Anti-theft authentication method and device

Abstract

The embodiment of the invention provides an anti-theft authentication method and device. The method comprises the steps that a first function module receives a first request; the first function module obtains a key authentication result and anti-theft authentication information, the anti-theft authentication information is used for determining an anti-theft authentication result, and the anti-theft authentication result is used for the second function module to judge whether to execute the first operation or not; when the key authentication result is passed, the first function module sends anti-theft authentication information to the second function module, or the first function module sends the key authentication result and the anti-theft authentication information to the second function module; wherein the first request is an operation request from a key, and the operation request is used for requesting to execute a first operation; or the first request is an anti-theft authentication request from the second function module. According to the scheme, the anti-theft authentication is associated with the key authentication, so that even if an attacker attacks the first function module, the anti-theft authentication cannot be successful, and the safety performance of the anti-theft function of the vehicle can be improved.

Description

Technical Field

[0001] The present application relates to the field of smart car technology, and in particular to an anti-theft authentication method and device. Background Art

[0002] At present, vehicles support anti-theft functions such as body and power. Taking the key components in the car (such as Bluetooth controller) and body control components (such as unlocking controller) as examples, the anti-theft principle is generally as follows: the key component and the body control component hold a shared key. When the key initiates a vehicle control command (such as opening the car door), the key component will receive the vehicle control command and send a control command to the body control component. The body control component requires anti-theft authentication before executing the vehicle control command. Therefore, the key component and the body control component will first perform identity authentication based on the shared key (such as challenge response). After the authentication is passed, the body control component will respond to the vehicle control command, thereby achieving the safety protection of the vehicle body.

[0003] However, if an attacker uses network attack methods (such as escalating privileges through a Bluetooth vulnerability) to attack the key component, the attacker can obtain the system permissions of the key component and control the anti-theft authentication function of the key component. In this case, the attacker can send any vehicle control command through the key component, and the body control component will execute it.

[0004] It can be seen that the existing technology has the problem of low security of the vehicle anti-theft function. Summary of the invention

[0005] The embodiments of the present application provide an anti-theft authentication method and device for improving the security of a vehicle's anti-theft function.

[0006] In a first aspect, an anti-theft authentication method is provided, the method comprising: a first function module receives a first request; the first function module obtains a key authentication result and anti-theft authentication information, the anti-theft authentication information is used to determine the anti-theft authentication result, and the anti-theft authentication result is used by a second function module to determine whether to perform a first operation; when the key authentication result is passed, the first function module sends the anti-theft authentication information to the second function module; or, the first function module sends the key authentication result and the anti-theft authentication information to the second function module; wherein the first request is an operation request from a key, the operation request is used to request to perform the first operation; or, the first request is an anti-theft authentication request from the second function module.

[0007] In the above scheme, the first function module sends anti-theft authentication information to the second function module only when the key authentication result is passed, or the first function module sends the key authentication result and anti-theft authentication information to the second function module, so that the second function module executes the first operation only when both the key authentication result and the anti-theft authentication result are passed. This scheme associates the anti-theft authentication with the key authentication, so even if the attacker attacks the first function module, the anti-theft authentication cannot be successful, which can improve the safety performance of the vehicle anti-theft function.

[0008] In a possible implementation, the first functional module obtains anti-theft authentication information, including: when the key authentication result is passed, the first functional module sends a second request to the second functional module, the second request is used to request to obtain parameters, and the parameters are used to calculate the anti-theft authentication information; the first functional module receives the parameters from the second functional module; the first functional module calculates the anti-theft authentication information according to the parameters.

[0009] In this way, when the key authentication is passed, the parameters used to calculate the anti-theft authentication information can be obtained, which can save computing resources.

[0010] In one possible implementation, the application layer of the first functional module receives the first request; the application layer of the first functional module passes the first request to the kernel layer or the secure operating environment layer or the secure hardware layer of the first functional module; the kernel layer or the secure operating environment layer or the secure hardware layer of the first functional module obtains the key authentication result and the anti-theft authentication information.

[0011] This implementation method sinks the execution logic of anti-theft keys and anti-theft authentication to the kernel layer, trusted execution environment layer or trusted hardware layer, which can reduce the risk of the execution logic of anti-theft keys and anti-theft authentication being hijacked by attackers, and also facilitates the association of anti-theft authentication and key authentication.

[0012] In a possible implementation, the first functional module authenticates the key to obtain a key authentication result; or, the first functional module obtains a pre-saved key authentication result.

[0013] Of course, the above two methods are only examples and are not limited to them.

[0014] In a possible implementation, before the first functional module obtains the pre-saved key authentication result, the first functional module authenticates the key, obtains the key authentication result, and saves the key authentication result.

[0015] In this way, the key authentication result can be saved in advance, so that the first functional module can subsequently obtain the pre-saved key authentication result, thereby improving the reliability of the solution.

[0016] In a possible implementation, the first functional module may also set a validity period for the saved authentication result.

[0017] In a possible implementation, when the key authentication result is passed and the key authentication result is valid, the first function module sends anti-theft authentication information to the second function module.

[0018] In this way, it can be ensured that the key authentication result obtained is a valid key authentication result, taking into account both the reliability of the key authentication result and the efficiency of obtaining the key authentication result.

[0019] In a possible implementation, if the key authentication result is invalid, the first functional module may also output a reminder message.

[0020] In this way, the user can be reminded to re-operate the key authentication in time, which can improve the user experience.

[0021] In a possible implementation, if the key authentication result is invalid, the first functional module may re-authenticate the key.

[0022] In this way, it can be ensured that the first functional module can obtain a valid key authentication result even when the key authentication result is invalid, further improving the reliability of the solution.

[0023] In one possible implementation, if the key is a bluetooth low energy (BLE) key or an ultra wide band (UWB) key, the validity period is a first duration; if the key is a near field communication (NFC) key, the validity period is a second duration; wherein the first duration is less than the second duration.

[0024] Because the communication distance of BLE or UWB keys is longer than that of NFC keys, the user needs to manually bring the NFC key close to the key module when the NFC key and the key module communicate. Therefore, setting the validity period of the NFC key to be longer than that of the BLE or key key can avoid users from frequently operating the NFC key and improve the user experience.

[0025] In one possible implementation, the first functional module can calculate the parameters provided by the second functional module based on the first key, and the calculation result is anti-theft authentication information; or, the first functional module can generate a message carrying a signature based on the second key, and the message carrying the signature is the anti-theft authentication information.

[0026] Of course, the above two are just examples, and there may be other anti-theft authentication methods.

[0027] In a second aspect, an anti-theft authentication method is provided, including: a second functional module receives a key authentication result and anti-theft authentication information from a first functional module; the second functional module determines an anti-theft authentication result based on the anti-theft authentication information; when both the key authentication result and the anti-theft authentication result are passed, the second functional module executes a first operation.

