Remote anti-theft authentication method and anti-theft authentication system

Abstract

The embodiment of the invention provides a remote anti-theft authentication method and system, and the method comprises the steps: transmitting a remote control command to a vehicle body control system of a vehicle under the condition of obtaining the remote control command; under the condition that a random number seed sent by the vehicle body control system is received, an authentication response message is generated according to the random number seed, and the authentication response message is sent to the vehicle body control system; and judging that the anti-theft authentication fails under the condition of identifying that the authentication response message is verified to be abnormal. Through the embodiment of the invention, the anti-theft authentication can be realized through the random number seed, the safety of the vehicle is ensured, and the anti-theft authentication result can be quickly determined.

Description

Technical Field

[0001] The present invention relates to the technical field of vehicle anti-theft authentication, in particular to a remote anti-theft authentication method and an anti-theft authentication system. Background Art

[0002] With the rapid development of information technology, automobile safety is receiving increasing attention. Vehicle anti-theft authentication systems are a key means of ensuring vehicle safety, preventing unauthorized operation by authenticating the vehicle's identity. Existing anti-theft authentication systems typically utilize a VCU (Vehicle Control Unit) system as their core, combined with other modules such as the BCM (Body Control Module) and the T-BOX (Telematics Box). The T-BOX, as an in-vehicle remote communication module, receives user remote control requests and directly communicates with the BCM to remotely control the anti-theft authentication process. Therefore, the T-BOX plays a crucial role in the anti-theft authentication process.

[0003] However, the current anti-theft authentication process still has some defects, such as the inability to quickly locate the cause of authentication failure in complex scenarios. Summary of the Invention

[0004] In view of the above problems, a remote anti-theft authentication and anti-theft authentication system is proposed to overcome the above problems or at least partially solve the above problems, including:

[0005] A remote anti-theft authentication method, applied to a vehicle's onboard communication system, comprises:

[0006] When a remote control command is obtained, the remote control command is sent to the vehicle body control system;

[0007] Upon receiving the random number seed sent by the vehicle body control system, generating an authentication response message according to the random number seed, and sending the authentication response message to the vehicle body control system;

[0008] When it is identified that the authentication response message is abnormal, it is determined that the anti-theft authentication has failed.

[0009] Optionally, after sending the remote control command to the body control system of the vehicle, the method further includes:

[0010] Optionally, in the case where the random number seed sent by the vehicle body control system is not received, a random number seed request message is sent to the vehicle body control system;

[0011] If the number of times the random number seed request message is sent reaches the first retransmission number and the random number seed is not received, it is determined that the anti-theft authentication has failed.

[0012] Optionally, the authentication response message verification exception specifically includes:

[0013] If the verification result generated by the vehicle body control system based on the authentication response message is not received, or the received verification result indicates that the authentication has failed, it is determined that the anti-theft authentication has failed.

[0014] Optionally, the method for obtaining the remote control command includes:

[0015] When it is identified that the vehicle is in a non-remote high-voltage power state, the remote control command is received.

[0016] Optionally, the authentication response message includes an authentication response data frame and a challenge data frame; the authentication response data frame is obtained according to the random number seed; the challenge data frame is obtained by iteratively calculating according to the random number seed and the key array according to the number of calculation rounds, the key array and the number of calculation rounds are determined according to the anti-theft authentication algorithm, and the anti-theft authentication algorithm is used to extract local variables based on the key array, and iteratively generate the challenge data frame according to the local variables and the random number seed according to the number of calculation rounds.

[0017] Optionally, the authentication response message further includes:

[0018] Security access code identifier: used to indicate whether the vehicle communication system writes a security access code;

[0019] Busy flag: used to indicate whether the vehicle communication system is in a busy state;

[0020] Self-authentication success flag: used to indicate whether the vehicle communication system has successfully self-authenticated.

