Vehicle information authentication system and method

Abstract

The invention relates to a vehicle information authentication system and method, and belongs to the technical field of information authentication, and the system comprises a vehicle-mounted intelligent terminal which is used for obtaining first vehicle information of a vehicle and sending the first vehicle information to a vehicle-mounted software terminal; the vehicle-mounted software terminal is used for generating a first signature according to the first vehicle information and sending the first signature to the server; the server is used for querying according to the first signature to obtain second vehicle information, generating a second signature according to the second vehicle information, and determining that vehicle authentication succeeds when the first signature is successfully compared with the second signature; the data of the vehicle-mounted intelligent terminal is authenticated through the server, and when the authentication succeeds, the vehicle-mounted intelligent terminal and the vehicle-mounted software terminal can perform data transmission, so that the safety of vehicle data transmission is improved, and the risk of vehicle driving is reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of information authentication, and in particular to a vehicle information authentication system and method. Background Art

[0002] With the development of urban transportation industry and technologies such as the Internet and artificial intelligence, motor vehicles, as an important means of transportation in modern society, are increasingly showing strong vitality. Among them, intelligent and networking technologies represented by assisted driving, automatic driving and unmanned driving have become the hot spots of automotive technology innovation today. With the rapid growth of the national economy, the number of motor vehicles is also growing, which will inevitably lead to increasingly serious urban traffic congestion. Major and extremely serious road traffic accidents across the country are enough to illustrate the seriousness of this problem. Since the accident scene of a traffic accident is recognized as the only basis for allocating accident responsibilities, various human and non-human interferences have caused problems with the accuracy and credibility of the traffic police's judgment. Illegal acts such as forging accident scenes, destroying accident scenes, and transferring accident scenes occur from time to time. And with the rapid growth of the national economy, the number of motor vehicles is also growing, which will inevitably lead to increasingly serious urban traffic congestion. Major and extremely serious road traffic accidents across the country are enough to illustrate the seriousness of this problem. Since the accident scene of a traffic accident is recognized as the only basis for allocating accident responsibilities, various human and non-human interferences have caused problems with the accuracy and credibility of traffic police's judgments. Illegal acts such as forging accident scenes, destroying accident scenes, and transferring accident scenes often occur. And with the rapid development of the national economy, the number of motor vehicles has been increasing, which will inevitably lead to increasingly serious urban traffic congestion. Major and extremely serious road traffic accidents across the country are enough to illustrate the seriousness of this problem. Since the accident scene of a traffic accident is recognized as the only basis for allocating accident responsibilities, various human and non-human interferences have caused problems with the accuracy and credibility of traffic police's judgments. Illegal acts such as forging accident scenes, destroying accident scenes, and transferring accident scenes have occurred from time to time. And with the rapid development of the national economy, the number of motor vehicles has been increasing, which will inevitably lead to increasingly serious urban traffic congestion. At present, ordinary car models have 25 to 200 ECUs (Electronic Control Unit). With the increase of ECUs in cars, the attack surface of hackers on cars has also increased. Previously, the internal bus of cars was closed, but after connecting to the Internet, many of them have been opened to the outside world. At the same time, due to the demand for intelligence, cars have added many sensors such as ultrasonic radars, which have increased the attack surface of cars.

[0003] In the prior art, a car black box is generally used as a processor, but there is no system that can transmit data with the vehicle. When transmitting data, the existing car system does not authenticate the vehicle data, thereby increasing the risk of vehicle driving.

[0004] Therefore, it is urgent to propose a vehicle information authentication system and method to solve the problem in the prior art that the existing automobile system does not authenticate the vehicle data during data transmission, thereby increasing the risk of vehicle driving. Summary of the invention

[0005] In view of this, it is necessary to provide a vehicle information authentication system and method to solve the problem in the prior art that the existing automobile system does not authenticate the vehicle data during data transmission, thereby increasing the risk of vehicle driving.

