One-time issuing processing method and one-time issuing processing system for ETC (Electronic Toll Collection) equipment

Abstract

The invention provides a one-time issuing processing method and a one-time issuing processing system for ETC equipment, and relates to the technical field of intelligent transportation. The method comprises the steps that a primary issuing module receives a primary issuing instruction sent by operation control equipment; according to the identifier of the ETC device, obtaining a random number for the current key generated by the ETC device through the external device; and a key generation instruction containing the random number is sent to the key service platform, so that the key service platform generates a current key according to the random number and the identifier of the ETC equipment and sends a key updating instruction to the primary issuing module, and the key updating instruction is sent to the ETC equipment through the external equipment, so that the ETC equipment writes the current key. According to the method, the compatibility problem of various assembly line devices of a device manufacturer does not need to be considered too much, the device manufacturer can call the one-time issuing module on the assembly line to complete one-time issuing of the ETC device, the issuing efficiency is effectively improved, and the probability of issuing errors is reduced.

Description

Technical Field

[0001] This application relates to the field of intelligent transportation technology. Specifically, it relates to a method and system for the first-time issuance processing of ETC devices. Background Art

[0002] In the management process of the existing Electronic Toll Collection (ETC) system, the first-time issuance of an ETC device refers to the initialization operation of a blank ETC device, such as writing key data such as operator keys, system information, and a unique device number into the blank ETC device. Moreover, the first-time issuance process is usually completed by the ETC operator in a specified environment using dedicated software and reader devices to ensure the security and uniqueness of the device. Specifically, after the operator purchases blank ETC devices from the device manufacturer, in an environment with security protection, manual operations are arranged to place the blank ETC devices on the reader one by one, and the first-time issuance operation is completed by running a specific program. After the first-time issuance is completed, the ETC device is bound to a specific operator, and other operators cannot perform any operations on the ETC device, such as secondary issuance or activation.

[0003] However, due to the requirements of key security management in the first-time issuance, the entire issuance process must be led by the operator and rely on specific hardware environments (such as readers from different manufacturers) and software support, resulting in complex system adaptation and high deployment costs. Also, the first-time issuance program needs to manually select the corresponding dynamic link library according to the type of the connected reader, increasing the operation difficulty and error risk. In addition, the entire first-time issuance process highly depends on manual operations, with low efficiency and prone to misoperation problems such as the same device being repeatedly issued and device number confusion. Therefore, the existing method for the first-time issuance processing of ETC devices not only has a slow issuance efficiency but also a high error rate. Summary of the Invention

[0004] The purpose of this application is to provide a method and system for the first-time issuance processing of ETC devices to solve the problem that the existing method for the first-time issuance processing of ETC devices not only has a slow issuance efficiency but also a high error rate in the above-mentioned prior art.

[0005] To achieve the above purpose, the technical solutions adopted in the embodiments of this application are as follows: In a first aspect, an embodiment of this application provides a method for the first-time issuance processing of ETC devices, which is applied to a first-time issuance processing system deployed on the side of the ETC device manufacturer. The first-time issuance processing system includes: an operation control device, a first-time issuance module, an external device, and multiple ETC devices, where the first-time issuance module is provided by the ETC operator; the method includes: The one-time issuance module receives the one-time issuance instruction sent by the operation control device, and the one-time issuance instruction includes the identifier of the ETC device to be issued once. The one-time issuance module obtains, according to the identifier of the ETC device, the random number generated by the ETC device for the current key through the external device. The one-time issuance module sends a key generation instruction including the random number to the key service platform deployed on the operator side, so that the key service platform generates the current key according to the random number and the identifier of the ETC device and sends a key update instruction including the current key to the one-time issuance module. The one-time issuance module sends the key update instruction to the ETC device through the external device, so that the ETC device writes the current key.

[0006] As a possible implementation manner, the key update instruction further includes: verifying the message authentication code MAC. The process of the key service platform generating the MAC includes: Taking the random number generated by the ETC device as the initial value; Generating a first key and a second key according to the initial key of the ETC device; Generating a plurality of data blocks according to the message header and the data field of the key update instruction, wherein the data field includes the identifier of the ETC device and / or the current key; Performing an encryption process on the plurality of data blocks based on the initial value, the first key, and the second key to obtain the MAC.

[0007] As a possible implementation manner, the generating a plurality of data blocks according to the message header and the data field of the key update instruction includes: Concatenating the message header and the data field into a total data block; Splitting the total data block into the plurality of data blocks according to a preset block length.

[0008] As a possible implementation manner, the performing an encryption process on the plurality of data blocks based on the initial value, the first key, and the second key to obtain the MAC includes: Overlaying the initial value and the first data block to be the initial input data; Inputting the initial input data and the first key into a first encryption function for encryption processing to obtain an initial encryption result; Input the initial encryption result and the second data block after the first data block into the first encryption function for encryption processing, and execute sequentially until the encryption result corresponding to the last data block is obtained; Input the encryption result corresponding to the last data block and the second key into the second encryption function to obtain an intermediate encryption result; Input the intermediate encryption result and the first key into the first encryption function to obtain a target encryption result, and use the target encryption result as the MAC.

[0009] As a possible implementation, the process of the ETC device writing the current key includes: Generate an actual MAC according to the key update instruction, the current key identifier, the initial key, the identifier of the ETC device, and the random number; Compare the actual MAC with the MAC in the key update instruction; If the actual MAC is consistent with the MAC in the key update instruction, write the current key into the ETC device.

[0010] As a possible implementation, the method further includes: The primary issuance module receives the issuance success verification instruction sent by the operation control device; The primary issuance module obtains the factory preset information in the ETC device through the external device according to the issuance success verification instruction; The primary issuance module encrypts the factory preset information with a key to obtain encrypted information, and sends a verification instruction including the encrypted information and the key identifier of the key to the key service platform, so that the key service platform decrypts and verifies the encrypted information based on the key identifier; The primary issuance module receives the verification result returned by the key service platform.

[0011] As a possible implementation, the method further includes: If the verification result returned by the key service platform is verification success, the primary issuance module sends a primary issuance success instruction to the external device, so that the external device outputs a primary issuance success indication.

