Vehicle digital certificate management method, system, equipment and medium

Abstract

The invention discloses a vehicle digital certificate management method, system and device and a medium, and the method comprises the steps: S1, a controller executes a safety access operation, and accesses the internal storage of the controller; s2, judging whether the vehicle is located in a network area at present or not; s3, if the network area exists, applying for a short-term certificate and automatically authorizing the short-term certificate; s4, automatically issuing the short-term certificate in a network area, and storing the short-term certificate in an internal storage of a controller; and S5, checking the legality of the short-term certificate, and checking the timeliness of the short-term certificate through a clock reference. Two types of normal short-term certificates and special long-term certificates are designed and are respectively applied to two conditions of a network area and a network-free area. A vehicle is provided with a clock terminal to provide a time reference when no network exists, and the clock terminal does not need high precision but can interact time information with a diagnostic tool, a vehicle-mounted network device and a vehicle-mounted controller through a CAN (Controller Area Network).

Description

Technical Field

[0001] The present application relates to the technical field of vehicle digital certificate management, and in particular to a vehicle digital certificate management method, system, device and medium. Background Art

[0002] With the rapid development of vehicle networking, the interaction between vehicles and the external network environment is becoming more and more frequent, and the on-board controller program upgrades and parameter setting actions are becoming more convenient and frequent. Under normal network conditions, a shorter certificate validity period is required to ensure safety; in special circumstances, such as when the vehicle enters an area without network coverage, a longer certificate validity period is required to ensure service continuity. At the same time, after the vehicle is driving normally, the control of the vehicle by the long-term certificate needs to be released, and the timing problem when the vehicle enters an area without network coverage also needs to be solved.

[0003] The existing digital clock certificate management only considers the situation with network, assuming that the area where the vehicle is traveling is covered by the network, and more patents are designed based on the certificate system in the vehicle network terminal. The vehicle network terminal cannot work properly without the network. However, in actual working conditions, many vehicles will work in areas without network, such as deserts, mines, tunnels, etc. If the vehicle needs to perform controller parameter configuration, file flashing and other diagnostic functions in areas without network, it is necessary to design a special long-term certificate; some technical solutions take into account the offline situation, but do not realize the recovery of offline long-term certificates. Summary of the invention

[0004] The present application provides a vehicle digital certificate management method, system, device and medium to solve the above-mentioned technical problems.

[0005] On the one hand, the present application provides a vehicle digital certificate management method, which includes the following steps: Step S1: The controller performs a security access operation to access the internal storage of the controller; Step S2: Determine whether the vehicle is currently in a network area; Step S3: If it is in a network area, apply for a short-term certificate and automatically authorize it; Step S4: Automatically issue the short-term certificate in the network area and store it in the internal storage of the controller; Step S5: Verify the legitimacy of the short-term certificate, and verify the timeliness of the short-term certificate through a clock reference.

[0006] In one implementation of the present application, the method further includes: if the user is in a network-free area, applying for a long-term certificate and applying for manual authorization.

[0007] In one implementation of the present application, the method further includes: when performing secure access to the controller, determining whether the time parameter in the long-term certificate is greater than the time parameter of the normal short-term certificate last received by the controller; if so, the controller will reply that the certificate is invalid.

[0008] In one implementation of the present application, the method further includes: when the controller successfully receives a legitimate short-term certificate again, stopping the normal use of all long-term certificates applied for by the vehicle.

[0009] In one implementation of the present application, the method also includes: when the diagnostic tool and the controller are securely accessed, the diagnostic software first checks the legitimacy and timeliness of the certificate to prevent illegal intrusion during the certificate transmission process and further strengthen network security. The inspection logic is as follows: the diagnostic tool network time <= certificate issuance time + certificate validity days. At the same time, the certificate also needs to meet the time requirements of the controller, as follows: the issuance time of the last valid certificate received by the controller <= current certificate issuance time + certificate validity days; any certificate must meet both logics to pass the timeliness check. If the certificate does not conform to the logic of the diagnostic software, subsequent controller verification is not required, and the diagnostic software reports a certificate expiration error.

