Communication method and device

Abstract

The invention provides a communication method and device which are used for improving the safety performance of electronic equipment. The method is suitable for a first node, and comprises the following steps: receiving first information which comprises a first instruction, an instruction identifier and a first signature; when the instruction identifier is the same as an identifier corresponding to the first instruction or the second instruction in a mapping table stored in the first node, second information is sent to the second node, and the second information comprises a second instruction, the instruction identifier and a second signature; wherein the second instruction is generated according to the first instruction, and the first instruction or the second instruction is used for indicating to execute the first operation; the second signature is associated with the first signature.

Description

Technical Field

[0001] The present application relates to the field of information security technology and provides a communication method and device. Background Art

[0002] With the intelligence of cars, some cars have remote control functions. Among them, basic remote control functions include unlocking doors, checking air conditioning status, and turning on / off cameras, etc., and advanced remote control functions include remotely controlling the car to move to a specified location. In the remote control function of the vehicle, the telematics box (T-BOX) in the vehicle can receive remote control signals and send the remote control signals to the actuators in the vehicle to achieve remote control of the vehicle. However, if the T-BOX receives malicious instructions from an attacker or the T-BOX is controlled by the attacker to generate malicious instructions, the T-BOX will send malicious instructions to the actuators in the vehicle, causing the vehicle to lose control, which may threaten the life, property and privacy of the owner and surrounding pedestrians.

[0003] Therefore, how to improve the communication security performance of electronic devices (such as vehicles) is a technical problem that needs to be solved urgently. Summary of the invention

[0004] The present application provides a communication method and device for improving the communication security performance of an electronic device.

[0005] In a first aspect, the present application provides a communication method, which is applicable to a first node, and the first node can be any electronic device with processing capabilities or a component in an electronic device, such as a vehicle-mounted communication component. The method includes: receiving first information, the first information including a first instruction, an instruction identifier, and a first signature; when the instruction identifier is the same as an identifier corresponding to the first instruction or the second instruction in a mapping table stored in the first node, sending second information to a second node, the second information including a second instruction, an instruction identifier, and a second signature; wherein the second instruction is generated according to the first instruction, and the first instruction or the second instruction is used to instruct the execution of a first operation; and the second signature is associated with the first signature.

[0006] In an embodiment of the present application, after the first node receives the first information, it can verify the instruction identifier carried in the first information. When the instruction identifier is the same as the identifier corresponding to the first instruction or the second instruction in the mapping table stored in the first node, the second information carrying the instruction identifier is sent to the second node. In this way, when the first node receives a malicious instruction from an attacker, since there is no identifier matching the malicious instruction in the first node, the first node will intercept the malicious instruction and will not send the malicious instruction to the second node. In this way, it can effectively ensure that the information source of the second instruction sent by the first node to the second node is safe, thereby effectively improving the communication security performance between the first node and the second node.

[0007] In a possible design, the first node is a vehicle-mounted communication component. In this design, the vehicle-mounted communication component can verify the instruction identifier in the first information it receives, thereby effectively improving the communication security performance of the vehicle.

[0008] In a possible design, when the first node is a vehicle-mounted communication component, the second node may be a vehicle-mounted controller or a vehicle-mounted actuator. In this design, the vehicle-mounted communication component will send the corresponding instruction information (i.e., the second information) to the vehicle-mounted controller or the vehicle-mounted actuator only when the instruction identifier in the first information it receives is successfully verified, thereby effectively improving the communication security between the vehicle-mounted communication component and the vehicle-mounted controller or the vehicle-mounted actuator, and helping to improve the safety performance of the vehicle.

[0009] In one possible design, the second signature is associated with the first signature, including: the second signature is the first signature; or, the second signature is generated based on the first signature. In this design, the second signature in the second information directly reuses the first signature in the first information, and the first node does not need to generate a new signature, so that the first node can send the second information to the second node in a timely manner, so that the second node can execute the second instruction in a timely manner. Alternatively, the first node can generate the second signature based on the first signature, and then the second node verifies the second signature when receiving the second information, which can realize the identity verification of the first node.

[0010] In one possible design, the second signature is generated based on the first signature, including: generating a third signature based on the private key and instruction identifier of the first node; the second signature is an aggregate signature of the first signature and the third signature. In this design, the first node can generate a third signature based on the private key and instruction identifier of the first node, and form an aggregate signature (i.e., the second signature) of the first signature and the third signature. In this way, when the second node receives the second information carrying the second signature, it can verify the identity of the first node and the third node by verifying the second signature.

[0011] In one possible design, the first signature is generated according to the private key of the third node, and the method further includes: verifying the success of the first signature based on the public key of the third node. In this design, when the first signature is generated according to the private key of the third node, the first node can verify the first signature based on the public key of the third node to verify the identity of the third node, thereby improving the security of the first information.

[0012] In one possible design, the first signature is associated with an instruction identifier and / or the first time information, and the second signature is associated with an instruction identifier and / or the second time information; wherein the first time information is associated with the first instruction; the second time information is the first time information, or the second time information is associated with the second instruction. Among them, "the first time information is associated with the first instruction" can be understood as the first time information including the time when the first instruction was generated, and "the second time information is associated with the second instruction" can be understood as the second time information including the time when the second instruction was generated. In this design, by associating the first signature with the instruction identifier and / or the first time information, the first signature can be further prevented from being forged by an attacker, thereby further improving the security of the first information.

[0013] In one possible design, the first time information is a first timestamp or a first counter value, and the second time information is a second timestamp or a second counter value. In this design, multiple implementations of the first time information are provided, so that the first time information can be flexibly obtained when generating the first signature; and multiple implementations of the second time information are provided, so that the second time information can be flexibly obtained when generating the second signature.

[0014] In a possible design, the mapping relationship of the mapping table includes at least one of the following: one instruction in the mapping table corresponds to one identifier; multiple instructions in the mapping table correspond to one identifier; or one instruction in the mapping table corresponds to multiple identifiers. In this design, multiple mapping relationships of the mapping table are provided so that the mapping table can be flexibly implemented.

[0015] In one possible design, the first information is received from a user device or a server. In this design, the first information can be received from a user device or a server, that is, the first node can perform security checks on information from multiple sources, which helps to improve the communication security of the first node.

[0016] In one possible design, the first information is generated based on a first communication protocol, and the second information is generated based on a second communication protocol. In this design, the first information and the second information are generated using different communication protocols, so that the first information and the second information can be adapted to information transmission between different devices.

[0017] In a second aspect, the present application provides a communication method, which is applicable to a second node, and the second node can be any electronic device with processing capabilities or a component in an electronic device, such as a vehicle-mounted controller. The communication method includes: receiving second information from a first node, the second information including a second instruction, an instruction identifier, and a second signature; wherein the second instruction is used to instruct the execution of a first operation; when the instruction identifier is the same as an identifier corresponding to the second instruction in a mapping table stored in the second node, the first operation is executed, or the second instruction is sent.

[0018] In this method, after receiving the second information, the second node can verify the instruction identifier carried in the second information, and only execute the first operation indicated by the second instruction when the instruction identifier is the same as the identifier corresponding to the second instruction in the mapping table stored in the second node. In this way, when the second node receives a malicious instruction from an attacker, since there is no identifier matching the malicious instruction in the second node, the second node will not execute the operation indicated by the malicious instruction. In this way, it can effectively ensure that the operation performed by the second node is safe, thereby effectively improving the security performance of the second node.

