Remote authorized driving method, electronic equipment and medium

Abstract

The invention discloses a remote authorized driving method, electronic equipment and a medium. The method can comprise the steps that a user sends a remote authorized driving instruction; acquiring an instruction plaintext based on the remote authorized driving instruction, and further acquiring an instruction ciphertext; obtaining an APDU instruction according to the instruction ciphertext and sending the APDU instruction to the target vehicle; and the target vehicle analyzes the APDU instruction to realize remote authorized driving. According to the invention, by multiplexing the Bluetooth key link, the remote authorization driving mode is expanded, and the transformation and popularization cost is reduced to the minimum on the basis that the safety level is not reduced at all.

Description

Technical Field

[0001] The present invention relates to the field of automobiles, and more specifically, to a remote authorized driving method, electronic equipment and medium. Background Art

[0002] In the case of authentication such as non-physical keys, Bluetooth keys and NFC keys, the remote communication module (TBOX) and the vehicle entry authentication module (PEPS) perform authentication and authorization through the 4G remote control link. After the vehicle entry authentication module recognizes this mode, it restricts the user to temporarily start the vehicle (or enter ready) through specific strategies (such as shifting gears within 2 minutes).

[0003] However, its security level is lower than that of the digital key (driving is the highest level of authority): the remote communication module is not equipped with an SE chip, and cannot provide secure storage and a trusted execution environment for keys; at the same time, the external attack surface of the remote communication module is large, and there is a risk of batch attacks; the overall transformation cost is high, and it is not easy to promote platform solutions: the vehicle entry authentication module is required to add special modes and strategies for this scenario, which will undoubtedly increase the difficulty of development and test regression for the entry authentication module with relatively complex business logic; in addition to the core controller transformation, the gateway needs to be modified for adaptability due to the involvement of new CAN signals; at the same time, production line and after-sales transformation are required to increase authentication key learning between the remote module and the entry authentication module. For existing mass production projects, this cannot be achieved only through OTA (authentication key learning needs to be performed through after-sales diagnostic instruments).

[0004] Therefore, it is necessary to develop a remote authorized driving method, electronic equipment and medium.

[0005] The information disclosed in the background technology section of the present invention is only intended to deepen the understanding of the general background technology of the present invention, and should not be regarded as acknowledging or suggesting in any form that the information constitutes the prior art already known to those skilled in the art. Summary of the invention

[0006] The present invention proposes a remote authorized driving method, electronic device and medium, which can expand the remote authorized driving mode by reusing a Bluetooth key link, thereby minimizing the cost of transformation and promotion without any reduction in the safety level.

[0007] In a first aspect, an embodiment of the present disclosure provides a remote driving authorization method, comprising:

[0008] The user sends a remote authorization driving instruction;

[0009] Obtaining a plain text instruction based on the remote authorized driving instruction, and then obtaining a cipher text instruction;

[0010] Obtaining the APDU command according to the command ciphertext and sending it to the target vehicle;

[0011] The target vehicle parses the APDU instruction to achieve remote authorized driving.

[0012] Preferably, the user sends the remote authorization driving instruction via a mobile phone APP.

[0013] Preferably, it also includes:

[0014] Before the user sends a remote authorization driving instruction, the user's identity is verified through a text message verification code.

[0015] Preferably, obtaining the instruction plain text based on the remote authorization driving instruction includes:

[0016] Based on, the instruction plain text is composed according to the current server timestamp, vehicle identification code and remote authorization driving mode operation code information.

[0017] Preferably, obtaining the instruction ciphertext includes:

[0018] A key index is randomly selected, the corresponding root key index is queried, the PKI service is called to encrypt the instruction plaintext, and the instruction ciphertext is obtained.

[0019] Preferably, the target vehicle parses the APDU instruction to implement remote authorized driving including:

[0020] After parsing the APDU instruction, it is decrypted using the corresponding root key and fed back to the MCU;

[0021] After the MCU recognizes the remote authorization driving mode operation code, it verifies the vehicle identification code, compares the current server timestamp to see if it is legal, and performs remote authorization driving.

[0022] Preferably, performing remote authorization driving includes:

[0023] Use the current server timestamp of the current instruction to overwrite the local current server timestamp, simulate sending Bluetooth connection signals on the CAN bus, locate critical area signals, and initiate anti-theft authentication;

[0024] The timer is started locally. After the vehicle power mode switches to ready within 2 minutes, it indicates that the remote authorized driving mode has been successfully entered. The analog signal is maintained until the vehicle is locked, otherwise the CAN signal is sent according to the actual status.

[0025] In a second aspect, an embodiment of the present disclosure further provides an electronic device, the electronic device comprising:

[0026] A memory storing executable instructions;

[0027] A processor runs the executable instructions in the memory to implement the remote authorized driving method.

[0028] In a third aspect, an embodiment of the present disclosure further provides a computer-readable storage medium, which stores a computer program, and when the computer program is executed by a processor, the remote authorized driving method is implemented.

