Communication connection method, device, vehicle and storage medium applied to vehicle telematics processor

Abstract

The present invention relates to a communication connection method, device, vehicle, and storage medium for an on-board telematics processor. The method comprises: generating data to be transmitted in response to a verification request sent by a host computer via a vehicle computer; wherein the verification request represents a request for communication verification; encrypting the data to be transmitted to obtain encrypted data, and transmitting the encrypted data to the host computer via the vehicle computer; wherein the encrypted data is used by the host computer to transmit to a service platform, and then decrypted to obtain decrypted data; receiving the decrypted data transmitted by the host computer via the vehicle computer; and if the host computer is successfully verified based on the decrypted data and the data to be transmitted, determining to establish a network communication connection with the host computer. The present invention can achieve free debugging of the on-board TBOX by establishing a network communication connection between the on-board TBOX and the host computer.

Description

Technical Field

[0001] The present invention relates to the field of vehicle technology, and in particular to a communication connection method, device, vehicle and storage medium applied to an on-board telematics processor. Background Art

[0002] The Telematics Box (TBOX) is a vehicle information and positioning transmission system. Based on the functions of the TBOX, data transmission, on-vehicle debugging, and vehicle software upgrades can be performed by connecting to the TBOX's ports.

[0003] In the prior art, a vehicle computer in a vehicle provides a Universal Serial Bus (USB) interface, which is connected to a USB flash drive to achieve connection with the vehicle-mounted TBOX and automatically read log files from the TBOX.

[0004] However, the above method is limited in usage scenarios and can only read files from the on-board TBOX unilaterally, but cannot send debugging commands to the on-board TBOX, thus making it impossible to freely debug the on-board TBOX. Summary of the Invention

[0005] One of the objects of the present invention is to provide a communication connection method applied to a vehicle-mounted telematics processor, by establishing a network communication connection between the vehicle-mounted TBOX and the host computer, free debugging of the vehicle-mounted TBOX can be realized; the second object is to also provide a communication connection method applied to a vehicle-mounted telematics processor; the third object is to provide a communication connection device applied to a vehicle-mounted telematics processor; the fourth object is to also provide a communication connection device applied to a vehicle-mounted telematics processor; the fifth object is to provide a vehicle-mounted telematics processor; the sixth object is to provide a host computer; the seventh object is to provide a vehicle; the eighth object is to provide a communication connection system; the ninth object is to provide a computer-readable storage medium; the tenth object is to provide a computer program product.

[0006] In order to achieve the above object, the technical solution adopted by the present invention is as follows:

[0007] A communication connection method for a vehicle-mounted telematics processor (TBOX) is disclosed. The method is applied to a vehicle-mounted telematics processor (TBOX) in a vehicle, and comprises:

[0008] generating data to be transmitted in response to a verification request sent by the host computer through the vehicle computer in the vehicle; wherein the verification request represents a request for communication verification;

[0009] Encrypting the data to be transmitted to obtain encrypted data, and transmitting the encrypted data to the host computer through the vehicle computer; wherein the encrypted data is used by the host computer to transmit to the service platform and then decrypted to obtain decrypted data;

[0010] Receiving the decrypted data transmitted by the host computer through the vehicle computer;

[0011] If the host computer is successfully authenticated based on the decrypted data and the data to be transmitted, it is determined to establish a network communication connection with the host computer.

[0012] Furthermore, the transmitting of the encrypted data to the host computer via the vehicle computer includes:

[0013] Obtain the device identification code corresponding to the vehicle-mounted TBOX;

[0014] After the encrypted data and the device identification code are transmitted to the host computer through the vehicle computer, the host computer transmits the encrypted data and the device identification code to the service platform; wherein the device identification code is used to decrypt the encrypted data.

[0015] Furthermore, encrypting the data to be transmitted to obtain encrypted data includes:

[0016] Obtaining a private key from the client certificate corresponding to the vehicle-mounted TBOX, and using the private key to encrypt the data to be transmitted to obtain encrypted data;

[0017] The device identification code is used to obtain the public key in the client certificate, and the public key is used to decrypt the encrypted data to obtain the decrypted data.

[0018] Furthermore, the device identification code includes at least one of a terminal unique identifier corresponding to the vehicle-mounted TBOX, a vehicle identification code, and a product serial number.

[0019] Furthermore, if the host computer is successfully verified based on the decrypted data and the data to be transmitted, determining to establish a network communication connection with the host computer includes:

[0020] If the host computer is successfully authenticated based on the decrypted data and the data to be transmitted, generating a first authentication result indicating successful authentication of the host computer;

[0021] The first verification result is transmitted to the host computer through the vehicle computer; the first verification result is used by the host computer to enable the network function connected to the vehicle-mounted TBOX based on the first verification result, so as to establish a network communication connection between the vehicle-mounted TBOX and the host computer.

[0022] Furthermore, the successful verification of the host computer based on the decrypted data and the data to be transmitted includes:

[0023] If it is determined that the decrypted data is consistent with the data to be transmitted, then it is determined that the authentication of the host computer is successful;

[0024] If it is determined that the decrypted data is inconsistent with the data to be transmitted, it is determined that the authentication of the host computer is unsuccessful.

[0025] Furthermore, generating the data to be transmitted includes:

[0026] Generating the data to be transmitted in a random manner;

[0027] Alternatively, data information in the vehicle is acquired, and the data information is processed to obtain the data to be transmitted.

[0028] A communication connection method for a vehicle-mounted telematics processor, the method being applied to a host computer and comprising:

[0029] Transmitting a verification request to the vehicle-mounted telematics processor TBOX in the vehicle via the vehicle computer; wherein the verification request represents a request for communication verification; the verification request is used by the vehicle-mounted TBOX to generate data to be transmitted and then encrypt the encrypted data for transmission;

[0030] receiving the encrypted data transmitted by the vehicle-mounted TBOX through the vehicle computer, and transmitting the encrypted data to the service platform; wherein the encrypted data is used by the service platform to decrypt and obtain decrypted data;

[0031] The decrypted data sent by the service platform is transmitted to the on-board TBOX through the vehicle computer; wherein, the decrypted data is used by the on-board TBOX to determine the establishment of a network communication connection with the host computer after the host computer is successfully verified based on the decrypted data and the data to be transmitted.

[0032] Furthermore, transmitting the encrypted data to the service platform includes:

[0033] Receiving the encrypted data and the device identification code corresponding to the on-board TBOX transmitted by the on-board TBOX through the vehicle computer;

[0034] The encrypted data and the device identification code are transmitted to the service platform; wherein the device identification code is used by the service platform to decrypt the encrypted data to obtain decrypted data.

