Vehicle key matching learning method and device and vehicle

Abstract

The embodiment of the invention provides a vehicle key matching learning method and device and a vehicle, and relates to the technical field of automotive electronics, the key matching learning process is divided into multiple stages, and the key matching learning process is divided into multiple stages in the initial key existence detection stage, the subsequent security authentication stage, the key information reading and analysis stage, the parameter matching stage based on classification operation and the like. The interaction between the controller and the key is realized by using different communication modes, so that the problem of easy monitoring is avoided; besides, for security authentication, a multi-level security access authentication mechanism is adopted, so that the authentication process is safer and more reliable; and finally, deciding whether to change and store learning parameters of the key or not through a specific type marked after the key information is analyzed. Through the design, the matching learning process between the controller and the key is more diversified and complicated, and the difficulty of monitoring and cracking the matching learning process is obviously increased, so that the safety of matching learning of the controller and the key is ensured.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of automotive electronics technology, and in particular to a vehicle key matching learning method, device and vehicle. Background Art

[0002] At present, vehicle remote control and keyless entry and start are mainly controlled by keys, and the matching learning between the vehicle controller and the key must be completed in advance to control the vehicle with the key. However, the traditional matching learning solution between the vehicle controller and the key has problems such as fixed encryption and decryption security algorithms and a single learning process, which makes it easy to be monitored and cracked to obtain the key, thus affecting vehicle safety. Summary of the invention

[0003] The embodiments of the present application propose a vehicle key matching learning method, device and vehicle, which solve the problem that the learning process is easily monitored and cracked, etc., can make the matching learning process between the controller and the key more diversified and complicated, and significantly increase the difficulty of the matching learning process being monitored and cracked, thereby ensuring the security of the controller and key matching learning.

[0004] In a first aspect, an embodiment of the present application provides a vehicle key matching learning method, the method comprising: After starting the learning process, detecting whether the key exists through the first communication method; After determining that the key exists, performing multi-level security authentication on the key through at least a second communication method; After determining that the security authentication is passed, reading some key information of the current key through the second communication method and / or the third communication method, and marking the type of the current key according to the key information; Based on the type of tag, a decision is made to write the learning parameters to the current key and save the learning parameters locally.

[0005] In this embodiment, the controller is used as the main body, and the key matching learning process is broken down into multiple stages. Different communication methods are used to achieve the interaction between the controller and the key in the initial key detection stage, the subsequent security authentication stage, and the key information reading and analysis stage to avoid the problem of easy monitoring. In addition, for security authentication, a multi-level security access authentication mechanism is adopted to make the authentication process safer and more reliable. Finally, by analyzing the specific type marked after the key information, it is decided whether to change and save the key learning parameters. Through the above design, the matching learning process between the controller and the key is more diversified and complicated, which significantly increases the difficulty of monitoring and cracking the matching learning process, thereby ensuring the security of the matching learning between the controller and the key.

[0006] In at least one possible implementation, the multi-level security authentication includes: sending a first security access request to the key; After receiving a first reply from the key in response to the first security access request, performing a first round of decryption on the first reply according to a preset decryption algorithm; setting a first security level according to the result of the first round of decryption and sending a second security access request to the key; After receiving a second reply from the key in response to the second security access request, performing a second round of decryption on the second reply according to a preset decryption algorithm; Setting a second security level according to the result of the second round of decryption; Similarly, whether the security authentication is passed is determined based on the set security levels.

[0007] In this embodiment, security access measures based on diagnostic protocols are introduced, and dynamic and different levels of security access requests are designed accordingly, as well as a mechanism for setting security levels for key responses, to ensure that subsequent operations of key parameter changes are released only on the basis of multi-level authentication.

[0008] In at least one possible implementation, the determining whether the security authentication is passed includes: Determine whether the security certification is passed based on the security levels set step by step; Alternatively, all the set security levels are integrated to determine whether the security authentication has been passed.

[0009] In this embodiment, the efficiency, resources and security of the learning process are taken into consideration, and implementation ideas for determining whether a multi-level security certification has been passed are provided from different dimensions. One is to directly use the response to each single round of certification as the basis for judgment; the second is to stand at a multi-level perspective, relying on the number of certifications, and finally determine whether the certification has been passed after summarizing all certification and response results.

[0010] In at least one possible implementation, the determining whether the security authentication is passed based on each security level set step by step includes: Only when a reply to the current security access request is received and the decryption is successful, the security level is cumulatively assigned and the next level of security access request is allowed to continue to be sent to the key; If no response from the key to the current security access request is received or the decryption of the current response is unsuccessful, it is determined that the authentication has failed.