[0021] A remote anti-theft authentication method, applied to a vehicle body control system, comprises:

[0022] Upon receiving a remote control command sent by an onboard communication system of the vehicle, obtaining a random number seed and sending the random number seed to the onboard communication system;

[0023] Upon receiving an authentication response message generated by the vehicle-mounted communication system according to the random number seed, verifying the authentication response message and sending a verification result to the vehicle-mounted communication system;

[0024] When the verification result is authentication failure, the exception handling process is executed.

[0025] Optionally, the exception handling process includes:

[0026] Obtaining a random number seed again, and sending the random number seed to the vehicle communication system;

[0027] When the verification result shows that the number of authentication failures reaches the failure number threshold, it is determined that the anti-theft authentication has failed.

[0028] Optionally, after sending the random number seed to the vehicle communication system, the method further includes:

[0029] In the case of not receiving an authentication response message from the vehicle communication system, sending the random number seed to the vehicle communication system;

[0030] When the number of times the random number seed is sent reaches the second retransmission number and the authentication response message is not received, it is determined that the anti-theft authentication has failed.

[0031] An anti-theft authentication system includes an on-board communication system and a vehicle body control system of a vehicle. The on-board communication system is used to execute the remote anti-theft authentication method described above, and the vehicle body control system is used to execute the remote anti-theft authentication method described above.

[0032] The embodiments of the present invention have the following advantages:

[0033] In an embodiment of the present invention, the vehicle's on-board communication system can obtain a remote control command and send the remote control command to the vehicle's body control system; when receiving a random number seed sent by the body control system, it can generate an authentication response message based on the random number seed and send the authentication response message to the body control system; when an abnormality in the authentication response message verification is identified, it is determined that the anti-theft authentication has failed, so that the anti-theft authentication can be achieved through the random number seed, ensuring the safety of the vehicle, and the anti-theft authentication result can be quickly determined. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the technical solution of the present invention, the following briefly introduces the drawings required for use in the description of the present invention. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0035] Figure 1 This is a schematic structural diagram of an anti-theft authentication system provided by one embodiment of the present invention;

[0036] Figure 2a This is a flowchart of a remote anti-theft authentication method provided by one embodiment of the present invention;

[0037] Figure 2b This is a schematic diagram of an anti-theft authentication process provided by an embodiment of the present invention;

[0038] Figure 3 This is a flowchart of another remote anti-theft authentication method provided by one embodiment of the present invention;

[0039] Figure 4 1 is a schematic structural diagram of another anti-theft authentication system provided by an embodiment of the present invention;

[0040] Figure 5a This is a schematic diagram of an anti-theft authentication process provided by an embodiment of the present invention;

[0041] Figure 5b This is a schematic diagram of an anti-theft authentication exception handling process provided by an embodiment of the present invention;

[0042] Figure 5c This is another schematic diagram of an anti-theft authentication exception handling process provided by an embodiment of the present invention;

[0043] Figure 5d This is another schematic diagram of an anti-theft authentication exception handling process provided by an embodiment of the present invention;

[0044] Figure 6 This is a schematic structural diagram of a remote anti-theft authentication device provided by one embodiment of the present invention;

[0045] Figure 7 It is a structural diagram of another remote anti-theft authentication device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0046] To make the above-mentioned objects, features, and advantages of the present invention more clearly understood, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the embodiments described are only a portion of the embodiments of the present invention, not all of them. All other embodiments derived by persons of ordinary skill in the art based on the embodiments of the present invention without inventive effort are also within the scope of protection of the present invention.

[0047] Reference Figure 1 , shows an anti-theft authentication system provided by an embodiment of the present invention, the anti-theft authentication system may include a vehicle communication system T-BOX101, a body control system BCM102, and a cloud server 103, wherein the vehicle communication system T-BOX101 is connected to the cloud server 103, and the vehicle communication system T-BOX101 is connected to the body control system BCM102.