[0028] In a possible implementation, before the second functional module executes the first operation, the second functional module may also receive a first request from the first functional module, where the first request is an operation request from a key, and the operation request is used to request execution of the first operation.

[0029] In a possible implementation, before the second functional module receives the anti-theft authentication information from the first functional module, the second functional module may also receive a second request from the first functional module, the second request is used to request to obtain parameters, the parameters are used to calculate the anti-theft authentication information; the second functional module sends the parameters to the first functional module.

[0030] In one possible implementation, before the second functional module receives the key authentication result and anti-theft authentication information from the first functional module, the second functional module may also receive a third request, where the third request is used to request execution of the first operation; the second functional module sends an anti-theft authentication request to the first functional module based on the third request, where the anti-theft authentication request is used to request acquisition of anti-theft authentication information.

[0031] In a possible implementation, the key authentication result is set with a validity period. Accordingly, when the key authentication result and the anti-theft authentication result are both passed and the key authentication result is valid, the second functional module performs the first operation.

[0032] In one possible implementation, if the key is a low-power Bluetooth BLE or UWB key, the validity period is a first duration; if the key is a near-field communication NFC key, the validity period is a second duration; wherein the first duration is less than the second duration.

[0033] In a possible implementation, the second function module may verify the anti-theft authentication information based on the third key; or the second function module may verify the signature of the anti-theft authentication information based on the fourth key.

[0034] In a third aspect, a control device is provided, which includes a module or unit or technical means for executing the method described in the first aspect or any possible implementation of the first aspect.

[0035] Exemplarily, the device may include:

[0036] A transceiver unit, configured to receive a first request;

[0037] A processing unit, used to obtain a key authentication result and anti-theft authentication information, the anti-theft authentication information is used to determine the anti-theft authentication result, and the anti-theft authentication result is used by the second functional module to determine whether to perform the first operation;

[0038] The transceiver unit is further used to: send anti-theft authentication information to the second functional module when the key authentication result is passed; or send the key authentication result and anti-theft authentication information to the second functional module;

[0039] The first request is an operation request from the key, and the operation request is used to request to perform the first operation; or the first request is an anti-theft authentication request from the second functional module.

[0040] In a fourth aspect, a control device is provided, which includes a module or unit or technical means for executing the method described in the second aspect or any possible implementation of the second aspect.

[0041] Exemplarily, the device may include:

[0042] A transceiver unit, used for receiving the key authentication result and the anti-theft authentication information from the first functional module;

[0043] The processing unit is used to determine the anti-theft authentication result according to the anti-theft authentication information; when the key authentication result and the anti-theft authentication result are both passed, perform a first operation.

[0044] In a fifth aspect, a control device is provided, comprising: at least one processor and an interface circuit; the interface circuit is used to receive signals from other devices outside the device and transmit them to the processor or send signals from the processor to other devices outside the device, and the processor is used to implement the method described in the first aspect or any possible implementation of the first aspect or the second aspect or any possible implementation of the second aspect through logic circuits or execution code instructions.

[0045] In a sixth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium is used to store instructions. When the instructions are executed, the method described in the first aspect or any possible implementation of the first aspect or the second aspect or any possible implementation of the second aspect is implemented.

[0046] In the seventh aspect, a computer program product is provided, in which instructions are stored, and when the computer program product is run on a computer, the computer executes the method described in the first aspect or any possible implementation of the first aspect or the second aspect or any possible implementation of the second aspect.

[0047] In an eighth aspect, a terminal device is provided, comprising the control device as described in the third aspect and / or the control device as described in the fourth aspect, or comprising the control device as described in the fifth aspect.

[0048] Optionally, the terminal device may be a vehicle, a drone, a helicopter, an airplane, a ship, an intelligent transportation device, or a smart home device, etc.

[0049] For the technical effects that can be achieved by the above-mentioned second to eighth aspects, please refer to the description of the technical effects that can be achieved by the corresponding design scheme in the above-mentioned first aspect, and this application will not repeat them here. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 It is a schematic diagram of the vehicle body anti-theft solution;

[0051] Figure 2 It is a schematic diagram of the power anti-theft solution;

[0052] Figure 3A to Figure 3C Schematic diagram of several possible vehicle anti-theft scenarios provided in the embodiments of the present application;

[0053] Figure 4 A flowchart of an anti-theft authentication method provided in an embodiment of the present application;

[0054] Figure 5 A schematic diagram of a possible hardware and software architecture of the first functional module;

[0055] Figure 6 An example diagram of a car owner controlling a vehicle using a key;

[0056] Figure 7 This is an example diagram of an attacker attacking a vehicle;

[0057] Figure 8 A schematic diagram of the structure of a control device provided in an embodiment of the present application;

[0058] Fig. 9 A schematic diagram of the structure of another control device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0059] In order to make the purpose, technical solutions and advantages of the embodiments of the present application clearer, the embodiments of the present application will be further described in detail below with reference to the accompanying drawings.

[0060] It should be understood that in the embodiments of the present application, "at least one" refers to one or more, and "multiple" refers to two or more. "And / or" describes the association relationship of the associated objects, indicating that there may be three relationships, for example, A and / or B, which can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. "At least one (item) of the following" or its similar expression refers to any combination of these items, including any combination of single items (items) or plural items (items). For example, at least one (item) of a, b or c can represent: a, b, c, a and b, a and c, b and c, or a, b and c, where a, b, c can be single or multiple. The terms "first" and "second" are used only for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, the features defined as "first" and "second" can explicitly or implicitly include one or more of the features. “Functional module” may also be referred to as “module”, “component”, “device”, etc.

[0061] See also Figure 1 , which is a schematic diagram of the vehicle body anti-theft solution.

[0062] Step 1: A key (such as a car key or a mobile phone) establishes a communication link with the key module;

[0063] The communication link may be, for example, a Bluetooth link, a Bluetooth low energy (BLE) link, an ultra wide band (UWB) link, a near field communication (NFC) link, or the like.

[0064] Step 2: Key authentication;

[0065] That is, the key module authenticates the key. Specifically, the key and the key module authenticate and negotiate the session key (the authentication process here is based on the mutual possession of a common key, and the authentication and negotiation of a temporary session key). The authentication process can be based on the Intelligent Car Connectivity Ecosystem Alliance (ICCE) standard or the Car Connectivity Consortium (CCC) standard. If the key is the key that comes with the vehicle, the authentication is successful, otherwise, the authentication fails.

