Bluetooth diagnosis encryption level test evaluation method, system and equipment

Abstract

A Bluetooth diagnosis encryption level test evaluation method, system and device belong to the field of information security testing, and comprise the following steps: obtaining a first Bluetooth communication message stored at a diagnostic instrument side and a second Bluetooth communication message transmitted between a vehicle and a diagnostic instrument; judging whether a link key can be extracted from the first Bluetooth communication message, if so, extracting first Bluetooth diagnosis data from the first Bluetooth communication message, and decrypting the second Bluetooth communication message by using the link key to obtain second Bluetooth diagnosis data; if not, judging that the Bluetooth communication is not encrypted; judging whether the first Bluetooth diagnosis data is consistent with the second Bluetooth diagnosis data or not, if yes, judging that Bluetooth diagnosis adopts link layer encryption and application layer encryption when the first Bluetooth diagnosis data is in an encrypted state, and judging that the Bluetooth diagnosis adopts link layer encryption when the first Bluetooth diagnosis data is in an unencrypted state; and if not, judging that the Bluetooth diagnosis is not encrypted. According to the invention, the specific encryption hierarchy of Bluetooth diagnosis can be accurately analyzed.

Description

Technical Field

[0001] The present application relates to the field of information security testing, and specifically to a method, system and device for testing and evaluating Bluetooth diagnostic encryption levels. Background Art

[0002] In addition to using the OBD (On-Board Diagnostics) physical interface to directly connect to the diagnostic instrument, automobile diagnostic technology also considers its physical space expansion problem and adopts wireless diagnostic methods such as remote diagnosis and Bluetooth diagnosis. Some car companies tend to use Bluetooth diagnosis methods considering the stability and cost of remote networks.

[0003] As the number of external communication components in automobiles increases, IoV information security issues are frequent, among which short-range communication security is a key concern for IoV information security. There are many IoV information security standards that require security encryption for IoV Bluetooth communications. For example, GB / T 40856 "Technical Requirements and Test Methods for Information Security of In-Vehicle Information Interaction Systems" requires that the relevant data of high-security in-vehicle Bluetooth communication functions should be encrypted; international regulations WP.29R155 also require that confidential data transmitted to or from the vehicle should be protected in the face of information monitoring leakage threats.

[0004] Regarding encryption security testing in automotive Bluetooth diagnostic scenarios, there are currently few test cases, and the industry only stipulates that data transmitted during Bluetooth communications must be encrypted, but there is no requirement for the encryption mechanism level to be only link layer encryption or application layer encryption. Therefore, a standardized testing method is needed for Bluetooth diagnostic encryption level assessment. Summary of the invention

[0005] The present application provides a Bluetooth diagnostic encryption level test and evaluation method, system and device, which can solve the technical problem in the prior art that the security encryption level of Bluetooth diagnosis cannot be accurately grasped.

[0006] In a first aspect, an embodiment of the present application provides a Bluetooth diagnostic encryption level test evaluation method, the method comprising:

[0007] When using the diagnostic instrument to perform Bluetooth diagnosis on the vehicle, obtaining a first Bluetooth communication message stored on the diagnostic instrument side and a second Bluetooth communication message transmitted between the vehicle and the diagnostic instrument;

[0008] Determine whether a link key can be extracted from the first Bluetooth communication message, if so, extract the first Bluetooth diagnostic data from the first Bluetooth communication message, and use the link key to decrypt the second Bluetooth communication message to obtain the second Bluetooth diagnostic data; if not, determine that the Bluetooth communication is not encrypted;

[0009] Determine whether the first Bluetooth diagnostic data and the second Bluetooth diagnostic data are consistent. If so, determine that the Bluetooth diagnosis adopts link layer encryption and application layer encryption when the first Bluetooth diagnostic data is in an encrypted state, and determine that the Bluetooth diagnosis adopts link layer encryption when the first Bluetooth diagnostic data is in an unencrypted state; if not, determine that the Bluetooth diagnosis does not adopt encryption processing.

[0010] In combination with the first aspect, in one embodiment, the method includes:

[0011] The second Bluetooth communication message transmitted between the vehicle and the diagnostic instrument is obtained by using an air packet capture device.

[0012] In combination with the first aspect, in one embodiment, the method includes:

[0013] All Bluetooth frequency bands are monitored to obtain the second Bluetooth communication message.

