SOA service-based vehicle-mounted gateway routing management method and system
By implementing the SOA service architecture and identity authentication mechanism in the on-board gateway of smart cars, the problem that SOA services in the prior art is not compatible with different communication protocols and cannot verify the legality of the equipment is solved, and the security and compatibility of SOA service communication is achieved.
Patent Information
- Application Number
- CN202411380305.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-30
- Publication Date
- 2025-02-28
AI Technical Summary
The existing smart car SOA service cannot be compatible with different communication protocols and cannot effectively verify the legality of the communication service target equipment, resulting in the inability to ensure the security of the SOA service communication process.
By implementing the SOA service architecture in the on-board gateway, an event triggering mechanism is used to send the first authentication sequence to the on-board terminal device, and a second authentication sequence is generated and verified through a pre-negotiated verification algorithm to ensure the legitimacy of the device identity authentication.
It realizes SOA service compatibility between heterogeneous networks, ensures the security of SOA service communication through identity authentication, improves the security of on-board gateways and SOA services, and prevents illegal devices from accessing.
Smart Images
Figure CN119544249A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of information security of smart cars, and in particular to a vehicle-mounted gateway routing management method and system based on SOA services. Background Art
[0002] The development trend of smart cars is to continuously evolve towards intelligence and interconnection, aiming to provide users with a safer, more efficient and convenient travel experience. In the process of realizing intelligence, the communication network inside the vehicle plays a vital role. The two main communication networks in the car are the controller area network (CAN network) and the in-vehicle Ethernet. The CAN network has the characteristics of high bandwidth, low latency and strong anti-interference ability, which enables each electronic control unit (ECU) to share information quickly and reliably. The CAN network is widely used in automotive electronic systems and has become an important basis for real-time communication between various modules inside the vehicle. In-vehicle Ethernet uses its high bandwidth and low latency transmission characteristics to realize fast, reliable and real-time data exchange and communication between various modules inside the vehicle, which can meet the needs of large-capacity data transmission, so that various intelligent modules inside the vehicle can transmit and share information with each other and achieve collaborative work.
[0003] The vehicle gateway is a key device that connects various electronic control units. It is responsible for collecting, processing and distributing the data generated and interacted by these vehicle terminal devices. As the manager of the in-vehicle network, the vehicle gateway is used to ensure the mutual conversion between different communication protocols. By filtering, forwarding and routing the communication data, the data is passed from the source address to the target address in an appropriate format, thereby achieving effective communication and collaboration between the various modules in the vehicle. In the field of smart cars, the role of the vehicle gateway is particularly important. It provides solid support and guarantee for complex intelligent systems, ensuring efficient communication and collaboration between all internal modules. Identity authentication is a technology used to confirm the identity of a user or device. Among the existing identity authentication mechanisms, most rely on one-way authentication of the server to the terminal to achieve identity authentication.
[0004] Smart cars use a service-oriented architecture (SOA) to encapsulate and provide various functions inside the vehicle in the form of services. These services cover multiple fields such as driving assistance, entertainment systems, and vehicle diagnosis, providing users with a highly personalized and customized experience. At present, most SOA services are implemented based on SOME / IP in-vehicle Ethernet, but this method is not compatible with other communication protocols and cannot guarantee the legitimacy verification of the communication service object device. Therefore, a vehicle gateway routing management method and system are needed to implement SOA services between heterogeneous networks, manage routing based on SOA services, and ensure the security of SOA service communication. Summary of the invention
[0005] In order to realize SOA services among heterogeneous networks, manage routing based on SOA services, and ensure the security during SOA service communication, the present invention provides a vehicle gateway routing management method and system based on SOA services.
[0006] The objective of the present invention is achieved through the following technical solutions:
[0007] The communication between the vehicle gateway and each vehicle terminal device is realized through the SOA service architecture. The vehicle gateway has a forwarding routing function and manages the routing of the vehicle terminal devices. The user pre-sets the data routing forwarding rule table and filtering rule table of the vehicle terminal devices connected to the vehicle gateway through the vehicle gateway human-computer interaction interface. Each port of the vehicle gateway receives requests from each vehicle terminal device and the corresponding SOA service application data. The vehicle gateway forwards to the corresponding port according to the routing forwarding rule table and filtering rule table to realize the filtering, forwarding and routing of SOA service application data.
