Vehicle-mounted terminal based on security chip communication, communication method, equipment and medium

Abstract

The invention discloses a vehicle-mounted terminal based on security chip communication, a communication method, equipment and a medium, and relates to the technical field of vehicle-mounted communication. The vehicle-mounted terminal comprises a security chip, a service processing module and a communication module, the service processing module comprises an MPU and an MCU, and the security chip comprises at least one application module, an operating system, a physical channel and a logic channel corresponding to the application module; the logic channel is controlled by an operating system, the at least one application module comprises an SIM application module and is used for authenticating an operator network accessed to the network and establishing a communication network applied to the vehicle-mounted terminal, and the security chip is respectively in communication connection with the MPU and the MCU through the physical channel and the logic channel; at least one logic channel is established between the safety chip and the MPU and between the safety chip and the MCU, and the communication module is in communication connection with the safety chip through the second target communication interface and is in communication connection with the MPU through the first target communication interface. According to the embodiment of the invention, the cost of the vehicle-mounted terminal can be reduced and the data communication efficiency can be improved.

Description

Technical Field

[0001] This application belongs to the field of vehicle communication technology, and in particular relates to a vehicle terminal, communication method, device, storage medium and computer program product based on secure chip communication. Background Art

[0002] With the rapid development of new-generation information technology, the way people interact with vehicles has gradually evolved from being controlled only inside the vehicle to being remotely controlled via mobile phone, providing more convenience for drivers and passengers.

[0003] Existing technologies for remotely controlling in-vehicle systems via mobile phones achieve secure remote data transmission between the phone and the in-vehicle system by connecting a Subscriber Identity Module (SIM) chip to the communication module and a security chip to the service processing module. However, connecting an additional SIM chip to the in-vehicle terminal requires additional serializers and occupies more interfaces, increasing the complexity of the in-vehicle system, raising the cost of the in-vehicle terminal, and reducing data communication efficiency. Summary of the Invention

[0004] This application provides a vehicle-mounted terminal, communication method, device, storage medium, and computer program product based on secure chip communication, which can reduce the complexity of the vehicle-mounted terminal, reduce the cost of the vehicle-mounted terminal, and improve data communication efficiency.

[0005] In a first aspect, embodiments of this application provide a vehicle-mounted terminal based on secure chip communication, including a secure chip, a service processing module, and a communication module; the service processing module includes a microprocessor (MPU) and a microcontroller (MCU);

[0006] The security chip includes at least one application module, an operating system, and at least one logic channel corresponding to the application module; the logic channel is controlled by the operating system.

[0007] At least one application module includes a SIM application module, which is used to authenticate the network of the operator accessing the network and establish a communication network for the vehicle terminal.

[0008] The security chip communicates with the MPU and MCU respectively through a first target communication interface and at least one logical channel; the security chip establishes at least one logical channel with the MPU and MCU respectively through the first target communication interface.

[0009] The communication module communicates with the security chip through the second target communication interface, and communicates with the MPU through the first target communication interface.

[0010] Secondly, embodiments of this application provide a communication method for an in-vehicle terminal, applied to the in-vehicle terminal as described in the first aspect, the method comprising:

[0011] Receive target communication data through the communication module;

[0012] Based on the logical channel between the security chip and the business processing module, target communication data is sent to the security chip;

[0013] The target communication data is securely verified using a security chip.

[0014] Thirdly, embodiments of this application provide an electronic device, the device including: a processor and a memory storing computer program instructions; the processor executes the computer program instructions to implement the communication method of the vehicle terminal as described in the second aspect.

[0015] Fourthly, embodiments of this application provide a computer storage medium storing computer program instructions, which, when executed by a processor, implement the communication method of the vehicle-mounted terminal as described in the second aspect.

[0016] Fifthly, embodiments of this application provide a computer program product in which instructions, when executed by a processor of an electronic device, cause the electronic device to perform a communication method of an in-vehicle terminal as described in the second aspect.