[0048] The T-BOX (Telematics Box) is a key component in the connected vehicle system, responsible for data exchange between the vehicle and external networks (such as the cloud and mobile networks). For example, it performs functions such as data collection and transmission, remote control, emergency calls (eCall), and over-the-air (OTA) upgrades.

[0049] The Body Control Module (BCM) is one of the vehicle's electronic control units (ECUs), responsible for controlling and managing body-related functions, such as body electrical control, data exchange, safety, and diagnostics.

[0050] The cloud server is the "brain" of the connected car, responsible for data storage, processing, and analysis, and providing support to users and service providers. Its functions include, but are not limited to: data storage and analysis, remote service support, and OTA upgrade management.

[0051] Reference Figure 2a , shows a flowchart of a remote anti-theft authentication method provided by an embodiment of the present invention, which is applied to a vehicle's in-vehicle communication system and may specifically include the following steps:

[0052] Step S201: upon obtaining a remote control command, the remote control command is sent to the vehicle body control system;

[0053] In actual applications, the vehicle's on-board communication system and the vehicle's body control system can communicate, and a remote anti-theft authentication method for the vehicle can be established between the on-board communication system and the body control system. Specifically, the on-board communication system can send the remote control command to the vehicle's body control system when it obtains the remote control command. Among them, the remote control command is a command used to trigger the vehicle anti-theft authentication process. The remote control command is the core data unit for communication between the vehicle and an external system (such as a mobile phone APP, a cloud server). In an embodiment of the present invention, the source of the vehicle's remote control command may include any one or more of the following:

[0054] (1) Users send remote control commands through the mobile phone APP provided by the car manufacturer or a third party, such as starting the engine, opening and closing the windows, adjusting the air conditioner, etc.

[0055] (2) The cloud server automatically generates control commands based on preset conditions or algorithms.

[0056] (3) Third-party service platforms that cooperate with car companies (such as smart home platforms and logistics management platforms) send control commands.

[0057] In practice, remote control commands can consist of multiple fields. For example, a remote control command may include a command header, target device information, command content, security information, response requirements, and additional information. These fields collectively ensure the accuracy, security, and executability of the command, providing reliable technical support for vehicle remote control.

[0058] In one embodiment of the present invention, the vehicle's onboard communication system may receive the remote control command when recognizing that the vehicle is in a non-remote high voltage state.

[0059] In actual applications, the target vehicle can be remotely controlled. During the remote control process, in order to ensure the safety of the vehicle, anti-theft authentication is required for the user's remote operation. However, frequent anti-theft authentication will consume a lot of vehicle resources.

[0060] Therefore, when the target vehicle is remotely controlled, the current state of the target vehicle can be detected. If the target vehicle is currently in a non-remote high-voltage state, the vehicle's on-board communication system can receive the remote control command, thereby triggering the anti-theft authentication process and executing anti-theft authentication. Conversely, if the target vehicle is detected to be in a remote high-voltage state, the vehicle state can be continuously monitored to facilitate the execution or non-execution of anti-theft authentication based on the vehicle state.

[0061] Among them, when the target vehicle is in a preset business, it can be determined that the vehicle is currently in a remote high-voltage state. For example, the target vehicle is currently performing remote air-conditioning heating or cooling, and the target vehicle needs to operate under 220 high voltage. The current state of the vehicle is the remote high-voltage electrical state. The specific remote high-voltage scene can be set according to actual needs, and there are no excessive restrictions on this in the embodiment of the present invention.

[0062] Step S202: upon receiving the random number seed sent by the vehicle body control system, generating an authentication response message according to the random number seed, and sending the authentication response message to the vehicle body control system;

[0063] During the anti-theft authentication process, the vehicle communication system receives a random number seed from the vehicle body control system and generates an authentication response message based on the random number seed. The random number seed is the initial value used to generate the random number sequence, ensuring the uniqueness and security of the authentication process. The authentication response message is the actual data generated based on the random number seed for anti-theft authentication.

