A method for generating and injecting a key for information security dependency

Abstract

The application relates to a key generation and injection method depending on information security, which comprises the following steps: a host computer sends DID and reads information of a VCU; a user sets a key value to be updated and a corresponding slot number; script information is filled in a host computer script; the script is run to generate corresponding cipher information; part of the cipher information is unlocked and injected into the VCU; the VCU analyzes the accepted cipher information and generates the key value to be updated and comparison information; and the key value update state is determined through comparison and discrimination. The key generation and injection method can package the key into individual cipher through a script according to UID information unique to each piece of hardware and generate unique cipher, so that the risk of key cracking is reduced, and the possibility of eavesdropping and malicious tampering of vehicle-mounted data communication is lowered.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and in particular to a method for generating and injecting keys that are essential for information security. Background Technology

[0002] With the development of automotive electronic and electrical architecture, in-vehicle communication technology is also constantly being updated and upgraded. Traditional in-vehicle communication technologies are gradually failing to meet the requirements of modern automobiles in terms of data transmission rate, security, and anti-interference. Therefore, a series of new in-vehicle communication technologies have emerged, such as CAN-FD (CAN with Flexible Data-Rate), in-vehicle Ethernet, wireless local area network (WLAN), vehicle-to-vehicle communication network (V2V), vehicle-to-internet communication network (V2I), and vehicle-to-the-Internet communication network (V2X). These technologies together constitute the vast system of modern in-vehicle communication.

[0003] In vehicle communication, data security is paramount. Existing technologies address security issues through Electronic Codebook (ECB), Cipher Block Chaining (CBC), and Pattern Counter (CTR) modes. However, these technologies remain vulnerable to breaches due to poor key management, vulnerabilities in encryption algorithms, and constantly evolving attack methods, leading to eavesdropping on transmitted data and threatening driving safety. Furthermore, traditional ciphertext generation for security keys relies on the unique UID (15 bytes) information of each ECU. Manually calculating the corresponding ciphertext significantly increases product delivery time and reduces software update efficiency. Summary of the Invention

[0004] In view of the shortcomings of the prior art, the purpose of this invention is to provide a key generation and injection method that relies on information security, so as to solve one or more problems in the prior art.

[0005] To achieve the above objectives, the technical solution of the present invention is as follows:

[0006] A method for generating and injecting keys that rely on information security, comprising the following steps:

[0007] The host computer sends the DID and reads the VCU information;

[0008] Users set the key value to be updated and the corresponding slot number;

[0009] Enter the script information into the host computer script;

[0010] Run the script and generate the corresponding ciphertext information;

[0011] Access was unlocked and some ciphertext information was injected into the VCU;

[0012] The VCU parses the received ciphertext and generates the key value and comparison information that need to be updated.

[0013] The key value update status is determined by comparison and discrimination.

[0014] Furthermore, the information read from the VCU includes both offline and offline VCUs.

[0015] Furthermore, the VCU that is not offline reads the UID identity information, while the VCU that is offline reads both the UID identity information and the CID information.

[0016] Furthermore, the script information includes the updated key value and the corresponding slot number, the acquired UID identity information, CID information, and FID information.

[0017] Furthermore, the CID varies based on the number of times the key has been updated in the slot corresponding to the updated key.

[0018] Furthermore, the ciphertext information includes a parsing group and a comparison group, wherein the parsing group corresponds to the updated key value, the corresponding slot number, and the obtained UID identity information, and the comparison group corresponds to the CID information and the FID information, respectively.

[0019] Furthermore, the permission unlocking includes the following steps:

[0020] Enter extended session;

[0021] Request a seed;

[0022] Send key to unlock;

[0023] Unlocked successfully.

[0024] Furthermore, in the key unlocking process, the key is the original key that precedes the key value that needs to be updated.

[0025] Furthermore, the injected partial ciphertext information is sent to the VCU, and the injected information is a parsing group.

[0026] Furthermore, the determination of the key value update status is achieved by comparing the comparison group and the comparison information. If the comparison group and the comparison information are consistent, the key update is successful and stored; otherwise, the key update fails.

[0027] Compared with the prior art, the beneficial technical effects of the present invention are as follows:

[0028] (i) The key generation and injection method of the present invention, during the encryption and decryption verification stages, can package the key into a separate ciphertext for each hardware's unique UID information through a script, and the generated ciphertext is unique; this reduces the risk of the key being cracked and lowers the possibility of vehicle data communication being eavesdropped on and maliciously tampered with.

