Identity authentication and data transmission integration method and device for vehicle-mounted embedded equipment

Abstract

The invention provides an identity authentication and data transmission integration method and device for vehicle-mounted embedded equipment, and the method comprises the steps: a vehicle-mounted client generates a request data packet according to first self attribute information and data request information; the vehicle-mounted server performs client identity authentication according to the request data packet through the constructed client identity authentication table; if the client identity verification succeeds, executing the request data packet to generate a data response result, and generating a response data packet according to the second self attribute information and the data response result; server-side identity authentication is carried out according to the response data packet through a pre-constructed server-side identity authentication table; if the identity authentication of the server side succeeds, the integration of bidirectional identity authentication and data transmission of the vehicle-mounted embedded equipment is completed, and the confidentiality of important data and the real-time performance of messages during identity authentication can be ensured based on an observer mode which saves the most expenditure in the actual application of the CoAP; lightweight data security interaction in a vehicle-mounted embedded equipment environment is realized.

Description

Technical Field

[0001] The present invention relates to the technical field of rail transit vehicle network systems, and in particular to a method and device for integrating identity authentication and data transmission of a vehicle-mounted embedded device. Background Art

[0002] At present, with the rapid development and iterative innovation of the intelligent level of high-speed railway on-board equipment, the number of communication equipment connected to the train control network has increased rapidly, showing a situation of diverse data needs and diverse data expression forms, which has brought severe challenges to the information security of the control network. In addition, the current train network communication is mainly based on periodic broadcast / multicast process data, lacking request / response data interaction methods. In the related technology, for the communication process of the Constrained Application Protocol (CoAP), it is necessary to send two handshake messages in advance before data transmission to complete two-way identity authentication and key negotiation, and then perform data transmission, resulting in a large overhead in the communication process, low communication efficiency, and data cannot be transmitted in time. Summary of the invention

[0003] One object of the present invention is to provide an integrated method for identity authentication and data transmission of an on-board embedded device. Based on the most cost-saving observer mode in the actual application of CoAP, a hash algorithm is used in the data transmission process to complete identity authentication while data transmission is performed on the client and server. There is no need to send a handshake message in advance, and the confidentiality of important data and the real-time nature of the message during identity authentication can still be guaranteed, thereby realizing lightweight data security interaction in the on-board embedded device environment. Another object of the present invention is to provide an integrated device for identity authentication and data transmission of an on-board embedded device. Another object of the present invention is to provide a computer-readable medium. Another object of the present invention is to provide a computer device.

[0004] In order to achieve the above objectives, the present invention discloses, on one hand, an integrated method for identity authentication and data transmission of an in-vehicle embedded device, which is applied to an in-vehicle client and includes:

[0005] Generate a request data packet according to the first self attribute information and the data request information;

[0006] Sending the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, executing the request data packet to generate a data response result, and generating a response data packet according to the second self attribute information and the data response result;

[0007] Receive the response data packet sent by the vehicle server, and perform server identity authentication based on the response data packet using the pre-built server identity authentication table;

[0008] If the server-side identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed.

[0009] Preferably, the first self attribute information includes a first subsystem identifier, a first network address and a hash algorithm;

[0010] Generate a request data packet according to the first self attribute information and the data request information, including:

[0011] Calculate the first subsystem identifier and the first network address through a hash algorithm to generate a first token value;

[0012] A request data packet is generated according to the first token value, the first subsystem identifier and the data request information.

[0013] Preferably, it also includes:

[0014] Determining whether the hash algorithm used to calculate the first token value is a default hash algorithm;

[0015] If not, an algorithm identifier of the hash algorithm used to calculate the first token value is added to the request data packet.

[0016] Preferably, the server identity authentication table includes a server subsystem identifier and a corresponding server network address, and the response data packet includes a second subsystem identifier and a second token value;

[0017] The server identity authentication is performed based on the response data packet through the pre-built server identity authentication table, including:

[0018] Through the server identity authentication table, the second subsystem identifier is matched with the server subsystem identifier, and the corresponding server network address is retrieved;

[0019] Determine whether the response data packet contains a hash algorithm identifier;

[0020] If it exists, the server verification token value is generated by calculating the server subsystem identifier and the server network address using the hash algorithm indicated by the hash algorithm identifier;

[0021] Determine whether the server-side verification token value is consistent with the second token value;

[0022] If they are consistent, it is determined that the server-side identity authentication is successful;

[0023] If they are inconsistent, it is determined that the server-side authentication has failed.

[0024] The present invention also discloses an integrated method for identity authentication and data transmission of an on-board embedded device, which is applied to an on-board server, and includes:

[0025] Receive the request data packet sent by the vehicle client;

[0026] Perform client authentication based on request packets using a pre-built client authentication table;

[0027] If the client identity authentication is successful, the request data packet is executed and a data response result is generated;

[0028] Generate a response data packet according to the second self attribute information and the data response result;

[0029] The response data packet is sent to the vehicle-mounted client, so that the vehicle-mounted client can perform server-side identity authentication according to the response data packet through the pre-built server-side identity authentication table; if the server-side identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device are completed.

[0030] Preferably, the client identity authentication table includes a subsystem identifier to which the client belongs and a corresponding client network address, and the request data packet includes a first subsystem identifier and a first token value;

[0031] The client authentication is performed based on the request packet through a pre-built client authentication table, including:

[0032] Through the client identity authentication table, the first subsystem identifier is matched with the client subsystem identifier, and the corresponding client network address is queried;

[0033] Determine whether the request data packet contains a hash algorithm identifier;

[0034] If it exists, the client verification token value is generated by calculating the subsystem identifier to which the client belongs and the client network address using the hash algorithm indicated by the hash algorithm identifier;

[0035] Determine whether the client verification token value is consistent with the first token value;

[0036] If they are consistent, it is determined that the client identity authentication is successful;

[0037] If they do not match, it is determined that the client authentication has failed.