[0008] The vehicle gateway sends a first authentication sequence to each vehicle terminal device based on an event trigger mechanism and starts a timer. The vehicle gateway sends a different first authentication sequence to each vehicle terminal device. The first authentication sequence contains information about both parties of identity authentication and random tag information. The vehicle gateway includes two timers. The first timer of the vehicle gateway starts counting down, which is used to trigger the identity authentication of each vehicle terminal device at a certain interval. The second timer of the vehicle gateway starts counting down, which is used to limit the time allowed for a single identity authentication.
[0009] After receiving the first authentication sequence, each vehicle terminal device generates and sends a second authentication sequence to the vehicle gateway through a pre-negotiated authentication algorithm. Each vehicle terminal device receives the first authentication sequence sent by the vehicle gateway. Each vehicle terminal device generates a second authentication sequence through a pre-negotiated authentication algorithm, including but not limited to using symmetric encryption methods such as DES, AES and asymmetric encryption methods such as RSA, and integrity authentication methods such as MD5, SHA1, and SHA256. Each vehicle terminal device sends the second authentication sequence to the vehicle gateway.
[0010] The vehicle gateway verifies the second authentication data through the pre-negotiated verification algorithm to obtain the third authentication sequence. The vehicle gateway receives the second authentication sequence sent by each vehicle terminal device. The first timer counts down again and enters the next identity authentication cycle; the second timer stops counting and obtains the time of a single identity authentication. The vehicle gateway verifies the second authentication data of each vehicle terminal device through the pre-negotiated verification algorithm to obtain the third authentication sequence.
[0011] The vehicle gateway compares the third authentication sequence with the first authentication sequence and processes the corresponding SOA service. The vehicle gateway compares the first authentication sequence sent to each vehicle terminal device with the third authentication sequence generated according to the pre-negotiated verification algorithm after receiving the second authentication sequence, and compares the single identity authentication time with the single identity authentication limit time to determine whether the authentication is successful. If the authentication is successful, the vehicle gateway opens the terminal device route and allows the corresponding SOA service to be provided; if the authentication fails, the vehicle terminal device is routed and supervised, and the corresponding SOA service is not provided.
[0012] The present invention describes an SOA service-based vehicle gateway routing management system comprising: a basic routing unit, a first authentication path unit, a second authentication path unit, a third authentication path unit and a fourth authentication path unit.
[0013] The basic routing unit is used to forward the data to the corresponding port in the vehicle gateway according to the user-defined routing forwarding rule table and filtering rule table, realize the filtering, forwarding and routing of SOA service application data, and provide basic routing services for the vehicle gateway.
[0014] The first authentication path unit is used to send the first authentication sequence to each vehicle terminal device at the vehicle gateway and start the timer. Specifically, the vehicle gateway human-computer interaction module is used to pre-set the data routing forwarding rule table and filtering rule table of the vehicle terminal device connected to the vehicle gateway. Specifically, the vehicle gateway storage module is used to store the routing forwarding rule table and the filtering rule table. Specifically, the vehicle gateway routing module is used to receive the SOA service application data of each vehicle terminal device at each port, and forward it to the corresponding port according to the routing forwarding rule table and the filtering rule table, so as to realize the filtering, forwarding and routing of the SOA service application data.
[0015] The second authentication path unit is used to generate and send the second authentication sequence to the vehicle gateway through a preset verification algorithm after each vehicle terminal device receives the first authentication sequence. Specifically, the vehicle gateway sending module is used to send the first authentication sequence to each vehicle terminal device at the vehicle gateway. Specifically, the vehicle gateway timer module, the first timer of the vehicle gateway is used to trigger the identity authentication of each vehicle terminal device at each corresponding time period, and the second timer is used to limit the time allowed for a single identity authentication. Specifically, the vehicle terminal sending module, each vehicle terminal device sends the second authentication sequence to the vehicle gateway.
[0016] The third authentication path unit is used to verify the second authentication data through a preset verification algorithm in the vehicle gateway to obtain a third authentication sequence. Specifically, the vehicle gateway authentication module is used for the vehicle gateway to verify the second authentication data of each vehicle terminal device through a preset verification algorithm to obtain a third authentication sequence.