[0029] (ii) It eliminates the need for manual key generation for each VCU, reducing manual input and making it suitable for large-scale software updates and product shipments; it improves production efficiency while ensuring the security and robustness of data transmission between vehicle communication nodes. Attached Figure Description

[0030] Figure 1 The diagram illustrates the overall process of a key generation and injection method for information security dependence according to an embodiment of the present invention.

[0031] Figure 2 This invention illustrates a method for generating and injecting a key that relies on information security, according to an embodiment of the present invention. The method involves a host computer sending a DID and reading information from the VCU. Figure I .

[0032] Figure 3 This invention illustrates a method for generating and injecting a key that relies on information security, according to an embodiment of the present invention. The method involves a host computer sending a DID and reading information from the VCU. Figure II .

[0033] Figure 4 This diagram illustrates the framework of a host computer script for a key generation and injection method that relies on information security, according to an embodiment of the present invention.

[0034] Figure 5 This diagram illustrates a concept diagram of a method for unlocking permissions based on a key generation and injection method that relies on information security, according to an embodiment of the present invention.

[0035] Figure 6 The flowchart illustrates a routine service for VCU parsing of a key generation and injection method for information security dependence according to an embodiment of the present invention.

[0036] Figure 7 A flowchart illustrating the comparison and discrimination of a key generation and injection method that relies on information security, according to an embodiment of the present invention, is shown. Detailed Implementation

[0037] To make the objectives, technical solutions, and advantages of this invention clearer, the following detailed description of a key generation and injection method for information security based on the present invention, in conjunction with the accompanying drawings and specific embodiments, will further illustrate these points in detail. The advantages and features of this invention will become clearer from the following description. It should be noted that the accompanying drawings are in a very simplified form and use non-precise proportions, used only to facilitate and clearly illustrate the purpose of the embodiments of this invention. Please refer to the accompanying drawings to make the objectives, features, and advantages of this invention more apparent and understandable. It should be understood that the structures, proportions, sizes, etc., depicted in the accompanying drawings are only for illustrative purposes to aid those skilled in the art and are not intended to limit the implementation conditions of this invention. Therefore, they have no substantial technical significance. Any modifications to the structure, changes in proportions, or adjustments to the size, without affecting the effects and objectives achieved by this invention, should still fall within the scope of the technical content disclosed in this invention.

[0038] Please see Figure 1 The key generation and injection method, which relies on information security in this embodiment, includes the following steps:

[0039] Step 1: The host computer sends the DID and reads the VCU information.

[0040] Please see Figure 2 and Figure 3 The information read from the VCU includes both offline and offline VCUs.

[0041] The VCU that is not offline reads the UID identity information, while the VCU that is offline reads both the UID identity information and the CID information.

[0042] DID stands for Data Identifier, consisting of two bytes, which can be understood as a number used to identify which data is being read. UID is a number, string, or a code consisting of letters, numbers, and symbols used to uniquely identify a user. When a user registers an account, the system automatically generates a UID and binds it to the user's personal information to ensure that each user's identity in the system is unique. VCU stands for Vehicle Control Unit, which consists of the ECU (Electronic Control Unit). CID indicates the key update count.

[0043] Step 2: The user sets the key value to be updated and the corresponding slot number.

[0044] Users can preset the key value to be updated and the corresponding Slot number, i.e., the Slot ID where the key is located, according to their own needs.

[0045] Step 3: Enter the script information into the host computer script.

[0046] Please see Figure 4 The script information is filled in the host computer script, including the updated key value and the corresponding Slot number, the obtained UID identity information, CID information, and FID information. The CID is the key update count, which changes based on the number of times the key has been updated in the Slot corresponding to the updated key. The value increases by 1 with each update, and the initial default value of CID is 0. The FID is the SHE Flag, which defaults to 0*10. The SHE Flag is used not only to identify the node but also to generate the key. Each node has a unique SHE Flag for key generation.

[0047] Step 4: Run the script and generate the corresponding ciphertext information.

[0048] Please continue reading. Figure 4 After running the host computer script, corresponding ciphertext information is generated for subsequent verification. The ciphertext information includes a parsing group and a comparison group. In this embodiment, the parsing group is denoted as M1M2M3, and the comparison group is denoted as M4M5. The parsing group corresponds to the updated key value, the corresponding slot number, and the obtained UID identity information, respectively. The comparison group corresponds to the CID information and FID information, respectively.

