Data security verification method, terminal equipment and computer readable storage medium

Abstract

The invention is suitable for the technical field of vehicle-mounted data security verification, and provides a data security verification method, terminal equipment and a computer readable storage medium, and the method comprises the steps: receiving first text information from a second server, the first text information comprising information of a first vehicle-mounted function requested to be subscribed by a user; identifying the first text information according to a first digital certificate to obtain first identification data, wherein the first digital certificate is a digital certificate associated with the first vehicle-mounted function in a plurality of digital certificates; first information is sent to the second server side, the first information comprises the first identification data and the first digital certificate, and the first information is used for verifying whether the user has the permission to subscribe to the first vehicle-mounted function or not. According to the method, the security of the vehicle-mounted subscription data of the user can be improved.

Description

Technical Field

[0001] The present application belongs to the technical field of vehicle-mounted data security verification, and in particular, relates to a data security verification method, a terminal device, and a computer-readable storage medium. Background Art

[0002] With the advancement of Internet and mobile communication technologies, in-vehicle information systems are becoming more and more intelligent and can provide more diverse and personalized services, which has prompted the continuous development and improvement of in-vehicle subscription functions. And as the interoperability between vehicles and other devices (such as smartphones) increases, in-vehicle subscription services need to be able to span different platforms and devices, which requires more mature technologies and stricter data protection measures. In addition, in-vehicle subscription services can collect a large amount of user data, which can be used to improve services, provide personalized experiences, predict maintenance, etc. Therefore, in order to provide users with a safe and reliable service experience, a verification method to ensure the security of user data is urgently needed to protect user data security. Summary of the invention

[0003] The embodiments of the present application provide a data security verification method, a terminal device, and a computer-readable storage medium, which can improve the security of the user's in-vehicle subscription data.

[0004] In a first aspect, an embodiment of the present application provides a data security verification method, including:

[0005] Receiving a first text message from a second server, where the first text message includes information about a first in-vehicle function that a user requests to subscribe to;

[0006] Identify the first text information according to the first digital certificate to obtain first identification data, where the first digital certificate is a digital certificate associated with the first vehicle-mounted function among multiple digital certificates;

[0007] Sending first information to the second server, the first information including first identification data and a first digital certificate, the first information being used to verify whether the user has the authority to subscribe to the first vehicle-mounted function.

[0008] In the embodiment of the present application, the first server receives the first text message containing the user's first vehicle-mounted subscription information sent by the second server; retrieves the first digital certificate corresponding to the first vehicle-mounted function subscribed by the user from the preset digital certificate library, and uses the first digital certificate to identify the user's subscription information, and sends the identification data and the digital certificate to the second server to verify whether the user has the right to subscribe to the first vehicle-mounted function. This is equivalent to using multiple verification methods to perform multiple verifications on the user's data, which can improve the user's data security.

[0009] In a possible implementation manner of the first aspect, the digital certificate includes a first field, and the first field is used to verify the identity information of the second server; before identifying the first text information according to the first digital certificate to obtain the first identification data, the method further includes:

[0010] Determining a type of a first vehicle-mounted function according to the first text information;

[0011] A certificate whose identity information of the second server indicated by the first field included in the multiple digital certificates matches the type of the first vehicle-mounted function is determined as the first digital certificate.

[0012] In an embodiment of the present application, the server can select the corresponding digital certificate according to the type of in-vehicle function subscribed by the user, so that the certificate can be flexibly configured according to different functional requirements. When it is necessary to add new in-vehicle functions or update existing functions, it is only necessary to update the corresponding digital certificate and configuration information without the need for large-scale modifications to the entire system, thereby improving the operating efficiency and scalability of the system.

[0013] In a possible implementation manner of the first aspect, identifying the first text information according to the first digital certificate to obtain the first identification data includes:

[0014] Calculate a first hash value corresponding to the first text information;

[0015] Obtaining a first key pair corresponding to the first digital certificate, the first key pair including at least a first encryption key;

[0016] The first hash value is encrypted according to a first encryption key corresponding to the first digital certificate to obtain first identification data.

[0017] In the embodiment of the present application, by encrypting the hash value, the server ensures the privacy of the original data. Even if the hash value is leaked, the original data cannot be restored, which helps to protect the privacy and security of user data. The process of encrypting the hash value with a key is equivalent to creating a digital signature for the data, which helps to verify the integrity and source of the data.

[0018] In one embodiment, the method further comprises:

[0019] The password pair in the first digital certificate is updated to a second key pair, where the second key pair includes a second encryption key and a second decryption password corresponding to the second encryption key.

[0020] In the embodiment of the present application, data security can be improved by regularly changing the key.

[0021] In one embodiment, the method is applied to a first device, wherein the first device has a certificate chain, and the certificate chain includes at least two digital certificates; the method includes:

[0022] Receiving a first text message, a first digital certificate and first identification data, wherein the first text message includes information about a first in-vehicle function that a user requests to subscribe to; and the first digital certificate is a digital certificate associated with the first in-vehicle function;

[0023] Perform security verification on the first digital certificate and the first identification data according to the certificate chain to obtain a verification result;

[0024] According to the verification result and the first text information, it is determined whether the user has the authority to subscribe to the first in-vehicle function.