[0012] As a possible implementation, before the primary issuance module receives the primary issuance instruction sent by the operation control device, it further includes: The primary issuance module establishes a communication link with the on-board unit OBU in the ETC device through the external device, and obtains the OBU contract serial number and the chip serial number through the communication link; The one-time issuance module sends the OBU contract serial number and the chip serial number to the key service platform, so that the key service platform generates a service document number according to the OBU contract serial number and the chip serial number and sends the service document number to the one-time issuance module.

[0013] As a possible implementation, after the one-time issuance module receives the verification result returned by the key service platform, it further includes: If the verification result returned by the key service platform is successful verification, the one-time issuance module updates the issuance record and releases the communication link.

[0014] As a possible implementation, before the one-time issuance module receives the one-time issuance instruction sent by the operation control device, it further includes: The one-time issuance module receives the issuance start instruction sent by the operation control device; The one-time issuance module sends a peripheral start instruction to the external device according to the issuance start instruction to start the external device.

[0015] In a second aspect, an embodiment of the present application provides a one-time issuance processing system, which is deployed on the side of the ETC device manufacturer. The one-time issuance processing system includes: an operation control device, a one-time issuance module, an external device, and multiple ETC devices. Among them, the one-time issuance module is provided by the ETC operator.

[0016] In a third aspect, an embodiment of the present application provides an electronic device, including: a processor, a storage medium, and a bus. The storage medium stores machine-readable instructions executable by the processor. When the electronic device is running, the processor communicates with the storage medium through the bus, and the processor executes the machine-readable instructions to execute the steps of the ETC device one-time issuance processing method as described in any item of the first aspect above.

[0017] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is run by a processor, it executes the steps of the ETC device one-time issuance processing method as described in any item of the first aspect above.

[0018] The one-time issuance processing method and system for ETC devices according to the embodiments of the present application. The one-time issuance processing system is deployed on the side of the ETC device manufacturer. The one-time issuance processing system includes: an operation control device, a one-time issuance module, external devices, and multiple ETC devices. Moreover, the one-time issuance module is provided by the ETC operator. On this basis, the one-time issuance module receives a one-time issuance instruction including the identifier of the ETC device to be issued once sent by the operation control device. According to the identifier of the ETC device, it obtains the random number generated by the ETC device for the current key through the external device, and sends a key generation instruction containing the random number to the key service platform deployed on the operator side, so that the key service platform generates the current key according to the random number and the identifier of the ETC device, and sends a key update instruction containing the current key to the one-time issuance module. Further, the one-time issuance module sends a key update instruction to the ETC device through the external device, so that the ETC device writes the current key. Based on this, the device manufacturer can call the one-time issuance module on the production line to complete the one-time issuance of the ETC device. During the one-time issuance operation, the one-time issuance module can dock with the factory pipeline through the external device to complete the device operation, without having to consider too much the compatibility issues of various pipeline devices of the device manufacturer. The device manufacturer only needs to simply call the one-time issuance module to complete the one-time issuance work of the device, without having to understand the complex interaction details during the one-time issuance process. In this way, the efficient and accurate key writing can be achieved through the interaction between the one-time issuance module and other devices. Compared with the traditional manual issuance method by business personnel, the issuance efficiency has been greatly improved, and the probability of issuance errors has also been greatly reduced. In addition, the one-time issuance module interacts with the ETC device through the external device, and the one-time issuance module and the external device adopt a unified interface standard definition, avoiding the direct interaction between the one-time issuance module and the ETC device. Thus, the one-time issuance module can be decoupled from the hardware layer of the device manufacturer. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present application and should not be regarded as limiting the scope. For those of ordinary skill in the art, other relevant drawings can also be obtained based on these drawings without creative efforts.

[0020] Figure 1 Shows a schematic architecture diagram of a one-time issuance processing system provided by an embodiment of the present application; Figure 2 Shows a flowchart of a one-time issuance processing method for an ETC device provided by an embodiment of the present application; Figure 3 Shows a schematic flowchart of a method for generating a message authentication code MAC provided by an embodiment of the present application. Figure 4 A schematic diagram showing a MAC address generation algorithm provided by an embodiment of the present application; Figure 5 A schematic flowchart showing a key writing method provided by an embodiment of the present application; Figure 6 A schematic flowchart showing a method for verifying successful issuance provided by an embodiment of the present application; Figure 7 A schematic flowchart showing a method for generating a business document number provided by an embodiment of the present application; Figure 8 A schematic interaction flowchart showing a one-time issuance of a device manufacturer provided by an embodiment of the present application; Figure 9 A schematic structural diagram showing an electronic device provided by an embodiment of the present application. Detailed implementation manners

[0021] To make the objectives, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. It should be understood that the accompanying drawings in the present application are only for the purposes of illustration and description, and are not used to limit the protection scope of the present application. In addition, it should be understood that the schematic drawings are not drawn to actual scale. The flowcharts used in the present application show the operations implemented according to some embodiments of the present application. It should be understood that the operations in the flowcharts may not be implemented in sequence, and the steps without logical context relationships may be reversed or implemented simultaneously. In addition, those skilled in the art can add one or more other operations to the flowchart or remove one or more operations from the flowchart under the guidance of the content of the present application.

[0022] In addition, the described embodiments are only some embodiments of the present application, rather than all embodiments. The components of the embodiments of the present application usually described and illustrated in the accompanying drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application claimed, but merely represents the selected embodiments of the present application. All other embodiments obtained by those skilled in the art based on the embodiments of the present application without creative efforts fall within the protection scope of the present application.

[0023] It should be noted that the term "including" will be used in the embodiments of the present application to indicate the existence of the features stated thereafter, but does not exclude adding other features.

[0024] In view of the problems existing in the prior art, in this application, the one-time issuance of ETC devices is transferred to the side of ETC device manufacturers to be completed, specifically on the device production line. The ETC operator provides a one-time issuance module. After the device manufacturer and the operator establish a connection through a dedicated line, the one-time issuance of ETC devices is realized through the one-time issuance module, and after the one-time issuance is completed, a verification mechanism is used to verify whether the one-time issuance of the ETC device is successful. In this way, by having the ETC device manufacturer complete the one-time issuance on the device production line, compared with the traditional one-time issuance method manually performed by business personnel, the issuance efficiency is greatly improved, and the probability of issuance errors is reduced.