[0038] Preferably, the second own attribute information includes a second belonging subsystem identifier and a second network address;

[0039] Generate a response data packet according to the second self attribute information and the data response result, including:

[0040] Calculate the second subsystem identifier and the second network address by using the same hash algorithm as the request data packet to generate a second token value;

[0041] A response data packet is generated according to the second token value, the second subsystem identifier and the data response result.

[0042] The present invention also discloses an integrated device for identity authentication and data transmission of an on-vehicle embedded device, which is applied to an on-vehicle client and includes:

[0043] A request data packet generating unit, configured to generate a request data packet according to the first self attribute information and the data request information;

[0044] A request data packet sending unit, used to send the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, execute the request data packet to generate a data response result, and generate a response data packet according to the second self attribute information and the data response result;

[0045] The server identity authentication unit is used to receive the response data packet sent by the vehicle-mounted server, and perform server identity authentication according to the response data packet through the pre-built server identity authentication table; if the server identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed.

[0046] Preferably, the first self attribute information includes a first subsystem identifier, a first network address and a hash algorithm;

[0047] The request data packet generating unit is specifically used to calculate the first subsystem identifier and the first network address through a hash algorithm to generate a first token value; and to generate a request data packet according to the first token value, the first subsystem identifier and the data request information.

[0048] Preferably, it also includes:

[0049] an algorithm determination unit, configured to determine whether a hash algorithm used to calculate a first token value is a default hash algorithm;

[0050] The algorithm identifier adding unit is used to add the algorithm identifier of the hash algorithm used to calculate the first token value to the request data packet if no.

[0051] Preferably, the server identity authentication table includes a server subsystem identifier and a corresponding server network address, and the response data packet includes a second subsystem identifier and a second token value;

[0052] The server identity authentication unit is specifically used to match the second subsystem identifier with the server subsystem identifier through the server identity authentication table, and query the corresponding server network address; determine whether the response data packet contains a hash algorithm identifier; if so, calculate the server subsystem identifier and the server network address through the hash algorithm indicated by the hash algorithm identifier to generate a server verification token value; determine whether the server verification token value is consistent with the second token value; if they are consistent, determine that the server identity authentication is successful; if not, determine that the server identity authentication has failed.

[0053] The present invention also discloses an integrated device for identity authentication and data transmission of an on-vehicle embedded device, which is applied to an on-vehicle server, and includes:

[0054] A request data packet receiving unit, used to receive a request data packet sent by the vehicle-mounted client;

[0055] A client authentication unit, used for performing client authentication according to a request data packet through a pre-built client authentication table;

[0056] A data response unit, used to execute the request data packet and generate a data response result if the client identity authentication is successful;

[0057] A response data packet generating unit, used for generating a response data packet according to the second self attribute information and the data response result;

[0058] The response data packet sending unit is used to send the response data packet to the vehicle-mounted client, so that the vehicle-mounted client can perform server-side identity authentication according to the response data packet through a pre-built server-side identity authentication table; if the server-side identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device are completed.

[0059] Preferably, the client identity authentication table includes a subsystem identifier to which the client belongs and a corresponding client network address, and the request data packet includes a first subsystem identifier and a first token value;

[0060] The client identity authentication unit is specifically used to match the first subsystem identifier with the client subsystem identifier through the client identity authentication table, and query the corresponding client network address; determine whether the request data packet has a hash algorithm identifier; if so, calculate the client subsystem identifier and the client network address through the hash algorithm indicated by the hash algorithm identifier to generate a client verification token value; determine whether the client verification token value is consistent with the first token value; if they are consistent, determine that the client identity authentication is successful; if not, determine that the client identity authentication has failed.

[0061] Preferably, the second own attribute information includes a second belonging subsystem identifier and a second network address;

[0062] The response data packet generation unit is specifically used to calculate the second subsystem identifier and the second network address through the same hash algorithm as the request data packet to generate a second token value; and generate a response data packet according to the second token value, the second subsystem identifier and the data response result.

[0063] The present invention also discloses a computer-readable medium on which a computer program is stored. When the program is executed by a processor, the method described above is implemented.

[0064] The present invention also discloses a computer device, including a memory and a processor, wherein the memory is used to store information including program instructions, the processor is used to control the execution of program instructions, and the processor implements the above method when executing the program.

[0065] The present invention also discloses a computer program product, including a computer program / instruction, and the method described above is implemented when the computer program / instruction is executed by a processor.

[0066] The vehicle-mounted client of the present invention generates a request data packet according to the first self-attribute information and the data request information; sends the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, the request data packet is executed to generate a data response result, and a response data packet is generated according to the second self-attribute information and the data response result; the response data packet sent by the vehicle-mounted server is received, and the server identity authentication is performed according to the response data packet through a pre-built server identity authentication table; if the server identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed, based on the observer mode that saves the most cost in the actual application of CoAP, the hash algorithm is used in the data transmission process, and the identity authentication is completed while the client and the server are performing data transmission, without sending a handshake message in advance, and the confidentiality of important data during identity authentication and the real-time nature of the message can still be guaranteed, thereby realizing lightweight data security interaction in the vehicle-mounted embedded device environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0067] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0068] Figure 1A flow chart of an integrated method for identity authentication and data transmission of a vehicle-mounted embedded device provided by an embodiment of the present invention;

[0069] Figure 2 A flowchart of another method for integrating identity authentication and data transmission of an on-vehicle embedded device provided by an embodiment of the present invention;

[0070] Figure 3 A flowchart of another method for integrating identity authentication and data transmission of an on-vehicle embedded device provided by an embodiment of the present invention;

[0071] Figure 4 A schematic diagram of the structure of an integrated identity authentication and data transmission device for an on-vehicle embedded device provided by an embodiment of the present invention;

[0072] Figure 5 A schematic diagram of the structure of another integrated device for identity authentication and data transmission of an on-vehicle embedded device provided by an embodiment of the present invention;

[0073] Figure 6 A schematic diagram of the structure of a computer device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0074] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0075] It should be noted that the method and device for integrating identity authentication and data transmission of a vehicle-mounted embedded device disclosed in the present application can be used in the field of artificial intelligence technology, and can also be used in any field outside the field of artificial intelligence technology. The application field of the method and device for integrating identity authentication and data transmission of a vehicle-mounted embedded device disclosed in the present application is not limited.