[0035] Furthermore, the device identification code includes at least one of a terminal unique identifier corresponding to the vehicle-mounted TBOX, a vehicle identification code, and a product serial number.

[0036] Furthermore, the vehicle computer is provided with a universal serial bus (USB) interface; the transmitting of the verification request to the on-board telematics processor (TBOX) in the vehicle through the vehicle computer includes:

[0037] The verification request is transmitted to the vehicle computer through the USB interface, so that the vehicle computer transmits the verification request to the vehicle-mounted TBOX.

[0038] Furthermore, after transmitting the decrypted data sent by the service platform to the vehicle-mounted TBOX via the vehicle computer, the method further includes:

[0039] receiving a first verification result transmitted by the vehicle-mounted TBOX through the vehicle computer indicating successful verification of the host computer; the first verification result is used by the host computer to enable a network function connected to the vehicle-mounted TBOX based on the first verification result;

[0040] Determine to establish a network communication connection with the vehicle-mounted TBOX.

[0041] Furthermore, the determining to establish a network communication connection with the vehicle-mounted TBOX includes:

[0042] Modify the network configuration information and determine the network address of the vehicle-mounted TBOX;

[0043] A network connection is established with the vehicle-mounted TBOX according to the modified network configuration information and the network address.

[0044] A communication connection device for a vehicle-mounted telematics processor, the device being applied to a vehicle-mounted telematics processor TBOX in a vehicle; the device comprising:

[0045] A generating module, configured to generate data to be transmitted in response to a verification request sent by a host computer via a vehicle computer in a vehicle; wherein the verification request represents a request for communication verification;

[0046] A transmission module, configured to encrypt the data to be transmitted to obtain encrypted data, and transmit the encrypted data to the host computer via the vehicle computer; wherein the encrypted data is decrypted by the host computer after being transmitted to the service platform to obtain decrypted data;

[0047] A receiving module, configured to receive the decrypted data transmitted by the host computer via the vehicle computer;

[0048] A connection module is used to determine to establish a network communication connection with the host computer if the host computer is successfully verified based on the decrypted data and the data to be transmitted.

[0049] Furthermore, the transmission module is specifically used to: obtain the device identification code corresponding to the vehicle-mounted TBOX; transmit the encrypted data and the device identification code to the host computer through the vehicle computer, so that the host computer transmits the encrypted data and the device identification code to the service platform; wherein, the device identification code is used to decrypt the encrypted data.

[0050] Furthermore, the transmission module is also specifically used to: obtain the private key in the client certificate corresponding to the on-board TBOX, and use the private key to encrypt the data to be transmitted to obtain encrypted data; wherein, the device identification code is used to obtain the public key in the client certificate, and the public key is used to decrypt the encrypted data to obtain the decrypted data.

[0051] Furthermore, the device identification code includes at least one of a terminal unique identifier corresponding to the vehicle-mounted TBOX, a vehicle identification code, and a product serial number.

[0052] Furthermore, the connection module is specifically used to: if the host computer is successfully verified based on the decrypted data and the data to be transmitted, generate a first verification result indicating that the verification of the host computer is successful; transmit the first verification result to the host computer through the vehicle computer; the first verification result is used by the host computer to enable the network function connected to the on-board TBOX based on the first verification result, so that a network communication connection is established between the on-board TBOX and the host computer.

[0053] Furthermore, the connection module is further specifically configured to: determine that the authentication of the host computer is successful if it is determined that the decrypted data is consistent with the data to be transmitted; and determine that the authentication of the host computer is unsuccessful if it is determined that the decrypted data is inconsistent with the data to be transmitted.

[0054] Furthermore, the generation module is specifically used to: generate the data to be transmitted in a random manner; or obtain data information in the vehicle and process the data information to obtain the data to be transmitted.

[0055] A communication connection device for a vehicle-mounted telematics processor, the device being applied to a host computer; the device comprising:

[0056] A first transmission module is configured to transmit a verification request to an onboard telematics processor (TBOX) in the vehicle via a vehicle computer; wherein the verification request indicates a request for communication verification; the verification request is used by the onboard TBOX to generate data to be transmitted, encrypt the data, and transmit the encrypted data;

[0057] A second transmission module is configured to receive the encrypted data transmitted by the vehicle-mounted TBOX via the vehicle computer and transmit the encrypted data to the service platform; wherein the encrypted data is decrypted by the service platform to obtain decrypted data;

[0058] The third transmission module is used to transmit the decrypted data sent by the service platform to the on-board TBOX through the vehicle computer; wherein, the decrypted data is used by the on-board TBOX to determine the establishment of a network communication connection with the host computer after the host computer is successfully verified based on the decrypted data and the data to be transmitted.

[0059] Furthermore, the second transmission module is specifically used to: receive the encrypted data and the device identification code corresponding to the vehicle-mounted TBOX transmitted by the vehicle-mounted TBOX through the vehicle computer; transmit the encrypted data and the device identification code to the service platform; wherein the device identification code is used by the service platform to decrypt the encrypted data to obtain decrypted data.

[0060] Furthermore, the device identification code includes at least one of a terminal unique identifier corresponding to the vehicle-mounted TBOX, a vehicle identification code, and a product serial number.

[0061] Furthermore, a universal serial bus USB interface is provided in the vehicle computer; the first transmission module is specifically used to: transmit the verification request to the vehicle computer through the USB interface, so that the vehicle computer transmits the verification request to the vehicle-mounted TBOX.

[0062] Furthermore, the third transmission module is used to transmit the decrypted data sent by the service platform to the on-board TBOX through the vehicle computer, and is also used to: receive a first verification result indicating that the on-board TBOX has successfully verified the host computer through the vehicle computer transmission; the first verification result is used by the host computer to enable the network function connected to the on-board TBOX based on the first verification result; and determine to establish a network communication connection with the on-board TBOX.

[0063] Furthermore, the device is further specifically configured to: modify network configuration information and determine the network address of the vehicle-mounted TBOX; and establish a network connection with the vehicle-mounted TBOX according to the modified network configuration information and the network address.

[0064] A vehicle-mounted telematics processor, comprising: a memory, a processor;

[0065] The memory stores computer-executable instructions;

[0066] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the above first aspect and / or various possible implementations of the first aspect.

[0067] A host computer, comprising: a memory, a processor;

[0068] The memory stores computer-executable instructions;

[0069] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the above second aspect and / or various possible implementations of the second aspect.

[0070] A vehicle includes an on-board telematics processor, wherein the on-board telematics processor is configured to execute the above first aspect and / or various possible implementations of the first aspect.

[0071] A communication connection system includes an on-board telematics processor (TBOX) and a host computer in a vehicle, and the communication connection system is used to execute the method of the first aspect and / or the second aspect as described above.