[0011] In this embodiment, for the level-by-level single-round authentication, the response status and local decryption result of each security access request are strictly controlled as necessary trigger conditions for sending the next level of security access request, otherwise it will not be recognized.

[0012] In at least one possible implementation, the integration of all security levels set to determine whether the security authentication is passed includes: After setting security levels for all responses to security access requests, count the number of responses received and successfully decrypted; Based on the comparison between the statistical results and the established threshold, it is determined whether the security authentication has been passed.

[0013] In this embodiment, in order to integrate multiple rounds of authentication, all responses to access requests are first labeled with levels. Regardless of whether they are replied or decrypted successfully, the set security level is used as the label. Finally, based on the statistical results of the level labeling settings, a decision is made as to whether the complete multi-level security recognition is passed.

[0014] In at least one possible implementation, marking the type of the current key according to the key information includes: Calculate and compare the verification code based on the key information read; If the verification code comparison results are inconsistent, or the verification code comparison results are consistent and the read key information indicates that it is in an unlearned state, the current key is marked as a new key; If the verification code comparison results are consistent and the key information representation is in the learned state, then check whether the key is consistent; If the keys are inconsistent, the current key is marked as not the vehicle key; if the keys are consistent, it is determined whether the ID of the current key is in the learned list and whether the preset key information is consistent with the corresponding information read; If it is in the learned list and the information is consistent, the current key is marked as a learned key; otherwise, the current key is marked as a deleted key.

[0015] In this embodiment, a multi-layer comparison and verification mechanism is designed for obtaining key information, and different types are configured for the current key according to different comparison and verification levels and their results. Since the concept of this application is to use the definition of the current key type to complete the subsequent parameter writing and saving operations, rather than directly changing the key parameters after the security check, the security of the learning process can be further improved.

[0016] In a second aspect, an embodiment of the present application provides a vehicle key matching learning device, the device comprising: A key detection module, used to detect whether a key exists through a first communication method after starting the learning process; A multi-level security authentication module, configured to perform a multi-level security authentication on the key at least through a second communication method after determining that the key exists; A key type marking module, used to read a number of key information of the current key through the second communication mode and / or the third communication mode after determining that the security authentication is passed, and mark the type of the current key according to the key information; The parameter learning module is used to decide whether to write the learning parameters to the current key according to the type of the tag and save the learning parameters locally.

[0017] In a third aspect, an embodiment of the present application provides an electronic device, comprising: one or more processors, a memory, and one or more computer programs, wherein the memory may adopt a non-volatile storage medium, wherein the one or more computer programs are stored in the memory, and the one or more computer programs include instructions, and when the instructions are executed by the device, the electronic device performs the method as described in the first aspect or any possible implementation manner of the first aspect.

[0018] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program. When the computer-readable storage medium is run on a computer, the computer executes the method as described in the first aspect or any possible implementation of the first aspect.

[0019] In a fifth aspect, an embodiment of the present application provides a vehicle, comprising the electronic device in the embodiment of the third aspect and the computer-readable storage medium in the embodiment of the fourth aspect.

[0020] It should be understood that the second to fifth aspects of the embodiments of the present application are consistent with the technical solutions of the first aspect of the embodiments of the present application, and the beneficial effects achieved by each aspect and the corresponding feasible implementation methods are similar and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0022] Figure 1 A schematic diagram of a vehicle key matching learning method provided in an embodiment of the present application; Figure 2 A flowchart of a multi-level security authentication method provided in an embodiment of the present application; Figure 3 A flowchart of a key type marking method provided in an embodiment of the present application; Figure 4 A schematic diagram of the structure of a vehicle key matching and learning device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0023] In order to better understand the technical solution of this specification, the embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0024] It should be clear that the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this specification.

[0025] The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit this specification. The singular forms of "a", "said" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.

[0026] As for the current learning process of the vehicle body domain controller and the key, on the one hand, due to the single data interaction process, and on the other hand, the learning mechanism is relatively fixed and simple, which makes it very easy to be monitored and cracked during the matching learning process of the two.

[0027] In view of this, the embodiment of the present application provides a vehicle key matching learning method, in which the controller is used as the main body, the key matching learning process is broken down into multiple stages, and different communication methods are used to achieve the interaction between the controller and the key in the initial key detection stage and the subsequent security authentication stage, reading the key information for analysis, and matching parameters based on classification operations, so as to avoid the problem of easy monitoring; in addition, for security authentication, a multi-level security access authentication mechanism is adopted to make the authentication process more secure and reliable; finally, by analyzing the specific type marked after the key information, a decision is made whether to change and save the key learning parameters. Through the above design, the matching learning process between the controller and the key is more diversified and complicated, which significantly increases the difficulty of monitoring and cracking the matching learning process, thereby ensuring the security of the matching learning between the controller and the key.

