Authority control method, remote service platform, target vehicle and storage medium

Abstract

The invention is suitable for the technical field of authority control, and provides an authority control method, a remote service platform, a target vehicle and a storage medium. The authority control method comprises the following steps: acquiring a service work order including information of a target vehicle and a remote service strategy; acquiring a response code corresponding to the challenge code under the condition of determining that the target vehicle has a first permission for executing a remote service strategy and an operator has a second permission for processing the remote service strategy according to the service work order; and sending a first message including the response code and the challenge code to the target vehicle, wherein the first message is used for triggering the target vehicle to use the response code and the challenge code to verify the execution of the remote service strategy. According to the authority control method provided by the embodiment of the invention, after the authority verification of the target vehicle and the operator is passed, the target vehicle is triggered to use the response code and the challenge code to verify the execution of the remote service strategy, so that unauthorized access and operation are effectively prevented, and the safety of remote service operation is enhanced.

Description

Technical Field

[0001] The present application belongs to the technical field of authority control, and in particular, relates to an authority control method, a remote service platform, a target vehicle and a storage medium. Background Art

[0002] With the rapid development of intelligent automobile technology, remote online services provide great convenience and efficiency improvement when vehicles encounter abnormal situations, and provide additional protection for the safety of drivers and passengers.

[0003] However, the security of remote service policy execution has also become an issue that cannot be ignored. Summary of the invention

[0004] The embodiments of the present application provide a permission control method, a remote service platform, a target vehicle and a storage medium, which can solve security issues such as misoperation or malicious attacks caused by the remote service process.

[0005] In a first aspect, an embodiment of the present application provides a permission control method, which is applied to a remote service platform, including:

[0006] Acquire a service work order created by an operator, wherein the service work order includes at least information of a target vehicle and a remote service strategy, wherein the remote service strategy includes an operation performed by the target vehicle;

[0007] When it is determined according to the service work order that the target vehicle has the first permission to perform the operation and the operator has the second permission to process the remote service policy, obtaining a response code corresponding to the challenge code, wherein the response code is obtained by encrypting the challenge code using a preset key of the target vehicle, and the challenge code is generated by the remote service platform;

[0008] A first message is sent to the target vehicle, wherein the first message includes the response code and the challenge code, and the first message is used to trigger the target vehicle to verify the execution of the remote service strategy using the response code and the challenge code.

[0009] In a possible implementation manner of the first aspect, after sending the first message to the target vehicle, the method further includes:

[0010] Receiving a first verification message from the target vehicle, the first verification message indicating that the target vehicle has passed verification based on the response code and the challenge code;

[0011] In response to the first verification message, a first instruction is sent to the target vehicle, where the first instruction is used to trigger the target vehicle to execute the remote service strategy.

[0012] In a possible implementation manner of the first aspect, the method further includes:

[0013] If it is determined according to the service work order that the target vehicle does not have the first authority and / or the operator does not have the second authority, the service work order is refused to be executed.

[0014] In a possible implementation manner of the first aspect, determining whether the target vehicle has the first permission to perform the operation according to the service work order includes:

[0015] Sending a query message to the authority management and control platform, the query message including the service work order, the query message requesting to query whether the target vehicle has the first authority;

[0016] Receive the query response message returned by the authority management and control platform; wherein,

[0017] In response to the query response message including first indication information, determining that the target vehicle has the first authority, the first indication information is used to instruct the target vehicle to activate the first authority on the authority management and control platform; or,

[0018] In response to the query response information including second indication information, it is determined that the target vehicle does not have the first authority, and the second indication information is used to indicate that the target vehicle has not opened the first authority on the authority management and control platform.

[0019] In a possible implementation manner of the first aspect, determining, according to the service work order, whether the operator has the second permission to process the remote service policy includes:

[0020] Acquire an authorization code input by the operator on a first display interface, where the first display interface is associated with the service work order;

[0021] Sending the authorization code to the authority management and control platform;

[0022] Receive the authorization code verification information returned by the permission management platform; wherein,

[0023] In response to the authorization code verification information including third indication information, determining that the operator has the second authority; or,

[0024] In response to the authorization code verification information including fourth indication information, it is determined that the operator does not have the second authority.

[0025] In a possible implementation manner of the first aspect, the method further includes:

[0026] The time information when the operator inputs the authorization code is sent to the authority management and control platform, and the time information is used by the authority management and control platform to determine whether the authorization code is within a valid time range, so as to determine whether the operator has the second authority.

[0027] In a possible implementation manner of the first aspect, obtaining a response code corresponding to the challenge code includes:

[0028] Sending the challenge code and the target vehicle information to the authority management and control platform;

[0029] Receive the response code from the permission management and control platform.

[0030] In a second aspect, an embodiment of the present application provides a remote service platform, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the permission control method as described in any one of the first aspects above is implemented.

[0031] In a third aspect, an embodiment of the present application provides a permission control method, which is applied to a target vehicle, including:

[0032] Receiving a first message from a remote service platform, the first message including a response code and a challenge code, the response code being obtained by encrypting the challenge code using a preset key of the target vehicle;

[0033] Decrypting the response code according to the preset key of the target vehicle to obtain a decrypted challenge code;

[0034] When the decrypted challenge code is consistent with the challenge code from the remote service platform, a remote service strategy is executed, wherein the remote service strategy includes operations performed by the target vehicle.

[0035] In a possible implementation manner of the third aspect, when the decrypted challenge code is consistent with the challenge code from the remote service platform, executing the remote service policy includes:

[0036] When the decrypted challenge code is consistent with the challenge code from the remote service platform, a first verification message is sent to the remote service platform, wherein the first verification message indicates that the target vehicle has successfully verified the response code;

[0037] receiving a first instruction from the remote service platform, wherein the first instruction instructs execution of the remote service policy;

[0038] In response to the first instruction, the remote services policy is executed.

[0039] In a possible implementation manner of the third aspect, after executing the remote service policy, the method further includes:

[0040] The execution result of the remote service policy is returned to the remote service platform.

[0041] In a fourth aspect, an embodiment of the present application provides a target vehicle, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the permission control method as described in any one of the third aspects above is implemented.

[0042] In a fifth aspect, an embodiment of the present application provides a permission control method, which is applied to a permission management and control platform, including:

[0043] Receive the challenge code and target vehicle information from the remote service platform;

[0044] Determine a response code according to the challenge code and the information of the target vehicle, wherein the response code is obtained by encrypting the challenge code with a preset key of the target vehicle;

[0045] The response code is sent to the remote service platform.

[0046] In a possible implementation manner of the fifth aspect, the method further includes:

[0047] Receiving a query message from the remote service platform, the query message including a service work order; the service work order at least includes information of the target vehicle and a remote service strategy, the remote service strategy including an operation performed by the target vehicle;

[0048] According to the information of the target vehicle, when the target vehicle has activated the first permission to execute the remote service policy on the permission control platform, a query response message including first indication information is sent to the remote service platform; the first indication information is used to instruct the target vehicle to activate the first permission on the permission control platform, or, when the target vehicle has not activated the first permission, a query response message including second indication information is sent to the remote service platform, and the second indication information is used to indicate that the target vehicle has not activated the first permission on the permission control platform.

[0049] In a possible implementation manner of the fifth aspect, the service ticket further includes identity information of the operator.

[0050] After determining that the target vehicle has activated the first permission on the permission management and control platform, the method further includes:

[0051] Sending an authorization code, where the authorization code is generated based on the service ticket;

[0052] Obtaining an authorization code entered by the operator on the remote rescue platform;

[0053] According to the input authorization code and the sent authorization code, authorization code verification information is sent to the remote rescue platform, and the authorization code verification information includes third indication information or fourth indication information, wherein the third indication information is used by the remote service platform to determine that the operator has the second authority to process the remote service policy, and the fourth indication information is used by the remote service platform to determine that the operator does not have the second authority.

[0054] In a possible implementation manner of the fifth aspect, the method further includes:

[0055] Acquiring time information, the time information indicating the time when the operator inputs the authorization code on the remote rescue platform;

[0056] Accordingly, according to the input authorization code and the sent authorization code, sending authorization code verification information to the remote rescue platform includes:

[0057] If the input authorization code is consistent with the sent authorization code and the time is within the valid time range, then the authorization code verification information including the third indication information is sent to the remote rescue platform, or,

[0058] If the input authorization code is inconsistent with the sent authorization code, or the input authorization code is consistent with the sent authorization code but the time is outside the valid time range, authorization code verification information including fourth indication information is sent to the remote rescue platform.