[0019] Alternatively, the second node sends the second instruction to other components or devices only when the instruction identifier carried in the second information is the same as the identifier corresponding to the second instruction in the mapping table stored in the second node. In this way, when the second node receives a malicious instruction from an attacker, since there is no identifier matching the malicious instruction in the second node, the second node will intercept the malicious instruction and will not send the malicious instruction to other components or devices. In this way, it can effectively ensure that the instruction information sent by the second node to other components or devices is safe, thereby effectively improving the communication security performance between the second node and other components or devices.

[0020] In one possible design, the second node is a vehicle-mounted controller or a vehicle-mounted actuator. In this design, when the second node is a vehicle-mounted controller or a vehicle-mounted actuator, the vehicle-mounted controller or the vehicle-mounted actuator can verify the second information it receives, effectively improving the communication security of the vehicle.

[0021] In one possible design, the second signature is associated with the first signature, and the first signature is associated with a private key of the third node.

[0022] In one possible design, the second signature is associated with the first signature, including: the second signature is the first signature; the method further includes: verifying the first signature successfully based on the public key of the third node. In this design, when the second signature is the first signature, the second node can verify the identity of the third node by verifying the first signature, which helps to improve the credibility of the second information.

[0023] In one possible design, the second signature is associated with the first signature, including: the second signature is an aggregate signature of the first signature and the third signature, and the third signature is associated with the private key of the first node; the method also includes: verifying the success of the aggregate signature based on the public key of the third node and the public key of the first node. In this design, when the second signature is an aggregate signature, the second node can verify the identity of the first node and the third node by verifying the aggregate signature, which helps to improve the credibility of the second information.

[0024] In one possible design, the first signature is associated with an instruction identifier and / or first time information, and the second signature is associated with an instruction identifier and / or second time information; wherein the first time information is associated with the first instruction; the second time information is the first time information, or the second time information is associated with the second instruction.

[0025] In a possible design, the first time information is a first timestamp or a first counter value, and the second time information is a second timestamp or a second counter value.

[0026] In one possible design, the second information is generated based on the second communication protocol; sending the second instruction includes: converting the communication protocol of the second instruction from the second communication protocol to the third communication protocol to obtain the second instruction after the protocol conversion; sending the second instruction after the protocol conversion. In this design, the second node sends the second instruction after the protocol conversion so that the second instruction is adapted to the communication protocol between the second node and its corresponding receiving device.

[0027] In a third aspect, an embodiment of the present application further provides a communication method, which is applicable to a third node, and the third node may be an electronic device with processing capabilities or a component in an electronic device, such as a user device. The method includes: generating first information, the first information including a first instruction, an instruction identifier, and a first signature; wherein the first instruction is used to instruct execution of a first operation, and the instruction identifier is an identifier corresponding to the first instruction in a mapping table stored in the third node; and sending the first information to the first node.

[0028] In this method, the first information generated by the third node may carry an instruction identifier and a first signature, so that the first node can verify the first information to determine that the information source of the first information is secure.

[0029] In one possible design, generating the first information includes: receiving a user instruction; and generating the first information in response to the user instruction. In this design, the third node may generate the first information in response to the user instruction; that is, the first information may be triggered by the user.

[0030] In one possible design, the first signature is generated according to a private key of the third node.

[0031] In one possible design, the first signature is associated with an instruction identifier and / or first time information; wherein the first time information is associated with the first instruction.

[0032] In one possible design, the first time information is a first timestamp or a first counter value.

[0033] In a fourth aspect, an embodiment of the present application also provides a communication method, which can be applied to a first node, and the method includes: receiving first information, the first information includes a first instruction, an instruction identifier, and a first signature; sending second information to a second node, the second information includes a second instruction, an instruction identifier, and a second signature; wherein the second instruction is generated based on the first instruction, and the first instruction or the second instruction is used to instruct the execution of a first operation; the second signature is associated with the first signature.

[0034] In this method, after receiving the first information, the first node can send the second information to the second node, and the second information includes a second instruction generated according to the first instruction, an instruction identifier, and a second signature associated with the first signature, so that the second node can verify the instruction identifier in the second information, thereby effectively improving the communication security between the first node and the second node.

[0035] In the fifth aspect, an embodiment of the present application also provides a communication method, applied to a second node, the method comprising: receiving second information from a first node, the second information comprising a second instruction, an instruction identifier, and a second signature; wherein the second instruction is used to instruct execution of a first operation; when the instruction identifier is the same as the identifier corresponding to the second instruction in a mapping table stored in the second node, and the second signature verification is successful, executing the first operation, or sending the second instruction.

[0036] In this method, the second node can verify the instruction identifier and the second signature included in the second information to ensure the security of the information source of the second instruction, thereby ensuring that the first operation indicated by the second instruction executed by the second node is safe, or ensuring that the second instruction sent by the second node is safe and will not pose a security threat to other devices or components.

[0037] In one possible design, the second signature is associated with the first signature, and the first signature is associated with a private key of the third node.

[0038] In one possible design, the second signature is associated with the first signature, including: the second signature is the first signature; the method also includes: based on the public key of the third node, successfully verifying the first signature.

[0039] In one possible design, the second signature is associated with the first signature, including: the second signature is generated based on the first signature.

[0040] In one possible design, the second signature is generated based on the first signature, including: the second signature is an aggregate signature of the first signature and the third signature, and the third signature is associated with the private key of the first node; the method also includes: based on the public key of the third node and the public key of the first node, the aggregate signature is successfully verified.

[0041] In a sixth aspect, an embodiment of the present application provides a communication device, comprising a module for implementing the method described in any one of the designs of the first aspect above, or, comprising a module for implementing the method described in any one of the designs of the second aspect above, or, comprising a module for implementing the method described in any one of the designs of the second aspect above, or, comprising a module for implementing the method described in any one of the designs of the third aspect above, or, comprising a module for implementing the method described in any one of the designs of the fourth aspect above, or, comprising a module for implementing the method described in any one of the designs of the fifth aspect above.

[0042] In the seventh aspect, an embodiment of the present application provides a communication device, including a processor, the processor is connected to a memory, the memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory, so that the communication device performs a method as designed in any one of the first aspects above, or the communication device performs a method as designed in any one of the second aspects above, or the communication device performs a method as designed in any one of the third aspects above, or the communication device performs a method as designed in any one of the fourth aspects above, or the communication device performs a method as designed in any one of the fifth aspects above.

[0043] In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program. When the computer program is executed, it implements the method as described in any one of the first aspect above, or implements the method as described in any one of the second aspect above, or implements the method as described in any one of the third aspect above, or implements the method as described in any one of the fourth aspect above, or implements the method as described in any one of the fifth aspect above.

[0044] In the ninth aspect, an embodiment of the present application provides a computer program product, which, when running on a processor, implements a method as described in any one of the first aspect above, or implements a method as described in any one of the second aspect above, or implements a method as described in any one of the third aspect above, or implements a method as described in any one of the fourth aspect above, or implements a method as described in any one of the fifth aspect above.

[0045] In the tenth aspect, an embodiment of the present application provides a chip, comprising a processor, wherein the processor is coupled to a memory and is used to execute a computer program or instruction stored in the memory. When the computer program or instruction is executed, the method as described in any one of the first aspect above is implemented, or the method as described in any one of the second aspect above is implemented, or the method as described in any one of the third aspect above is implemented, or the method as described in any one of the fourth aspect above is implemented, or the method as described in any one of the fifth aspect is implemented.

[0046] In the eleventh aspect, an embodiment of the present application provides an electronic device, comprising a processor and a memory; the memory is used to store one or more computer programs, and the one or more computer programs include computer instructions. When the processor executes the computer instructions, the method as described in any one of the first aspect is executed, or the method as described in any one of the second aspect is executed, or the method as described in any one of the third aspect is executed, or the method as described in any one of the fourth aspect is executed, or the method as described in any one of the fifth aspect is executed.