[0076] In order to facilitate the understanding of the technical solution provided by the present application, the relevant contents of the technical solution of the present application are first explained below. The Constrained Application Protocol (CoAP) protocol is an application layer transmission protocol based on a request / response model in a constrained environment. It enables resource-constrained devices to use application layer protocols similar to the Hypertext Transfer Protocol (HTTP) to complete data interaction. Its resource access method with the front-end and back-end interaction mode (RESTful) belongs to the application layer protocol above the User Datagram / Internet (UDP / IP) protocol. The so-called resource-constrained environment mainly refers to the fact that the devices in the network have only limited storage space, computing power and communication bandwidth. In order to adapt to this resource-constrained environment, CoAP is designed to be lightweight and uses binary form to define the content of the data packet. Compared with the HTTP protocol, the data packet is smaller. Therefore, the CoAP protocol is also suitable for use in low-power, embedded train control network environments.

[0077] This application aims at the current application field of train control network and provides a lightweight data security interaction method. In the application environment where the storage space, computing power and communication bandwidth of the embedded device connected to the train control network are limited, when implementing the request / response data interaction communication mode based on the CoAP protocol, the train network topology related information is used to provide a simple CoAP protocol identity authentication method with low resource overhead to realize the relevant requirements of data information security, prevent the receiving end from being tracked and attacked and the sending end from being tampered with during transmission, and achieve the security purpose of meeting actual needs at an acceptable cost. The application has important theoretical significance and application value and has good application prospects.

[0078] The following takes the identity authentication and data transmission integration device of the vehicle-mounted embedded device as an example of the execution subject to illustrate the implementation process of the identity authentication and data transmission integration method of the vehicle-mounted embedded device provided by the embodiment of the present invention. It can be understood that the execution subject of the identity authentication and data transmission integration method of the vehicle-mounted embedded device provided by the embodiment of the present invention includes but is not limited to the identity authentication and data transmission integration device of the vehicle-mounted embedded device.

[0079] Figure 1 A flowchart of an integrated method for identity authentication and data transmission of a vehicle-mounted embedded device provided by an embodiment of the present invention, such as Figure 1 As shown, applied to a vehicle-mounted client, the method includes:

[0080] Step 101: Generate a request data packet according to the first self attribute information and data request information.

[0081] In the embodiment of the present invention, the first own attribute information includes but is not limited to the first subsystem identifier, the first network address and the hash algorithm.

[0082] Step 102: Send the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, execute the request data packet to generate a data response result, and generate a response data packet according to the second self-attribute information and the data response result.

[0083] In the embodiment of the present invention, the client identity authentication table includes a subsystem identifier to which the client belongs and a corresponding client network address, and the request data packet includes a first subsystem identifier and a first token value.

[0084] Step 103: Receive a response data packet sent by the vehicle-mounted server, and perform server identity authentication according to the response data packet using a pre-built server identity authentication table.

[0085] In the embodiment of the present invention, the server identity authentication table includes a server subsystem identifier and a corresponding server network address, and the response data packet includes a second subsystem identifier and a second token value.

[0086] Step 104: If the server-side identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed.

[0087] In the technical solution provided by the embodiment of the present invention, the vehicle-mounted client generates a request data packet according to the first self-attribute information and the data request information; sends the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, the request data packet is executed to generate a data response result, and a response data packet is generated according to the second self-attribute information and the data response result; the response data packet sent by the vehicle-mounted server is received, and the server identity authentication is performed according to the response data packet through a pre-built server identity authentication table; if the server identity authentication is successful, the two-way identity authentication and data transmission of the vehicle-mounted embedded device are integrated, based on the observer mode that saves the most cost in the actual application of CoAP, the hash algorithm is used in the data transmission process, and the identity authentication is completed while the client and the server are performing data transmission. There is no need to send a handshake message in advance, and the confidentiality of important data during identity authentication and the real-time nature of the message can still be guaranteed, thereby realizing lightweight data security interaction in the vehicle-mounted embedded device environment.

[0088] Figure 2 A flowchart of another method for integrating identity authentication and data transmission of an on-vehicle embedded device provided by an embodiment of the present invention is shown in FIG. Figure 2As shown, applied to a vehicle-mounted client, the method includes:

[0089] Step 201: Receive a request data packet sent by a vehicle-mounted client.

[0090] Step 202: Perform client identity authentication according to the request data packet using a pre-built client identity authentication table.

[0091] In the embodiment of the present invention, the client identity authentication table includes a subsystem identifier to which the client belongs and a corresponding client network address, and the request data packet includes a first subsystem identifier and a first token value.

[0092] In the embodiment of the present invention, the client identity authentication table includes a subsystem identifier to which the client belongs and a corresponding client network address, and the request data packet includes a first subsystem identifier and a first token value.

[0093] Step 203: If the client identity authentication is successful, the request data packet is executed to generate a data response result.

[0094] Step 204: Generate a response data packet according to the second self attribute information and the data response result.

[0095] In the embodiment of the present invention, the second own attribute information includes but is not limited to the second subsystem identifier and the second network address.

[0096] Step 205: Send the response data packet to the vehicle-mounted client, so that the vehicle-mounted client can perform server-side identity authentication according to the response data packet through the pre-built server-side identity authentication table; if the server-side identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed.

[0097] In the technical solution provided by the embodiment of the present invention, the vehicle-mounted client generates a request data packet according to the first self-attribute information and the data request information; sends the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, the request data packet is executed to generate a data response result, and a response data packet is generated according to the second self-attribute information and the data response result; the response data packet sent by the vehicle-mounted server is received, and the server identity authentication is performed according to the response data packet through a pre-built server identity authentication table; if the server identity authentication is successful, the two-way identity authentication and data transmission of the vehicle-mounted embedded device are integrated, based on the observer mode that saves the most cost in the actual application of CoAP, the hash algorithm is used in the data transmission process, and the identity authentication is completed while the client and the server are performing data transmission. There is no need to send a handshake message in advance, and the confidentiality of important data during identity authentication and the real-time nature of the message can still be guaranteed, thereby realizing lightweight data security interaction in the vehicle-mounted embedded device environment.