[0010] In one implementation of the present application, the method also includes: the diagnostic software displays the timeliness data of the certificate; wherein the timeliness data includes: the issuance time of the certificate, the certificate type, the validity period of the certificate, and the expiration time of the certificate; the time reported when applying in different regions is accompanied by the time zone, the vehicle controller certificate time is based on the issuing computer, and the diagnostic software certificate timeliness displays the user's local time.

[0011] In one implementation of the present application, the clock reference is obtained through the network when there is a network, and is obtained through the vehicle-mounted clock terminal when there is no network; when in a network area, the diagnostic tool sends a clock verification message, and the clock terminal automatically calibrates according to the message, and the certificate reference is based on the network time obtained by the diagnostic tool; when there is no network area, the clock of the GPS or Beidou satellite signal in the vehicle-mounted network terminal is applied for based on the diagnostic tool. If the satellite clock cannot be obtained, the clock in the vehicle-mounted clock terminal is requested based on the diagnostic tool, and the diagnostic software completes the timeliness check of the security access certificate based on the obtained clock reference.

[0012] On the second aspect, the present application also provides a vehicle digital certificate management system, which includes: a security access unit, used for the controller to perform security access operations and access the internal storage of the controller; a network judgment unit, used to determine whether the vehicle is currently in a network area; a certificate application unit, used to apply for a short-term certificate and automatically authorize it when it is in a network area; a certificate storage unit, used to store the short-term certificate automatically issued in the network area in the internal storage of the controller; a certificate verification unit, used to verify the legitimacy of the short-term certificate, and verify the timeliness of the short-term certificate through a clock reference.

[0013] In the third aspect, the present application also provides a vehicle digital certificate management device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can complete: Step S1: The controller performs a security access operation to access the internal storage of the controller; Step S2: Determine whether the vehicle is currently in a network area; Step S3: If it is in a network area, apply for a short-term certificate and automatically authorize it; Step S4: Automatically issue the short-term certificate in the network area and store it in the internal storage of the controller; Step S5: Verify the legitimacy of the short-term certificate, and verify the timeliness of the short-term certificate through a clock reference.

[0014] In the fourth aspect, the present application also provides a non-volatile computer storage medium for vehicle digital certificate management, storing computer executable instructions, which are executed by a processor to implement step S1: the controller performs a security access operation to access the internal storage of the controller; step S2: determine whether the vehicle is currently in a network area; step S3: if it is in a network area, apply for a short-term certificate and automatically authorize it; step S4: automatically issue the short-term certificate in the network area and store it in the internal storage of the controller; step S5: verify the legitimacy of the short-term certificate, and verify the timeliness of the short-term certificate through a clock reference.

[0015] The present application provides a vehicle digital certificate management method, system, device and medium, which are designed into two types: normal short-term certificate and special long-term certificate, and are respectively applied to areas with and without network. The vehicle is equipped with a clock terminal to provide a time reference when there is no network. The clock terminal does not need high precision, but can exchange time information with diagnostic tools, vehicle network equipment and vehicle controller through CAN. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0017] Figure 1 A flow chart of a vehicle digital certificate management method provided in an embodiment of the present application;

[0018] Figure 2 A diagram showing the composition of a vehicle digital certificate management system provided in an embodiment of the present application;