[0025] In the embodiment of the present application, the first device first verifies whether the first digital certificate is credible, ensuring that the certificate has not expired, been revoked or forged, which helps prevent malicious entities from using forged or tampered certificates to impersonate their identities. On the basis that the certificate is credible, the vehicle terminal further verifies the first field corresponding to the certificate to ensure that the information in the certificate is consistent with the target currently being accessed. By verifying the identification data, the vehicle terminal can decide whether to allow access to specific functions or services based on the specific data content. By verifying the identification data, the vehicle terminal can decide whether to allow access to specific functions or services based on the specific data content.

[0026] In a possible implementation manner of the first aspect, performing security verification on the first digital certificate and the first identification data according to the certificate chain to obtain a verification result includes:

[0027] Performing trustworthy verification on the first digital certificate according to the certificate chain;

[0028] If the verification result of the first digital certificate indicates that the first digital certificate is credible, verify the first field corresponding to the first digital certificate to obtain a first verification result;

[0029] The first verification result indicates that the first field verification is passed, and the first identification data is verified to obtain a verification result.

[0030] In an embodiment of the present application, the certificate chain is a mechanism for verifying the validity of a digital certificate. It links the certificate to a root certificate to ensure that the certificate is issued by a trusted certificate authority. By verifying whether the authorization information of the first digital certificate matches the authorization information of the certificate in the preset certificate chain, the vehicle terminal ensures the legitimacy and trustworthiness of the certificate.

[0031] In a possible implementation manner of the first aspect, the first digital certificate includes authorization information of the first digital certificate, and performing trustworthy verification on the first digital certificate according to the certificate chain includes:

[0032] Verify whether the authorization information of the first digital certificate matches the authorization information recorded in the second digital certificate, where the second digital certificate is a digital certificate in the certificate chain connected to the first digital certificate;

[0033] If the authorization information of the first digital certificate matches the authorization information recorded in the second digital certificate, it is determined that the first digital certificate is credible.

[0034] In an embodiment of the present application, the certificate chain is a mechanism for verifying the validity of a digital certificate. It links the certificate to a root certificate to ensure that the certificate is issued by a trusted certificate authority. By verifying whether the authorization information of the first digital certificate matches the authorization information of the certificate in the preset certificate chain, the vehicle terminal ensures the legitimacy and trustworthiness of the certificate.

[0035] In a possible implementation manner of the first aspect, verifying a first field corresponding to the first digital certificate to obtain a first verification result includes:

[0036] Determine whether the identity information corresponding to the first field in the first digital certificate is the same as the identity information corresponding to the second server;

[0037] If the identity information corresponding to the first field in the first digital certificate is the same as the identity information corresponding to the second server, a first verification result indicating that the first field verification is successful is obtained.

[0038] In an embodiment of the present application, by determining whether the first field in the certificate matches the type of in-vehicle function subscribed by the user, the in-vehicle terminal can finely control access rights to specific functions, which helps ensure that only users with corresponding permissions can use the functions they have subscribed to.

[0039] In a possible implementation manner of the first aspect, verifying the first identification data to obtain a verification result includes:

[0040] Calculate a second hash value corresponding to the first text information;

[0041] The first identification data is verified according to the second hash value to obtain a verification result.

[0042] In the embodiment of the present application, by calculating and verifying the hash value, it is ensured that the data received by the vehicle terminal remains intact and not tampered with during the transmission process, and matches the expected identification data, thereby improving the security, reliability and user trust of the system.

[0043] In a possible implementation manner of the first aspect, verifying the first identification data according to the second hash value to obtain a verification result includes:

[0044] Obtaining a first decryption password of the first digital certificate from the first digital certificate, the first decryption password corresponds to the first encryption key, and the first identification data is encrypted using the first encryption password;

[0045] Decrypt the first identification data according to the first decryption password to obtain a decrypted first hash value;

[0046] If the second hash value is the same as the first hash value, the verification result indicates that the security verification of the first identification data and the first digital certificate is passed.

[0047] In an embodiment of the present application, by using the public key in the digital certificate to decrypt the identification data, the vehicle-mounted terminal can verify that the data encryption process is completed by a trusted entity, which helps to ensure that the data is not tampered with during transmission and maintains the confidentiality and security of the data.

[0048] In a second aspect, an embodiment of the present application provides a terminal device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, a data security verification method as described in any one of the first aspects above is implemented.

[0049] In a third aspect, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements a data security verification method as described in any one of the first aspects above.

