Method and equipment for carrying out security protection on electronic equipment

By writing random numbers in electronic devices and storing the correspondence between serial numbers and random numbers in server devices, ensuring that only legal processing devices can access and brush or upgrade, the problem of lack of security protection for access to electronic devices in the prior art is solved, and the operation security guarantee of electronic devices is achieved.

CN120030543APending Publication Date: 2025-05-23VITESCO AUTOMOTIVE ELECTRONICS (CHANGCHUN) CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202311566358.6
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2023-11-22
Publication Date
2025-05-23

AI Technical Summary

Technical Problem

In the prior art, there is a lack of security protection measures for accessing electronic devices. Illegal third parties can access and read or modify the data of electronic devices through initialization programs, threatening the operational security of electronic devices.

Method used

By writing the device, the serial number of the electronic device is obtained and a random number is generated, the random number is written to the storage module of the electronic device, and the correspondence between the serial number and the random number is stored in the server device. When the processing device needs to access the electronic device, it needs to obtain the corresponding random number from the server device and compare it with the random number in the storage module. Only when the two match, the processing device is allowed to brush or upgrade the electronic device.

Benefits of technology

It effectively avoids illegal third parties accessing electronic devices, thus ensuring the operation of electronic devices safely, and further enhancing security by disabling debugging interfaces.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120030543A_ABST
    Figure CN120030543A_ABST
Patent Text Reader

Abstract

The invention discloses a method and equipment for carrying out safety protection on electronic equipment. In the invention, the random number is written into the storage module of the electronic equipment, and the corresponding relationship between the serial number of the electronic equipment and the random number is stored in the server equipment, so that when the processing equipment needs to access the electronic equipment, the random number corresponding to the serial number of the electronic equipment needs to be acquired from the server equipment and sent to the electronic equipment; only when the random number from the processing device is the same as the random number stored in the storage module, the processing device is allowed to swipe or upgrade the electronic device. Therefore, an illegal third party which cannot acquire the unique legal random number corresponding to the electronic equipment is prevented from accessing the electronic equipment, so that the operation safety of the electronic equipment is ensured.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of electronic equipment and communication technology, and in particular to a method and device for performing security protection on electronic equipment. Background Art

[0002] Currently, in the process of after-sales maintenance of electronic devices (for example, a door handle sensor of a vehicle), it is often necessary to flash or upgrade the electronic devices with the help of corresponding processing equipment.

[0003] However, there are currently no security protection measures for access to electronic devices. Illegal third parties can, for example, access electronic devices through initialization programs (eg, Bootloader) and read or modify data stored in the electronic devices, thereby threatening the operational security of the electronic devices. Summary of the invention

[0004] The starting point of the present invention is to provide a method and a device for security protection of electronic equipment, thereby solving the problems existing in the prior art.

[0005] An embodiment of the present invention provides a method for security protection of an electronic device, which is applied to a system including a writing device, an electronic device, a server device and a processing device, and the method includes:

[0006] The writing device obtains the serial number of the electronic device, obtains a random number, writes the random number into a storage module of the electronic device, and sends the serial number and the random number as a pair of data having a corresponding relationship to the server device;

[0007] The server device stores the corresponding relationship between the serial number and the random number;

[0008] The processing device obtains the serial number of the electronic device, obtains a random number corresponding to the serial number from the server device, and sends the random number to the electronic device; and

[0009] The electronic device compares the random number from the processing device with the random number stored in the storage module. If the two are the same, the processing device is allowed to flash or upgrade the electronic device. If the two are different, the processing device is not allowed to flash or upgrade the electronic device.

[0010] Optionally, the writing device and / or the processing device obtains the serial number of the electronic device by scanning a barcode on the electronic device.

[0011] Optionally, the writing device obtains the random number from the server device.

[0012] Optionally, the writing device writes the random number into a storage module of the electronic device through a debugging interface.

[0013] Optionally, after the electronic device leaves the production line, the debugging interface is disabled.

[0014] An embodiment of the present invention further provides an electronic device, the electronic device comprising a storage module, and the electronic device is used for:

[0015] receiving a random number from a writing device, and storing the random number from the writing device in the storage module;

[0016] Receive a random number from a processing device, and compare the random number from the processing device with the random number stored in the storage module. If the two are the same, the processing device is allowed to flash or upgrade the electronic device. If the two are different, the processing device is not allowed to flash or upgrade the electronic device.