[0064] The authentication response message is key data used to verify the client's identity and usually contains a variety of information to ensure security and effectiveness. The following are the contents of the authentication response message:

[0065] Basic information, authentication data, status information, security-related information, and extended information. Basic information may include, but is not limited to, message type (such as authentication request, authentication response, etc.), version number (protocol or message version information, used for compatibility checking), timestamp (message generation time, used to prevent replay attacks), and unique identifiers (such as device ID, user ID, session ID, etc., used to identify the client or session).

[0066] Authentication data may include, but is not limited to, random number seeds, encrypted or signed data, and hash values.

[0067] Nonce: A random value generated by the server to ensure the uniqueness of each authentication.

[0068] Encrypted or signed data: Use a pre-shared key (such as a password or secret key) to encrypt or sign a random seed or other data. The encryption algorithm can be any of HMAC, AES, RSA, and other algorithms.

[0069] Hash value: Hash calculation is performed on certain data (such as random number seed + timestamp) to ensure data integrity.

[0070] Status information may include but is not limited to authentication results and error codes.

[0071] Authentication result: Status indication of success or failure.

[0072] Error code: If authentication fails, the specific error reason (such as key error, timeout, etc.) is returned.

[0073] Security-related information may include, but is not limited to, session keys, validity periods, and signatures.

[0074] Session key: An encryption key (such as a symmetric key or a public key) used for subsequent communications.

[0075] Validity period: The validity period of the authentication response message. Re-authentication is required after expiration.

[0076] Signature: Digitally sign the message content to ensure the integrity and authenticity of the message.

[0077] The extended information may include, but is not limited to, any one or more of permission information, device information, and geographic location.

[0078] Permission information: After successful authentication, the client's permission or role information is returned.

[0079] Device information: such as device type, operating system version, etc., for further verification.

[0080] Geographic location: The geographical location information of the client (optional).

[0081] In one example, in a vehicle body control system, the vehicle body control system may use a random number generator to randomly generate a random number seed after receiving a remote control command. The random number seed is used for anti-theft authentication.

[0082] After the vehicle communication system generates an authentication response message, it can send it to the body control system, which then performs anti-theft verification. The body control system can configure an anti-theft verification process. After receiving the authentication response message from the vehicle communication system, the body control system can perform anti-theft verification according to the internally configured anti-theft verification process, ensuring secure remote control of the vehicle.

[0083] Step S203: When an abnormality is detected in the authentication response message, it is determined that the anti-theft authentication has failed.

[0084] After the on-board communication system sends the authentication response message to the body control system, the on-board communication system can also detect the verification result of the authentication response message to determine the anti-theft authentication result. If it is detected that the authentication response message verification fails, the on-board communication system can determine that the anti-theft authentication has failed. If it is detected that the authentication response message verification is successful, the on-board communication system can determine that the anti-theft authentication is successful, and the remote control of the vehicle can continue.

[0085] In one embodiment of the present invention, if the random number seed sent by the vehicle body control system is not received, a random number seed request message is sent to the vehicle body control system; if the number of times the random number seed request message is sent reaches the first retransmission number and the random number seed is not received, it is determined that the anti-theft authentication has failed.

[0086] In actual applications, when the on-board communication system interacts with the body control system, if the on-board communication system does not receive the random number seed sent by the body control system within a preset time, in order to ensure the normal progress of the anti-theft authentication process, the on-board communication system can generate a random number seed request message and send the random number seed request message to the body control system. The authentication message request can be used to request the body control system to send a random number seed.

[0087] The vehicle communication system can send random seed request messages to the vehicle body control system multiple times. If the random seed request message reaches the first retransmission count and the vehicle body control system still has not received the random seed, the anti-theft authentication may be determined to have failed. The vehicle communication system can also generate an authentication failure message and send it to the TSP (Telematics Service Provider) corresponding to the target vehicle to notify the TSP to perform repairs.