[0025] Figure 1 FIG. shows a schematic structural diagram of a one-time issuance processing system provided by an embodiment of this application. Refer to Figure 1 As shown, the one-time issuance processing system is deployed on the side of the ETC device manufacturer. The one-time issuance processing system includes an operation control device, a one-time issuance module, an external device, and multiple ETC devices. Among them, the operation control device, the external device, and the one-time issuance module are located in the internal network of the device manufacturer. The internal network of the device manufacturer is connected to the internal network of the operator through a dedicated line, and a key service platform is provided in the internal network of the operator.

[0026] Optionally, the one-time issuance module provides multiple interfaces externally as an independent module, such as an open device interface, a close device interface, a device one-time issuance interface, and a device issuance success verification interface, for interacting with the operation control device and the external device. Among them, the open device interface is used to start the external device and make it enter an operable state. The close device interface is used to close the connection of the device and make the external device exit the current operation state. The device one-time issuance interface is used to execute the one-time issuance process of the ETC device to be issued once. The device issuance success verification interface is used to verify whether the ETC device has successfully completed the one-time issuance operation and ensure that the written data is correct.

[0027] Optionally, the external device is, for example, a reader / writer. The external device also provides multiple interfaces externally, such as an open device interface, a close device interface, a command interaction interface, and a human-computer interaction interface. Among them, the open device interface is used to start the external device and make it enter an operable state. The close device interface is used to close the connection of the device and make the external device exit the current operation state. The command interaction interface is used to receive and execute the instructions sent by the one-time issuance module. The human-computer interaction interface is used to handle the interaction with the operator, such as displaying prompt messages, voice prompts, etc.

[0028] It should be noted that to ensure normal interaction between the one-time issuance module and external devices, and due to the large number of device manufacturers, the interface standard definitions of the external devices on the production lines of each device manufacturer need to be consistent with the interface standard definitions of the one-time issuance module. Thus, by formulating a unified interface standard for the one-time issuance module and external devices, the one-time issuance module is decoupled from the hardware layer of the device manufacturers, reducing device compatibility issues.

[0029] Optionally, the device manufacturer starts the one-time issuance process of the ETC device by operating the control device to call interfaces provided by the one-time issuance module, such as opening the device and one-time issuance of the device. After receiving the request, the one-time issuance module performs corresponding device operations on the specific ETC device through interfaces provided by the external devices on the production line, such as opening the device and instruction interaction, and feeds back the results to the one-time issuance module. The one-time issuance module determines whether the ETC device has completed one-time issuance based on the feedback of the ETC device, and returns the verification result to the operation control device through the device issuance success verification interface. After the device manufacturer confirms the successful one-time issuance of the ETC device in the operation control device, it can continue with subsequent operations or close the ETC device.

[0030] In addition, the one-time issuance module supports opening external devices corresponding to multiple production lines, that is, the one-time issuance module can simultaneously control the readers of multiple production lines, and complete the one-time issuance of the ETC device through the reader channels, realizing multi-channel parallel one-time issuance, which greatly improves the production efficiency of the device manufacturer.

[0031] Based on this, the device manufacturer can perform the one-time issuance process of the ETC device on the production line, and only needs to simply call the interfaces of the one-time issuance module to complete the one-time issuance work of the ETC device. For the operator, it also greatly reduces the one-time issuance cost. Therefore, according to the one-time issuance processing system provided by the embodiments of the present application, an efficient, flexible and low-cost one-time issuance process for ETC devices is realized.

[0032] Next, in combination with the above Figure 1 content described in the one-time issuance processing system shown, the one-time issuance processing method for ETC devices provided by the embodiments of the present application will be described in detail.

[0033] Figure 2 FIG. shows a flowchart of a one-time issuance processing method for ETC devices provided by an embodiment of the present application, and this method is applied to a one-time issuance processing system. Referring to Figure 2 as shown, the method specifically includes the following steps: S201. The operation control device sends a one-time issuance instruction to the one-time issuance module, and the one-time issuance instruction includes the identifier of the ETC device to be one-time issued.

[0034] Optionally, on the production line of the factory, the ETC devices to be issued for the first time need to be initialized, that is, issued for the first time. The operator can select the ETC devices to be issued for the first time on the user interaction interface provided by the operation control device and send a first-issuance instruction to the first-issuance module. The first-issuance instruction contains the unique identifier of the ETC device to be issued for the first time, and this identifier is, for example, the device number "12345678". Among them, the sending operation is, for example, clicking on the "Start First Issuance" component on the user interaction interface provided by the operation control device.

[0035] S202. The first-issuance module receives the first-issuance instruction sent by the operation control device, and according to the identifier of the ETC device in the first-issuance instruction, obtains the random number generated by the ETC device for the current key through an external device.

[0036] Optionally, after receiving the first-issuance instruction, the first-issuance module identifies that the device number of the ETC device to be issued for the first time is "12345678", establishes a connection with the external device by calling the device first-issuance interface, and sends a random number acquisition request to the ETC device to be issued for the first time with the device number "12345678" through the external device to obtain the random number generated by the ETC device for the current key.

[0037] S203. The ETC device generates a random number for the current key.

[0038] Optionally, for each key, the ETC device generates a random number for that key, and after receiving the random number acquisition request sent by the first-issuance module through the external device, returns the generated random number to the first-issuance module.

[0039] S204. The ETC device returns the random number to the first-issuance module.

[0040] Optionally, the ETC device can generate a four-byte random number, such as "ab cd 12 34", and return this random number to the first-issuance module.

[0041] S205. The first-issuance module sends a key generation instruction containing the random number to the key service platform deployed on the operator side.

[0042] Optionally, after obtaining the random number "ab cd 12 34", the first-issuance module constructs a new key generation instruction, which includes the random number "ab cd 12 34" and the identifier of the ETC device (device number "12345678"), and sends this key generation instruction to the key service platform deployed on the operator side.

[0043] S206. The key service platform generates the current key based on the random number and the identifier of the ETC device.

[0044] Optionally, after receiving the key generation instruction, the key service platform generates the current key by using the random number and the identifier of the ETC device, and encapsulates the current key in the key update instruction and returns it to the primary issuance module.