[0014] In combination with the first aspect, in one embodiment, the method includes:

[0015] Obtain a host control interface HCI log from the diagnostic instrument side, and extract the first Bluetooth communication message from the HCI log.

[0016] In combination with the first aspect, in one implementation, obtaining the HCI log specifically includes the following steps:

[0017] The universal serial bus USB interface on the diagnostic instrument is connected to a data acquisition device with a USB line, and the data acquisition device sends a debug bridge ABD instruction to obtain the HCI log from the diagnostic instrument side.

[0018] In combination with the first aspect, in one implementation, obtaining the HCI log specifically includes the following steps:

[0019] The wireless communication interface on the diagnostic instrument is connected to a data acquisition device with wireless communication function, and the data acquisition device sends a debug bridge ABD instruction or a remote port debug instruction to obtain the HCI log from the diagnostic instrument side.

[0020] In combination with the first aspect, in one implementation, extracting the first Bluetooth communication message specifically includes the following steps:

[0021] Filter the HCI log by link key feature matching to filter out the link key exchange process data and the first Bluetooth diagnostic data;

[0022] Extract the link key from the link key exchange process data.

[0023] In combination with the first aspect, in one embodiment, the method includes:

[0024] When it is determined that there is diagnostic plaintext information in the first Bluetooth diagnostic data, it is determined that the first Bluetooth diagnostic data is in an unencrypted state; when it is determined that there is no diagnostic plaintext information in the first Bluetooth diagnostic data, it is determined that the first Bluetooth diagnostic data is in an encrypted state.

[0025] In a second aspect, an embodiment of the present application provides a Bluetooth diagnostic encryption level test and evaluation system, the system comprising:

[0026] A data acquisition module, which is used to acquire a first Bluetooth communication message stored on the diagnostic instrument side and a second Bluetooth communication message transmitted between the vehicle and the diagnostic instrument when the diagnostic instrument is used to perform Bluetooth diagnosis on the vehicle;

[0027] A data processing module, which is used to determine whether a link key can be extracted from a first Bluetooth communication message. If so, first Bluetooth diagnostic data is extracted from the first Bluetooth communication message, and a second Bluetooth communication message is decrypted using the link key to obtain second Bluetooth diagnostic data; if not, it is determined that Bluetooth communication does not use encryption processing; it is also used to determine whether the first Bluetooth diagnostic data and the second Bluetooth diagnostic data are consistent. If so, it is determined that Bluetooth diagnosis uses link layer encryption and application layer encryption when the first Bluetooth diagnostic data is in an encrypted state, and when the first Bluetooth diagnostic data is in an unencrypted state, it is determined that Bluetooth diagnosis uses link layer encryption; if not, it is determined that Bluetooth diagnosis does not use encryption processing.

[0028] In the third aspect, an embodiment of the present application provides a Bluetooth diagnostic encryption level test and evaluation device, which includes a processor, a memory, and a Bluetooth diagnostic encryption level test and evaluation program stored in the memory and executable by the processor, wherein when the Bluetooth diagnostic encryption level test and evaluation program is executed by the processor, the steps of the Bluetooth diagnostic encryption level test and evaluation method are implemented.

[0029] The beneficial effects brought by the technical solution provided in the embodiments of the present application include:

[0030] When link layer encryption is adopted, the diagnostic instrument will automatically extract the link key and decrypt the message after receiving the second Bluetooth communication message sent by the vehicle to obtain the first Bluetooth diagnostic data. The link key and the first Bluetooth diagnostic data are stored in the diagnostic instrument as the first Bluetooth communication message. If link layer encryption is not adopted, the link key cannot be extracted. However, in some special cases, the link key can be extracted even if link layer encryption is adopted but the encryption operation is unsuccessful. At this time, the encryption level can be analyzed based on subsequent judgment operations.