[0088] In one embodiment of the present invention, when the in-vehicle communication system does not receive the verification result generated by the vehicle body control system based on the authentication response message, it can be determined that the anti-theft authentication has failed.

[0089] In one embodiment of the present invention, when the verification result received by the in-vehicle communication system is authentication failure, it can be determined that the anti-theft authentication has failed.

[0090] In actual applications, the interaction between the vehicle communication system and the body control system is to send a message and combine it with the response message returned by the other party.

[0091] During the anti-theft authentication process, when the on-board communication system sends an authentication response message to the body control system, if the on-board communication system does not receive the verification result corresponding to the authentication response message within the preset time, it can be determined that the anti-theft authentication has failed; in another case, the on-board communication system receives the verification result corresponding to the authentication response message within the preset time. If the verification result is successful, the on-board communication system can confirm that the anti-theft authentication is successful. If the verification result is failed, it can be determined that the anti-theft authentication has failed.

[0092] In one embodiment of the present invention, when it is detected that the vehicle is currently in a remote high-voltage electrical state, in order to avoid instantaneous errors in detection, continuous monitoring can be performed on the target vehicle to ensure the current stable state of the target vehicle. During the continuous monitoring process, it is necessary to continuously determine whether the remote high-voltage electrical state of the target vehicle has been converted to a non-remote high-voltage electrical state. If the target vehicle is always in a remote high-voltage electrical state during the continuous detection process, the anti-theft authentication process can be triggered and the anti-theft authentication can be performed to ensure the safety of the vehicle.

[0093] In this embodiment of the present invention, by detecting the vehicle's status and determining whether it is in a safe and trustworthy remote high-voltage state, remote authentication can be skipped in this state, thereby reducing the number of anti-theft authentication steps required during remote control. This embodiment of the present invention optimizes the execution time efficiency of the existing anti-theft authentication process, reasonably reducing the number of interactions and, by reducing the scope of remote anti-theft authentication, addressing the response rate issue at its source.

[0094] like Figure 2bAs shown, it is a schematic diagram of an anti-theft authentication process in an embodiment of the invention. When the user turns on the remote control of the vehicle, it can be determined whether the remote high voltage power of the target vehicle is turned on. When the remote high voltage power is not turned on, it is determined that the target vehicle is in a non-high voltage state. Considering the safety of the vehicle, it is necessary to execute the remote anti-theft authentication process normally. When the remote high voltage power of the target vehicle is turned on, it can be determined by continuously monitoring the target vehicle whether the remote high voltage power state of the target vehicle has not been interrupted. If the remote high voltage power of the target vehicle has not been interrupted, the target vehicle continues to maintain the remote high voltage power state. At this time, the vehicle is in normal condition and is in a trusted state, so the anti-theft authentication operation can be omitted, which can reduce unnecessary interactions and calculations and improve the stability and efficiency of the system.

[0095] In actual applications, when the vehicle's remote high-voltage power is on, both the high-voltage and low-voltage power supplies must be awake, and no component will subsequently enter a sleep state. As long as the remote high-voltage power state is intact, it can be indirectly verified that the vehicle has not been forcibly powered off, stolen or replaced, or otherwise interfered with. The essential purpose of anti-theft authentication is for each component to prove its legitimacy to each other. Therefore, when the vehicle is in the remote high-voltage power state, it can be determined that the vehicle is in a trustworthy state, thus omitting the anti-theft authentication operation at this stage.

[0096] In one embodiment of the present invention, the authentication response message includes an authentication response data frame and a challenge data frame; the authentication response data frame is obtained based on a random number seed; the challenge data frame is obtained by iteratively calculating according to the random number seed and the key array according to the number of calculation rounds, the key array and the number of calculation rounds are determined according to the anti-theft authentication algorithm, and the anti-theft authentication algorithm is used to extract local variables based on the key array, and iteratively generate the challenge data frame according to the local variables and the random number seed according to the number of calculation rounds.