[0006] In order to solve the above problems, the present invention provides a vehicle information authentication system, comprising: The vehicle-mounted intelligent terminal is used to obtain first vehicle information of the vehicle and send the first vehicle information to the vehicle-mounted software terminal; The vehicle-mounted software terminal is used to generate a first signature according to the first vehicle information and send the first signature to a server; The server is used to query according to the first signature to obtain second vehicle information, and generate a second signature according to the second vehicle information. When the first signature is successfully compared with the second signature, it is determined that the vehicle authentication is successful.

[0007] In a possible implementation, the system further includes a vehicle network; The vehicle network is used to enter the initial information of the vehicle when the vehicle leaves the factory, and to calibrate the initial information in the vehicle-mounted intelligent terminal, so that the server can query the second vehicle information of the vehicle-mounted intelligent terminal in the vehicle network according to the first signature.

[0008] In a possible implementation, the vehicle-mounted intelligent terminal is connected to the vehicle-mounted software terminal via a USB line, or is bound to a specified IP and port, and the vehicle-mounted intelligent terminal communicates with the vehicle-mounted software terminal via the IP and the port.

[0009] In a possible implementation, the vehicle-mounted intelligent terminal communicates with the vehicle-mounted software terminal via a UDP protocol.

[0010] In one possible implementation, the vehicle-mounted software terminal is also used to send a preset interface protocol to the vehicle-mounted intelligent terminal, so that after the vehicle-mounted intelligent terminal receives the preset interface protocol, it returns the vehicle information according to the transmission format of the interface in the preset interface protocol; the preset interface protocol includes the transmission format of the specified interface.

[0011] In a possible implementation, the first vehicle information and the second vehicle information both include a VIN code, a SIM card number of the vehicle-mounted intelligent terminal, and a vehicle-mounted ID; the vehicle-mounted software terminal is also used to, after receiving the vehicle information, combine the VIN code, the SIM card number, the vehicle-mounted ID, and the current timestamp into a string in a preset order, calculate the string through the MD5 digest algorithm to obtain a first hash string, and generate a first signature based on the first hash string, the VIN code, the SIM card number, and the vehicle-mounted ID.

[0012] In one possible implementation, the server is also used to query the Internet of Vehicles based on the VIN code in the first signature to obtain second vehicle information, calculate the second vehicle information through the MD5 digest algorithm to obtain a second hash string, and compare the first hash string and the second hash string in the first signature. When the comparison is successful, it is determined that the vehicle authentication is successful.

[0013] In a possible implementation, the vehicle-mounted software terminal is further configured to send a token request instruction to the server when sending the first signature to the server; The server is also used to generate a token according to the token request instruction when the vehicle authentication is successful, and send the token to the vehicle software terminal, so that the vehicle software terminal requests other business data according to the token.

[0014] In a possible implementation, the vehicle-mounted software terminal is further configured to encrypt the request instruction for the other business data by using a public key when sending the request instruction through the token, and send the encrypted request instruction to the server; The server is also used to decrypt the request instruction using a private key after receiving the request instruction to obtain decrypted data.

[0015] On the other hand, the present invention also provides a vehicle information authentication method, comprising: Acquire first vehicle information of the vehicle, and send the first vehicle information to the vehicle software terminal; Generate a first signature according to the first vehicle information, and send the first signature to a server; A query is performed based on the first signature to obtain second vehicle information, and a second signature is generated based on the second vehicle information. When the first signature is successfully compared with the second signature, it is determined that the vehicle authentication is successful.

[0016] The beneficial effects of the present invention are: the on-board intelligent terminal is used to obtain first vehicle information of the vehicle, and send the first vehicle information to the on-board software terminal; the on-board software terminal is used to generate a first signature according to the first vehicle information, and send the first signature to the server; the server is used to query according to the first signature, obtain second vehicle information, and generate a second signature according to the second vehicle information, and when the first signature is successfully compared with the second signature, it is determined that the vehicle authentication is successful; the present invention authenticates the data of the on-board intelligent terminal through the server, and when the authentication is successful, the on-board intelligent terminal and the on-board software terminal can transmit data, which increases the security of vehicle data transmission and reduces the risk of vehicle driving. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 A schematic diagram of the structure of an embodiment of the vehicle information authentication system provided by the present invention; Figure 2 A schematic diagram of another embodiment of the vehicle information authentication system provided by the present invention; Figure 3 A schematic diagram of the structure of an embodiment of information transmission of the module provided by the present invention; Figure 4 A schematic flow chart of an embodiment of the vehicle information authentication method provided by the present invention. DETAILED DESCRIPTION

[0018] The preferred embodiments of the present invention are described in detail below in conjunction with the accompanying drawings, wherein the accompanying drawings constitute a part of this application and are used together with the embodiments of the present invention to illustrate the principles of the present invention, but are not used to limit the scope of the present invention.