[0017] The vehicle-mounted terminal, communication method, device, storage medium, and computer program product based on secure chip communication in this application embodiment directly connects the communication interface of the communication module in the vehicle-mounted terminal to the secure chip and the service processing module. Furthermore, it integrates at least one application module, including a SIM application module, at the software level of the secure chip. At the software level, it constructs multiple logical channels corresponding to various application modules to achieve the transmission of communication data between the corresponding application modules. The SIM application module authenticates the network of the network-connected operator, establishing a communication network for the vehicle-mounted terminal. This enables efficient and secure transmission of communication data between the vehicle-mounted terminal and the cloud, and between the vehicle-mounted terminal and the in-vehicle control unit, without the need for an additional SIM chip connection. This reduces the complexity and cost of the vehicle-mounted terminal and improves data communication efficiency. Attached Figure Description

[0018] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments of this application will be briefly introduced below. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0019] Figure 1 This is a schematic diagram of the structure of an in-vehicle terminal provided in one embodiment of this application;

[0020] Figure 2 This is a schematic diagram of the structure of a security chip for an in-vehicle terminal provided in one embodiment of this application;

[0021] Figure 3 This is a flowchart illustrating a communication method for an in-vehicle terminal provided in one embodiment of this application;

[0022] Figure 4 This is a flowchart illustrating a communication method for an in-vehicle terminal provided in another embodiment of this application;

[0023] Figure 5 This is a flowchart illustrating a communication method for an in-vehicle terminal provided in another embodiment of this application;

[0024] Figure 6 This is a schematic diagram of the structure of an electronic device provided in one embodiment of this application. Detailed Implementation

[0025] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is merely to provide a better understanding of the present application by illustrating the examples of the present application.

[0026] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising..." does not exclude the presence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0027] With the rapid development of new-generation information technology, the way people interact with vehicles has gradually evolved from being controlled only inside the vehicle to being remotely controlled via mobile phone, providing more convenience for drivers and passengers.

[0028] Existing technologies for remotely controlling in-vehicle systems via mobile phones achieve secure remote data transmission between the phone and the in-vehicle system by connecting a Subscriber Identity Module (SIM) chip to the communication module and a security chip to the service processing module. However, connecting an additional SIM chip to the in-vehicle terminal requires additional serializers and occupies more interfaces, increasing the complexity of the in-vehicle system, raising the cost of the in-vehicle terminal, and reducing data communication efficiency.

[0029] To address the problems of existing technologies, this application provides a vehicle-mounted terminal, communication method, device, storage medium, and computer program product based on secure chip communication. By directly connecting the communication interface of the communication module within the vehicle-mounted terminal to the secure chip and service processing module, and integrating at least one application module, including a SIM application module, at the software level of the secure chip, and constructing multiple logical channels at the software level to transmit communication data for the corresponding application modules, the SIM application module authenticates the network of the network operator, establishing a communication network for the vehicle-mounted terminal. This enables efficient and secure transmission of communication data between the vehicle-mounted terminal and the cloud, and between the vehicle-mounted terminal and the vehicle control unit, without the need for an additional SIM chip connection. This reduces the complexity and cost of the vehicle-mounted terminal and improves data communication efficiency.

[0030] The following section first introduces the vehicle terminal based on secure chip communication provided in the embodiments of this application. Figure 1 A schematic diagram of the structure of an in-vehicle terminal based on secure chip communication provided in one embodiment of this application is shown.

[0031] like Figure 1 As shown, the vehicle terminal (TelematicBOX, T-BOX) includes a security chip SE, a service processing module, and a communication module; the service processing module may include a microprocessor MPU and a microcontroller MCU.

[0032] The security chip SE includes at least one application module, an operating system, and at least one logical channel corresponding to the application module; the logical channel is controlled by the operating system.

[0033] At least one application module includes a SIM application module, which is used to authenticate the network of the operator accessing the network and establish a communication network for the vehicle terminal.

[0034] The security chip SE communicates with the MPU and MCU respectively through a first target communication interface and at least one logical channel; the security chip establishes at least one logical channel with the MPU and MCU respectively through the first target communication interface.

[0035] The communication module communicates with the security chip SE through the second target communication interface, and communicates with the MPU through the first target communication interface.

[0036] The Secure Element (SE) chip is used to perform security verification on the identity information of external data and the communication data within the vehicle's infotainment system, in order to ensure the security of the business logic of the vehicle terminal.

