Controller secret key filling method and device, service system, diagnostic apparatus and vehicle

Abstract

The invention relates to the technical field of vehicles, in particular to a controller secret key filling method and device, a service system, a diagnostic instrument and a vehicle, and the method comprises the steps: storing a reference secret key verification value issued by a secret key management system when an original controller is filled with a secret key; when the original controller is replaced with a new controller, if the diagnosis equipment successfully logs in, a key filling request sent by the diagnosis equipment and vehicle end information of a target vehicle are obtained, derived parameters are generated according to the vehicle end information, a key management system generates a derived key and a derived key check value according to the derived parameters, and the derived key check value is sent to the diagnosis equipment; a reference secret key verification value of the target vehicle is searched according to the vehicle identifier, if the verification value of the derived secret key is consistent with the reference secret key verification value, a ciphertext of the derived secret key is issued to diagnosis equipment, and the diagnosis equipment carries out secret key filling on a new controller of the target vehicle based on the ciphertext of the derived secret key. According to the method, the problems of low secret key filling efficiency, low safety, low consistency and the like of the vehicle controller are solved.

Description

Technical Field

[0001] The present application relates to the field of vehicle technology, and in particular to a controller key filling method, device, service system, diagnostic instrument and vehicle. Background Art

[0002] As the safety of electric vehicles has attracted much attention, most electric vehicles now require communication authentication, and only after successful communication authentication can operations such as unlocking, high-voltage power-on, vehicle start, and power output be allowed. It should be pointed out that there are two types of controllers related to communication authentication, namely the authentication initiator and the authentication verification and result feedback party, both of which use symmetric keys.

[0003] However, in the prior art, operators write the keys of the controllers through offline electrical inspection equipment, which may lead to failure or omission of writing due to improper manual operation, resulting in low success rate and efficiency of key filling. When the controller of an electric vehicle is replaced after sale, it is either returned to the factory to apply for key filling or to specify a controller with a key. The former has low security, and the latter has high requirements and is often difficult to achieve. As a result, the entire after-sales controller replacement process is inefficient and unsafe. Summary of the invention

[0004] The present application provides a controller key filling method, device, service system, diagnostic instrument and vehicle to solve the problems of low efficiency, low security and low consistency of vehicle controller key filling.

[0005] The first aspect of the present application provides a controller key filling method, which is applied to a front-end service system, and includes the following steps: when filling the key in the original controller, storing the reference key verification value issued by the key management system; when the original controller is replaced with a new controller, if the diagnostic device successfully logs in, establishing a communication connection between the front-end service system and the diagnostic device; obtaining the key filling request sent by the diagnostic device and the vehicle-side information of the target vehicle, and identifying the original controller identifier, vehicle identifier and supplier identifier in the vehicle-side information; responding to the key filling request, generating derived parameters according to the controller identifier, vehicle identifier and supplier identifier, and uploading the derived parameters to the key management system, wherein the key management system generates a derived key and a derived key verification value according to the derived parameters; searching for the reference key verification value of the target vehicle according to the vehicle identifier, and if the verification value of the derived key is consistent with the reference key verification value, sending the ciphertext of the derived key to the diagnostic device, wherein the diagnostic device performs key filling on the new controller of the target vehicle based on the ciphertext of the derived key.

[0006] Optionally, in an embodiment of the present application, the front-end service system and the key management system are both deployed in the cloud.

[0007] Optionally, in an embodiment of the present application, the front service system has at least one of a vehicle model management function, a supplier management function, a parts management function, a vehicle management function, a key management function and a database management function.

[0008] Optionally, in an embodiment of the present application, establishing a communication connection between the front-end service system and the diagnostic device includes: completing two-way authentication between the front-end service system and the diagnostic device through the TLS protocol; and establishing a communication connection through the https protocol after the two-way authentication passes.