[0019] Figure 3 A schematic diagram of a vehicle digital certificate management device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical solution and advantages of the present application clearer, the technical solution of the present application will be clearly and completely described below in combination with the specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0021] This application designs two certificate modes. Under normal circumstances, the vehicle controller frequently interacts with the network, and a shorter certificate validity period is required to ensure safety. In special circumstances, such as when the vehicle enters an area without network coverage, a longer certificate validity period is required to ensure service continuity. At the same time, after the vehicle is running normally, the long-term certificate needs to release the control of the vehicle. At the same time, a network clock, a satellite signal clock and an on-board clock terminal are designed as the vehicle's clock reference to cope with different situations. The vehicle controller secure access digital certificate management method can increase the scope of certificate use, ensure that the vehicle can use the certificate security system without a network, and effectively enhance the vehicle network security. After the vehicle enters a network area, as long as the vehicle is connected once through a diagnostic tool, all special long-term certificates previously applied for the vehicle will become invalid, ensuring that the certificate system is safe and reliable.

[0022] Specifically, the embodiments of the present application provide a vehicle digital certificate management method, system, device and medium. The technical solutions proposed in the embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0023] Figure 1 A flow chart of a vehicle digital certificate management method provided in an embodiment of the present application. Figure 1 As shown, the method mainly includes the following steps:

[0024] Step S1: The controller performs a security access operation to access the internal storage of the controller.

[0025] Step S2: Determine whether the vehicle is currently in a network area.

[0026] Step S3: If the network is available, apply for a short-term certificate and automatically authorize it.

[0027] Step S4: Automatically issue the short-term certificate in the network area and store it in the internal storage of the controller.

[0028] Step S5: Verify the legitimacy of the short-term certificate, and verify the timeliness of the short-term certificate through a clock reference.

[0029] In the embodiment of the present application, the controller is accessed securely for the purpose of reading and writing the internal storage of the controller, such as FLASH and EEPROM. It is generally based on the 27 service of the UDS protocol. After improving the network security standard, the 29 service of the UDS protocol is introduced. The 29 service needs to verify the digital certificate. Regarding the timeliness of the digital certificate, this method is designed for the vehicle entering the networked and non-networked areas respectively. On the one hand, it ensures that the vehicle can operate the vehicle controller memory in both cases, and on the other hand, it strengthens the security of the certificate. This method divides the controller security access certificate into two categories: one is a normal short-term certificate, which is generally valid for one to two weeks. The certificates used in most cases belong to this type of certificate; the other is a special long-term certificate, which is only used to handle special situations, such as when the vehicle that needs service is in a desert, deep mountain, mining area, tunnel, etc. without a network. When the controller is accessed securely, the time parameter in the special long-term certificate must be greater than the time parameter of the normal short-term certificate received by the controller for the last time, otherwise the controller will reply that the certificate is invalid. When the controller successfully receives a legitimate normal short-term certificate again (the time parameter in the certificate is greater than the time parameter of the normal short-term certificate received by the controller for the last time), all special long-term certificates applied for the vehicle can no longer be used normally. This method belongs to an algorithm model based on service site power, that is, as long as the vehicle enters any service station that uses a normal short-term certificate to apply for service, all special long-term certificates applied for the vehicle will be invalid.

[0030] Furthermore, when the vehicle is in an area with a normal network and the service station provides after-sales service for the vehicle, a normal short-term certificate is applied for. The short-term certificate is automatically authorized and is generally valid for one to two weeks. The certificate becomes invalid after the expiration date. The diagnostic software verifies whether the certificate is invalid. The clock is based on the network time. When the controller performs security algorithm authentication, it will also internally authenticate whether the certificate is within the valid usage time.

[0031] When a vehicle needs to perform controller operation services in an area without a network, it is necessary to apply for a special long-term certificate. The certificate can be valid for one to two months or the duration can be adjusted. The service station applies for the certificate in the networked area in advance, and then enters the area without a network for service. The special long-term certificate requires manual authorization. When the vehicle enters the area without a network, if a special long-term certificate for one month is applied for, if it stays in this area for two months, then this certificate cannot pass the time validity certification of the diagnostic software after the expiration. The diagnostic software verifies whether the special long-term certificate is within the validity period. The clock reference is based on the on-board clock terminal. The diagnostic software obtains the time in the on-board clock terminal through the 31 service of the UDS protocol.