[0098] It is worth mentioning that both the on-board client and the on-board server are on-board embedded devices connected to the train network.

[0099] Figure 3 A flowchart of another method for integrating identity authentication and data transmission of an on-vehicle embedded device provided by an embodiment of the present invention is shown in FIG. Figure 3 As shown, the method includes:

[0100] Step 301: The vehicle-mounted client calculates the first subsystem identifier and the first network address through a hash algorithm to generate a first token value.

[0101] In the embodiment of the present invention, the hash algorithm can be selected according to actual needs, and the vehicle-mounted client can use the default hash algorithm for calculation, or can use other hash algorithms for calculation.

[0102] In the embodiment of the present invention, the vehicle-mounted client is a vehicle-mounted CoAP client.

[0103] In the embodiment of the present invention, the first subsystem identifier is the subsystem identifier of the vehicle client, and the first network address is the network access IP address of the vehicle client. Specifically, each vehicle client initializes the subsystem identifier (DevID i , i = 1, 2, 3...), the IP address of the device itself (DevIP i , i=1, 2, 3...).

[0104] Specifically, the vehicle client is based on the first subsystem identifier DevID i and the first network address DevIPi , use the hash algorithm to calculate the first hash value DevHASH i ; Take the first hash value DevHASH i The first 32 bits of the DevTKN are used as the first token value of the vehicle client. i .

[0105] Step 302: The vehicle-mounted client generates a request data packet according to the first token value, the first subsystem identifier and the data request information.

[0106] In the embodiment of the present invention, the request data packet is a CoAP request data packet, and the data request information is a service data request that needs to be requested to be executed by the server.

[0107] Specifically, a CoAP request data packet is generated according to the data request information; the first token value DevTKN i Fill in the token field of the CoAP request packet; get the first token value DevTKN i length, the DevTKN i The length of the packet is filled into the TKL field of the CoAP request data packet; the first subsystem identifier of the packet is also filled into the CoAP request data packet to generate a request data packet that needs to be transmitted to the vehicle server.

[0108] Step 303 : The vehicle-mounted client determines whether the hash algorithm used to calculate the first token value is a default hash algorithm. If so, execute step 305 ; if not, execute step 304 .

[0109] In the embodiment of the present invention, the default hash algorithm is a hash algorithm agreed upon between the vehicle-mounted client and the vehicle-mounted server.

[0110] In an embodiment of the present invention, if the hash algorithm used to calculate the first token value is the default hash algorithm, there is no need to notify the vehicle-mounted server of the hash algorithm calculated this time, and step 305 is continued to be executed; if the hash algorithm used to calculate the first token value is not the default hash algorithm, it indicates that other hash algorithms are used in this calculation, and the vehicle-mounted server needs to be notified so that the vehicle-mounted server can use the same hash algorithm for identity authentication to avoid misjudgment, and step 304 is continued to be executed.

[0111] Step 304: The in-vehicle client adds the algorithm identifier of the hash algorithm for calculating the first token value to the request data packet.

[0112] In the embodiment of the present invention, if other hash algorithms are used in this calculation, the algorithm identifier of the hash algorithm is also filled into the CoAP request data packet.

[0113] Step 305: The vehicle-mounted client sends the request data packet to the vehicle-mounted server.

[0114] In the embodiment of the present invention, the vehicle-mounted client identifies the T field in the CoAP protocol header as a CON type, and sends the message to the vehicle-mounted server in the form of a POST request.

[0115] In an embodiment of the present invention, the vehicle-mounted client sends a CoAP request data packet to the vehicle-mounted server, so that the vehicle-mounted server can receive the CoAP request data packet sent by the vehicle-mounted client, and perform client identity authentication and corresponding data processing.

[0116] Step 306: The vehicle-mounted server matches the first subsystem identifier with the client subsystem identifier through the client identity authentication table, and queries the corresponding client network address.

[0117] In an embodiment of the present invention, the vehicle-mounted CoAP client and the vehicle-mounted CoAP server use the CoAP header token field data as identity information, and both parties authenticate the data to determine the security of the client and the service. If the security is determined to meet the requirements, the data access request is completed based on the session.

[0118] In the embodiment of the present invention, the client identity authentication table is pre-configured. Specifically, the vehicle-mounted server generates a client identity authentication table based on the client subsystem identifier (DevID i , i=1, 2, 3...), client network address (DevIP i , i=1, 2, 3...), hash algorithm, establish client identity authentication table.

[0119] Specifically, the vehicle-mounted server matches the first subsystem identifier carried by the request data packet with the client subsystem identifier stored in the client identity authentication table to determine the corresponding client network address.

[0120] Step 307 , the vehicle-mounted server determines whether the request data packet contains a hash algorithm identifier. If so, execute step 308 ; if not, execute step 309 .

[0121] In an embodiment of the present invention, if a hash algorithm identifier exists in the request data packet, it indicates that the vehicle-mounted client does not use the default hash algorithm to calculate the first token value, and step 208 is continued to be executed; if no hash algorithm identifier exists in the request data packet, it indicates that the vehicle-mounted client uses the default hash algorithm to calculate the first token value, and step 309 is continued to be executed.

[0122] Step 308 : The vehicle-mounted server calculates the subsystem identifier to which the client belongs and the client network address through the hash algorithm indicated by the hash algorithm identifier, generates a client verification token value, and continues to execute step 310 .

[0123] In the embodiment of the present invention, if the vehicle-mounted client does not use the default hash algorithm to calculate the first token value, the indicated hash algorithm is determined according to the hash algorithm identifier; the subsystem identifier to which the client belongs and the client network address are calculated by the determined hash algorithm to obtain a first verification hash value; the first 32 bits of the first verification hash value are taken as the client verification token value DevTKN i ', continue to step 310.

[0124] Step 309 : The vehicle-mounted server calculates the subsystem identifier to which the client belongs and the client network address through a default hash algorithm to generate a client verification token value.