[0017] The fourth authentication path unit is used for the vehicle gateway to compare the third authentication sequence with the first authentication sequence and perform corresponding processing. Specifically, the vehicle terminal device receiving module is used for each vehicle terminal device to receive the first authentication sequence sent by the vehicle gateway. Specifically, the vehicle terminal device authentication module is used for each vehicle terminal device to generate a second authentication sequence through a preset verification algorithm, including but not limited to using symmetric encryption methods such as DES, AES and asymmetric encryption methods such as RSA, MD5, SHA1, SHA256 and other integrity authentication methods. Specifically, the vehicle gateway judgment processing module is used for the vehicle gateway to compare the third authentication sequence with the first authentication sequence, compare the single identity authentication time with the single identity authentication limit time, and determine whether the authentication is successful. If the authentication is successful, the vehicle gateway opens the terminal device route and allows the corresponding SOA service to be provided; if the authentication fails, the vehicle terminal device is routed and supervised, and the corresponding SOA service is not provided.
[0018] Compared with the prior art, the SOA service-based vehicle gateway routing management method and system provided by the present invention have the following beneficial effects:
[0019] The present invention provides a vehicle-mounted gateway routing management method and system based on SOA services, which are compatible with the CAN communication protocol and Ethernet protocol based on SOA services, and realize SOA services between heterogeneous networks. In addition, the legitimacy of the vehicle-mounted terminal equipment is verified through identity authentication, and the security of the SOA service communication process is guaranteed through routing management. The vehicle-mounted routing management method and system proposed in the present invention improve the security of the vehicle-mounted gateway and SOA services, ensure the non-tamperability of SOA service application service requests and responses, and ensure the isolation of SOA service application services from illegal devices. BRIEF DESCRIPTION OF THE DRAWINGS
[0020] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art; obviously, the drawings in the following description are merely implementation cases of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on the provided drawings without creative work.
[0021] Figure 1 A flow chart of a vehicle gateway routing management method based on SOA services provided by an embodiment of the present invention;
[0022] Figure 2 An application architecture diagram of an in-vehicle gateway routing management system based on SOA services provided in an embodiment of the present invention. DETAILED DESCRIPTION
[0023] In order to make the above-mentioned objects, features and advantages of the present invention more clearly understood, the specific embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.
[0024] Obviously, smart cars use a service-oriented architecture (SOA) to encapsulate and provide various functions inside the vehicle in the form of services. These services cover multiple fields such as driving assistance, entertainment systems, and vehicle diagnosis, providing users with a highly personalized and customized experience. At present, most SOA services are implemented based on SOME / IP vehicle Ethernet, but this method is not compatible with other communication protocols and cannot guarantee the legitimacy verification of the communication service object device. Therefore, a vehicle gateway routing management method and system are needed to implement SOA services between heterogeneous networks, manage routing based on SOA services, and ensure the security of SOA service communication.
[0025] To solve the above problems, the present invention provides a vehicle-mounted gateway routing management method and system based on SOA services, which are compatible with the CAN communication protocol and Ethernet protocol based on SOA services, and realize SOA services between heterogeneous networks. In addition, the legitimacy of the vehicle-mounted terminal equipment is verified through identity authentication, and the security of the SOA service communication process is guaranteed through routing management. The vehicle-mounted routing management method and system proposed by the present invention improve the security of the vehicle-mounted gateway and SOA services, and ensure the non-tamperability of SOA service application service requests and responses.
[0026] Figure 1 A flow chart of a vehicle gateway routing management method based on SOA service provided in an embodiment of the present invention, specifically, includes the following steps.
[0027] Step S100, the communication between the vehicle gateway and each vehicle terminal device is realized through the SOA service architecture. The vehicle gateway has a forwarding routing function and manages the routing of the vehicle terminal devices. In this embodiment, the user pre-sets the data routing forwarding rule table and the filtering rule table of the vehicle terminal devices connected to the vehicle gateway through the vehicle gateway human-computer interaction interface; each port of the vehicle gateway receives each vehicle terminal device request and the corresponding SOA service application data; the vehicle gateway forwards to the corresponding port according to the routing forwarding rule table and the filtering rule table, and realizes the filtering, forwarding and routing of the SOA service application data.