[0028] The technical solution protected by the embodiments of the present application is described in detail below with reference to the accompanying drawings.

[0029] See also Figure 1 , is a flow chart of a vehicle key matching learning method provided in an embodiment of the present application. The flow chart of the method is described as follows: Step 101: After starting the learning process, detecting whether a key exists through a first communication method.

[0030] In actual operation, the controller may, but is not limited to, send a command to read the key ID through an IMMO (immobilizer system) chip connected to its MCU via an electrical signal, and determine whether there is a key to be matched and learned later based on the read key ID.

[0031] Therefore, the present embodiment can be supplemented by the following: first, after starting the key learning process and before detecting whether there is a key link, it can also include determining whether the established maximum number of learned keys has been reached by reading EEPROM or other means, and then executing the step of detecting whether there are keys to be subsequently matched and learned after determining that the controller still has the design space required for matching; if the established maximum key matching quantity limit has been reached, the current key matching learning process can be exited. Second, if no key is detected through the first communication method under the premise that there is still a predetermined space, a cyclic detection mechanism can be adopted.

[0032] Step 102: After determining that the key exists, perform multi-level security authentication on the key at least through a second communication method.

[0033] For example, see Figure 2 , a flowchart of a multi-level security authentication method is provided for an embodiment of the present application, specifically including: Step 201: Send a first security access request to a key.

[0034] In actual operation, as described above, security authentication can be performed using a second communication method different from the first communication method. Here is a reference illustration: a security authentication request can be sent to the target key in a low-frequency communication method through a low-frequency chip in the controller that is electrically connected to its MCU.

[0035] In addition, it can be understood that when performing security authentication, a security access mechanism can be set through the UDS diagnostic protocol, so the first security access request mentioned here is preferably a seed (security seed), and combined with the method of reading the key ID as mentioned above to determine whether the target key exists, the seed involved here can be dynamically generated through the key ID, so that the data frames of each instruction packet sent are non-fixed.

[0036] Step 202: After receiving a first reply from the key in response to the first security access request, perform a first round of decryption on the first reply according to a preset decryption algorithm.

[0037] Step 203: Set a first security level according to the result of the first round of decryption, and send a second security access request to the key.

[0038] The second security access request and the first security access request here can be different authentication mechanisms. For example, this link is a further second-level authentication. Of course, it does not exclude the use of three or more levels of different authentication methods in other embodiments. Specifically, in this embodiment, as mentioned above, the UDS diagnostic protocol is introduced, and the second security access request can preferably be a key (private key), and the key involved here can also be dynamically generated by the key ID, further making the data frames of each instruction packet sent non-fixed.

[0039] Step 204: After receiving the second reply from the key in response to the second security access request, perform a second round of decryption on the second reply according to a preset decryption algorithm.

[0040] The decryption algorithm used in the two rounds of decryption involved in this embodiment can be but is not limited to the AES128 encryption and decryption algorithm, and it can be understood that the present application may not limit the encryption and decryption algorithms used for authentication at each level, that is, different levels can further consider using different encryption and decryption algorithms to increase the complexity of the authentication mechanism, thereby ensuring the security of the interaction process.

[0041] Step 205: Set a second security level according to the result of the second round of decryption.

[0042] Step 206: Similarly, according to the set security levels, determine whether the security authentication is passed.

[0043] Here are some examples: Key ID: EB 11 E7 FA Controller Seed request → 20 EB 11 E7 FA C7 14 F8 9B 81 79 DC 94 Key Seed reply → 20 EB 11 E7 FA EA A2 9C 99 Controller Key request →21 EB 11 E7 FA EB B1 6B D1 Key reply → 21 EB 11 E7 FA The specific process is as follows:

[0044] As for how to determine whether the multi-level security authentication has been passed, the present application provides the following reference concepts in other embodiments: First, the authentication level is examined step by step, that is, if and only if the reply to the current request is received in order and the decryption is successful, the security level is assigned and the next level of security access request is allowed to continue to be sent to the key, and so on, the security levels are accumulated / accumulated. For example, the security level is set to "1" if the first level security authentication is passed, the security level is set to "2" if the second level security authentication is passed, and the security level is set to "N" if the Nth level security authentication is passed, thereby realizing the judgment of whether the multi-level security authentication is passed.

[0045] In addition, in this embodiment, if no response is received from the key pair at any level of authentication, it can be determined that an authentication abnormality occurs, and the subsequent matching learning process is exited.