[0031] Since the link key will not change during transmission, if link layer encryption is adopted, the second Bluetooth diagnostic data obtained after decrypting the second Bluetooth communication message using the link key should theoretically be consistent with the first Bluetooth diagnostic data; and if the first Bluetooth diagnostic message is in an unencrypted state, it means that application layer encryption has not been performed on the basis of link layer encryption; if the first Bluetooth diagnostic message is in an encrypted state, it means that application layer encryption has been performed on the basis of link layer encryption; through the above multiple judgments, the specific encryption level of Bluetooth diagnosis can be accurately analyzed. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 This is a flowchart of an embodiment of a Bluetooth diagnostic encryption level test and evaluation method of the present application;

[0033] Figure 2 This is a schematic diagram of the architecture of an embodiment of a Bluetooth diagnostic encryption level test and evaluation system of the present application;

[0034] Figure 3 This is a schematic diagram of the hardware structure of the Bluetooth diagnostic encryption level test and evaluation device involved in the embodiment of the present application. DETAILED DESCRIPTION

[0035] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0036] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below with reference to the accompanying drawings.

[0037] In a first aspect, an embodiment of the present application provides a Bluetooth diagnostic encryption level test evaluation method and a Bluetooth diagnostic encryption level test evaluation method.

[0038] In one embodiment, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the Bluetooth diagnostic encryption level test and evaluation method of this application. Figure 1 As shown, the Bluetooth diagnostic encryption level test evaluation method includes:

[0039] Step S1: when using a diagnostic instrument to perform Bluetooth diagnosis on a vehicle, obtaining a first Bluetooth communication message stored on the diagnostic instrument side and a second Bluetooth communication message transmitted between the vehicle and the diagnostic instrument.

[0040] Step S2: determine whether the link key can be extracted from the first Bluetooth communication message, if so, extract the first Bluetooth diagnostic data from the first Bluetooth communication message, and use the link key to decrypt the second Bluetooth communication message to obtain the second Bluetooth diagnostic data. If not, determine that the Bluetooth communication does not use encryption processing.

[0041] Step S3, determining whether the first Bluetooth diagnostic data and the second Bluetooth diagnostic data are consistent, if so, determining that the Bluetooth diagnosis adopts link layer encryption and application layer encryption when the first Bluetooth diagnostic data is in an encrypted state, and determining that the Bluetooth diagnosis adopts link layer encryption when the first Bluetooth diagnostic data is in an unencrypted state. If not, determining that the Bluetooth diagnosis does not adopt encryption processing.

[0042] In this embodiment, when the diagnostic instrument is used to perform Bluetooth diagnosis on the vehicle, Bluetooth communication messages will be exchanged between the diagnostic instrument and the vehicle. For example, the diagnostic instrument sends a Bluetooth diagnostic data acquisition request message to the vehicle, and the vehicle feeds back a message containing Bluetooth diagnostic data to the diagnostic instrument. When performing Bluetooth diagnostic operations, the encryption level of Bluetooth diagnosis can be divided into unencrypted, link layer encryption only, and additional application layer encryption on the basis of link layer encryption. How to identify and analyze the above encryption levels is conducive to evaluating the security and accuracy of Bluetooth diagnosis.

[0043] The principle of the test evaluation method is explained, and the Bluetooth communication message transmitted between the vehicle and the diagnostic instrument is defined as the second Bluetooth communication message, and the first Bluetooth communication message is defined as the result of the diagnostic instrument receiving and processing the second Bluetooth communication message. If encryption is not performed, the link key cannot be extracted from the first Bluetooth communication message. In the corresponding step S2, if the link key cannot be extracted, it is directly judged that no encryption measures are adopted. However, in some special cases, for example, the diagnostic instrument and the vehicle will negotiate to obtain a link key, but when performing Bluetooth diagnosis, this link key is not effectively used for link layer encryption. At this time, the link key can also be extracted from the first Bluetooth communication message, so it is necessary to further analyze the encryption level in the subsequent step S3.

[0044] If link layer encryption is used, first, after receiving the second Bluetooth communication message, the diagnostic instrument will automatically extract the link key to decrypt the message to obtain the first Bluetooth diagnostic data. The link key and the first Bluetooth diagnostic data are stored in the diagnostic instrument as the first Bluetooth communication message. Secondly, the second Bluetooth diagnostic data after decrypting the second Bluetooth communication message using the link key should theoretically be consistent with the first Bluetooth diagnostic data, because the Bluetooth diagnostic data decrypted according to the same link layer encryption and decryption protocol should be the same. If they are inconsistent, it means that the link layer encryption operation is not used, because the first Bluetooth diagnostic data extracted from the first Bluetooth communication message is data that is not decrypted using the link key and is directly extracted, while the second Bluetooth diagnostic data extracted from the second Bluetooth communication message is data decrypted using the link key and is decrypted data. Therefore, the two will not be consistent.