[0066] After authentication, the key maintains a session link with the key module, and the key can send vehicle control commands (such as unlocking, opening windows, or finding the car) to the key module based on the link. The following steps take the unlocking scenario as an example:

[0067] Step 3: The key sends a vehicle control command to the key module to send an unlock request;

[0068] Step 4: The key module sends an unlock request (or an anti-theft authentication request) to the body control module;

[0069] Step 5: The body control module sends a random number to the key module;

[0070] Step 6: After receiving the random number, the key module calculates the random number using the preset anti-theft key, and returns the calculation result as a response result to the body control module;

[0071] Step 7: The body control module verifies whether the identity of the initiator (i.e., the key module) is legitimate based on the result fed back by the key module;

[0072] It is understandable that the key module can only calculate the correct result if it holds a valid anti-theft key.

[0073] If the key module sends an anti-theft authentication request in step 4, execute step 8; if the key module sends an unlocking request in step 4, jump directly to step 9;

[0074] Step 8: The key module sends an unlock request to the body control module;

[0075] Step 9: The body control module determines whether to perform unlocking according to the verification result of step 7. For example, unlocking is performed only when the identity of the initiator is legitimate.

[0076] Figure 1 The scenario shown uses a "two-stage" authentication scheme, in which the key module authenticates the key in the first stage (i.e., step 2), and the body control module authenticates the key module in the second stage (i.e., steps 5 to 7). One assumption of this scheme is that the key module must be reliable, that is, when the key module sends an unlock request to the body control module, the key must have been authenticated.

[0077] However, this assumption does not hold true in actual applications. Because the key module (such as a Bluetooth controller) is generally a relatively cheap electronic control unit (ECU), the key module is generally implemented through a micro-controller unit (MCU) chip, so the security is relatively low. In addition, the code in the key module is complex (for example, including Bluetooth control protocols, ICCE / CCC protocols, etc.), and it also provides an interface for external communication. Therefore, the key module is a high-risk component and a weak point that attackers can focus on. In addition, the calculation logic related to the anti-theft authentication function in the key module is deployed at the application layer, that is, it belongs to the business-level process. Attackers can use network attack methods (such as raising privileges through Bluetooth vulnerabilities) to attack the key module, obtain the system permissions of the key module, and then control the calculation logic related to the business and anti-theft authentication functions in the key module.

[0078] Once the key module is attacked and hijacked, the attacker can control the vehicle without the key. For example, after the attacker hijacks the key module, the attacker can control the key module to skip the authentication process with the key and directly send an unlock request to the body control module. After the attacker controls the key module to send an unlock request, the key module can continue to execute subsequent processes, and the authentication between the key module and the body control module will always pass, allowing the vehicle to be maliciously unlocked by the attacker.

[0079] For example, see Figure 2 , which is a schematic diagram of the power anti-theft solution.

[0080] When starting the vehicle, the vehicle control / power module will obtain the key location information and determine whether the key location range is within the required range (for example, whether the key is in the vehicle) based on the key location information. In addition, the vehicle control / power module will also conduct an anti-theft authentication with key components in the vehicle (such as the key module). Only when the key is within the required range and the anti-theft authentication is passed, the vehicle control / power module will perform subsequent startup operations. The specific process is as follows:

[0081] Step 1: After the user steps on the brake pedal, the pedal sends a brake signal to the vehicle control / power module through the controller area network (CAN) input interface or the local interconnect network (LIN) input interface;

[0082] Step 2: The vehicle control / power module sends a "find key" query command to the key module;

[0083] Step 3: The key module returns the result of "finding key" according to the current key status, that is, if the digital key is in the car (and the key authentication is completed), it returns "found"; otherwise, it returns "not found" or does not return any information;

[0084] Step 4: The vehicle control / power module performs anti-theft authentication on the key module;

[0085] For example, the vehicle control / power module initiates a challenge response to the key module, and determines whether the anti-theft authentication is passed based on the result returned by the key module. Figure 1 Steps 5 to 7.

[0086] Step 5: The vehicle control / power module determines whether to allow the vehicle to be started based on the results of "finding the key" and "anti-theft authentication". For example, the vehicle can only be started after the key is found and the anti-theft authentication is passed.

[0087] Figure 2 The scenario shown also uses a "two-stage" authentication scheme, in which the first stage of the key module's authentication of the key directly uses the previous authentication result, that is, if the key search result in step 3 is "found", it is considered that the key authentication has passed. The second stage is that the vehicle control / power module authenticates the key module (that is, step 4). This scheme also assumes that the key module must be reliable. When the key result returned by the key module is "found", the key must have been authenticated. However, this assumption does not hold true in actual applications. When an attacker hijacks the key module, he can obtain the system permissions of the key module and control the calculation logic related to the business and anti-theft authentication functions in the key module. For example, the key module is controlled to directly send "found" to the vehicle control / power module (the actual key module has not authenticated the key or the authentication has not passed), so that the vehicle control / power module can continue to execute subsequent processes, and the authentication between the key module and the vehicle control / power module will always pass, so that the vehicle can be maliciously started by the attacker.

[0088] In order to solve one or more of the above problems, a technical solution of the embodiment of the present application is provided.

[0089] The embodiments of the present application can be applied to various security protection scenarios, including but not limited to vehicle anti-theft scenarios. When the technical solution of the embodiments of the present application is applied to vehicle anti-theft scenarios, the safety performance of the vehicle anti-theft function can be improved.

[0090] See also Figure 3A, is a schematic diagram of a possible vehicle anti-theft scenario, in which the user uses a key to control the vehicle. For example, the user uses a key to send control commands such as unlocking, opening windows or finding a car to the key module (or digital key module or Bluetooth key module or Bluetooth module, etc.) in the car. The key module transmits the command to the body control module. Before the body control module responds to the command and performs the corresponding operation (such as opening the door, opening the window or finding the car, etc.), it is necessary to perform anti-theft authentication on the component that initiates the command in the car (i.e., the key module) to ensure that the command initiated by the legitimate component will be responded to by the body control module. In a specific implementation, the key can be a car key, or an electronic device with a car key function (such as a mobile phone, a smart wearable device, etc.); the specific implementation of the key module can be a Bluetooth controller; the specific implementation of the body control module can be a vehicle domain controller (VDC) or a body control module (BCM), etc., which is not limited in the embodiments of the present application. It can be understood that the names of the key module and the body control module can be different in different vehicles.