[0125] In the embodiment of the present invention, the subsystem identifier to which the client belongs and the client network address are calculated by the default hash algorithm to obtain a first verification hash value; the first 32 bits of the first verification hash value are taken as the client verification token value DevTKN of the vehicle-mounted client. i '.

[0126] Step 310: The vehicle-mounted server determines whether the client verification token value is consistent with the first token value. If they are consistent, execute step 311; if they are inconsistent, the process ends.

[0127] In this embodiment of the present invention, if the client verification token value is consistent with the first token value, it is determined that the client identity authentication is successful, and step 311 is continued; if the client verification token value is inconsistent with the first token value, it is determined that the client identity authentication fails, the request is discarded, and the process ends.

[0128] Step 311: The vehicle-mounted server executes the request data packet and generates a data response result.

[0129] In the embodiment of the present invention, if the in-vehicle server passes the identity authentication of the in-vehicle client, the request data packet is executed according to the data request information to generate a data response result.

[0130] Step 312: The vehicle-mounted server calculates the second subsystem identifier and the second network address by using the same hash algorithm as the request data packet to generate a second token value.

[0131] In the embodiment of the present invention, the vehicle-mounted server is a vehicle-mounted CoAP server.

[0132] In the embodiment of the present invention, the second subsystem identifier is the subsystem identifier of the vehicle server, and the second network address is the network access IP address of the vehicle server. i, i = 1, 2, 3...), the IP address of the device itself (SrvIP i , i=1, 2, 3...).

[0133] Specifically, the vehicle server is based on the second subsystem identifier SrvID i and the second network address SrvIP i , use the same hash algorithm as the request data packet to calculate the second hash value SrvHASH i ; Get the second hash value SrvHASH i The first 32 bits of the second token value SrvTKN of the vehicle server are used as i .

[0134] Step 313: The vehicle-mounted server generates a response data packet according to the second token value, the second subsystem identifier and the data response result.

[0135] In the embodiment of the present invention, the response data packet is a CoAP response data packet in response to the request data packet, and the data response result is a corresponding execution result in response to the service data request.

[0136] Specifically, a CoAP response data packet is generated according to the data response result; the second token value SrvTKN i Fill in the token field of the CoAP response data packet; get the second token value SrvTKN i length, SrvTKN i The length is filled into the TKL field of the CoAP response data packet; the second subsystem identifier of the system is also filled into the CoAP response data packet to generate a response data packet that finally needs to be transmitted to the vehicle client.

[0137] Step 314: The vehicle-mounted server sends a response data packet to the vehicle-mounted client.

[0138] In an embodiment of the present invention, the vehicle-mounted server sends a CoAP response data packet to the vehicle-mounted client, so that the vehicle-mounted client can receive the CoAP response data packet sent by the vehicle-mounted server and perform server identity authentication and corresponding data request.

[0139] Step 315: The vehicle-mounted client matches the second subsystem identifier with the server subsystem identifier through the server identity authentication table, and queries the corresponding server network address.

[0140] In an embodiment of the present invention, the vehicle-mounted CoAP client and the vehicle-mounted CoAP server use the CoAP header token field data as identity information, and both parties authenticate the data to determine the security of the client and the service. If the security is determined to meet the requirements, the data access request is completed based on the session.

[0141] In the embodiment of the present invention, the server identity authentication table is pre-configured. Specifically, the vehicle client generates a server identity authentication table based on the server subsystem identifier (SrvID i , i = 1, 2, 3...), server network address SrvIP i , i=1, 2, 3...), and the hash algorithm agreed upon with the vehicle client to establish a server-side identity authentication table.

[0142] Specifically, the vehicle-mounted client matches the second subsystem identifier carried in the response data packet with the server subsystem identifier in the stored server identity authentication table to determine the corresponding server network address.

[0143] Step 316 , the vehicle-mounted client determines whether the response data packet contains a hash algorithm identifier. If so, execute step 317 ; if not, execute step 318 .

[0144] In an embodiment of the present invention, if there is a hash algorithm identifier in the response data packet, it indicates that the on-board server adopts the hash algorithm indicated by the hash algorithm identifier, and step 317 is continued to be executed; if there is no hash algorithm identifier in the response data packet, it indicates that the on-board server adopts the default hash algorithm to calculate the second token value, and step 318 is continued to be executed.

[0145] Step 317 , the vehicle-mounted client calculates the subsystem identifier to which the server belongs and the server network address through the hash algorithm indicated by the hash algorithm identifier, generates a server verification token value, and continues to execute step 219 .

[0146] In the embodiment of the present invention, if the vehicle-mounted server adopts the hash algorithm indicated by the hash algorithm identifier, the indicated hash algorithm is determined according to the hash algorithm identifier; the subsystem identifier to which the server belongs and the server network address are calculated by the determined hash algorithm to obtain a second verification hash value; the first 32 bits of the second verification hash value are taken as the server verification token value SrvTKN i ', continue to step 319.

[0147] Step 318: The vehicle-mounted client calculates the server subsystem identifier and the server network address using a default hash algorithm to generate a server verification token value.

[0148] In the embodiment of the present invention, the subsystem identifier to which the server belongs and the server network address are calculated by the default hash algorithm to obtain a second verification hash value; the first 32 bits of the second verification hash value are taken as the server verification token value SrvTKN of the vehicle-mounted server. i '.

[0149] Step 319, the vehicle client determines whether the server verification token value is consistent with the second token value. If they are consistent, execute step 320; if they are inconsistent, the process ends.

[0150] In an embodiment of the present invention, if the server-side verification token value is consistent with the second token value, it is determined that the server-side identity authentication is successful, and step 320 is continued; if the server-side verification token value is inconsistent with the second token value, it is determined that the server-side identity authentication has failed, the request is discarded, and the process ends.

[0151] Step 320: Complete the integration of two-way identity authentication and data transmission of the vehicle-mounted embedded device.