[0097] In practical applications, the authentication response message may be an authentication response data frame and a challenge data frame generated based on a received random number seed when it is detected that the in-vehicle communication system is in a legal authentication environment.

[0098] Furthermore, an anti-theft authentication algorithm can be pre-configured in the vehicle communication system. This algorithm can generate a challenge data frame based on a received random number seed. Specifically, a key array and a number of calculation rounds can be set for the anti-theft authentication algorithm. Local variables can then be extracted based on the key array. The challenge data frame is then iterated based on the local variables and the random number seed, for a number of calculation rounds.

[0099] The data processing process of the anti-theft authentication algorithm in the embodiment of the present invention may be as follows: determining the input parameters of the anti-theft authentication algorithm, which may include the number of calculation rounds, the key array, and the random number array corresponding to the random number seed; then reading the initial value from the random number array and storing it in V0 and V1, extracting the first four elements of the key array as local variables, wherein the initial accumulated value is 0 and the key constant is 0x9E3779B9. The key constant can be used to ensure the security and randomness of the encryption process.

[0100] The loop processing process is: based on the local variable, shift V1 left by 4 bits and right by 5 bits and store it as the new V1, add the key constant to the accumulated value; based on the local variable, shift V0 left by 4 bits and right by 5 bits and store the result as the new V0, and save the final V0 and V1 back to the random number array.

[0101] After iterating and calculating the number of rounds according to the above cycle process, the challenge data frame can be obtained.

[0102] Compared with the existing algorithms, the anti-theft authentication algorithm in the embodiment of the present invention is more efficient when processing large inputs, especially in the anti-theft authentication scenario in the car with high frequency calls. It not only improves efficiency, but also improves the simplicity and readability of the maintenance code.

[0103] In actual applications, to ensure data security, the authentication response message may also include one or more of a security access code flag, a busy flag, and a self-authentication success flag. The security access code flag indicates whether the vehicle communication system has written the security access code; the busy flag indicates whether the vehicle communication system is busy; and the self-authentication success flag indicates whether the vehicle communication system has successfully self-authenticated.

[0104] Specifically, if the security access code (SK) is not included in the authentication response message from the vehicle communication system, the anti-theft authentication process cannot be executed. If the authentication response message is busy, the vehicle communication system is slow to respond and is currently performing the previous anti-theft authentication. This can prevent a large number of remote hacker attacks in a short period of time, which could cause damage to the vehicle. If the vehicle communication system successfully authenticates itself, the vehicle body control system B can begin verifying the random number message.

[0105] In an embodiment of the present invention, the vehicle's on-board communication system can obtain a remote control command and send the remote control command to the vehicle's body control system; when receiving a random number seed sent by the body control system, it can generate an authentication response message based on the random number seed and send the authentication response message to the body control system; when an abnormality in the authentication response message verification is identified, it is determined that the anti-theft authentication has failed, so that the anti-theft authentication can be achieved through the random number seed, ensuring the safety of the vehicle, and the anti-theft authentication result can be quickly determined.

[0106] Moreover, in the embodiment of the present invention, different anti-theft authentication processes can be determined to be executed according to whether the vehicle communication system receives the random number seed sent by the body control system, and a processing process is set for abnormal situations such as failure to receive the random number, thereby enriching the vehicle's anti-theft authentication process and enabling it to cope with various complex scenarios.

[0107] Reference Figure 3 , shows a flowchart of a remote anti-theft authentication method provided by an embodiment of the present invention, which is applied to a vehicle body control system and may specifically include the following steps:

[0108] Step S301, upon receiving a remote control command sent by an onboard communication system of a vehicle, obtaining a random number seed and sending the random number seed to the onboard communication system;

[0109] In actual applications, the vehicle communication system can send remote control commands to the body control system, and then the body control system can receive the remote control commands, and then the body control system can obtain a random number seed based on the received remote control command, and then send the random number seed to the vehicle communication system.

