A vehicle key matching learning method and device and a vehicle

Abstract

Embodiments of the present application propose a vehicle key matching learning method and device and a vehicle, relating to the technical field of automobile electronics, which disassembles the key matching learning process into multiple stages, and uses different communication modes to realize the interaction between the controller and the key in the initial stage of detecting whether there is a key and the subsequent stages of security authentication, reading key information for analysis, matching parameters based on classification operation, etc., to avoid the problem of being easily monitored. In addition, for security authentication, a multi-level security access authentication mechanism is adopted to make the authentication process more secure and reliable. Finally, whether to change and save the learning parameters of the key is decided by analyzing the specific type marked by the key information. Through the above design, the matching learning process between the controller and the key is more diversified and complex, significantly increasing the difficulty of the matching learning process being monitored and cracked, thereby ensuring the security of the matching learning of the controller and the key.

Description

TECHNICAL FIELD

[0001] Embodiments of the present application relate to the field of automotive electronics, and in particular to a vehicle key matching learning method, device and vehicle. BACKGROUND

[0002] Currently, vehicle remote control, keyless entry and starting are mainly controlled by the key, and the key must be pre-learned for the matching between the vehicle controller and the key. The traditional vehicle controller and key matching learning scheme has the problems of fixed encryption and decryption security algorithm, single learning process, etc., which makes it easy to be monitored and cracked to obtain the key, thereby affecting the safety of the vehicle. SUMMARY

[0003] Embodiments of the present application propose a vehicle key matching learning method, device and vehicle, which solves the problem that the learning process is easy to be monitored and cracked, and makes the matching learning process between the controller and the key more diversified and complex, significantly increasing the difficulty of monitoring and cracking the matching learning process, thereby ensuring the safety of the controller and key matching learning.

[0004] In a first aspect, embodiments of the present application provide a vehicle key matching learning method, the method comprising:

[0005] After starting the learning process, detecting whether there is a key through a first communication mode;

[0006] After determining that there is a key, performing multi-level security authentication on the key through at least a second communication mode;

[0007] After determining that the security authentication is passed, reading a plurality of key information of the current key through the second communication mode and / or a third communication mode, and marking the type of the current key according to the key information;

[0008] According to the marked type, deciding to write learning parameters to the current key, and saving the learning parameters locally.

[0009] In this embodiment, the controller is taken as the main body, the key matching learning process is divided into multiple stages, and different communication modes are used to realize the interaction between the controller and the key in the initial stage of detecting whether there is a key and the subsequent stages of security authentication, reading key information for analysis, etc., avoiding the problem of easy monitoring. In addition, for security authentication, a multi-level security access authentication mechanism is adopted to make the authentication process more secure and reliable. Finally, the specific type marked by analyzing the key information is used to decide whether to change and save the learning parameters of the key. Through the above design, the matching learning process between the controller and the key is more diversified and complex, significantly increasing the difficulty of monitoring and cracking the matching learning process, thereby ensuring the safety of the controller and key matching learning.

[0010] In at least one possible implementation, the multi-level security authentication comprises:

[0011] sending a first security access request to the key;

[0012] after receiving a first reply from the key in response to the first security access request, performing a first round of decryption on the first reply according to a preset decryption algorithm;

[0013] setting a first security level according to a result of the first round of decryption, and sending a second security access request to the key;

[0014] after receiving a second reply from the key in response to the second security access request, performing a second round of decryption on the second reply according to the preset decryption algorithm;

[0015] setting a second security level according to a result of the second round of decryption;

[0016] and so on, and determining whether to pass the security authentication according to the set security levels.

[0017] In the embodiment, security access measures based on a diagnostic protocol are introduced, and dynamic and different security access requests and a mechanism for setting security levels of responses of the key are designed according to the security access measures, so that the subsequent operation of changing parameters of the key is released only on the basis of multi-level authentication.

[0018] In at least one possible implementation, the determining whether to pass the security authentication comprises:

[0019] determining whether to pass the security authentication based on the security levels set level by level;

[0020] or, determining whether to pass the security authentication by integrating all the set security levels.