[0091] See also Figure 3B , is a schematic diagram of another possible vehicle anti-theft scenario, in which the user can remotely control the vehicle through a remote terminal. For example, an application (APP) for controlling the vehicle is installed on the remote terminal. The user uses the remote terminal to log in to the APP and sends commands such as unlocking, opening windows or searching for a vehicle to the communication module of the vehicle through the network. After receiving the command, the communication module of the vehicle passes the command to the body control module. Before the body control module responds to the command and performs the corresponding operation (such as opening the door, opening the window or searching for a vehicle, etc.), it is necessary to perform anti-theft authentication on the component that initiates the command in the vehicle (i.e., the communication module) to ensure that the command initiated by the legitimate component will be responded to by the body control module. In a specific implementation, the remote terminal can be a mobile phone, a computer or a smart wearable device, etc., which is not limited in the embodiments of the present application. The communication module can be a vehicle-mounted box (T-Box), and the specific implementation of the body control module can be VDC or BCM, etc., which is not limited in the embodiments of the present application. It can be understood that the name of the communication module can be different in different vehicles.

[0092] It is understandable that the communication module and the body control module can communicate directly or via other functional modules, and the embodiments of the present application do not limit this.

[0093] Understandably, Figure 3B The remote terminal can communicate with the car through a network (such as the Internet of Things or a cellular network). Figure 3A The key can communicate with the car based on short-range communication technology (such as Bluetooth, BLE, BCM or NFC, etc.). Figure 3B In the scenario shown, the remote terminal is equivalent to Figure 3A The function of the key in the scenario shown, so the remote terminal can also be used as a kind of key.

[0094] See also Figure 3C , is a schematic diagram of another possible vehicle anti-theft scenario, in which the user can control the vehicle by operating the components inside the vehicle. For example, after the user steps on the brake pedal, the pedal sends a brake signal to the vehicle control / power module. Before starting the vehicle, the vehicle control / power module needs to find the key from the key module and perform anti-theft authentication on the key module to ensure that the key is within the preset range (such as in the car) and the key search result is fed back by a legitimate component. Only then will the vehicle control / power module start the vehicle. In a specific implementation, the vehicle control / power module may be a BCM or a battery management system (BMS), etc. It will be understood that the name of the vehicle control / power module may be different in different vehicles.

[0095] Understandably, Figure 3A to Figure 3C These are merely some examples of applicable scenarios of the embodiments of the present application, and are not specific limitations.

[0096] See also Figure 4 , is a flow chart of an anti-theft authentication method provided in an embodiment of the present application. Taking the method applied to a vehicle anti-theft scenario as an example, the method includes S401 to S403:

[0097] S401: A first functional module receives a first request.

[0098] In some embodiments, the first functional module may be a functional module for authenticating the key and capable of performing anti-theft authentication with other functional modules on the vehicle. For example, the first functional module may be Figure 3A In some other embodiments, the first functional module may be a functional module for authenticating a remote terminal and capable of performing anti-theft authentication with other functional modules on the vehicle. For example, the first functional module may be Figure 3B In some other embodiments, the first functional module may be a functional module for providing key status to other functional modules and performing anti-theft authentication. For example, the first functional module may be Figure 3C Key module shown.

[0099] In different scenarios, at least one of the first request, the source of the first request, the first operation, the first functional module, etc. may be different.

[0100] For example, in Figure 3AIn the illustrated scenario, the first functional module is a key module, and the first request is an operation request from the key, which is used to request the vehicle (or the vehicle's body control module) to perform a first operation. The first operation includes, but is not limited to, one or more of unlocking, locking, opening a door, locking a door, opening a window, closing a window, opening or closing a trunk, and searching for a vehicle.

[0101] For example, in Figure 3B In the scenario shown, the first functional module is a communication module, and the first request is an operation request from a remote terminal, which is used to request the vehicle (or the vehicle's body control module) to perform a first operation. The first operation includes, but is not limited to, one or more of unlocking, locking, opening a door, locking a door, opening a window, closing a window, opening or closing a trunk, and searching for a vehicle. In some embodiments, the remote terminal can be used as a key.

[0102] For example, in Figure 3C In the scenario shown, the first functional module may be a key module, and the first request may be a first anti-theft authentication request from the vehicle control / power module, and the first anti-theft authentication request is used to request the key module to feedback anti-theft authentication information. Optionally, before the vehicle control / power module sends the first anti-theft authentication request, it may also receive a third request, and the third request is used to request to perform a first operation (such as starting the vehicle); the vehicle control / power module sends the first anti-theft authentication request to the first functional module according to the third request. The third request is, for example, a brake signal from a pedal, such as when a user enters the vehicle and steps on the brake pedal, the pedal is triggered to send a brake signal to the vehicle control / power module.

[0103] S402: The first functional module obtains a key authentication result and anti-theft authentication information, the anti-theft authentication information is used to determine an anti-theft authentication result, and the anti-theft authentication result is used by the second functional module to determine whether to execute a first operation.

[0104] In different scenarios, the second functional module may be different. Figure 3A or Figure 3B In the scenario shown, the second functional module is a body control module. Figure 3C In the scenario shown, the second functional module is the vehicle control / power module.

[0105] The following introduces several possible implementation methods of the first functional module to obtain the key authentication result:

[0106] In a possible implementation, the first functional module authenticates the key and obtains a key authentication result. Thus, after receiving the first request, the first functional module authenticates the key and obtains a key authentication result with high reliability.

[0107] In another possible implementation, the first function module pre-stores the key authentication result. For example, before the first function module obtains the pre-stored key authentication result, the first function module authenticates the key, obtains the key authentication result, and saves the key authentication result. In this case, the first function module can obtain the pre-stored key authentication result. In this way, the first function module does not need to perform authentication on the key again, which can improve the efficiency of obtaining the key authentication result.

[0108] In some embodiments, the first functional module may first determine whether the key authentication result is stored locally, and if so, obtain the key authentication result stored locally, and if not, authenticate the key to obtain the key authentication result. In this way, both the reliability of the key authentication result and the efficiency of obtaining the key authentication result can be taken into account.

[0109] In some embodiments, the first functional module may also set a validity period for the saved authentication result. Furthermore, after the first functional module obtains the pre-saved key authentication result, if it is recognized that the pre-saved key authentication result is invalid (such as not within the validity period), the key may be re-authenticated to obtain a new key authentication result, and the original saved key authentication result may be updated based on the new key authentication result (such as deleting the expired key authentication result and saving the new key authentication result). If the pre-saved key authentication result is valid (such as within the validity period), the pre-saved key authentication result may be directly obtained. In this way, it can be ensured that the obtained key authentication result is a valid key authentication result, taking into account both the reliability of the key authentication result and the efficiency of obtaining the key authentication result.

[0110] Optionally, when the pre-saved key authentication result is invalid, the first functional module may also generate a reminder message to remind the user to re-authenticate the key. For example, the first functional module sends a reminder message to the vehicle display screen, so that the vehicle display screen displays the reminder message or broadcasts a voice prompt to remind the user to re-authenticate the key, such as reminding the user to place the NFC key in the verification area of ​​the NFC key. In this way, the user experience can be improved.