[0045] Optionally, the current key is the key of the on-board unit OBU or the key of the ECT chip. Exemplarily, the current key can be any one of the keys shown in Table 1 and Table 2 below.

[0046] Table 1 List of Keys of the On-board Unit OBU that Need to be Updated during the Primary Issuance of the ETC Device

[0047] Table 2 List of Keys of the ETC Chip that Need to be Updated during the Primary Issuance of the ETC Device

[0048] It should be noted that for the 33 keys shown in Table 1 and Table 2 above, during the process of writing the key during the primary issuance, a random number will be generated for each key. The encrypted import key will be obtained from the key service platform based on the random number, and then the key will be imported into the ETC device. This process needs to be executed 33 times in a loop, and this number is related to the number of keys.

[0049] S207. The key service platform sends the key update instruction containing the current key to the primary issuance module.

[0050] Optionally, the key service platform generates the current key by using the random number and the identifier of the ETC device, and encapsulates the current key in the key update instruction and returns it to the primary issuance module.

[0051] S208. The primary issuance module sends the key update instruction to the ETC device through an external device.

[0052] Optionally, after receiving the key update instruction containing the current key, the primary issuance module sends the key update instruction to the ETC device through an external device, so that after receiving the key update instruction, the ETC device writes the current key into the internal storage area of the ETC device to complete the key writing.

[0053] S209. The ETC device writes the current key.

[0054] Optionally, the ETC device receives a key update instruction sent by the one-time issuance module, writes the current key in the key update instruction to the internal storage area of the ETC device, and completes the key writing. In addition to writing the operator key data in the ETC device, the system file information also needs to be written into the ETC device. The system file information includes some basic configuration information, such as operator code, version number, etc.

[0055] Based on this, according to the one-time issuance processing method of the ETC device in the embodiment of the present application, the device manufacturer can call the one-time issuance module on the production line to complete the one-time issuance of the ETC device. During the one-time issuance operation, the one-time issuance module can be docked with the factory assembly line through an external device to complete the device operation, without having to consider the compatibility issues of various assembly line devices of the device manufacturer too much. The device manufacturer only needs to simply call the one-time issuance module to complete the one-time issuance of the device, without having to understand the complex interaction details during the one-time issuance process. In this way, efficient and accurate key writing can be achieved through the interaction between the one-time issuance module and other devices. Compared with the traditional manual issuance method by business personnel, the issuance efficiency has been greatly improved, and the probability of issuance errors has also been greatly reduced. In addition, the one-time issuance module interacts with the ETC device through an external device, and the one-time issuance module and the external device adopt a unified interface standard definition, avoiding the direct interaction between the one-time issuance module and the ETC device, so that the one-time issuance module can be decoupled from the hardware layer of the device manufacturer.

[0056] Figure 3 The flowchart of a method for generating a message authentication code (MAC) provided by an embodiment of the present application is shown. Refer to Figure 3 As shown, the key update instruction further includes: a verification message authentication code (MAC). The process of generating the message authentication code MAC by the key service platform specifically includes the following steps: S301: Use the random number generated by the ETC device as the initial value.

[0057] Optionally, for the convenience of subsequent splitting of the data total block and calculation of the message authentication code MAC, the initial value can be eight bytes, which is the same as the preset block length, also eight bytes. Continuing with the above example where the four-byte random number generated by the ETC device is "ab cd 12 34", a four-byte can be added after the four-byte random number, such as "00 00 00 00", to determine the initial value. In this way, the finally obtained initial value is "ab cd 12 34 00 00 00 00". However, it should be noted that the ETC device can also generate an eight-byte random number. In this case, the random number generated by the ETC device can also be directly used as the initial value.

[0058] S302. Generate a first key and a second key according to the initial key of the ETC device.

[0059] Optionally, an initial key is stored in the ETC device. The initial key is 16 bytes. The initial key can be divided. The left half of the initial key is used as the first key KEY_L, and the right half of the initial key is used as the second key KEY_R.

[0060] S303. Generate multiple data blocks according to the message header and data field of the key update instruction.

[0061] Optionally, the key update instruction includes a message header and a data field. These information need to be split into data blocks of a fixed size, for example, each data block is 8 bytes. Specifically, combine the message header and the data field together, and segment and pad as needed to form a series of data blocks.

[0062] Optionally, the message header of the key update instruction is also a five-byte command header (CLA, INS, P1, P2, Lc), as shown in Table 3 below: Table 3

[0063] It should be noted that the key data length Lc in Table 3 above should be the actual length obtained by adding the data length and the length of the calculated message authentication code MAC.

[0064] Optionally, the data field includes the identification of the ETC device and / or the current key. Specifically, multiple data blocks can be generated in the following way: splice the message header and the data field into a total data block, and split the total data block into multiple data blocks according to a preset block length.

[0065] Exemplarily, the message header (CLA, INS, P1, P2, Lc) can be directly spliced with the identification of the ETC device and / or the current key at the head and tail to obtain a total data block, and then the total data block is split into multiple data blocks according to a preset block length, for example, 8 bytes, and the obtained multiple data blocks are arranged in order as BLOCK1, BLOCK2, BLOCK3, BLOCK4.

[0066] It should be noted that the total data block is split according to the preset block length, and the length of the last data block obtained by the split is 1 byte to 8 bytes, which does not necessarily meet 8 bytes. Therefore, after the split is completed, the present application further processes according to the length of the last data block. Specifically, if the length of the last data block is 8 bytes, then add a complete 8-byte data block "80 00 00 00 00 00 00 00" after the data block. If the length of the last data block is less than 8 bytes, then add the hexadecimal number "80" after the data block. After adding the hexadecimal number "80", if the length of the data block is still less than 8 bytes, then add the hexadecimal number "00" thereafter until the length of the data block reaches 8 bytes.

[0067] S304: Encrypt multiple data blocks based on the initial value, the first key and the second key to obtain a message authentication code MAC.

[0068] Optionally, the first key KEY_L, the second key KEY_R and the initial value (such as the "ab cd 12 34 00 00 00 00") defined above are used to encrypt multiple data blocks BLOCK1, BLOCK2, BLOCK3, and BLOCK4 according to a specific encryption algorithm to finally obtain a message authentication code MAC.