[0009] A second aspect of the present application provides a controller key filling method, which is applied to a diagnostic device and includes the following steps: obtaining a target vehicle authorization code from the vehicle manufacturer; connecting to the target vehicle after verifying the target vehicle using the authorization code; obtaining the vehicle-side information of the target vehicle, and after successful login according to the login data sent by the front service system, establishing a communication connection between the front service system and the diagnostic device, uploading a key filling request and the vehicle-side information of the target vehicle to the front service system, wherein the front service system responds to the key filling request, generates derived parameters, and uploads the derived parameters to the key management system, wherein the key management system generates a derived key and a derived key verification value according to the derived parameters, searches for a reference key verification value of the target vehicle according to the vehicle identification, and if the derived key verification value is consistent with the reference key verification value, sends the ciphertext of the derived key to the diagnostic device; and performs key filling on the new controller of the target vehicle based on the ciphertext of the derived key.

[0010] The third aspect of the present application provides a controller key filling device, which is applied to a front-end service system, including: a storage module, which is used to store a reference key verification value issued by a key management system when the original controller is filled with keys; a communication module, which is used to establish a communication connection between the front-end service system and the diagnostic device when the original controller is replaced with a new controller if the diagnostic device successfully logs in; a first acquisition module, which is used to obtain a key filling request sent by the diagnostic device and the vehicle-side information of the target vehicle, and identify the original controller identifier, vehicle identifier and supplier identifier in the vehicle-side information; a generation module, which is used to respond to the key filling request, generate derived parameters according to the controller identifier, vehicle identifier and supplier identifier, and upload the derived parameters to the key management system, wherein the key management system generates a derived key and a derived key verification value according to the derived parameters; a sending module, which is used to search for the reference key verification value of the target vehicle according to the vehicle identifier, and if the verification value of the derived key is consistent with the reference key verification value, send the ciphertext of the derived key to the diagnostic device, wherein the diagnostic device performs key filling on the new controller of the target vehicle based on the ciphertext of the derived key.

[0011] The fourth aspect of the present application provides a controller key filling device, which is applied to diagnostic equipment, including: a second acquisition module, used to obtain the target vehicle authorization code from the vehicle manufacturer; a verification module, used to connect to the target vehicle after verifying the target vehicle using the authorization code; an upload module, used to obtain the vehicle-side information of the target vehicle, establish a communication connection between the front service system and the diagnostic equipment after successful login according to the login data sent by the front service system, and upload a key filling request and the vehicle-side information of the target vehicle to the front service system, wherein the front service system responds to the key filling request, generates derived parameters, and uploads the derived parameters to the key management system, wherein the key management system generates a derived key and a derived key verification value according to the derived parameters, searches for the reference key verification value of the target vehicle according to the vehicle identification, and if the derived key verification value is consistent with the reference key verification value, sends the ciphertext of the derived key to the diagnostic equipment; a filling module, used to perform key filling on the new controller of the target vehicle based on the ciphertext of the derived key.

[0012] The fifth aspect of the present application provides a front-end service system, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor executes the program to implement a controller key filling method as described in the above embodiment.

[0013] The sixth aspect of the present application provides a diagnostic instrument, including: a memory, a processor, and a computer program stored in the memory and executable on the processor. When the computer program is executed, it is used to implement the controller key filling method as described in the above embodiment.

[0014] A seventh aspect of the present application provides a vehicle, including a controller, wherein the controller performs key filling based on the controller key filling method described above.

[0015] Therefore, this application includes the following beneficial effects:

[0016] The embodiment of the present application can realize that when the controller is replaced after sales, the front service system and the diagnostic device communicate with each other, and the whole communication process is encrypted. After the diagnostic device logs in, it can apply for the key from the front service system online, and the front service system can obtain the vehicle-side information provided by the diagnostic device; and when the key management system issues the key, the front service system ensures that the key is issued consistently for each business, and realizes one car, one business, and one key, which not only improves the security of filling the key when the controller is replaced after sales, but also improves the efficiency of key writing. Therefore, the technical problems of low efficiency, low security, and low consistency of vehicle controller key filling are solved.