[0047] For the beneficial effects of the second to eleventh aspects mentioned above, please refer to the technical effects that can be achieved by the corresponding design in the first aspect mentioned above, and no further details will be given here. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1A A schematic diagram of a possible application scenario provided by an embodiment of the present application is exemplified;

[0049] Figure 1B A schematic diagram exemplarily shows another possible application scenario provided by an embodiment of the present application;

[0050] Figure 2 A schematic diagram of the architecture of a communication system provided by an embodiment of the present application is exemplarily shown;

[0051] Figure 3 A schematic diagram exemplarily illustrates a flow chart of a communication method provided in an embodiment of the present application;

[0052] Figure 4 A schematic diagram exemplarily illustrates a flow chart of another communication method provided in an embodiment of the present application;

[0053] Figure 5 The corresponding relationship between instruction identifiers of different nodes provided in the embodiment of the present application is exemplified;

[0054] Fig. 6A One of the schematic diagrams exemplarily illustrates an application scenario provided by an embodiment of the present application;

[0055] Figure 6B A second schematic diagram exemplarily illustrates an application scenario provided by an embodiment of the present application;

[0056] Figure 7 A schematic diagram exemplarily illustrates a flow chart of another communication method provided in an embodiment of the present application;

[0057] Figure 8 A schematic diagram showing the structure of a communication device provided in an embodiment of the present application is exemplified;

[0058] Fig. 9 A schematic structural diagram of a chip system provided in an embodiment of the present application is exemplified. DETAILED DESCRIPTION

[0059] The communication method disclosed in the embodiments of the present application can be used to improve the communication security between electronic devices, and the electronic device can be exemplarily any terminal device with communication capabilities. For example, the terminal device can be an intelligent device with communication capabilities, including but not limited to: intelligent transportation equipment, such as cars, ships, drones, trains, vans, trucks, flying cars, etc.; smart home devices, such as televisions, sweeping robots, smart desk lamps, audio systems, smart lighting systems, electrical control systems, home background music, home theater systems, intercom systems, video surveillance, etc.; intelligent manufacturing equipment, such as robots, industrial equipment, industrial computers, intelligent logistics, smart factories, etc. Alternatively, the terminal device can also be a computer device with communication capabilities, such as a desktop computer, a personal computer, a server, etc. It should also be understood that the terminal device can also be a portable electronic device with communication capabilities, such as a mobile phone, a tablet computer, a PDA, headphones, speakers, wearable devices (such as smart watches), vehicle-mounted devices, virtual reality devices, augmented reality devices, etc. Examples of portable electronic devices include but are not limited to those equipped with Or a portable electronic device with other operating systems. The portable electronic device may also be a laptop computer (Laptop) with a touch-sensitive surface (eg, a touch panel).

[0060] The technical solutions in the embodiments of the present application will be described in detail below with reference to specific drawings.

[0061] It should be noted that the terms "system" and "network" in the embodiments of the present application can be used interchangeably. "Multiple" refers to two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. "The following one (or more)" or its similar expressions refers to any combination of these items, including any combination of single or plural items (individuals). For example, one (or more) of a, b, or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0062] like Figure 1A As shown, in a technical solution, in order to improve the communication security between the mobile phone and the vehicle-mounted communication component, the mobile phone encrypts the remote control command (i.e., remote control command) and sends it to the cloud server; the cloud server transparently transmits the vehicle-mounted communication component, and the vehicle-mounted communication component receives the encrypted remote control command and decrypts the encrypted remote control command. This solution helps prevent the remote control command from being tampered with or forged, and can effectively solve the problem of untrustworthy cloud. However, due to the existence of an external communication interface in the vehicle-mounted communication component, the vehicle-mounted communication component may be controlled by an external attacker, which may cause the vehicle-mounted communication component to send malicious remote control commands to other components in the vehicle.

[0063] like Figure 1B As shown, in another technical solution, by deploying cloud-signed device trust relationships between various vehicle-mounted components (such as smart cockpit domain controller (CDC), T-BOX, vehicle information unit (VIU)), it helps to establish trust relationships between vehicle-mounted components (trust relationship 1 is established between component 1 and component 2, trust relationship 2 is established between component 2 and component 3, and trust relationship 3 is established between component 3 and component 1). Components with trust relationships can negotiate communication keys through the public and private key pairs of device certificates to achieve secure communication. This solution can ensure that attackers without a trust relationship cannot communicate with other devices, thereby effectively preventing vehicle-mounted components from being replaced by attackers. However, there is still the problem that the vehicle-mounted communication components may be controlled by external attackers, which in turn causes the vehicle-mounted communication components to send malicious remote control commands to other components in the vehicle, and the security of vehicle communications cannot be guaranteed.

[0064] It can be seen that how to improve the communication security performance of electronic equipment is a technical problem that needs to be solved urgently.

[0065] In view of this, an embodiment of the present application provides a communication method for improving the security performance of an electronic device. In this method, after the first node receives the first information, the instruction identifier carried in the first information can be verified. When the instruction identifier is the same as the identifier corresponding to the first instruction or the second instruction in the mapping table stored in the first node, the second information carrying the instruction identifier is sent to the second node. In this way, when the first node receives a malicious instruction from an attacker, since there is no identifier matching the malicious instruction in the first node, the first node will intercept the malicious instruction and will not send the malicious instruction to the second node. In this way, it can be effectively guaranteed that the information source of the second instruction sent by the first node to the second node is safe, thereby effectively improving the communication security performance between the first node and the second node.

[0066] Figure 2 A possible system architecture diagram provided by an embodiment of the present application is exemplarily shown, and the system includes a first node 101, a second node 102, and a third node 103. Among them, the first node 101, the second node 102, and the third node 103 are devices or components in devices with communication capabilities. For example, the first node 101 can be a vehicle-mounted communication component in a vehicle, the second node 102 can be a vehicle-mounted controller or a vehicle-mounted actuator in a vehicle, and the third node 103 can be, for example, a user device, and the user device can be, for example, a mobile phone, a tablet computer, a smart wearable device, etc. Optionally, the system can also include a fourth node 104, and the fourth node 104 can be, for example, a server. Information exchange can be performed between the first node 101, the second node 102, the third node 103, and the fourth node 104.

[0067] based on Figure 2 The system architecture shown in the figure, the embodiment of the present application provides a communication method, Figure 3 A flow chart of a communication method provided in an embodiment of the present application is exemplarily shown, and the communication method includes:

[0068] S301, the first node 101 receives first information, where the first information includes a first instruction, an instruction identifier, and a first signature.

[0069] The instruction identifier carried in the first information is an identifier corresponding to the first instruction in the mapping table stored in the third node 103 .

[0070] S302, when the instruction identifier is the same as the identifier corresponding to the first instruction or the second instruction in the mapping table stored in the first node 101, the first node 101 sends the second information to the second node 102, the second information including the second instruction, the instruction identifier and the second signature; wherein the second instruction can be generated according to the first instruction, the first instruction or the second instruction is used to instruct to perform the first operation; the second signature is associated with the first signature. Accordingly, the second node 102 receives the second information.

[0071] S303: When the instruction identifier is the same as the identifier corresponding to the second instruction in the mapping table stored in the second node, the second node 102 executes the first operation or sends the second instruction.