[0029] Its beneficial effects are:

[0030] ① The remote authorization driving function has the same security level as the Bluetooth key: end-to-end encryption is adopted (from the cloud PKI encryption machine to the Bluetooth module SE). Even if the remote communication module is attacked, the attacker cannot simulate the remote authorization driving command;

[0031] ② Low transformation cost and easy platform promotion: reuse the existing Bluetooth module security authentication and business processing logic, enter the authentication module without adding special modes and strategies (no perception), no need to transform the production line and after-sales (for existing projects, only OTA upgrades are required); the remote communication module and the Bluetooth module use diagnostic services to send remote authorization instructions, no need to add CAN signals, and the gateway does not need to be modified.

[0032] The methods and apparatus of the present invention have other features and advantages that will be apparent from, or will be described in detail in, the accompanying drawings and subsequent detailed descriptions incorporated herein, which together serve to explain the specific principles of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] The above and other objects, features and advantages of the present invention will become more apparent through a more detailed description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, wherein like reference numerals generally represent like components throughout the exemplary embodiments of the present invention.

[0034] Figure 1 A flow chart showing the steps of a remotely authorized driving method.

[0035] Figure 2 A flow chart showing the steps of a remote driving authorization method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0036] The preferred embodiments of the present invention will be described in more detail below. Although the preferred embodiments of the present invention are described below, it should be understood that the present invention can be implemented in various forms and should not be limited to the embodiments set forth herein.

[0037] To facilitate understanding of the solutions and effects of the embodiments of the present invention, three specific application examples are given below. Those skilled in the art should understand that the examples are only for facilitating understanding of the present invention, and any specific details thereof are not intended to limit the present invention in any way.

[0038] Example 1

[0039] Figure 1 A flow chart showing the steps of a remotely authorized driving method.

[0040] like Figure 1 As shown, the remote authorization driving method includes:

[0041] Step 101, the user sends a remote authorization driving instruction;

[0042] Step 102, obtaining a plain text instruction based on the remote authorization driving instruction, and then obtaining a cipher text instruction;

[0043] Step 103, obtaining the APDU command according to the command ciphertext and sending it to the target vehicle;

[0044] Step 104, the target vehicle parses the APDU instruction to implement remote authorized driving.

[0045] In one example, a user sends a remote authorization driving instruction through a mobile phone APP.

[0046] In one example, it also includes:

[0047] Before the user sends a remote authorization driving instruction, the user's identity is verified through a text message verification code.

[0048] In one example, obtaining a plain text instruction based on a remote authorization driving instruction includes:

[0049] Based on, the command plain text is composed according to the current server timestamp, vehicle identification code and remote authorization driving mode operation code information.

[0050] In one example, obtaining the instruction ciphertext includes:

[0051] Randomly select a key index, query the corresponding root key index, call the PKI service to encrypt the plaintext instruction, and obtain the ciphertext of the instruction.

[0052] In one example, the target vehicle parses the APDU command to implement remote authorized driving including:

[0053] After parsing the APDU command, it is decrypted using the corresponding root key and fed back to the MCU;

[0054] After the MCU recognizes the remote authorization driving mode operation code, it verifies the vehicle identification code, compares the current server timestamp to see if it is legal, and performs remote authorization driving.

[0055] In one example, performing remote authorization driving includes:

[0056] Use the current server timestamp of the current instruction to overwrite the local current server timestamp, simulate sending Bluetooth connection signals on the CAN bus, locate critical area signals, and initiate anti-theft authentication;

[0057] The timer is started locally. After the vehicle power mode switches to ready within 2 minutes, it indicates that the remote authorized driving mode has been successfully entered. The analog signal is maintained until the vehicle is locked, otherwise the CAN signal is sent according to the actual status.

[0058] Figure 2 A flow chart showing the steps of a remote driving authorization method according to an embodiment of the present invention.

[0059] Specifically, Figure 2 As shown, the present invention can be described from the following three aspects:

[0060] ① Mobile phone side: The user issues a remote authorization driving instruction through the mobile phone APP. For security reasons, the user identity can be verified by SMS verification code;

[0061] ② Platform side: After the remote authorized driving service receives the user's command, it verifies the user's legitimacy and permission, and then composes the command plain text based on the current server timestamp (UTS), vehicle identification code (VIN) and remote authorized driving mode operation code information, and randomly selects one from the canned key index (0-4) of the vehicle SE, queries the corresponding root key index, calls the PKI service to encrypt the command plain text, and assembles the application protocol data unit (APDU) command after obtaining the command ciphertext (the P2 parameter is filled with the key index), and sends the APDU command to the remote communication module (TBOX) through the remote control service;

[0062] ③ Vehicle side: After receiving the APDU command, the remote communication module sends the APDU command to the Bluetooth module (BLE) according to the diagnostic routine (10 / 27 / 31). The BLE MCU forwards the APDU to the SE. The SE parses the APDU command, decrypts it with the corresponding root key, and then feeds back to the MCU. After the MCU recognizes that it is the remote authorization driving mode operation code, it verifies the VIN and compares the legality of the UTS (anti-replay protection: the current command UTS is greater than the locally saved UTS). Then, the remote module is fed back the successful execution through the 31 service; the current command UTS is used to overwrite the local UTS, simulate the sending of Bluetooth connection signals and positioning critical area signals on the CAN bus, and initiate anti-theft authentication with the entry authentication module (PEPS); local start timer: within 2 minutes, after the vehicle power mode is switched to ready (the user shifts gears), it indicates that the remote authorization driving mode has been successfully entered, and the simulated signal is maintained until the vehicle is locked (during this period, the real Bluetooth connection and positioning status are only used for BLE internal logic processing), otherwise the CAN signal is sent according to the actual status.