[0111] In a specific example, if the key is a Bluetooth or BLE or UWB key (i.e., the key communicates based on BLE or UWB technology), the validity period is the first duration; if the key is an NFC key (i.e., the key communicates based on NFC technology), the validity period is the second duration; the first duration is less than the second duration. For example, the second duration is 5 minutes, and the first duration is 30 seconds. Of course, the values ​​of the durations here are only examples and are not limited to this. Because the communication distance of the BLE key or UWB key is longer than that of the NFC key, the user needs to manually bring the NFC key close to the key module when the NFC key communicates with the key module. Therefore, setting the validity period of the NFC key to be longer than that of the BLE key or UWB key can avoid users from frequently operating the NFC key and improve the user experience.

[0112] In an embodiment of the present application, the first functional module and the second functional module can perform anti-theft authentication based on multiple anti-theft authentication mechanisms. When different anti-theft authentication mechanisms are adopted, the anti-theft authentication information obtained by the first functional module can be different, and the way in which the first functional module obtains the anti-theft authentication information can be different.

[0113] The following introduces several possible implementation methods of the first functional module obtaining anti-theft authentication information:

[0114] In a possible implementation, the anti-theft authentication mechanism is a challenge response. In this case, the first functional module needs to calculate the parameter (such as a random number) provided by the second functional module based on the shared key (such as the first key) with the second functional module, and the calculation result is the anti-theft authentication information.

[0115] exist Figure 3A or Figure 3B In the scenario shown, that is, the first functional module is a key module or a communication module, and the second functional module is a body control module. When the first request is an operation request from the key (that is, the anti-theft authentication is triggered by the key module), the first functional module can send a second request to the second functional module. The second request (the second request is, for example, a second anti-theft authentication request) is used to request to obtain parameters for calculating anti-theft authentication information, and then the second functional module sends the parameters to the first functional module according to the second request, and the first functional module calculates the anti-theft authentication information according to the parameters after receiving the parameters from the second functional module.

[0116] exist Figure 3C In the scenario shown, the first functional module is a key module, and the first request may be a first anti-theft authentication request from a second functional module (i.e., a vehicle control / power module) (i.e., the anti-theft authentication is triggered by the second functional module). The second functional module may carry parameters in the first request, or send parameters separately, which is not limited in the embodiments of the present application.

[0117] In another possible implementation, the anti-theft authentication mechanism is a signature. In this case, the first functional module needs to add a signature to the message sent to the second functional module based on the private key (such as the second key), and the message carrying the signature is the anti-theft authentication information. Figure 3A or Figure 3B In the scenario shown, the first functional module can sign the first request (i.e., operation request) from the key and send it to the second functional module. Figure 3C In the scenario shown, the first functional module can generate an empty message, sign the message and send it to the second functional module. In addition, the first functional module can also add a timestamp to the message sent to the second functional module.

[0118] S403. When the key authentication result is passed, the first functional module sends anti-theft authentication information to the second functional module, and correspondingly, the second functional module receives the anti-theft authentication information (i.e., S403A); or, the first functional module sends the key authentication result and anti-theft authentication information to the second functional module, and correspondingly, the second functional module receives the key authentication result and anti-theft authentication information (i.e., S403B).

[0119] The following is a detailed introduction to the implementation of S403A and S403B:

[0120] S403A: When the key authentication result is passed, the first function module sends anti-theft authentication information to the second function module, and correspondingly, the second function module receives the anti-theft authentication information.

[0121] In a possible design, the first functional module can first obtain the key authentication result and the anti-theft authentication information, and then determine whether the key authentication result is passed, and then when the key authentication result is passed, the first functional module sends the anti-theft authentication information to the second functional module. Of course, if the first functional module does not obtain the key authentication result, the key authentication result and the anti-theft authentication information will not be sent.

[0122] In another possible design, the first functional module may first obtain the key authentication result, and then determine whether the key authentication result is passed. When the key authentication result is passed, the first functional module obtains the anti-theft authentication information, and after obtaining the anti-theft authentication information, sends the anti-theft authentication information to the second functional module. Exemplarily, when the key authentication result is passed, the first functional module sends a second request to the second functional module, and the second request is used to request to obtain parameters for calculating the anti-theft authentication information; after the first functional module receives the parameters from the second functional module, it calculates the anti-theft authentication information according to the parameters. Of course, if the first functional module does not obtain the key authentication result, it does not obtain the parameters (such as not sending the second request), and does not send the key authentication result and the anti-theft authentication information. In this way, resources can be saved.

[0123] After the second functional module receives the anti-theft authentication information, the second functional module may determine the anti-theft authentication result according to the anti-theft authentication information, and further determine whether to execute the first operation according to the anti-theft authentication result.

[0124] For example, when the anti-theft authentication information is the result of random number calculation, the second functional module determines the anti-theft authentication result based on the third key and the anti-theft authentication information. Specifically, the third key is a shared key of the first functional module and the second functional module. In theory, the third key and the first key should be the same. The first functional module calculates the random number based on the third key stored by itself, and compares its own calculation result with the calculation result of the random number (i.e., the anti-theft authentication information) sent by the first functional module. If they are consistent, the anti-theft authentication result is determined to be passed and the first operation is executed; otherwise, the anti-theft authentication result is not passed and the first operation is not executed.

[0125] For example, when the anti-theft authentication information is a message carrying a signature, the first functional module verifies the signature (anti-theft authentication information) based on the fourth key, the fourth key and the second key above are a pair of asymmetric keys (for example, the second key is a private key, and the fourth key is a public key), the second key is used to generate a signature, and the fourth key is used to verify the signature. If the verification passes, the anti-theft authentication result is determined to be passed, and the first operation is performed; otherwise, the anti-theft authentication result is not passed, and the first operation is not performed. Optionally, if the message can also carry a timestamp, the second functional module can also verify the timestamp in the message, and when both the timestamp and signature authentication pass, the anti-theft authentication result is determined to be passed.

[0126] S403B: The first functional module sends the key authentication result and the anti-theft authentication information to the second functional module, and correspondingly, the second functional module receives the key authentication result and the anti-theft authentication information.

[0127] In this case, after the second functional module receives the key authentication result and the anti-theft authentication information from the first functional module, the second functional module can determine the anti-theft authentication result according to the anti-theft authentication information; when both the key authentication result and the anti-theft authentication result are passed, the second functional module performs the first operation.

[0128] In a specific example, the second functional module first checks the key authentication result. After the key authentication result is passed (such as the key is the key that matches the vehicle), it determines the anti-theft authentication result based on the anti-theft authentication information. If the anti-theft authentication result is also passed, the first operation is executed.