[0032] The issuance of normal short-term certificates is automatic, without manual authorization, ensuring high timeliness. Legal service stations and vehicles can apply for normal short-term certificates in real time. The application of special long-term certificates requires manual authorization and is only used in areas without network or poor network.

[0033] Normal short-term certificates are stored in the computer memory and are not downloaded to the hard disk. The memory is released after the diagnostic software completes the communication with the vehicle controller. Special long-term certificates need to be stored on the computer hard disk. The certificate can only be used on the computer. The certificate carries information such as the computer's MAC address. When storing, the binary certificate is split into multiple files and placed in different folders of the computer. When performing security authentication on the vehicle controller, the diagnostic software combines the certificate files stored in different locations into a complete certificate and sends the digital certificate to the vehicle controller according to the UDS format.

[0034] Furthermore, the validity of the certificate needs to be verified in many aspects: public and private keys, controller address consistency, issuing ID signature, timeliness, certificate version number, etc. The present invention only discusses the timeliness logic. When the diagnostic tool and the controller are securely accessed, the diagnostic software first verifies the legitimacy and timeliness of the certificate to prevent illegal intrusion during the certificate transmission process and further strengthen network security. The verification logic is as follows: diagnostic tool network time <= certificate issuance time + certificate validity days; at the same time, the certificate also needs to meet the controller's time requirements, as follows: the issuance time of the last valid certificate received by the controller <= current certificate issuance time + certificate validity days; any certificate must meet the above two logics to pass the timeliness test. If the certificate does not conform to the logic of the diagnostic software, subsequent controller verification is not required, and the diagnostic software reports a certificate expiration error.

[0035] The diagnostic software needs to display the validity of the certificate, that is, the issuance time of the certificate, the certificate type, how long the certificate is valid, the expiration date of the certificate, etc., so that the service station can check whether the certificate is valid and reasonably arrange the date for using the certificate for vehicle maintenance.

[0036] The time reported when applying in different regions must include the time zone. The vehicle controller certificate time is based on the issuing computer, and the diagnostic software certificate validity must display the user's local time.

[0037] In addition, the clock reference is obtained through the network when there is a network, and through the on-board clock terminal when there is no network. The clock terminal mainly provides a clock reference when the vehicle is off-network, with low power consumption and connected to the vehicle's permanent power. When there is a network, the diagnostic tool sends a clock verification message, and the clock terminal automatically calibrates the time according to the message. The certificate reference is based on the network time obtained by the diagnostic tool; when there is no network, the diagnostic tool first applies for the clock of the GPS or Beidou satellite signal in the on-board network terminal. If the satellite clock cannot be obtained, the diagnostic tool then requests the clock in the on-board clock terminal. The on-board clock terminal is connected to the vehicle's permanent power, has low power consumption, and meets the basic requirements of the clock reference. The diagnostic software completes the timeliness check of the security access certificate based on the obtained clock reference.

[0038] Finally, regarding certificate recovery, when a vehicle enters a networked area from a non-networked area, the long-term certificate needs to be recovered. The method is to connect the vehicle to any service station to apply for a normal short-term certificate once, and use this certificate to perform a security algorithm access to the vehicle controller. The controller will no longer respond correctly to all special long-term certificates before the date of the normal short-term certificate, thereby achieving the recovery of the long-term certificate.

[0039] In the embodiment of the present application, a variety of methods can be used to solve the timing problem of a vehicle entering an area without network coverage:

[0040] 1. Special timing equipment: In areas without network, special timing equipment can be used as network benchmark. However, special timing equipment is generally more expensive, and the communication problem between timing equipment and diagnostic software needs to be solved.

[0041] 2. Use a distributed time synchronization protocol: If vehicles can communicate wirelessly (such as through a vehicle self-organizing network V2X), a distributed time synchronization protocol (such as NTP or PTP) can be used to synchronize time between vehicles. This method requires the vehicle to have V2V or V2X capabilities.