[0028] Step S200: The vehicle gateway sends a first authentication sequence to each vehicle terminal device based on an event trigger mechanism and starts a timer. In this embodiment, the vehicle gateway sends a different first authentication sequence to each vehicle terminal device, and the first authentication sequence contains information about both parties of identity authentication and random tag information; the first timer of the vehicle gateway starts counting down, which is used to trigger the identity authentication of each vehicle terminal device at a certain interval; the second timer of the vehicle gateway starts counting, which is used to limit the time allowed for a single identity authentication.
[0029] Step S300: After receiving the first authentication sequence, each vehicle terminal device generates and sends a second authentication sequence to the vehicle gateway through a pre-negotiated authentication algorithm. In this embodiment, each vehicle terminal device receives the first authentication sequence sent by the vehicle gateway; each vehicle terminal device generates a second authentication sequence through a pre-negotiated authentication algorithm, including but not limited to using symmetric encryption methods such as DES, AES and asymmetric encryption methods such as RSA, integrity authentication methods such as MD5, SHA1, SHA256, etc.; each vehicle terminal device sends the second authentication sequence to the vehicle gateway.
[0030] Step S400: The vehicle gateway verifies the second authentication data through a pre-negotiated verification algorithm to obtain a third authentication sequence. In this embodiment, the vehicle gateway receives the second authentication sequence sent by each vehicle terminal device; the first timer counts down again and enters the next identity authentication cycle; the second timer stops counting and obtains the time of a single identity authentication; the vehicle gateway verifies the second authentication data of each vehicle terminal device through a pre-negotiated verification algorithm to obtain a third authentication sequence.
[0031] Step S500: The vehicle gateway compares the third authentication sequence with the first authentication sequence and processes the corresponding SOA service. In this embodiment, the vehicle gateway compares the first authentication sequence sent to each vehicle terminal device with the third authentication sequence generated according to the pre-negotiated verification algorithm after receiving the second authentication sequence, and compares the single identity authentication time with the single identity authentication limit time to determine whether the authentication is successful; if the authentication is successful, the vehicle gateway opens the terminal device route and allows the corresponding SOA service to be provided; if the authentication fails, the vehicle terminal device is routed and supervised, and the corresponding SOA service is not provided.
[0032] Furthermore, Figure 2 An application architecture diagram of an SOA service-based vehicle gateway routing management system provided in an embodiment of the present invention includes: a basic routing unit, a first protection path unit, a second protection path unit, a third protection path unit and a fourth protection path unit.
[0033] In this embodiment, the basic routing unit 100 is used to forward the data to the corresponding port according to the routing forwarding rule table and filtering rule table defined by the user in the vehicle gateway, so as to realize filtering, forwarding and routing of SOA service application data.
[0034] In this embodiment, the first authentication path unit 200 is used to send the first authentication sequence to each vehicle terminal device at the vehicle gateway and start the timer. The vehicle gateway human-computer interaction module is used to pre-set the data routing forwarding rule table and filtering rule table of the vehicle terminal device connected to the vehicle gateway; the vehicle gateway storage module is used to store the routing forwarding rule table and the filtering rule table; the vehicle gateway routing module is used to receive the SOA service application data of each vehicle terminal device at each port, and forward it to the corresponding port according to the routing forwarding rule table and the filtering rule table, so as to realize the filtering, forwarding and routing of the SOA service application data.
[0035] In this embodiment, the second authentication path unit 300 is used to generate and send the second authentication sequence to the vehicle gateway through a preset verification algorithm after each vehicle terminal device receives the first authentication sequence. The vehicle gateway sending module is used to send the first authentication sequence to each vehicle terminal device at the vehicle gateway; the vehicle gateway timer module, the first timer of the vehicle gateway is used to trigger the identity authentication of each vehicle terminal device at each corresponding time period, and the second timer is used to limit the time allowed for a single identity authentication. The vehicle terminal sending module, each vehicle terminal device sends the second authentication sequence to the vehicle gateway.