[0129] The specific implementation manner in which the second functional module in S403B determines the anti-theft authentication result according to the anti-theft authentication information can refer to the specific implementation manner in which the second functional module in S403A determines the anti-theft authentication result according to the anti-theft authentication information, which will not be repeated here.

[0130] Optionally, in S403B, when the key authentication result is set with a validity period, the second functional module can also determine whether the key authentication result is valid (such as whether it is within the validity period); when the key authentication result and the anti-theft authentication result are both passed and the key authentication result is valid, the second functional module executes the first operation.

[0131] In a possible implementation, when the above-mentioned methods S401 to S403 are applied to Figure 3A or Figure 3B In the scenario shown, before the second functional module executes the first operation, the second functional module may also receive a first request from the first functional module, the first request being an operation request from a key (the remote terminal is a type of key), and the operation request is used to request the execution of the first operation. The second functional module executes the first operation according to the first request. It is understandable that the first functional module may directly forward the first request from the key to the second functional module, or may process the first request from the key (for example, after being encapsulated with a different protocol) and then forward it to the second functional module, and the embodiments of the present application are not limited thereto.

[0132] In a possible implementation, when the above-mentioned methods S401 to S403 are applied to Figure 3B In the scenario shown, the second functional module (such as the vehicle power / control module) may also request the key status from the first functional module (such as the key module) before executing the first operation. The second functional module will only execute the first operation when it determines that the key is within a preset range (or in the vehicle) and the anti-theft authentication is passed.

[0133] In a possible implementation, when the above-mentioned methods S401 to S403 are applied to Figure 3B In the scenario shown, the function performed by the first functional module can also be implemented by multiple functional modules. For example, the communication module and the remote terminal perform key authentication, and the key module and the vehicle power / control module perform anti-theft authentication. Of course, this is only an example and is not limited to this.

[0134] In a possible implementation, when the first functional module receives the first request, specifically, the application layer of the first functional module receives the first request. The application layer of the first functional module can pass the first request to the kernel layer, the secure operating environment layer, or the secure hardware layer of the first functional module, and then when the first functional module obtains the key authentication result and the anti-theft authentication information, specifically, the kernel layer, the secure operating environment layer, or the secure hardware layer of the first functional module obtains the key authentication result and the anti-theft authentication information.

[0135] For example, Figure 5This is a possible hardware and software architecture diagram of the first functional module, which includes the application layer, kernel layer, trusted execution environment (TEE) layer and secure hardware layer from top to bottom. The application layer, kernel layer and trusted execution environment layer belong to the software layer, and the secure hardware layer belongs to the underlying hardware.

[0136] Application layer: used to deploy business logic, such as installing applications. Kernel: the kernel of the operating system. Generally speaking, the operating system is divided into the kernel and applications. The kernel has higher authority and is responsible for the key capabilities of the system; therefore, the key parts of the business can be moved from the application layer to the kernel layer.

[0137] TEE: It is a secure operating environment based on ARM TrustZone technology. Simply put, the CPU performs instruction isolation (supports a set of secure instructions) and supports exclusive operations on the bus, memory or peripherals. In this way, it is equivalent to isolating a secure space through these measures, which corresponds to the space where the Kernel is located. In this way, even if the space where the Kernel is located is attacked, TEE is still safe.

[0138] Security hardware: It is an independent chip, such as a secure element (SE) chip, which has a higher level of manufacturing process and is able to resist physical attacks. Generally speaking, security hardware only provides key functions, such as key storage, cryptographic algorithm calculations, or some core business logic. Since it uses an independent chip, even if the external system is attacked, it will not affect the program in the chip.

[0139] In a specific example, the key for performing anti-theft authentication (such as the first key or the third key described above) and the key for performing key authentication are both preset in the SE chip (i.e., the security hardware layer) of the first functional module. The key in the SE chip can be preset and managed by a trusted service manager (TSM) server. In this way, it is possible to associate the anti-theft authentication and key authentication results in the SE chip, and only when the key authentication result is passed, the first functional module is allowed to perform anti-theft authentication based on the anti-theft key (such as the first key or the second key described above), thereby achieving that only when the key authentication result is passed, the first functional module will send anti-theft authentication information to the second functional module.

[0140] This implementation method sinks the execution logic of anti-theft keys and anti-theft authentication to the kernel layer, trusted execution environment layer or trusted hardware layer, which can reduce the risk of the execution logic of anti-theft keys and anti-theft authentication being hijacked by attackers, and also facilitates the association of anti-theft authentication and key authentication.

[0141] In the above scheme, the first functional module sends anti-theft authentication information to the second functional module only when the key authentication result is passed, or the first functional module sends the key authentication result and anti-theft authentication information to the second functional module, so that the second functional module executes the first operation only when both the key authentication result and the anti-theft authentication result are passed. This scheme associates the anti-theft authentication with the key authentication, so even if the attacker attacks the first functional module, the anti-theft authentication cannot be successful, which can improve the safety performance of the vehicle anti-theft function.

[0142] To better understand the technical effect of this solution, the following examples are given in combination with specific scenarios:

[0143] See also Figure 6 , an example diagram of a car owner using a key (such as a Bluetooth key, NFC key, UWB key, etc.) to control the vehicle:

[0144] (A) The owner brings the Bluetooth key or UWB key close to the vehicle; the owner opens the window with the key (for example, by pressing a function key on the key); the body control module in the vehicle initiates anti-theft authentication; the anti-theft authentication is passed and the window opens.

[0145] (B) The owner enters the vehicle with a Bluetooth key or UWB key; the owner steps on the brake pedal to start the vehicle; the vehicle power / control module in the vehicle initiates anti-theft authentication; the anti-theft authentication is passed and the vehicle starts.

[0146] (C) The owner enters the vehicle with the NFC key; the owner steps on the brake pedal to start the vehicle within 5 minutes; the vehicle power / control module in the vehicle initiates anti-theft authentication; the anti-theft authentication is passed and the vehicle starts.

[0147] See also Figure 7 , example diagram of an attacker attacking a vehicle:

[0148] (A) The attacker enters the vehicle without a key; the attacker attacks the key module (such as a Bluetooth controller) and steps on the brake pedal to start the vehicle; the vehicle power / control module in the vehicle initiates anti-theft authentication; the anti-theft authentication fails (because the key authentication fails), and the vehicle cannot be started.

[0149] (B) The attacker does not have the key and attacks the key and other components; the attacker initiates an unlock command through the gateway (using a counterfeit key to initiate an unlock command); the body control module in the car initiates anti-theft authentication; the anti-theft authentication fails (because the key authentication fails), and the car window cannot be opened.

[0150] certainly, Figure 6 and Figure 7 These are just some examples of scenarios, and actual scenarios are not limited to these.