[0045] After determining whether to perform encryption operation based on whether the first Bluetooth diagnostic data and the second Bluetooth diagnostic data are consistent, if the two are consistent, determining whether application layer encryption is performed on the basis of link layer encryption based on whether the first Bluetooth diagnostic data is in an encrypted state; if it is in an encrypted state, application layer encryption is performed; if it is in an unencrypted state, application layer encryption is not performed.

[0046] Through the above multiple judgments, the encryption security level test and evaluation requirements when the Internet of Vehicles uses Bluetooth diagnostic scenarios can be met. It can analyze whether the encryption processing mechanism is actually used when using Bluetooth diagnostics between the diagnostic instrument and the vehicle, and can detect and evaluate the encryption level, whether only the link layer encryption method is used or both the link layer and the application layer are encrypted. At the same time, by standardizing the test steps and test process methods, the problem of inaccurate and inconsistent test evaluation results caused by human factors can be solved.

[0047] Furthermore, in one embodiment, the method includes:

[0048] The second Bluetooth communication message transmitted between the vehicle and the diagnostic instrument is obtained by using an air packet capture device.

[0049] In this embodiment, a Bluetooth broadband sniffing device, i.e., an air packet capture device, is called to capture the Bluetooth broadcast communication message, i.e., the second Bluetooth communication message, when the diagnostic instrument and the vehicle perform Bluetooth diagnostic communication, thereby directly capturing and intercepting the data in transmission and improving data acquisition efficiency.

[0050] Furthermore, in one embodiment, the method includes:

[0051] All Bluetooth frequency bands are monitored to obtain the second Bluetooth communication message.

[0052] In this embodiment, the air packet capture device starts working, sniffing the Bluetooth MAC addresses of the diagnostic instrument and the vehicle, and detecting whether the target object is in an activated state. When the Bluetooth of both parties is activated, the air packet capture device starts broadband sniffing and monitors the messages on 79 Bluetooth frequency band channels at the same time to obtain all types of Bluetooth communication messages.

[0053] Furthermore, in one embodiment, the method includes:

[0054] A host control interface HCI (Host Control Interface) log is obtained from the diagnostic instrument side, and the first Bluetooth communication message is extracted from the HCI log.

[0055] In this embodiment, after the diagnostic instrument receives the second Bluetooth communication message, if link layer encryption is adopted, the message is automatically decrypted and stored in the HCI log. If encryption measures are not adopted, the message is processed in other ways and stored in the HCI log. In some other embodiments, in addition to the HCI log, data can also be stored in other storage units.

[0056] In a specific embodiment, the diagnostic instrument HCI layer log messages are recorded and collected based on the Bluetooth module log printing function in the Android developer mode of the diagnostic instrument, and the log content is based on the Bluetooth HCI layer.

[0057] Further, in one embodiment, the above-mentioned obtaining of HCI logs specifically includes the following steps:

[0058] The universal serial bus USB interface on the diagnostic instrument is connected to a data acquisition device with a USB line, and the data acquisition device sends a debug bridge ABD instruction to obtain the HCI log from the diagnostic instrument side.

[0059] In this embodiment, if the tester integrates the local ADB (Android Debug Bridge) debugging function, the data acquisition device is directly connected to the physical interface of the diagnostic instrument through a USB (Universal Serial Bus) debugging line, and then uses the ADB debugging command to export the Bluetooth HCI log file of the diagnostic instrument system end.

[0060] Further, in one embodiment, the above-mentioned obtaining of HCI logs specifically includes the following steps:

[0061] The wireless communication interface on the diagnostic instrument is connected to a data acquisition device with wireless communication function, and the data acquisition device sends a debug bridge ABD instruction or a remote port debug instruction to obtain the HCI log from the diagnostic instrument side.

[0062] In this embodiment, if the tester integrates commonly used remote port debugging such as the scp (used to copy files between the local computer and the remote server) function in the SSH (Secure Shell) service, the data acquisition device can also be wirelessly networked with the diagnostic instrument via WiFi or Ethernet, and use remote debugging instructions such as the scp instruction of port 22 (SSH service) or the adb pull instruction of port 5555 (remote ADB debugging service) through the remote debugging port service to export the Bluetooth HCI log file collected by the diagnostic instrument system end according to the Bluetooth HCI log address of the diagnostic instrument.