[0036] In this embodiment, the third authentication path unit 400 is used to verify the second authentication data through a preset verification algorithm in the vehicle gateway to obtain a third authentication sequence. The vehicle gateway authentication module is used for the vehicle gateway to verify the second authentication data of each vehicle terminal device through a preset verification algorithm to obtain a third authentication sequence.
[0037] In this embodiment, the fourth authentication path unit 500 is used for the vehicle gateway to compare the third authentication sequence with the first authentication sequence and perform corresponding processing. The vehicle terminal device receiving module is used for each vehicle terminal device to receive the first authentication sequence sent by the vehicle gateway; the vehicle terminal device authentication module is used for each vehicle terminal device to generate a second authentication sequence through a preset verification algorithm, including but not limited to using symmetric encryption methods such as DES, AES and asymmetric encryption methods such as RSA, MD5, SHA1, SHA256 and other integrity authentication methods. The vehicle gateway judgment processing module is used for the vehicle gateway to compare the third authentication sequence with the first authentication sequence, compare the single identity authentication time with the single identity authentication limit time, and determine whether the authentication is successful. If the authentication is successful, the vehicle gateway opens the terminal device route and allows the corresponding SOA service to be provided; if the authentication fails, the vehicle terminal device is routed and supervised, and the corresponding SOA service is not provided.
[0038] In this article, relational terms such as first and second, etc. are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.
[0039] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.
Claims
1. A vehicle gateway routing management method and system based on SOA service, characterized in that: The methods described include: The communication between the vehicle gateway and each vehicle terminal device is realized through the SOA service architecture. The vehicle gateway has the forwarding routing function and manages the routing of the vehicle terminal devices; The vehicle gateway sends the first authentication sequence to each vehicle terminal device based on the event trigger mechanism and starts the timer; After receiving the first authentication sequence, each vehicle terminal device generates and sends a second authentication sequence to the vehicle gateway through a pre-negotiated verification algorithm; The vehicle gateway verifies the second authentication data through a pre-negotiated verification algorithm to obtain a third authentication sequence; The vehicle gateway compares the third authentication sequence with the first authentication sequence and processes the corresponding SOA service.
2. The method according to claim 1, characterized in that The communication between the vehicle gateway and each vehicle terminal device is realized through the SOA service architecture. The vehicle gateway has a forwarding routing function. The management of the vehicle terminal device routing specifically includes the following steps: The user pre-sets the data routing forwarding rule table and filtering rule table of the vehicle terminal device connected to the vehicle gateway through the vehicle gateway human-computer interaction interface; Each port of the vehicle gateway receives requests from each vehicle terminal device and corresponding SOA service application data; The vehicle gateway forwards to the corresponding port according to the routing forwarding rule table and the filtering rule table to realize the filtering, forwarding and routing of SOA service application data.
3. The method according to claim 1, characterized in that The described vehicle gateway sends the first authentication sequence to each vehicle terminal device based on the event trigger mechanism and starts the timer, which specifically includes the following steps: The vehicle gateway sends a different first authentication sequence to each vehicle terminal device, where the first authentication sequence includes information of both parties of identity authentication and random tag information; The first timer of the vehicle gateway starts counting down, which is used to trigger the identity authentication of each vehicle terminal device at a certain interval; The second timer of the vehicle gateway starts timing to limit the time allowed for a single identity authentication.
4. The method according to claim 1, characterized in that: After receiving the first authentication sequence, each vehicle terminal device generates and sends a second authentication sequence to the vehicle gateway through a pre-negotiated verification algorithm, specifically including the following steps: Each vehicle terminal device receives a first authentication sequence sent by the vehicle gateway; Each vehicle terminal device generates a second authentication sequence through a pre-negotiated authentication algorithm, including but not limited to using symmetric encryption methods such as DES and AES and asymmetric encryption methods such as RSA, and integrity authentication methods such as MD5, SHA1, and SHA256; Each vehicle-mounted terminal device sends the second authentication sequence to the vehicle-mounted gateway.