[0151] The method provided by the embodiment of the present application is introduced above in combination with the accompanying drawings, and the device provided by the embodiment of the present application is introduced below in combination with the accompanying drawings.

[0152] The present application embodiment provides a control device 800, which includes a module / unit / means for executing the method executed by the first functional module or the second functional module in the above method embodiment. The module / unit / means can be implemented by software, or by hardware, or by hardware executing the corresponding software implementation.

[0153] For example, see Figure 8 The control device includes a transceiver unit 801 and a processing unit 802.

[0154] When the control device 800 is a first functional module or is used as a component in the first functional module, the transceiver unit 801 is used to receive a first request; the processing unit 802 is used to obtain a key authentication result and anti-theft authentication information, the anti-theft authentication information is used to determine the anti-theft authentication result, and the anti-theft authentication result is used by the second functional module to determine whether to perform a first operation; the transceiver unit 801 is also used to: when the key authentication result is passed, send the anti-theft authentication information to the second functional module; or, send the key authentication result and anti-theft authentication information to the second functional module. Among them, the first request is an operation request from the key, and the operation request is used to request to perform the first operation; or, the first request is an anti-theft authentication request from the second functional module.

[0155] In one possible implementation, when obtaining anti-theft authentication information, the processing unit 802 is used to: when the key authentication result is passed, control the transceiver unit 801 to send a second request to the second functional module and receive parameters from the second functional module, the second request is used to request to obtain the parameters, and the parameters are used to calculate the anti-theft authentication information; calculate the anti-theft authentication information according to the parameters.

[0156] Optionally, when receiving the first request, the transceiver unit 801 is specifically used to: control the application layer to receive the first request; control the application layer to pass the first request to the kernel layer or the secure operating environment layer or the secure hardware layer; when the processing unit 802 obtains the key authentication result and the anti-theft authentication information, it is specifically used to: control the kernel layer or the secure operating environment layer or the secure hardware layer to obtain the key authentication result and the anti-theft authentication information.

[0157] In another possible implementation, when obtaining the key authentication result, the processing unit 802 is specifically configured to: authenticate the key to obtain the key authentication result; or obtain a pre-saved key authentication result.

[0158] When the processing unit 802 obtains the pre-saved key authentication result, the processing unit 802 is further configured to: before obtaining the pre-saved key authentication result, authenticate the key, obtain the key authentication result, and save the key authentication result.

[0159] Optionally, the processing unit 802 may also set a validity period for the saved authentication result.

[0160] Furthermore, the transceiver unit 801 may also be configured to send anti-theft authentication information to the second functional module when the key authentication result is passed and the key authentication result is valid.

[0161] Furthermore, the processing unit 802 may also be configured to: if the key authentication result is invalid, re-authenticate the key.

[0162] In one possible implementation, if the key is a low-power Bluetooth BLE or UWB key, the validity period is a first duration; if the key is a near-field communication NFC key, the validity period is a second duration; wherein the first duration is less than the second duration.

[0163] In one possible implementation, when obtaining anti-theft authentication information, the processing unit 802 is also used to: calculate the parameters provided by the second functional module based on the first key, and the calculation result is the anti-theft authentication information; or, generate a message carrying a signature based on the second key, and the message carrying the signature is the anti-theft authentication information.

[0164] Exemplarily, when the control device 800 is a second functional module or is applied to be a component in a second functional module, the transceiver unit 801 is used to receive the key authentication result and anti-theft authentication information from the first functional module; the processing unit 802 is used to determine the anti-theft authentication result based on the anti-theft authentication information; when the key authentication result and the anti-theft authentication result are both passed, the first operation is performed.

[0165] In a possible implementation, the transceiver unit 801 may also be used to: before the processing unit 802 executes the first operation, receive a first request from the first functional module, where the first request is an operation request from a key, and the operation request is used to request execution of the first operation.

[0166] In a possible implementation, the transceiver unit 801 may also be used to: before receiving the anti-theft authentication information from the first functional module, receive a second request from the first functional module, the second request is used to request to obtain parameters, the parameters are used to calculate the anti-theft authentication information; send the parameters to the first functional module.

[0167] In one possible implementation, the transceiver unit 801 can also be used to: before receiving the key authentication result and anti-theft authentication information from the first functional module, receive a third request, the third request is used to request to perform the first operation; according to the third request, send an anti-theft authentication request to the first functional module, the anti-theft authentication request is used to request to obtain the anti-theft authentication information.

[0168] In a possible implementation, if the key authentication result is set with a validity period, the processing unit 802 is used to: when the key authentication result and the anti-theft authentication result are both passed and the key authentication result is valid, perform a first operation.

[0169] In one possible implementation, if the key is a low-power Bluetooth BLE or UWB key, the validity period is a first duration; if the key is a near-field communication NFC key, the validity period is a second duration; wherein the first duration is less than the second duration.

[0170] In a possible implementation, when determining the anti-theft authentication result according to the anti-theft authentication information, the processing unit 802 is configured to: verify the anti-theft authentication information based on the third key; or verify the signature of the anti-theft authentication information based on the fourth key.

[0171] It should be understood that all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module and will not be repeated here.

[0172] Based on the same technical concept, see Fig. 9 , an embodiment of the present application further provides a control device 900, which includes at least one processor 901 and an interface circuit 902; the interface circuit 902 is used to receive signals from other devices outside the device 900 and transmit them to the processor 901 or send signals from the processor 901 to other devices outside the device, and the processor 901 is used to implement the method performed by the first functional module or the second functional module in the above method embodiment through a logic circuit or executing code instructions.

[0173] It should be understood that the processor mentioned in the embodiments of the present application can be implemented by hardware or by software. When implemented by hardware, the processor can be a logic circuit, an integrated circuit, etc. When implemented by software, the processor can be a general-purpose processor implemented by reading software code stored in a memory.

[0174] Exemplarily, the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0175] It should be understood that the memory mentioned in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct memory bus random access memory (DirectRambus RAM, DR RAM).

[0176] It should be noted that when the processor is a general-purpose processor, DSP, ASIC, FPGA or other programmable logic device, discrete gate or transistor logic device, discrete hardware component, the memory (storage module) can be integrated into the processor.

[0177] It should be noted that the memory described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0178] Based on the same technical concept, an embodiment of the present application also provides a computer-readable storage medium, including a program or instruction. When the program or instruction runs on a computer, the method executed by the first functional module or the second functional module in the above method embodiment is executed.

[0179] Based on the same technical concept, an embodiment of the present application also provides a computer program product comprising instructions, wherein the computer program product stores instructions, and when the computer program product is run on a computer, the method executed by the first functional module or the second functional module in the above method embodiment is executed.