[0152] In the embodiment of the present invention, if the vehicle client passes the identity authentication of the vehicle server, the two-way identity authentication and data transmission between the vehicle client and the vehicle server are integrated. The vehicle client can continue to execute subsequent data processing logic based on the data response result in the response data packet according to business requirements.

[0153] The present invention is based on the observer mode which saves the most cost in the actual application of CoAP. In the process of data transmission, the hash algorithm is used to complete the identity authentication while the data is transmitted between the client and the server. There is no need to send a handshake message in advance. The confidentiality of important data during identity authentication and the real-time nature of the message can still be guaranteed, thus realizing a lightweight data security interaction method in the vehicle-mounted embedded device environment.

[0154] It is worth noting that the acquisition, storage, use, and processing of data in the technical solution of this application are in compliance with the relevant provisions of laws and regulations. The user information in the embodiments of this application is obtained through legal and compliant channels, and the acquisition, storage, use, and processing of user information are authorized and agreed by the customer.

[0155] It is worth noting that the information collected in this application is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of relevant data comply with the relevant laws, regulations and standards of relevant countries and regions, take necessary confidentiality measures, do not violate public order and good customs, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0156] It is worth noting that the technical solution provided in this application provides users with corresponding operation entrances for them to choose to agree or reject the automated decision-making results; if the user chooses to reject, the expert decision-making process will be entered.

[0157] In the technical solution of the method for integrating identity authentication and data transmission of a vehicle-mounted embedded device provided by an embodiment of the present invention, the vehicle-mounted client generates a request data packet according to the first self-attribute information and data request information; sends the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, the request data packet is executed to generate a data response result, and a response data packet is generated according to the second self-attribute information and the data response result; the response data packet sent by the vehicle-mounted server is received, and the server identity authentication is performed according to the response data packet through a pre-built server identity authentication table; if the server identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed, based on the observer mode that saves the most cost in the actual application of CoAP, the hash algorithm is used in the data transmission process, and the identity authentication is completed while the client and the server are performing data transmission. There is no need to send a handshake message in advance, and the confidentiality of important data during identity authentication and the real-time nature of the message can still be guaranteed, thereby realizing lightweight data security interaction in the vehicle-mounted embedded device environment.

[0158] Figure 4 The present invention provides a schematic diagram of a structure of an integrated device for identity authentication and data transmission of a vehicle-mounted embedded device, which is used to execute the above-mentioned integrated method for identity authentication and data transmission of a vehicle-mounted embedded device, such as Figure 4 As shown, the device includes: a request data packet generating unit 11, a request data packet sending unit 12 and a server identity authentication unit 13.

[0159] The request data packet generating unit 11 is used to generate a request data packet according to the first own attribute information and the data request information.

[0160] The request data packet sending unit 12 is used to send the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication based on the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, the request data packet is executed to generate a data response result, and a response data packet is generated based on the second self-attribute information and the data response result.

[0161] The server identity authentication unit 13 is used to receive the response data packet sent by the vehicle-mounted server, and perform server identity authentication according to the response data packet through the pre-built server identity authentication table; if the server identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed.

[0162] In an embodiment of the present invention, the first self-attribute information includes a first subsystem identifier, a first network address and a hash algorithm; the request data packet generation unit 11 is specifically used to calculate the first subsystem identifier and the first network address through a hash algorithm to generate a first token value; and generate a request data packet according to the first token value, the first subsystem identifier and the data request information.

[0163] In the embodiment of the present invention, the system further includes: an algorithm determining unit 14 and an algorithm identifier adding unit 15 .

[0164] The algorithm determination unit 14 is used to determine whether the hash algorithm used to calculate the first token value is a default hash algorithm;

[0165] The algorithm identifier adding unit 15 is used for adding the algorithm identifier of the hash algorithm for calculating the first token value to the request data packet if no.

[0166] In an embodiment of the present invention, the server identity authentication table includes a server subsystem identifier and a corresponding server network address, and the response data packet includes a second subsystem identifier and a second token value; the server identity authentication unit 13 is specifically used to match the second subsystem identifier with the server subsystem identifier through the server identity authentication table, and query the corresponding server network address; determine whether the response data packet contains a hash algorithm identifier; if so, calculate the server subsystem identifier and the server network address through the hash algorithm indicated by the hash algorithm identifier to generate a server verification token value; determine whether the server verification token value is consistent with the second token value; if they are consistent, determine that the server identity authentication is successful; if not, determine that the server identity authentication has failed.

[0167] In the scheme of the embodiment of the present invention, the vehicle-mounted client generates a request data packet according to the first self-attribute information and the data request information; sends the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, the request data packet is executed to generate a data response result, and a response data packet is generated according to the second self-attribute information and the data response result; the response data packet sent by the vehicle-mounted server is received, and the server identity authentication is performed according to the response data packet through a pre-built server identity authentication table; if the server identity authentication is successful, the two-way identity authentication and data transmission of the vehicle-mounted embedded device are integrated, based on the observer mode that saves the most cost in the actual application of CoAP, the hash algorithm is used in the data transmission process, and the identity authentication is completed while the client and the server are transmitting data, without sending a handshake message in advance, and the confidentiality of important data during identity authentication and the real-time nature of the message can still be guaranteed, thereby realizing lightweight data security interaction in the vehicle-mounted embedded device environment.

[0168] Figure 5 A structural diagram of another integrated device for identity authentication and data transmission of an on-board embedded device provided by an embodiment of the present invention, which is applied to an on-board server, and is used to execute the above-mentioned integrated method for identity authentication and data transmission of an on-board embedded device, such as Figure 5 As shown, the device includes: a request data packet receiving unit 21, a client identity authentication unit 22, a data response unit 23, a response data packet generating unit 24 and a response data packet sending unit 25.

[0169] The request data packet receiving unit 21 is used to receive a request data packet sent by the vehicle-mounted client.

[0170] The client identity authentication unit 22 is used to perform client identity authentication according to the request data packet through a pre-built client identity authentication table.

[0171] The data response unit 23 is used to execute the request data packet and generate a data response result if the client identity authentication is successful.

[0172] The response data packet generating unit 24 is used to generate a response data packet according to the second own attribute information and the data response result.

