One-time issuance processing method and one-time issuance processing system for ETC equipment

Abstract

The present application provides a one-time issuance processing method and a one-time issuance processing system for an ETC device, which relate to the field of intelligent transportation technology. The method includes: a one-time issuance module receives a one-time issuance instruction sent by an operation control device; according to the identification of the ETC device, obtains a random number for the current key generated by the ETC device through an external device; sends a key generation instruction containing a random number to a key service platform, so that the key service platform generates the current key according to the random number and the identification of the ETC device and sends a key update instruction to the one-time issuance module, and sends a key update instruction to the ETC device through an external device, so that the ETC device writes the current key. The present application does not need to consider the compatibility issues of various assembly line equipment of the equipment manufacturer too much. The equipment manufacturer can call the one-time issuance module on the assembly line to complete the one-time issuance of the ETC device, which effectively improves the issuance efficiency and reduces the probability of issuance errors.

Description

Technical Field

[0001] The present application relates to the field of intelligent transportation technology, and more specifically, to a one-time issuance and processing method and a one-time issuance and processing system for ETC equipment. Background Art

[0002] In the management process of the existing Electronic Toll Collection (ETC) system, the one-time issuance of ETC equipment refers to the initialization operation of the blank ETC device, such as writing key data such as the operator key, system information, and unique device number into the blank ETC device. In addition, the one-time issuance process is usually completed by the ETC operator in a specified environment using dedicated software and reader-writer equipment to ensure the security and uniqueness of the device. Specifically, after the operator purchases blank ETC devices from the equipment manufacturer, in a secure environment, manual operations are arranged to place the blank ETC devices one by one on the reader-writer, and a specific program is run to complete the one-time issuance operation. After the one-time issuance is completed, the ETC device is bound to a specific operator, and other operators can no longer perform any operations on the ETC device, such as secondary issuance or activation.

[0003] However, because one-time issuance involves key security management requirements, the entire issuance process must be led by the operator and relies on specific hardware environments (such as readers from different manufacturers) and software support, resulting in complex system adaptation and high deployment costs. Furthermore, the one-time issuance process requires manual selection of the corresponding dynamic link library based on the connected reader type, increasing operational difficulty and the risk of error. Furthermore, the entire one-time issuance process is highly dependent on manual operation, resulting in low efficiency and prone to errors such as repeated issuance of the same device and confusion in device numbering. Therefore, the existing one-time issuance processing method for ETC devices not only has slow issuance efficiency but also a high rate of issuance errors. Summary of the Invention

[0004] The purpose of this application is to provide a one-time issuance processing method and a one-time issuance processing system for ETC equipment in response to the above-mentioned deficiencies in the existing technology, so as to solve the problem that the one-time issuance processing method for ETC equipment in the existing technology not only has a slow issuance efficiency but also has a high issuance error efficiency.

[0005] To achieve the above objectives, the technical solutions adopted in the embodiments of the present application are as follows:

[0006] In a first aspect, an embodiment of the present application provides a method for processing a one-time issuance of an ETC device, which is applied to a one-time issuance processing system. The one-time issuance processing system is deployed on the ETC device manufacturer side. The one-time issuance processing system includes: an operation control device, a one-time issuance module, an external device, and multiple ETC devices, wherein the one-time issuance module is provided by the ETC operator; the method includes:

[0007] The one-time issuance module receives a one-time issuance instruction sent by the operation control device, wherein the one-time issuance instruction includes an identifier of the ETC device to be issued once;

[0008] The primary issuance module obtains, through the external device, a random number for the current key generated by the ETC device according to the identifier of the ETC device;

[0009] The one-time issuance module sends a key generation instruction containing the random number to a key service platform deployed on the operator side, so that the key service platform generates the current key according to the random number and the identifier of the ETC device and sends a key update instruction containing the current key to the one-time issuance module;

[0010] The one-time issuance module sends the key update instruction to the ETC device through the external device, so that the ETC device writes the current key.

[0011] As a possible implementation, the key update instruction further includes: verifying a message authentication code MAC;

[0012] The process of generating the MAC by the key service platform includes:

[0013] Using the random number generated by the ETC device as an initial value;

[0014] Generate a first key and a second key according to the initial key of the ETC device;

[0015] Generate multiple data blocks according to the message header and data field of the key update instruction, wherein the data field includes the identifier of the ETC device and / or the current key;

[0016] The multiple data blocks are encrypted based on the initial value, the first key, and the second key to obtain the MAC.

[0017] As a possible implementation manner, the generating of multiple data blocks according to the message header and data field of the key update instruction includes:

[0018] Splicing the message header and the data field into a data block;

[0019] The total data block is divided into the multiple data blocks according to the preset block length.

[0020] As a possible implementation manner, encrypting the multiple data blocks based on the initial value, the first key, and the second key to obtain the MAC includes:

[0021] Superimposing the initial value and the first data block as initial input data;

[0022] Inputting the initial input data and the first key into a first encryption function for encryption processing to obtain an initial encryption result;

[0023] Input the initial encryption result and the second data block after the first data block into the first encryption function for encryption processing, and execute the encryption process in sequence until the encryption result corresponding to the last data block is obtained;

[0024] Inputting the encryption result corresponding to the last data block and the second key into a second encryption function to obtain an intermediate encryption result;

[0025] The intermediate encryption result and the first key are input into the first encryption function to obtain a target encryption result, and the target encryption result is used as the MAC.

[0026] As a possible implementation, the process of writing the current key into the ETC device includes:

[0027] Generate an actual MAC according to the key update instruction, the current key identifier, the initial key, the identifier of the ETC device, and the random number;

[0028] Comparing the actual MAC with the MAC in the key update instruction;

[0029] If the actual MAC is consistent with the MAC in the key update instruction, the current key is written into the ETC device.

[0030] As a possible implementation, the method further includes:

[0031] The one-time issuance module receives the issuance success verification instruction sent by the operation control device;

[0032] The primary issuance module obtains the factory preset information in the ETC device through the external device according to the issuance success verification instruction;

[0033] The one-time issuance module encrypts the factory preset information using a key to obtain encrypted information, and sends a verification instruction including the encrypted information and a key identifier of the key to the key service platform, so that the key service platform decrypts and verifies the encrypted information based on the key identifier;

[0034] The one-time issuance module receives the verification result returned by the key service platform.