[0021] In the embodiment, the implementation ideas for determining whether to pass the multi-level security authentication are provided from different dimensions in consideration of efficiency, resources and security of a learning process, one of which is to directly use a response of each single round of authentication as a basis for determination, and the other of which is to determine whether to pass the authentication by summarizing all the authentication and response results based on the number of levels.

[0022] In at least one possible implementation, the determining whether to pass the security authentication based on the security levels set level by level comprises:

[0023] only when a reply to a current security access request is received and decryption is successful, a security level is accumulated and assigned, and a next-level security access request is allowed to be sent to the key;

[0024] If no reply is received from the key to the current security access request or the current reply is not successfully decrypted, it is determined that the authentication is not passed.

[0025] In this embodiment, for the step-by-step single round authentication, the response state of each security access request and the local decryption result are strictly controlled as the necessary trigger condition for sending the next level of security access request, otherwise it is not passed.

[0026] In at least one possible implementation, the determining whether to pass the security authentication includes:

[0027] After setting the security level for the response of all security access requests, the number of responses received and successfully decrypted is counted;

[0028] According to the comparison of the statistical result and the predetermined threshold, it is determined whether to pass the security authentication.

[0029] In this embodiment, for the fusion multi-round authentication, first, the responses of all access requests are marked with levels, whether they are replied or successfully decrypted, and the set security level is marked, and finally, according to the statistical result of the level marking, it is determined whether the complete multi-level security cognition is passed.

[0030] In at least one possible implementation, the marking the type of the current key according to the key information includes:

[0031] The verification code is calculated and compared based on the read key information;

[0032] If the verification code comparison result is inconsistent, or the verification code comparison result is consistent and the read key information represents the unlearned state, the current key is marked as a new key;

[0033] If the verification code comparison result is consistent and the key information represents the learned state, the keys are compared for consistency;

[0034] If the keys are inconsistent, the current key is marked as a non-vehicle key; if the keys are consistent, it is determined whether the ID of the current key is in the learned list and whether the preset key information is consistent with the read corresponding information;

[0035] If it is in the learned list and the information is consistent, the current key is marked as a learned key; otherwise, the current key is marked as a deleted key.

[0036] The multi-layer comparison and verification mechanism is designed for obtaining the key information in the embodiment, and different types are configured for the current key according to different comparison and verification levels and their results. Since the application adopts the definition of the current key type to complete the subsequent parameter writing and saving operation instead of directly changing the key parameters after the security verification, the security of the learning process can be further improved.

[0037] In a second aspect, the embodiments of the present application provide a vehicle key matching learning device, the device comprising:

[0038] A key detection module is configured to detect whether there is a key through a first communication mode after starting the learning process.

[0039] A multi-level security authentication module is configured to perform multi-level security authentication on the key through at least a second communication mode after determining that there is a key.

[0040] A key type marking module is configured to read a plurality of key information of the current key through the second communication mode and / or the third communication mode after determining that the security authentication is passed, and mark the type of the current key according to the key information.

[0041] A parameter learning module is configured to decide to write learning parameters to the current key according to the marked type, and save the learning parameters locally.

[0042] In a third aspect, the embodiments of the present application provide an electronic device, which comprises one or more processors, a memory, and one or more computer programs, the memory can be a non-volatile storage medium, wherein the one or more computer programs are stored in the memory, and the one or more computer programs comprise instructions, when the instructions are executed by the device, the electronic device executes the method in the first aspect or any possible implementation manner of the first aspect.

[0043] In a fourth aspect, the embodiments of the present application provide a computer readable storage medium, which stores a computer program, when the computer program is run on a computer, the computer executes the method in the first aspect or any possible implementation manner of the first aspect.

[0044] In a fifth aspect, the embodiments of the present application provide a vehicle, which comprises the electronic device in the third aspect and the computer readable storage medium in the fourth aspect.