[0046] Second, the security level set corresponding to all security access requests is integrated for determination. First of all, it should be noted that in the aforementioned authentication process, the security level is set according to the decryption result. The decryption result here can include failure, and the unsuccessful decryption can refer to the failure to decrypt the current reply content received, or the failure to receive a reply, resulting in no decryption. Therefore, in this concept, the security level can be set to "1" for the level of authentication where the decryption is successful, and the security level can be set to "0" for the level of authentication where the decryption is unsuccessful. Finally, the security levels of all multi-level authentications are summarized. If they exceed the established threshold, it is determined that the authentication is passed. For example, the level below three authentications (including level three) must be no less than 100% (that is, all "1") to be determined to be passed, and in the embodiment of level four and more authentications, more than 90% (that is, allowing very individual authentication cases to have unsuccessful decoding results) can be used as a standard to determine whether the security authentication is passed.

[0047] Continuing from the above, step 103: after determining that the security authentication is passed, read some key information of the current key through the second communication method and / or the third communication method, and mark the type of the current key according to the key information.

[0048] To elaborate, the key information mentioned here may include: key secret key, key rolling code, key wake-up code, key learning status, etc. read through diagnostic DID instructions. It is worth noting that this link can also be implemented in different communication methods. For example, the third communication method mentioned here is different from the second communication method mentioned above. It can be but is not limited to sending instructions to read certain information to the current target key through a high-frequency chip in the controller that is electrically connected to its MCU in a high-frequency communication method (antenna, etc.).

[0049] It can also be added here that no matter which communication method, such as the second or third method, is used, if the key information is not read, the matching learning process will be exited.

[0050] Further to the above, according to the method of marking the type of the current key according to the key information, you can refer to Figure 3 Indicatively, it may include: Step 301: Calculate and compare the verification code based on the read key information.

[0051] Step 302: If the verification code comparison result is inconsistent, or the verification code comparison result is consistent and the read key information indicates that the key is in an unlearned state, the current key is marked as a new key.

[0052] Step 303: If the verification code comparison result is consistent and the key information representation is in a learned state, then check whether the key is consistent.

[0053] Step 304: If the keys are inconsistent, the current key is marked as not being the vehicle key; if the keys are consistent, it is determined whether the ID of the current key is in the learned list and whether the preset key information (for example, the aforementioned rolling code, wake-up code, etc.) is consistent with the corresponding information read.

[0054] Step 305: If the key is in the learned list and the information is consistent, the current key is marked as a learned key; otherwise, the current key is marked as a deleted key.

[0055] After step 103, step 104 is executed: according to the type of the tag, it is decided to write the learning parameters into the current key and save the learning parameters locally.

[0056] For example, if the tag type is the new key or the deleted key mentioned above, the matching parameter writing and saving operations can be triggered, while for the other vehicle keys or learned keys mentioned above, no writing and saving operations are performed. In other words, it can be understood that if the current key type does not meet the matching learning requirements, the matching learning process can be exited.

[0057] The writing process involved in this step can be referred to as follows: the domain controller can send parameters such as ID, number, key (SK), wake-up code, etc. to the current key through low-frequency communication. After the current key receives these parameters, it calculates the CRC of the current information for verification. If the verification is correct, the learning state is set to 1 and the learning information is stored in the EEPROM; The saving process involved in this step can be referred to as follows: the domain controller records the current key's ID, number, key, rolling code and other parameters into a pre-built learning list to provide a reference and comparison basis for subsequent matching learning processing.

[0058] See also Figure 4 Based on the same inventive concept, the embodiment of the present application also provides a vehicle key matching learning device, which includes: A key detection module 401 is used to detect whether a key exists through a first communication method after starting the learning process; A multi-level security authentication module 402, configured to perform a multi-level security authentication on the key at least through a second communication method after determining that the key exists; The key type marking module 403 is used to read some key information of the current key through the second communication mode and / or the third communication mode after determining that the security authentication is passed, and mark the type of the current key according to the key information; The parameter learning module 404 is used to decide whether to write the learning parameters to the current key according to the type of the tag, and save the learning parameters locally.

[0059] Based on the same inventive concept, an embodiment of the present application also provides an electronic device, including at least one processor, which is used to execute a computer program stored in a memory to implement the flowchart steps of the above-mentioned vehicle key matching learning method provided in the embodiment of the present application.

[0060] Optionally, the processor may specifically be a central processing unit, a specific ASIC, or one or more integrated circuits for controlling program execution.