[0035] As a possible implementation, the method further includes:

[0036] If the verification result returned by the key service platform is verification success, the one-time issuance module sends a one-time issuance success instruction to the external device, so that the external device outputs a one-time issuance success indication.

[0037] As a possible implementation manner, before the one-time issuance module receives the one-time issuance instruction sent by the operation control device, the method further includes:

[0038] The primary issuance module establishes a communication link with the on-board unit OBU in the ETC device through the external device, and obtains the OBU contract serial number and chip serial number through the communication link;

[0039] The one-time issuance module sends the OBU contract serial number and the chip serial number to the key service platform, so that the key service platform generates a business document number according to the OBU contract serial number and the chip serial number and sends the business document number to the one-time issuance module.

[0040] As a possible implementation, after the primary issuance module receives the verification result returned by the key service platform, it further includes:

[0041] If the verification result returned by the key service platform is successful, the one-time issuance module updates the issuance record and releases the communication link.

[0042] As a possible implementation manner, before the one-time issuance module receives the one-time issuance instruction sent by the operation control device, the method further includes:

[0043] The primary issuance module receives an issuance start instruction sent by the operation control device;

[0044] The primary issuance module sends an external device activation instruction to the external device according to the issuance activation instruction to activate the external device.

[0045] On the second aspect, an embodiment of the present application provides a one-time issuance processing system, which is deployed on the ETC equipment manufacturer side. The one-time issuance processing system includes: an operation control device, a one-time issuance module, an external device and multiple ETC devices, wherein the one-time issuance module is provided by the ETC operator.

[0046] In the third aspect, an embodiment of the present application provides an electronic device, comprising: a processor, a storage medium and a bus, wherein the storage medium stores machine-readable instructions executable by the processor. When the electronic device is running, the processor and the storage medium communicate through the bus, and the processor executes the machine-readable instructions to perform the steps of the ETC device one-time issuance processing method as described in any one of the first aspects above.

[0047] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the one-time issuance processing method of the ETC device as described in any one of the first aspects above are executed.

[0048] According to the one-time issuance processing method and one-time issuance processing system of the ETC device of the embodiment of the present application, the one-time issuance processing system is deployed on the ETC device manufacturer side, and the one-time issuance processing system includes: an operation control device, a one-time issuance module, an external device, and multiple ETC devices, and the one-time issuance module is provided by the ETC operator. On this basis, the one-time issuance module receives a one-time issuance instruction including the identification of the ETC device to be issued sent by the operation control device, obtains the random number for the current key generated by the ETC device through the external device according to the identification of the ETC device, and sends a key generation instruction containing the random number to the key service platform deployed on the operator side, so that the key service platform generates the current key according to the random number and the identification of the ETC device, and sends the key update instruction containing the current key to the one-time issuance module. Furthermore, the one-time issuance module sends a key update instruction to the ETC device through the external device, so that the ETC device writes the current key. Based on this, equipment manufacturers can call the issuance module once on the production line to complete the issuance of ETC equipment. During the issuance operation, the issuance module can be connected to the factory assembly line through an external device to complete the equipment operation. There is no need to consider the compatibility issues of various assembly line equipment of the equipment manufacturer. The equipment manufacturer only needs to call the issuance module once to complete the issuance of the equipment. There is no need to understand the complex interaction details in the issuance process. In this way, the issuance module can interact with other devices to achieve efficient and accurate key writing. Compared with the traditional manual issuance method of business personnel, the issuance efficiency has been greatly improved, and the probability of issuance errors has been greatly reduced. In addition, the issuance module interacts with the ETC device through an external device, and the issuance module and the external device use a unified interface standard definition, which avoids the issuance module directly interacting with the ETC device, so that the issuance module can be decoupled from the hardware layer of the equipment manufacturer. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other relevant drawings can be obtained based on these drawings without paying any creative work.

[0050] Figure 1 A schematic diagram of the architecture of a one-time issuance processing system provided in an embodiment of the present application is shown;

[0051] Figure 2 A flowchart of a one-time issuance processing method of an ETC device provided in an embodiment of the present application is shown;

[0052] Figure 3A schematic diagram of a method for generating a message authentication code MAC according to an embodiment of the present application is shown;

[0053] Figure 4 A schematic diagram of a MAC address generation algorithm provided in an embodiment of the present application is shown;

[0054] Figure 5 A schematic diagram of a key writing method according to an embodiment of the present application is shown;

[0055] Figure 6 A schematic diagram of a process flow of a method for verifying successful issuance provided by an embodiment of the present application is shown;

[0056] Figure 7 A flow chart of a method for generating a business document number provided in an embodiment of the present application is shown;

[0057] Figure 8 An interactive flow chart of a one-time issuance by a device manufacturer provided in an embodiment of the present application is shown;

[0058] Figure 9 A schematic structural diagram of an electronic device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0059] In order to make the purpose, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. It should be understood that the drawings in the present application only serve the purpose of illustration and description and are not used to limit the scope of protection of the present application. In addition, it should be understood that the schematic drawings are not drawn to scale. The flowcharts used in this application illustrate the operations implemented according to some embodiments of the present application. It should be understood that the operations of the flowcharts can be implemented out of sequence, and steps without logical context can be reversed or implemented simultaneously. In addition, those skilled in the art, under the guidance of the contents of this application, can add one or more other operations to the flowchart, or remove one or more operations from the flowchart.

[0060] In addition, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. The components of the embodiments of the present application generally described and shown in the drawings here can be arranged and designed in various configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the claimed application, but merely represents selected embodiments of the present application. Based on the embodiments of the present application, all other embodiments obtained by those skilled in the art without making creative work are within the scope of protection of the present application.

[0061] It should be noted that the term "comprising" will be used in the embodiments of the present application to indicate the existence of the features declared thereafter, but does not exclude the addition of other features.