[0063] Further, in one embodiment, the extracting the first Bluetooth communication message specifically includes the following steps:

[0064] Filter the HCI log by link key feature matching to filter out the link key exchange process data and the first Bluetooth diagnostic data.

[0065] Extract the link key from the link key exchange process data.

[0066] In this embodiment, the HCI log message is filtered by link key feature matching to filter the link key exchange process data between the diagnostic instrument and the vehicle, and the 32-bit link key between the diagnostic instrument and the vehicle is extracted.

[0067] According to the principle of the Bluetooth protocol stack, the application layer data messages in the HCI log in which the communicating parties complete the key negotiation and start to send the connection request and perform the Bluetooth diagnosis normally are filtered out, and the corresponding content of the first Bluetooth diagnostic data is extracted.

[0068] The extracted link key is imported into the corresponding host computer software of the air packet capture device, and the link key encryption and decryption algorithm specified in the Bluetooth protocol is applied to the Bluetooth broadcast message decryption, and the decrypted payload content, that is, the second Bluetooth diagnostic data, is extracted.

[0069] Furthermore, in one embodiment, the method includes:

[0070] When it is determined that there is diagnostic plaintext information in the first Bluetooth diagnostic data, it is determined that the first Bluetooth diagnostic data is in an unencrypted state; when it is determined that there is no diagnostic plaintext information in the first Bluetooth diagnostic data, it is determined that the first Bluetooth diagnostic data is in an encrypted state.

[0071] In this embodiment, the application layer data in the Bluetooth HCI log is analyzed based on the diagnostic protocol to determine whether there is any plaintext information leakage related to the diagnostic service, so as to determine whether the application layer encryption processing mechanism is adopted when the diagnostic instrument and the vehicle end perform Bluetooth diagnostic communication, and output the corresponding result.

[0072] In a specific embodiment, the diagnostic service ID and the diagnostic command identification code DID are defined in advance according to the general diagnostic protocol specification. The diagnostic service ID and DID service are specified in the ISO 14229-1 standard, including the scope of use and the content represented by some commonly used DIDs. For example, the read operation service ID is 0x22, and the DID used by the vehicle VIN (Vehicle Identification Number) is F190. "22F1 90..." indicates that the Bluetooth diagnostic data that the diagnostic instrument wants to read is the vehicle VIN number. The vehicle end replies "62F1 90" followed by the VIN code, and the VIN code is the Bluetooth diagnostic data. If it is determined that the first Bluetooth diagnostic data extracted from the first Bluetooth communication message is plain text information, it means that the Bluetooth diagnosis only uses link layer encryption. If not, it means that the Bluetooth diagnosis is encrypted at the application layer on the basis of link layer encryption.

[0073] In summary, the present invention discloses a method for evaluating the security level of Bluetooth diagnostic encryption in a connected vehicle network, which extracts a link key and applies the link key to decrypt Bluetooth broadcast sniffing data, and compares and analyzes the decrypted Bluetooth broadcast sniffing data with the data in the Bluetooth HCI log to verify whether the link key is truly and effectively applied to encrypt link layer data in the communication between the two parties. The Bluetooth diagnostic communication data is further analyzed according to the diagnostic protocol to verify whether the application layer data encryption processing mechanism is adopted.

[0074] In a second aspect, an embodiment of the present application also provides a Bluetooth diagnostic encryption level test and evaluation system.

[0075] In one embodiment, referring to Figure 2 , Figure 2 This is a functional module diagram of an embodiment of a Bluetooth diagnostic encryption level test and evaluation device of the present application. Figure 2 As shown, the Bluetooth diagnostic encryption level test evaluation device includes:

[0076] The data acquisition module 1 is used to acquire a first Bluetooth communication message stored on the diagnostic instrument side and a second Bluetooth communication message transmitted between the vehicle and the diagnostic instrument when the diagnostic instrument is used to perform Bluetooth diagnosis on the vehicle.