[0050] It can be understood that the beneficial effects of the second to third aspects mentioned above can be found in the relevant description of the first aspect mentioned above, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0052] Figure 1 This is a schematic diagram of the data security verification method provided in the embodiment of the present application. Figure 1 ;

[0053] Figure 2 is a schematic diagram of a process for obtaining first identification data provided in an embodiment of the present application;

[0054] Figure 3 This is a schematic diagram of the data security verification method provided in the embodiment of the present application. Figure 2 ;

[0055] Figure 4 This is a schematic diagram of the data security verification method provided in the embodiment of the present application. Figure 3 ;

[0056] Figure 5 It is a flowchart of the verification result provided by the embodiment of the present application;

[0057] Figure 6 It is a structural diagram of a data security verification method provided in an embodiment of the present application;

[0058] Figure 7 It is a schematic diagram of the structure of the terminal device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0059] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0060] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, wholes, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or combinations thereof.

[0061] It should also be understood that the term “and / or” used in the specification and appended claims refers to any and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0062] As used in the specification and appended claims of this application, the term "if" can be interpreted as "when" or "uponce" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" can be interpreted as meaning "uponce it is determined" or "in response to determining" or "uponce [described condition or event] is detected" or "in response to detecting [described condition or event]", depending on the context.

[0063] In addition, in the description of the present application specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0064] References to "one embodiment" or "some embodiments" etc. described in the specification of this application mean that one or more embodiments of the present application include specific features, structures or characteristics described in conjunction with the embodiment. Therefore, the phrases "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments", etc. appearing in different places in this specification do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways.

[0065] With the advancement of Internet and mobile communication technology, in-vehicle information systems are becoming more and more intelligent and can provide more diverse and personalized services, which has prompted the continuous development and improvement of in-vehicle subscription functions. And as the interoperability between vehicles and other devices (such as smartphones) increases, in-vehicle subscription services need to be able to span different platforms and devices, which requires more mature technology and stricter data protection measures. In addition, in-vehicle subscription services can collect a large amount of user data, which can be used to improve services, provide personalized experiences, predict maintenance, etc. Therefore, in order to provide users with a safe and reliable service experience, a verification method to ensure the security of user data is urgently needed to protect user data security.

[0066] In the embodiment of the present application, a data security verification system is provided, including a server and an in-vehicle terminal; the server has one or more digital certificates, and a certificate chain is pre-installed in the in-vehicle terminal, and the certificate chain is used to verify the credibility of the digital certificate; the data verification system performs security verification on the user's in-vehicle subscription information, and during the verification process, the security of the data is verified by using a key rotation mechanism and multiple verification methods.

[0067] See also Figure 1 , is a schematic diagram of the process of the data security verification method provided in the embodiment of the present application Figure 1 , applied to a first server, the first server has one or more digital certificates, each digital certificate is associated with a vehicle function, as an example but not limitation, the method may include the following steps:

[0068] S101, receiving a first text message sent from a second server, where the first text message includes information about an in-vehicle function subscribed by a user.

[0069] In the embodiment of the present application, the first service end is equivalent to the first service end or platform that provides security management. This platform is the core part of the entire system and is responsible for protecting the security of user data and vehicle functions. It implements a series of security measures, including data encryption, access control and identity authentication, to ensure that only authorized users can access sensitive information. The vehicle terminal is, of course, the data processing system inside the vehicle. The second service end is the business end that provides the vehicle subscription function, which is equivalent to the platform responsible for providing or managing the vehicle functions. The platform includes a variety of business types, and different business types correspond to different business ends. For example, AO business and FOTA business are two key services in the vehicle system. They each have different business ends. The AO business end usually provides users with remote access, management and service operation services; the FOTA business end is responsible for remotely sending and installing firmware updates for the vehicle system to fix vulnerabilities, add new functions or improve performance.

[0070] Specifically, the user inputs the in-vehicle function information that the user wants to subscribe to through the in-vehicle system or other devices (such as smart phones or tablets). These functions may include but are not limited to navigation, music streaming services, real-time traffic information, vehicle remote monitoring, etc. The second server converts the in-vehicle function information subscribed by the user into a license file. This license file is usually a text file containing authorization information, which proves the user's subscription rights to specific functions. This license file is the key used by the server to identify and verify the user's subscription information. The generated license file is sent to the first server as a first text message. The "first text message" here refers to the first message sent by the second server to the first server, which contains the details of the in-vehicle functions subscribed by the user. The first server receives the license file sent by the second server, which contains the in-vehicle function information subscribed by the user. The first server needs to parse this file to understand the specific subscription content of the user.

[0071] S102, identifying the first text information according to a first digital certificate to obtain first identification data, where the first digital certificate is a digital certificate associated with the first vehicle-mounted function among multiple digital certificates.

[0072] In the embodiment of the present application, the server pre-sets multiple digital certificates, which are used to verify and authorize the user's access to the vehicle functions. A digital certificate is an electronic document that contains the public key and the identity information of the certificate holder, and is usually used to encrypt and decrypt communication content and verify the identity of the participants.

[0073] Specifically, since the first server contains multiple first certificates corresponding to the in-vehicle functions, the first certificate corresponding to the first in-vehicle function subscribed by the user provided by the second server can be matched, and using the first digital certificate to identify the first text information is equivalent to a digital signature process, and the "first identification data" is equivalent to the signed data.