[0062] In response to the problems existing in the existing technology, this application transfers the one-time issuance of ETC equipment to the ETC equipment manufacturer side, specifically to the equipment production line. The ETC operator provides a one-time issuance module. After the equipment manufacturer and the operator establish a connection through a dedicated line, the one-time issuance of ETC equipment is realized through the one-time issuance module. After the one-time issuance is completed, the verification mechanism is used to verify whether the one-time issuance of ETC equipment is successful. In this way, the one-time issuance is completed by the ETC equipment manufacturer on the equipment production line, which greatly improves the issuance efficiency and reduces the probability of issuance errors compared to the traditional one-time issuance method manually performed by business personnel.

[0063] Figure 1 The schematic diagram of the architecture of a one-time issuance processing system provided by an embodiment of the present application is shown. Figure 1 As shown, the primary issuance processing system is deployed at the ETC device manufacturer's side and includes an operation control device, a primary issuance module, external devices, and multiple ETC devices. The operation control device, external devices, and primary issuance module are located on the device manufacturer's intranet, which is connected to the operator's intranet via a dedicated line. The operator's intranet also provides a key service platform.

[0064] Optionally, the one-time issuance module, as an independent module, provides multiple interfaces to the outside world, such as a device opening interface, a device closing interface, a device one-time issuance interface, and a device issuance success verification interface, for interacting with the operation control device and external devices. The device opening interface is used to start the external device and put it into an operational state; the device closing interface is used to close the device connection and cause the external device to exit the current operational state; the device one-time issuance interface is used to execute the one-time issuance process of the ETC device to be issued once; and the device issuance success verification interface is used to verify whether the ETC device has successfully completed the one-time issuance operation to ensure that the written data is correct.

[0065] Optionally, the external device is, for example, a reader / writer, and also provides multiple interfaces, such as a device opening interface, a device closing interface, a command interaction interface, and a human-computer interaction interface. The device opening interface is used to start the external device and put it into an operational state; the device closing interface is used to close the device connection and exit the current operational state; the command interaction interface is used to receive and execute commands sent by the primary issuance module; and the human-computer interaction interface is used to handle interactions with operators, such as displaying prompts, voice prompts, etc.

[0066] It's important to note that to ensure proper interaction between the primary issuance module and external devices, and given the large number of device manufacturers, the interface standards for external devices in each manufacturer's pipeline must be consistent with the primary issuance module's interface standards. Therefore, by establishing unified interface standards for the primary issuance module and external devices, the primary issuance module is decoupled from the device manufacturer's hardware layer, reducing device compatibility issues.

[0067] Optionally, the device manufacturer initiates the one-time issuance process of the ETC device by calling the interfaces such as opening the device and device one-time issuance provided by the one-time issuance module through the operation control device. After receiving the request, the one-time issuance module performs the corresponding device operations on the specific ETC device through the interfaces such as opening the device and command interaction provided by the external device of the pipeline, and feeds back the results to the one-time issuance module. Based on the feedback from the ETC device, the one-time issuance module determines whether the ETC device has completed the one-time issuance and returns the verification result to the operation control device through the device issuance success verification interface. After the device manufacturer confirms the success of the one-time issuance of the ETC device in the operation control device, it can continue with subsequent operations or shut down the ETC device.

[0068] In addition, the one-time issuance module supports opening external devices corresponding to multiple production lines, that is, the one-time issuance module can control multiple production line readers and writers at the same time, and complete the one-time issuance of ETC equipment through the reader / writer channel, realizing multi-channel parallel one-time issuance, greatly improving the production efficiency of equipment manufacturers.

[0069] Based on this, equipment manufacturers can perform one-time issuance processing of ETC equipment on the production line, and can complete the one-time issuance of ETC equipment by simply calling the interface of the one-time issuance module. For operators, this also greatly reduces the one-time issuance cost. Therefore, according to the one-time issuance processing system provided in the embodiment of the present application, an efficient, flexible and low-cost one-time issuance process of ETC equipment is realized.

[0070] The following combines the above Figure 1 The contents described in the one-time issuance processing system shown provide a detailed explanation of the one-time issuance processing method of the ETC device provided in the embodiment of the present application.

[0071] Figure 2 The flowchart of a one-time issuance processing method of an ETC device provided in an embodiment of the present application is shown, and the method is applied to a one-time issuance processing system. Figure 2 As shown, the method specifically includes the following steps:

[0072] S201. The operation control device sends a one-time issuance instruction to the one-time issuance module, where the one-time issuance instruction includes the identifier of the ETC device to be issued.

[0073] Alternatively, on a factory assembly line, an ETC device to be issued once needs to be initialized, i.e., issued once. An operator can select the ETC device to be issued once on a user interface provided by the operation control device and send a one-time issuance instruction to the one-time issuance module. The one-time issuance instruction includes the unique identifier of the ETC device to be issued once, such as the device number "12345678." The sending operation can be, for example, clicking the "Start One-Time Issuance" component on the user interface provided by the operation control device.

[0074] S202. The one-time issuance module receives the one-time issuance instruction sent by the operation control device, and obtains the random number for the current key generated by the ETC device through an external device according to the identifier of the ETC device in the one-time issuance instruction.

[0075] Optionally, after receiving the one-time issuance instruction, the one-time issuance module identifies that the device number of the ETC device to be issued once is "12345678", establishes a connection with the external device by calling the device one-time issuance interface, and sends a random number acquisition request to the ETC device to be issued once with the device number "12345678" through the external device to obtain the random number generated by the ETC device for the current key.

[0076] S203. The ETC device generates a random number for the current key.

[0077] Optionally, for each key, the ETC device will generate a random number for the key, and after receiving a random number acquisition request sent by the primary issuance module through an external device, it will return the generated random number to the primary issuance module.

[0078] S204. The ETC device returns a random number to the primary issuance module.

[0079] Optionally, the ETC device can generate a four-byte random number, such as "ab cd 12 34", and return the random number to the one-time issuance module.

[0080] S205. The primary issuance module sends a key generation instruction including a random number to the key service platform deployed on the operator side.

[0081] Optionally, after obtaining the random number "ab cd 12 34", the one-time issuance module constructs a new key generation instruction, which includes the random number "ab cd 12 34" and the identifier of the ETC device (device number "12345678"), and sends the key generation instruction to the key service platform deployed on the operator side.

[0082] S206. The key service platform generates the current key based on the random number and the identifier of the ETC device.