[0019] like Figure 1 As shown, a specific embodiment of the present invention discloses a vehicle information authentication system 100, including: The vehicle-mounted intelligent terminal 101 is used to obtain first vehicle information of the vehicle and send the first vehicle information to the vehicle-mounted software terminal; The vehicle software terminal 102 is used to generate a first signature according to the first vehicle information and send the first signature to the server; The server 103 is used to query according to the first signature to obtain the second vehicle information, and generate a second signature according to the second vehicle information. When the first signature is successfully compared with the second signature, it is determined that the vehicle authentication is successful.

[0020] In a specific embodiment of the present invention, the vehicle-mounted intelligent terminal 101 can be applied to any vehicle, and the vehicle-mounted software terminal 102 can be applied to any electronic device, such as a mobile phone. Then, an APP corresponding to the vehicle can be installed on the mobile phone, that is, the vehicle-mounted software terminal 102. When the vehicle-mounted intelligent terminal TBox and the vehicle-mounted software terminal (Android terminal) need to transmit data, authentication is required first. Data transmission can be performed only after authentication is passed. The specific authentication method can be: the vehicle-mounted intelligent terminal obtains the first vehicle information of the vehicle, and then sends the first vehicle information to the vehicle-mounted software terminal through the network or communication. Then, the vehicle-mounted software terminal can generate a first signature based on the first vehicle information. The specific method of generating the signature can be set according to the actual situation, and the embodiment of the present invention is not limited here. The vehicle-mounted software terminal can send the first signature to the server. After the server receives the first signature, it can query according to the first signature to obtain the second vehicle information, and then generate the second signature according to the second vehicle information. Then, when the first signature is successfully compared with the second signature, if the comparison is successful, the authentication is returned. If the comparison does not exceed, the authentication is returned. After the authentication is passed, data transmission can be performed, which increases the security of the vehicle's data transmission.

[0021] Compared with the prior art, the on-board intelligent terminal provided in this embodiment is used to obtain first vehicle information of the vehicle and send the first vehicle information to the on-board software terminal; the on-board software terminal is used to generate a first signature according to the first vehicle information and send the first signature to the server; the server is used to query according to the first signature, obtain second vehicle information, and generate a second signature according to the second vehicle information. When the first signature is successfully compared with the second signature, it is determined that the vehicle authentication is successful. The present invention authenticates the data of the on-board intelligent terminal through the server. When the authentication is successful, the on-board intelligent terminal and the on-board software terminal can transmit data, which increases the security of vehicle data transmission and reduces the risk of vehicle driving.

[0022] In some embodiments of the present invention, Figure 2 As shown, the system also includes a vehicle network 104; The Internet of Vehicles 104 is used to enter the initial information of the vehicle when the vehicle leaves the factory, and calibrate the initial information in the on-board intelligent terminal, so that the server can query the second vehicle information of the on-board intelligent terminal in the Internet of Vehicles according to the first signature.

[0023] In a specific embodiment of the present invention, in order to synchronize the vehicle information with the information in the Internet of Vehicles, the initial information of the vehicle can be entered when the vehicle leaves the factory, and the initial information can also be calibrated in the on-board intelligent terminal, thereby ensuring that the initial information of the vehicle remains consistent in the on-board intelligent terminal and the Internet of Vehicles. If the vehicle information is subsequently changed (for example, the SIM card number is changed), the vehicle information in the Internet of Vehicles and the on-board intelligent terminal TBox needs to be changed synchronously, so that the server can query the second vehicle information of the on-board intelligent terminal in the Internet of Vehicles based on the VIN code in the first signature.