[0173] The response data packet sending unit 25 is used to send the response data packet to the vehicle-mounted client, so that the vehicle-mounted client can perform server-side identity authentication according to the response data packet through the pre-built server-side identity authentication table; if the server-side identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device are completed.

[0174] In an embodiment of the present invention, the client identity authentication table includes a client subsystem identifier and a corresponding client network address, and the request data packet includes a first subsystem identifier and a first token value; the client identity authentication unit 22 is specifically used to match the first subsystem identifier with the client subsystem identifier through the client identity authentication table, and query the corresponding client network address; determine whether the request data packet contains a hash algorithm identifier; if so, calculate the client subsystem identifier and the client network address through the hash algorithm indicated by the hash algorithm identifier to generate a client verification token value; determine whether the client verification token value is consistent with the first token value; if they are consistent, determine that the client identity authentication is successful; if they are inconsistent, determine that the client identity authentication has failed.

[0175] In an embodiment of the present invention, the second self-attribute information includes a second subsystem identifier and a second network address; the response data packet generation unit 24 is specifically used to calculate the second subsystem identifier and the second network address through the same hash algorithm as the request data packet to generate a second token value; and generate a response data packet according to the second token value, the second subsystem identifier and the data response result.

[0176] In the scheme of the embodiment of the present invention, the vehicle-mounted client generates a request data packet according to the first self-attribute information and the data request information; sends the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, the request data packet is executed to generate a data response result, and a response data packet is generated according to the second self-attribute information and the data response result; the response data packet sent by the vehicle-mounted server is received, and the server identity authentication is performed according to the response data packet through a pre-built server identity authentication table; if the server identity authentication is successful, the two-way identity authentication and data transmission of the vehicle-mounted embedded device are integrated, based on the observer mode that saves the most cost in the actual application of CoAP, the hash algorithm is used in the data transmission process, and the identity authentication is completed while the client and the server are transmitting data, without sending a handshake message in advance, and the confidentiality of important data during identity authentication and the real-time nature of the message can still be guaranteed, thereby realizing lightweight data security interaction in the vehicle-mounted embedded device environment.

[0177] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer device, and specifically, the computer device may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0178] An embodiment of the present invention provides a computer device, including a memory and a processor, the memory is used to store information including program instructions, the processor is used to control the execution of the program instructions, and when the program instructions are loaded and executed by the processor, the steps of the embodiment of the method for integrating identity authentication and data transmission of the above-mentioned vehicle-mounted embedded device are implemented. For a specific description, please refer to the embodiment of the method for integrating identity authentication and data transmission of the above-mentioned vehicle-mounted embedded device.

[0179] Reference below Figure 6 , which shows a schematic diagram of the structure of a computer device 600 suitable for implementing an embodiment of the present application.

[0180] like Figure 6 As shown, the computer device 600 includes a central processing unit (CPU) 601, which can perform various appropriate operations and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage part 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the computer device 600 are also stored. The CPU 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0181] The following components are connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a cathode ray tube (CRT), a liquid crystal feedback device (LCD), etc., and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 610 as needed, so that a computer program read therefrom is installed as needed as the storage section 608.

[0182] In particular, according to an embodiment of the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present invention includes a computer program product, which includes a computer program tangibly contained on a machine-readable medium, and the computer program includes program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through the communication part 609, and / or installed from the removable medium 611.

[0183] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0184] For the convenience of description, the above device is described in various units according to their functions. Of course, when implementing the present application, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0185] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0186] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0187] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0188] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0189] The acquisition, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0190] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0191] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0192] The present application may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0193] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0194] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A method for integrating identity authentication and data transmission of an on-vehicle embedded device, characterized in that: Applied to a vehicle-mounted client, the method includes: Generate a request data packet according to the first self attribute information and the data request information; Sending the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, executing the request data packet to generate a data response result, and generating a response data packet according to the second self attribute information and the data response result; Receive a response data packet sent by the vehicle-mounted server, and perform server identity authentication according to the response data packet through a pre-built server identity authentication table; If the server-side identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed.

2. The method for integrating identity authentication and data transmission of an in-vehicle embedded device according to claim 1, characterized in that: The first self attribute information includes a first subsystem identifier, a first network address and a hash algorithm; The step of generating a request data packet according to the first self attribute information and the data request information includes: Calculate the first subsystem identifier and the first network address by using the hash algorithm to generate a first token value; The request data packet is generated according to the first token value, the first subsystem identifier and the data request information.

3. The method for integrating identity authentication and data transmission of an in-vehicle embedded device according to claim 2, characterized in that: Also includes: Determining whether the hash algorithm used to calculate the first token value is a default hash algorithm; If not, the algorithm identifier of the hash algorithm used to calculate the first token value is added to the request data packet.

4. The integrated method for identity authentication and data transmission of an in-vehicle embedded device according to claim 1, characterized in that: The server identity authentication table includes a server subsystem identifier and a corresponding server network address, and the response data packet includes a second subsystem identifier and a second token value; The performing server identity authentication according to the response data packet through the pre-built server identity authentication table includes: Matching the second subsystem identifier with the server subsystem identifier through the server identity authentication table to query the corresponding server network address; Determine whether the response data packet contains a hash algorithm identifier; If it exists, the server subsystem identifier and the server network address are calculated by the hash algorithm indicated by the hash algorithm identifier to generate a server verification token value; Determine whether the server verification token value is consistent with the second token value; If they are consistent, it is determined that the server-side identity authentication is successful; If they are inconsistent, it is determined that the server-side authentication has failed.

5. A method for integrating identity authentication and data transmission of an on-vehicle embedded device, characterized in that: Applied to the vehicle-mounted server, the method includes: Receive the request data packet sent by the vehicle client; Performing client identity authentication according to the request data packet using a pre-built client identity authentication table; If the client identity authentication is successful, the request data packet is executed to generate a data response result; Generate a response data packet according to the second self attribute information and the data response result; The response data packet is sent to the vehicle-mounted client, so that the vehicle-mounted client can perform server-side identity authentication according to the response data packet through a pre-built server-side identity authentication table; if the server-side identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed.