[0061] Optionally, the electronic device may further include a memory connected to at least one processor, and the memory may include ROM, RAM, and disk storage. The memory is used to store data required by the processor when it is running, that is, it stores instructions that can be executed by at least one processor, and at least one processor executes the methods mentioned in the above embodiments by executing the instructions stored in the memory. Among them, the number of memories is one or more. Among them, the number of memories is one or more.

[0062] An embodiment of the present application also provides a computer storage medium, wherein the computer storage medium stores computer instructions. When the computer instructions are executed on a computer, the computer executes the methods mentioned in the above embodiments.

[0063] Based on the same inventive concept, the embodiment of the present application further provides a vehicle, comprising at least the above electronic device and / or computer-readable storage medium. The selection of the vehicle can be determined based on the correct understanding and reasonable implementation of the above solution by those skilled in the art.

[0064] The above description is only a preferred embodiment of this specification and is not intended to limit this specification. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of this specification should be included in the scope of protection of this specification.

Claims

1. A vehicle key matching learning method, characterized in that: The method comprises: After starting the learning process, detecting whether the key exists through the first communication method; After determining that the key exists, performing multi-level security authentication on the key at least through a second communication method; After determining that the security authentication is passed, reading some key information of the current key through the second communication method and / or the third communication method, and marking the type of the current key according to the key information; Based on the type of tag, a decision is made to write the learning parameters to the current key and save the learning parameters locally.

2. The vehicle key matching learning method according to claim 1, characterized in that: The multi-level security authentication includes: sending a first security access request to the key; After receiving a first reply from the key in response to the first security access request, performing a first round of decryption on the first reply according to a preset decryption algorithm; setting a first security level according to the result of the first round of decryption and sending a second security access request to the key; After receiving a second reply from the key in response to the second security access request, performing a second round of decryption on the second reply according to a preset decryption algorithm; Setting a second security level according to the result of the second round of decryption; Similarly, whether the security authentication is passed is determined based on the set security levels.

3. The vehicle key matching learning method according to claim 2, characterized in that: The determination of whether the security authentication is passed includes: Determine whether the security certification is passed based on the security levels set step by step; Alternatively, all the set security levels are integrated to determine whether the security authentication has been passed.

4. The vehicle key matching learning method according to claim 3, characterized in that: The step of determining whether the security authentication is passed based on each security level set step by step includes: Only when a reply to the current security access request is received and the decryption is successful, the security level is cumulatively assigned and the next level of security access request is allowed to continue to be sent to the key; If no response from the key to the current security access request is received or the decryption of the current response is unsuccessful, it is determined that the authentication has failed.

5. The vehicle key matching learning method according to claim 3, characterized in that: The above-mentioned fusion of all security levels set to determine whether the security certification has been passed includes: After setting security levels for all responses to security access requests, count the number of responses received and successfully decrypted; Based on the comparison between the statistical results and the established threshold, it is determined whether the security authentication has been passed.

6. The vehicle key matching learning method according to any one of claims 1 to 5, characterized in that: The method of marking the type of the current key according to the key information includes: Calculate and compare the verification code based on the key information read; If the verification code comparison results are inconsistent, or the verification code comparison results are consistent and the read key information indicates that it is in an unlearned state, the current key is marked as a new key; If the verification code comparison results are consistent and the key information representation is in the learned state, then check whether the key is consistent; If the keys are inconsistent, the current key is marked as not the vehicle key; if the keys are consistent, it is determined whether the ID of the current key is in the learned list and whether the preset key information is consistent with the corresponding information read; If it is in the learned list and the information is consistent, the current key is marked as a learned key; otherwise, the current key is marked as a deleted key.

7. A vehicle key matching learning device, characterized in that: The device comprises: A key detection module, used to detect whether a key exists through a first communication method after starting the learning process; A multi-level security authentication module, configured to perform a multi-level security authentication on the key at least through a second communication method after determining that the key exists; A key type marking module, used to read a number of key information of the current key through the second communication mode and / or the third communication mode after determining that the security authentication is passed, and mark the type of the current key according to the key information; The parameter learning module is used to decide whether to write the learning parameters to the current key according to the type of the tag and save the learning parameters locally.

8. An electronic device, characterized in that: include: One or more processors, a memory and one or more computer programs, wherein the one or more computer programs are stored in the memory, and the one or more computer programs include instructions, and when the instructions are executed by the electronic device, the electronic device executes the vehicle key matching learning method according to any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the vehicle key matching learning method according to any one of claims 1 to 6 is implemented.

10. A vehicle, characterized in that: The vehicle is provided with the electronic device of claim 8 or the computer-readable storage medium of claim 9.

Images