehicle.

[0121] Step 403: Establish a communication channel. A communication channel is established between the vehicle and the control device.

[0122] Step 404: Send the unique identifier. The control device sends the unique identifier to the vehicle.

[0123] Step 405: Send the unique identifier. The vehicle sends the unique identifier to the cloud.

[0124] Step 406, obtaining a matching result. The cloud performs a match based on the received unique identifier to obtain a matching result.

[0125] Step 407, writing authentication data. When the matching result indicates that the match is successful, the vehicle writes the authentication data into the control device.

[0126] The relevant contents involved in the above steps 401 to 407 have been described in the above embodiments and will not be repeated here.

[0127] In a feasible implementation, a method for authenticating a vehicle and a control device is provided, which is applied to a cloud, wherein the cloud communicates with the vehicle, and the method includes:

[0128] Acquire a unique identifier sent by the vehicle; the unique identifier is received by the vehicle from the control device based on a communication channel established with the control device, and different control devices have different unique identifiers.

[0129] After matching the unique identifier with the plurality of legal preset identification information, a matching result is obtained, and the matching result is fed back to the vehicle, so that the vehicle obtains the matching result between the unique identifier and the plurality of legal preset identification information, and when the matching result indicates a successful match, the authentication data of the vehicle is sent to the control device; the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0130] Alternatively, when the unique identifier includes the identity identifier and activation key of the control device, the method includes:

[0131] Acquire a unique identifier sent by the vehicle; the unique identifier is received by the vehicle from the control device based on a communication channel established with the control device, and different control devices have different unique identifiers.

[0132] If the unique identifier sent by the vehicle is an identity identifier, a legal activation key matching the identity identifier is queried among several legal preset identification information, and the legal activation key is sent to the vehicle, so that the vehicle obtains the matching result between the activation key and the legal activation key based on the legal activation key; the matching result is used to indicate whether the binding relationship between the identity identifier and the activation key matches the binding relationship between the identity identifier and the legal activation key.

[0133] Among them, the relevant contents involved in the above steps have been explained in the above embodiments and will not be repeated here.

[0134] In a feasible implementation, a vehicle and a control device authentication device is provided, which is applied to the vehicle, and the device includes:

[0135] The first receiving module is configured to, in response to establishing a communication channel with a control device, receive a unique identifier sent by the control device based on the communication channel, where different control devices have different unique identifiers.

[0136] The first acquisition module is used to obtain the matching result between the unique identifier and a plurality of legal preset identification information.

[0137] The first sending module is used to send the authentication data of the vehicle to the control device when the matching result indicates a successful match; the authentication data represents that the control device and the vehicle are successfully authenticated.

[0138] In a feasible implementation manner, the unique identifier is stored in the control device, and the unique identifier includes: an identity identifier of the control device, and / or an activation key of the control device.

[0139] When the first acquisition module is used to obtain the matching result between the unique identifier and several legal preset identification information, it is used to obtain the matching result between the identity identifier and the several legal preset identification information when the unique identifier is the identity identifier, and the preset identification information is a legal identity identifier.

[0140] Alternatively, when the unique identifier is the activation key, a matching result between the activation key and the plurality of legal preset identification information is obtained, and the preset identification information is a legal activation key.

[0141] Alternatively, when the unique identifier includes the identity identifier and activation key of the control device, the matching result between the binding relationship between the identity identifier and the activation key and the several legal preset identification information is obtained; the preset identification information includes: the binding relationship between the legal identity identifier and the legal activation key.

[0142] In a feasible implementation scheme, the vehicle communicates with the cloud, and the preset identification information is stored in the cloud.

[0143] When the first acquisition module is used to obtain the matching result between the unique identifier and a plurality of legal preset identification information, when the unique identifier includes the identity identifier and the activation key of the control device, the identity identifier is sent to the cloud.

[0144] Receive the legal activation key that matches the identity identifier queried by the cloud.

[0145] A matching result between the activation key and the legal activation key is obtained; the matching result is used to indicate whether the binding relationship between the identity identifier and the activation key matches the binding relationship between the identity identifier and the legal activation key.

[0146] In a feasible implementation manner, when the first receiving module is used to receive the unique identifier sent by the control device based on the communication channel, it is used to:

[0147] Based on the communication channel, target information sent by the control device is received; the target information includes the identity identifier and encrypted data obtained by encrypting designated data with an activation key.

[0148] When the first acquisition module is used to obtain the matching result between the unique identifier and a plurality of legal preset identification information, it is used to: decrypt the encrypted data based on the legal activation key to obtain the matching result of whether the decryption is successful.

[0149] In a feasible implementation scheme, the vehicle communicates with the cloud, and the preset identification information is stored in the cloud.