[0059] In a possible implementation manner of the fifth aspect, determining a response code according to the challenge code and the information of the target vehicle includes:

[0060] Sending the challenge code and the target vehicle information to a key management platform; the key management platform stores one or more preset keys of vehicles; the target vehicle information is used to determine the preset key of the target vehicle;

[0061] Receive the response code returned by the key management platform.

[0062] In a possible implementation manner of the fifth aspect, before receiving the challenge code from the remote service platform and the information of the target vehicle, the method further includes:

[0063] receiving a first request message, the first request message including information of the target vehicle, the remote service policy, and problems existing in the target vehicle, the first request message requesting to enable a first permission for executing the remote service policy for the target vehicle;

[0064] Sending the first request message to at least one audit node for audit;

[0065] In response to at least one review node passing the review, the first permission is opened for the target vehicle.

[0066] In a possible implementation manner of the fifth aspect, the method further includes:

[0067] Receiving from the remote service platform the number of times the target vehicle verifies the execution of the remote service strategy using the response code and the challenge code;

[0068] In response to the execution number reaching a preset number, closing the first permission.

[0069] In the sixth aspect, an embodiment of the present application provides a permission management platform, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, it implements the permission control method as described in any one of the above fifth aspects.

[0070] In the seventh aspect, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program, and when the computer program is executed by a processor, it implements the permission control method as described in any one of the first aspect above; or, when the computer program is executed by a processor, it implements the permission control method as described in any one of the third aspect above; or, when the computer program is executed by a processor, it implements the permission control method as described in any one of the fifth aspect above.

[0071] Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

[0072] In the permission control method provided in the embodiment of the present application, the remote service platform obtains the service work order created by the operator to determine the remote service strategy, which can manage the remote service task more intuitively and conveniently. This operation reduces manual intervention and communication costs, thereby improving work efficiency. Afterwards, the remote service platform verifies the permissions of the target vehicle and the operator to ensure that only the authorized target vehicle and the operator can perform the identity authentication process of the subsequent communication parties (remote service platform and target vehicle), thereby effectively avoiding unauthorized remote service operations and reducing the risk of abuse of permissions and misoperation. In order to effectively prevent operations such as data tampering and potential malicious attacks, in the embodiment of the present application, before the target vehicle executes the remote service strategy, the target vehicle is sent a challenge code encrypted with the preset key of the target vehicle to generate a response code and a challenge code, so that the target vehicle can verify the execution of the remote service strategy, so that the target vehicle can only execute the remote service strategy when the verification is passed, effectively ensuring the reliability and security of the remote service operation, and providing strong support for the application of remote services in the fields of vehicle management, fault diagnosis, software updates, etc.

[0073] It can be understood that the beneficial effects of the second to seventh aspects mentioned above can be found in the relevant description of the first aspect mentioned above, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0074] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0075] Figure 1 It is a schematic diagram of the structure of the permission control system provided by an embodiment of the present application;

[0076] Figure 2 It is a flowchart of a permission control method provided by an embodiment of the present application;

[0077] Figure 3 This is a flowchart of another permission control method provided by an embodiment of the present application;

[0078] Figure 4 is a flowchart of the sub-steps of step S203 provided in an embodiment of the present application;

[0079] Figure 5 This is a flowchart of another permission control method provided by an embodiment of the present application;

[0080] Figure 6This is a flowchart of another permission control method provided by an embodiment of the present application;

[0081] Figure 7 is a flowchart of the sub-steps of step S102 provided in an embodiment of the present application;

[0082] Figure 8 This is a specific example schematic diagram of a permission management and control platform reviewing a first request message provided by an embodiment of the present application;

[0083] Fig. 9 This is a schematic diagram of the overall process of the permission control method provided by an embodiment of the present application;

[0084] Fig.10 It is a structural diagram of a remote service platform provided in one embodiment of the present application;

[0085] Fig.11 is a schematic structural diagram of a target vehicle provided in one embodiment of the present application;

[0086] Fig.12 It is a structural diagram of a permission management and control platform provided in an embodiment of the present application;

[0087] Fig.13 It is a structural diagram of a terminal device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0088] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0089] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, wholes, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or combinations thereof.

[0090] It should also be understood that the term “and / or” used in the specification and appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.

[0091] As used in the specification and appended claims of this application, the term "if" can be interpreted as "when" or "uponce" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" can be interpreted as meaning "uponce it is determined" or "in response to determining" or "uponce [described condition or event] is detected" or "in response to detecting [described condition or event]", depending on the context.

[0092] In addition, in the description of the present application specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0093] References to "one embodiment" or "some embodiments" etc. described in the specification of this application mean that one or more embodiments of the present application include specific features, structures or characteristics described in conjunction with the embodiment. Therefore, the phrases "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments", etc. appearing in different places in this specification do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways.

[0094] The remote service platform provides operators with remote service strategies, which are used to deal with various problems that arise during vehicle use. As a high-security instruction, the security and integrity of the remote service strategy are of vital importance to users. If unauthorized access, data tampering, or potential malicious attacks occur before the remote service strategy is executed, it will have extremely serious consequences for the user's privacy, property, and life safety.

[0095] Based on the above technical problems, the embodiment of the present application provides a method for controlling permissions. The remote service platform obtains the service work order created by the operator to determine the remote service strategy, which can manage the remote service task more intuitively and conveniently. The operation reduces manual intervention and communication costs, thereby improving work efficiency. Afterwards, the remote service platform verifies the permissions of the target vehicle and the operator to ensure that only the authorized target vehicle and the operator can perform the identity authentication process of the subsequent communication parties (remote service platform and target vehicle), thereby effectively avoiding unauthorized remote service operations and reducing the risk of abuse of permissions and misoperation. In order to effectively prevent operations such as data tampering and potential malicious attacks, in the embodiment of the present application, before the target vehicle executes the remote service strategy, the target vehicle is sent a challenge code encrypted with the preset key of the target vehicle to generate a response code and a challenge code, so that the target vehicle can verify the execution of the remote service strategy, so that the target vehicle can execute the remote service strategy only when the verification is passed, effectively ensuring the reliability and security of the remote service operation, and providing strong support for the application of remote services in the fields of vehicle management, fault diagnosis, software updates, etc.

[0096] like Figure 1 As shown, Figure 1 A schematic diagram of a permission control system provided in an embodiment of the present application, such as Figure 1 As shown, the system may include:

[0097] A remote service platform 100 , one or more vehicles 200 , and an authority management and control platform 300 .

[0098] The remote service platform 100 is used to provide a comprehensive remote service strategy to remotely solve problems encountered by users when using the vehicle 200. The authority management platform 300 is used to verify whether the vehicle 200 has the first authority to execute the remote service strategy. This verification process ensures that only authorized vehicles 200 can participate in the remote service, thereby effectively preventing unauthorized operation of the vehicle 200 and ensuring the security of the system.

[0099] The remote service platform 100 and the authority control platform 300 can communicate with each other through a preset communication interface. For example, the remote service platform 100 sends a query message to the authority control platform 300 to obtain a query response message from the authority control platform 300, and determines whether the vehicle 200 has the first authority to execute the remote service policy according to the query response message. For example, the remote service platform 100 sends the authorization code entered by the operator on the first display interface to the authority control platform 300 to obtain the authorization code verification information from the authority control platform 300, and determines whether the operator has the second authority to process the remote service policy according to the authorization code verification information.

[0100] Any vehicle 200 and the remote service platform 100 can communicate with each other. For example, the remote service platform 100 can send a first message to the vehicle 200, the first message includes a response code and a challenge code, and the first message is used to trigger the vehicle 200 to use the response code and the challenge code to verify the execution of the remote service strategy. After receiving the first message, the vehicle 200 decrypts the response code according to the preset key preset in the vehicle 200, and compares the decrypted challenge code with the challenge code in the first message. If the decrypted challenge code is consistent with the challenge code in the first message, the vehicle 200 can execute the remote service strategy.

[0101] As an example, optionally, the above system may further include: a key management platform 400.

[0102] Among them, the key management platform 400 is used to store the preset key of the vehicle 200. The key management platform 400 and the authority management platform 300 can communicate with each other. The key management platform 400 is used to receive the challenge code and vehicle information from the authority management platform 300. Among them, the vehicle information is used to identify the vehicle. Next, the key management platform can determine the preset key of the vehicle 200 based on the vehicle information, and then encrypt the challenge code based on the preset key of the vehicle 200 to obtain a response code. The key management platform 400 sends the response code to the authority management platform 300, so that the authority management platform 300 sends the response code to the remote service platform 100.

[0103] Optionally, the pre-set key of any vehicle 200 is stored in the key management platform 400 in an encrypted manner.