[0017] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0019] Figure 1 It is a flowchart of a controller key filling method provided according to an embodiment of the present application;

[0020] Figure 2 A flowchart of a controller key filling method provided according to an embodiment of the present application;

[0021] Figure 3 A flowchart of a controller key filling method provided according to another embodiment of the present application;

[0022] Figure 4 This is an exemplary diagram of a controller key filling device according to an embodiment of the present application;

[0023] Figure 5 This is an exemplary diagram of a controller key filling device according to another embodiment of the present application. DETAILED DESCRIPTION

[0024] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.

[0025] The following describes the controller key filling method, device, service system, diagnostic instrument and vehicle of the embodiments of the present application with reference to the accompanying drawings. In view of the problems of low efficiency, low security and low consistency of vehicle controller key filling mentioned in the above background technology, the present application provides a controller key filling method, in which the diagnostic device sends vehicle-side information and key filling request to the front service system, the front service system generates derived parameters, and the key management system derives the key based on it, and finally the front service system verifies the generated key. Thereby, the problems of low efficiency, low security and low consistency of vehicle controller key filling are solved.

[0026] Specifically, Figure 1 A flowchart of a controller key filling method provided in an embodiment of the present application is provided. The controller key filling method is applied to a front-end service system, such as Figure 1 As shown, the controller key filling method includes the following steps:

[0027] In step S101, when the original controller is filling the key, the reference key verification value issued by the key management system is stored.

[0028] It is understandable that the check value is generated in the key management system and maintained in the front-end service system. Therefore, when the key management system sends the preset key, it carries the key check value. When the key is first loaded, after the front-end system receives the key ciphertext and key check value, it will maintain the check value corresponding to the key in the system.

[0029] In step S102, when the original controller is replaced with a new controller, if the diagnostic device logs in successfully, a communication connection is established between the front-end service system and the diagnostic device.

[0030] It can be understood that the login of the diagnostic device requires a set of data issued by the front-end service system. If the data is incorrect, the diagnostic device cannot log in; if the data is correct, the diagnostic device successfully logs in, improving the security of establishing the communication connection.

[0031] In an embodiment of the present application, establishing a communication connection between the front-end service system and the diagnostic device includes: completing two-way authentication between the front-end service system and the diagnostic device through the TLS protocol; and establishing a communication connection through the https protocol after the two-way authentication passes.

[0032] Among them, two-way authentication is a security guarantee. Before performing key filling operations, after-sales diagnostic equipment must apply for login authorization from the OEM (Original Equipment Manufacturer) through the system. Only after the authorization is passed can it log in to the system to perform key-related operations.

[0033] It can be understood that in the embodiment of the present application, the front service system and the diagnostic equipment require two-way authentication before a communication connection can be established. The after-sales diagnostic equipment operator must pass the security code verification before connecting to the front service system and then applying for the key required for the vehicle controller. The security code ensures the security of the communication link and the key transmission is more secure.

[0034] Specifically, the TLS protocol is a security protocol that protects the security of network communications by encrypting communication data, verifying the identity of the communicating parties, and ensuring data integrity. https (Hypertext Transfer Protocol) is a communication protocol for securely transmitting hypertext on a computer network. It is based on the extension of the http protocol and can use TLS protocol encryption technology to protect data security.

[0035] In an embodiment of the present application, the front service system has at least one of a vehicle model management function, a supplier management function, a parts management function, a vehicle management function, a key management function and a database management function.

[0036] Specifically, the vehicle model management function refers to the management function according to vehicle models such as SUVs, sedans, and sports cars; the supplier management function refers to the management function according to controller suppliers; parts management is controller management; and the vehicle management function needs to be managed specifically for a certain vehicle. The key management function is usually used to securely store, generate, and manage encryption keys. The database management function involves managing and maintaining all aspects of the database system to ensure the reliability, security, and performance of the database.

[0037] In step S103, the key filling request sent by the diagnostic device and the vehicle-side information of the target vehicle are obtained, and the original controller identifier, vehicle identifier and supplier identifier in the vehicle-side information are identified.