[0072] A computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method of the first aspect and / or the second aspect.

[0073] A computer program product comprises a computer program, wherein when the computer program is executed by a processor, the method of the first aspect and / or the second aspect is implemented.

[0074] Beneficial effects of the present invention:

[0075] The present invention implements data transmission interaction between the on-board TBOX, the host computer, the vehicle computer and the service platform. Without changing the existing physical connection between the on-board TBOX and the vehicle computer, a network communication connection can be established between the on-board TBOX and the host computer, thereby enabling free debugging of the on-board TBOX. BRIEF DESCRIPTION OF THE DRAWINGS

[0076] Figure 1 The process of the communication connection method applied to the vehicle telematics processor provided by one embodiment of the present invention Figure 1 ;

[0077] Figure 2The process of the communication connection method applied to the vehicle telematics processor provided by one embodiment of the present invention Figure 2 ;

[0078] Figure 3 The process of the communication connection method applied to the vehicle telematics processor provided by one embodiment of the present invention Figure 3 ;

[0079] Figure 4 A system composition diagram of a communication connection system provided in one embodiment of the present invention;

[0080] Figure 5 A flowchart of a communication connection system according to an embodiment of the present invention;

[0081] Figure 6 A schematic diagram of the structure of a communication connection device for a vehicle-mounted telematics processor provided by an embodiment of the present invention Figure 1 ;

[0082] Figure 7 A schematic diagram of the structure of a communication connection device for a vehicle-mounted telematics processor provided by an embodiment of the present invention Figure 2 ;

[0083] Figure 8 A schematic structural diagram of a vehicle telematics processor provided by one embodiment of the present invention;

[0084] Figure 9 A schematic structural diagram of a host computer provided in one embodiment of the present invention. DETAILED DESCRIPTION

[0085] The following describes the embodiments of the present invention with reference to the accompanying drawings and preferred embodiments. Those skilled in the art will readily appreciate the other advantages and benefits of the present invention from the disclosure herein. The present invention may also be implemented or applied through various other specific embodiments, and the various details in this specification may be modified or altered based on different viewpoints and applications without departing from the spirit of the present invention. It should be understood that the preferred embodiments are intended only to illustrate the present invention and are not intended to limit the scope of protection of the present invention.

[0086] It should be noted that the illustrations provided in the following embodiments are merely schematic illustrations of the basic concept of the present invention. Therefore, the illustrations only show components related to the present invention and are not drawn according to the number, shape, and size of components in actual implementation. In actual implementation, the type, quantity, and proportion of each component may be changed arbitrarily, and the component layout may also be more complex.

[0087] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in the present invention are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards, and corresponding operation entrances must be provided for users to choose to authorize or refuse.

[0088] The vehicle telematics processor is a vehicle information and positioning transmission system. Based on the functions of the vehicle TBOX, it can be connected to the port of the vehicle TBOX for data transmission, on-vehicle debugging and vehicle software upgrades.

[0089] In one example, a vehicle's onboard computer provides a USB port that connects to the TBOX by inserting a USB flash drive, automatically reading log files from the TBOX. However, this method is limited in its use case and can only read files from the vehicle's TBOX, but cannot send debugging commands to it.

[0090] In view of this, an embodiment of the present invention proposes a communication connection method applied to a vehicle-mounted telematics processor. By performing data transmission interaction between the vehicle-mounted TBOX, the host computer, the vehicle computer and the service platform, the technical problem of being unable to freely debug the vehicle-mounted TBOX can be solved.

[0091] The technical solution of the present invention is described in detail below through specific embodiments. It should be noted that the following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments.

[0092] Figure 1 The process of the communication connection method applied to the vehicle telematics processor provided by one embodiment of the present invention Figure 1 ,like Figure 1 As shown, the method is applied to an on-board telematics processor TBOX in a vehicle, and the method includes:

[0093] 201. The vehicle-mounted TBOX generates data to be transmitted in response to a verification request sent by a host computer via a vehicle computer in the vehicle; wherein the verification request indicates a request for communication verification.

[0094] For example, an embodiment of the present application provides a communication connection system, which includes an on-board telematics processor (TBOX) in a vehicle, a host computer, a service platform such as a traffic information service provider (Telematics Service Provider, TSP) platform, and a vehicle computer in the vehicle; wherein, there is a network connection between the TBOX and the vehicle computer, and a socket connection is established between the two to achieve data interaction; the vehicle computer and the host computer are physically connected, and the host computer and the service platform are connected via a wireless network. When the on-board TBOX needs to be debugged, a verification request is generated and sent by the vehicle computer based on the host computer to request communication verification, and the verification request is sent to the on-board TBOX. The on-board TBOX receives the verification request and responds to the verification request, that is, based on a preset algorithm, for example, using a random sampling algorithm, randomly extracts data from a preset database as data to be transmitted for processing.

[0095] 202. The vehicle-mounted TBOX encrypts the data to be transmitted to obtain encrypted data, and transmits the encrypted data to the host computer via the vehicle computer; wherein the encrypted data is transmitted to the service platform by the host computer and then decrypted to obtain decrypted data.

[0096] For example, the onboard TBOX invokes a preset encryption algorithm to encrypt the data to be transmitted, generating encrypted data. For example, based on a hash algorithm, the data to be transmitted is hashed to generate a hash string, i.e., the encrypted data. The encrypted data is then transmitted to the vehicle computer, which, using its data forwarding function, transmits the received encrypted data to a host computer. The host computer receives the encrypted data and transmits it to the service platform. The service platform decrypts the encrypted data using a preset decryption algorithm, such as a hash decryption algorithm, to generate decrypted data, which it then transmits back to the host computer.

[0097] 203. The vehicle-mounted TBOX receives the decrypted data transmitted by the host computer through the vehicle computer.

[0098] For example, the host computer transmits the decrypted data transmitted by the service platform to the vehicle computer, which, based on the data forwarding function, transmits the received decrypted data back to the vehicle TBOX. The vehicle TBOX then receives the decrypted data for processing.

[0099] 204. If the vehicle-mounted TBOX successfully verifies the host computer based on the decrypted data and the data to be transmitted, it determines to establish a network communication connection with the host computer.