[0104] As an example, in the embodiment of the present application, the remote service platform 100 and the authority control platform 300 can be different devices or different modules in the same device. The key management platform 400 and the authority control platform 300 in the embodiment of the present application can be different devices or different modules in the same device. Alternatively, the remote service platform 100, the key management platform 400 and the authority control platform 300 in the embodiment of the present application can be different devices or different modules in the same device, and the embodiment of the present application does not limit this.

[0105] The vehicle in the embodiments of the present application may refer to a new energy vehicle, a fuel vehicle, or a gas vehicle. The new energy vehicle may be a pure electric vehicle, a hybrid vehicle, or an extended-range vehicle, etc. The embodiments of the present application do not limit this.

[0106] See also Figure 2 , is a flowchart of a permission control method provided in an embodiment of the present application. As an example but not a limitation, the method may include the following steps S101 to S103.

[0107] Step S101: The remote service platform obtains a service ticket created by an operator.

[0108] The service work order at least includes information of the target vehicle and a remote service strategy, and the remote service strategy includes operations performed by the target vehicle.

[0109] For example, the target vehicle information is used to identify the target vehicle. For example, the target vehicle information may include one or more of the following: vehicle identification number (VIN), license plate number, and service requirements. The service requirements may include, for example, vehicle rescue requirements, vehicle software upgrade requirements, and vehicle performance optimization requirements.

[0110] The remote service strategy is a service strategy determined from a variety of remote service strategies provided by the remote service platform that matches the service needs of the current target vehicle.

[0111] A service work order is a task to be processed in the remote service platform, which may include, for example, vehicle rescue, equipment failure repair, or vehicle software upgrade. Taking vehicle remote rescue as an example, the remote service strategy can also be called: remote rescue strategy.

[0112] For example, when an abnormality occurs in the vehicle during use, the owner can contact the remote service platform through various channels (such as making a phone call, using an APP or other online platform, etc.), describe the abnormality of the vehicle in detail to the remote service platform, and clearly express the need for remote rescue. After the staff of the remote service platform receives and records the information provided by the owner (including the vehicle information (vehicle identification number, license plate number, error information and fault description) and the specific needs of remote rescue), they convey this information to an operator in real time through the internal communication tools of the remote service platform (such as chat software, email, internal telephone system, etc.). After receiving this information, the operator logs in to the remote service platform and creates a service ticket containing the information of the target vehicle (i.e. the information of the abnormal vehicle) and the remote rescue strategy in the remote service platform according to the information provided by the owner and the needs of remote rescue. Among them, the remote rescue strategy is a rescue strategy selected by the operator from the multiple remote rescue strategies provided by the remote service platform that matches the current remote rescue needs. Once the service ticket is created, the remote service platform obtains the service ticket through its backend system or interface.

[0113] Step S102: When the remote service platform determines, based on the service work order, that the target vehicle has the first authority to execute operations in the remote service policy and the operator has the second authority to process the remote service policy, a response code corresponding to the challenge code is obtained.

[0114] The response code is obtained by encrypting the challenge code using the preset key of the target vehicle, and the challenge code is generated by the remote service platform.

[0115] For example, after obtaining the service work order, the remote service platform can determine whether the target vehicle has the first authority and whether the operator has the second authority based on the service work order, so as to ensure that only authorized target vehicles and operators can perform the subsequent identity authentication process of the two communicating parties (remote service platform and target vehicle), thereby effectively avoiding unauthorized remote service operations and reducing the risk of authority abuse and misoperation.

[0116] When the remote service platform determines that the target vehicle has the first authority and the operator has the second authority, in order to ensure the security of the vehicle data, the remote service platform can generate a challenge code. This challenge code is a randomly generated string with sufficient complexity and unpredictability. It can be used to establish a secure communication channel between the remote service platform and the target vehicle. The role of the challenge code is to add an additional layer of security verification mechanism. After the remote service platform generates the challenge code, in order to ensure the security of communication and verify the legitimacy of the target vehicle, it is necessary to obtain a response code corresponding to the challenge code. This response code is not generated randomly, but is obtained by using the preset key of the target vehicle to process the challenge code with a specific encryption algorithm. This encryption process usually follows a safe and reliable encryption algorithm, such as a symmetric encryption algorithm.

[0117] For example, when the remote service platform determines that the target vehicle has the first authority and the operator has the second authority, the remote service platform can generate a challenge code when it detects an operation that triggers the execution of the remote service policy.

[0118] Step S103: the remote service platform sends a first message to the target vehicle, and correspondingly, the target vehicle receives the first message from the remote service platform.

[0119] The first message includes a response code and a challenge code, and the first message is used to trigger the target vehicle to verify the execution of the remote service strategy using the response code and the challenge code.

[0120] Exemplarily, after obtaining the challenge code and the response code, the remote service platform sends a first message containing the response code and the challenge code to the target vehicle to trigger a security verification process, i.e., triggering the target vehicle to use the response code and the challenge code to verify whether the execution request of the remote service policy is legal and has not been tampered with, so as to ensure the identity authentication of both communicating parties (the remote service platform and the target vehicle). Only after the identity authentication of both communicating parties is passed, will the target vehicle be triggered to execute the remote service policy.

[0121] In one example, the first message includes a reply code, a challenge code and a trigger condition. After the target vehicle passes the verification based on the reply code and the challenge code, a verification success message is sent to the remote service platform. The remote service platform sends the remote service policy to the target vehicle based on the received verification success message. After receiving the remote service policy, the target vehicle executes the remote service policy.

[0122] In another example, the first message may include a remote service strategy in addition to the reply code, challenge code and trigger condition. After the target vehicle passes the verification based on the reply code and challenge code, the target vehicle may execute the remote service strategy.

[0123] Step S104: The target vehicle decrypts the response code according to the preset key of the target vehicle to obtain a decrypted challenge code.

[0124] It is understood that the target vehicle has a pre-set key.

[0125] For example, after the target vehicle receives the first message, it first parses the reply code and challenge code therein. Then, the target vehicle uses the preset key stored in the electronic control unit (ECU) inside the vehicle and the encryption algorithm agreed with the remote service platform to decrypt the reply code, thereby obtaining a decrypted challenge code.

[0126] Step S105: When the decrypted challenge code is consistent with the challenge code from the remote service platform, the target vehicle executes the remote service strategy.

[0127] For example, the target vehicle will compare the decrypted challenge code with the challenge code contained in the first message. If the two are exactly the same, the target vehicle can confirm that the execution request of the remote service policy is authentic and valid, and comes from a legitimate remote service platform. At the same time, this also proves that the target vehicle has the correct preset key, so the target vehicle is a verified vehicle. After confirming that the execution request of the remote service policy is valid, the target vehicle can safely execute the remote service policy. On the contrary, if the decrypted challenge code does not match the challenge code in the first message, the target vehicle believes that the remote service policy has been tampered with during the data transmission process, or the target vehicle is not the target vehicle specified in the remote service policy execution request (that is, there may be identity impersonation). In this case, the target vehicle will refuse to execute the remote service policy to protect the security and integrity of the vehicle data and prevent unauthorized remote service operations from causing damage to the vehicle.

[0128] In a possible embodiment of the present application, Figure 3As shown, the method provided in the embodiment of the present application further includes step S106 after step S105.

[0129] Step S106: The target vehicle returns the execution result of the remote service policy to the remote service platform. Correspondingly, the remote service policy receives the execution result of the remote service policy from the target vehicle.

[0130] Exemplarily, after the target vehicle executes the remote service strategy, a report containing the execution results will be generated. This report may include a variety of information, such as execution status (success or failure), execution time, logs or data generated during the execution process, etc. After the target vehicle generates a report containing the execution results, the target vehicle will send the report containing the execution results to the remote service platform through its communication module. After receiving the report containing the execution results, the remote service platform will parse and process it to understand the execution status of the remote service strategy. If the execution is successful, the remote service platform will record the relevant information for subsequent analysis and optimization; if the execution fails, the remote service platform will trigger the corresponding exception handling process, such as resending instructions, contacting the operator for manual intervention, etc.

[0131] In one possible implementation, Figure 4 A schematic diagram of the process of the sub-steps of step S203 provided in the embodiment of the present application is shown, as shown in FIG. Figure 4 As shown, step S203 may include steps S2031 to S2033.

[0132] Step S2031: When the decrypted challenge code is consistent with the challenge code from the remote service platform, the target vehicle sends a first verification message to the remote service platform. Correspondingly, the remote service platform receives the first verification message from the target vehicle.