[0072] In S302, when the first node 101 successfully verifies the instruction identifier carried in the first information, the first node 101 then sends the second information carrying the instruction identifier to the second node 102, which can ensure that the information transmitted between the first node 101 and the second node 102 is safe. When the first node 101 receives a malicious instruction from an attacker, since the first node 101 does not store an identifier matching the malicious instruction, the first node 101 can intercept the malicious instruction through this mechanism, and then the first node 101 will not send the malicious instruction to the second node 102, effectively improving the communication security between the first node 101 and the second node 102.

[0073] In the embodiment of the present application, the second instruction is generated according to the first instruction, including but not limited to the following situations:

[0074] Case 1: The first instruction and the second instruction have the same instruction content, but different communication protocols. The first instruction corresponds to the first communication protocol (i.e., the first instruction is generated based on the first communication protocol), and the second instruction corresponds to the second communication protocol (i.e., the second instruction is generated based on the second communication protocol). The first node 101101 converts the first instruction from the first communication protocol to the second communication protocol to obtain the second instruction. The first communication protocol may be, for example, the message queuing telemetry transport (MQTT) protocol or the hypertext transfer protocol over secure socket layer (HTTPS) protocol, and the second communication protocol may be, for example, the scalable service-oriented middleware over IP (SOME / IP) protocol or the data distribution service (DDS) protocol. For example, both the first instruction and the second instruction are remote vehicle control instructions, but the first instruction corresponds to the MQTT protocol, and the second instruction corresponds to the SOME / IP protocol.

[0075] Case 2: The first instruction and the second instruction have different instruction contents and communication protocols. The first instruction corresponds to the first communication protocol (i.e., the first instruction is generated based on the first communication protocol), and the second instruction corresponds to the second communication protocol (i.e., the second instruction is generated based on the second communication protocol). For example, the first instruction is a remote vehicle control instruction, and the remote vehicle control instruction corresponds to the MQTT protocol; the second instruction is a heated seat instruction, a window opening instruction, a door opening instruction, and the second instruction corresponds to the SOME / IP protocol.

[0076] In the embodiment of the present application, the first signature is generated based on the private key of the third node 103. And the association between the second signature and the first signature may include but is not limited to the following two situations:

[0077] Case 1: the second signature is the first signature, that is, the first node 101 carries the first signature as the second signature in the second information, and the first node 101 does not need to generate a new signature.

[0078] In a possible implementation, the first signature is associated with the instruction identifier and / or the first time information, and the first time information is associated with the first instruction. For example, the first time information is the generation time of the first instruction, and the first signature can be generated according to the instruction identifier and / or the generation time of the first instruction. Correspondingly, the second signature can be associated with the instruction identifier and / or the second time information, and when the second signature is the first signature, the second time information is the first time information.

[0079] Case 2: The second signature is generated based on the first signature. In one possible implementation, the first node 101 can generate a third signature based on the private key and instruction identifier of the first node 101; and use the aggregate signature of the first signature and the third signature as the second signature. In this way, when the second node 102 receives the second information carrying the second signature, it can verify the identity of the first node 101 and the third node 103 by verifying the second signature, which helps to improve the security of communication between the second node 102 and the first node 101.

[0080] In a possible implementation, the first signature is associated with an instruction identifier and / or a first time information, and the first time information is associated with the first instruction. For example, the first time information is the generation time of the first instruction, and the first signature can be generated according to the instruction identifier and / or the generation time of the first instruction. Correspondingly, the second signature can be associated with the instruction identifier and / or the second time information, and when the second signature is an aggregate signature, the second time information is associated with the second instruction, for example, the second time information can be the generation time of the second instruction.

[0081] The first time information may be a first timestamp or a first counter value, and the second time information may be a second timestamp or a second counter value. Thus, multiple implementations of the first time information are provided, so that the first time information can be flexibly obtained when generating the first signature; and multiple implementations of the second time information are provided, so that the second time information can be flexibly obtained when generating the second signature.

[0082] In an embodiment of the present application, the first operation indicated by the first instruction or the second instruction to be executed may be, for example, a remote vehicle control operation, and the remote control operation may include but is not limited to at least one of the following sub-operations: parking operation, door opening operation, window opening operation, seat heating operation, or vehicle driving operation, etc.

[0083] In the specific implementation of S301, the first node 101 may receive the first information from the third node 103 or the fourth node 104. That is, the first node 101 may verify the information from multiple information sources. Figure 4 , taking the example that the first node 101 can receive the first information from the third node 103, the technical solution provided in the embodiment of the present application is explained in more detail.

[0084] Figure 4 A flow chart of another communication method provided in an embodiment of the present application is exemplarily shown, and the communication method includes:

[0085] S401, the third node 103 generates first information, where the first information includes a first instruction, an instruction identifier, and a first signature.

[0086] The first instruction is used to instruct execution of the first operation, and the instruction identifier is an identifier corresponding to the first instruction in the mapping table stored in the third node 103;

[0087] In a possible implementation, the third node 103 may receive a user instruction and generate the first information in response to the user instruction. In this way, the instruction identifier is carried in the first information triggered by the user, so that the security performance of the first information is higher.

[0088] Among them, the process of the third node 103 generating the first information in response to the user instruction can be: the third node 103 generates the first instruction in response to the user instruction, and searches for the identifier corresponding to the first instruction in the mapping table existing in the first node 103 according to the first instruction, and uses the instruction identifier as the instruction identifier; and the third node 103 generates the first signature based on its own private key; finally, the first information is generated based on the first instruction, the instruction identifier, and the first signature.

[0089] Optionally, the third node 103 may also generate the first signature based on its own private key and the instruction identifier.

[0090] S402: The third node 103 sends first information to the first node 101. Correspondingly, the first node 101 receives the first information.

[0091] S403, the first node 101 verifies the instruction identifier in the first information.

[0092] In one case, the first node 101 may match the instruction identifier in the first information with the identifier corresponding to the first instruction in the mapping table stored in the first node 101. If the instruction identifier is the same as the identifier corresponding to the first instruction, the verification is considered successful; if the instruction identifier is different from the identifier corresponding to the first instruction, the verification is considered failed.

[0093] In another case, the first node 101 may match the instruction identifier in the first information with the identifier corresponding to the second instruction in the mapping table stored in the first node 101. If the instruction identifier is the same as the identifier corresponding to the second instruction, the verification is considered successful; if the instruction identifier is different from the identifier corresponding to the second instruction, the verification is considered failed.

[0094] S404: When the instruction identifier is the same as the identifier corresponding to the first instruction or the second instruction in the mapping table stored in the first node 101, the first node 101 sends second information to the second node 102, where the second information includes the second instruction, the instruction identifier and the second signature. Accordingly, the second node 102 receives the second information.

[0095] For the relevant description corresponding to the second information, please refer to the previous text and will not be repeated here.

[0096] Optionally, before sending the second information to the second node 102, the first node 101 needs to verify the success of the first signature based on the public key of the third node 103. In this way, the security of the source of the first information is further guaranteed, thereby improving the security of the second information.

[0097] S405, the second node 102 verifies the instruction identifier in the second information.

[0098] Specifically, the second node 102 can match the instruction identifier in the first information with the identifier corresponding to the second instruction in the mapping table stored in the second node 102. If the instruction identifier is the same as the identifier corresponding to the second instruction, it is considered that the instruction identifier verification is successful; if the instruction identifier is not the same as the identifier corresponding to the second instruction, it is considered that the instruction identifier verification has failed.

[0099] S406: When the instruction identifier is the same as the identifier corresponding to the second instruction in the mapping table stored in the second node 102, the second node 102 may execute the first operation or send the second instruction.

[0100] In one case, the second node 102 has the ability to execute the first operation, and when the instruction identifier is the same as the identifier corresponding to the second instruction in the mapping table stored in the second node 102, the second node 102 can directly execute the first operation.