[0083] Optionally, after receiving the key generation instruction, the key service platform generates the current key using a random number and the identifier of the ETC device, and encapsulates the current key in a key update instruction and returns it to the primary issuance module.

[0084] Optionally, the current key is a key of the on-board unit OBU or a key of the ECT chip. Exemplarily, the current key may be any one of the keys shown in Table 1 and Table 2 below.

[0085] Table 1 List of keys for the on-board unit (OBU) that need to be updated when the ETC device is issued once

[0086]

[0087] Table 2: List of keys for ETC chips that need to be updated when ETC devices are issued once

[0088]

[0089] It should be noted that for the 33 keys shown in Table 1 and Table 2 above, a random number will be generated for each key during the process of issuing and writing keys. The imported key ciphertext will be obtained from the key service platform based on the random number, and then the key will be imported into the ETC device. This process needs to be executed 33 times, and the number of times is related to the number of keys.

[0090] S207: The key service platform sends a key update instruction including the current key to the primary issuance module.

[0091] Optionally, the key service platform generates the current key using a random number and the identifier of the ETC device, and encapsulates the current key in a key update instruction and returns it to the primary issuance module.

[0092] S208. The primary issuance module sends a key update instruction to the ETC device through an external device.

[0093] Optionally, after the issuance module receives a key update instruction containing the current key, it sends the key update instruction to the ETC device through an external device, so that after receiving the key update instruction, the ETC device writes the current key into the internal storage area of ​​the ETC device to complete the key writing.

[0094] S209. The ETC device writes the current key.

[0095] Optionally, the ETC device receives a key update instruction from the primary issuance module and writes the current key in the key update instruction into the ETC device's internal storage area, completing the key writing process. Furthermore, in addition to writing the operator key data into the ETC device, system file information must also be written into the ETC device. This system file information includes some basic configuration information, such as the operator code and version number.

[0096] Based on this, according to the one-time issuance processing method of the ETC device of the embodiment of the present application, the equipment manufacturer can call the one-time issuance module on the production line to complete the one-time issuance of the ETC device. During the one-time issuance operation, the one-time issuance module can be connected to the factory assembly line through an external device to complete the equipment operation. There is no need to consider too much about the compatibility issues of various assembly line equipment of the equipment manufacturer. The equipment manufacturer only needs to simply call the one-time issuance module to complete the one-time issuance of the equipment. There is no need to understand the complex interaction details in the one-time issuance process. In this way, the one-time issuance module can interact with other devices to achieve efficient and accurate key writing. Compared with the traditional manual issuance method of business personnel, the issuance efficiency has been greatly improved, and the probability of issuance errors has been greatly reduced. In addition, the one-time issuance module interacts with the ETC device through an external device, and the one-time issuance module and the external device use a unified interface standard definition, which avoids the one-time issuance module directly interacting with the ETC device, so that the one-time issuance module can be decoupled from the hardware layer of the equipment manufacturer.

[0097] Figure 3 The flowchart of a method for generating a message authentication code MAC provided in an embodiment of the present application is shown. Figure 3 As shown, the key update instruction also includes: verifying the message authentication code (MAC). The process of the key service platform generating the message authentication code MAC specifically includes the following steps:

[0098] S301. Use the random number generated by the ETC device as the initial value.

[0099] Optionally, to facilitate subsequent data block segmentation and MAC calculation, the initial value can be eight bytes, the same as the preset block length, also eight bytes. Continuing with the example of the four-byte random number "ab cd 12 34" generated by the ETC device, the initial value can be determined by appending a four-byte sequence, such as "00 00 00 00," to the end of the four-byte random number. The resulting initial value is "ab cd 12 34 00 00 00 00." It should be noted that the ETC device can also generate eight-byte random numbers, in which case the random number generated by the ETC device can be used directly as the initial value.

[0100] S302. Generate a first key and a second key according to the initial key of the ETC device.

[0101] Optionally, an initial key is stored in the ETC device, which is 16 bytes. The 16-byte initial key can be divided, with the left half of the initial key being used as the first key KEY_L and the right half of the initial key being used as the second key KEY_R.

[0102] S303: Generate multiple data blocks according to the message header and data field of the key update instruction.

[0103] Optionally, the key update instruction includes a message header and a data field, which need to be divided into fixed-size data blocks, for example, each data block is 8 bytes. Specifically, the message header and data field are combined together and segmented and padded as needed to form a series of data blocks.

[0104] Optionally, the message header of the key update instruction is also a five-byte command header (CLA, INS, P1, P2, Lc), as shown in Table 3 below:

[0105] Table 3

[0106]

[0107] It should be noted that the key data length Lc in Table 3 above should be the actual length obtained by adding the calculated length of the message authentication code MAC to the data length.

[0108] Optionally, the data field includes an identifier of the ETC device and / or a current key. Specifically, multiple data blocks may be generated by concatenating the message header and the data field into a data block, and then splitting the data block into multiple data blocks according to a preset block length.

[0109] Exemplarily, the message header (CLA, INS, P1, P2, Lc) and the identifier and / or current key of the ETC device can be directly concatenated end to end to obtain a total data block, and then the total data block can be split into multiple data blocks according to a preset block length, for example, 8 bytes. The obtained multiple data blocks are arranged in sequence as BLOCK1, BLOCK2, BLOCK3, and BLOCK4.

[0110] It should be noted that the total data block is split according to the preset block length, and the length of the last data block obtained by splitting is 1 byte to 8 bytes, which does not necessarily meet 8 bytes exactly. Therefore, after the splitting is completed, the present application further processes according to the length of the last data block. Specifically, if the length of the last data block is 8 bytes, then add a complete 8-byte data block "80 00 00 00 00 00 00 00" after the data block. If the length of the last data block is less than 8 bytes, then add the hexadecimal number "80" after the data block. After adding the hexadecimal number "80", if the length of the data block is still less than 8 bytes, then add the hexadecimal number "00" after it until the length of the data block reaches 8 bytes.

[0111] S304: Encrypt the multiple data blocks based on the initial value, the first key, and the second key to obtain a message authentication code MAC.