[0069] Optionally, the message authentication code MAC can be generated as follows: superimpose the initial value and the first data block as initial input data, input the initial input data and the first key into the first encryption function for encryption processing to obtain an initial encryption result, input the initial encryption result and the second data block after the first data block into the first encryption function for encryption processing, execute in sequence until the encryption result corresponding to the last data block is obtained, input the encryption result corresponding to the last data block and the second key into the second encryption function to obtain an intermediate encryption result, input the intermediate encryption result and the first key into the first encryption function to obtain a target encryption result, and use the target encryption result as the message authentication code MAC.

[0070] For example, refer to Figure 4As shown below, continuing with the above-mentioned multiple data blocks BLOCK1, BLOCK2, BLOCK3, and BLOCK4, taking the initial value of "ab cd 12 34 00 00 00 00" as an example, the initial value is superimposed with the first data block BLOCK1 to obtain the initial input data. The initial input data and the first key KEY_L are input into the first encryption function DEA(e) for encryption processing to obtain the initial encryption result RESULT1. Then, the initial encryption result RESULT1 is superimposed with the second data block BLOCK2 to obtain new input data, and the new input data and the first key KEY_L are input into the first encryption function DEA(e) again for encryption processing to obtain the second encryption result RESULT2. Repeat the above steps, and perform the same encryption processing on the data blocks BLOCK3 and BLOCK4 in sequence until the encryption result RESULT4 corresponding to the last data block BLOCK4 is obtained.

[0071] Furthermore, the encryption result RESULT4 corresponding to the data block BLOCK4 and the second key KEY_R are input into the second encryption function DEA(d) for encryption processing to obtain the intermediate encryption result MID_RESULT. The intermediate encryption result MID_RESULT and the first key are input into the first encryption function DEA(e) for encryption processing to obtain the target encryption result, and the target encryption result is used as the message authentication code MAC.

[0072] Optionally, after obtaining the target encryption result, a preset number of bytes can also be taken from the target encryption result as the message authentication code MAC. For example, the high 4 bytes of the target encryption result are taken as the message authentication code MAC.

[0073] Based on this, the generation of the message authentication code MAC is a step-by-step encryption process. During the generation process of the message authentication code MAC, each data block participates in the encryption operation, and different first keys and second keys are introduced in different stages for processing to enhance security. This process not only ensures the security and integrity of the data, but also includes the encryption processing of the data, introducing a multi-layer key protection mechanism, thereby ensuring the communication security and data immutability between devices during a single issuance process of the ETC device.

[0074] Figure 5 shows a schematic flowchart of a key writing method provided by an embodiment of the present application. Refer to Figure 5 As shown below, the process of the ETC device writing the current key includes: S501: Generate an actual message authentication code MAC according to the key update instruction, the current key identifier, the initial key, the identifier of the ETC device, and the random number.

[0075] Optionally, the key update instruction contains all the necessary information for updating the key of the ETC device, such as the command header, data field, etc. The current key identifier, such as the key index, key attribute, etc. The initial key is the basic key provided by the operator and stored in the ETC device. The identifier of the ETC device is the device number, and the random number is a 4-byte random number generated by the ETC device. During the process of the ETC device writing the current key, an actual message authentication code MAC is generated using the key update instruction, the current key identifier, the initial key, the identifier of the ETC device, and the random number. This actual message authentication code MAC is also the check code, which is used to verify the authenticity and integrity of the data. Only after the message authentication code MAC passes the verification is the current key allowed to be written into the ETC device.

[0076] It should be noted that the device number of the ETC device is introduced when generating the message authentication code MAC in this application. This device number, as a dispersion factor, can ensure that the keys written into each ETC device are different. When writing into a specific ETC device, the operator's key needs to be further dispersed. At this time, the dispersion depends on the dispersion factor. And since the device number is unique for each ETC device, using the device number as the dispersion factor can ensure that the keys written into each ETC device are different.

[0077] Optionally, the process of generating the actual message authentication code MAC during the process of the ETC device writing the current key is the same as that of the key service platform generating the message authentication code MAC. For example, when obtaining the target encryption result to determine the final message authentication code MAC, either the high 4 bytes of the target encryption result can be taken as the message authentication code MAC, or the low 4 bytes of the target encryption result can be taken as the message authentication code MAC. There is no specific limitation here, as long as it is ensured that the processing strategies on both sides are consistent.

[0078] Exemplarily, a four-byte "00 00 00 00" is appended to the random number as the initial value, and the first key and the second key are generated based on the initial key stored in the ETC device. Then, the message header and data field in the key update instruction are concatenated to obtain the total data block, which is split into multiple data blocks according to the preset block length. Furthermore, the multiple data blocks are encrypted based on the initial value, the first key, and the second key, and finally the actual message authentication code MAC is obtained. The specific implementation details in the above processing process are the same as those of the key service platform generating the message authentication code MAC, which have been elaborated in detail above and will not be repeated here.

[0079] S502. Compare the actual message authentication code MAC with the message authentication code MAC in the key update instruction. If the actual message authentication code MAC is consistent with the message authentication code MAC in the key update instruction, write the current key into the ETC device.

[0080] Exemplarily, the message authentication code MAC in the key update instruction is generated by the key service platform deployed on the operator side. The actual message authentication code MAC is the one calculated during the process of the ETC device writing the current key. Compare the actual message authentication code MAC with the message authentication code MAC in the key update instruction. If the two message authentication code MACs match, it means the data is complete and not tampered with, and the current key can be safely written into the ETC device. If they do not match, it indicates that the data may have been tampered with or the source is untrusted, and the write operation should be stopped.

[0081] Based on this, by comparing the actually generated message authentication code MAC with the message authentication code MAC included in the received instruction, the integrity and authenticity of the data can be confirmed before performing the key update operation, effectively protecting the ETC device from unauthorized access or data tampering, and ensuring the reliability and accuracy of the transaction.

[0082] Figure 6 The flowchart of a successful issuance verification method provided by an embodiment of the present application is shown. As a possible implementation, after writing each key, verification is required to determine whether a single issuance is successful. Refer to Figure 6 As shown, the method specifically includes the following steps: S601. The operation control device sends a successful issuance verification instruction to the single issuance module.