[0101] In another case, the second node 102 does not have the ability to perform the first operation. When the instruction identifier is the same as the identifier corresponding to the second instruction in the mapping table stored in the second node 102, the second node 102 can send the second instruction to other devices or components (such as a vehicle-mounted actuator) to enable the other devices or components to perform the first operation.

[0102] Optionally, before the second node 102 sends the second instruction to other devices or components, it can also convert the communication protocol of the second instruction from the second communication protocol to the third communication protocol, obtain the second instruction after the protocol conversion, and send the second instruction after the protocol conversion to other devices or components. In this way, the communication protocol of the second instruction can be adapted to the communication network between the second node 102 and other devices or components.

[0103] When S406 is specifically implemented, the second node 102 needs to verify whether the second signature is successfully verified before executing the first operation or sending the second instruction. As can be seen from the above description, the second signature is associated with the first signature, and there are many situations in which the second signature is associated with the first signature. Correspondingly, there are also many situations in which the second node 102 verifies the second signature. The following introduces each situation.

[0104] In case 1, the second signature is the first signature; the verification process of the second node 102 on the second signature may be: the first signature is successfully verified based on the public key of the third node 103. In this way, the second node 102 can verify the identity of the third node 103 by verifying the first signature, so as to improve the security of the second instruction.

[0105] In case 2, when the second signature is generated according to the first signature, the second signature may be an aggregate signature of the first signature and the third signature, and the third signature is associated with the private key of the first node 101; the verification process of the second signature by the second node 102 may be: the aggregate signature is successfully verified based on the public key of the third node 103 and the public key of the first node 101. In this way, the second node 102 can verify the identity of the first node 101 and the third node 103 by verifying the second signature, so as to improve the security of the second instruction.

[0106] In the embodiment of the present application, there are multiple corresponding relationships between the identifiers corresponding to different instructions transmitted between the first node 101, the second node 102, and the third node 103, which may include but are not limited to the following situations:

[0107] In case 1, the messages transmitted between the various communication nodes all carry the same instruction identifier.

[0108] like Figure 5 As shown, the third node 103 generates instruction 1-1, and the instruction identifier carried by the instruction message corresponding to instruction 1-1 is ID1; the third node 103 sends instruction 1-1 to the first node 101, and the first node 101 generates instruction 2-1 according to instruction 1-1, and the instruction identifier carried by the instruction message corresponding to instruction 2-1 is also ID1; the first node 101 sends instruction 2-1 to the second node 102, and the second node 102 generates instruction 3-1 according to instruction 2-1, and the instruction identifier carried by the instruction message corresponding to instruction 3-1 is also ID1.

[0109] For example, instruction 1-1, instruction 2-1, and instruction 3-1 are all seat heating instructions, and the instruction messages corresponding to instruction 1-1, instruction 2-1, and instruction 3-1 all carry identifiers corresponding to the seat heating instructions.

[0110] In case 2, when the instruction of the front node corresponds to the instructions of multiple rear nodes, the multiple corresponding rear instructions can use the same identifier.

[0111] like Figure 5As shown, the third node 103 generates instruction 1-2, and the instruction identifier carried by the instruction message corresponding to instruction 1-3 is ID2; the third node 103 sends instruction 1-2 to the first node 101, and the first node 101 generates instruction 2-2 and instruction 2-3 according to instruction 1-2, and the instruction identifier carried by the instruction message corresponding to instruction 2-2 and instruction 2-3 is also ID2; the first node 101 sends instruction 2-2 and instruction 2-3 to the second node 102, and the second node 102 generates instruction 3-2 according to instruction 2-2, and the instruction identifier carried by the instruction message corresponding to instruction 3-2 is ID2; and the second node 102 generates instruction 3-3 according to instruction 2-3, and the instruction identifier carried by the instruction message corresponding to instruction 3-3 is also ID2.

[0112] For example, instruction 1-2 is a remote control instruction, and the instruction message corresponding to instruction 1-2 carries an identifier corresponding to the remote control instruction; instructions 2-2 and 2-3 generated by the first node 101 according to instruction 1-2 are respectively a door opening instruction and a window opening instruction, and the instruction messages corresponding to instructions 2-2 and 2-3 also carry an identifier corresponding to the remote control instruction; accordingly, instruction 3-2 generated by the second node 102 according to instruction 2-2 is also a door opening instruction, and instruction 3-3 generated by the second node 102 according to instruction 2-3 is also a door opening instruction, and the instruction messages corresponding to instructions 3-2 and 3-3 also carry an identifier corresponding to the remote control instruction.

[0113] In case 3, when multiple instructions of the front node correspond to the same instruction of the rear node, the corresponding instruction of the rear node may have multiple identifiers at the same time.

[0114] like Figure 5 As shown, the third node 103 generates instruction 1-2, and the instruction identifier carried by the instruction message corresponding to instruction 1-2 is ID2; the third node 103 generates instruction 1-3, and the instruction identifier carried by the instruction message corresponding to instruction 1-3 is ID3; the third node 103 sends instructions 1-2 and instruction 1-3 to the first node 101, and the first node 101 generates instruction 2-3 according to instruction 1-2, or the first node 101 generates instruction 2-3 according to instruction 1-3; accordingly, the instruction identifier corresponding to instruction 2-3 includes ID2 / ID3; the first node 101 sends instruction 2-3 to the second node 102, and the second node 102 generates instruction 3-2 and instruction 3-3 according to instruction 2-3, and the instruction identifier carried by the instruction message corresponding to instruction 3-2 is ID3, and the instruction identifier carried by the instruction message corresponding to instruction 3-3 is also ID2.

[0115] For example, instruction 1-2 is a remote control instruction, and the instruction message corresponding to instruction 1-2 carries an identifier corresponding to the remote control instruction; instruction 1-3 is a seat heating instruction, and the instruction message corresponding to instruction 1-3 carries an identifier corresponding to the seat heating instruction; the third node 103 sends instructions 1-2 and 1-3 to the first node 101, and the first node 101 generates instruction 2-3 according to instruction 1-2, or the first node 101 generates instruction 2-3 according to instruction 1-3; accordingly, the instruction identifier corresponding to instruction 2-3 includes an identifier corresponding to the remote control instruction or an identifier corresponding to the seat heating instruction; the first node 101 sends instruction 2-3 to the second node 102, and the second node 102 generates instructions 3-2 and 3-3 according to instruction 2-3, instruction 3-2 is a seat heating instruction, and the instruction message corresponding to instruction 3-2 carries an identifier ID3 corresponding to the seat heating instruction; instruction 3-3 is a remote control instruction, and the instruction message corresponding to instruction 3-2 carries an identifier ID2 corresponding to the remote control instruction.

[0116] The following further introduces the solution of the embodiment of the present application in combination with the scenarios to which the embodiment of the present application is applicable.

[0117] Fig. 6A A schematic diagram of a scenario applicable to the embodiment of the present application, in Fig. 6A In the example, the first node 101 is a T-BOX, the second node 102 is a VIU / VDC, and the third node 103 is a mobile phone. Fig. 6A As shown, the mobile phone can generate a first message and send the first message to the T-BOX, the first message including a first instruction, an instruction identifier, and a first signature; after the T-BOX receives the first message, the T-BOX can match the instruction identifier in the first message with the identifier corresponding to the first instruction in the mapping table stored in the T-BOX, if the instruction identifier is the same as the identifier, it is considered that the instruction identifier verification is successful, if the instruction identifier is different from the identifier, it is considered that the instruction identifier verification is not successful; or, after the T-BOX receives the first message, the T-BOX can generate a second instruction according to the first instruction in the first message, and match the instruction identifier in the first message with the identifier corresponding to the second instruction in the mapping table stored in the T-BOX, if the instruction identifier is the same as the identifier corresponding to the second instruction, it is considered that the instruction identifier verification is successful, if the instruction identifier is different from the identifier corresponding to the second instruction, it is considered that the instruction identifier verification is not successful. When the instruction identifier verification is successful, the T-BOX generates a second message based on the second instruction, the instruction identifier, and the second signature, and sends the second message to the VIU / VDC.