[0112] Optionally, the first key KEY_L, the second key KEY_R, and the initial value (such as "ab cd 12 34 00 00 00 00") defined above are used to encrypt multiple data blocks BLOCK1, BLOCK2, BLOCK3, and BLOCK4 according to a specific encryption algorithm to finally obtain a message authentication code MAC.

[0113] Optionally, the message authentication code MAC can be generated as follows: superimpose the initial value and the first data block as initial input data, input the initial input data and the first key into the first encryption function for encryption processing to obtain an initial encryption result, input the initial encryption result and the second data block after the first data block into the first encryption function for encryption processing, and execute in sequence until the encryption result corresponding to the last data block is obtained, input the encryption result corresponding to the last data block and the second key into the second encryption function to obtain an intermediate encryption result, input the intermediate encryption result and the first key into the first encryption function to obtain a target encryption result, and use the target encryption result as the message authentication code MAC.

[0114] For example, referring to Figure 4As shown, continuing with the above-mentioned multiple data blocks as BLOCK1, BLOCK2, BLOCK3, and BLOCK4, and the initial value being "ab cd 12 34 00 00 00 00" as an example, the initial value is superimposed on the first data block BLOCK1 to obtain the initial input data, the initial input data and the first key KEY_L are input into the first encryption function DEA(e) for encryption processing, and the initial encryption result RESULT1 is obtained. Then, the initial encryption result RESULT1 is superimposed on the second data block BLOCK2 to obtain new input data, and the new input data and the first key KEY_L are input into the first encryption function DEA(e) again for encryption processing, and the second encryption result RESULT2 is obtained. The above steps are repeated, and the same encryption processing is performed on the data blocks BLOCK3 and BLOCK4 in turn, until the encryption result RESULT4 corresponding to the last data block BLOCK4 is obtained.

[0115] Furthermore, the encryption result RESULT4 corresponding to data block BLOCK4 and the second key KEY_R are input into the second encryption function DEA(d) for encryption processing, resulting in an intermediate encryption result MID_RESULT. The intermediate encryption result MID_RESULT and the first key are input into the first encryption function DEA(e) for encryption processing, resulting in a target encryption result, which is used as the message authentication code MAC.

[0116] Optionally, after obtaining the target encryption result, a preset number of bytes may be taken from the target encryption result as the message authentication code MAC, for example, the high 4 bytes of the target encryption result may be taken as the message authentication code MAC.

[0117] Based on this, the generation of the message authentication code MAC is a step-by-step encryption process. During the MAC generation process, each data block participates in the encryption operation, and different first keys and second keys are introduced at different stages for processing to enhance security. This process not only ensures data security and integrity, but also includes encryption processing of data and introduces a multi-layer key protection mechanism, thereby ensuring communication security between devices and data immutability during the one-time issuance of ETC devices.

[0118] Figure 5 FIG2 shows a flow chart of a key writing method provided by an embodiment of the present application. Figure 5 As shown, the process of writing the current key to the ETC device includes:

[0119] S501. Generate an actual message authentication code MAC according to the key update instruction, the current key identifier, the initial key, the identifier of the ETC device and the random number.

[0120] Optionally, the key update instruction includes all necessary information for updating the ETC device key, such as the command header, data field, etc., the current key identifier such as the key index, key attributes, etc., the initial key is the basic key provided by the operator and stored in the ETC device, the ETC device identifier is also the device number, and the random number is a 4-byte random number generated by the ETC device. During the process of writing the current key to the ETC device, the key update instruction, the current key identifier, the initial key, the ETC device identifier, and the random number are used to generate the actual message authentication code MAC. The actual message authentication code MAC is also a check code and is used to verify the authenticity and integrity of the data. The current key is only allowed to be written to the ETC device after the message authentication code MAC verification passes.

[0121] It should be noted that this application incorporates the ETC device's device number when generating the message authentication code (MAC). This device number serves as a dispersion factor to ensure that the key written to each ETC device is unique. Writing the operator key to a specific ETC device requires further dispersion, which relies on the dispersion factor. Since the device number is unique for each ETC device, using the device number as a dispersion factor ensures that the key written to each ETC device is unique.

[0122] Optionally, the actual message authentication code MAC generation process when the ETC device writes the current key is the same as the process of generating the message authentication code MAC by the key service platform. For example, when obtaining the target encryption result and determining the final message authentication code MAC, the high 4 bytes of the target encryption result can be taken as the message authentication code MAC, or the low 4 bytes of the target encryption result can be taken as the message authentication code MAC. There is no specific restriction here, as long as the processing strategies on both sides are consistent.

[0123] For example, a four-byte "00 00 00 00" is appended to the random number as the initial value, and the first and second keys are generated based on the initial key stored in the ETC device. The message header and data field in the key update instruction are concatenated to obtain a total data block, which is then split according to a preset block length to obtain multiple data blocks. The multiple data blocks are then encrypted based on the initial value, the first key, and the second key to ultimately obtain the actual message authentication code MAC. The specific implementation details of the above process are the same as those for generating the message authentication code MAC by the key service platform, which have been explained in detail above and will not be repeated here.

[0124] S502. Compare the actual message authentication code MAC with the message authentication code MAC in the key update instruction. If the actual message authentication code MAC is consistent with the message authentication code MAC in the key update instruction, write the current key into the ETC device.

[0125] For example, the message authentication code MAC in the key update instruction is generated by the key service platform deployed on the operator side, and the actual message authentication code MAC is the message authentication code MAC calculated during the process of the ETC device writing the current key. The actual message authentication code MAC is compared with the message authentication code MAC in the key update instruction. If the two message authentication code MACs match, it means that the data is complete and has not been tampered with, and the current key can be safely written to the ETC device. If they do not match, it indicates that the data may have been tampered with or the source is unreliable, and the write operation should be stopped.

[0126] Based on this, by comparing the message authentication code MAC actually generated with the message authentication code MAC contained in the received instruction, the integrity and authenticity of the data can be confirmed before performing the critical operation of key update, effectively protecting the ETC device from unauthorized access or data tampering, and ensuring the reliability and accuracy of the transaction.

[0127] Figure 6 The following is a flow chart of a method for verifying the success of issuance provided by an embodiment of the present application. As a possible implementation method, after writing each key, a verification is required to determine whether an issuance is successful. Figure 6 As shown, the method specifically includes the following steps:

[0128] S601. The operation control device sends an issuance success verification instruction to the primary issuance module.