[0150] When the first acquisition module is used to obtain the matching result between the unique identifier and a plurality of legal preset identification information, it is used to:

[0151] The unique identifier is sent to the cloud.

[0152] Receive the matching result fed back by the cloud for the unique identifier; the matching result is determined after the cloud matches the unique identifier with the plurality of legal preset identification information.

[0153] In a feasible embodiment, the device further comprises:

[0154] The third receiving module is used to receive a control instruction sent by the control device for controlling the vehicle to perform a specific operation after the authentication data of the vehicle is sent to the control device; the control instruction is generated by the control device in response to the user's control operation, and the control instruction carries the authentication data.

[0155] An execution module is used to execute the specific operation after determining that the vehicle and the control device are successfully authenticated based on the authentication data.

[0156] In a feasible embodiment, a vehicle and a control device authentication device is provided, which is applied to the control device, and the device includes:

[0157] The second sending module is used to send the unique identifier to the vehicle through the communication channel in response to establishing a communication channel with the vehicle.

[0158] The second receiving module is used to receive the authentication data of the vehicle sent by the vehicle; the authentication data is sent after the vehicle obtains the matching result of the unique identifier and a number of legal preset identification information; the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0159] In a feasible embodiment, the device further comprises:

[0160] An instruction generation module is used to generate a control instruction for controlling the vehicle to perform a specific operation in response to a user's control operation after receiving the authentication data of the vehicle sent by the vehicle; the control instruction carries the authentication data.

[0161] The third sending module is used to send the control instruction to the vehicle, so that the vehicle performs the specific operation after determining that the vehicle and the control device are successfully authenticated based on the authentication data.

[0162] In a feasible implementation, a vehicle and control device authentication device is provided, which is applied to the cloud, and the cloud communicates with the vehicle, and the device includes:

[0163] The fourth acquisition module is used to acquire the unique identifier sent by the vehicle; the unique identifier is received by the vehicle from the control device based on the communication channel established with the control device, and different control devices have different unique identifiers.

[0164] A feedback module is used to obtain a matching result after matching the unique identifier with the multiple legal preset identification information, and to feed back the matching result to the vehicle so that the vehicle obtains the matching result between the unique identifier and the multiple legal preset identification information, and when the matching result indicates a successful match, the authentication data of the vehicle is sent to the control device; the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0165] The implementation process of the functions and effects of each module in the above-mentioned device is specifically described in the implementation process of the corresponding steps in the above-mentioned method, which will not be repeated here.

[0166] For the device embodiment, since it basically corresponds to the method embodiment, the relevant parts can refer to the partial description of the method embodiment. The device embodiment described above is only schematic, wherein the modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, that is, they may be located in one place, or they may be distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this specification. A person of ordinary skill in the art can understand and implement it without paying creative labor.

[0167] Figure 5 This is a hardware structure diagram of a vehicle where an authentication device of a vehicle and a control device is located according to an exemplary embodiment of this specification, such as Figure 5 As shown, the vehicle may include: a processor 501, a memory 502, an input / output interface 503, a communication interface 504 and a bus 505. The processor 501, the memory 502, the input / output interface 503 and the communication interface 504 are connected to each other through the bus 505 in the internal communication of the device.

[0168] The processor 501 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the authentication method of the vehicle and the control device provided in the embodiments of this specification.

[0169] The memory 502 can be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 502 can store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program codes are stored in the memory 502 and called and executed by the processor 501.

[0170] The input / output interface 503 is used to connect the input / output module to realize information input and output. The input / output module can be configured in the device as a component (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, etc.

[0171] The communication interface 504 is used to connect a communication module (not shown) to realize communication interaction between the device and other devices. The communication module can realize communication through wired mode (such as USB, network cable, etc.) or wireless mode (such as mobile network, WIFI, Bluetooth, etc.).

[0172] The bus 505 includes a path for transmitting information between various components of the device (eg, the processor 501 , the memory 502 , the input / output interface 503 , and the communication interface 504 ).

[0173] It should be noted that, although the above device only shows a processor 501, a memory 502, an input / output interface 503, a communication interface 504, and a bus 505, in a specific implementation process, the device may also include other components necessary for normal operation. In addition, it can be understood by those skilled in the art that the above device may also only include components necessary for implementing the embodiments of the present specification, and does not necessarily include all the components shown in the figure.

[0174] The embodiments of the present specification also provide a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the vehicle and control device authentication method as described in any one of the embodiments of the present specification.

[0175] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0176] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0177] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

Claims

1. A method for authenticating a vehicle and a control device, characterized in that: Applied to a vehicle, the method comprises: In response to establishing a communication channel with a control device, receiving a unique identifier sent by the control device based on the communication channel, where different control devices have different unique identifiers; Obtaining a matching result between the unique identifier and a plurality of legal preset identifier information; When the matching result indicates a successful match, the authentication data of the vehicle is sent to the control device; the authentication data indicates that the control device and the vehicle are successfully authenticated.