[0118] Further, such as Figure 6BAs shown, the mobile phone stores a command-ID mapping table 1, the T-BOX stores a command-ID mapping table 2, and the VIU / VDC stores a command-ID mapping table 3; the first command takes the remote control command 1 as an example, and the process of the mobile phone generating the first information can be:

[0119] A1. The mobile phone receives user instructions.

[0120] The mobile phone may directly receive the user's instructions, or the mobile phone may receive the user's instructions through a cloud server.

[0121] The user command may be a voice command, a text command, a touch command, etc., which is not limited in the embodiment of the present application.

[0122] A2. The mobile phone generates a remote control instruction 1 in response to the user instruction.

[0123] A3. The mobile phone extracts the identifier ID0 corresponding to the remote control command 1 from the command-ID mapping table 1.

[0124] A4. The mobile phone generates signature 1 based on its private key, ID0 and first time information.

[0125] The first time information may be the time when the mobile phone generates the remote control instruction 1. The first time information may be a timestamp T1 or a counter value 1, and the timestamp T1 or the counter value 1 is used to indicate the time when the mobile phone generates the remote control instruction 1.

[0126] A3. The mobile phone generates first information based on remote control instruction 1, ID0 and signature 1.

[0127] The first information includes remote control instruction 1, ID0 and signature 1. Optionally, the first information may also carry a timestamp T1 or a counter value 1.

[0128] Accordingly, after receiving the first information, T-BOX can perform the following operations:

[0129] B1. T-BOX verifies the signature 1 in the first message based on the public key of the mobile phone.

[0130] In step B1, by verifying the signature 1 in the first information, it is possible to verify whether the source of the first information is secure, and to verify the identity of the mobile phone, thereby identifying forged or tampered information.

[0131] In one case, when the T-BOX successfully verifies the signature 1 in the first information, it executes step B2; in another case, the T-BOX does not execute step B1 and directly executes step B2.

[0132] B2. T-BOX generates a second instruction based on remote control instruction 1.

[0133] In one case, T-BOX converts the communication protocol of remote control instruction 1 to obtain remote control instruction 2. For example, the communication protocol of remote control instruction 1 is MQTT protocol, and the communication protocol of remote control instruction 2 is SOME / IP protocol.

[0134] In another case, T-BOX generates four-door unlocking instructions and / or window opening instructions according to remote control instruction 1, and the communication protocol of remote control instruction 1 is MQTT protocol, and the communication protocol of four-door unlocking instructions and / or window opening instructions is SOME / IP protocol, and the four-door unlocking instructions and / or window opening instructions are used as the second instructions.

[0135] B3. T-BOX matches ID0 in the first information with the instruction identifier corresponding to remote control instruction 1 in instruction-ID mapping table 2.

[0136] Specifically, when ID0 in the first information is the same as the instruction identifier corresponding to the remote control instruction 1 in the instruction-ID mapping table 2, the T-BOX executes step B5.

[0137] B4. T-BOX matches ID0 in the first information with the instruction identifier corresponding to the second instruction in instruction-ID mapping table 2.

[0138] Specifically, when ID0 in the first information and the instruction identifier corresponding to the second instruction in the instruction-ID mapping table 2 include ID0 in the first information, it is considered that ID0 and the instruction identifier corresponding to the second instruction in the instruction-ID mapping table 2 frequently match, and T-BOX executes step B5. For example, the second instruction includes a four-door unlock instruction and / or a window opening instruction, and T-BOX matches ID0 with ID0 / ID1 corresponding to the four-door unlock instruction stored in T-BOX, and / or matches ID0 with ID0 / ID2 corresponding to the window opening instruction stored in T-BOX; if the identifier ID0 / ID1 corresponding to the four-door unlock instruction includes ID0, and / or the ID0 / ID2 corresponding to the window opening instruction includes ID0, then it is considered that ID0 and the instruction identifier corresponding to the second instruction in the instruction-ID mapping table 2 frequently match.

[0139] The above steps B3 and B4 are parallel steps, and T-BOX only needs to execute one of them.

[0140] B5. T-BOX generates signature 3 based on its private key, the identifier of the second instruction and the second time information.

[0141] The second time information may be timestamp T1 or counter value 1, which is used to indicate the time when T-BOX generates the second instruction; or timestamp T2 or counter value 2, which is used to indicate the time when T-BOX generates the second instruction.

[0142] B6. T-BOX generates signature 2 based on signature 1 and signature 3.

[0143] Among them, signature 2, as an aggregate signature of signature 1 and signature 3, can reduce communication costs and the occupancy of storage space on communication nodes.

[0144] B7. T-BOX generates second information based on the second instruction, ID0 and signature 2.

[0145] Correspondingly, the second information includes the second instruction, ID0 and signature 2. Optionally, the second information may also carry a timestamp T1 or a counter value 1, or a timestamp T2 or a counter value 2.

[0146] After receiving the second information, the VIU / VDC performs the following operations:

[0147] C1, VIU / VDC verifies signature 2 based on the public key of T-BOX and the public key of the mobile phone.

[0148] In one case, step C1 is optional, and the VIU / VDC directly executes step C2 after receiving the second information. In another case, when the signature 2 is verified, the VIU / VDC executes step C2.

[0149] C2, VIU / VDC matches ID0 in the second information with the identifier corresponding to the second instruction in instruction-ID mapping table 3.

[0150] C3, VIU / VDC sends a second instruction to other devices or components.

[0151] In a possible implementation, the VIU / VDC communicates with other devices or components via a CAN network. Before sending the second instruction to other devices or components, the VIU / VDC may convert the communication protocol of the second instruction from the SOME / IP protocol to the CAN protocol.

[0152] Figure 7 A flow chart of another communication method provided in an embodiment of the present application is exemplarily shown, and the communication method includes:

[0153] S701, the first node 101 receives first information, where the first information includes a first instruction, an instruction identifier, and a first signature.

[0154] S702, the first node 101 sends second information to the second node 102, the second information including a second instruction, an instruction identifier, and a second signature; wherein the second instruction can be generated according to the first instruction, and the first instruction or the second instruction is used to instruct to perform the first operation; the second signature is associated with the first signature. Accordingly, the second node 102 receives the second information.

[0155] S703, when the instruction identifier and the identifier corresponding to the second instruction in the mapping table stored in the second node are the same, and the second signature verification succeeds, the second node 102 executes the first operation, or sends the second instruction.

[0156] In this method, after receiving the first information, the first node can send the second information to the second node, and the second information includes a second instruction generated according to the first instruction, an instruction identifier, and a second signature associated with the first signature, so that the second node can verify the instruction identifier in the second information, thereby effectively improving the communication security between the first node and the second node.

[0157] For the specific implementation of this method, please refer to the relevant description of other embodiments above.

[0158] The present application embodiment provides a communication device. Figure 8 , is a schematic diagram of the structure of a communication device provided in an embodiment of the present application. The communication device 800 can be used to implement the functions of any of the computing devices described above, and accordingly, can also execute the steps performed by the computing devices described above. Figure 8 As shown, the communication device 800 includes a transceiver unit 801 and a processing unit 802 .