[0129] Exemplarily, the one-time issuance module provides a device issuance success verification interface. After all 33 keys shown in Tables 1 and 2 above are written, based on the user interaction interface provided by the operation control device, for example, by clicking on the "Issue Success Verification" component displayed on the user interaction interface, the operation control device sends an issuance success verification instruction to the one-time issuance module by calling the device issuance success verification interface.

[0130] S602. The primary issuance module obtains the factory preset information in the ETC device through an external device according to the issuance success verification instruction.

[0131] For example, after the issuance module receives the issuance success verification instruction sent by the operation control device, it uses an external device connected to the ETC device (such as a reader) to read the factory preset information in the ETC device. The factory preset information is, for example, the content corresponding to the 79 bytes shown in Table 4 below, and the factory preset information is encrypted using the key to obtain encrypted information. The encrypted information and the key identifier are encapsulated into a new verification instruction, and the verification instruction is sent to the key service platform for further verification.

[0132] S603: The primary issuance module sends a verification instruction including encryption information and key identification to the key service platform.

[0133] S604: The key service platform decrypts and verifies the encrypted information based on the key identifier.

[0134] Exemplarily, after receiving the verification instruction from the one-time issuance module, the key service platform determines which key the one-time issuance module used to encrypt the factory preset information based on the key identifier, decrypts the encrypted information using the corresponding key, and determines whether the one-time issuance is successful based on the decryption result. Specifically, if the decrypted data is consistent with the information preset when the ETC device leaves the factory, the one-time issuance is determined to be successful. Furthermore, the key service platform will perform a correctness check on the keys written on the ETC device to ensure that these keys are indeed written correctly as expected. The verification mechanism includes but is not limited to using the key to perform corresponding business operations. The specific business operations can be determined based on the actual function of the key.

[0135] Specifically, the verification mechanism is, for example, to assume that the written key is stored in the DF01 directory of the ETC device, using one of the keys RK21 shown in Table 1 above. _DF01 For example, key RK21 _DF01 Stored in the EF01 file in the DF01 directory, by using the key RK21 _DF01 Encrypt the factory preset information in the ETC device obtained by the primary issuance module through an external device to obtain encrypted data, and then send the encrypted data and the key RK21 _DF01 The identifier is sent to the key service platform. The key service platform knows that the one-time issuance module is using the key RK21 _DF01 After encrypting the factory preset information, the key RK21 is used accordingly. _DF01 Decrypt the encrypted data. If the decrypted data is consistent with the information preset when the ETC device leaves the factory, it means that the issuance is successful.

[0136] The EF01 file format definition in the DF01 directory is shown in Table 4 below:

[0137] Table 4

[0138]

[0139] S605. The key service platform returns the verification result to the primary issuance module.

[0140] For example, once the verification is completed, the key service platform will feed back the verification result to the issuance module, where the verification result is used to indicate whether the issuance is successful. The verification result may specifically include a status code or a flag to indicate whether the verification is successful.

[0141] Based on this, this application provides a method for verifying the successful issuance of an ETC device in one go, so that the device manufacturer can verify whether the ETC device has been successfully issued in one go, and ensure that the issuance work has been completed before the device leaves the factory.

[0142] As a possible implementation, if the verification result returned by the key service platform is verification success, the one-time issuance module sends an issuance success instruction to the external device, so that the external device outputs an issuance success indication.

[0143] Exemplarily, the present application provides a user feedback mechanism after a successful ETC device key update. Specifically, when the key service platform confirms that the key has been correctly written into the ETC device, the one-time issuance module will provide an intuitive one-time issuance success indication to the operator or user through an external device. The purpose of the one-time issuance success indication is to notify the external device that the current operation has been successfully completed. It can be a predefined message, command code or signal used to trigger the external device to perform a corresponding feedback action. After receiving the one-time issuance success indication, the external device will generate some form of success indication according to the built-in logic, such as a sound prompt, a light prompt, etc. The sound prompt, such as a beep or a voice broadcast of "operation successful", allows the user to hear the success signal. The light prompt, such as a green light, indicates success, and a red light may be used to indicate failure.

[0144] Based on this, the instant feedback provided by the external device ensures that the operator can quickly and accurately know the results of the ETC device key writing operation, enhancing the user experience and reducing the possibility of misoperation.

[0145] Figure 7 The following is a flow chart showing a method for generating a business document number according to an embodiment of the present application. Figure 7 As shown, before the primary issuance module receives the primary issuance instruction sent by the operation control device, the method further includes:

[0146] S701. The primary issuance module establishes a communication link with the on-board unit (OBU) in the ETC device through an external device.

[0147] For example, before performing an issuance operation, the issuance module needs to first establish a communication connection with the on-board unit OBU in the ETC device, which can be achieved through an external device, and the external device can wirelessly communicate with the on-board unit OBU.

[0148] S702: The primary issuance module obtains the OBU contract serial number and the chip serial number through the communication link.

[0149] For example, once the communication link is established, the issuance module can send a request to the on-board unit OBU to obtain specific information, such as the OBU contract serial number and the chip serial number, where the OBU contract serial number represents the contract details between the user and the service provider, and the chip serial number identifies the specific hardware.

[0150] S703. The primary issuance module sends the OBU contract serial number and the chip serial number to the key service platform.

[0151] S704. The key service platform generates a business document number according to the OBU contract serial number and the chip serial number, and sends the business document number to the primary issuance module.

[0152] For example, after the one-time issuance module obtains the OBU contract serial number and chip serial number, the one-time issuance module will forward the OBU contract serial number and chip serial number to the key service platform. The key service platform can use the two key information, OBU contract serial number and chip serial number, to verify the identity of the on-board unit OBU, create a new business document number, and return the business document number to the one-time issuance module. The business document number is unique and is used to track the entire transaction process.

[0153] For example, the business document number can be generated by combining parameters such as the OBU contract serial number, chip serial number, issuance time, and some custom codes added by the operator. The combination method can be direct concatenation, splicing using separators, or selecting some key information for splicing. The specific method can be selected and set according to actual needs and is not restricted here.