[0077] Data processing module 2 is used to determine whether the link key can be extracted from the first Bluetooth communication message. If so, the first Bluetooth diagnostic data is extracted from the first Bluetooth communication message, and the second Bluetooth communication message is decrypted using the link key to obtain the second Bluetooth diagnostic data. If not, it is determined that the Bluetooth communication does not use encryption processing. It is also used to determine whether the first Bluetooth diagnostic data and the second Bluetooth diagnostic data are consistent. If so, when the first Bluetooth diagnostic data is in an encrypted state, it is determined that the Bluetooth diagnosis uses link layer encryption and application layer encryption. When the first Bluetooth diagnostic data is in an unencrypted state, it is determined that the Bluetooth diagnosis uses link layer encryption. If not, it is determined that the Bluetooth diagnosis does not use encryption processing.

[0078] In this embodiment, when the diagnostic instrument is used to perform Bluetooth diagnosis on the vehicle, Bluetooth communication messages will be exchanged between the diagnostic instrument and the vehicle. For example, the diagnostic instrument sends a Bluetooth diagnostic data acquisition request message to the vehicle, and the vehicle feeds back a message containing Bluetooth diagnostic data to the diagnostic instrument. When performing Bluetooth diagnostic operations, the encryption level of Bluetooth diagnosis can be divided into unencrypted, link layer encryption only, and additional application layer encryption on the basis of link layer encryption. How to identify and analyze the above encryption levels is conducive to evaluating the security and accuracy of Bluetooth diagnosis.

[0079] The principle of the test evaluation method is explained, and the Bluetooth communication message transmitted between the vehicle and the diagnostic instrument is defined as the second Bluetooth communication message, and the first Bluetooth communication message is defined as the result of the diagnostic instrument receiving and processing the second Bluetooth communication message. If encryption is not performed, the link key cannot be extracted from the first Bluetooth communication message. In the corresponding step S2, if the link key cannot be extracted, it is directly judged that no encryption measures are adopted. However, in some special cases, for example, the diagnostic instrument and the vehicle will negotiate to obtain a link key, but when performing Bluetooth diagnosis, this link key is not effectively used for link layer encryption. At this time, the link key can also be extracted from the first Bluetooth communication message, so it is necessary to further analyze the encryption level in the subsequent step S3.

[0080] If link layer encryption is used, first, after receiving the second Bluetooth communication message, the diagnostic instrument will automatically extract the link key to decrypt the message to obtain the first Bluetooth diagnostic data. The link key and the first Bluetooth diagnostic data are stored in the diagnostic instrument as the first Bluetooth communication message. Secondly, the second Bluetooth diagnostic data after decrypting the second Bluetooth communication message using the link key should theoretically be consistent with the first Bluetooth diagnostic data, because the Bluetooth diagnostic data decrypted according to the same link layer encryption and decryption protocol should be the same. If they are inconsistent, it means that the link layer encryption operation is not used, because the first Bluetooth diagnostic data extracted from the first Bluetooth communication message is data that is not decrypted using the link key and is directly extracted, while the second Bluetooth diagnostic data extracted from the second Bluetooth communication message is data decrypted using the link key and is decrypted data. Therefore, the two will not be consistent.

[0081] After determining whether to perform encryption operation based on whether the first Bluetooth diagnostic data and the second Bluetooth diagnostic data are consistent, if the two are consistent, determining whether application layer encryption is performed on the basis of link layer encryption based on whether the first Bluetooth diagnostic data is in an encrypted state; if it is in an encrypted state, application layer encryption is performed; if it is in an unencrypted state, application layer encryption is not performed.

[0082] Through the above multiple judgments, the encryption security level test and evaluation requirements when the Internet of Vehicles uses Bluetooth diagnostic scenarios can be met. It can analyze whether the encryption processing mechanism is actually used when using Bluetooth diagnostics between the diagnostic instrument and the vehicle, and can detect and evaluate the encryption level, whether only the link layer encryption method is used or both the link layer and the application layer are encrypted. At the same time, by standardizing the test steps and test process methods, the problem of inaccurate and inconsistent test evaluation results caused by human factors can be solved.

[0083] Among them, the functional implementation of each module in the above-mentioned Bluetooth diagnostic encryption level test and evaluation device corresponds to the various steps in the above-mentioned Bluetooth diagnostic encryption level test and evaluation method embodiment, and its functions and implementation processes are no longer repeated here one by one.

[0084] In a third aspect, an embodiment of the present application provides a Bluetooth diagnostic encryption level test and evaluation device, which may be a personal computer (PC), a laptop computer, a server, or other device with data processing capabilities.