[0038] Among them, the vehicle-side information may include vehicle identification information, engine and vehicle performance data, fault codes and diagnostic information, and other information carried by the vehicle itself.

[0039] It can be understood that in the embodiment of the present application, the diagnostic device sends a key filling request and the vehicle-side information of the target vehicle to the front service system for communication. The communication process is based on http and adopts the TLS protocol, which greatly improves the confidentiality of information during the transmission of the key filling request and the vehicle-side information, and the transmission efficiency is greatly improved compared to manual writing.

[0040] In step S103, in response to the key filling request, derived parameters are generated according to the controller identification, vehicle identification, and supplier identification, and the derived parameters are uploaded to the key management system, wherein the key management system generates a derived key and a derived key check value according to the derived parameters.

[0041] The derived parameters refer to new parameters obtained by further processing the controller identification, vehicle identification, and supplier identification, including but not limited to the part number, vehicle identification code, supplier code, etc. The key management system and the diagnostic device are also bidirectionally connected via the TLS protocol.

[0042] It should be noted that the front-end service system and key management system of the embodiment of the present application are both deployed in the cloud, are not restricted by location and equipment, allow access anytime and anywhere, and have higher flexibility and convenience; at the same time, the cloud often has more powerful security measures, and the deployment of the front-end service system and key management system in the cloud can improve data security, reliability and fault tolerance.

[0043] In the embodiment of the present application, the key management system generates and derives the controller key and cloud key verification value of the target vehicle according to the derived parameters. The key management system uses multi-level derivation and different derivation algorithms to derive different keys according to the key-using businesses of different models, different vehicles, and different controllers, ensuring one key for one business.

[0044] It can be understood that the embodiment of the present application obtains derived parameters carrying vehicle characteristic values ​​from the controller identifier, vehicle identifier, and supplier identifier, and the key management system generates keys based on the derived parameters. Therefore, the generated keys are highly consistent with the vehicle, ensuring a one-to-one correspondence between vehicles, services, and keys, and ensuring that different vehicles and different services use different keys. The leakage of the keys of a single vehicle will not affect other vehicles, greatly improving the security of key filling.

[0045] In step S105, the reference key verification value of the target vehicle is searched according to the vehicle identification. If the verification value of the derived key is consistent with the reference key verification value, the ciphertext of the derived key is sent to the diagnostic device, wherein the diagnostic device performs key filling on the new controller of the target vehicle based on the ciphertext of the derived key.

[0046] It is understandable that when replacing parts after sales, in order to ensure that the original key text re-filled into the new controller is consistent with the previous original key text. However, the key is transmitted using ciphertext, and in order to prevent replay, the key ciphertext data sent each time is different, so the key check value is used to ensure the consistency of the key sent. Before sending the key ciphertext for after-sales replacement of parts, the front-end service system will first check the key check value, and only send it if it is consistent. Inconsistency indicates that there is a problem with the derived key.

[0047] It should be noted that after the key is written into the car, if there is a problem in parsing the key and an incorrect key is parsed, it means that the key in the controller is not the one issued by the platform. At this time, if you want to troubleshoot the problem, you can also use this verification value to troubleshoot the problem.

[0048] Specifically, after the key management system generates the key, it sends the ciphertext of the key to the front-end service system, which verifies whether the key verification value on the vehicle side is consistent with the key verification value on the cloud side. The key will only be issued if they are consistent. The diagnostic device then installs the key on the controller of the target vehicle based on the controller key. The key verification value is the checksum (total checksum), which is used to verify the consistency of the key.

[0049] The cloud derives different keys for different controllers. Since different controllers use symmetric keys for the same service, the key consistency is ensured by the front-end service system. After the key management system sends the derived key, a checksum is calculated at the same time. The front-end service system verifies the checksum in the background. If the checksums are consistent, it means that the keys sent are consistent. If there is a deviation, it means that the keys sent are inconsistent. The checksum can be calculated by dividing the verification data into data blocks, adding the data blocks to obtain the total value, and performing one or more methods such as modulo operation and complement operation on the total value.