[0017] Optionally, the random number from the writing device is written into the storage module of the electronic device through a debugging interface.

[0018] Optionally, after the electronic device leaves the production line, the debugging interface is disabled.

[0019] Optionally, the electronic device is a sensor for a vehicle.

[0020] An embodiment of the present invention further provides a processing device, wherein the processing device is used to:

[0021] Obtaining the serial number of the electronic device, obtaining the random number corresponding to the serial number of the electronic device from a server device storing a correspondence between the serial number and the random number, and sending the random number to the electronic device;

[0022] With access permission from the electronic device, the electronic device is flashed or upgraded.

[0023] The method and device for protecting the security of electronic devices according to the embodiments of the present invention have at least the following advantages:

[0024] In the present invention, a random number is written into the storage module of the electronic device, and the correspondence between the serial number of the electronic device and the random number is stored in the server device. When the processing device needs to access the electronic device, it needs to obtain the random number corresponding to the serial number of the electronic device from the server device and send it to the electronic device. Only when the random number from the processing device is the same as the random number stored in the storage module, the processing device is allowed to flash or upgrade the electronic device. In this way, illegal third parties who cannot obtain the unique legal random number corresponding to the electronic device are prevented from accessing the electronic device, thereby ensuring the operational safety of the electronic device.

[0025] In the present invention, after the electronic device leaves the production line, the debugging interface is disabled, thereby preventing an illegal third party from accessing the electronic device through the debugging port, thereby ensuring the operational safety of the electronic device. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Other details and advantages of the present invention will become apparent from the detailed description provided below. It should be understood that the following drawings are merely schematic and not drawn to scale, and thus cannot be regarded as limiting the present application. The following will be described in detail with reference to the drawings, wherein:

[0027] Figure 1 A flow chart of a method for performing security protection on an electronic device according to a specific embodiment of the present invention is shown.

[0028] Figure 2 An application scenario of the method for performing security protection on an electronic device according to the present invention is shown. DETAILED DESCRIPTION

[0029] Embodiments of the present invention are described below with reference to the accompanying drawings. In the following description, many specific details are set forth so that those skilled in the art can more fully understand and implement the present invention. However, it is obvious to those skilled in the art that the present invention may be implemented without some of these specific details. In addition, it should be understood that the present invention is not limited to the specific embodiments described. On the contrary, any combination of the features and elements described below may be considered to implement the present invention, regardless of whether they relate to different embodiments. Therefore, the following aspects, features, embodiments and advantages are for illustrative purposes only and should not be regarded as elements or limitations of the claims unless clearly stated in the claims.

[0030] Now refer to Figure 1 , shows a flow chart of a method for protecting the security of an electronic device according to a specific embodiment of the present invention. The method is applied to a system including a writing device, an electronic device, a server device and a processing device. Figure 1 As shown, the method includes:

[0031] Step S101, the writing device obtains the serial number of the electronic device, obtains a random number, writes the random number into the storage module of the electronic device, and sends the serial number and the random number as a pair of data with a corresponding relationship to the server device.

[0032] Step S102: The server device stores the correspondence between the serial number and the random number.

[0033] Step S103: the processing device obtains the serial number of the electronic device, obtains a random number corresponding to the serial number from the server device, and sends the random number to the electronic device.

[0034] Step S104, the electronic device compares the random number from the processing device with the random number stored in the storage module. If the two are the same, the processing device is allowed to flash or upgrade the electronic device. If the two are different, the processing device is not allowed to flash or upgrade the electronic device.

[0035] Specifically, the writing device may obtain the serial number of the electronic device in any suitable manner, and these variations do not exceed the scope of protection of the present invention. For example, a barcode (e.g., a QR code) corresponding to the serial number of the electronic device may be provided on the housing of the electronic device, and the writing device may obtain the serial number of the electronic device by scanning the barcode.

[0036] Specifically, the writing device may obtain the random number in any suitable manner, and these variations do not exceed the protection scope of the present invention. For example, the writing device may send a request to the server device, and the server device generates a random number and sends the random number to the writing device.