[0037] Figure 2 A schematic diagram of the structure of a security chip provided in one embodiment of this application is shown. Figure 2 As shown, the security chip integrates at least one application module at the software level, including a SIM application module, a SSL application module, an SGA application module, a DCK key protection application module, and a payment application module. It also sets up a driver layer and an operating system (COS) at the software level. The COS is used to build logical channels on the first and second target communication interfaces and to uniformly schedule and manage these logical channels.

[0038] The business processing module is used to realize data communication between the vehicle terminal and the cloud and the in-vehicle control unit. The communication module is used for digital-to-analog conversion, converting digital signals into corresponding analog signals, so that computer data can be transmitted over analog channels.

[0039] The first target communication interface and the second target communication interface represent the physical interfaces used to establish communication connections between the security chip and the MPU, MCU, and communication modules. For example, the first target communication interface can be an SPI1 interface or an I2C1 interface, and the second target communication interface can be a 7816 interface.

[0040] A logical channel represents a virtual channel used for communication transmission between at least one application module, including the SIM application module, and the MPU, MCU, and communication module. Logical channels are constructed, scheduled, and managed by the operating system COS running at the security chip software level. Each logical channel corresponds to the transmission of communication data from the relevant application module.

[0041] By integrating at least one application module, including a SIM application module, at the software level of the security chip, and establishing multiple logical channels at the physical interface, the network access operator can be authenticated without the need for an additional SIM chip. This establishes a communication network for the vehicle terminal, enabling efficient and secure transmission of communication data between the vehicle terminal and the cloud, and between the vehicle terminal and the vehicle control unit. This reduces the complexity and cost of the vehicle terminal and improves data communication efficiency.

[0042] In some embodiments, to improve the transmission efficiency of communication data, the at least one logical channel corresponding to the application module can be configured with a preset priority. The priority can be used to determine the transmission order of the target communication data sent to the security chip.

[0043] In some embodiments, to facilitate the scheduling and management of logical channels, identifiers can be set to distinguish logical channels that transmit communication data of different application modules. For example, logical channels can be logical channel 0, logical channel 1, logical channel 2, etc.

[0044] Figure 3 A flowchart illustrating a communication method based on a vehicle-mounted terminal according to an embodiment of this application is shown. Figure 1 As shown, the method may include the following steps: S301 to S303.

[0045] S301: Receive target communication data through the service processing module.

[0046] The business processing module may include a microprocessor (MPU) and a microcontroller (MCU). The MPU is used to receive and process communication data sent from the cloud to the vehicle terminal, realizing data communication between the vehicle terminal and the cloud; the MCU is used to receive and process communication data transmitted by the in-vehicle electronic control unit (ECU), realizing data communication between in-vehicle control units.

[0047] The target communication data is used to trigger vehicle-related functions for vehicle control. The target communication data can include various data types, such as critical command data, identity information data, authentication request data, and key data.

[0048] S302: Send target communication data to the security chip based on the logical channel between the security chip and the service processing module.

[0049] In some embodiments, after the target communication data is sent to the security chip, the security chip can process the target communication data according to the order in which the target communication data arrives at the security chip, based on the principle of first-come, first-served.

[0050] S303: Security verification of target communication data is performed through a security chip.

[0051] Among them, security verification is used to ensure the security of the received target communication data and avoid malicious attacks.

[0052] This embodiment is based on Figure 1The vehicle-mounted terminal shown enables efficient and secure data transmission between the vehicle-mounted terminal and the cloud, and between the vehicle-mounted terminal and the vehicle control unit, without the need for an additional SIM chip connection. This reduces the complexity and cost of the vehicle-mounted terminal and improves data communication efficiency.

[0053] In some embodiments, to ensure the orderly transmission of communication data and improve data communication efficiency, step S302: sending target communication data to the security chip based on the logical channel between the security chip and the service processing module may include:

[0054] Based on the logical channel between the security chip and the business processing module, target communication data is sent to the security chip according to priority.

[0055] In some embodiments, before step S301: receiving target communication data through the service processing module, the communication method based on the vehicle terminal may further include:

[0056] Send a power-on flag to the signal module through the first target communication interface;

[0057] When the service processing module receives a power-on indicator, it receives the target communication data through the service processing module.