[0050] Therefore, in the embodiment of the present application, the consistency of the issued keys is ensured by the front-end service system. By checking whether the key verification value on the vehicle side is consistent with the key verification value on the cloud side as a condition for issuing the key, different keys are derived for different models, different vehicles and different controller services, thereby ensuring a one-to-one correspondence between vehicles, services and keys, and improving the efficiency of key filling.

[0051] According to the controller key filling method proposed in the embodiment of the present application, when the controller is replaced after sales, the front service system and the diagnostic device communicate with each other, and the entire communication process is encrypted. After the diagnostic device logs in, it can apply for the key from the front service system online, and the front service system can obtain the vehicle-side information provided by the diagnostic device; and when the key management system issues the key, the front service system ensures that the key is issued consistently for each business, realizing one car, one business, and one key, which not only improves the security of filling the key when the controller is replaced after sales, but also improves the key writing efficiency.

[0052] Figure 2 A flowchart of a controller key filling method provided in an embodiment of the present application.

[0053] The controller key filling method is applied to diagnostic equipment, such as Figure 2 As shown, the controller key filling method includes the following steps:

[0054] In step S201, the target vehicle authorization code is obtained from the vehicle manufacturer.

[0055] Among them, the target vehicle authorization code is provided by the OEM factory and is used for authorized login of after-sales diagnostic equipment.

[0056] It can be understood that the key filling method of the embodiment of the present application is applied to the diagnostic equipment and needs to obtain the target vehicle authorization code. The authorization code can be regarded as the identity authentication of the vehicle, used to identify the vehicle, and can be used as a prerequisite for subsequent connection to the target vehicle.

[0057] In step S202, the target vehicle is verified using the authorization code and then connected to the target vehicle.

[0058] It can be understood that after the embodiment of the present application obtains the target vehicle authorization code from the supplier, it uses the authorization code to verify the vehicle. Only after the authentication is passed can it be connected to the target vehicle, avoiding the risk of key leakage and ensuring the security of key transmission.

[0059] In step S203, the vehicle-side information of the target vehicle is obtained, and after successful login according to the login data sent by the front service system, a communication connection is established between the front service system and the diagnostic device, and a key filling request and the vehicle-side information of the target vehicle are uploaded to the front service system, wherein the front service system responds to the key filling request, generates derived parameters, and uploads the derived parameters to the key management system, wherein the key management system generates a derived key and a derived key verification value according to the derived parameters, searches for the reference key verification value of the target vehicle according to the vehicle identification, and if the verification value of the derived key is consistent with the reference key verification value, sends the ciphertext of the derived key to the diagnostic device.

[0060] It should be noted that the front-end service system then responds to the key filling request and derives the controller key derivation parameters of the target vehicle based on the vehicle-side information. After the controller of the target vehicle is verified, the controller key is sent to the diagnostic device.

[0061] It can be understood that after the diagnostic device of the embodiment of the present application is connected to the target vehicle, it can obtain the vehicle-side information of the target vehicle and transmit the obtained vehicle-side information to the front-end service system. At the same time, a key filling request is also transmitted. The entire process does not require human intervention, which greatly improves the efficiency of key filling.

[0062] In step S204, a new controller of the target vehicle is key-filled based on the ciphertext of the derived key.

[0063] It is understandable that the key filling in the embodiment of the present application uses the vehicle-side information transmitted by the diagnostic device to determine the target vehicle, and generates derived parameters based on the key filling request, and then issues the key for key filling. This ensures the consistency of key issuance and improves the efficiency and security of key filling.

[0064] It should be understood that the above explanation of the embodiment of the controller key filling method applied to the front-end service system is also applicable to the embodiment of the method applied to the diagnostic device, and will not be repeated here.