[0154] S705. The key service platform returns the business document number to the primary issuance module.

[0155] Optionally, after the one-time issuance module receives the verification result returned by the key service platform, the method further includes: if the verification result returned by the key service platform is successful, the one-time issuance module updates the issuance record and releases the communication link.

[0156] For example, if the verification result received by the primary issuance module indicates successful verification, the primary issuance module needs to update the issuance record in its internal database to reflect the successful key writing operation. This update records the status of each issuance operation and facilitates subsequent query, audit, and troubleshooting. The issuance record includes, but is not limited to, the following information: the ETC device identifier, the written key information, the issuance timestamp, the operation status, and the relevant business document number or other parameters.

[0157] For example, after the issuance module completes the operation of updating the issuance record, it should disconnect the communication connection with the ETC device, that is, release the communication link, to ensure the effective use of resources and avoid occupying the communication interface for a long time, which will affect other operations.

[0158] Optionally, before the one-time issuance module receives the one-time issuance instruction sent by the operation control device, the method further includes: the one-time issuance module receives the issuance start instruction sent by the operation control device, and sends an external device start instruction to the external device according to the issuance start instruction to start the external device.

[0159] Exemplarily, the one-time issuance module provides an external device opening interface. Before the one-time issuance module receives the one-time issuance instruction sent by the operation control device, the operation control device will call the device opening interface to send an issuance start instruction to the one-time issuance module. After receiving the issuance start instruction, the one-time issuance module sends an external device start instruction to the external device. The external device receives the external device start instruction to start the external device.

[0160] Exemplarily, the one-time issuance module also provides a device shutdown interface. After one-time issuance is completed, the operation control device will call the device shutdown interface to send an issuance shutdown instruction to the one-time issuance module. After receiving the issuance shutdown instruction, the one-time issuance module sends an external device shutdown instruction to the external device. The external device receives the peripheral shutdown instruction to shut down the external device.

[0161] In addition, in order to avoid equipment interference, this application will register the MAC address of the ETC device to be issued once and the device number of the ETC device to be issued once and import them into the operation control device. Before the issuance, the OBU device will be awakened first to read whether the MAC address of the device is consistent with the device number to be issued once. If it is inconsistent, it means that it is connected to other OBU devices, then the OBU device will be awakened again. After reading the correct OBU device, the actual issuance operation will be performed. This can effectively avoid the situation where the ETC device in the adjacent road is interfered with during the issuance of multiple channels at one time, and it can also ensure that the device number issued once is consistent with the device number printed on the appearance of the device. In addition, this application will also record the device manufacturer's key call log in real time and in detail to facilitate the subsequent key call security audit.

[0162] Figure 8 The following is an interactive flow chart of a device manufacturer's one-time issuance provided by an embodiment of the present application. Figure 8 As shown in the figure, the equipment manufacturer's one-time issuance process specifically includes the following steps:

[0163] S801. The operation control device calls the device opening interface provided by the primary issuance module to send a device opening instruction to the primary issuance module. The device opening instruction is used to open an external device.

[0164] S802: The primary issuance module receives a device opening instruction sent by the operation control device, calls a device opening interface provided by the external device, and forwards the device opening instruction to the external device to open the external device.

[0165] S803. The operation control device calls the device one-time issuance interface provided by the one-time issuance module to send a one-time issuance instruction for the ETC device to be issued once to the one-time issuance module, so as to trigger a one-time issuance operation.

[0166] S804. The primary issuance module calls the instruction interaction interface provided by the external device to send an instruction for the current key to the external device to write the current key into the ETC device.

[0167] The instructions for the current key include multiple interactive instructions involved in a single issuance process, such as an instruction to generate a random number for the current key, an instruction to generate a key containing the random number, and an instruction to update the key used to write the current key. During a single issuance process to write the key to the ETC device, each instruction involved can be interacted with through the instruction interaction interface provided by the external device.

[0168] S805. The external device receives the instruction for the current key sent by the one-time issuance module, and sends the instruction to the ETC device to be issued once via wireless means (5.8GHz).

[0169] S806: The ETC device executes the key writing operation in response to the write instruction and returns the instruction execution result to the external device, wherein the instruction execution result is used to indicate whether the key writing is successful.

[0170] S807: The external device sends the instruction execution result to the primary issuance module through the instruction interaction interface.

[0171] It should be noted that the above steps S804 to S807 are a cyclic execution process, and for the 33 keys shown in Table 1 and Table 2, the above steps S804 to S807 need to be executed once.

[0172] S808. The primary issuance module receives the instruction execution result. If the instruction execution result indicates that the issuance is successful, the primary issuance module calls the human-computer interaction interface of the external device to issue a prompt message to indicate that the issuance is successful.

[0173] S809. After the issuance is successful, the operation control device calls the device closing interface provided by the primary issuance module to send a device closing instruction to the primary issuance module. The device closing interface is used to close the device connection and make the external device exit the current operation state.

[0174] S810. The one-time issuance module receives the device closing instruction sent by the operation control device, calls the device closing interface provided by the external device to forward the device closing instruction to the external device, and the external device exits the current operation state and closes the connection between the one-time issuance module and the external device.

[0175] The implementation details of the above steps have been explained in detail in the previous article and will not be repeated here.

[0176] Based on this, this application completes a one-time issuance on the equipment production line through the ETC equipment manufacturer. The one-time issuance process of the ETC equipment can be completed by the equipment manufacturer calling the one-time issuance module, and then the one-time issuance module calls the external device interface to complete the one-time issuance of the ETC equipment. The equipment manufacturer only needs to simply call the device one-time issuance interface of the one-time issuance module to complete the one-time issuance of the equipment, without having to understand the complex interaction details in the one-time issuance process, which greatly reduces the operator's system integration cost and one-time issuance cost. Compared with the traditional manual issuance method of business personnel, the issuance efficiency has been significantly improved, and the probability of issuance errors has been greatly reduced.