[0024] In some embodiments of the present invention, the vehicle-mounted intelligent terminal and the vehicle-mounted software terminal are connected via a USB line, or bound to a specified IP and port, and the vehicle-mounted intelligent terminal and the vehicle-mounted software terminal communicate via IP and port.

[0025] In a specific embodiment of the present invention, the vehicle-mounted intelligent terminal TBox is connected to the vehicle-mounted software terminal (Android terminal) through a physical line when installed in the vehicle, that is, connected through a USB line, establishes a network connection with the vehicle-mounted software terminal, or binds to a specified IP and port, and communicates through the IP and port.

[0026] In some embodiments of the present invention, the vehicle-mounted intelligent terminal communicates with the vehicle-mounted software terminal via the UDP protocol.

[0027] In a specific embodiment of the present invention, after the vehicle-mounted intelligent terminal establishes a network connection with the vehicle-mounted software terminal, it communicates with the vehicle-mounted Android terminal through the UDP protocol at the same time.

[0028] In some embodiments of the present invention, the vehicle-mounted software terminal is also used to send a preset interface protocol to the vehicle-mounted intelligent terminal, so that after the vehicle-mounted intelligent terminal receives the preset interface protocol, it returns vehicle information according to the transmission format of the interface in the preset interface protocol; the preset interface protocol includes the transmission format of the specified interface.

[0029] In a specific embodiment of the present invention, when the vehicle-mounted software terminal (Android terminal) is started, the preset interface protocol is sent to the vehicle-mounted intelligent terminal TBox through the UDP protocol, wherein the preset interface protocol can be a designated preset interface protocol determined by the staff, for example, it can be the "Networked Application APP_APP-TBOX Communication Interface v1.5" protocol.

[0030] The specific configuration can be made according to the actual situation, and the present invention is not limited thereto.

[0031] In some embodiments of the present invention, the first vehicle information and the second vehicle information both include a VIN code, a SIM card number of a vehicle-mounted intelligent terminal, and a vehicle-mounted ID; the vehicle-mounted software terminal is also used to, after receiving the vehicle information, combine the VIN code, the SIM card number, the vehicle-mounted ID, and the current timestamp into a string in a preset order, calculate the string using the MD5 digest algorithm to obtain a first hash string, and generate a first signature based on the first hash string, the VIN code, the SIM card number, and the vehicle-mounted ID.

[0032] In a specific embodiment of the present invention, the first vehicle information and the second vehicle information may both include a VIN code, a SIM card number of a vehicle-mounted intelligent terminal, and a vehicle-mounted ID. After receiving the vehicle information, the vehicle-mounted software terminal may combine the VIN code, the SIM card number, the vehicle-mounted ID, and the current timestamp into a character string in a preset order, wherein the current timestamp may be the current millisecond-level unix timestamp. The preset order may be specifically set according to actual conditions, and the present invention is not limited thereto. After the character string is generated, the character string may be calculated using the MD5 digest algorithm to obtain a first hash character string, and then a first signature may be generated based on the first hash character string, the VIN code, the SIM card number, and the vehicle-mounted ID. The calculation process of the MD5 digest algorithm may be specifically set according to actual conditions, and the present invention is not limited thereto.

[0033] In some embodiments of the present invention, the server is also used to query from the Internet of Vehicles 104 according to the VIN code in the first signature to obtain second vehicle information, calculate the second vehicle information through the MD5 digest algorithm to obtain a second hash string, and compare the first hash string and the second hash string in the first signature. When the comparison is successful, it is determined that the vehicle authentication is successful.

[0034] In a specific embodiment of the present invention, after the server receives the first signature, it can query from the Internet of Vehicles according to the VIN code in the first signature to obtain the second vehicle information, wherein the second vehicle information may include the VIN code of the corresponding vehicle, the SIM card number of the on-board smart terminal and the on-board ID, and then the second vehicle information can be calculated by the MD5 digest algorithm to obtain the second hash string, and then the first hash string and the second hash string in the first signature can be compared. If the comparison is successful, it can be determined that the authentication is successful, otherwise the authentication fails.