[0100] For example, the data to be transmitted is transmitted from the vehicle-mounted TBOX to the TSP via the host computer, and the decrypted data is transmitted back to the vehicle-mounted TBOX via the host computer based on the TSP. All transmitted data passes through the host computer. Therefore, the vehicle-mounted TBOX processes the decrypted data and the data to be transmitted using a preset verification algorithm, including determining whether the two are identical, to obtain a verification result. This verifies whether the data to be transmitted has been tampered with after passing through the host computer, and further determines the host computer's identity verification. Specifically, if the decrypted data and the data to be transmitted have the same data format, the host computer verification is successful. If the vehicle-mounted TBOX determines that the host computer verification is successful, the host computer's identity verification is passed. Based on the vehicle-mounted TBOX's own network communication capabilities, it determines to establish a network communication connection with the host computer, for example, via Secure Shell (SSH). Once the vehicle-mounted TBOX and the vehicle-mounted TBOX are connected, debuggers can exchange data with the vehicle-mounted TBOX via the host computer, allowing them to freely debug the vehicle-mounted TBOX.

[0101] In this embodiment, a communication connection method for a vehicle-mounted telematics processor is provided. By performing data transmission interaction between the vehicle-mounted TBOX, the host computer, the vehicle computer, and the service platform, a network communication connection can be established between the vehicle-mounted TBOX and the host computer without modifying the existing physical connection between the vehicle-mounted TBOX and the vehicle computer, thereby enabling free debugging of the vehicle-mounted TBOX.

[0102] Figure 2 The process of the communication connection method applied to the vehicle telematics processor provided by one embodiment of the present invention Figure 2 ,exist Figure 1 On the basis of Figure 2 As shown, the method includes:

[0103] 301. The host computer transmits a verification request to the on-board telematics processor TBOX in the vehicle through the vehicle computer. The verification request represents a request for communication verification. The verification request is used by the on-board TBOX to generate data to be transmitted and then encrypt the encrypted data for transmission.

[0104] For example, based on the above embodiment, when the onboard TBOX in a vehicle requires debugging, the host computer generates a verification request to request communication verification. The host computer, through its connection to the vehicle's onboard computer (VCU), transmits the verification request to the VCU. For example, the verification request is packaged into a message in a pre-set format and sent to the VCU. The VCU, using its data forwarding function, transmits the received verification request to the onboard TBOX connected to its network.

[0105] 302. The vehicle-mounted TBOX generates data to be transmitted in response to a verification request sent by the host computer through the vehicle computer in the vehicle; wherein the verification request indicates a request for communication verification.

[0106] For example, this step can refer to step 201 and will not be described in detail here.

[0107] 303. The vehicle-mounted TBOX encrypts the data to be transmitted to obtain encrypted data, and transmits the encrypted data to the host computer via the vehicle computer; wherein the encrypted data is transmitted to the service platform by the host computer and then decrypted to obtain decrypted data.

[0108] For example, this step can refer to step 202 and will not be described in detail here.

[0109] 304. The host computer receives the encrypted data transmitted by the vehicle-mounted TBOX through the vehicle computer, and transmits the encrypted data to the service platform; wherein, the encrypted data is used by the service platform to decrypt and obtain decrypted data.

[0110] For example, the on-board TBOX transmits the generated encrypted data to the vehicle computer. The vehicle computer, using its data forwarding function, transmits the received encrypted data to the host computer. The host computer, using its data forwarding function, forwards the received encrypted data to the service platform. The service platform invokes a pre-stored decryption algorithm, such as a hash decryption algorithm, to decrypt the received encrypted data, obtaining the decrypted data to be transmitted, i.e., the decrypted data. The encrypted data is then transmitted back to the host computer.

[0111] 305. The host computer transmits the decrypted data sent by the service platform to the on-board TBOX via the vehicle computer. The decrypted data is used by the on-board TBOX to establish a network communication connection with the host computer after successful verification of the host computer based on the decrypted data and the data to be transmitted.

[0112] For example, the host computer receives the decrypted data sent by the TSP and transmits the received decrypted data to the vehicle computer based on its own data forwarding function. The vehicle computer transmits the received decrypted data to the vehicle-mounted TBOX based on its own data forwarding function.

[0113] 306. The vehicle-mounted TBOX receives the decrypted data transmitted by the host computer through the vehicle computer.

[0114] For example, this step may refer to step 203 and will not be described in detail here.

[0115] 307. If the vehicle-mounted TBOX successfully verifies the host computer based on the decrypted data and the data to be transmitted, it determines to establish a network communication connection with the host computer.

[0116] For example, this step can refer to step 204 and will not be described in detail here.

[0117] In this embodiment, based on the above embodiment, the host computer identity authentication is performed through the vehicle-mounted TBOX and the service platform, so that a network connection is established between the host computer and the TBOX. There is no need to change the existing physical connection between the vehicle-mounted TBOX and the vehicle computer. Only software updates and data interaction are required to achieve free debugging of the vehicle-mounted TBOX. At the same time, the host computer does not need to store any encryption algorithm, and there is no possibility of encryption algorithm leakage.

[0118] Figure 3 The process of the communication connection method applied to the vehicle telematics processor provided by one embodiment of the present invention Figure 3 , Figure 4 A system composition diagram of a communication connection system provided in one embodiment of the present invention; Figure 5 The working flow diagram of the communication connection system provided by one embodiment of the present invention is as follows: Figure 1 、 2 On the basis of Figure 3 As shown, the method includes:

[0119] 401. The host computer transmits a verification request to the vehicle computer through the USB interface, so that the vehicle computer transmits the verification request to the vehicle-mounted TBOX.

[0120] Among them, the car computer is provided with a universal serial bus USB interface.

[0121] For example, Figure 4 As shown, an embodiment of the present application provides a communication connection system, the system composition of the communication connection system includes: an on-board TBOX and a vehicle computer in the vehicle, a Universal Serial Bus (USB) interface, a host computer for connecting to the on-board TBOX, and a TSP platform for verification and decryption; wherein, the on-board TBOX is connected to the vehicle computer, the vehicle computer is connected to a USB interface, the USB interface is set in the vehicle, the USB interface is connected to the host computer, the host computer and the service platform are connected through a wireless network, there is a network connection between the on-board TBOX and the vehicle computer, and a Socket connection is established between the two to achieve data interaction; the USB interface is used to achieve interaction between the host computer and the vehicle computer, and provide a network connection for the host computer. Combined with Figure 5 First, the host computer establishes a data connection with the vehicle computer through the USB interface on the vehicle, and sends a verification request to the vehicle computer through the USB interface. The vehicle computer then sends the verification request to the vehicle TBOX (the same as the vehicle computer). Figure 5 TBOX in the .

[0122] 402. The vehicle-mounted TBOX generates data to be transmitted in a random manner in response to the verification request sent by the host computer through the vehicle computer.

[0123] Alternatively, the method further includes: acquiring data information in the vehicle, and processing the data information to obtain data to be transmitted.