[0058] The Answer to Power On (ATP) indicator signifies that the vehicle terminal's security chip is powered on. Upon power-on, the security chip returns an ATP on each physical channel. Only after the service processing module (MPU) or MCU receives the ATP through the physical channel can it send communication data to the security chip for processing.

[0059] Communication data transmission is only performed after the business processing module receives the power-on indicator, thus avoiding invalid transmission of communication data when the security chip is not powered on, which can improve data transmission efficiency.

[0060] In some embodiments, to achieve efficient and secure transmission of communication data between the vehicle terminal and the cloud without the need for an additional SIM chip, and to improve data communication efficiency and security, the target communication data may include cloud identity data, verification requests, and cloud communication data sent by the cloud device. For example... Figure 4 As shown, the communication method based on the vehicle terminal may further include the following steps:

[0061] S401: Receives cloud identity data and verification requests via MPU.

[0062] S402: Based on the logical channel between the security chip and the MPU, send cloud identity data and verification requests to the security chip.

[0063] S403: Verify cloud identity data via a security chip based on the verification request.

[0064] S404: Receive cloud communication data sent by cloud devices after successful identity data verification in the cloud.

[0065] In step S401, the cloud identity data is used to represent the legitimacy of the cloud device's identity information, so that the security chip can verify the security of the cloud device.

[0066] As an example, during communication between the vehicle terminal and the cloud, the cloud sends cloud identity data to the MPU via a wireless network, such as a 4G or 5G network. Then, the SE opens a logical channel, such as logical channel 0 on the SPI1 interface. The MPU packages the authentication command and sends it to the SE. The SE authenticates the cloud identity data using the stored root certificate. If the cloud identity data is verified, the vehicle terminal receives the cloud communication data sent by the cloud device.

[0067] In some embodiments, cloud identity data may include an identity certificate. Step S403: Verifying the cloud identity data via a security chip may include:

[0068] Retrieve the root certificate pre-installed in the security chip;

[0069] The certificate chain verification function based on the security protocol application module verifies the identity certificate according to the root certificate.

[0070] The Secure Sockets Layer (SSL) application module is used to verify communication data based on the security assets stored in the security chip and the relevant security verification data in the security assets.

[0071] As an example, the above-mentioned verification of cloud identity data via a security chip can be achieved by the cloud communication service program TSP transmitting the identity certificate to the client communication program of the MPU. The client communication program transmits a communication request to the communication engine of the MPU. The communication engine forwards the verification request to the SSL APPLET in the security chip through logical channel 0 on SPI1. The SSL APPLET verifies the identity of the TSP through the certificate verification function.

[0072] By setting up a security protocol application module at the software level of the security chip, security assets used for data security verification are stored inside the security chip and cannot be transmitted outside the security chip. Data security verification is performed directly based on the security assets stored in the security chip through the security protocol application module, which improves the privacy and security of the data assets. In addition, during the data verification process of the security chip, there is no need to retrieve the security assets used for security verification from external devices, which enhances security and improves the efficiency of data security verification.

[0073] Based on this, in some embodiments, before receiving cloud communication data sent by the cloud device in step S404, the communication method based on the vehicle terminal may further include:

[0074] Receive encryption requests sent by cloud devices; encryption requests are used to request encrypted cloud communication data.

[0075] Based on the first preset encryption algorithm, the first key is generated through the security protocol application module;

[0076] The cloud communication data is encrypted using the first key to obtain the encrypted cloud communication data.

[0077] The first preset encryption algorithm can be any of the symmetric encryption algorithms, and the first key can be a symmetric key, which will not be elaborated here.

[0078] By setting up a security protocol application module at the software level of the security chip, and generating a first key through the security protocol application module to encrypt cloud communication data, the security of cloud communication data during transmission is improved. At the same time, generating a key directly inside the security chip to encrypt cloud communication data improves the efficiency of data transmission.

[0079] In some embodiments, to achieve efficient and secure transmission of communication data between in-vehicle electronic control units without the need for an additional SIM chip connection, and to improve data communication efficiency and security, the target communication data may include instruction information sent by a cloud device, such as... Figure 5 As shown, the communication method based on the vehicle terminal may further include the following steps:

[0080] S501: Receives instruction information via MCU.