[0085] Reference Figure 3 , Figure 3 The hardware structure diagram of the Bluetooth diagnostic encryption level test and evaluation device involved in the embodiment of the present application is shown in FIG. In the embodiment of the present application, the Bluetooth diagnostic encryption level test and evaluation device may include a processor, a memory, a communication interface, and a communication bus.

[0086] The communication bus may be of any type and is used to interconnect the processor, the memory, and the communication interface.

[0087] The communication interface includes an input / output (I / O) interface, a physical interface, and a logical interface, etc., which are used to realize the interconnection of devices inside the Bluetooth diagnostic encryption level test and evaluation device, and an interface for realizing the interconnection of the Bluetooth diagnostic encryption level test and evaluation device with other devices (such as other computing devices or user devices). The physical interface can be an Ethernet interface, an optical fiber interface, an ATM interface, etc. The user device can be a display, a keyboard, etc.

[0088] The memory can be various types of storage media, such as random access memory (RAM), read-only memory (ROM), non-volatile RAM (NVRAM), flash memory, optical storage, hard disk, programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), etc.

[0089] The processor may be a general-purpose processor, and the general-purpose processor may call the Bluetooth diagnostic encryption level test evaluation program stored in the memory, and execute the Bluetooth diagnostic encryption level test evaluation method provided by the embodiment of the present application. For example, the general-purpose processor may be a central processing unit (CPU). Among them, the method executed when the Bluetooth diagnostic encryption level test evaluation program is called can refer to the various embodiments of the Bluetooth diagnostic encryption level test evaluation method of the present application, which will not be repeated here.

[0090] Those skilled in the art will understand that Figure 3 The hardware structure shown in the figure does not constitute a limitation on the present application, and may include more or less components than shown in the figure, or combine certain components, or arrange the components differently.

[0091] In a fourth aspect, an embodiment of the present application also provides a computer-readable storage medium.

[0092] The computer-readable storage medium of the present application stores a Bluetooth diagnostic encryption level test evaluation program, wherein when the above-mentioned Bluetooth diagnostic encryption level test evaluation program is executed by a processor, the steps of the above-mentioned Bluetooth diagnostic encryption level test evaluation method are implemented.

[0093] Among them, the method implemented when the Bluetooth diagnostic encryption level test evaluation program is executed can refer to the various embodiments of the Bluetooth diagnostic encryption level test evaluation method of the present application, and will not be repeated here.

[0094] It should be noted that the serial numbers of the above-mentioned embodiments of the present application are only for description and do not represent the advantages or disadvantages of the embodiments.

[0095] The terms "including" and "having" and any variations thereof in the specification and claims of this application and the above-mentioned drawings are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices. The terms "first", "second" and "third" are used to distinguish different objects, etc., and do not represent a sequence, nor do they limit "first", "second" and "third" to different types.

[0096] In the description of the embodiments of the present application, "exemplary", "for example" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary", "for example" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary", "for example" or "for example" is intended to present related concepts in a specific way.

[0097] In the description of the embodiments of the present application, unless otherwise specified, “ / ” means or, for example, A / B can mean A or B; the “and / or” in the text is merely a description of the association relationship of associated objects, indicating that three relationships may exist, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, in the description of the embodiments of the present application, “multiple” refers to two or more than two.

[0098] In some processes described in the embodiments of the present application, multiple operations or steps that appear in a specific order are included, but it should be understood that these operations or steps may not be executed in the order in which they appear in the embodiments of the present application or in parallel, and the sequence number of the operation is only used to distinguish the different operations, and the sequence number itself does not represent any execution order. In addition, these processes may include more or fewer operations, and these operations or steps may be executed in sequence or in parallel, and these operations or steps may be combined.

[0099] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, disk, CD) as described above, and includes a number of instructions for a terminal device to execute the methods described in each embodiment of the present application.