[0083] Exemplarily, the single issuance module is provided with an equipment successful issuance verification interface. After all 33 keys shown in Table 1 and Table 2 above are written, based on the user interaction interface provided by the operation control device, for example, by clicking on the "Successful Issuance Verification" component displayed on the user interaction interface, the operation control device sends a successful issuance verification instruction to the single issuance module by calling the equipment successful issuance verification interface.

[0084] S602. The single issuance module obtains the factory preset information in the ETC device through an external device according to the successful issuance verification instruction.

[0085] Exemplarily, after receiving the successful issuance verification instruction sent by the operation control device, the single issuance module uses an external device (such as a reader / writer) connected to the ETC device to read the factory preset information in the ETC device. The factory preset information is, for example, the content corresponding to 79 bytes shown in Table 4 below, and uses the key to encrypt the factory preset information to obtain encrypted information. The encrypted information and the key identifier are encapsulated into a new verification instruction, and this verification instruction is sent to the key service platform for further verification.

[0086] S603. The single issuance module sends a verification instruction containing the encrypted information and the key identifier to the key service platform.

[0087] S604. The key service platform decrypts and verifies the encrypted information based on the key identifier.

[0088] Exemplarily, after receiving the verification instruction from the one-time issuance module, the key service platform determines which key the one-time issuance module uses to encrypt the factory preset information according to the key identifier, decrypts the encrypted information with the corresponding key, and determines whether the one-time issuance is successful according to the decryption result. Specifically, if the data obtained by decryption is consistent with the information preset at the time of ETC device factory, it is determined that the one-time issuance is successful. Further, the key service platform will check the correctness of the keys already written on the ETC device to ensure that these keys are indeed correctly written as expected. The verification mechanism includes but is not limited to performing corresponding service operations using the key, and the specific service operations can be determined according to the actual function of the key.

[0089] Specifically, for example, the verification mechanism assumes that the written key is stored in the DF01 directory of the ETC device, and one of the keys RK21 shown in Table 1 above _DF01 is taken as an example. The key RK21 _DF01 is stored in the EF01 file in the DF01 directory. By using the key RK21 _DF01 to encrypt the factory preset information in the ETC device obtained by the one-time issuance module through an external device, encrypted data is obtained, and the encrypted data and the identifier of the key RK21 _DF01 are sent to the key service platform. After learning that the one-time issuance module encrypts the factory preset information using the key RK21 _DF01 , correspondingly, the key RK21 _DF01 is used to decrypt the encrypted data. If the data obtained by decryption is consistent with the information preset at the time of ETC device factory, it indicates that the one-time issuance is successful.

[0090] Among them, the EF01 file format in the DF01 directory is defined as shown in Table 4 below: Table 4

[0091] S605. The key service platform returns the verification result to the one-time issuance module.

[0092] Exemplarily, once the verification is completed, the key service platform will feedback the verification result to the one-time issuance module. Among them, the verification result is used to indicate whether the one-time issuance is successful, and the verification result can specifically be a status code or a flag bit indicating whether the verification is successful.

[0093] Based on this, the present application provides a method for verifying the successful first issuance of a device. The device manufacturer can verify whether the ETC device has been successfully issued for the first time to ensure that the first issuance work has been completed before the device leaves the factory.

[0094] As a possible implementation, if the verification result returned by the key service platform is verification success, the first issuance module sends a first issuance success instruction to the external device, so that the external device outputs a first issuance success indication.

[0095] Exemplarily, the present application provides a user feedback mechanism after the successful key update of an ETC device. Specifically, after the key service platform confirms that the key has been correctly written into the ETC device, the first issuance module will provide an intuitive first issuance success indication to the operator or user through the external device. The role of this first issuance success indication is to notify the external device that the current operation has been successfully completed. It can be a predefined message, command code, or signal used to trigger the external device to perform corresponding feedback actions. After receiving the first issuance success indication, the external device will generate a certain form of success indication according to the built-in logic, such as a sound prompt or a light prompt. The sound prompt can be, for example, a beep or a voice broadcast of "operation successful" for the user to hear the success signal. The light prompt can be, for example, a green light indicating success, and a red light may be used to indicate failure.

[0096] Based on this, through the instant feedback provided by the external device, it is ensured that the operator can quickly and accurately know the result of the key writing operation of the ETC device, enhancing the user experience and reducing the possibility of misoperation.

[0097] Figure 7 The flowchart of a method for generating a business document number provided by an embodiment of the present application is shown. Refer to Figure 7 As shown, before the first issuance module receives the first issuance instruction sent by the operation control device, the method further includes: S701. The first issuance module establishes a communication link with the on-board unit OBU in the ETC device through the external device.

[0098] Exemplarily, before performing the first issuance operation, the first issuance module needs to first establish a communication connection with the on-board unit OBU in the ETC device, which can be specifically implemented through the external device. The external device can communicate wirelessly with the on-board unit OBU.

[0099] S702. The first issuance module obtains the OBU contract serial number and the chip serial number through the communication link.

[0100] Exemplarily, once the communication link is established, the one-time issuance module can send a request to the on-vehicle unit OBU to obtain specific information, such as the OBU contract serial number and the chip serial number. Among them, the OBU contract serial number represents the contract details between the user and the service provider, and the chip serial number identifies the specific hardware.

[0101] S703. The one-time issuance module sends the OBU contract serial number and the chip serial number to the key service platform.

[0102] S704. The key service platform generates a business document number based on the OBU contract serial number and the chip serial number, and sends the business document number to the one-time issuance module.

[0103] Exemplarily, after the one-time issuance module obtains the OBU contract serial number and the chip serial number, the one-time issuance module forwards the OBU contract serial number and the chip serial number to the key service platform. The key service platform can use these two key pieces of information, the OBU contract serial number and the chip serial number, to verify the identity of the on-vehicle unit OBU, create a new business document number, and return the business document number to the one-time issuance module. The business document number is unique and is used to track the entire transaction process.

[0104] Exemplarily, the business document number can be generated by combining parameters such as the OBU contract serial number, the chip serial number, the issuance time, and some custom codes added by the operator. The combination method can be direct concatenation, or splicing with a delimiter, or selecting some key information for splicing. The specific method can be selected and set according to actual needs and is not limited here.