[0081] S502: Sends instruction information to the security chip through the logic channel between the security chip and the MCU.

[0082] S503: Based on the second preset encryption algorithm, the instruction information is encrypted through the security chip to obtain the second key of the instruction information.

[0083] S504: Sends command information and a second key to the Electronic Control Unit (ECU) via the vehicle bus, so that the ECU can verify the security of the command information based on the command information and the second key.

[0084] In step S501, the instruction information (Application Protocol Data Unit, APDU) is used to instruct the vehicle's electronic control unit (ECU) to perform the function corresponding to the instruction information. For example, the instruction information could be "open the window" or "turn on the air conditioning".

[0085] In step S503, the second preset encryption algorithm is used to encrypt the instruction information to obtain a second key for the instruction information, so that the ECU can verify the security of the instruction information based on the instruction information and the second key. The second preset encryption algorithm can be any asymmetric encryption algorithm. As an example, the second preset encryption algorithm can be the MAC algorithm.

[0086] As an example, during in-vehicle communication, the MCU sends the critical command "open the window" to the SE through logic channel 0 pre-built on the SPI2 interface. The SE calculates the MAC value of the critical command using a MAC algorithm. The vehicle terminal sends the critical command and its MAC value to the target electronic control unit (ECU) through the in-vehicle bus. The target ECU uses its built-in MAC algorithm to perform MAC calculation on the critical command to obtain a MAC value for comparison and verification. This MAC value is compared with the MAC value of the received critical command. If they match, the critical command information is complete and the verification passes.

[0087] In some embodiments, step S503: encrypting the instruction information using a security chip based on a second preset encryption algorithm to obtain a second key for the instruction information may include:

[0088] Based on the second preset encryption algorithm, the instruction information is encrypted through the encryption application module (SGA APPLET) to obtain the second key of the instruction information.

[0089] By setting up an encryption application module at the software level of the security chip, and using the encryption application module to encrypt communication data, including instruction information, the encryption efficiency of instruction information can be improved, thereby improving the transmission efficiency of communication data.

[0090] In some embodiments, the communication method based on the vehicle terminal may further include the following steps:

[0091] A. Generate authentication requests through the SIM application module of the security chip.

[0092] B. Send an authentication request to the authentication and verification center; the authentication and verification center generates an identifier code based on the authentication request.

[0093] C. Based on the third preset encryption algorithm, the identification code sent by the authentication and verification center is encrypted through the security chip to obtain the authentication code.

[0094] D. Send the authentication code to the authentication and verification center so that the center can verify permissions based on the authentication code.

[0095] E. If the authorization verification is successful, access the network of the operator requesting network access.

[0096] The authentication request is used to verify the access rights of the operator network for the vehicle terminal requesting network access. The authentication and verification center verifies the access rights of the operator network requesting network access based on the received authentication request.

[0097] The third preset encryption algorithm is used to encrypt the identification code sent by the authentication and verification center to obtain the authentication code, so that the authentication and verification center can perform permission verification based on the authentication code. The third preset encryption algorithm can be any of the symmetric encryption algorithm or asymmetric encryption algorithm, which will not be elaborated here.

[0098] By setting up a SIM application module at the software level of the security chip, and using the SIM application module to authenticate the network of the operator accessing the network, a communication network for the vehicle terminal is established. This enables network access authentication of the vehicle terminal without the need for an additional SIM chip, reducing the complexity and cost of the vehicle terminal and improving data communication efficiency.

[0099] In some embodiments, step C. encrypting the identifier code using a security chip based on a third preset encryption algorithm to obtain an authentication code may include:

[0100] Retrieve the third key pre-installed in the security chip;

[0101] Send a third key to the SIM application module;

[0102] Based on the third preset encryption algorithm, the third key and the identification code are encrypted through the SIM application module to obtain the authentication code.

[0103] By setting up a SIM application module at the software level of the security chip, the third key and the identification code are encrypted through the SIM application module based on the third key stored in the security chip. The entire process is completed within the security chip, which enhances security and improves the efficiency of data security verification.

[0104] Figure 6 A schematic diagram of the hardware structure of the electronic device provided in an embodiment of this application is shown.