[0159] In a possible embodiment, the communication device 800 is applied to a first node, and the transceiver unit 801 can receive first information, which includes a first instruction, an instruction identifier, and a first signature; when the instruction identifier is the same as the identifier corresponding to the first instruction or the second instruction in the mapping table stored in the first node, the transceiver unit 801 can also send second information to the second node, which includes the second instruction, the instruction identifier, and the second signature; wherein the second instruction is generated according to the first instruction, and the first instruction or the second instruction is used to instruct the execution of the first operation; the second signature is associated with the first signature.

[0160] In another possible embodiment, the communication device 800 is applied to the second node, and the transceiver unit 801 can receive second information from the first node, the second information including a second instruction, an instruction identifier and a second signature; wherein the second instruction is used to instruct the execution of the first operation; when the instruction identifier is the same as the identifier corresponding to the second instruction in the mapping table stored in the second node, the processing unit 802 can execute the first operation, or the transceiver unit 801 can send the second instruction.

[0161] In another possible embodiment, the communication device 800 is applied to a third node, and the processing unit 802 generates first information, which includes a first instruction, an instruction identifier, and a first signature; wherein the first instruction is used to instruct execution of a first operation, and the instruction identifier is an identifier corresponding to the first instruction in a mapping table stored in the third node; the transceiver unit 801 can send the first information to the first node.

[0162] In another possible embodiment, the communication device 800 is applied to a first node, and the transceiver unit 801 can receive first information, the first information including a first instruction, an instruction identifier, and a first signature; the transceiver unit 801 can send second information to a second node, the second information including a second instruction, an instruction identifier, and a second signature; wherein the second instruction is generated according to the first instruction, and the first instruction or the second instruction is used to instruct the execution of a first operation; and the second signature is associated with the first signature.

[0163] In another possible embodiment, the communication device 800 is applied to the second node, and the transceiver unit 801 can receive second information from the first node, and the second information includes a second instruction, an instruction identifier, and a second signature; wherein the second instruction is used to instruct the execution of the first operation; when the instruction identifier is the same as the identifier corresponding to the second instruction in the mapping table stored in the second node, and the second signature verification is successful, the processing unit 802 executes the first operation, or the transceiver unit 801 can send the second instruction.

[0164] For the specific implementation method, please refer to the method steps implemented in the above method embodiment, which will not be repeated here.

[0165] It should be understood that the division of the units in the above device is only a division of logical functions, and in actual implementation, they can be fully or partially integrated into one physical entity, or they can be physically separated. In addition, the units in the device can be implemented in the form of a processor calling software; for example, the device includes a processor, the processor is connected to a memory, and instructions are stored in the memory. The processor calls the instructions stored in the memory to implement any of the above methods or realize the functions of the units of the device, wherein the processor is, for example, a general-purpose processor, such as a central processing unit (CPU) or a microprocessor, and the memory is a memory inside the device or a memory outside the device. Alternatively, the units in the device can be implemented in the form of hardware circuits, and the functions of some or all of the units can be realized by designing the hardware circuits, and the hardware circuits can be understood as one or more processors; for example, in one implementation, the hardware circuit is an application-specific integrated circuit (ASIC), and the functions of some or all of the above units are realized by designing the logical relationship of the components in the circuit; for another example, in another implementation, the hardware circuit can be realized by a programmable logic device (PLD), taking a field programmable gate array (FPGA) as an example, which can include a large number of logic gate circuits, and the connection relationship between the logic gate circuits is configured by a configuration file, so as to realize the functions of some or all of the above units. All units of the above devices can be realized in the form of a processor calling software, or in the form of a hardware circuit, or in part by a processor calling software, and the rest by a hardware circuit.

[0166] In the embodiment of the present application, the processor is a circuit with signal processing capability. In one implementation, the processor can be a circuit with instruction reading and running capability, such as a CPU, a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP), etc.; in another implementation, the processor can realize certain functions through the logical relationship of the hardware circuit, and the logical relationship of the hardware circuit is fixed or reconfigurable, such as a hardware circuit implemented by an ASIC or PLD, such as an FPGA. In a reconfigurable hardware circuit, the processor loads a configuration document to implement the process of hardware circuit configuration, which can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (Neural Network Processing Unit, NPU) tensor processing unit (Tensor Processing Unit, TPU), deep learning processing unit (Deep learning Processing Unit, DPU), etc.

[0167] It can be seen that each unit in the above device can be one or more processors (or processing circuits) configured to implement the above method, such as: CPU, GPU, NPU, TPU, DPU, microprocessor, DSP, ASIC, FPGA, or a combination of at least two of these processor forms.

[0168] In addition, all or part of the units in the above device can be integrated together, or can be implemented independently. In one implementation, these units are integrated together and implemented in the form of a system-on-a-chip (SOC). The SOC may include at least one processor for implementing any of the above methods or implementing the functions of each unit of the device. The type of the at least one processor may be different, for example, including a CPU and an FPGA, a CPU and an artificial intelligence processor, a CPU and a GPU, etc.

[0169] The embodiment of the present application also relates to a chip system, the chip system 900, which includes at least one processor 901 and a communication interface 903. In an optional design, a memory 902 may also be included.

[0170] The embodiment of the present application does not limit the specific connection medium between the processor 901 and the memory 902. For example, it may be a bus 904.

[0171] In the chip system 900 , the processor 901 can transmit data through the communication interface 903 when communicating with other devices. Fig. 9 The processor 901 in the chip can call the computer execution instructions stored in the memory 902 so that the chip system 900 can execute any of the above method embodiments.

[0172] The processor is used to call the computer program or computer instruction stored in the memory so that the processor executes the method of any of the above embodiments.

[0173] In a possible implementation manner, the processor may be coupled to the memory through an interface.

[0174] In a possible implementation, the chip system may also directly include a memory, in which a computer program or computer instructions are stored.

[0175] For example, the memory may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct rambus RAM (DRRAM).

[0176] An embodiment of the present application also relates to a processor, which is used to call a computer program or computer instruction stored in a memory so that the processor executes the method described in any of the above embodiments.

[0177] For example, in the embodiment of the present application, the processor is an integrated circuit chip with signal processing capabilities. For example, the processor can be an FPGA, a general-purpose processor, a DSP, an ASIC or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, a system chip (system on chip, SoC), a CPU, a network processor (network processor, NP), a microcontroller (microcontroller unit, MCU), a PLD or other integrated chip, and can implement or execute the methods, steps and logic block diagrams disclosed in the embodiment of the present application. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiment of the present application can be directly embodied as a hardware decoding processor to perform, or the hardware and software modules in the decoding processor are combined and performed. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in a memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0178] It should be understood that the embodiments of the present application may be provided as a method, a system, or a computer program product.

[0179] In a possible implementation, an embodiment of the present application provides a computer-readable storage medium, which stores a program code. When the program code runs on the computer, the computer executes the above method embodiment.

[0180] In a possible implementation, an embodiment of the present application provides a computer program product. When the computer program product is run on a computer, the computer is enabled to execute the above method embodiment.

[0181] The method steps in the embodiments of the present application can be implemented by hardware, or by a processor executing software instructions. The software instructions can be composed of corresponding software modules, and the software modules can be stored in a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an erasable programmable read-only memory, an electrically erasable programmable read-only memory, a register, a hard disk, a mobile hard disk, a CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an ASIC. In addition, the ASIC can be located in a base station or a terminal. Of course, the processor and the storage medium can also be present in a base station or a terminal as discrete components.