[0074] S103, sending first information to the second server, where the first information includes first identification data and a first digital certificate, and the first information is used to verify whether the user has the authority to subscribe to the first in-vehicle function.

[0075] In an embodiment of the present application, the first server sends the signature data (first identification data) and the first digital certificate to the second server to verify whether the user has the authority to subscribe to the in-vehicle function.

[0076] In one embodiment, the digital certificate includes a first field, and the first field is used to verify the identity information of the second server; before the step S102 is implemented, the method further includes:

[0077] S201: Determine a first type of a first in-vehicle function according to first text information.

[0078] In an embodiment of the present application, the first field is a custom field in the digital certificate, which is used to contain additional information that can help the server identify the type of business corresponding to the certificate. This field is usually set by the server according to the needs of different businesses. It can be any string, but there will usually be certain naming conventions for easy identification and management. Through the first field, the server can distinguish different businesses in the digital certificate. For example, if the server needs to manage digital certificates for AO business and FOTA business separately, it can set a specific extension field for the digital certificate of the AO business, such as "AOLIC", and set another extension field for the digital certificate of the FOTA business, such as "FOTA".

[0079] When the first server receives the first text message (i.e., the license file containing the vehicle function information subscribed by the user) sent by the second server, it will obtain the first type of the vehicle function subscribed by the user according to the information in the license file. This first type refers to the service end type corresponding to the specific function subscribed by the user, such as navigation, music playback, etc. corresponding to the vehicle functions managed by the AO service end, in which case the first type is the AO service end.

[0080] S202: Determine, as a first digital certificate, a certificate that matches the identity information of the second server indicated by the first field included in the multiple digital certificates and the first type of the first vehicle-mounted function.

[0081] In the embodiment of the present application, each of the multiple digital certificates preset by the first server includes a first field, which is used by the server to distinguish different services or functions.

[0082] When the first server receives the first text message sent by the second server (i.e., the license file containing the in-vehicle function information subscribed by the user), it will compare the information with the preset digital certificate. When the server retrieves the digital certificate based on the function type (first type) subscribed by the user, it will look for a certificate whose first field matches the first type. For example, if the function type subscribed by the user is AO service, the server will look for a digital certificate whose first field contains "AOLIC". Once the server finds a digital certificate whose first field matches the first type, this certificate is considered to be the "first digital certificate". The server will use this certificate to verify the user's subscription rights.

[0083] In the above method, by using the first field, the server can effectively manage different business types and functions and ensure the accuracy of the authorization process. This method improves the security and reliability of the system and also makes authorization management more flexible and efficient.

[0084] In one embodiment, see Figure 2 , is a schematic diagram of a process for obtaining first identification data provided in an embodiment of the present application, wherein the above step S102 includes:

[0085] S301: Calculate a first hash value corresponding to first text information.

[0086] In the embodiment of the present application, a hash operation is performed on the text (first text information) that needs to be signed (identified) to generate a hash value (first hash value) of a fixed length. This hash value is the fingerprint of the text and reflects the original content of the text.

[0087] Specifically, you need to select a suitable hash function. Common hash functions include MD5, SHA-1, SHA-256, etc. Different hash functions have different security and performance characteristics. For example, MD5 and SHA-1 have been shown to have security vulnerabilities and are no longer recommended for security-sensitive applications. Convert the first text information into a data format supported by the hash function. Usually, this involves converting the text into a byte string, because the hash function operates on byte data. Use the selected hash function to calculate the byte string of the text information. The hash function processes the input data (byte string) and outputs a fixed-length hash value (usually a digest). After the hash function is calculated, the output is a digest, which is usually a number. This digest is the hash value of the text (the first hash value). This value is usually a fixed-length string, such as 32 hexadecimal digits.

[0088] S302, obtaining a first key pair corresponding to the first digital certificate, the first key pair including at least a first encryption key and a first decryption key;

[0089] In the embodiment of the present application, after obtaining the first hash value corresponding to the first text information, the first server needs to digitally sign it, that is, encrypt it using the key corresponding to the first digital certificate to generate a signature. The first server stores multiple digital certificates, and the first server also stores the key corresponding to each certificate. The keys of multiple certificates are physically stored in the first server HSM.

[0090] The first server needs to obtain the first encryption key paired with the first digital certificate in the HSM. The digital certificate usually contains a first decryption key, i.e., a public key. The first decryption public key is publicly distributed and used to verify the signature, while the first encryption key must be kept confidential and is used to generate the signature.

[0091] S303: Encrypt the first hash value according to the first encryption key corresponding to the first digital certificate to obtain first identification data.

[0092] In the embodiment of the present application, once the first server has the first encryption key corresponding to the first digital certificate, it will use the first encryption key to encrypt the first hash value calculated previously. This process is usually performed by using the first encryption key to perform an asymmetric encryption algorithm on the hash value, such as RSA, ECC, etc. The result of the encryption is an encrypted hash value, also known as a digital signature.