[0133] The first verification message indicates that the target vehicle has successfully verified the response code.

[0134] Correspondingly, the remote service platform receives a first verification message from the target vehicle.

[0135] Exemplarily, when the target vehicle uses its preset key to decrypt the reply code, and the decrypted challenge code is exactly the same as the challenge code randomly generated by the remote service platform, this means that the reply code is indeed encrypted by the preset key of the target vehicle, and the challenge code has not been tampered with during the entire communication process. Under such a verification result, the target vehicle will send a first verification message to the remote service platform. The first verification message indicates that the target vehicle has successfully verified the reply code. After the target vehicle sends the first verification message to the remote service platform, the remote service platform receives the first verification message. After the remote service platform receives the first verification message, it parses the first verification message to confirm the legitimacy of the target vehicle, that is, it confirms that the target vehicle has passed the verification process, is qualified to execute the remote service policy, and is a legal vehicle to execute the remote service policy.

[0136] Step S2032: the remote service platform sends a first instruction to the target vehicle in response to the first verification message, and correspondingly, the target vehicle receives the first instruction from the remote service platform.

[0137] The first instruction is used to trigger the target vehicle to execute the remote service strategy.

[0138] Exemplarily, after successfully receiving the first verification message from the target vehicle, the remote service platform confirms the legitimacy of the target vehicle, that is, confirms that the target vehicle has passed the verification process based on the response code and the challenge code. After the remote service platform confirms the legitimacy of the target vehicle, the remote service platform will decide to authorize the target vehicle to execute the corresponding remote service policy based on the remote service policy specified in the service work order. Next, the remote service platform will proceed to the next step, that is, send a first instruction to the target vehicle. The first instruction is used to trigger the target vehicle to execute the remote service policy. Among them, the first instruction contains the specific information and parameters required to execute the remote service policy to ensure that the target vehicle can correctly execute the remote service policy. After the remote service platform sends the first instruction to the target vehicle, the target vehicle will receive the first instruction from the remote service platform.

[0139] Step S2033: The target vehicle executes the remote service strategy in response to the first instruction.

[0140] For example, when the target vehicle receives the first instruction from the remote service platform, it will parse and process the first instruction to obtain specific information and parameters for executing the remote service strategy. After the parsing is completed, the target vehicle will execute the corresponding remote service strategy according to the instructions of the first instruction.

[0141] In a possible implementation, the method further includes:

[0142] When the remote service platform determines based on the service work order that the target vehicle does not have the first authority and / or the operator does not have the second authority, the remote service platform refuses to execute the service work order.

[0143] Exemplarily, when the remote service platform is processing a service work order, it will verify the permissions of the target vehicle in the service work order and the operator who created the service work order to determine whether the target vehicle has opened the first permission to perform operations in the remote service policy, and whether the operator has the second permission to process the remote service policy. If the remote service platform determines that the target vehicle has not opened the first permission on the permission management platform, and / or the operator does not have the second permission to process the remote service policy for some reason, the remote service platform will refuse to execute the service work order. After refusing to execute the service work order, the remote service platform can output a prompt message to provide clear feedback to the operator, explaining the reason for the rejection. Optionally, the prompt message can also include suggestion information to suggest that the operator take further measures, such as reapplying for permission or contacting the permission management platform to resolve the permission problem.

[0144] In a possible implementation, the following describes how the remote service platform determines whether the target vehicle has the first permission to perform the operation in the remote service policy according to the service work order. Figure 5 , is a flow chart of another permission control method provided in an embodiment of the present application, which may include steps S301 to S303.

[0145] Step S301: the remote service platform sends a query message to the authority management and control platform, and correspondingly, the authority management and control platform receives the query message from the remote service platform.

[0146] The query message includes information of the target vehicle, and the query message requests to query whether the target vehicle has the first authority. For example, the query message may include a service work order.

[0147] Exemplarily, a communication interface is preset between the remote service platform and the authority management and control platform. Through this communication interface, the remote service platform can choose to send query messages to the authority management and control platform in an automatic or manual manner. Among them, the automatic sending method is: when the remote service platform sets the automatic sending function, and the operator successfully creates a new service ticket on the remote service platform, the remote service platform will automatically identify and obtain the information of the service ticket. Subsequently, the query message containing the service ticket will be automatically sent to the authority management and control platform through the preset communication interface without the need for manual intervention by the operator. The manual sending method is: in some cases, the operator may need to manually choose to send the query message containing the service ticket to the authority management and control platform. In this case, the operator can manually trigger the sending operation on the remote service platform. The embodiment of the present application does not limit the specific method for the remote service platform to send a query message to the authority management and control platform.

[0148] After obtaining the service work order, the remote service platform sends a query message to the authority management platform through a certain sending method. The purpose of the query message is to query on the authority management platform whether the target vehicle in the service work order has the first authority to execute the operation in the remote service policy.

[0149] Optionally, the query message may further include indication information, where the indication information is used to indicate whether the verification operator has the second permission to execute the remote service policy.

[0150] It is worth noting that if the query message includes indication information, the authority management and control platform can also determine whether the operator has the second authority to execute the remote service strategy after authenticating whether the target vehicle has the first authority.

[0151] On the other hand, the query message may not include the above-mentioned indication information. If the service ticket included in the query message contains the operator's information (such as the operator's identity information and the telephone number of the terminal used by the operator), the authority management platform can determine whether the operator has the second authority to execute the remote service policy after authenticating whether the target vehicle has the first authority.

[0152] On the other hand, the query message may include both the above-mentioned indication information and operator information.

[0153] Step S302: The authority control platform sends a query response message including first indication information to the remote service platform based on the information of the target vehicle, if the target vehicle has activated the first permission to execute the remote service policy on the authority control platform; or sends a query response message including second indication information to the remote service platform, if the target vehicle has not activated the first permission to execute. Correspondingly, the remote service platform receives the query response message returned by the authority control platform.

[0154] For example, after receiving the query message from the remote service platform, the permission control platform parses the service ticket information in the query message and extracts the target vehicle information. The permission control platform queries the permission status of the target vehicle to determine whether the target vehicle has the first permission to perform the operation in the remote service policy. Based on the query result, the permission control platform generates a corresponding query response message.

[0155] Step S303: The remote service platform determines that the target vehicle has the first permission in response to the query response message including the first indication information; or the remote service platform determines that the target vehicle does not have the first permission in response to the query response message including the second indication information. The first indication information is used to indicate that the target vehicle has opened the first permission on the permission control platform, and the second indication information is used to indicate that the target vehicle has not opened the first permission on the permission control platform.

[0156] Exemplarily, after receiving the query message from the remote service platform, the permission management and control platform queries the activation status of the first permission for the target vehicle to perform operations in the corresponding remote service policy on the permission management and control platform according to the information of the target vehicle in the query message, wherein the activation status includes an activated state or an unactivated state. After obtaining the query result, the permission management and control platform sends a query response message including different indication information to the remote service platform through a preset communication interface. If the target vehicle has activated the first permission, the query response message will include the first indication information, and the first indication information is used to indicate that the target vehicle has activated the first permission on the permission management and control platform. If the target vehicle has not activated the first permission, the query response message will include the second indication information, and the second indication information is used to indicate that the target vehicle has not activated the permission on the permission management and control platform.

[0157] After receiving the query response message returned from the permission management platform, the remote service platform parses the query response message and extracts the indication information therein. According to the type of indication information (first indication information or second indication information), the remote service platform can determine whether the target vehicle has opened the first permission.

[0158] In a possible implementation manner, the following describes how the remote service platform determines whether the operator has the second authority.

[0159] As an example, the remote service platform can obtain the judgment result of whether the operator has the second authority from the authority management platform. Figure 6 Describe how the remote service platform obtains the judgment result of whether the operator has the second permission from the permission management platform, specifically, Figure 6 As shown, the method provided in the embodiment of the present application may also include steps S401 to S404.

[0160] Step S401: The permission management and control platform sends an authorization code, which is generated based on the service ticket.

[0161] For example, the permission control platform can send an authorization code to the terminal (such as a mobile phone) used by the operator. Optionally, the permission control platform can also send the validity period corresponding to the authorization code to the terminal, such as 1 minute, 10 minutes, etc.

[0162] As an example, when the authority management and control platform determines that the target vehicle has the first authority, the authority management and control platform may send an authorization code.

[0163] As another example, before the authority control platform sends the authorization code, the authority control platform may also obtain a query request message, wherein the query request message includes information of the operator, and the query request message requests to query whether the operator has the second authority to execute the remote service policy.