[0105] The electronic device may include a processor 601 and a memory 602 storing computer program instructions.

[0106] Specifically, the processor 601 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0107] The memory 602 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 602 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive, or a combination of two or more of these. Where appropriate, the memory 602 may include removable or non-removable (or fixed) media. Where appropriate, the memory 602 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 602 is a non-volatile solid-state memory.

[0108] In certain embodiments, the memory may include read-only memory (ROM), random access memory (RAM), disk storage media devices, optical storage media devices, flash memory devices, and electrical, optical, or other physical / tangible memory storage devices. Thus, typically, memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to one aspect of this application.

[0109] The processor 601 reads and executes computer program instructions stored in the memory 602 to implement any of the communication methods of the vehicle terminal in the above embodiments.

[0110] In one example, the electronic device may also include a communication interface 603 and a bus 610. For example, Figure 6 As shown, the processor 601, the memory 602, and the communication interface 603 are connected via a bus 610 and communicate with each other.

[0111] The communication interface 603 is mainly used to realize communication between various modules, devices, units and / or equipment in the embodiments of this application.

[0112] Bus 610 includes hardware, software, or both, that couples components of an electronic device together. For example, and not limitingly, the bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), HyperTransport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an Infinite Bandwidth Interconnect, a Low Pin Count (LPC) bus, a memory bus, a Microchannel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local (VLB) bus, or other suitable buses, or combinations of two or more of these. Where appropriate, bus 610 may include one or more buses. Although specific buses are described and illustrated in embodiments of this application, any suitable bus or interconnect is contemplated herein.

[0113] Furthermore, in conjunction with the communication methods of the vehicle-mounted terminal in the above embodiments, this application embodiment can provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when these computer program instructions are executed by a processor, they implement any of the communication methods of the vehicle-mounted terminal in the above embodiments.

[0114] This application also provides a computer program product, including a computer program, which, when executed, implements any of the communication methods of the vehicle-mounted terminal described in the above embodiments.

[0115] It should be clarified that this application is not limited to the specific configurations and processes described above and shown in the figures. For the sake of brevity, detailed descriptions of known methods are omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of this application is not limited to the specific steps described and shown. Those skilled in the art can make various changes, modifications, and additions, or change the order of steps, after understanding the spirit of this application.

[0116] The functional blocks shown in the above block diagram can be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, they can be, for example, electronic circuits, application-specific integrated circuits (ASICs), appropriate firmware, plug-ins, function cards, etc. When implemented in software, the elements of this application are programs or code segments used to perform the required tasks. Programs or code segments can be stored on a machine-readable medium or transmitted over a transmission medium or communication link via data signals carried on a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, fiber optic media, radio frequency (RF) links, etc. Code segments can be downloaded via computer networks such as the Internet, intranets, etc.

[0117] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps. In other words, the steps can be performed in the order mentioned in the embodiments, or in a different order, or several steps can be performed simultaneously.

[0118] The foregoing flowcharts and / or block diagrams of methods, apparatuses, devices, storage media, and computer program products according to embodiments of this application have described various aspects of the present application. It should be understood that each block in the flowcharts and / or block diagrams, and combinations of blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus to produce a machine such that these instructions, executable via the processor of the computer or other programmable data processing apparatus, enable the implementation of the functions / actions specified in one or more blocks of the flowcharts and / or block diagrams. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field-programmable logic circuit. It is also understood that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can also be implemented by dedicated hardware performing the specified functions or actions, or can be implemented by a combination of dedicated hardware and computer instructions.

[0119] The above description is merely a specific implementation of this application. Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, modules, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here. It should be understood that the protection scope of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the protection scope of this application.

Claims

1. A vehicle-mounted terminal based on secure chip communication, characterized in that: It includes a security chip, a business processing module and a communication module; the business processing module includes a microprocessor MPU and a single-chip microcomputer MCU; The security chip includes at least one application module, an operating system and at least one logical channel corresponding to the application module; the logical channel is controlled by the operating system; The at least one application module includes a SIM application module, and the SIM application module is used to authenticate the network of the operator accessing the network and establish a communication network applied to the vehicle-mounted terminal; The security chip is respectively connected to the MPU and the MCU through a first target communication interface and at least one logical channel; the security chip establishes at least one logical channel with the MPU and the MCU through the first target communication interface; The communication module is connected to the security chip through the second target communication interface, and the communication module is connected to the MPU through the first target communication interface.