[0093] The encrypted first hash value (digital signature) is the so-called first identification data. This data proves the sender's ownership of the original text and the statement that the text has not been tampered with. Because only the sender with the corresponding key can generate this signature, it is unique and can be used to verify the identity of the sender. The first server sends this encrypted hash value (first identification data) and the first digital certificate to the second server (AO end).

[0094] In the above method, by encrypting the hash value, the server ensures the privacy of the original data. Even if the hash value is leaked, the original data cannot be restored, which helps to protect the privacy and security of user data. The process of encrypting the hash value with a key is equivalent to creating a digital signature for the data, which helps to verify the integrity and source of the data.

[0095] In one embodiment, in order to ensure data security, the method further includes:

[0096] The password pair in the first digital certificate is updated to a second key pair, where the second key pair includes a second encryption key and a second decryption password corresponding to the second encryption key.

[0097] In the embodiment of the present application, for the sake of data security, the key of the digital certificate needs to be updated regularly. The "second key pair" here refers to a new key combination, which includes two parts: a second encryption key and a second decryption password corresponding to the second encryption key. The original password in the first digital certificate is replaced with a new key pair, so that even if the original password is no longer safe, the user can continue to use the digital certificate for encryption and decryption operations safely.

[0098] In one embodiment, see Figure 3 , is a schematic diagram of the process of the data security verification method provided in the embodiment of the present application Figure 2 ,like Figure 3 As shown, the method is applied to a first device, the first device has a certificate chain, and the certificate chain includes at least two digital certificates; the method includes:

[0099] S401, receiving first identification data, a first digital certificate and first text information, wherein the first text information includes information about a first in-vehicle function that a user requests to subscribe to; and the first digital certificate is a digital certificate associated with the first in-vehicle function;

[0100] In an embodiment of the present application, the first device is equivalent to a vehicle-mounted terminal. After receiving the first identification data, the first digital certificate and the first text message, the vehicle-mounted terminal performs security verification on these data. The "certificate chain" here refers to a series of digital certificates, which are used to verify the validity of a digital certificate. A certificate chain is a sequence of multiple digital certificates, each of which contains a trust anchor for its issuer (Certificate Authority, CA). The trust anchor is usually a certificate of a top-level CA, which is widely recognized and trusted. The certificate chain is used to verify the path of the certificate until a trusted root certificate is reached. In the present application, the certificate chain contains two trusted digital certificates that are pre-set in the vehicle's ECU.

[0101] S402: Perform security verification on the first digital certificate and the first identification data according to the certificate chain to obtain a verification result.

[0102] In the embodiment of the present application, the certificate chain is a series of digital certificates, which are arranged in a certain order to prove the legitimacy of a certificate and verify the security of the first identification data to obtain a verification result.

[0103] S403: Determine whether the user has the authority to subscribe to the first in-vehicle function according to the verification result and the first text information.

[0104] In the embodiment of the present application, after the security verification of the first digital certificate and the first identification data, the security of the first text information is verified.

[0105] In the examples of this application, see Figure 4 , is a schematic diagram of the process of the data security verification method provided in the embodiment of the present application Figure 3 ,like Figure 4 As shown, step S402 includes:

[0106] S501: Perform trustworthy verification on the first digital certificate according to the certificate chain.

[0107] In the embodiment of the present application, the vehicle terminal first verifies the validity of the received first digital certificate. It checks whether the issuer of the certificate is a trusted CA. The vehicle terminal uses a preset certificate chain to verify the first digital certificate. It starts from the issuer CA in the first digital certificate and verifies one by one until it reaches a root CA, which is a CA trusted by the vehicle terminal.

[0108] S502: When the verification result of the first digital certificate indicates that the first digital certificate is credible, verify the first field corresponding to the first digital certificate to obtain a first verification result.

[0109] In the embodiment of the present application, during the verification process of the digital certificate, after obtaining the first result (i.e., the result of whether the first digital certificate is credible and valid), the vehicle terminal needs to further verify the first field corresponding to the first digital certificate. If the first result indicates that the first digital certificate is invalid, there is no need to verify the first field.

[0110] S503: If the first verification result indicates that the first field verification is successful, the first identification data is verified to obtain a verification result.

[0111] In the embodiment of the present application, after the first digital certificate and the first field are verified, the first identification data is finally verified.

[0112] In one embodiment, step S502 includes:

[0113] S601, verifying whether the authorization information of the first digital certificate matches the authorization information recorded in the second digital certificate, where the second digital certificate is a digital certificate in the certificate chain connected to the first digital certificate;

[0114] In an embodiment of the present application, the first digital certificate usually contains some authorization information, such as the authority of the certificate holder, the validity period of the certificate, etc. The vehicle-mounted terminal needs to extract this information for further verification. The vehicle-mounted terminal compares this authorization information with the authorization information of the upstream certificate in the certificate chain. This is to ensure that each link in the certificate chain is legal and that the certificate is not issued without authorization. If the authorization information does not match, it may indicate that there is a problem with the certificate chain, or that the certificate itself is illegal.

[0115] S602: If the authorization information of the first digital certificate matches the authorization information recorded in the second digital certificate, it is determined that the first digital certificate is credible.