[0065] According to the controller key filling method proposed in the embodiment of the present application, when the controller is replaced after sales, the front service system and the diagnostic device communicate with each other, and the entire communication process is encrypted. After the diagnostic device logs in, it can apply for the key from the front service system online, and the front service system can obtain the vehicle-side information provided by the diagnostic device; and when the key management system issues the key, the front service system ensures that the key is issued consistently for each business, realizing one car, one business, and one key, which not only improves the security of filling the key when the controller is replaced after sales, but also improves the key writing efficiency.

[0066] The controller key filling method is described below through a specific embodiment. Figure 3 As shown, the specific steps are as follows:

[0067] 1. After-sales diagnostic equipment first obtains the vehicle's authorization code from the OEM factory through a specific channel;

[0068] 2. After the after-sales diagnostic equipment passes the verification of the authorization code, it can be connected to the vehicle end, collect vehicle end information and pass it to the front service system;

[0069] 3. The after-sales diagnostic equipment is connected to the front-end service system through a specific connection, and the security of the communication link is guaranteed by two-way authentication;

[0070] 4. The after-sales diagnostic device sends a key filling request to the front-end service system;

[0071] 5. The front-end service system ensures the consistency of key data sent to the controller that applies for the key through vehicle-side information and cloud-recorded information;

[0072] 6. After receiving the key data from the front-end service system, the after-sales diagnostic device requests to write it to the vehicle end;

[0073] 7. After receiving the key data, the vehicle end writes it into the controller and feeds back the key writing result;

[0074] 8. The after-sales diagnostic equipment will feed back the key writing results to the front-end service system to achieve a closed loop of the business.

[0075] In summary, when the after-sales replacement of the controller requires re-installing the key, the after-sales diagnostic device can apply for the key online from the front-end service system of the OEM key management after authorized login, and the front-end service system will perform background verification to ensure the consistency of the issued key, which reduces the development logic of the controller, reduces the risk of BUGs, improves the security of key filling, and also ensures the security and consistency of after-sales replacement of the controller.

[0076] Next, the controller key filling device proposed according to the embodiment of the present application is described with reference to the accompanying drawings.

[0077] Figure 4 It is a block diagram of the controller key filling device of an embodiment of the present application applied to a front-end service system.

[0078] like Figure 4 As shown, the controller key filling device 10 includes: a storage module 401, a communication module 402, a first acquisition module 403, a generation module 404 and a sending module 405.

[0079] Among them, the storage module 401 is used to store the reference key verification value issued by the key management system when the original controller is filled with keys; the communication module 402 is used to establish a communication connection between the front service system and the diagnostic device when the original controller is replaced with a new controller if the diagnostic device successfully logs in; the first acquisition module 403 is used to obtain the key filling request sent by the diagnostic device and the vehicle-side information of the target vehicle, and identify the original controller identifier, vehicle identifier and supplier identifier in the vehicle-side information; the generation module 404 is used to respond to the key filling request, generate derived parameters according to the controller identifier, vehicle identifier and supplier identifier, and upload the derived parameters to the key management system, wherein the key management system generates a derived key and a derived key verification value according to the derived parameters; the sending module 405 is used to search for the reference key verification value of the target vehicle according to the vehicle identifier, and if the verification value of the derived key is consistent with the reference key verification value, send the ciphertext of the derived key to the diagnostic device, wherein the diagnostic device performs key filling on the new controller of the target vehicle based on the ciphertext of the derived key.

[0080] It should be noted that the above explanation of the controller key filling method embodiment is also applicable to the controller key filling device of this embodiment, and will not be repeated here.

[0081] According to the controller key filling device proposed in the embodiment of the present application, it can be realized that when the controller is replaced after sales, the front service system and the diagnostic device communicate with each other, and the entire communication process is encrypted. After the diagnostic device is logged in, it can apply for the key from the front service system online, and the front service system can obtain the vehicle-side information provided by the diagnostic device. And when the key management system issues the key, the front service system ensures that the key is issued consistently for each business, realizing one car, one business, and one key, which not only improves the security of filling the key when the controller is replaced after sales, but also improves the efficiency of key writing.