[0045] It should be understood that the second to fifth aspects of the embodiments of the present application are consistent with the technical solution of the first aspect of the embodiments of the present application, and the beneficial effects obtained by each aspect and the corresponding feasible implementation manner are similar, which will not be repeated. BRIEF DESCRIPTION OF DRAWINGS

[0046] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed to be used in the embodiments will be briefly introduced as follows. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without any creative effort on the basis of these drawings.

[0047] Figure 1 A flowchart of a vehicle key matching learning method provided in the embodiments of the present application;

[0048] Figure 2 A flowchart of a multi-level security authentication method provided in the embodiments of the present application;

[0049] Figure 3 A flowchart of a key type marking method provided in the embodiments of the present application;

[0050] Figure 4 A structural schematic diagram of a vehicle key matching learning device provided in the embodiments of the present application. DETAILED DESCRIPTION

[0051] In order to better understand the technical solutions of the present application, the embodiments of the present application will be described in detail below with reference to the drawings.

[0052] It should be clear that the described embodiments are only some of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without any creative effort fall within the scope of protection of the present application.

[0053] The terms used in the embodiments of the present application are only for the purpose of describing the specific embodiments, and are not intended to limit the present application. The singular forms "a", "an" and "the" used in the embodiments of the present application and the appended claims are also intended to include the plural forms, unless the context clearly indicates otherwise.

[0054] With the current learning process of the vehicle body domain controller and the key, on the one hand, due to the single data interaction process, on the other hand, the learning mechanism is relatively fixed and simple, which leads to the fact that it is easy to be monitored and cracked during the matching learning process of the two.

[0055] In view of this, the embodiment of the present application provides a vehicle key matching learning method, in which the controller is taken as the main body, the key matching learning process is divided into multiple stages, and different communication modes are used to realize the interaction between the controller and the key in the initial stage of detecting whether the key exists and the subsequent stages of security authentication, reading key information for analysis, matching parameters based on classification operation, etc., thereby avoiding the problem of being easily monitored. In addition, for security authentication, a multi-level security access authentication mechanism is adopted, so that the authentication process is more secure and reliable. Finally, whether to change and save the learning parameters of the key is decided by analyzing the specific type marked by the key information. Through the above design, the matching learning process between the controller and the key is more diversified and complex, significantly increasing the difficulty of monitoring and cracking the matching learning process, thereby ensuring the security of the matching learning of the controller and the key.

[0056] The technical solutions protected by the embodiments of the present application will be described in detail below with reference to the drawings.

[0057] Please refer to Figure 1 The flowchart of a vehicle key matching learning method provided by the embodiment of the present application is shown. The flowchart of the method is described as follows:

[0058] Step 101: After starting the learning process, whether the key exists is detected by the first communication mode.

[0059] In actual operation, the controller can, but is not limited to, issue an instruction to read the key ID through the IMMO (anti-theft system) chip connected with the MCU electrical signal of the controller, and determine whether the key to be matched and learned exists according to the read key ID.

[0060] It can also be supplemented that, first, after starting the key learning process, and before detecting whether the key exists, it can also include judging whether the predetermined maximum number of learned keys has been reached by reading EEPROM, etc., and determining that the controller still has a design allowance for matching, and then performing the step of detecting whether the key to be matched and learned exists. If the predetermined maximum number of key matching has been reached, the current key matching learning process can be exited. Second, if the key is not detected by the first communication mode, a cyclic detection mechanism can be used.

[0061] Step 102: After determining that the key exists, at least the second communication mode is used to perform multi-level security authentication on the key.

[0062] For example, please refer to Figure 2 The flowchart of a multi-level security authentication method provided by the embodiment of the present application is shown, which specifically includes:

[0063] Step 201: send a first security access request to the key.

[0064] In actual operation, the security authentication can be performed using a second communication mode different from the first communication mode, as described above. Here, a referenceable example is given: the security authentication request can be sent to the target key in a low-frequency communication mode through a low-frequency chip in the controller connected to the MCU electrical signal.