[0182] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instruction is loaded and executed on a computer, the process or function described in the embodiment of the present application is executed in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device or other programmable device. The computer program or instruction may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer program or instruction may be transmitted from one website site, computer, server or data center to another website site, computer, server or data center by wired or wireless means. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server, data center, etc. that integrates one or more available media. The available medium may be a magnetic medium, for example, a floppy disk, a hard disk, a tape; it may also be an optical medium, for example, a digital video disc; it may also be a semiconductor medium, for example, a solid-state hard disk. The computer-readable storage medium may be a volatile or nonvolatile storage medium, or may include both volatile and nonvolatile types of storage media.

[0183] In the various embodiments of the present application, unless otherwise specified or provided for in any logical conflict, the terms and / or descriptions between the different embodiments are consistent and may be referenced to each other, and the technical features in the different embodiments may be combined to form new embodiments according to their inherent logical relationships.

[0184] It is understood that the various numbers involved in the embodiments of the present application are only for the convenience of description and are not used to limit the scope of the embodiments of the present application. The size of the sequence number of the above-mentioned processes does not mean the order of execution, and the execution order of each process should be determined by its function and internal logic.

Claims

1. A communication method, It is characterized in that Applied to the first node, including: Receiving first information, the first information including a first instruction, an instruction identifier, and a first signature; When the instruction identifier is the same as an identifier corresponding to the first instruction or the second instruction in the mapping table stored in the first node, sending second information to the second node, the second information including the second instruction, the instruction identifier and the second signature; The second instruction is generated according to the first instruction, and the first instruction or the second instruction is used to instruct execution of a first operation; and the second signature is associated with the first signature.

2. The method according to claim 1, It is characterized in that The second signature is associated with the first signature, including The second signature is the first signature; or, The second signature is generated according to the first signature.

3. The method according to claim 2, It is characterized in that The second signature is generated according to the first signature, including: Generate a third signature based on the private key of the first node and the instruction identifier; The second signature is an aggregate signature of the first signature and the third signature.

4. The method according to any one of claims 1 to 3, It is characterized in that The first signature is generated according to the private key of the third node, and the method further includes: Based on the public key of the third node, the first signature is verified successfully.

5. The method according to any one of claims 1 to 4, It is characterized in that The first signature is associated with the instruction identifier and / or the first time information, and the second signature is associated with the instruction identifier and / or the second time information; wherein the first time information is associated with the first instruction; the second time information is the first time information, or the second time information is associated with the second instruction.

6. The method according to claim 5, It is characterized in that The first time information is a first timestamp or a first counter value, and the second time information is a second timestamp or a second counter value.

7. The method according to any one of claims 1 to 6, It is characterized in that The mapping relationship of the mapping table includes at least one of the following: One instruction in the mapping table corresponds to one identifier; Multiple instructions in the mapping table correspond to one identifier; or, One instruction in the mapping table corresponds to multiple identifiers.

8. The method according to any one of claims 1 to 7, It is characterized in that The first information is received from a user device or a server.

9. The method according to claim 1, It is characterized in that The first node is a vehicle-mounted communication component.

10. The method according to claim 9, It is characterized in that When the first node is a vehicle-mounted communication component, the second node is a vehicle-mounted controller or a vehicle-mounted actuator.

11. The method according to any one of claims 1 to 10, It is characterized in that The first information is generated based on a first communication protocol, and the second information is generated based on a second communication protocol.

12. A communication method, It is characterized in that Applied to the second node, including: Receiving second information from the first node, the second information comprising a second instruction, an instruction identifier, and a second signature; wherein the second instruction is used to instruct execution of a first operation; When the instruction identifier is the same as the identifier corresponding to the second instruction in the mapping table stored in the second node, a first operation is performed, or the second instruction is sent.

13. The method according to claim 12, It is characterized in that The second signature is associated with the first signature, and the first signature is associated with a private key of the third node.

14. The method according to claim 13, It is characterized in that The second signature is associated with the first signature, including: the second signature is the first signature; The method further includes: verifying success of the first signature based on the public key of the third node.

15. The method of claim 13, It is characterized in that The second signature is associated with the first signature, including: the second signature is an aggregate signature of the first signature and the third signature, and the third signature is associated with the private key of the first node; The method further includes: verifying success of the aggregate signature based on the public key of the third node and the public key of the first node.

16. The method according to any one of claims 12 to 15, It is characterized in that The first signature is associated with the instruction identifier and / or the first time information, and the second signature is associated with the instruction identifier and / or the second time information; wherein the first time information is associated with the first instruction; the second time information is the first time information, or the second time information is associated with the second instruction.

17. The method of claim 16, It is characterized in that The first time information is a first timestamp or a first counter value, and the second time information is a second timestamp or a second counter value.

18. The method according to any one of claims 12 to 17, It is characterized in that The second information is generated based on a second communication protocol; Sending the second instruction includes: converting a communication protocol of the second instruction from the second communication protocol to a third communication protocol, thereby obtaining the second instruction after the protocol conversion; The second instruction after the protocol conversion is sent.

19. The method according to any one of claims 12 to 18, It is characterized in that The second node is a vehicle-mounted controller or a vehicle-mounted actuator.

20. A communication method, It is characterized in that Applied to the third node, including: Generate first information, the first information including a first instruction, an instruction identifier, and a first signature; wherein the first instruction is used to instruct execution of a first operation, and the instruction identifier is an identifier corresponding to the first instruction in the mapping table stored in the third node; The first information is sent to the first node.

21. The method of claim 20, It is characterized in that The generating of the first information comprises: Receive user instructions; In response to the user instruction, the first information is generated.

22. The method according to claim 20 or 21, It is characterized in that The first signature is generated according to the private key of the third node.

23. The method according to any one of claims 20 to 22, It is characterized in that The first signature is associated with the instruction identifier and / or first time information; wherein the first time information is associated with the first instruction.

24. The method of claim 23, It is characterized in that The first time information is a first timestamp or a first counter value.

25. A communication device, It is characterized in that The method comprises a module for implementing any one of claims 1 to 11, or a module for implementing any one of claims 12 to 19, or a module for implementing any one of claims 20 to 24.

26. A communication device, It is characterized in that The communication device comprises: A communication interface for communicating with other devices; A processor, coupled to the communication interface, causes the communication device to execute the method according to any one of claims 1-11, or execute the method according to any one of claims 12-19, or execute the method according to any one of claims 20-24.

27. A computer-readable storage medium, It is characterized in that The computer-readable storage medium stores a computer program, and when the computer program runs on a computer, the computer executes the method according to any one of claims 1 to 11, or the method according to any one of claims 12 to 19, or the method according to any one of claims 20 to 24.

28. A computer program product, It is characterized in that The computer program product comprises a computer program, and when the computer program is run on a computer, the computer is caused to execute the method according to any one of claims 1 to 13, or execute the method according to any one of claims 14 to 19.

29. A chip, It is characterized in that The invention comprises a processor, wherein the processor is coupled to a memory and is used to execute a computer program or instruction stored in the memory. When the computer program or instruction is executed, the method according to any one of claims 1 to 11 is implemented, or the method according to any one of claims 12 to 19 is implemented, or the method according to any one of claims 20 to 24 is implemented.

30. An electronic device, It is characterized in that It comprises a processor and a memory; the memory is used to store one or more computer programs, and the one or more computer programs include computer instructions. When the processor executes the computer instructions, the method as described in any one of claims 1 to 11 is executed, or the method as described in any one of claims 12 to 19 is executed, or the method as described in any one of claims 20 to 24 is executed.

Images