[0042] In an embodiment of the present application, for the recovery of special long-term certificates, when the vehicle resumes normal driving and re-enters the network coverage area, it is necessary to release the control of the long-term certificates previously set up to deal with the situation of no network. It can also be achieved by sending a request to the CA to revoke or update these long-term certificates. After receiving the request, the CA can update its certificate revocation list (CRL) or online certificate status protocol (OCSP) response to ensure that these certificates are no longer accepted as valid. However, this situation requires the vehicle to be equipped with a network terminal, and it is necessary to assume that the network terminal functions normally, and the vehicle controller and diagnostic software also need to change the code logic.

[0043] The above is a vehicle digital certificate management method provided by an embodiment of the present application. Based on the same inventive concept, an embodiment of the present application also provides a vehicle digital certificate management system. Figure 2 A vehicle digital certificate management system composition diagram provided in an embodiment of the present application, such as Figure 2 As shown, the system mainly includes: a security access unit 201, which is used for the controller to perform security access operations and access the internal storage of the controller; a network judgment unit 202, which is used to judge whether the vehicle is currently in a network area; a certificate application unit, which is used to apply for a short-term certificate and automatically authorize it when it is in a network area; a certificate storage unit 203, which is used to store the short-term certificate automatically issued in the network area in the internal storage of the controller; a certificate verification unit 204, which is used to verify the legitimacy of the short-term certificate and verify the timeliness of the short-term certificate through a clock reference.

[0044] The above is a vehicle digital certificate management system provided by the embodiment of the present application. Based on the same inventive concept, the embodiment of the present application also provides a vehicle digital certificate management device. Figure 3 A schematic diagram of a vehicle digital certificate management device provided in an embodiment of the present application, such as Figure 3 As shown, the device mainly includes: at least one processor 301; and, a memory 302 communicatively connected to the at least one processor; wherein the memory 302 stores instructions executable by the at least one processor 301, and the instructions are executed by the at least one processor 301 so that the at least one processor 301 can complete: step S1: the controller performs a security access operation and accesses the internal storage of the controller; step S2: determines whether the vehicle is currently in a network area; step S3: if it is in a network area, applies for a short-term certificate and automatically authorizes it; step S4: automatically issues the short-term certificate in the network area and stores it in the internal storage of the controller; step S5: verifies the legitimacy of the short-term certificate, and verifies the timeliness of the short-term certificate through a clock reference.

[0045] In addition, an embodiment of the present application also provides a non-volatile computer storage medium for vehicle digital certificate management, storing computer executable instructions, which are executed by a processor to implement: Step S1: The controller executes a security access operation to access the internal storage of the controller; Step S2: Determine whether the vehicle is currently in a network area; Step S3: If it is in a network area, apply for a short-term certificate and automatically authorize it; Step S4: Automatically issue the short-term certificate in the network area and store it in the internal storage of the controller; Step S5: Verify the legitimacy of the short-term certificate, and verify the timeliness of the short-term certificate through a clock reference.

[0046] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0047] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0048] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0049] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0050] Each embodiment in this application is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0051] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0052] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A vehicle digital certificate management method, characterized in that: The method comprises the following steps: Step S1: The controller performs a security access operation to access the internal storage of the controller; Step S2: Determine whether the vehicle is currently in a network area; Step S3: If the user is in a network area, apply for a short-term certificate and automatically authorize it; Step S4: automatically issuing the short-term certificate in the network area and storing it in the internal storage of the controller; Step S5: Verify the legitimacy of the short-term certificate, and verify the timeliness of the short-term certificate through a clock reference.

2. A vehicle digital certificate management method according to claim 1, characterized in that: The method further includes: if the area is without network, applying for a long-term certificate and applying for manual authorization.