[0164] Optionally, before the authority control platform sends the authorization code, the authority control platform may also obtain information about the phone number corresponding to the terminal. For example, the service ticket obtained by the authority control platform from the remote service platform may also include information about the phone number corresponding to the terminal. Alternatively, the authority control platform may send feedback information to the remote service platform when the target vehicle has the first authority, so as to prompt the remote service platform to provide the receiving authorization code.

[0165] In the embodiment of the present application, the remote service platform verifies the identity information of the operator to ensure that the operator is an operator who can handle the service ticket and has the second permission to process the remote service policy.

[0166] As an example, the permission management platform can use Google Authenticator combined with a time-based one-time password (TOTP) algorithm to generate an exclusive authorization code for the service ticket and the operator who handles the service ticket, and send it to the operator who handles the service ticket. After the permission management platform generates the authorization code for the service ticket and the operator who handles the service ticket, it can send the authorization code to the operator who handles the service ticket through a variety of secure communication methods such as SMS and email, so that after the operator receives the authorization code sent by the permission management platform, he can enter the authorization code on the remote service platform for identity authentication. Once the operator's identity authentication is passed, the remote service platform will confirm that the operator has the authority to execute the specified remote service policy on the target vehicle, thereby ensuring the security and effectiveness of the entire remote service process.

[0167] Step S402: The remote service platform obtains the authorization code entered by the operator on the first display interface, and sends the authorization code entered by the operator on the first display interface to the authority management and control platform. Correspondingly, the authority management and control platform receives the authorization code entered by the operator on the remote service platform.

[0168] Among them, the first display interface is associated with the service work order.

[0169] Optionally, after the authority control platform sends the authorization code, the authority control platform may also send a message to the remote service platform, which is used to instruct the remote service platform to display an interface for entering the authorization code (i.e., the first display interface described below). Exemplarily, after the authority control platform sends the authorization code to the terminal, the operator can receive the authorization code. After the operator receives the authorization code sent by the authority control platform, the operator can enter the authorization code on the first display interface of the remote service platform for identity authentication. That is, after the operator receives the authorization code sent by the authority control platform, the operator selects the corresponding service ticket on the remote service platform and enters an authorization code to verify the identity of the operator. After the remote service platform detects the authorization code entered by the operator on the first display interface, the authorization code entered by the operator on the first display interface is sent to the authority control platform, so that the authority control platform verifies whether the authorization code entered by the operator on the first display interface is consistent with the authorization code sent by the authority control platform to the operator, and determines whether the operator has the second authority to process the remote service policy based on the verification result.

[0170] Step S403: the authority control platform sends authorization code verification information to the remote service platform according to the authorization code input by the operator and the authorization code sent by the authority control platform. Correspondingly, the remote service platform receives the authorization code verification information returned by the authority control platform.

[0171] The authorization code verification information includes third indication information or fourth indication information, wherein the third indication information is used by the remote service platform to determine that the operator has the second authority to process the remote service policy, and the fourth indication information is used by the remote service platform to determine that the operator does not have the second authority.

[0172] Step S404: the remote service platform determines that the operator has the second authority in response to the authorization code verification information including the third indication information; or, the remote service platform determines that the operator does not have the second authority in response to the authorization code verification information including the fourth indication information.

[0173] Exemplarily, if the authorization code entered by the operator is consistent with the authorization code sent by the authority management and control platform, the operator's identity verification is passed, and the authority management and control platform generates an authorization code verification message including the third indication information, and sends the generated authorization code verification message including the third indication information to the remote service platform, so that the remote service platform determines that the operator has the second permission to process the remote service policy. If the authorization code entered by the operator is inconsistent with the authorization code sent by the authority management and control platform, the operator's identity verification is not passed, and the authority management and control platform generates an authorization code verification message including the fourth indication information, and sends the generated authorization code verification message including the fourth indication information to the remote service platform, so that the remote service platform determines that the operator does not have the second permission to process the remote service policy.

[0174] It is understandable that the above Figure 5 and Figure 6 The process of determining whether the target vehicle has the first authority and determining whether the operator has the second authority are shown respectively. In the actual process, the process of determining whether the target vehicle has the first authority and determining whether the operator has the second authority can be implemented in parallel, that is, the authority management platform can verify whether the operator has the second authority regardless of whether the target vehicle has the first authority, and provide the remote service platform with a response message of whether the target vehicle has the first authority and whether the operator has the second authority. Of course, the authority management platform can also execute the second authorization when the target vehicle has the first authority. Figure 6 Of course, the rights management platform can also perform the action after first confirming that the operator has the second permission. Figure 5 The action shown is to verify whether the target vehicle has the first authority.

[0175] In a possible implementation, the method provided in the embodiment of the present application further includes:

[0176] The remote service platform sends the time information when the operator enters the authorization code to the authority management platform. The time information is the time when the operator enters the authorization code on the remote service platform. The time information is used by the authority management platform to determine whether the authorization code is within the valid time range to determine whether the operator has the second authority.

[0177] Accordingly, the authority control platform obtains the time information, and determines whether the authorization code entered by the operator is consistent with the authorization code sent by the authority control platform, and whether the time of the authorization code entered by the operator is within the valid time range, to generate an authorization code verification message, and send the authorization code verification message to the remote service platform. For example, if the authorization code entered by the operator is consistent with the authorization code sent by the authority control platform, and the time of the authorization code entered by the operator is within the valid time range, the authority control platform sends the authorization code verification information including the third indication information to the remote service platform; or, if the authorization code entered by the operator is inconsistent with the authorization code sent by the authority control platform, or, the authorization code entered by the operator is consistent with the authorization code sent by the authority control platform but the time of the authorization code entered by the operator is outside the valid time range, the authority control platform sends the authorization code verification information including the fourth indication information to the remote service platform.

[0178] Exemplarily, when the authorization code is generated, the authority control platform may also set an effective time range for the authorization code. The effective time range is, for example, 15 minutes. When the remote service platform sends the authorization code entered by the operator on the first display interface to the authority control platform, it also sends the time information of the operator entering the authorization code to the authority control platform. After the authority control platform receives the authorization code entered by the operator and the time information of the operator entering the authorization code, it compares the authorization code entered by the operator with the authorization code sent by the authority control platform, and determines whether the time information of the operator entering the authorization code is within the effective time range. If the authorization code entered by the operator is consistent with the authorization code sent by the authority control platform, and the time information of the operator entering the authorization code is within the effective time range, it is determined that the operator has the second authority. If the authorization code entered by the operator is inconsistent with the authorization code sent by the authority control platform, it is determined that the operator does not have the second authority. Or, even if the authorization code entered by the operator is consistent with the authorization code sent by the authority control platform, the time information of the operator entering the authorization code is outside the effective time range, that is, the operator does not enter the authorization code within 15 minutes, and the authorization code has expired at this time, it is determined that the operator does not have the second authority.

[0179] It should be noted that 15 minutes is only a specific example of the effective time range. In actual applications, the specific value of the effective time range can be adjusted according to specific circumstances and needs.

[0180] In the embodiment of the present application, the combination of Google Authenticator and the TOTP algorithm ensures the uniqueness and timeliness of the authorization code, thereby ensuring that only authorized operators can execute the specified remote service policy on the target vehicle, effectively preventing the authorization code from being abused by different vehicles or other operators. At the same time, by stipulating that the authorization code is only valid within the valid time range, it is ensured that the authorization code can only be used by a specific operator to execute the specified remote service policy on a specific target vehicle within a specific time period, thereby limiting the validity of the authorization code from a time level, reducing the risk of the authorization code being illegally obtained and used. Even if someone is able to obtain the authorization code, since the authorization code will soon expire, it will not cause substantial damage in the remote service process, further enhancing the security of remote service operations.

[0181] In one possible implementation, Figure 7 A schematic diagram of the process of the sub-steps of step S102 provided in the embodiment of the present application is shown, as shown in FIG. Figure 7 As shown, step S102 may include step S1021 to step S1023. Step S102 may further include step S1021 to step S1022.

[0182] Step S1021: The remote service platform sends a challenge code and target vehicle information to the authority management and control platform.

[0183] Correspondingly, the permission management platform receives the challenge code from the remote service platform and the information of the target vehicle.

[0184] Exemplarily, when the target vehicle has the first permission to execute the remote service policy and the operator has the second permission to process the remote service policy, the subsequent remote service platform and the target vehicle identity authentication process is entered to ensure that the remote service policy can be accurately executed on the target vehicle specified in the service work order. After generating the challenge code, the remote service platform sends the target vehicle information and the challenge code to the authority control platform. The authority control platform receives the target vehicle information and the challenge code from the remote service platform.