6. The method for integrating identity authentication and data transmission of an in-vehicle embedded device according to claim 5, characterized in that: The client identity authentication table includes a subsystem identifier to which the client belongs and a corresponding client network address, and the request data packet includes a first subsystem identifier and a first token value; The performing client identity authentication according to the request data packet by using a pre-built client identity authentication table includes: Matching the first subsystem identifier with the client subsystem identifier through the client identity authentication table to query the corresponding client network address; Determining whether the request data packet has a hash algorithm identifier; If so, the client verification token value is generated by calculating the subsystem identifier to which the client belongs and the client network address using the hash algorithm indicated by the hash algorithm identifier; Determine whether the client verification token value is consistent with the first token value; If they are consistent, it is determined that the client identity authentication is successful; If they do not match, it is determined that the client authentication has failed.

7. The method for integrating identity authentication and data transmission of an in-vehicle embedded device according to claim 5, characterized in that: The second own attribute information includes a second subsystem identifier and a second network address; The step of generating a response data packet according to the second self attribute information and the data response result includes: Calculate the second subsystem identifier and the second network address by using the same hash algorithm as the request data packet to generate a second token value; The response data packet is generated according to the second token value, the second subsystem identifier and the data response result.

8. An integrated device for identity authentication and data transmission of an on-vehicle embedded device, characterized in that: Applied to a vehicle-mounted client, the device comprises: A request data packet generating unit, configured to generate a request data packet according to the first self attribute information and the data request information; A request data packet sending unit, used to send the request data packet to the vehicle-mounted server, so that the vehicle-mounted server can perform client identity authentication according to the request data packet through a pre-built client identity authentication table; if the client identity authentication is successful, execute the request data packet to generate a data response result, and generate a response data packet according to the second self attribute information and the data response result; The server identity authentication unit is used to receive the response data packet sent by the vehicle-mounted server, and perform server identity authentication according to the response data packet through a pre-built server identity authentication table; if the server identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed.

9. The integrated identity authentication and data transmission device for vehicle-mounted embedded devices according to claim 8, characterized in that: The first self attribute information includes a first subsystem identifier, a first network address and a hash algorithm; The request data packet generating unit is specifically used to calculate the first subsystem identifier and the first network address through the hash algorithm to generate a first token value; and to generate the request data packet according to the first token value, the first subsystem identifier and the data request information.

10. The integrated identity authentication and data transmission device for vehicle-mounted embedded devices according to claim 9, characterized in that: Also includes: an algorithm determination unit, configured to determine whether a hash algorithm used to calculate the first token value is a default hash algorithm; An algorithm identifier adding unit is used to add the algorithm identifier of the hash algorithm for calculating the first token value to the request data packet if no.

11. The integrated identity authentication and data transmission device for vehicle-mounted embedded devices according to claim 8, characterized in that: The server identity authentication table includes a server subsystem identifier and a corresponding server network address, and the response data packet includes a second subsystem identifier and a second token value; The server identity authentication unit is specifically used to match the second subsystem identifier with the server subsystem identifier through the server identity authentication table, and query the corresponding server network address; determine whether the response data packet has a hash algorithm identifier; if so, calculate the server subsystem identifier and the server network address through the hash algorithm indicated by the hash algorithm identifier to generate a server verification token value; Determine whether the server verification token value is consistent with the second token value; If they are consistent, it is determined that the server-side identity authentication is successful; If they are inconsistent, it is determined that the server-side authentication has failed.

12. An integrated device for identity authentication and data transmission of an on-vehicle embedded device, characterized in that: Applied to the vehicle-mounted server, the device comprises: A request data packet receiving unit, used to receive a request data packet sent by the vehicle-mounted client; A client identity authentication unit, used to perform client identity authentication according to the request data packet through a pre-built client identity authentication table; A data response unit, used to execute the request data packet and generate a data response result if the client identity authentication is successful; A response data packet generating unit, used for generating a response data packet according to the second self attribute information and the data response result; The response data packet sending unit is used to send the response data packet to the vehicle-mounted client, so that the vehicle-mounted client can perform server-side identity authentication according to the response data packet through a pre-built server-side identity authentication table; if the server-side identity authentication is successful, the two-way identity authentication and data transmission integration of the vehicle-mounted embedded device is completed.

13. The integrated identity authentication and data transmission device for vehicle-mounted embedded devices according to claim 12, characterized in that: The client identity authentication table includes a subsystem identifier to which the client belongs and a corresponding client network address, and the request data packet includes a first subsystem identifier and a first token value; The client identity authentication unit is specifically used to match the first subsystem identifier with the client subsystem identifier through the client identity authentication table, and query the corresponding client network address; determine whether the request data packet has a hash algorithm identifier; if so, calculate the client subsystem identifier and the client network address through the hash algorithm indicated by the hash algorithm identifier to generate a client verification token value; Determine whether the client verification token value is consistent with the first token value; If they are consistent, it is determined that the client identity authentication is successful; If they do not match, it is determined that the client authentication has failed.

14. The integrated identity authentication and data transmission device for vehicle-mounted embedded devices according to claim 12, characterized in that: The second own attribute information includes a second belonging subsystem identifier and a second network address; The response data packet generating unit is specifically configured to calculate the second subsystem identifier and the second network address by using the same hash algorithm as the request data packet to generate a second token value; The response data packet is generated according to the second token value, the second subsystem identifier and the data response result.

15. A computer readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method for integrating identity authentication and data transmission of a vehicle-mounted embedded device as described in any one of claims 1 to 7 is implemented.

16. A computer device comprising a memory and a processor, wherein the memory is used to store information including program instructions, and the processor is used to control the execution of the program instructions, characterized in that: When the program instructions are loaded and executed by the processor, the method for integrating identity authentication and data transmission of a vehicle-mounted embedded device as described in any one of claims 1 to 7 is implemented.

17. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by the processor, the method for integrating identity authentication and data transmission of a vehicle-mounted embedded device as described in any one of claims 1 to 7 is implemented.

Images