[0105] S705. The key service platform returns the business document number to the one-time issuance module.

[0106] Optionally, after the one-time issuance module receives the verification result returned by the key service platform, the method further includes: if the verification result returned by the key service platform is verification success, the one-time issuance module updates the issuance record and releases the communication link.

[0107] Exemplarily, if the verification result received by the one-time issuance module indicates verification success, the one-time issuance module needs to update the issuance record in its internal database to reflect this successful key writing operation, so as to track the status of each issuance operation by updating the record, which is convenient for subsequent query, auditing, and problem troubleshooting. Among them, the issuance record includes but is not limited to the following information: the identification of the ETC device, the written key information, the issuance timestamp, the operation status, and the relevant business document number or other parameters, etc.

[0108] Exemplarily, after the one-time issuance module completes the operation of updating the issuance record, it should disconnect the communication connection with the ETC device, that is, release the communication link, to ensure the effective utilization of resources, avoid occupying the communication interface for a long time, and affect other operations.

[0109] Optionally, before the one-time issuance module receives the one-time issuance instruction sent by the operation control device, the method further includes: the one-time issuance module receives the issuance start instruction sent by the operation control device, and according to the issuance start instruction, sends a peripheral start instruction to the external device to start the external device.

[0110] Exemplarily, the one-time issuance module externally provides an open device interface. Before the one-time issuance module receives the one-time issuance instruction sent by the operation control device, the operation control device will call the open device interface to send an issuance start instruction to the one-time issuance module. After receiving the issuance start instruction, the one-time issuance module sends a peripheral start instruction to the external device, and the external device receives the peripheral start instruction to start the external device.

[0111] Exemplarily, the one-time issuance module also provides a close device interface. After the one-time issuance is completed, the operation control device will call the close device interface to send an issuance close instruction to the one-time issuance module. After receiving the issuance close instruction, the one-time issuance module sends a peripheral close instruction to the external device, and the external device receives the peripheral close instruction to close the external device.

[0112] In addition, to avoid device interference, the present application registers the MAC address of the ETC device to be one-time issued and the device number of the ETC device to be one-time issued and imports them into the operation control device. Before the one-time issuance, the OBU device is first awakened, and it is read whether the device MAC address is consistent with the device number to be one-time issued. If they are inconsistent, it means that it is connected to other OBU devices, and the OBU device is re-awakened until the correct OBU device is read, and then the actual one-time issuance operation will be performed. In this way, it can effectively avoid the situation of being interfered by the adjacent lane ETC device during multi-channel one-time issuance, and at the same time ensure that the device number of the one-time issued device is consistent with the device number printed on the device appearance. In addition, the present application will also record the device manufacturer key call log in detail in real time, which is convenient for subsequent key call security audit work.

[0113] Figure 8 Shows an interaction flowchart of one-time issuance by a device manufacturer provided by an embodiment of the present application. Refer to Figure 8 As shown, the one-time issuance process of the device manufacturer specifically includes the following steps: S801. The operation control device calls the open device interface provided by the one-time issuance module to send an open device instruction to the one-time issuance module, and the open device instruction is used to open the external device.

[0114] S802. The one-time issuance module receives the device opening instruction sent by the operation control device, and calls the device opening interface provided by the external device to forward the device opening instruction to the external device to open the external device.

[0115] S803. The operation control device calls the device one-time issuance interface provided by the one-time issuance module to send a one-time issuance instruction for the ETC device to be one-time issued to the one-time issuance module to trigger a one-time issuance operation.

[0116] S804. The one-time issuance module calls the instruction interaction interface provided by the external device to send an instruction for the current key to the external device to write the current key into the ETC device.

[0117] Among them, the instruction for the current key includes multiple interaction instructions involved in the one-time issuance process, such as an instruction to generate a random number for the current key, a key generation instruction including the random number, and a key update instruction for writing the current key, etc. During the process of one-time issuance to write the key into the ETC device, for each instruction involved, instruction interaction can be carried out through the instruction interaction interface provided by the external device.

[0118] S805. The external device receives the instruction for the current key sent by the one-time issuance module, and sends the instruction to the ETC device to be one-time issued wirelessly (5.8 GHz).

[0119] S806. The ETC device responds to the write instruction to perform the key write operation, and returns the instruction execution result to the external device. Among them, the instruction execution result is used to indicate whether the key write is successful.

[0120] S807. The external device sends the instruction execution result to the one-time issuance module through the instruction interaction interface.

[0121] It should be noted that the above steps S804 - S807 are in a loop execution process. For the 33 keys shown in Table 1 and Table 2 above, the above steps S804 - S807 need to be executed once.

[0122] S808. The one-time issuance module receives the instruction execution result. If the instruction execution result indicates successful issuance, the one-time issuance module calls the human-computer interaction interface of the external device to send a prompt message to prompt successful issuance.

[0123] S809. After successful issuance, the operation control device calls the device closing interface provided by the one-time issuance module to send a device closing instruction to the one-time issuance module. This device closing interface is used to close the connection of the device and make the external device exit the current operation state.

[0124] S810. The one-time issuance module receives the device shutdown instruction sent by the operation control device, calls the device shutdown interface provided by the external device to forward the device shutdown instruction to the external device, the external device exits the current operation state, and closes the connection between the one-time issuance module and the external device.

[0125] The implementation details of the above steps have been elaborated in detail in the previous text and will not be repeated here.

[0126] Based on this, in this application, the ETC device manufacturer completes the one-time issuance on the device production line. The one-time issuance process of the ETC device can be completed by the device manufacturer calling the one-time issuance module, and then the one-time issuance module calling the external device interface. The device manufacturer only needs to simply call the device one-time issuance interface of the one-time issuance module to complete the one-time issuance of the device, without having to understand the complex interaction details in the one-time issuance process, greatly reducing the operator's system integration cost and one-time issuance cost. Compared with the traditional manual issuance method by business personnel, the issuance efficiency has been significantly improved, and the probability of issuance errors has also been greatly reduced.