[0116] In the embodiment of the present application, if the authorization information in the certificate chain does not match the authorization information in the first digital certificate, it may indicate that there is a problem with the certificate chain, or that the certificate itself is illegal.

[0117] In one embodiment, if the authorization information of the first digital certificate matches the authorization information recorded in the second digital certificate, and the term of the first digital certificate is valid, it is determined that the first digital certificate is credible.

[0118] In the embodiment of the present application, the vehicle terminal checks the validity period of the first digital certificate. If the certificate has expired, it is invalid and the vehicle terminal should not trust this certificate. The validity period of the certificate is set by the CA when the certificate is issued, and usually has a start date and an end date.

[0119] If the authorization information matches and the certificate period is valid, the first digital certificate is considered to be credible. If any problem is found in the verification, such as the authorization information does not match or the certificate is expired, the first digital certificate is considered to be untrustworthy.

[0120] Through the above verification steps, the vehicle-mounted terminal obtains a first result, which indicates whether the first digital certificate is credible and valid.

[0121] In the embodiment of the present application, step S502 includes:

[0122] S701, determine whether the first type information corresponding to the first field in the first digital certificate is the same as the identity information corresponding to the second server.

[0123] In an embodiment of the present application, the first type of information corresponding to the first field in the first digital certificate is compared to see whether it is the same as the second server end. If the first type of information represents the AO end, and the identity information of the second server end represents the FOTA end, the authorization information of the two does not match.

[0124] The vehicle-mounted terminal extracts the first field in the first digital certificate, parses the first text information, obtains the business end type (first type) of the first service end corresponding to the first text information, and compares the business type corresponding to the first field in the first digital certificate with the corresponding business type in the first text information to determine whether they match, and obtains a matching result (second result).

[0125] In the embodiment of the present application, if the second type of the vehicle function corresponding to the first field in the first digital certificate is equal to the first type of the vehicle function corresponding to the user in the first text message,

[0126] Exemplarily, the first field is:

[0127] id-{organization}-ext-SignerPurpose=id-{organization}-ext{number}(1.3.6.1.4.59199.0.number.number)

[0128] The extended content of this field is SignerPurpose (signature certificate), and SignerPurpose is defined as::=PRINTABLE STRING (string)=(1.3.6.1.4.59199.0.number.number), where the string (1.3.6.1.4.59199.0.number.number) is the corresponding character language of the digital function type. The first field is parsed and the string is extracted, and the second type of information corresponding to the string is verified. Then, the second type of information is compared with the first type corresponding to the extracted first text information. If the two are the same, the first field in the first digital certificate is verified successfully. If they are not the same, the first field in the first digital certificate is verified failed.

[0129] In the above method, by determining whether the first field in the certificate matches the type of vehicle function subscribed by the user, the vehicle terminal can finely control access rights to specific functions, which helps ensure that only users with corresponding permissions can use the functions they have subscribed to.

[0130] S702, if the first type of information corresponding to the first field in the first digital certificate is the same as the identity information corresponding to the second server, a first verification result indicating that the first field verification is passed is obtained.

[0131] In an embodiment of the present application, the core of the verification process is to compare whether the information contained in the first field in the first digital certificate is consistent with the corresponding identity information stored in the second server. If the comparison result shows that the two pieces of information are the same, the verification is successful and a verification pass result is obtained.

[0132] In one embodiment, step S503 includes:

[0133] A second hash value corresponding to the first text information is calculated.

[0134] In an embodiment of the present application, after the vehicle terminal checks that the first field in the first digital certificate meets the predetermined standard or rule, it means that this extended field in the first digital certificate is legal. This extended field in the certificate is legal and related to a specific service or permission. Once the first field is verified, the vehicle terminal uses the first text information (which may contain information about the vehicle functions subscribed by the user) to calculate a hash value. This hash value is a fixed-length string, which is a fingerprint of the original information and can be used to quickly verify the integrity of the information.

[0135] The purpose of calculating the hash value is to ensure that the first text message has not been tampered with during transmission and to ensure that only certificates with the correct hash value can be accepted. This hash value can be regarded as a security verification code for the first text message.

[0136] The first identification data is verified according to the second hash value to obtain a verification result.

[0137] In the embodiment of the present application, the calculated second hash value can be used to compare with the stored or pre-set hash value. If the calculated hash value is consistent with the pre-set hash value, then the first text message is considered to be credible and the user can be authorized to access the relevant in-vehicle service.

[0138] In the above method, by calculating and verifying the hash value, it is ensured that the data received by the vehicle terminal remains intact and has not been tampered with during the transmission process, and matches the expected identification data, thereby improving the security, reliability and user trust of the system.

[0139] In one embodiment, see 5, which is a flow chart of obtaining verification results provided in an embodiment of the present application, such as Figure 5 As shown, verifying the first identification data according to the second hash value to obtain a verification result includes:

[0140] S801, obtaining a first decryption password of a first digital certificate from a first digital certificate, the first decryption password corresponds to a first encryption key, and the first identification data is encrypted using the first encryption password.