[0065] In addition, it can be understood that when performing security authentication, the security access mechanism can be set through the UDS diagnostic protocol, so that the first security access request mentioned here is preferably a seed (security seed), and the target key is determined to exist by combining the method of reading the key ID as described above, so that the seed mentioned here can be dynamically generated by the key ID, so that the data frames of each instruction packet sent are non-fixed.

[0066] Step 202: After receiving the first reply of the key in response to the first security access request, performing the first round of decryption on the first reply according to the preset decryption algorithm.

[0067] Step 203: Set the first security level according to the result of the first round of decryption, and send a second security access request to the key.

[0068] The second security access request and the first security access request here can be different authentication mechanisms, such as a further second-level authentication in this link, and of course, it is not excluded that different authentication methods of three or more levels are used in other embodiments. Specifically, in the present embodiment, as mentioned above, the UDS diagnostic protocol is introduced, the second security access request can preferably be a key (private key), and the key mentioned here can also be dynamically generated by the key ID, further making the data frames of each instruction packet sent non-fixed.

[0069] Step 204: After receiving the second reply of the key in response to the second security access request, performing the second round of decryption on the second reply according to the preset decryption algorithm.

[0070] The decryption algorithm used in the two rounds of decryption involved in the present embodiment can be but not limited to the AES128 encryption and decryption algorithm, and it can be understood that the present application can not limit the encryption and decryption algorithm used in each level of authentication, that is, different levels can further consider using different encryption and decryption algorithms to improve the complexity of the authentication mechanism, thereby ensuring the security of the interaction process.

[0071] Step 205: Set the second security level according to the result of the second round of decryption.

[0072] Step 206: In this way, according to the set number of security levels, it is determined whether the security authentication is passed.

[0073] For example:

[0074] Key ID: EB 11 E7 FA

[0075] Controller Seed request -> 20 EB 11 E7 FA C7 14 F8 9B 81 79 DC 94

[0076] Key Seed reply -> 20 EB 11 E7 FA EA A2 9C 99

[0077] Controller Key request -> 21 EB 11 E7 FA EB B1 6B D1

[0078] Key Key reply -> 21 EB 11 E7 FA

[0079] The specific process is as follows:

[0080] As for how to determine whether the multi-level security authentication is passed, the present application gives the following reference concept in another embodiment:

[0081] One is to examine the authentication level by level, that is, only when the reply to the current request is received in order and the decryption is successful, the security level is assigned and the next level of security access request is allowed to be sent to the key, and so on. The security level is accumulated, for example, the security level is set to "1" by passing the first level of security authentication, the security level is set to "2" by passing the second level of security authentication, and the security level is set to "N" by passing the Nth level of security authentication, thereby realizing the determination of whether the multi-level security authentication is passed.

[0082] In addition, in this embodiment, if no reply to any level of authentication is received from the key, it can be determined that the authentication is abnormal, and the subsequent matching learning processing flow is exited.

[0083] Secondly, the security level corresponding to the setting of the entire security access request is determined. First of all, it needs to be pointed out that, according to the decryption result, the security level is set, and the decryption result here can include unsuccessful decryption, which can mean that the current reply content received is decrypted unsuccessfully, or no reply is received, so that the decryption cannot be performed. Therefore, in this concept, the security level of the authentication level for which the decryption is successful can be set to "1", and the security level of the authentication level for which the decryption is unsuccessful can be set to "0". Finally, the security levels of all multi-level authentications are summarized, and if the security level exceeds the predetermined threshold, it is determined that the authentication is passed. For example, three-level authentication (including three levels) must be no less than 100% (that is, all "1") to determine that it is passed, and in the four-level and more authentication embodiment, more than 90% (that is, a few authentication instances can have decoding unsuccessful results) can be used as a standard to determine whether the security authentication is passed.

[0084] In continuation of the foregoing, step 103: after determining that the security authentication is passed, reading the key information of the current key through the second communication mode and / or the third communication mode, and marking the type of the current key according to the key information.