[0082] Figure 5 It is a block diagram of the controller key filling device according to an embodiment of the present application applied to diagnostic equipment.

[0083] like Figure 5 As shown, the controller key filling device 20 includes: a second acquisition module 501, a verification module 502, an upload module 503 and a filling module 504.

[0084] Among them, the second acquisition module 501 is used to obtain the target vehicle authorization code from the vehicle manufacturer; the verification module 502 is used to connect to the target vehicle after verifying the target vehicle using the authorization code; the upload module 503 is used to obtain the vehicle-side information of the target vehicle, and after successfully logging in according to the login data sent by the front service system, establish a communication connection between the front service system and the diagnostic equipment, and upload the key filling request and the vehicle-side information of the target vehicle to the front service system, wherein the front service system responds to the key filling request, generates derived parameters, and uploads the derived parameters to the key management system, wherein the key management system generates a derived key and a derived key verification value according to the derived parameters, searches for the reference key verification value of the target vehicle according to the vehicle identification, and if the verification value of the derived key is consistent with the reference key verification value, sends the ciphertext of the derived key to the diagnostic equipment; the filling module 504 is used to perform key filling on the new controller of the target vehicle based on the ciphertext of the derived key.

[0085] It should be noted that the above explanation of the controller key filling method embodiment is also applicable to the controller key filling device of this embodiment, and will not be repeated here.

[0086] According to the controller key filling device proposed in the embodiment of the present application, it can be realized that when the controller is replaced after sales, the front service system and the diagnostic device communicate with each other, and the entire communication process is encrypted. After the diagnostic device is logged in, it can apply for the key from the front service system online, and the front service system can obtain the vehicle-side information provided by the diagnostic device. And when the key management system issues the key, the front service system ensures that the key is issued consistently for each business, realizing one car, one business, and one key, which not only improves the security of filling the key when the controller is replaced after sales, but also improves the efficiency of key writing.

[0087] The embodiment of the present application also provides a front-end service system, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor executes the program to implement the above-mentioned controller key filling method.

[0088] An embodiment of the present application also provides a diagnostic instrument, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement a controller key filling method as described in the above embodiment.

[0089] An embodiment of the present application also provides a vehicle, including a controller, which performs key filling using the above-mentioned controller key filling method.

[0090] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms are not necessarily directed to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or N embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0091] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include at least one of the features. In the description of this application, "N" means at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0092] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, fragment or portion of code comprising one or N executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0093] It should be understood that the various parts of the present application can be implemented in hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, the steps or methods can be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function on a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array, a field programmable gate array, etc.

[0094] A person of ordinary skill in the art may understand that all or part of the steps carried by the method for implementing the above-mentioned embodiment may be completed by instructing related hardware through a program, and the above-mentioned program may be stored in a computer-readable storage medium, which, when executed, includes one of the steps of the method embodiment or a combination thereof.

[0095] Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limitations on the present application. Ordinary technicians in this field can change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A controller key filling method, characterized in that: The method is applied to a front-end service system, wherein the method comprises the following steps: When the original controller is filled with keys, the reference key verification value issued by the key management system is stored; When the original controller is replaced with a new controller, if the diagnostic device successfully logs in, a communication connection is established between the front-end service system and the diagnostic device; Obtaining the key filling request sent by the diagnostic device and the vehicle-side information of the target vehicle, and identifying the original controller identifier, vehicle identifier, and supplier identifier in the vehicle-side information; In response to the key filling request, generating derived parameters according to the controller identifier, the vehicle identifier, and the supplier identifier, and uploading the derived parameters to a key management system, wherein the key management system generates a derived key and a derived key check value according to the derived parameters; The reference key verification value of the target vehicle is searched according to the vehicle identification. If the verification value of the derived key is consistent with the reference key verification value, the ciphertext of the derived key is sent to the diagnostic device, wherein the diagnostic device performs key filling on the new controller of the target vehicle based on the ciphertext of the derived key.