[0063] Example 2

[0064] The present disclosure provides an electronic device, which includes: a memory storing executable instructions; and a processor, which runs the executable instructions in the memory to implement the above-mentioned remote authorized driving method.

[0065] An electronic device according to an embodiment of the present disclosure includes a memory and a processor.

[0066] The memory is used to store non-temporary computer-readable instructions. Specifically, the memory may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may, for example, include random access memory (RAM) and / or cache memory (cache), etc. The non-volatile memory may, for example, include read-only memory (ROM), hard disk, flash memory, etc.

[0067] The processor may be a central processing unit (CPU) or other forms of processing units having data processing capabilities and / or instruction execution capabilities, and may control other components in the electronic device to perform desired functions. In one embodiment of the present disclosure, the processor is used to run the computer-readable instructions stored in the memory.

[0068] Those skilled in the art should be able to understand that in order to solve the technical problem of how to obtain a good user experience, the present embodiment may also include well-known structures such as a communication bus and an interface, and these well-known structures should also be included in the protection scope of the present disclosure.

[0069] For detailed description of this embodiment, reference may be made to the corresponding descriptions in the aforementioned embodiments, which will not be repeated here.

[0070] Example 3

[0071] An embodiment of the present disclosure provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the remote authorized driving method is implemented.

[0072] According to the computer-readable storage medium of the embodiment of the present disclosure, non-transitory computer-readable instructions are stored thereon. When the non-transitory computer-readable instructions are executed by a processor, all or part of the steps of the above-mentioned methods of each embodiment of the present disclosure are executed.

[0073] The above-mentioned computer-readable storage media include, but are not limited to: optical storage media (e.g., CD-ROM and DVD), magneto-optical storage media (e.g., MO), magnetic storage media (e.g., magnetic tape or mobile hard disk), media with built-in rewritable non-volatile memory (e.g., memory card) and media with built-in ROM (e.g., ROM box).

[0074] Those skilled in the art should understand that the purpose of the above description of the embodiments of the present invention is only to exemplarily illustrate the beneficial effects of the embodiments of the present invention, and is not intended to limit the embodiments of the present invention to any given examples.

[0075] The embodiments of the present invention have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and changes will be apparent to those skilled in the art without departing from the scope and spirit of the described embodiments.

Claims

1. A remote authorization driving method, characterized in that: include: The user sends a remote authorization driving instruction; Obtaining a plain text instruction based on the remote authorized driving instruction, and then obtaining a cipher text instruction; Obtaining the APDU command according to the command ciphertext and sending it to the target vehicle; The target vehicle parses the APDU instruction to achieve remote authorized driving.

2. The remote authorization driving method according to claim 1, wherein: The user sends the remote authorization driving instruction through the mobile phone APP.

3. The remote authorization driving method according to claim 2, wherein: Also includes: Before the user sends a remote authorization driving instruction, the user's identity is verified through a text message verification code.

4. The remote authorization driving method according to claim 1, wherein: Obtaining the plain text of the instruction based on the remote authorization driving instruction includes: Based on, the instruction plain text is composed according to the current server timestamp, vehicle identification code and remote authorization driving mode operation code information.

5. The remote authorization driving method according to claim 1, wherein: Obtaining the ciphertext of the command includes: A key index is randomly selected, the corresponding root key index is queried, the PKI service is called to encrypt the instruction plaintext, and the instruction ciphertext is obtained.

6. The remote authorization driving method according to claim 4, wherein: The target vehicle parses the APDU command to implement remote authorized driving including: After parsing the APDU instruction, it is decrypted using the corresponding root key and fed back to the MCU; After the MCU recognizes the remote authorization driving mode operation code, it verifies the vehicle identification code, compares the current server timestamp to see if it is legal, and performs remote authorization driving.

7. The remote authorization driving method according to claim 1, wherein: Remote driving authorization includes: Use the current server timestamp of the current instruction to overwrite the local current server timestamp, simulate sending Bluetooth connection signals on the CAN bus, locate critical area signals, and initiate anti-theft authentication; The timer is started locally. After the vehicle power mode switches to ready within 2 minutes, it indicates that the remote authorized driving mode has been successfully entered. The analog signal is maintained until the vehicle is locked, otherwise the CAN signal is sent according to the actual status.

8. An electronic device, characterized in that: The electronic device comprises: A memory storing executable instructions; A processor, wherein the processor runs the executable instructions in the memory to implement the remote authorization driving method according to any one of claims 1 to 7.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the remote authorization driving method according to any one of claims 1 to 7 is implemented.

Images