[0124] Exemplarily, the vehicle-mounted TBOX receives the verification request and responds to the verification request, that is, based on a preset random generation method such as a random generator, randomly generates a string of data, which is the data to be transmitted for processing.

[0125] Alternatively, after receiving the verification request, the on-board TBOX can obtain the data information pre-stored in the vehicle, and based on a preset data processing algorithm, such as a variational autoencoder or a random sorting method, randomly scramble the data information to obtain random data, which is the data to be transmitted.

[0126] 403. The vehicle-mounted TBOX encrypts the data to be transmitted to obtain encrypted data.

[0127] For example, this step can refer to step 202 and will not be described in detail here.

[0128] 404. The vehicle-mounted TBOX obtains the device identification code corresponding to the vehicle-mounted TBOX.

[0129] The device identification code includes at least one of a terminal unique identifier corresponding to the vehicle-mounted TBOX, a vehicle identification code, and a product serial number.

[0130] For example, the vehicle-mounted TBOX can also obtain the device identification code corresponding to the vehicle-mounted TBOX; the device identification code is used to identify the device identity of the vehicle-mounted TBOX; the device identification code includes the terminal unique identifier (Terminal Unique Identifier, referred to as TUID), the vehicle identification number (VIN) or the product serial number (Serial Number, referred to as SN code).

[0131] In one example, based on step 404, step 403 includes: the on-board TBOX obtains the private key in the client certificate corresponding to the on-board TBOX, and uses the private key to encrypt the data to be transmitted to obtain encrypted data.

[0132] The device identification code is used to obtain the public key in the client certificate, and the public key is used to decrypt the encrypted data to obtain the decrypted data.

[0133] For example, in combination Figure 5Based on the preset symmetric encryption algorithm, the vehicle-mounted TBOX can obtain the private key in the client certificate corresponding to the vehicle-mounted TBOX from the preset database, and based on the symmetric encryption algorithm, use the private key to encrypt the generated random data to obtain encrypted data. Then, the vehicle-mounted TBOX obtains the corresponding device identification code, such as the TUID of the vehicle-mounted TBOX, and transmits the device identification code and encrypted data to the service platform (i.e. Figure 5 The "TSP platform" in the figure) enables the service platform to obtain the public key in the client certificate of the on-board TBOX according to the correspondence between the received device identification code and the public key, and decrypt the received encrypted data using the public key based on the preset decryption algorithm, that is, the symmetric decryption algorithm, to obtain the decrypted data.

[0134] For example, after the service platform obtains the device identification code, it can verify the timestamp information attached to the device identification code. If it is determined that the timestamp information meets the preset conditions, the device identification code is determined to be valid. The public key in the client certificate of the on-board TBOX can be obtained based on the device identification code to decrypt the encrypted data and obtain the decrypted data.

[0135] In another example, based on step 404, step 403 also includes: the on-board TBOX generates a random number a based on a preset random algorithm, and based on a symmetric encryption algorithm, uses the random number a and the device identification code to encrypt the generated random data b to obtain encrypted data c. Then, the on-board TBOX obtains the corresponding device identification code, such as the TUID of the on-board TBOX, and transmits the device identification code and the encrypted data c to the service platform, so that the service platform calculates the device identification code and the encrypted data c based on the hardware security module or in a trusted execution environment according to a preset symmetric decryption algorithm to obtain decrypted data.

[0136] Alternatively, based on step 404, step 403 also includes: the on-board TBOX obtains a shared key based on a shared key encryption algorithm to encrypt the generated random data b to obtain encrypted data c, and then uses a proxy re-encryption algorithm to re-encrypt the encrypted data c and the device identification code through a preset proxy component to obtain re-encrypted data d. The re-encrypted data d is in a form that can be decrypted by the service platform. The encrypted data d is transmitted to the service platform through the vehicle computer and the host computer, so that the service platform can decrypt the re-encrypted data d to obtain the encrypted data c and the device identification code. The corresponding shared key is obtained through the device identification code, and the encrypted data c is decrypted according to the preset shared key decryption algorithm to obtain decrypted data for subsequent processing.

[0137] 405. After the vehicle-mounted TBOX transmits the encrypted data and the device identification code to the host computer via the vehicle computer, the host computer transmits the encrypted data and the device identification code to the service platform; wherein the device identification code is used to decrypt the encrypted data.

[0138] For example, in combination Figure 5 The onboard TBOX transmits the encrypted data and device identification code to the vehicle computer. The vehicle computer transmits the received encrypted data and device identification code to the host computer via the USB interface. The host computer transmits the encrypted data and device identification code to the service platform. The service platform decrypts the encrypted data based on the device identification code to obtain decrypted random data, i.e., decrypted data. For example, the service platform retrieves the public key in the client certificate corresponding to the device identification code from a preset database using the device identification code. The service platform then decrypts the encrypted data using this public key to obtain decrypted random data. The service platform then transmits the decrypted data back to the host computer.

[0139] It is worth noting that after step 403, the vehicle-mounted TBOX can obtain the signature information and encrypted data corresponding to the vehicle-mounted TBOX from the preset database. The signature information includes the signature data and the first signature time, which is the time when the signature data is obtained. The signature information and encrypted data are then transmitted to the vehicle computer. The vehicle computer transmits the received signature information and encrypted data to the host computer via the USB interface. The host computer transmits the signature information and encrypted data to the service platform. The service platform parses the signature information to obtain the signature data and the first signature time included in the signature information. If it is determined that the first signature time is within the preset time range, the encrypted data is decrypted based on the signature data to obtain decrypted random data, i.e., the decrypted data, and a second signature time is generated, i.e., the second signature time is the time when the decrypted data is generated. The decrypted data and the second signature time are then transmitted back to the host computer. The host computer transmits the decrypted data and second signature time sent by the service platform to the on-board TBOX via the vehicle computer, causing the on-board TBOX to verify the random data, decrypted data, first signature time, and second signature time. If the random data and decrypted data are consistent and the time interval between the first signature time and the second signature time is within the preset time range, the host computer determines that the verification is successful, thereby confirming that the host computer has not tampered with the data and ensuring the security of data transmission between devices. After confirming the successful verification, the host computer activates the network function connected to the on-board TBOX to establish a network communication connection between the on-board TBOX and the host computer.

[0140] 406. The host computer receives the encrypted data and the device identification code corresponding to the vehicle-mounted TBOX transmitted by the vehicle-mounted TBOX through the vehicle computer.

[0141] The device identification code includes at least one of a terminal unique identifier corresponding to the vehicle-mounted TBOX, a vehicle identification code, and a product serial number.