[0185] Step S1022: The authority management and control platform determines a response code based on the challenge code and the information of the target vehicle. The response code is obtained by encrypting the challenge code with a preset key of the target vehicle.

[0186] Exemplarily, the authority control platform and the key management platform can communicate with each other. Among them, the key management platform stores and protects the preset keys of one or more vehicles. In order to prevent the preset keys of the vehicle from being leaked, when the authority control platform receives the challenge code and the information of the target vehicle, the authority control platform cannot request the key management platform to obtain the preset key corresponding to the target vehicle, but needs to forward the challenge code and the information of the target vehicle to the key management platform, so that the key management platform can obtain the response code according to the information of the target vehicle, the challenge code and the preset key corresponding to the target vehicle, and send the response code to the authority control platform, so that the authority control platform can determine the response code.

[0187] In a possible implementation, step S1022 may include step S10221 and step S10222.

[0188] Step S10221: the authority management platform sends the challenge code and the information of the target vehicle to the key management platform; the key management platform stores the preset keys of one or more vehicles; the information of the target vehicle is used to determine the preset key of the target vehicle.

[0189] For example, the authority control platform will send the challenge code and the target vehicle information to the key management platform. After receiving the challenge code and the target vehicle information, the key management platform will perform an accurate search based on the target vehicle information to determine the preset key that matches the target vehicle. Subsequently, the key management platform encrypts the challenge code using the found preset key to generate a response code.

[0190] Step S10222: The authority management and control platform receives the response code returned by the key management platform.

[0191] Exemplarily, once the key management platform obtains the response code, it will immediately send the response code back to the authority management platform. The authority management platform receives the response code returned from the key management platform.

[0192] Step S1023: The authority management and control platform sends a response code to the remote service platform.

[0193] Correspondingly, the remote service platform receives a response code from the authority management and control platform.

[0194] Exemplarily, after receiving the reply code, the permission management and control platform may further include it in a response message and send it to the remote service platform that initiated the remote service request, and the remote service platform receives the reply code from the permission management and control platform.

[0195] In a possible implementation, before the authority management and control platform receives the challenge code from the remote service platform and the information of the target vehicle, the method further includes:

[0196] Step S501: The permission management platform receives a first request message, which includes information of a target vehicle, a remote service policy, and problems existing in the target vehicle. The first request message requests to open a first permission for the target vehicle to execute the remote service policy.

[0197] For example, in order to ensure that each service work order can be processed promptly and effectively, before the service work order is formally processed, it is necessary to ensure that the target vehicle specified in the service work order has successfully opened the first permission to execute the required remote service policy operations on the permission management platform. Therefore, before processing each service work order, the staff will submit information about the target vehicle (such as vehicle identification number, license plate number, etc.), as well as the problems with the target vehicle (such as error information, fault description, etc.) on the permission management platform, specify the remote service policy that needs to be executed on the target vehicle, and send an application request for the first permission to execute the corresponding remote service policy for the target vehicle, that is, the first request message. The permission management platform receives the first request message.

[0198] Step S502: The authority management and control platform sends the first request message to at least one review node for review.

[0199] Exemplarily, after the authority control platform receives the first request message from the remote service platform, the message contains the information of the target vehicle, the remote service policy and the problems of the target vehicle, and requests to open the operation permission of executing the remote service policy for the target vehicle. In order to ensure the rationality and security of this request, the authority control platform will send this request message to at least one audit node for review. At each audit node, professional auditors will carefully review the first request message. They will verify whether the information in the request is accurate and complete, and whether the remote service policy is applicable to the target vehicle. If the auditor confirms that the first request message is true, that is, the information in the request is correct and the remote service policy is applicable, then they will approve the request and pass it through the review. However, if the auditor finds that there are some problems with the first request message during the review process, such as inaccurate information, inapplicable remote service policy or potential safety hazards, they will refuse to pass the request.

[0200] For example, at least one audit node may correspond to different auditors, such as primary auditors (corresponding to primary audit nodes), intermediate auditors (corresponding to intermediate audit nodes), and senior auditors (corresponding to senior audit nodes). Specifically, after receiving the first request message, the permission management and control platform may first submit the first request message to the primary audit node. After the primary auditor of the primary audit node has reviewed and approved it, the first request message will be reviewed by the intermediate audit node, and so on.

[0201] It is understandable that if any of at least one audit node fails the audit, the first request message will not be submitted to the next-level audit node. Of course, in this case, any audit node can feedback the message of failed audit and the reason for failed audit to the authority management platform.

[0202] For example, the first request message may also include an audit priority. When the audit priority is the highest priority, the authority management and control platform may send the first request message to a senior auditor in at least one audit node.

[0203] Step S503: In response to at least one review node passing the review, the authority management and control platform opens the first authority for the target vehicle.

[0204] For example, when the permission management and control platform receives a review pass signal from at least one review node, it means that the first request message has been carefully reviewed by professional reviewers and confirmed to be authentic, legal, and applicable to the target vehicle. On this basis, the permission management and control platform will immediately take action to open the first permission for the target vehicle to perform the relevant operations in the remote service strategy.

[0205] In a specific example, Figure 8 A specific example schematic diagram of the permission control platform reviewing the first request message is shown, Figure 8 As shown, the review process includes three review nodes. After obtaining the first request message, the authority control platform first transfers the first request message to the after-sales staff review node. The after-sales staff will preliminarily review the first request message to verify whether the error message is accurate and whether the authority to execute the remote service policy opened for the target vehicle in the first request message matches the fault condition of the target vehicle. If the authority to execute the remote service policy opened for the target vehicle does not match the fault condition of the target vehicle, the after-sales staff will not pass the review. At this time, the authority control platform refuses to open the authority to execute the remote service policy for the target vehicle; if the authority to execute the remote service policy opened by the target matches the fault condition of the target vehicle, the after-sales staff will pass the review. At this time, the authority control platform transfers the first request message to the quality personnel review node.

[0206] The quality personnel will further review the first request message to verify whether the execution of the remote service strategy will damage the quality of the target vehicle. If the execution of the remote service strategy will damage the quality of the target vehicle, the quality personnel will not pass the review, and the permission control platform will refuse to grant the target vehicle the permission to execute the remote service strategy; if the execution of the remote service strategy will not damage the quality of the target vehicle, the quality personnel will pass the review, and the first request message will be transferred to the security personnel review node.

[0207] The security personnel will review the first request message again to verify whether the execution of the remote service strategy will bring risks to the data security and communication security of the target vehicle. If the execution of the remote service strategy will bring risks to the data security and communication security of the target vehicle, the security personnel will not pass the review, and the permission control platform will refuse to open the permission to execute the remote service strategy for the target vehicle; if the execution of the remote service strategy will not bring risks to the data security and communication security of the target vehicle, the security personnel will pass the review. At this time, the after-sales personnel, quality personnel and security personnel have all passed the review of the first request message, and the permission control platform will open the permission to execute the remote service strategy for the target vehicle.

[0208] In an embodiment of the present application, through at least one audit node process, the authority management and control platform can significantly improve the accuracy of the audit, ensure that only the first request message that meets all regulations and requirements can be approved, and open the remote service policy permissions for the target vehicle after the audit is passed. This at least one audit node process not only ensures the safety and effectiveness of remote service operations, but also protects the rights and interests of vehicles and car owners. The audit of each node conducts a detailed inspection of the first request message from different angles to ensure that there are no omissions and misjudgments, thereby improving the quality and reliability of the entire remote service process.

[0209] In a specific example, Fig. 9 The overall flow chart of the permission control method provided in the embodiment of the present application is shown in FIG. Fig. 9 The operator creates a service ticket in the remote service platform, which contains the information of the target vehicle and the remote service policy corresponding to the target vehicle, and sends the query message containing the service ticket to the authority management platform. If the authority management platform ensures that the target vehicle has the first permission to execute the remote service policy, it generates an authorization code within the valid time range for the operator and the service ticket, and sends the authorization code to the operator.

[0210] The operator selects the corresponding service ticket on the remote service platform and enters an authorization code to verify the operator's identity. When the authorization code entered by the operator is consistent with the authorization code sent to the operator by the permission management platform, and the time of the authorization code entered by the operator is within the valid time range, the operator's identity authentication is passed.

[0211] After the operator's identity authentication is also passed, the two communicating parties (remote service platform and target vehicle) will conduct verification. First, the remote service platform will generate a random string, namely the challenge code, and send the challenge code and the target vehicle's information to the key management platform through the authority control platform. After receiving the challenge code and the target vehicle's information, the key management platform will use the preset key corresponding to the target vehicle stored in the key management platform to encrypt the challenge code and generate a response code. After the key management platform generates the response code, it will send the response code to the remote service platform through the authority control platform.