2. A communication method for a vehicle-mounted terminal, characterized in that: Applied to the vehicle-mounted terminal according to claim 1, the method comprises: receiving target communication data through a business processing module; Based on the logical channel between the security chip and the service processing module, sending the target communication data to the security chip; The target communication data is security-verified by the security chip.

3. The method according to claim 2, characterized in that The at least one logical channel corresponding to the application module is configured with a preset priority; the sending of the target communication data to the security chip based on the logical channel between the security chip and the service processing module includes: Based on a logical channel between the security chip and the service processing module, the target communication data is sent to the security chip according to the priority.

4. The method according to claim 2, characterized in that: Before receiving the target communication data through the service processing module, the method further includes: Sending a power-on flag to the service processing module through the first target communication interface; When the service processing module receives the power-on mark, the target communication data is received through the service processing module.

5. The method according to claim 2, characterized in that: The service processing module includes a microprocessor MPU, and the target communication data includes cloud identity data, verification request and cloud communication data sent by the cloud device; the method also includes: receiving the cloud identity data and the verification request through the MPU; Sending the cloud identity data and the verification request to the security chip based on a logical channel between the security chip and the MPU; Based on the verification request, verifying the cloud identity data through the security chip; When the cloud identity data is verified, cloud communication data sent by the cloud device is received.

6. The method according to claim 5, characterized in that The cloud identity data includes an identity certificate, and the security chip includes a security protocol application module; and verifying the cloud identity data by using the security chip includes: Retrieving the root certificate preset in the security chip; Based on the certificate chain verification function of the security protocol application module, the identity certificate is verified according to the root certificate.

7. The method according to claim 5, characterized in that The security chip includes a security protocol application module; before receiving the cloud communication data sent by the cloud device, the method further includes: Receiving an encryption request sent by the cloud device; the encryption request is used to request encryption of cloud communication data; Based on a first preset encryption algorithm, generating a first key through the security protocol application module; The cloud communication data is encrypted according to the first key to obtain encrypted cloud communication data.

8. The method according to claim 2, characterized in that: The business processing module includes a single-chip microcomputer MCU, and the target communication data includes instruction information sent by a cloud device; the method also includes: Receiving the instruction information through the MCU; Sending the instruction information to the security chip through a logic channel between the security chip and the MCU; Based on a second preset encryption algorithm, encrypting the instruction information through the security chip to obtain a second key of the instruction information; The command information and the second key are sent to an electronic control unit ECU via an in-vehicle bus, so that the ECU verifies the security of the command information based on the command information and the second key.

9. The method according to claim 8, characterized in that The security chip includes an encryption application module; the instruction information is encrypted by the security chip based on a second preset encryption algorithm to obtain a second key of the instruction information, including: Based on a second preset encryption algorithm, the instruction information is encrypted by the encryption application module to obtain a second key of the instruction information.

10. The method according to claim 2, characterized in that The method further comprises: Generate an authentication request through the SIM application module of the security chip, the authentication request is used to authenticate the operator network requesting network access; Sending the authentication request to an authentication verification center; the authentication verification center is used to generate an identification code according to the authentication request; Based on a third preset encryption algorithm, the identification code sent by the authentication and verification center is encrypted by the security chip to obtain an authentication code; Sending the authentication code to the authentication and verification center, so that the authentication and verification center performs authority verification based on the authentication code; When the authority verification is passed, access is made to the network of the operator requesting access.

11. The method according to claim 10, characterized in that The security chip includes the SIM application module; the identification code is encrypted by the security chip based on the third preset encryption algorithm to obtain the authentication code, including: Retrieving a third key preset in the security chip; Sending the third key to the SIM application module; Based on a third preset encryption algorithm, the third key and the identification code are encrypted by the SIM application module to obtain an authentication code.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by the processor, the communication method of the vehicle-mounted terminal as described in any one of claims 2 to 11 is implemented.

13. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device executes the communication method of the vehicle terminal as described in any one of claims 2 to 11.

Images