[0127] The embodiment of this application also provides an electronic device 900, which is, for example, an operation control device, an external device, an ETC device, etc. As Figure 9 shown, it is a schematic structural diagram of the electronic device 900 provided by the embodiment of this application, including: a processor 901, a memory 902. Optionally, a bus 903 may also be included. The memory 902 stores machine-readable instructions executable by the processor 901. When the electronic device 900 runs, the processor 901 communicates with the memory 902 through the bus 903. When the machine-readable instructions are executed by the processor 901, the steps of the ETC device one-time issuance processing method described in any one of the above are executed.

[0128] The embodiment of this application also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is run by a processor, the steps of the ETC device one-time issuance processing method described in any one of the above are executed.

[0129] Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working processes of the systems and devices described above can refer to the corresponding processes in the method embodiments, and will not be elaborated herein. In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. The device embodiments described above are merely illustrative. For example, the division of the modules is only a logical function division, and there may be other division methods in actual implementation. For another example, multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the displayed or discussed couplings or direct couplings or communication connections to each other can be through some communication interfaces, and the indirect couplings or communication connections of the devices or modules can be in electrical, mechanical, or other forms.

[0130] In addition, in each embodiment of the present application, the functional units can be integrated in a processing unit, or each unit can exist physically alone, or two or more units can be integrated in one unit. If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or a part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks, or optical discs that can store program codes.

[0131] The above is only the specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present application, and all of them should be covered by the protection scope of the present application.

Claims

1. A method for processing the initial issuance of an ETC device, characterized in that, Applied to a one-time issuance processing system, which is deployed on the side of the ETC device manufacturer. The one-time issuance processing system includes: an operation control device, a one-time issuance module, external devices, and multiple ETC devices. Among them, the one-time issuance module is provided by the ETC operator. The method includes: The one-time issuance module receives a one-time issuance instruction sent by the operation control device, and the one-time issuance instruction includes the identifier of the ETC device to be issued once. The one-time issuance module obtains the random number generated by the ETC device for the current key through the external device according to the identifier of the ETC device. The one-time issuance module sends a key generation instruction containing the random number to the key service platform deployed on the operator side, so that the key service platform generates the current key according to the random number and the identifier of the ETC device and sends a key update instruction containing the current key to the one-time issuance module. The one-time issuance module sends the key update instruction to the ETC device through the external device, so that the ETC device writes the current key.

2. The method according to claim 1, wherein The key update instruction also includes: verifying the message authentication code MAC. The process of the key service platform generating the MAC includes: Taking the random number generated by the ETC device as the initial value. Generating a first key and a second key according to the initial key of the ETC device. Generating multiple data blocks according to the message header and data field of the key update instruction, where the data field includes the identifier of the ETC device and / or the current key. Performing encryption processing on the multiple data blocks based on the initial value, the first key, and the second key to obtain the MAC.

3. The method according to claim 2, wherein The generating multiple data blocks according to the message header and data field of the key update instruction includes: Concatenating the message header and the data field into a total data block. Splitting the total data block into the multiple data blocks according to a preset block length.

4. The method according to claim 2, wherein The performing encryption processing on the multiple data blocks based on the initial value, the first key, and the second key to obtain the MAC includes: Overlaying the initial value and the first data block to form initial input data. Inputting the initial input data and the first key into a first encryption function for encryption processing to obtain an initial encryption result. Inputting the initial encryption result and the second data block after the first data block into the first encryption function for encryption processing, and executing sequentially until the encryption result corresponding to the last data block is obtained. Inputting the encryption result corresponding to the last data block and the second key into a second encryption function to obtain an intermediate encryption result. Inputting the intermediate encryption result and the first key into the first encryption function to obtain a target encryption result, and taking the target encryption result as the MAC.

5. The method according to claim 2, wherein The process of the ETC device writing the current key includes: Generating an actual MAC according to the key update instruction, the current key identifier, the initial key, the identifier of the ETC device, and the random number. Compare the actual MAC with the MAC in the key update instruction; If the actual MAC is consistent with the MAC in the key update instruction, write the current key into the ETC device.

6. The method according to claim 1, wherein The method further includes: The primary issuance module receives the issuance success verification instruction sent by the operation control device; The primary issuance module obtains the factory preset information in the ETC device through the external device according to the issuance success verification instruction; The primary issuance module encrypts the factory preset information with a key to obtain encrypted information, and sends a verification instruction including the encrypted information and the key identifier of the key to the key service platform, so that the key service platform decrypts and verifies the encrypted information based on the key identifier; The primary issuance module receives the verification result returned by the key service platform.

7. The method according to claim 6, wherein The method further includes: If the verification result returned by the key service platform is verification success, the primary issuance module sends a primary issuance success instruction to the external device, so that the external device outputs a primary issuance success indication.

8. The method according to claim 6, characterized in that Before the primary issuance module receives the primary issuance instruction sent by the operation control device, it further includes: The primary issuance module establishes a communication link with the on-vehicle unit OBU in the ETC device through the external device, and obtains the OBU contract serial number and the chip serial number through the communication link; The primary issuance module sends the OBU contract serial number and the chip serial number to the key service platform, so that the key service platform generates a service document number according to the OBU contract serial number and the chip serial number and sends the service document number to the primary issuance module.

9. The method according to claim 8, wherein After the primary issuance module receives the verification result returned by the key service platform, it further includes: If the verification result returned by the key service platform is verification success, the primary issuance module updates the issuance record and releases the communication link.

10. The method according to claim 1, wherein Before the primary issuance module receives the primary issuance instruction sent by the operation control device, it further includes: The primary issuance module receives the issuance start instruction sent by the operation control device; The primary issuance module sends a peripheral start instruction to the external device according to the issuance start instruction to start the external device.

11. A one-time issuance processing system, characterized in that, The primary issuance processing system is deployed on the ETC device manufacturer side. The primary issuance processing system includes: an operation control device, a primary issuance module, an external device, and multiple ETC devices, where the primary issuance module is provided by the ETC operator.

12. An electronic device, characterized in that, It includes: A processor and a memory. The memory stores machine-readable instructions executable by the processor. When the electronic device runs, the processor executes the machine-readable instructions to perform the steps of the ETC device primary issuance processing method according to any one of claims 1 to 10.

13. A computer-readable storage medium, characterized in that, A computer program is stored on the computer-readable storage medium. When the computer program is run by the processor, it performs the steps of the ETC device primary issuance processing method according to any one of claims 1 to 10.

Images