[0212] After obtaining the challenge code and the response code, the remote service platform sends the first message including the response code and the challenge code to the target vehicle. After receiving the first message, the target vehicle will use the unique preset key preset inside the ECU of the target vehicle to decrypt the response code and obtain the decrypted challenge code. If the decrypted challenge code is consistent with the challenge code in the first message, the communication parties (the remote service platform and the target problem) are successfully verified. The remote service platform triggers the target vehicle to execute the remote service strategy. The target vehicle executes the remote service strategy and returns the execution result to the remote service platform.

[0213] In a possible implementation, the method further includes:

[0214] Step S504: the authority management and control platform receives from the remote service platform the number of times the remote service policy is executed for verifying the execution of the remote service policy using the response code and the challenge code on the target vehicle.

[0215] Exemplarily, each time the remote service platform verifies the execution of the remote service strategy on the target vehicle using the response code and the challenge code, it will record and update the number of executions each time, and send the updated number of executions to the authority management and control platform.

[0216] Step S505: In response to the execution times reaching a preset number, the permission management and control platform closes the first permission.

[0217] Exemplarily, in order to prevent the remote service policy from being abused by the operator, the authority management platform sets a preset number of times for each remote service policy on an ECU (electronic control unit) of each vehicle. Once the number of executions of the remote service policy reaches this preset number (for example, 3 times), the authority management platform will automatically close the target vehicle's authority to execute the remote service policy. If the target vehicle needs to execute the remote service policy again, it is necessary to re-request the first permission to open the remote service policy corresponding to the target vehicle on the authority management platform. The embodiment of the present application can reduce the potential risks caused by misoperation or intentional behavior of personnel by limiting the number of executions of the remote service policy.

[0218] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0219] Corresponding to the permission control method described in the above embodiment, Fig.10 This is a structural block diagram of the remote service platform provided in the embodiment of the present application. For the sake of convenience of explanation, only the parts related to the embodiment of the present application are shown.

[0220] Reference Fig.10 , the remote service platform includes:

[0221] A service work order acquisition module 1001 is used to acquire a service work order created by an operator, wherein the service work order at least includes information of a target vehicle and a remote service strategy, wherein the remote service strategy includes an operation performed by the target vehicle;

[0222] A reply code acquisition module 1002 is used to obtain a reply code corresponding to the challenge code when it is determined according to the service work order that the target vehicle has the first permission to perform the operation and the operator has the second permission to process the remote service policy, wherein the reply code is obtained by encrypting the challenge code using a preset key of the target vehicle, and the challenge code is generated by the remote service platform;

[0223] The first message sending module 1003 is used to send a first message to the target vehicle, wherein the first message includes the response code and the challenge code, and the first message is used to trigger the target vehicle to verify the execution of the remote service strategy using the response code and the challenge code.

[0224] In some embodiments, the remote service platform further includes:

[0225] A first verification message receiving module 1004 is used to receive a first verification message from the target vehicle, wherein the first verification message indicates that the target vehicle has passed the verification based on the response code and the challenge code;

[0226] The first instruction sending module 1005 is used to send a first instruction to the target vehicle in response to the first verification message, where the first instruction is used to trigger the target vehicle to execute the remote service strategy.

[0227] In some embodiments, the remote service platform further includes:

[0228] The execution rejection module 1006 is configured to reject the execution of the service work order if it is determined according to the service work order that the target vehicle does not have the first authority and / or the operator does not have the second authority.

[0229] In some embodiments, the remote service platform further includes:

[0230] A query message sending module 1007 is used to send a query message to the authority management and control platform, wherein the query message includes the service work order and requests to query whether the target vehicle has the first authority;

[0231] The query response message receiving module 1008 is used to receive the query response message returned by the authority management and control platform; wherein,

[0232] A first determination module 1009 is configured to determine, in response to the query response message including first indication information, that the target vehicle has the first authority, wherein the first indication information is used to indicate that the target vehicle has activated the first authority on the authority management and control platform; or

[0233] The second determination module 1010 is used to determine that the target vehicle does not have the first authority in response to the query response information including second indication information, and the second indication information is used to indicate that the target vehicle has not activated the first authority on the authority management and control platform.

[0234] In some embodiments, the remote service platform further includes:

[0235] An authorization code acquisition module 1011 is used to acquire the authorization code input by the operator on the first display interface, where the first display interface is associated with the service ticket;

[0236] The authorization code sending module 1012 is used to send the authorization code to the authority management and control platform;

[0237] The authorization code verification information receiving module 1013 is used to receive the authorization code verification information returned by the permission management and control platform; wherein,

[0238] The third determination module 1014 is configured to determine, in response to the authorization code verification information including third indication information, that the operator has the second authority; or

[0239] The fourth determination module 1015 is configured to determine, in response to the authorization code verification information including fourth indication information, that the operator does not have the second authority.

[0240] In some embodiments, the remote service platform further includes:

[0241] The input time sending module 1016 is used to send the time information of the operator inputting the authorization code to the authority management platform. The time information is used by the authority management platform to determine whether the authorization code is within the valid time range to determine whether the operator has the second authority.

[0242] In some embodiments, the response code acquisition module 1002 is further used to:

[0243] Sending the challenge code and the target vehicle information to the authority management and control platform;

[0244] Receive a response code from the permission management and control platform.

[0245] Corresponding to the permission control method described in the above embodiment, Fig.11 This is a structural block diagram of a target vehicle provided in an embodiment of the present application. For ease of explanation, only the parts related to the embodiment of the present application are shown.

[0246] Reference Fig.11 , target vehicles include:

[0247] A first message receiving module 1101 is used to receive a first message from a remote service platform, wherein the first message includes a response code and a challenge code, wherein the response code is obtained by encrypting the challenge code using a preset key of the target vehicle;

[0248] A decryption module 1102, used to decrypt the response code according to the preset key of the target vehicle to obtain a decrypted challenge code;

[0249] The execution module 1103 is used to execute the remote service strategy when the decrypted challenge code is consistent with the challenge code from the remote service platform. The remote service strategy includes the operations performed by the target vehicle.

[0250] In some embodiments, the execution module 1103 is further configured to:

[0251] When the decrypted challenge code is consistent with the challenge code from the remote service platform, a first verification message is sent to the remote service platform, wherein the first verification message indicates that the target vehicle has successfully verified the response code;

[0252] receiving a first instruction from the remote service platform, wherein the first instruction instructs execution of the remote service policy;

[0253] In response to the first instruction, the remote services policy is executed.

[0254] In some embodiments, the target vehicle further comprises:

[0255] The execution result returning module 1104 is used to return the execution result of the remote service policy to the remote service platform.

[0256] Corresponding to the permission control method described in the above embodiment, Fig.12This is a structural block diagram of the permission management platform provided in the embodiment of the present application. For the sake of convenience, only the parts related to the embodiment of the present application are shown.

[0257] Reference Fig.12 , the permission management platform includes:

[0258] The challenge code receiving module 1201 is used to receive the challenge code from the remote service platform and the information of the target vehicle;

[0259] A response code determination module 1202 is used to determine a response code according to the challenge code and the information of the target vehicle, wherein the response code is obtained by encrypting the challenge code with a preset key of the target vehicle;

[0260] The response code sending module 1203 is used to send the response code to the remote service platform.

[0261] In some embodiments, the permission management platform further includes:

[0262] A query message receiving module 1204 is used to receive a query message from the remote service platform, wherein the query message includes a service work order; the service work order includes at least information of the target vehicle and a remote service strategy, wherein the remote service strategy includes an operation performed by the target vehicle;

[0263] The query response message sending module 1205 is used to send a query response message including first indication information to the remote service platform based on the information of the target vehicle, when the target vehicle has activated the first permission to execute the remote service policy on the permission management and control platform; the first indication information is used to indicate that the target vehicle has activated the first permission on the permission management and control platform, or, when the target vehicle has not activated the first permission to execute, send a query response message including second indication information to the remote service platform, and the second indication information is used to indicate that the target vehicle has not activated the first permission on the permission management and control platform.

[0264] In some embodiments, the service ticket also includes the identity information of the operator.

[0265] The permission management platform also includes:

[0266] An authorization code sending module 1206, used to send an authorization code, where the authorization code is generated based on the service ticket;

[0267] An authorization code input module 1207, used to obtain the authorization code input by the operator on the remote rescue platform;

[0268] The authorization code verification information sending module 1208 is used to send authorization code verification information to the remote rescue platform according to the input authorization code and the sent authorization code, and the authorization code verification information includes third indication information or fourth indication information, wherein the third indication information is used by the remote service platform to determine that the operator has the second authority to process the remote service policy, and the fourth indication information is used by the remote service platform to determine that the operator does not have the second authority.