3. A vehicle digital certificate management method according to claim 1, characterized in that: The method further includes: when performing secure access to the controller, determining whether the time parameter in the long-term certificate is greater than the time parameter of the normal short-term certificate received by the controller last time, and if so, the controller will reply that the certificate is invalid.

4. A vehicle digital certificate management method according to claim 3, characterized in that: The method further includes: when the controller successfully receives a legal short-term certificate again, stopping normal use of all long-term certificates applied for by the vehicle.

5. A vehicle digital certificate management method according to claim 1, characterized in that: The method further comprises: When the diagnostic tool and the controller are securely accessed, the diagnostic software first checks the legitimacy and timeliness of the certificate to prevent illegal intrusion during the certificate transmission process and further strengthen network security. The verification logic is as follows: Diagnostic tool network time <= certificate issuance time + certificate validity days. At the same time, the certificate also needs to meet the controller's time requirements, as follows: The issuance time of the last valid certificate received by the controller <= current certificate issuance time + certificate validity days; Any certificate must meet two logics to pass the validity check. If the certificate does not conform to the logic of the diagnostic software, subsequent controller verification is not required and the diagnostic software reports a certificate expiration error.

6. A vehicle digital certificate management method according to claim 5, characterized in that: The method further comprises: The diagnostic software displays the validity data of the certificate; wherein the validity data includes: the issuance time of the certificate, the certificate type, the validity period of the certificate, and the expiration time of the certificate; The time reported when applying in different regions is accompanied by the time zone. The vehicle controller certificate time is based on the issuing computer, and the diagnostic software certificate validity period displays the user's local time.

7. A vehicle digital certificate management method according to claim 1, characterized in that: The clock reference is obtained through the network when there is a network, and is obtained through the vehicle-mounted clock terminal when there is no network; when in a network area, the diagnostic tool sends a clock verification message, and the clock terminal automatically calibrates according to the message, and the certificate reference is based on the network time obtained by the diagnostic tool; when there is no network area, the clock of the GPS or Beidou satellite signal in the vehicle-mounted network terminal is applied for based on the diagnostic tool. If the satellite clock cannot be obtained, the clock in the vehicle-mounted clock terminal is requested based on the diagnostic tool, and the diagnostic software completes the timeliness check of the security access certificate based on the obtained clock reference.

8. A vehicle digital certificate management system, characterized in that: The system comprises: A security access unit is used for the controller to perform security access operations and access the internal storage of the controller; A network determination unit, used to determine whether the vehicle is currently in a network area; The certificate application unit is used to apply for short-term certificates and automatically authorize them when in a network area; A certificate storage unit, used for storing the short-term certificate automatically issued in the network area in the internal storage of the controller; The certificate verification unit is used to verify the legality of the short-term certificate and verify the timeliness of the short-term certificate through a clock reference.

9. A vehicle digital certificate management device, characterized in that: The device comprises: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to complete: Step S1: The controller performs a security access operation to access the internal storage of the controller; Step S2: Determine whether the vehicle is currently in a network area; Step S3: If the user is in a network area, apply for a short-term certificate and automatically authorize it; Step S4: automatically issuing the short-term certificate in the network area and storing it in the internal storage of the controller; Step S5: Verify the legitimacy of the short-term certificate, and verify the timeliness of the short-term certificate through a clock reference.

10. A non-volatile computer storage medium for vehicle digital certificate management, storing computer executable instructions, characterized in that: The computer executable instructions are executed by a processor to implement: Step S1: The controller performs a security access operation to access the internal storage of the controller; Step S2: Determine whether the vehicle is currently in a network area; Step S3: If the user is in a network area, apply for a short-term certificate and automatically authorize it; Step S4: automatically issuing the short-term certificate in the network area and storing it in the internal storage of the controller; Step S5: Verify the legitimacy of the short-term certificate, and verify the timeliness of the short-term certificate through a clock reference.

Images