[0049] Step 5: Unlock permissions and inject some ciphertext information into the VCU.

[0050] Please see Figure 5 The permission unlocking process includes the following steps:

[0051] Entering an extended session, requesting a seed, sending a key to unlock, and unlocking successfully. Extending a session and performing a secure unlocking action typically involves multiple steps within a system or application designed to verify the user's identity and unlock restricted resources or functions, thereby enabling subsequent injection of the ciphertext information value VCU.

[0052] Furthermore, in the key-based unlocking process, this key precedes the original key value that needs to be updated. Unlocking greater privileges by inputting the original key, thus achieving the purpose of updating the key, is a prerequisite for injecting partial ciphertext information into the VCU.

[0053] Furthermore, some ciphertext information is injected into the VCU, specifically the parsing group M1M2M3.

[0054] Step 6: The VCU parses the received ciphertext information and generates the key value and comparison information that need to be updated.

[0055] like Figure 6 As shown, the VCU, based on the ciphertext encryption algorithm, parses the received ciphertext M1M2M3 to extract the key and returns new comparison information, denoted in this embodiment as... .

[0056] Step 7: Compare and determine the key value update status.

[0057] Please continue reading. Figure 7 The key value update status is determined by comparing the comparison group and the comparison information, namely M4M5 and If the comparison group and the comparison information match, the key update is successful and stored in the DFlash1 area; if they do not match, the key is discarded and the key update injection fails.

[0058] The technical features of the above embodiments can be combined arbitrarily. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as the combination of these technical features does not contradict each other, it should be considered within the scope of this specification. The above embodiments only illustrate several implementation methods of the present invention, and their descriptions are relatively specific and detailed, but they should not be construed as limiting the scope of the invention patent. It should be noted that for those skilled in the art, several modifications and improvements can be made without departing from the concept of the present invention, and these all fall within the protection scope of the present invention. Therefore, the protection scope of this invention patent should be determined by the appended claims.

Claims

1. A method for generating and injecting a key that relies on information security, characterized in that: The steps include the following: The host computer sends the data identifier DID and reads the information from the vehicle control unit (VCU); Users set the key value to be updated and the corresponding key storage slot number; Enter the script information into the host computer script; Run the script and generate the corresponding ciphertext information; The permissions are unlocked and partial ciphertext information is injected into the VCU. The unlocking of permissions includes the following steps: Enter extended session, Request seeds, Send key to unlock. Unlocked successfully; The VCU parses the received ciphertext and generates the key value and comparison information that need to be updated. The key value update status is determined by comparison and discrimination.

2. The method for generating and injecting a key that relies on information security as described in claim 1, characterized in that: The information read from the VCU includes both offline and offline VCUs.

3. The method for generating and injecting a key that relies on information security as described in claim 2, characterized in that: The VCU that is not offline reads the UID identity information, while the VCU that is offline reads the UID identity information and the key update count (CID) information.

4. The method for generating and injecting a key that relies on information security as described in claim 3, characterized in that: The script information includes the updated key value and the corresponding slot number, the acquired UID identity information, CID information, and the security hardware extended identifier FID information.

5. The method for generating and injecting a key that relies on information security as described in claim 4, characterized in that: The CID changes based on the number of times the key has been updated in the slot corresponding to the updated key.

6. The method for generating and injecting a key that relies on information security as described in claim 5, characterized in that: The ciphertext information includes a parsing group and a comparison group, wherein the parsing group corresponds to the updated key value, the corresponding slot number, and the obtained UID identity information, and the comparison group corresponds to the CID information and the FID information.

7. The method for generating and injecting a key that relies on information security as described in claim 6, characterized in that: In the sending key unlocking process, the key is the original key that precedes the key value that needs to be updated.

8. The method for generating and injecting a key that relies on information security as described in claim 7, characterized in that: The injected partial ciphertext information is sent to the VCU, and the injected part is the parsing group.

9. The method for generating and injecting a key that relies on information security as described in claim 8, characterized in that: The key value update status is determined by comparing the comparison group and the comparison information. If the comparison group and the comparison information are consistent, the key update is successful and stored; otherwise, the key update fails.

Images