[0085] In detail, the key information mentioned here can include the key key, the key rolling code, the key wake-up code, and the key learning state read by the diagnostic DID instruction. It is worth noting that this link can also be implemented by different communication modes, for example, the third communication mode mentioned here is different from the second communication mode mentioned above, which can be but is not limited to sending a reading instruction to the target key through a high-frequency chip connected to the MCU signal in the controller to the current target key in a high-frequency communication mode (antenna, etc.).

[0086] It can also be supplemented here that, regardless of the second, third, or any other communication mode, if the key information is not read, the matching learning process is exited.

[0087] Further, according to the way of marking the type of the current key according to the key information, reference can be made to Figure 3 For example, it can specifically include:

[0088] Step 301: calculating and comparing the check code based on the read key information.

[0089] Step 302: if the check code comparison result is inconsistent, or the check code comparison result is consistent and the read key information represents the unlearned state, the current key is marked as a new key.

[0090] Step 303: if the check code comparison result is consistent and the key information represents the learned state, the key is compared to determine whether it is consistent.

[0091] Step 304: if the keys are inconsistent, mark the current key as a non-vehicle key; if the keys are consistent, determine whether the ID of the current key is in the learned list and whether the preset key information (for example, the aforementioned rolling code, wake-up code, etc.) is consistent with the corresponding information read.

[0092] Step 305: if the ID is in the learned list and the information is consistent, mark the current key as a learned key; otherwise, mark the current key as a deleted key.

[0093] After step 103, step 104 is performed: according to the type of the mark, decide to write the learning parameters to the current key, and save the learning parameters locally.

[0094] For example, the mark type is the aforementioned new key or deleted key, the matching parameter writing and saving operation can be triggered, and for the aforementioned other vehicle keys or learned keys, no writing and saving processing is performed, that is, it can be understood that if the type of the current key does not meet the matching learning requirement, the matching learning process can be exited.

[0095] The writing process involved in this step can be referred to as follows: the domain controller can send the ID, number, key (SK), wake-up code, etc. parameters to the current key through a low-frequency communication mode, and the current key calculates the CRC of the current information for verification after receiving these parameters. If the verification is correct, set the learning state to 1 and store these learning information into the EEPROM;

[0096] The saving process involved in this step can be referred to as follows: the domain controller records the ID and number, key, rolling code, etc. parameters of the current key into the pre-constructed learned list, to provide a reference and comparison basis for subsequent matching learning processing.

[0097] Please refer to Figure 4 Based on the same inventive concept, the embodiments of the present application also provide a vehicle key matching learning device, which comprises:

[0098] The key detection module 401 is configured to detect whether there is a key through a first communication mode after starting the learning process;

[0099] The multi-level security authentication module 402 is configured to perform multi-level security authentication on the key through at least a second communication mode after determining that there is a key;

[0100] The key type marking module 403 is configured to read a plurality of key information of the current key through the second communication mode and / or a third communication mode after determining that the security authentication is passed, and mark the type of the current key according to the key information;

[0101] The parameter learning module 404 is configured to determine to write the learning parameter to the current key according to the type of the label, and save the learning parameter locally.

[0102] Based on the same inventive concept, the embodiment of the present application further provides an electronic device, comprising at least one processor, and the processor is configured to execute a computer program stored in a memory, so as to realize the process steps of the vehicle key matching learning method provided by the embodiment of the present application.

[0103] Optionally, the processor can be a central processor, a specific ASIC, and can be one or more integrated circuits for controlling program execution.

[0104] Optionally, the electronic device can further comprise a memory connected with the at least one processor, and the memory can comprise a ROM, a RAM and a disk memory. The memory is used to store data required by the processor during running, that is, the memory stores instructions executable by the at least one processor. The at least one processor executes the instructions stored in the memory to execute the method mentioned in each of the above embodiments. The number of the memory is one or more.

[0105] The embodiment of the present application further provides a computer storage medium, wherein the computer storage medium stores computer instructions, and when the computer instructions are run on a computer, the computer executes the method mentioned in each of the above embodiments.