[0142] For example, the host computer receives encrypted data and the device identification code corresponding to the vehicle-mounted TBOX transmitted via the vehicle computer. The device identification code is used to identify the device identity of the vehicle-mounted TBOX; the device identification code includes at least one of the terminal unique identifier (TUID), vehicle identification number (VIN), and serial number (SN).

[0143] 407. The host computer transmits the encrypted data and the device identification code to the service platform; wherein the device identification code is used by the service platform to decrypt the encrypted data to obtain decrypted data.

[0144] For example, the host computer transmits the encrypted data and the device identification code to the service platform, which calls a preset hash decryption algorithm to calculate the device identification code and the encrypted data to decrypt the encrypted data and obtain decrypted random data, i.e., decrypted data.

[0145] 408. The host computer transmits the decrypted data sent by the service platform to the vehicle-mounted TBOX via the vehicle computer.

[0146] For example, this step may refer to step 305 and will not be described in detail here.

[0147] 409. The vehicle-mounted TBOX receives the decrypted data transmitted by the host computer through the vehicle computer.

[0148] For example, this step may refer to step 203 and will not be described in detail here.

[0149] 410. If the vehicle-mounted TBOX successfully verifies the host computer based on the decrypted data and the data to be transmitted, it generates a first verification result indicating that the verification of the host computer is successful.

[0150] For example, in combination Figure 5 The vehicle-mounted TBOX processes the decrypted data and the data to be transmitted using a preset verification algorithm to obtain a verification result. This verifies whether the data to be transmitted has been tampered with after being transmitted by the host computer, and further verifies the host computer's identity verification status. Specifically, the decrypted data and the data to be transmitted are verified to be consistent in the number of bytes. If they are consistent, the host computer verification is determined to be successful. If the vehicle-mounted TBOX determines that the host computer verification is successful, that is, the host computer's identity verification is passed, it generates a first verification result, indicating that the host computer verification is successful, for further processing.

[0151] In one example, the successful verification of the host computer based on the decrypted data and the data to be transmitted in step 410 includes the following steps: if it is determined that the decrypted data is consistent with the data to be transmitted, then the verification of the host computer is determined to be successful; if it is determined that the decrypted data is inconsistent with the data to be transmitted, then the verification of the host computer is determined to be unsuccessful.

[0152] For example, the onboard TBOX compares the received decrypted data with the data to be transmitted. If the decrypted data matches the data to be transmitted, the host computer verification is considered successful. If the decrypted data does not match the data to be transmitted, the host computer verification is determined to be unsuccessful. The onboard TBOX sends a first verification result indicating successful host computer verification or a second verification result indicating unsuccessful host computer verification to the vehicle computer, and the vehicle computer forwards the first verification result or the second verification result to the host computer.

[0153] For example, the onboard TBOX compares the received decrypted random data with the generated random data. If the two are equal, the host computer verification is considered to have passed; if they are not equal, the host computer verification is considered to have failed. The onboard TBOX sends the verification result to the vehicle computer, which then forwards the verification result to the host computer via the USB interface.

[0154] 411. The vehicle-mounted TBOX transmits the first verification result to the host computer via the vehicle computer. The first verification result is used by the host computer to enable the network function connected to the vehicle-mounted TBOX based on the first verification result, so as to establish a network communication connection between the vehicle-mounted TBOX and the host computer.

[0155] For example, in combination Figure 5 The on-board TBOX transmits the first verification result indicating successful verification of the host computer to the vehicle computer based on the network communication function of the on-board TBOX itself. The vehicle computer transmits the first verification result indicating successful verification of the host computer to the host computer through the USB interface. After the host computer confirms that the verification is successful, it activates the network function connected to the on-board TBOX to establish a network communication connection between the on-board TBOX and the host computer.

[0156] 412. The host computer receives a first verification result transmitted by the vehicle-mounted TBOX via the vehicle computer, indicating successful verification of the host computer. The first verification result is used by the host computer to enable a network function connected to the vehicle-mounted TBOX based on the first verification result.

[0157] For example, the host computer receives the first verification result transmitted by the on-board TBOX through the vehicle computer, indicating that the host computer has been successfully verified. After determining that the host computer verification is successful, the vehicle computer is used to check whether the verification result is passed. If passed, the vehicle computer turns on the USB interface network function to provide the host computer with an internal network so that it can be routed to the on-board TBOX; if not, the vehicle computer ends its own process and no longer provides data forwarding services until a new host computer is plugged into the USB interface.

[0158] 413. The host computer determines to establish a network communication connection with the vehicle-mounted TBOX.

[0159] For example, after receiving the verification pass message, the host computer initiates and establishes a network connection with the vehicle-mounted TBOX. When the network connection between the host computer and the vehicle-mounted TBOX has been established, the debugging personnel can use the network connection relationship between the host computer and the vehicle-mounted TBOX to perform vehicle-mounted TBOX debugging operations.

[0160] In one example, step 413 includes:

[0161] Step 1: Modify the network configuration information and confirm the network address of the vehicle-mounted TBOX.

[0162] Step 2: Establish a network connection with the vehicle-mounted TBOX based on the modified network configuration information and network address.

[0163] Specifically, combined Figure 5 After receiving the verification result, the host computer checks it. If it is the first verification result, that is, the host computer identity authentication is passed, the host computer's network configuration information is modified and the network address of the vehicle-mounted TBOX is obtained. Based on the modified network configuration information, SSH can be used to initiate a network connection to the network address of the vehicle-mounted TBOX to establish a network connection between the host computer and the vehicle-mounted TBOX. If the verification fails, the USB connection to the vehicle computer is closed, ending the connection process. Among them, the host computer that passes the verification can use network login tools such as SSH and File Transfer Protocol (FTP) to access the vehicle-mounted TBOX.

[0164] In this embodiment, based on the above embodiment, on the one hand, there is no need to change the existing physical connection between TBOX and the vehicle computer to establish a network connection between the host computer and the vehicle-mounted TBOX, and only the software needs to be updated to access and debug the TBOX; on the other hand, the vehicle-mounted TBOX and the service platform are used for identity authentication, and the host computer does not need to store any keys, and there is no key leakage.

[0165] Figure 6A schematic diagram of the structure of a communication connection device for a vehicle-mounted telematics processor provided by an embodiment of the present invention Figure 1 ,like Figure 6 As shown, the device is applied to a vehicle-mounted telematics processor TBOX in a vehicle; the device includes:

[0166] The generating module 501 is configured to generate data to be transmitted in response to a verification request sent by the host computer via the vehicle computer in the vehicle; wherein the verification request represents a request for communication verification.

[0167] The transmission module 502 is used to encrypt the data to be transmitted to obtain encrypted data, and transmit the encrypted data to the host computer through the vehicle computer; wherein the encrypted data is transmitted from the host computer to the service platform and then decrypted to obtain decrypted data.