[0037] Specifically, the writing device can write the random number into the storage module of the electronic device in any suitable manner, and these variations do not exceed the protection scope of the present invention. For example, the writing device can write the random number into the storage module of the electronic device through a debugging interface.

[0038] Specifically, the processing device may obtain the serial number of the electronic device in any suitable manner, and these variations do not exceed the protection scope of the present invention. For example, the processing device may obtain the serial number of the electronic device by scanning a barcode on the housing of the electronic device, or the processing device may also connect to the bootloader of the electronic device through a software tool and then read the serial number of the electronic device.

[0039] Preferably, the debug interface is disabled after the electronic device leaves the production line.

[0040] based on Figure 1Based on the principle of the method for protecting the security of an electronic device in the embodiment of the present invention, another specific embodiment of the present invention provides an electronic device. The electronic device includes a storage module, and the electronic device is configured to:

[0041] receiving a random number from a writing device, and storing the random number from the writing device in a storage module;

[0042] Receive a random number from a processing device, and compare the random number from the processing device with the random number stored in the storage module. If the two are the same, the processing device is allowed to flash or upgrade the electronic device. If the two are different, the processing device is not allowed to flash or upgrade the electronic device.

[0043] Specifically, any suitable method can be used to write the random number from the writing device into the storage module of the electronic device, and these variations do not exceed the protection scope of the present invention. For example, the random number from the writing device can be written into the storage module of the electronic device through the debugging interface.

[0044] Preferably, the debug interface is disabled after the electronic device leaves the production line.

[0045] The storage module may be any suitable module having a data storage function. For example, the storage module may be a Flash memory.

[0046] The electronic device may be any device that has security protection requirements, and these variations do not exceed the protection scope of the present invention. For example, the electronic device may be a sensor for a vehicle, such as a door handle sensor.

[0047] based on Figure 1 Based on the principle of the method for protecting the security of electronic devices in the present invention, another specific embodiment of the present invention provides a processing device. The processing device is configured to:

[0048] Obtaining the serial number of the electronic device, obtaining the random number corresponding to the serial number of the electronic device from a server device storing a correspondence between the serial number and the random number, and sending the random number to the electronic device; and

[0049] With the access permission of the electronic device, the electronic device is flashed or upgraded.

[0050] Specifically, the processing device may send the random number to the electronic device in any suitable manner, and these variations do not exceed the protection scope of the present invention. For example, the processing device may send the random number to the electronic device in a manner such as a serial communication interface, a CAN (Controller Area Network) bus, a LIN (Local Interconnect Network) bus, etc.

[0051] based on Figure 1 The principle of the method for protecting electronic equipment in Figure 2 An application scenario of a method for protecting electronic devices is disclosed in the application scenario. In this application scenario, the electronic device that needs to be protected is a DHS (Door handle sensor), and an OTC (Online Trust Center) is used as a server device. Figure 2 As shown:

[0052] On the production line of electronic equipment:

[0053] 1. Tool A (i.e., writing device) scans the QR code on the DHS sample to obtain the SN (Serial Number) of the DHS sample.

[0054] 2. Tool A requests a 20-byte RN (Random Number) from OTC as a key (KEY). OTC generates RN and sends it to Tool A.

[0055] 3. Tool A writes the KEY into the Flash of the DHS sample through the debug interface (TOOL_0) as its unique KEY.

[0056] 4. Tool A returns SN and KEY as a pair of corresponding data to OTC for secure storage.

[0057] After the electronic device leaves the production line, the debug interface (TOOL_0) is disabled.

[0058] After the electronic equipment leaves the production line, if it needs to be flashed or upgraded:

[0059] 5. Tool B (i.e., processing equipment) obtains the SN of the DHS sample. For example, Tool B can obtain the SN of the DHS sample by scanning the QR code on the DHS sample, or Tool B can also connect to the Bootloader of the DHS sample through software to automatically read the SN of the DHS sample.

[0060] 6. Tool B obtains the KEY corresponding to the SN from OTC.

[0061] 7. Tool B transmits KEY to the DHS sample as a request key (KEY_R) via transmission mode X (for example, via serial port UART / CAN / LIN...).