[0106] Based on the same inventive concept, the embodiment of the present application further provides a vehicle, comprising at least the above electronic device and / or computer readable storage medium. The selection of the vehicle can be determined based on the correct understanding and reasonable implementation of the foregoing scheme by the person skilled in the art.

[0107] The above only describes the preferred embodiments of the present application, and does not limit the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A vehicle key matching learning method, characterized in that, The method includes: After starting the learning process, the presence of a key is detected through the first communication method; After confirming the existence of the key, the key is authenticated at least through a second communication method with multiple levels of security. After the security authentication is confirmed to be successful, several key information of the current key is read through the second and / or third communication methods, and the type of the current key is marked according to the key information; Based on the type of tag, the decision is made to write the learning parameters to the current key and save the learning parameters locally.

2. The vehicle key matching learning method according to claim 1, characterized in that, The multi-level security authentication includes: Send the first secure access request to the key; Upon receiving the first response from the key in response to the first secure access request, the first response is decrypted in the first round according to the preset decryption algorithm; Based on the results of the first round of decryption, a first security level is set, and a second secure access request is sent to the key; Upon receiving the second response from the key in response to the second secure access request, a second round of decryption is performed on the second response according to a preset decryption algorithm; A second security level is set based on the results of the second round of decryption; Similarly, based on several set security levels, it is determined whether the security certification has been passed.

3. The vehicle key matching learning method according to claim 2, characterized in that, The determination of whether the security authentication has been passed includes: Based on the progressively set security levels, a determination is made as to whether security authentication is passed. Alternatively, it can combine all the set security levels to determine whether security authentication is successful.

4. The vehicle key matching learning method according to claim 3, characterized in that, The determination of whether security authentication is passed, based on the progressively set security levels, includes: The security level is incremented only when a response to the current security access request is received and decryption is successful, and the next level of security access request is allowed to be sent to the key. If no response is received from the key for the current secure access request, or if the decryption of the current response fails, the authentication is deemed unsuccessful.

5. The vehicle key matching learning method according to claim 3, characterized in that, The determination of whether to pass security authentication includes all security levels set by the fusion system: After setting a security level for the responses to all secure access requests, count the number of responses that were received and successfully decrypted. Based on the comparison of statistical results with predetermined thresholds, it is determined whether security certification has been passed.

6. The vehicle key matching learning method according to any one of claims 1 to 5, characterized in that, The step of marking the type of the current key based on the key information includes: The checksum is calculated and compared based on the read key information; If the verification code comparison results are inconsistent, or if the verification code comparison results are consistent but the key information read is in an unlearned state, then the current key will be marked as a new key. If the verification code comparison results are consistent and the key information representation is in the learned state, then compare whether the keys are consistent. If the keys do not match, the current key is marked as not being the key for this vehicle; if the keys match, it is determined whether the ID of the current key is in the learned list and whether the preset key information matches the corresponding information read. If the key is in the learned list and the information matches, mark the current key as a learned key; otherwise, mark the current key as a deleted key.

7. A vehicle key matching learning device, characterized in that, The device includes: The key detection module is used to detect the presence of a key via a first communication method after the learning process is started. A multi-level security authentication module is used to perform multi-level security authentication on the key at least through a second communication method after determining that the key exists; The key type marking module is used to read several key information of the current key through a second communication method and / or a third communication method after the security authentication is confirmed to be successful, and to mark the type of the current key according to the key information; The parameter learning module is used to decide which learning parameters to write to the current key based on the type of the tag, and save the learning parameters locally.

8. An electronic device, characterized in that, include: One or more processors, a memory, and one or more computer programs, wherein the one or more computer programs are stored in the memory, and the one or more computer programs include instructions that, when executed by the electronic device, cause the electronic device to perform the vehicle key matching learning method according to any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When executed by a processor, the computer program implements the vehicle key matching learning method according to any one of claims 1 to 6.

10. A vehicle, characterized in that, The vehicle is equipped with the electronic device of claim 8 or the computer-readable storage medium of claim 9.

Images