[0168] The receiving module 503 is used to receive the decrypted data transmitted by the host computer through the vehicle computer.

[0169] The connection module 504 is configured to determine to establish a network communication connection with the host computer if the host computer is successfully authenticated based on the decrypted data and the data to be transmitted.

[0170] Furthermore, the transmission module 502 is specifically used to: obtain the device identification code corresponding to the vehicle-mounted TBOX; transmit the encrypted data and the device identification code to the host computer through the vehicle computer, so that the host computer transmits the encrypted data and the device identification code to the service platform; wherein the device identification code is used to decrypt the encrypted data.

[0171] Furthermore, the transmission module 502 is also specifically used to: obtain the private key in the client certificate corresponding to the on-board TBOX, and use the private key to encrypt the data to be transmitted to obtain encrypted data; wherein, the device identification code is used to obtain the public key in the client certificate, and the public key is used to decrypt the encrypted data to obtain decrypted data.

[0172] Furthermore, the device identification code includes at least one of a terminal unique identifier corresponding to the vehicle-mounted TBOX, a vehicle identification code, and a product serial number.

[0173] Furthermore, the connection module 504 is specifically used to: if the host computer is successfully verified based on the decrypted data and the data to be transmitted, generate a first verification result indicating that the verification of the host computer is successful; transmit the first verification result to the host computer through the vehicle computer; the first verification result is used by the host computer to enable the network function connected to the on-board TBOX based on the first verification result, so that a network communication connection is established between the on-board TBOX and the host computer.

[0174] Furthermore, the connection module 504 is further specifically configured to: determine that the host computer authentication is successful if it is determined that the decrypted data is consistent with the data to be transmitted; and determine that the host computer authentication is unsuccessful if it is determined that the decrypted data is inconsistent with the data to be transmitted.

[0175] Furthermore, the generation module 501 is specifically configured to: generate data to be transmitted in a random manner; or obtain data information in the vehicle and process the data information to obtain the data to be transmitted.

[0176] The device of this embodiment can execute the technical solution in the above method. Its specific implementation process and technical principles are the same and will not be repeated here.

[0177] Figure 7 A schematic diagram of the structure of a communication connection device for a vehicle-mounted telematics processor provided by an embodiment of the present invention Figure 2 ,like Figure 7 As shown, the device is applied to a host computer; the device includes:

[0178] The first transmission module 601 is used to transmit a verification request to the on-board telematics processor TBOX in the vehicle through the vehicle computer in the vehicle; wherein the verification request represents a request for communication verification; the verification request is used by the on-board TBOX to generate data to be transmitted and then encrypt the encrypted data for transmission.

[0179] The second transmission module 602 is used to receive the encrypted data transmitted by the vehicle-mounted TBOX through the vehicle computer, and transmit the encrypted data to the service platform; wherein the encrypted data is used by the service platform to decrypt to obtain decrypted data.

[0180] The third transmission module 603 is used to transmit the decrypted data sent by the service platform to the on-board TBOX through the vehicle computer; wherein, the decrypted data is used by the on-board TBOX to determine the establishment of a network communication connection with the host computer after the host computer successfully verifies the decrypted data and the data to be transmitted.

[0181] Furthermore, the second transmission module 602 is specifically used to: receive encrypted data and a device identification code corresponding to the vehicle-mounted TBOX transmitted by the vehicle-mounted TBOX through the vehicle computer; transmit the encrypted data and the device identification code to the service platform; wherein the device identification code is used by the service platform to decrypt the encrypted data to obtain decrypted data.

[0182] Furthermore, the device identification code includes at least one of a terminal unique identifier corresponding to the vehicle-mounted TBOX, a vehicle identification code, and a product serial number.

[0183] Furthermore, a universal serial bus USB interface is provided in the vehicle computer; the first transmission module 601 is specifically used to: transmit the verification request to the vehicle computer through the USB interface, so that the vehicle computer transmits the verification request to the vehicle-mounted TBOX.

[0184] Furthermore, in the third transmission module 603, after the decrypted data sent by the service platform is transmitted to the on-board TBOX through the vehicle computer, it is also used to: receive the first verification result transmitted by the on-board TBOX through the vehicle computer, indicating that the host computer has successfully verified the data; the first verification result is used by the host computer to enable the network function connected to the on-board TBOX based on the first verification result; and determine to establish a network communication connection with the on-board TBOX.

[0185] Furthermore, the device is also specifically used to: modify the network configuration information and determine the network address of the vehicle-mounted TBOX; and establish a network connection with the vehicle-mounted TBOX according to the modified network configuration information and network address.

[0186] The device of this embodiment can execute the technical solution in the above method. Its specific implementation process and technical principles are the same and will not be repeated here.

[0187] Figure 8 This is a schematic diagram of the structure of a vehicle telematics processor provided by one embodiment of the present invention. Figure 8 As shown, the vehicle telematics processor TBOX includes: at least one processor 701 and a memory 702 .

[0188] The memory 702 is used to store programs. Specifically, the programs may include program codes, and the program codes include computer-executable instructions.

[0189] The memory 702 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk memory.

[0190] Processor 701 is configured to execute computer-executable instructions stored in memory 702 to implement the methods described in the aforementioned method embodiments. Processor 701 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention. Specifically, when implementing the methods described in the aforementioned method embodiments, the on-board TBOX may be, for example, a central control unit with processing capabilities, such as an electronic control unit, a server, or a domain controller on the vehicle.

[0191] Optionally, the vehicle-mounted TBOX may also include a receiver 703 and a transmitter 704. In a specific implementation, if the receiver 703, transmitter 704, memory 702, and processor 701 are implemented independently, they may be interconnected via a bus and communicate with each other. The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus. Buses can be categorized as address buses, data buses, control buses, and so on, but this does not necessarily mean there is only one bus or only one type of bus.

[0192] Optionally, in a specific implementation, if the receiver 703, transmitter 704, memory 702 and processor 701 are integrated into a module, the receiver 703, transmitter 704, memory 702 and processor 701 can communicate through an internal interface.

[0193] Figure 9 This is a schematic diagram of the structure of the host computer provided by one embodiment of the present invention. Figure 9 As shown, the host computer includes: at least one processor 801 and a memory 802.

[0194] The memory 802 is used to store programs. Specifically, the programs may include program codes, and the program codes include computer-executable instructions.

[0195] The memory 802 may include RAM, and may also include non-volatile memory, such as at least one disk memory.