[0062] 8. The DHS sample reads the KEY stored in Flash as the verification key (KEY_V).

[0063] Afterwards, the DHS sample compares the request key and the verification key. If the two are the same, the flashing or upgrading is allowed to continue; if the two are different, the flashing or upgrading is terminated.

[0064] Compared with the prior art, the method and device for protecting the security of electronic devices according to the embodiments of the present invention have at least the following advantages:

[0065] In the present invention, a random number is written into the storage module of the electronic device, and the correspondence between the serial number of the electronic device and the random number is stored in the server device. When the processing device needs to access the electronic device, it needs to obtain the random number corresponding to the serial number of the electronic device from the server device and send it to the electronic device. Only when the random number from the processing device is the same as the random number stored in the storage module, the processing device is allowed to flash or upgrade the electronic device. In this way, illegal third parties who cannot obtain the unique legal random number corresponding to the electronic device are prevented from accessing the electronic device, thereby ensuring the operational safety of the electronic device.

[0066] In the present invention, after the electronic device leaves the production line, the debugging interface is disabled, thereby preventing an illegal third party from accessing the electronic device through the debugging port, thereby ensuring the operational safety of the electronic device.

[0067] It should be noted that the above description is only for example and not for limitation of the present invention. In other embodiments of the present invention, the method may have more, fewer or different steps, and the order, inclusion and function of each step may be different from that described and illustrated. For example, generally multiple steps can be combined into a single step, and a single step can also be divided into multiple steps. For those of ordinary skill in the art, without paying creative work, the sequential changes of each step are also within the scope of protection of the present invention.

[0068] The technical solution of the present invention, in essence or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software device. The computer software device is stored in a storage medium and includes a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor or a microcontroller to execute all or part of the steps of the method described in each embodiment of the present invention.

[0069] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0070] Although the present invention has been disclosed as above with preferred embodiments, the present invention is not limited thereto. Any changes and modifications made by any person skilled in the art without departing from the spirit and scope of the present invention should be included in the protection scope of the present invention, and therefore the protection scope of the present invention should be subject to the scope defined by the claims.

Claims

1. A method for protecting the security of an electronic device, applied to a system including a writing device, an electronic device, a server device and a processing device, It is characterized in that The method comprises: The writing device obtains the serial number of the electronic device, obtains a random number, writes the random number into a storage module of the electronic device, and sends the serial number and the random number as a pair of data having a corresponding relationship to the server device; The server device stores the corresponding relationship between the serial number and the random number; The processing device obtains the serial number of the electronic device, obtains a random number corresponding to the serial number from the server device, and sends the random number to the electronic device; and The electronic device compares the random number from the processing device with the random number stored in the storage module. If the two are the same, the processing device is allowed to flash or upgrade the electronic device. If the two are different, the processing device is not allowed to flash or upgrade the electronic device.

2. The method according to claim 1, in, The writing device and / or the processing device obtains the serial number of the electronic device by scanning a barcode on the electronic device.

3. The method according to claim 1, in, The writing device obtains the random number from the server device.

4. The method according to claim 1, in, The writing device writes the random number into the storage module of the electronic device through the debugging interface.

5. The method according to claim 1, in, After the electronic device leaves the production line, the debug interface is disabled.

6. An electronic device, comprising a storage module, It is characterized in that The electronic device is used for: receiving a random number from a writing device, and storing the random number from the writing device in the storage module; Receive a random number from a processing device, and compare the random number from the processing device with the random number stored in the storage module. If the two are the same, the processing device is allowed to flash or upgrade the electronic device. If the two are different, the processing device is not allowed to flash or upgrade the electronic device.

7. The electronic device according to claim 6, in, The random number from the writing device is written into the storage module of the electronic device through the debugging interface.

8. The electronic device according to claim 6, in, After the electronic device leaves the production line, the debug interface is disabled.

9. The electronic device according to claim 6, in, The electronic device is a sensor for a vehicle.

10. A processing device, It is characterized in that The processing equipment is used for: Obtaining a serial number of an electronic device, obtaining a random number corresponding to the serial number of the electronic device from a server device storing a correspondence between serial numbers and random numbers, and sending the random number to the electronic device; With access permission from the electronic device, the electronic device is flashed or upgraded.