[0035] In some embodiments of the present invention, the vehicle-mounted software terminal is further configured to send a token request instruction to the server when sending the first signature to the server; The server is also used to generate a token according to a token request instruction when the vehicle authentication is successful, and send the token to the vehicle software terminal so that the vehicle software terminal requests other business data according to the token.

[0036] In a specific embodiment of the present invention, when the vehicle-mounted software terminal sends a signature to the server, it can also send a token request instruction to the server. After the server receives the token request instruction, if the vehicle authentication is successful, a token can be generated according to the token request instruction, and then the token can be sent to the vehicle-mounted software terminal. The vehicle-mounted software terminal and the vehicle-mounted intelligent terminal can transmit data through the token, so that the vehicle-mounted software terminal can request other business data based on the token.

[0037] In some embodiments of the present invention, the vehicle-mounted software terminal is further used to encrypt the request instruction by using a public key when sending a request instruction for other business data through a token, and send the encrypted request instruction to the server; The server is also used to decrypt the request instruction using the private key after receiving the request instruction to obtain decrypted data.

[0038] In a specific embodiment of the present invention, after successful authentication, the vehicle-mounted software terminal can request other business data of the server, and the vehicle-mounted software terminal can also send request instructions for other business data through a token. In order to ensure the security of transmitted data, the data communication between the vehicle-mounted software terminal and the server is encrypted using an asymmetric encryption algorithm. The vehicle-mounted software terminal uses a public key to encrypt data and transmits the encrypted data (i.e., the encrypted request instruction) to the server. The server uses a private key to decrypt and obtain the request instruction, and then obtains the required data according to the request instruction. The private key can also be switched to a public key to encrypt the required data. Then the data required for encryption can be obtained, and then the server can send the data required for encryption to the vehicle software terminal. The vehicle software terminal can switch the public key to the private key to decrypt the data required for encryption, so as to obtain other business data corresponding to the request instruction. For example, the key of the vehicle software terminal is A, and the key of the server is B. When the vehicle software terminal encrypts the request instruction, it uses A as the public key for encryption, and when the server decrypts the request instruction, it uses B as the private key for decryption. When the server encrypts the returned data, it uses B as the public key for encryption, and when the vehicle software terminal receives the required data, it uses A as the private key for decryption. Therefore, A is in the vehicle software terminal, and B is in the server, so the security of its private key is guaranteed, thereby ensuring the security of data encryption.

[0039] like Figure 3As shown, the on-board software terminal sends a request to the on-board intelligent terminal to obtain the first vehicle information, and the on-board intelligent terminal returns the first vehicle information according to the request. The on-board software terminal generates a first signature through a signature algorithm according to the first vehicle information, and sends the first signature and a token request instruction to the server. The server queries the vehicle information from the Internet of Vehicles according to the VIN code in the first signature, and the Internet of Vehicles returns the queried second vehicle information. The server generates a second signature through a signature algorithm according to the second vehicle information, and then compares the first signature with the second signature. After the comparison is successful, a token is generated according to the token request instruction, and the authentication success information is returned to the on-board software terminal, and the token is returned. The on-board software terminal can request other business data from the server through the token.

[0040] The embodiment of the present invention can authenticate the vehicle's on-board intelligent terminal and the user's on-board software terminal through the server. When the authentication is successful, the on-board intelligent terminal and the on-board software terminal can transmit data, that is, other business data can be obtained through the generated instructions. When obtaining other business data, the data communication between the on-board software terminal and the server is encrypted using an asymmetric encryption algorithm, that is, encryption and decryption are performed using public keys and private keys, which not only ensures the uniqueness between the vehicle and the user, but also increases the confidentiality of data transmission and improves the safety of the driver.

[0041] In order to better implement the vehicle information authentication system in the embodiment of the present invention, based on the vehicle information authentication system, the embodiment of the present invention also provides a vehicle information authentication method, such as Figure 4 As shown, including: S401, obtaining first vehicle information of a vehicle, and sending the first vehicle information to a vehicle-mounted software terminal; S402, generating a first signature according to the first vehicle information, and sending the first signature to a server; S403: query according to the first signature to obtain second vehicle information, and generate a second signature according to the second vehicle information. When the first signature is successfully compared with the second signature, it is determined that the vehicle authentication is successful.