[0141] In an embodiment of the present application, the vehicle-mounted terminal first needs to parse the first digital certificate. A digital certificate usually contains the public key of the certificate holder (the first decryption password), the validity period of the certificate, information about the certificate issuer, and other possible extended information. In the process of parsing the certificate, the vehicle-mounted terminal will find the part containing the public key. The public key is a key used for encrypted communication, which corresponds to the secret key. The secret key is kept by the certificate holder (server) and is used to decrypt data encrypted by the public key. The extracted public key needs to be verified to ensure that it does belong to the holder claimed in the certificate. This usually involves verifying the signature of the certificate, which is performed by the issuer of the certificate using its key on the certificate content.

[0142] S802: Decrypt the first identification data according to a first decryption password to obtain a decrypted first hash value.

[0143] In an embodiment of the present application, the vehicle terminal uses the public key extracted from the first digital certificate to decrypt the first identification data. This process is to convert the encrypted data back to the original data through the public key, and the original data is the first hash value calculated after the first text information is calculated. The vehicle terminal compares the first hash value obtained by decryption with the second hash value previously calculated based on the first text information. If the two hash values ​​are consistent, it means that the first identification data has not been tampered with during the transmission process and is indeed sent by the certificate holder.

[0144] S803: If the second hash value is the same as the first hash value, the verification result indicates that the security verification of the first identification data and the first digital certificate is passed.

[0145] In the embodiment of the present application, if the second hash value is the same as the first hash value, then the verification result of the vehicle terminal will indicate that the security verification of the first identification data and the first digital certificate has passed. This means that the data remains intact during the transmission process and has not been tampered with, and the identity of the certificate holder has been verified. At this point, the user's subscription function can be authorized.

[0146] In the above method, by using the public key in the digital certificate to decrypt the identification data, the vehicle terminal can verify that the data encryption process is completed by a trusted entity, which helps to ensure that the data is not tampered with during transmission and maintains the confidentiality and security of the data.

[0147] See also Figure 6 , is a structural diagram of a data security verification method provided in an embodiment of the present application, wherein a plurality of digital certificates corresponding to respective vehicle functions are preset in the server, and a certificate chain is preset in the vehicle terminal, such as Figure 6 As shown, the steps for data security verification using this application are as follows:

[0148] ① The user subscribes to the in-vehicle function;

[0149] ② The second server (AO end) generates a license file (first text information) according to the user's vehicle subscription information;

[0150] ③ The second server sends the license file to the server to request a digital signature and digital certificate (first digital certificate);

[0151] ④ The server returns the signature data (first identification data) and the digital certificate to the second server;

[0152] The server signs (marks) the license file and generates first identification data, and obtains the first digital certificate corresponding to the license file according to the license file.

[0153] ⑤The second server sends the license file, signature data, and digital certificate to the vehicle terminal;

[0154] ⑥ The vehicle terminal verifies the certificate chain, custom extension and signature data based on the preset certificate chain.

[0155] The first digital certificate and the certificate chain preset in the vehicle terminal reconstruct a certificate chain of information. The vehicle terminal first verifies whether the newly constructed certificate chain is credible. If it is verified to be credible, it verifies whether the custom extension field (first field) contained in the first digital certificate is correct. If the first field is verified to be correct, it verifies the authenticity of the signature data.

[0156] ⑦If the verification is successful, the user subscription information will be authorized.

[0157] In the above method, since the digital certificate has expiration, during the verification process of the digital certificate, its timeliness can be used to verify the scheduled time of the user function, and by adding a custom extension field in the first certificate, the business can be isolated, so that each business type can be verified separately, and finally the signature data can be verified. The security of the user's in-vehicle subscription data can be improved through the above multiple verification methods.

[0158] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0159] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0160] Figure 7 Schematic diagram of the structure of the terminal device provided in the embodiment of the present application. Figure 7 As shown, the terminal device 7 of this embodiment includes: at least one processor 70 ( Figure 7 Only one is shown in the figure (a processor), a memory 71, and a computer program 72 stored in the memory 71 and executable on at least one processor 70. When the processor 70 executes the computer program 72, the steps in any of the above-mentioned data security verification method embodiments are implemented.

[0161] The terminal device may be a computing device such as a desktop computer, a notebook, a PDA, or a first server. The terminal device may include, but is not limited to, a processor and a memory. Those skilled in the art will understand that Figure 7 It is only an example of the terminal device 7 and does not constitute a limitation on the terminal device 7. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, it may also include input and output devices, network access devices, etc.

[0162] The processor 70 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0163] In some embodiments, the memory 71 may be an internal storage unit of the terminal device 7, such as a hard disk or memory of the terminal device 7. In other embodiments, the memory 71 may also be an external storage device of the terminal device 7, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the terminal device 7. Further, the memory 71 may also include both an internal storage unit and an external storage device of the terminal device 7. The memory 71 is used to store an operating system, an application program, a boot loader (BootLoader), data, and other programs, such as program codes of a computer program. The memory 71 may also be used to temporarily store data that has been output or is to be output.