[0177] The embodiment of the present application further provides an electronic device 900, which is, for example, an operation control device, an external device, an ETC device, etc. Figure 9 , which is a schematic diagram of the structure of an electronic device 900 provided in an embodiment of the present application, includes: a processor 901, a memory 902, and optionally, a bus 903. The memory 902 stores machine-readable instructions executable by the processor 901. When the electronic device 900 is running, the processor 901 communicates with the memory 902 via the bus 903. When the machine-readable instructions are executed by the processor 901, the steps of the ETC device one-time issuance processing method as described in any of the above items are performed.

[0178] An embodiment of the present application also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the one-time issuance processing method of the ETC device as described in any one of the above items are executed.

[0179] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system and device described above can refer to the corresponding process in the method embodiment, and will not be repeated in this application. In the several embodiments provided in this application, it should be understood that the disclosed system, device and method can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation. For example, multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, indirect coupling or communication connection of devices or modules, which can be electrical, mechanical or other forms.

[0180] In addition, the functional units in the various embodiments of the present application can be integrated into a single processing unit, each unit can exist physically separately, or two or more units can be integrated into a single unit. If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the portion that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in the various embodiments of the present invention. The aforementioned storage medium includes various media that can store program code, such as a USB flash drive, a mobile hard drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0181] The above is only a specific implementation method of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with this technical field can easily think of changes or replacements within the technical scope disclosed in this application, which should be covered by the protection scope of the present application.

Claims

1. A one-time issuance processing method for an ETC device, characterized in that: Applied to a one-time issuance processing system, the one-time issuance processing system being deployed on the ETC device manufacturer side, the one-time issuance processing system comprising: an operation control device, a one-time issuance module, an external device, and a plurality of ETC devices, wherein the one-time issuance module is provided by the ETC operator; the method comprising: The one-time issuance module receives a one-time issuance instruction sent by the operation control device, wherein the one-time issuance instruction includes an identifier of the ETC device to be issued once; The primary issuance module obtains, through the external device, a random number for the current key generated by the ETC device according to the identifier of the ETC device; The one-time issuance module sends a key generation instruction containing the random number to a key service platform deployed on the operator side, so that the key service platform generates the current key according to the random number and the identifier of the ETC device and sends a key update instruction containing the current key to the one-time issuance module; The primary issuance module sends the key update instruction to the ETC device through the external device, so that the ETC device writes the current key; The key update instruction also includes: a verification message authentication code MAC; The process of generating the MAC by the key service platform includes: Using the random number generated by the ETC device as an initial value; Generate a first key and a second key according to the initial key of the ETC device; Generate multiple data blocks according to the message header and data field of the key update instruction, wherein the data field includes the identifier of the ETC device and / or the current key; The multiple data blocks are encrypted based on the initial value, the first key, and the second key to obtain the MAC.

2. The method according to claim 1, characterized in that The generating of multiple data blocks according to the message header and data field of the key update instruction includes: Splicing the message header and the data field into a data block; The total data block is divided into the multiple data blocks according to the preset block length.

3. The method according to claim 1, characterized in that The encrypting the multiple data blocks based on the initial value, the first key, and the second key to obtain the MAC includes: Superimposing the initial value and the first data block as initial input data; Inputting the initial input data and the first key into a first encryption function for encryption processing to obtain an initial encryption result; Input the initial encryption result and the second data block after the first data block into the first encryption function for encryption processing, and execute the encryption process in sequence until the encryption result corresponding to the last data block is obtained; Inputting the encryption result corresponding to the last data block and the second key into a second encryption function to obtain an intermediate encryption result; The intermediate encryption result and the first key are input into the first encryption function to obtain a target encryption result, and the target encryption result is used as the MAC.

4. The method according to claim 1, wherein The process of writing the current key into the ETC device includes: Generate an actual MAC according to the key update instruction, the current key identifier, the initial key, the identifier of the ETC device, and the random number; Comparing the actual MAC with the MAC in the key update instruction; If the actual MAC is consistent with the MAC in the key update instruction, the current key is written into the ETC device.

5. The method according to claim 1, characterized in that The method further comprises: The one-time issuance module receives the issuance success verification instruction sent by the operation control device; The primary issuance module obtains the factory preset information in the ETC device through the external device according to the issuance success verification instruction; The one-time issuance module encrypts the factory preset information using a key to obtain encrypted information, and sends a verification instruction including the encrypted information and a key identifier of the key to the key service platform, so that the key service platform decrypts and verifies the encrypted information based on the key identifier; The one-time issuance module receives the verification result returned by the key service platform.

6. The method according to claim 5, characterized in that The method further comprises: If the verification result returned by the key service platform is verification success, the one-time issuance module sends a one-time issuance success instruction to the external device, so that the external device outputs a one-time issuance success indication.

7. The method according to claim 5, characterized in that Before the one-time issuance module receives the one-time issuance instruction sent by the operation control device, the module further includes: The primary issuance module establishes a communication link with the on-board unit OBU in the ETC device through the external device, and obtains the OBU contract serial number and chip serial number through the communication link; The one-time issuance module sends the OBU contract serial number and the chip serial number to the key service platform, so that the key service platform generates a business document number according to the OBU contract serial number and the chip serial number and sends the business document number to the one-time issuance module.

8. The method according to claim 7, characterized in that After the primary issuance module receives the verification result returned by the key service platform, the module further includes: If the verification result returned by the key service platform is successful, the one-time issuance module updates the issuance record and releases the communication link.

9. The method according to claim 1, characterized in that Before the one-time issuance module receives the one-time issuance instruction sent by the operation control device, the module further includes: The primary issuance module receives an issuance start instruction sent by the operation control device; The primary issuance module sends an external device activation instruction to the external device according to the issuance activation instruction to activate the external device.

10. A one-time issuance processing system, characterized in that: The one-time issuance processing system is deployed on the ETC device manufacturer side and includes: an operation control device, a one-time issuance module, an external device, and multiple ETC devices, wherein the one-time issuance module is provided by the ETC operator; The one-time issuance processing system is used to execute the ETC device one-time issuance processing method described in any one of claims 1-9.

11. An electronic device, characterized in that: include: A processor and a memory, wherein the memory stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor executes the machine-readable instructions to perform the steps of the one-time issuance processing method of the ETC device as described in any one of claims 1 to 9.

12. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, which, when executed by a processor, executes the steps of the one-time issuance processing method of the ETC device as described in any one of claims 1 to 9.

Images