[0196] Processor 801 is configured to execute computer-executable instructions stored in memory 802 to implement the methods described in the aforementioned method embodiments. Processor 801 may be configured to implement one or more integrated circuits according to the embodiments of the present invention. Specifically, when implementing the methods described in the aforementioned method embodiments, the host computer may be, for example, a central control unit with processing capabilities, such as an electronic control unit on a vehicle, a server, or a domain controller.

[0197] Optionally, the host computer may further include a receiver 803 and a transmitter 804. In a specific implementation, if the receiver 803, transmitter 804, memory 802, and processor 801 are implemented independently, the receiver 803, transmitter 804, memory 802, and processor 801 may be interconnected via a bus and communicate with each other. The bus may be an industrial standard architecture bus, a peripheral device interconnect bus, or an extended industrial standard architecture bus. Buses can be categorized as address buses, data buses, control buses, and the like, but this does not necessarily mean that there is only one bus or only one type of bus.

[0198] Optionally, in a specific implementation, if the receiver 803, transmitter 804, memory 802 and processor 801 are integrated into a module, the receiver 803, transmitter 804, memory 802 and processor 801 can communicate through an internal interface.

[0199] The present invention also provides a vehicle, including an on-board telematics processor, which is used to implement the method in the above embodiment.

[0200] The present invention further provides a communication connection system, comprising an on-board telematics processor TBOX in a vehicle and a host computer, and the communication connection system is used to execute the method in the above embodiment.

[0201] The present invention also provides a computer-readable storage medium, in which computer program instructions are stored. When a processor executes the computer program instructions, the solution in the above embodiment is implemented.

[0202] The present invention also provides a computer program product, including a computer program, which implements the solution in the above embodiment when executed by a processor.

[0203] The computer-readable storage medium described above can be implemented by any type of volatile or non-volatile storage device, or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. The computer-readable storage medium can be any available medium that can be accessed by a general-purpose or special-purpose computer.

[0204] An exemplary readable storage medium is coupled to a processor, enabling the processor to read information from and write information to the readable storage medium. Of course, the readable storage medium may also be an integral part of the processor. The processor and the readable storage medium may be located in a dedicated integrated circuit. Of course, the processor and the readable storage medium may also exist as discrete components in a device for executing an application based on intelligent driving.

[0205] Those skilled in the art will appreciate that all or part of the steps in the above-described method embodiments can be implemented using hardware associated with program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps in the above-described method embodiments. The aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0206] Finally, it should be noted that the above embodiments are only preferred embodiments for fully illustrating the present invention, and the scope of protection of the present invention is not limited thereto. Equivalent substitutions or modifications made by those skilled in the art based on the present invention are all within the scope of protection of the present invention.

Claims

1. A communication connection method applied to a vehicle-mounted telematics processor, characterized in that: The method is applied to an on-board telematics processor TBOX in a vehicle, and the method includes: Generate data to be transmitted in response to a verification request sent by the host computer through the vehicle computer in the vehicle; wherein the verification request represents a request for communication verification, the vehicle computer and the TBOX realize data exchange through a socket connection, and the vehicle computer and the host computer are connected through a universal serial bus USB interface; Obtaining a private key from the client certificate corresponding to the vehicle-mounted TBOX, and using the private key to encrypt the data to be transmitted to obtain encrypted data; Obtaining the device identification code corresponding to the on-board TBOX, and transmitting the encrypted data and the device identification code to the host computer through the vehicle computer; wherein the device identification code includes at least one of the terminal unique identifier, vehicle identification code, and product serial number corresponding to the on-board TBOX. After the encrypted data and the device identification code are transmitted by the host computer to the service platform, the service platform obtains the public key corresponding to the client certificate based on the device identification code, and decrypts the encrypted data using the public key to obtain decrypted data; Receiving the decrypted data transmitted by the host computer through the vehicle computer; If the host computer is successfully verified based on the decrypted data and the data to be transmitted, a first verification result indicating successful verification is generated and transmitted to the host computer through the vehicle computer; the first verification result is used by the host computer to enable the network function connected to the on-board TBOX based on the first verification result, so that a network communication connection is established between the on-board TBOX and the host computer.

2. The method according to claim 1, characterized in that The generating of data to be transmitted includes: Generating the data to be transmitted in a random manner; Alternatively, data information in the vehicle is acquired, and the data information is processed to obtain the data to be transmitted.

3. A communication connection method applied to a vehicle-mounted telematics processor, characterized in that: The method is applied to a host computer and includes: The vehicle computer transmits a verification request to the vehicle telematics processor TBOX in the vehicle; wherein the vehicle computer and the TBOX exchange data via a socket connection, and the vehicle computer and the host computer are connected via a universal serial bus (USB) interface. The verification request represents a request for communication verification; the verification request is used by the vehicle TBOX to generate data to be transmitted, encrypt the data, and transmit the encrypted data; Receive the encrypted data and device identification code transmitted by the vehicle computer; wherein the encrypted data is obtained by the TBOX using the private key in its corresponding client certificate to encrypt the data to be transmitted, and the device identification code includes at least one of the terminal unique identifier corresponding to the TBOX, the vehicle identification code, and the product serial number; Transmitting the encrypted data and the device identification code to a service platform, so that the service platform obtains a public key corresponding to the client certificate based on the device identification code, and decrypts the encrypted data using the public key to obtain decrypted data; Transmitting the decrypted data sent by the service platform to the vehicle-mounted TBOX via the vehicle computer; receiving a first verification result transmitted by the vehicle computer; wherein the first verification result is generated by the TBOX after successfully verifying the host computer based on the decrypted data and the data to be transmitted; A network function connected to the TBOX is enabled based on the first verification result to determine that a network communication connection is established with the TBOX.

4. The method according to claim 3, characterized in that The transmitting of the verification request to the on-board telematics processor TBOX in the vehicle by the vehicle computer in the vehicle includes: The verification request is transmitted to the vehicle computer through the USB interface, so that the vehicle computer transmits the verification request to the vehicle-mounted TBOX.

5. The method according to any one of claims 3 to 4, characterized in that The determining to establish a network communication connection with the vehicle-mounted TBOX includes: Modify the network configuration information and determine the network address of the vehicle-mounted TBOX; A network connection is established with the vehicle-mounted TBOX according to the modified network configuration information and the network address.

6. A vehicle-mounted telematics processor, characterized in that: include: Memory, processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory, so that the processor performs the method according to any one of claims 1 to 2.

7. A host computer, characterized in that: include: Memory, processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory, so that the processor performs the method according to any one of claims 3 to 5.

8. A vehicle, characterized in that: The vehicle includes an on-board telematics processor TBOX; the on-board TBOX is configured to execute the method according to any one of claims 1 to 2.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method according to any one of claims 1 to 2 or the method according to any one of claims 3 to 5.

Images