[0164] The embodiment of the present application further provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments can be implemented.

[0165] An embodiment of the present application provides a computer program product. When the computer program product runs on a terminal device, the terminal device can implement the steps in the above-mentioned method embodiments when executing the computer program product.

[0166] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may at least include: any entity or device that can carry the computer program code to the device / terminal device, a recording medium, a computer memory, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), an electric carrier signal, a telecommunication signal, and a software distribution medium. For example, a USB flash drive, a mobile hard disk, a magnetic disk or an optical disk. In some jurisdictions, according to legislation and patent practice, computer-readable media cannot be electric carrier signals and telecommunication signals.

[0167] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0168] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0169] In the embodiments provided in the present application, it should be understood that the disclosed devices / terminal equipment and methods can be implemented in other ways. For example, the device / terminal equipment embodiments described above are only schematic, for example, the division of modules or units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0170] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0171] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. A data security verification method, characterized in that: Applied to a first server, the first server has one or more digital certificates, each of the digital certificates is associated with a vehicle function; the method comprises: Receiving a first text message from a second server, wherein the first text message includes information about a first in-vehicle function that a user requests to subscribe to; Identify the first text information according to a first digital certificate to obtain first identification data, where the first digital certificate is a digital certificate associated with the first vehicle-mounted function among the multiple digital certificates; Sending first information to the second server, where the first information includes the first identification data and the first digital certificate, and the first information is used to verify whether the user has the authority to subscribe to the first vehicle-mounted function.

2. The data security verification method according to claim 1, characterized in that: The digital certificate includes a first field, and the first field is used to verify the identity information of the second server; Before identifying the first text information according to the first digital certificate to obtain first identification data, the method further includes: Determining a first type of the first in-vehicle function according to the first text information; A certificate whose identity information of the second server indicated by the first field included in the multiple digital certificates matches the type of the first vehicle-mounted function is determined as the first digital certificate.

3. The data security verification method according to claim 1 or 2, characterized in that: The first text information is identified according to the first digital certificate to obtain first identification data, including: Calculating a first hash value corresponding to the first text information; Obtaining a first key pair corresponding to the first digital certificate, the first key pair comprising a first encryption key and a first decryption key; The first hash value is encrypting according to the first encryption key corresponding to the first digital certificate to obtain the first identification data.

4. The data security verification method according to claim 3, characterized in that: The method further comprises: The password pair in the first digital certificate is updated to a second key pair, where the second key pair includes a second encryption key and a second decryption password corresponding to the second encryption key.

5. A data security verification method, characterized in that: Applied to a first device, the first device has a certificate chain, the certificate chain includes at least two digital certificates; the method includes: Receiving a first text message, a first digital certificate and first identification data, wherein the first text message includes information about a first in-vehicle function that a user requests to subscribe to; and the first digital certificate is a digital certificate associated with the first in-vehicle function; Perform security verification on the first digital certificate and the first identification data according to the certificate chain to obtain a verification result; According to the verification result and the first text information, it is determined whether the user has the authority to subscribe to the first in-vehicle function.

6. The security verification method according to claim 5, characterized in that: The performing security verification on the first digital certificate and the first identification data according to the certificate chain to obtain a verification result includes: Performing trustworthy verification on the first digital certificate according to the certificate chain; If the verification result of the first digital certificate indicates that the first digital certificate is credible, verify the first field corresponding to the first digital certificate to obtain a first verification result; If the first verification result indicates that the first field verification is successful, the first identification data is verified to obtain the verification result.

7. The security verification method according to claim 6, characterized in that: The first digital certificate includes authorization information of the first digital certificate, and the trustworthy verification of the first digital certificate according to the certificate chain includes: Verifying whether the authorization information of the first digital certificate matches the authorization information recorded in the second digital certificate, where the second digital certificate is a digital certificate in the certificate chain connected to the first digital certificate; If the authorization information of the first digital certificate matches the authorization information recorded in the second digital certificate, it is determined that the first digital certificate is credible; If the authorization information of the first digital certificate matches the authorization information recorded in the second digital certificate, and the term of the first digital certificate is valid, it is determined that the first digital certificate is credible.

8. The security verification method according to claim 6, characterized in that: The verifying the first field corresponding to the first digital certificate to obtain a first verification result includes: Determining whether the identity information corresponding to the first field in the first digital certificate is the same as the identity information corresponding to the second server; If the first type of information corresponding to the first field in the first digital certificate is the same as the identity information corresponding to the second server, a first verification result indicating that the first field has passed verification is obtained.

9. The security verification method according to claim 6, characterized in that: The verifying the first identification data to obtain the verification result includes: Calculating a second hash value corresponding to the first text information; Obtaining a first decryption password of the first digital certificate from the first digital certificate, the first decryption password corresponds to a first encryption key, and the first identification data is encrypted using the first encryption password; Decrypt the first identification data according to the first decryption password to obtain a decrypted first hash value; If the second hash value is the same as the first hash value, the verification result indicates that the security verification of the first identification data and the first digital certificate is passed.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 9 is implemented.

Images