[0042] The vehicle information authentication method provided in the above embodiment can implement the technical solution described in the above vehicle information authentication system embodiment. The specific implementation principles of the above modules or units can refer to the corresponding contents in the above vehicle information authentication system embodiment, which will not be repeated here.

[0043] The vehicle information authentication system and method provided by the present invention are introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for technical personnel in this field, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A vehicle information authentication system, characterized in that: include: The vehicle-mounted intelligent terminal is used to obtain first vehicle information of the vehicle and send the first vehicle information to the vehicle-mounted software terminal; The vehicle-mounted software terminal is used to generate a first signature according to the first vehicle information and send the first signature to a server; The server is used to query according to the first signature to obtain second vehicle information, and generate a second signature according to the second vehicle information. When the first signature is successfully compared with the second signature, it is determined that the vehicle authentication is successful.

2. The vehicle information authentication system according to claim 1, characterized in that: The system also includes a vehicle network; The vehicle network is used to enter the initial information of the vehicle when the vehicle leaves the factory, and to calibrate the initial information in the vehicle-mounted intelligent terminal, so that the server can query the second vehicle information of the vehicle-mounted intelligent terminal in the vehicle network according to the first signature.

3. The vehicle information authentication system according to claim 1, characterized in that: The vehicle-mounted intelligent terminal is connected to the vehicle-mounted software terminal via a USB line, or is bound to a specified IP and port, and the vehicle-mounted intelligent terminal communicates with the vehicle-mounted software terminal via the IP and the port.

4. The vehicle information authentication system according to claim 3, characterized in that: The vehicle-mounted intelligent terminal communicates with the vehicle-mounted software terminal via the UDP protocol.

5. The vehicle information authentication system according to claim 1, characterized in that: The vehicle software terminal is also used to send a preset interface protocol to the vehicle intelligent terminal, so that after the vehicle intelligent terminal receives the preset interface protocol, it returns the vehicle information according to the transmission format of the interface in the preset interface protocol; The preset interface protocol includes a transmission format of a specified interface.

6. The vehicle information authentication system according to claim 1, characterized in that: The first vehicle information and the second vehicle information both include a VIN code, a SIM card number of the vehicle-mounted intelligent terminal and a vehicle-mounted ID; the vehicle-mounted software terminal is also used to, after receiving the vehicle information, combine the VIN code, the SIM card number, the vehicle-mounted ID and the current timestamp into a character string in a preset order, calculate the character string through the MD5 digest algorithm to obtain a first hash character string, and generate a first signature based on the first hash character string, the VIN code, the SIM card number and the vehicle-mounted ID.

7. The vehicle information authentication system according to claim 6, characterized in that: The server is also used to query the Internet of Vehicles according to the VIN code in the first signature to obtain second vehicle information, calculate the second vehicle information through the MD5 digest algorithm to obtain a second hash string, and compare the first hash string and the second hash string in the first signature. When the comparison is successful, it is determined that the vehicle authentication is successful.

8. The vehicle information authentication system according to claim 1, characterized in that: The vehicle-mounted software terminal is further configured to send a token request instruction to the server when sending the first signature to the server; The server is also used to generate a token according to the token request instruction when the vehicle authentication is successful, and send the token to the vehicle software terminal, so that the vehicle software terminal requests other business data according to the token.

9. The vehicle information authentication system according to claim 8, characterized in that: The vehicle-mounted software terminal is further used for encrypting the request instruction for the other business data by using the public key when sending the request instruction for the other business data by using the token, and sending the encrypted request instruction to the server; The server is also used to decrypt the request instruction using a private key after receiving the request instruction to obtain decrypted data.

10. A vehicle information authentication method, characterized in that: include: Acquire first vehicle information of the vehicle, and send the first vehicle information to the vehicle software terminal; Generate a first signature according to the first vehicle information, and send the first signature to a server; A query is performed based on the first signature to obtain second vehicle information, and a second signature is generated based on the second vehicle information. When the first signature is successfully compared with the second signature, it is determined that the vehicle authentication is successful.

Images