2. The method according to claim 1, characterized in that The unique identifier is stored in the control device, and the unique identifier includes: an identity identifier of the control device, and / or an activation key of the control device; The obtaining of the matching result between the unique identifier and a plurality of legal preset identifier information includes: When the unique identifier is the identity identifier, obtaining a matching result between the identity identifier and the plurality of legal preset identification information, the preset identification information being a legal identity identifier; Alternatively, when the unique identifier is the activation key, a matching result between the activation key and the plurality of legal preset identification information is obtained, and the preset identification information is a legal activation key; Alternatively, when the unique identifier includes the identity identifier and activation key of the control device, the matching result between the binding relationship between the identity identifier and the activation key and the several legal preset identification information is obtained; the preset identification information includes: the binding relationship between the legal identity identifier and the legal activation key.

3. The method according to claim 1 or 2, characterized in that: The vehicle communicates with the cloud, and the preset identification information is stored in the cloud; When the unique identifier includes the identity identifier and activation key of the control device, obtaining the matching result between the unique identifier and a plurality of legal preset identification information includes: Sending the identity to the cloud; Receiving a legal activation key matched to the identity identifier obtained through the cloud query; A matching result between the activation key and the legal activation key is obtained; the matching result is used to indicate whether the binding relationship between the identity identifier and the activation key matches the binding relationship between the identity identifier and the legal activation key.

4. The method according to claim 3, characterized in that The receiving, based on the communication channel, a unique identifier sent by the control device includes: Based on the communication channel, receiving target information sent by the control device; the target information includes the identity identifier and encrypted data obtained by encrypting designated data with an activation key; The obtaining a matching result between the activation key and the legal activation key includes: The encrypted data is decrypted based on the legal activation key to obtain a matching result of whether the decryption is successful.

5. The method according to claim 1 or 2, characterized in that: The vehicle communicates with the cloud, and the preset identification information is stored in the cloud; The obtaining of the matching result between the unique identifier and a plurality of legal preset identifier information includes: Sending the unique identifier to the cloud; Receive the matching result fed back by the cloud for the unique identifier; the matching result is determined after the cloud matches the unique identifier with the plurality of legal preset identification information.

6. The method according to claim 1, characterized in that After sending the authentication data of the vehicle to the control device, the method further includes: receiving a control instruction sent by the control device for controlling the vehicle to perform a specific operation; the control instruction is generated by the control device in response to a control operation of a user, and the control instruction carries the authentication data; After determining that the vehicle and the control device are successfully authenticated based on the authentication data, the specific operation is performed.

7. A method for authenticating a vehicle and a control device, characterized in that: Applied to a control device, the method comprises: In response to establishing a communication channel with the vehicle, sending a unique identifier to the vehicle through the communication channel; Receive authentication data of the vehicle sent by the vehicle; the authentication data is sent after the vehicle obtains a matching result that the unique identifier successfully matches a number of legal preset identification information; the authentication data indicates that the control device and the vehicle are successfully authenticated.

8. The method according to claim 7, characterized in that After receiving the authentication data of the vehicle sent by the vehicle, the method further includes: In response to a control operation of a user, generating a control instruction for controlling the vehicle to perform a specific operation; the control instruction carries the authentication data; The control instruction is sent to the vehicle so that the vehicle performs the specific operation after determining that the vehicle and the control device are successfully authenticated based on the authentication data.

9. An authentication device for a vehicle and a control device, characterized in that: Applied to a vehicle, the device comprises: A first receiving module, configured to, in response to establishing a communication channel with a control device, receive a unique identifier sent by the control device based on the communication channel, where different control devices have different unique identifiers; A first acquisition module, used to obtain a matching result between the unique identifier and a plurality of legal preset identification information; The first sending module is used to send the authentication data of the vehicle to the control device when the matching result indicates a successful match; the authentication data represents that the control device and the vehicle are successfully authenticated.

10. An authentication device for a vehicle and a control device, characterized in that: Applied to a control device, the device comprises: a second sending module, configured to send a unique identifier to the vehicle through the communication channel in response to establishing a communication channel with the vehicle; The second receiving module is used to receive the authentication data of the vehicle sent by the vehicle; the authentication data is sent after the vehicle obtains the matching result of the unique identifier and a number of legal preset identification information; the authentication data indicates that the control device and the vehicle are successfully authenticated.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

12. A vehicle, characterized in that: The vehicle comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of any one of the methods of claims 1-8 when executing the computer program.

Images