5. The method according to claim 1, characterized in that The described vehicle gateway verifies the second authentication data through a pre-negotiated verification algorithm to obtain a third authentication sequence, which specifically includes the following steps: The vehicle gateway receives the second authentication sequence sent by each vehicle terminal device; The first timer counts down again and enters the next identity authentication cycle; The second timer stops timing and obtains the time of a single identity authentication; The vehicle gateway verifies the second authentication data of each vehicle terminal device through a pre-negotiated verification algorithm to obtain a third authentication sequence.
6. The method according to claim 1, characterized in that The described vehicle gateway compares the third authentication sequence with the first authentication sequence and processes the corresponding SOA service, specifically including the following steps: The vehicle gateway compares the first authentication sequence sent to each vehicle terminal device with the third authentication sequence generated according to the pre-negotiated verification algorithm after receiving the second authentication sequence, and compares the single identity authentication time with the single identity authentication limit time to determine whether the authentication is successful; If the authentication is successful, the vehicle gateway opens the terminal device route and allows the corresponding SOA service to be provided; If the authentication fails, the vehicle terminal device will be routed and isolated and supervised, and the corresponding SOA service will not be provided.
7. A vehicle gateway routing management method and system based on SOA service, characterized in that: The described system includes: a basic routing unit, a first authentication path unit, a second authentication path unit, a third authentication path unit, and a fourth authentication path unit, specifically: The basic routing unit is used to forward the data to the corresponding port according to the user-defined routing forwarding rule table and filtering rules in the vehicle gateway, so as to realize the filtering, forwarding and routing of SOA service application data; A first authentication path unit, used to send a first authentication sequence to each vehicle terminal device at the vehicle gateway and start a timer; A second authentication path unit, configured to generate and send a second authentication sequence to the vehicle gateway through a preset verification algorithm after each vehicle terminal device receives the first authentication sequence; A third authentication path unit, used to verify the second authentication data through a preset verification algorithm in the vehicle gateway to obtain a third authentication sequence; The fourth authentication path unit is used for the vehicle gateway to compare the third authentication sequence with the first authentication sequence and perform corresponding processing.
8. The system according to claim 7, characterized in that The basic routing unit described specifically includes: The vehicle gateway human-computer interaction module is used to pre-set the data routing forwarding rule table and filtering rule table of the vehicle terminal equipment connected to the vehicle gateway; The vehicle-mounted gateway storage module is used to store the routing forwarding rule table and the filtering rule table; The vehicle-mounted gateway routing module is used to receive the SOA service application data of each vehicle-mounted terminal device at each port, and forward it to the corresponding port according to the routing forwarding rule table and the filtering rule table, so as to realize the filtering, forwarding and routing of the SOA service application data.
9. The method according to claim 7, characterized in that: The first authentication path unit described specifically includes: The vehicle gateway sending module is used to send the first authentication sequence to each vehicle terminal device respectively at the vehicle gateway; The vehicle gateway timer module, the first timer of the vehicle gateway is used to trigger the identity authentication of each vehicle terminal device at each corresponding time period, and the second timer is used to limit the time allowed for a single identity authentication.
10. The method according to claim 7, characterized in that The second authentication path unit described specifically includes: The vehicle terminal device receiving module is used for each vehicle terminal device to receive the first authentication sequence sent by the vehicle gateway; The vehicle terminal device authentication module is used for each vehicle terminal device to generate a second authentication sequence through a preset verification algorithm, including but not limited to using symmetric encryption methods such as DES and AES and asymmetric encryption methods such as RSA, and integrity authentication methods such as MD5, SHA1, and SHA256; The vehicle terminal sending module, each vehicle terminal device sends the second authentication sequence to the vehicle gateway.
11. The method according to claim 7, characterized in that The third authentication path unit described specifically includes: The vehicle gateway authentication module is used for the vehicle gateway to verify the second authentication data of each vehicle terminal device through a preset verification algorithm to obtain a third authentication sequence.
12. The method according to claim 7, characterized in that The fourth authentication path unit described specifically includes: The vehicle gateway judgment processing module is used for the vehicle gateway to compare the third authentication sequence with the first authentication sequence, compare the single identity authentication time with the single identity authentication limit time, and judge whether the authentication is successful. If the authentication is successful, the vehicle gateway opens the terminal device route and allows the corresponding SOA service to be provided; if the authentication fails, the vehicle terminal device is isolated and supervised, and the corresponding SOA service is not provided.