[0180] Based on the same technical concept, the embodiment of the present application also provides a terminal device, including the first functional module and / or the second functional module mentioned above. The terminal device can be a vehicle, a drone, a helicopter, an airplane, a ship, an intelligent transportation device, or a smart home device. The embodiment of the present application does not limit the specific form of the terminal device.

[0181] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0182] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0183] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1A function specified in one or more boxes.

[0184] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0185] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the scope of protection of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. An anti-theft authentication method, characterized in that: include: The first functional module receives a first request; The first functional module obtains a key authentication result and anti-theft authentication information, the anti-theft authentication information is used to determine the anti-theft authentication result, and the anti-theft authentication result is used by the second functional module to determine whether to perform the first operation; When the key authentication result is passed, the first function module sends the anti-theft authentication information to the second function module; Alternatively, the first functional module sends the key authentication result and the anti-theft authentication information to the second functional module; The first request is an operation request from a key, and the operation request is used to request execution of the first operation; or the first request is an anti-theft authentication request from the second functional module.

2. The method according to claim 1, characterized in that The first functional module obtains anti-theft authentication information, including: When the key authentication result is passed, the first function module sends a second request to the second function module, the second request is used to request to obtain parameters, and the parameters are used to calculate the anti-theft authentication information; The first functional module receives the parameter from the second functional module; The first functional module calculates the anti-theft authentication information according to the parameters.

3. The method according to claim 1 or 2, characterized in that The first function module receives a first request, including: The application layer of the first functional module receives the first request; the application layer of the first functional module transmits the first request to the kernel layer or the secure operating environment layer or the secure hardware layer of the first functional module; The first functional module obtains the key authentication result and the anti-theft authentication information, including: The kernel layer, the secure operating environment layer or the secure hardware layer of the first functional module obtains the key authentication result and the anti-theft authentication information.

4. The method according to any one of claims 1 to 3, characterized in that: The first functional module obtains the key authentication result, including: The first functional module authenticates the key to obtain the key authentication result; or, The first functional module obtains a pre-saved key authentication result.

5. The method according to claim 4, characterized in that Before the first functional module obtains the pre-saved key authentication result, the method further includes: The first functional module authenticates the key, obtains the key authentication result, and saves the key authentication result.

6. The method according to claim 5, characterized in that The method further comprises: The first functional module sets a validity period for the saved authentication result; When the key authentication result is passed, the first function module sends the anti-theft authentication information to the second function module, including: When the key authentication result is passed and the key authentication result is valid, the first function module sends the anti-theft authentication information to the second function module.

7. The method according to claim 6, characterized in that The method further comprises: If the key authentication result fails, the first functional module re-authenticates the key.

8. The method according to claim 6 or 7, characterized in that If the key is a low-power Bluetooth BLE or UWB key, the validity period is the first duration; if the key is a near-field communication NFC key, the validity period is the second duration; The first duration is shorter than the second duration.

9. The method according to any one of claims 1 to 8, characterized in that The first functional module obtains anti-theft authentication information, including: The first function module calculates the parameters provided by the second function module based on the first key, and the calculation result is the anti-theft authentication information; or, The first functional module generates a message carrying a signature based on the second key, and the message carrying the signature is the anti-theft authentication information.

10. An anti-theft authentication method, characterized in that: include: The second functional module receives the key authentication result and the anti-theft authentication information from the first functional module; The second functional module determines an anti-theft authentication result according to the anti-theft authentication information; When both the key authentication result and the anti-theft authentication result are passed, the second function module performs a first operation.

11. The method according to claim 10, characterized in that Before the second functional module performs the first operation, the method further includes: The second function module receives a first request from the first function module, where the first request is an operation request from a key, and the operation request is used to request execution of the first operation.

12. The method according to claim 11, characterized in that Before the second function module receives the anti-theft authentication information from the first function module, the method includes: The second function module receives a second request from the first function module, the second request is used to request to obtain parameters, and the parameters are used to calculate the anti-theft authentication information; The second functional module sends the parameter to the first functional module.

13. The method according to claim 10, characterized in that Before the second function module receives the key authentication result and the anti-theft authentication information from the first function module, the method further includes: The second function module receives a third request, where the third request is used to request to perform the first operation; The second function module sends an anti-theft authentication request to the first function module according to the third request, where the anti-theft authentication request is used to request to obtain the anti-theft authentication information.

14. The method according to any one of claims 10 to 13, characterized in that: The key authentication result is set with a validity period; When both the key authentication result and the anti-theft authentication result are passed, the second function module performs a first operation, including: When both the key authentication result and the anti-theft authentication result are passed and the key authentication result is valid, the second function module performs a first operation.

15. The method according to claim 14, characterized in that If the key is a low-power Bluetooth BLE or UWB key, the validity period is the first duration; if the key is a near-field communication NFC key, the validity period is the second duration; The first duration is shorter than the second duration.

16. The method according to any one of claims 10 to 15, characterized in that: The second functional module determines the anti-theft authentication result according to the anti-theft authentication information, including: The second function module verifies the anti-theft authentication information based on the third key; or, The second function module verifies the signature of the anti-theft authentication information based on a fourth key.

17. A control device, characterized in that: include: A transceiver unit, configured to receive a first request; A processing unit, used to obtain a key authentication result and anti-theft authentication information, wherein the anti-theft authentication information is used to determine the anti-theft authentication result, and the anti-theft authentication result is used by the second functional module to determine whether to perform the first operation; The transceiver unit is further used to: send the anti-theft authentication information to the second function module when the key authentication result is passed; or send the key authentication result and the anti-theft authentication information to the second function module; The first request is an operation request from a key, and the operation request is used to request execution of the first operation; or the first request is an anti-theft authentication request from the second functional module.

18. A control device, characterized in that: include: A transceiver unit, used for receiving the key authentication result and the anti-theft authentication information from the first functional module; A processing unit, configured to determine an anti-theft authentication result according to the anti-theft authentication information; When both the key authentication result and the anti-theft authentication result are passed, a first operation is performed.

19. A control device, characterized in that: include: at least one processor and interface circuitry; The interface circuit is used to receive signals from other devices outside the device and transmit them to the processor or send signals from the processor to other devices outside the device. The processor is used to implement the method as described in any one of claims 1-9 or the method as described in any one of claims 10-16 through logic circuits or execution code instructions.

20. A computer-readable storage medium, characterized in that: The readable storage medium is used to store instructions, and when the instructions are executed, the method according to any one of claims 1 to 9 or the method according to any one of claims 10 to 16 is implemented.

21. A computer program product, characterized in that The computer program product stores instructions, and when the computer program product is run on a computer, the computer is caused to execute the method according to any one of claims 1 to 9 or the method according to any one of claims 10 to 16.

Images