[0100] The above are only preferred embodiments of the present application, and are not intended to limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A Bluetooth diagnostic encryption level test and evaluation method, characterized in that: The method comprises: When using the diagnostic instrument to perform Bluetooth diagnosis on the vehicle, obtaining a first Bluetooth communication message stored on the diagnostic instrument side and a second Bluetooth communication message transmitted between the vehicle and the diagnostic instrument; Determine whether a link key can be extracted from the first Bluetooth communication message, if so, extract the first Bluetooth diagnostic data from the first Bluetooth communication message, and use the link key to decrypt the second Bluetooth communication message to obtain the second Bluetooth diagnostic data; if not, determine that the Bluetooth communication is not encrypted; Determine whether the first Bluetooth diagnostic data and the second Bluetooth diagnostic data are consistent. If so, determine that the Bluetooth diagnosis adopts link layer encryption and application layer encryption when the first Bluetooth diagnostic data is in an encrypted state, and determine that the Bluetooth diagnosis adopts link layer encryption when the first Bluetooth diagnostic data is in an unencrypted state; if not, determine that the Bluetooth diagnosis does not adopt encryption processing.

2. The Bluetooth diagnostic encryption level test and evaluation method according to claim 1, characterized in that: The method comprises: The second Bluetooth communication message transmitted between the vehicle and the diagnostic instrument is obtained by using an air packet capture device.

3. The Bluetooth diagnostic encryption level test and evaluation method according to claim 1, wherein: The method comprises: All Bluetooth frequency bands are monitored to obtain the second Bluetooth communication message.

4. The Bluetooth diagnostic encryption level test and evaluation method according to claim 1, wherein: The method comprises: Obtain a host control interface HCI log from the diagnostic instrument side, and extract the first Bluetooth communication message from the HCI log.

5. The Bluetooth diagnostic encryption level test and evaluation method as claimed in claim 4, characterized in that: The obtaining of the HCI log specifically includes the following steps: The universal serial bus USB interface on the diagnostic instrument is connected to a data acquisition device with a USB line, and the data acquisition device sends a debug bridge ABD instruction to obtain the HCI log from the diagnostic instrument side.

6. The Bluetooth diagnostic encryption level test and evaluation method as claimed in claim 4, characterized in that: The obtaining of the HCI log specifically includes the following steps: The wireless communication interface on the diagnostic instrument is connected to a data acquisition device with wireless communication function, and the data acquisition device sends a debug bridge ABD instruction or a remote port debug instruction to obtain the HCI log from the diagnostic instrument side.

7. The Bluetooth diagnostic encryption level test and evaluation method as claimed in claim 4, characterized in that: The extracting of the first Bluetooth communication message specifically comprises the following steps: Filter the HCI log by link key feature matching to filter out the link key exchange process data and the first Bluetooth diagnostic data; Extract the link key from the link key exchange process data.

8. The Bluetooth diagnostic encryption level test and evaluation method according to claim 1, wherein: The method comprises: When it is determined that there is diagnostic plaintext information in the first Bluetooth diagnostic data, it is determined that the first Bluetooth diagnostic data is in an unencrypted state; when it is determined that there is no diagnostic plaintext information in the first Bluetooth diagnostic data, it is determined that the first Bluetooth diagnostic data is in an encrypted state.

9. A Bluetooth diagnostic encryption level test and evaluation system, characterized in that: The system comprises: A data acquisition module, which is used to acquire a first Bluetooth communication message stored on the diagnostic instrument side and a second Bluetooth communication message transmitted between the vehicle and the diagnostic instrument when the diagnostic instrument is used to perform Bluetooth diagnosis on the vehicle; A data processing module, which is used to determine whether a link key can be extracted from a first Bluetooth communication message. If so, first Bluetooth diagnostic data is extracted from the first Bluetooth communication message, and a second Bluetooth communication message is decrypted using the link key to obtain second Bluetooth diagnostic data; if not, it is determined that Bluetooth communication does not use encryption processing; it is also used to determine whether the first Bluetooth diagnostic data and the second Bluetooth diagnostic data are consistent. If so, it is determined that Bluetooth diagnosis uses link layer encryption and application layer encryption when the first Bluetooth diagnostic data is in an encrypted state, and when the first Bluetooth diagnostic data is in an unencrypted state, it is determined that Bluetooth diagnosis uses link layer encryption; if not, it is determined that Bluetooth diagnosis does not use encryption processing.

10. A Bluetooth diagnostic encryption level test and evaluation device, characterized in that: The Bluetooth diagnostic encryption level test evaluation device includes a processor, a memory, and a Bluetooth diagnostic encryption level test evaluation program stored in the memory and executable by the processor, wherein when the Bluetooth diagnostic encryption level test evaluation program is executed by the processor, the steps of the Bluetooth diagnostic encryption level test evaluation method as described in any one of claims 1 to 8 are implemented.

Images