[0269] In some embodiments, the permission management platform further includes:

[0270] A time information acquisition module 1209, used to acquire time information, wherein the time information indicates the time when the operator inputs the authorization code on the remote rescue platform;

[0271] Correspondingly, the authorization code verification information sending module 1207 is also used for:

[0272] If the input authorization code is consistent with the sent authorization code and the time is within the valid time range, then the authorization code verification information including the third indication information is sent to the remote rescue platform, or,

[0273] If the input authorization code is inconsistent with the sent authorization code, or the input authorization code is consistent with the sent authorization code but the time is outside the valid time range, authorization code verification information including fourth indication information is sent to the remote rescue platform.

[0274] In some embodiments, the response code determination module 1202 is further configured to:

[0275] Sending the challenge code and the target vehicle information to a key management platform; the key management platform stores one or more preset keys of vehicles; the target vehicle information is used to determine the preset key of the target vehicle;

[0276] Receive the response code returned by the key management platform.

[0277] In some embodiments, the permission management platform further includes:

[0278] A first request message receiving module 1210 is configured to receive a first request message, wherein the first request message includes information of the target vehicle, the remote service policy, and problems existing in the target vehicle, and the first request message requests to enable a first permission for executing the remote service policy for the target vehicle;

[0279] The review sending module 1211 is used to send the first request message to at least one review node for review;

[0280] The activation module 1212 is used to activate the first permission for the target vehicle in response to at least one audit node passing the audit.

[0281] In some embodiments, the permission management platform further includes:

[0282] An execution number receiving module 1213 is used to receive the execution number of the target vehicle using the response code and the challenge code to verify the execution of the remote service strategy from the remote service platform;

[0283] The closing module 1214 is configured to close the first permission in response to the execution times reaching a preset number of times.

[0284] It should be noted that the information interaction, execution process, etc. between the above-mentioned devices / units are based on the same concept as the method embodiment of the present application. Their specific functions and technical effects can be found in the method embodiment part and will not be repeated here.

[0285] in addition, Fig.10 The remote service platform shown, Fig.11 The target vehicle shown, Fig.12 The permission management and control platform shown may be a software unit, a hardware unit, or a combination of software and hardware units built into an existing terminal device, or may be integrated into the terminal device as an independent widget, or may exist as an independent terminal device.

[0286] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0287] Fig.13 Schematic diagram of the structure of the terminal device provided in the embodiment of the present application. Fig.13 As shown, the terminal device 13 of this embodiment includes: at least one processor 130 ( Fig.13Only one processor is shown in the figure), a memory 131, and a computer program 132 stored in the memory 131 and executable on the at least one processor 130, wherein the processor 130 implements the steps in any of the above-mentioned embodiments of the permission control method when executing the computer program 132.

[0288] The terminal device may be a computing device such as a desktop computer, a notebook, a PDA, or a cloud server. The terminal device may include, but is not limited to, a processor and a memory. Those skilled in the art will understand that Fig.13 It is only an example of the terminal device 13 and does not constitute a limitation on the terminal device 13. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components, for example, it may also include input and output devices, network access devices, etc.

[0289] The processor 130 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0290] In some embodiments, the memory 131 may be an internal storage unit of the terminal device 13, such as a hard disk or memory of the terminal device 13. In other embodiments, the memory 131 may also be an external storage device of the terminal device 13, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the terminal device 13. Further, the memory 131 may also include both an internal storage unit of the terminal device 13 and an external storage device. The memory 131 is used to store an operating system, an application program, a boot loader (Boot Loader), data, and other programs, such as the program code of the computer program, etc. The memory 131 may also be used to temporarily store data that has been output or is to be output.

[0291] An embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in the above-mentioned method embodiments can be implemented.

[0292] An embodiment of the present application provides a computer program product. When the computer program product runs on a terminal device, the terminal device can implement the steps in the above-mentioned method embodiments when executing the computer program product.

[0293] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may at least include: any entity or device that can carry the computer program code to the device / terminal device, a recording medium, a computer memory, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), an electric carrier signal, a telecommunication signal, and a software distribution medium. For example, a USB flash drive, a mobile hard disk, a magnetic disk or an optical disk. In some jurisdictions, according to legislation and patent practice, computer-readable media cannot be electric carrier signals and telecommunication signals.

[0294] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0295] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0296] In the embodiments provided in the present application, it should be understood that the disclosed devices / terminal equipment and methods can be implemented in other ways. For example, the device / terminal equipment embodiments described above are only schematic. For example, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0297] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0298] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

[0299] The relevant user personal information that may be involved in each embodiment of this application is strictly in accordance with the requirements of laws and regulations, following the principles of legality, legitimacy and necessity, based on the reasonable purpose of the business scenario, to process the personal information that the user actively provides during the use of the product / service or generated by the use of the product / service, as well as the personal information obtained with the user's authorization. The user personal information processed by the applicant will vary depending on the specific product / service scenario, and must be based on the specific scenario in which the user uses the product / service. It may involve the user's account information, device information, driving information, vehicle information or other relevant information. The applicant will treat the user's personal information and its processing with a high degree of diligence. The applicant attaches great importance to the security of user personal information, and has taken reasonable and feasible security protection measures that meet industry standards to protect user information and prevent personal information from being unauthorized access, public disclosure, use, modification, damage or loss.

Claims

1. A permission control method, characterized in that: Applied to remote service platforms, including: Acquire a service work order created by an operator, wherein the service work order includes at least information of a target vehicle and a remote service strategy, wherein the remote service strategy includes an operation performed by the target vehicle; When it is determined according to the service work order that the target vehicle has the first permission to perform the operation and the operator has the second permission to process the remote service policy, obtaining a response code corresponding to the challenge code, wherein the response code is obtained by encrypting the challenge code using a preset key of the target vehicle, and the challenge code is generated by the remote service platform; A first message is sent to the target vehicle, wherein the first message includes the response code and the challenge code, and the first message is used to trigger the target vehicle to verify the execution of the remote service strategy using the response code and the challenge code.

2. The permission control method according to claim 1, characterized in that: After sending the first message to the target vehicle, the method further includes: Receiving a first verification message from the target vehicle, the first verification message indicating that the target vehicle has passed verification based on the response code and the challenge code; In response to the first verification message, a first instruction is sent to the target vehicle, where the first instruction is used to trigger the target vehicle to execute the remote service strategy.

3. The permission control method according to claim 1 or 2, characterized in that: The step of obtaining a response code corresponding to the challenge code includes: Sending the challenge code and the target vehicle information to the authority management and control platform; Receive the response code from the permission management and control platform.

4. A remote service platform, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the permission control method as described in any one of claims 1 to 3 is implemented.

5. A permission control method, characterized in that: Applied to target vehicles, including: Receiving a first message from a remote service platform, the first message including a response code and a challenge code, the response code being obtained by encrypting the challenge code using a preset key of the target vehicle; Decrypting the response code according to the preset key of the target vehicle to obtain a decrypted challenge code; When the decrypted challenge code is consistent with the challenge code from the remote service platform, a remote service strategy is executed, wherein the remote service strategy includes operations performed by the target vehicle.

6. The permission control method according to claim 5, characterized in that: When the decrypted challenge code is consistent with the challenge code from the remote service platform, executing the remote service strategy includes: When the decrypted challenge code is consistent with the challenge code from the remote service platform, a first verification message is sent to the remote service platform, wherein the first verification message indicates that the target vehicle has successfully verified the response code; receiving a first instruction from the remote service platform, wherein the first instruction instructs execution of the remote service policy; In response to the first instruction, the remote services policy is executed.

7. A target vehicle, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the permission control method as claimed in claim 5 or 6 is implemented.

8. A permission control method, characterized in that: Applied to the permission management platform, including: Receive the challenge code and target vehicle information from the remote service platform; Determine a response code according to the challenge code and the information of the target vehicle, wherein the response code is obtained by encrypting the challenge code with a preset key of the target vehicle; The response code is sent to the remote service platform.

9. A rights management and control platform, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the permission control method as claimed in claim 8 is implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by the processor, it implements the permission control method as described in any one of claims 1 to 3; or, when the computer program is executed by the processor, it implements the permission control method as described in claim 5 or 6; or, when the computer program is executed by the processor, it implements the permission control method as described in claim 8.

Images