2. The controller key filling method according to claim 1, characterized in that: The front-end service system and the key management system are both deployed in the cloud.

3. The controller key filling method according to claim 1, characterized in that: The front service system has at least one of a vehicle model management function, a supplier management function, a parts management function, a vehicle management function, a key management function and a database management function.

4. The controller key filling method according to claim 1, characterized in that: The establishing of a communication connection between the front-end service system and the diagnostic device includes: Complete two-way authentication between the front-end service system and the diagnostic device through the TLS protocol; After the two-way authentication is passed, a communication connection is established through the https protocol.

5. A controller key filling method, characterized in that: The method is applied to a diagnostic device, wherein the method comprises the following steps: The target vehicle authorization code obtained from the vehicle manufacturer; Connecting to the target vehicle after verifying the target vehicle using the authorization code; Obtain the vehicle-side information of the target vehicle, and after successful login according to the login data sent by the front service system, establish a communication connection between the front service system and the diagnostic device, and upload a key filling request and the vehicle-side information of the target vehicle to the front service system, wherein the front service system responds to the key filling request, generates derived parameters according to the vehicle-side information of the target vehicle, and uploads the derived parameters to the key management system, wherein the key management system generates a derived key and a derived key check value according to the derived parameters, searches for a reference key check value of the target vehicle according to the vehicle identification, and if the check value of the derived key is consistent with the check value of the reference key, sends the ciphertext of the derived key to the diagnostic device; A new controller of the target vehicle is keyed based on the ciphertext of the derived key.

6. A controller key filling device, characterized in that: The device is applied to a front-end service system, wherein the device comprises: A storage module, used to store the reference key verification value issued by the key management system when the original controller is loaded with the key; A communication module, used for establishing a communication connection between the front-end service system and the diagnostic device if the diagnostic device successfully logs in when the original controller is replaced with a new controller; A first acquisition module is used to acquire the key filling request sent by the diagnostic device and the vehicle-side information of the target vehicle, and identify the original controller identifier, vehicle identifier and supplier identifier in the vehicle-side information; A generation module, used to respond to the key filling request, generate derived parameters according to the controller identifier, the vehicle identifier, and the supplier identifier, and upload the derived parameters to a key management system, wherein the key management system generates a derived key and a derived key check value according to the derived parameters; The sending module is used to find the reference key verification value of the target vehicle according to the vehicle identification, and if the verification value of the derived key is consistent with the reference key verification value, send the ciphertext of the derived key to the diagnostic device, wherein the diagnostic device performs key filling on the new controller of the target vehicle based on the ciphertext of the derived key.

7. A controller key filling device, characterized in that: The device is applied to a diagnostic device, wherein the device comprises: The second acquisition module is used to obtain the target vehicle authorization code from the vehicle manufacturer; A verification module, used to verify the target vehicle using the authorization code and then connect to the target vehicle; An upload module, used to obtain the vehicle-side information of the target vehicle, establish a communication connection between the front service system and the diagnostic device after successful login according to the login data sent by the front service system, and upload a key filling request and the vehicle-side information of the target vehicle to the front service system, wherein the front service system responds to the key filling request, generates derived parameters, and uploads the derived parameters to the key management system, wherein the key management system generates a derived key and a derived key check value according to the derived parameters, searches for a reference key check value of the target vehicle according to the vehicle identification, and if the check value of the derived key is consistent with the check value of the reference key, sends the ciphertext of the derived key to the diagnostic device; A filling module is used to fill the key of the new controller of the target vehicle based on the ciphertext of the derived key.

8. A front-end service system, characterized in that: include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the controller key filling method according to any one of claims 1 to 4.

9. A diagnostic instrument, characterized in that: include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the controller key filling method according to claim 5.

10. A vehicle, characterized in that: It includes a controller, which performs key filling based on the controller key filling method according to any one of claims 1-5.

Images