[0110] Step S302: upon receiving an authentication response message generated by the vehicle communication system according to the random number seed, verify the authentication response message and send the verification result to the vehicle communication system;

[0111] After receiving the random number, the vehicle communication system can generate an authentication response message, and then send the authentication response message to the body control system. The body control system can then verify the received authentication response message and generate a verification result, and send the generated verification result to the vehicle communication system.

[0112] Step S303: When the verification result is authentication failure, execute the exception handling process.

[0113] Among them, when the verification result is authentication success, the vehicle control can be carried out normally. If the verification result fails, the abnormal handling process set in the body control system itself can be executed.

[0114] In one embodiment of the present invention, the exception handling process includes: obtaining a random number seed again and sending the random number seed to the vehicle communication system; when the verification result shows that the number of authentication failures reaches a failure number threshold, determining that the anti-theft authentication has failed.

[0115] In actual applications, when the vehicle body control system determines that authentication has failed, the vehicle body control system can regenerate a random number seed and then send the generated random number seed to the vehicle communication system to perform anti-theft authentication again. At the same time, the vehicle body control system can accumulate the number of times the verification result is authentication failure. When the number of consecutive authentication failures reaches a failure threshold, it can be determined that the anti-theft authentication has failed. Among them, when the verification result is authentication success or when the anti-theft authentication is determined to have failed, the accumulated failure count is cleared.

[0116] In one embodiment of the present invention, after the random number seed is sent to the in-vehicle communication system, if no authentication response message is received from the in-vehicle communication system, the random number seed is sent to the in-vehicle communication system; if the number of times the random number seed is sent reaches the second retransmission number and no authentication response message is received, it is determined that the anti-theft authentication has failed.

[0117] In actual applications, the body control system sends a random number seed to the on-board communication system. If it does not receive an authentication response message from the on-board communication system, it can trigger the body control system to resend the random number seed to the on-board communication system and accumulate the number of random number seed transmissions. When the number of transmissions reaches the second retransmission number, if the body control system still does not receive an authentication response message, it can also be determined that the anti-theft authentication has failed.

[0118] In the embodiment of the present invention, when the vehicle body control system determines that the anti-theft authentication fails, it executes the exception handling process, which can improve the vehicle's anti-theft authentication process, so that the anti-theft authentication process in the embodiment of the present invention can cope with complex scenarios.

[0119] Reference Figure 4 , shows an anti-theft authentication system provided by an embodiment of the present invention, the anti-theft authentication system includes an on-board communication system 401 and a body control system 402 of a vehicle, the on-board communication system is used to execute a remote anti-theft authentication method, wherein the remote anti-theft authentication method is: when a remote control command is obtained, the remote control command is sent to the body control system of the vehicle; when a random number seed is received from the body control system, an authentication response message is generated according to the random number seed, and the authentication response message is sent to the body control system; when an abnormality in the verification of the authentication response message is identified, it is determined that the anti-theft authentication has failed.

[0120] The body control system is used to execute a remote anti-theft authentication method, wherein the remote anti-theft authentication method includes: upon receiving a remote control command sent by an on-board communication system of a vehicle, obtaining a random number seed and sending the random number seed to the on-board communication system; upon receiving an authentication response message generated by the on-board communication system based on the random number seed, verifying the authentication response message and sending the verification result to the on-board communication system; when the verification result is authentication failure, executing an exception handling process.

[0121] In one embodiment of the present invention, the anti-theft authentication system further includes an Internet of Vehicles service provider connected to the vehicle communication system, and configured to receive an anti-theft authentication failure message from the vehicle communication system.

[0122] In one embodiment of the present invention, the Internet of Vehicles service provider may generate a user reminder based on the anti-theft authentication failure message and send it to the user.

[0123] In the embodiment of the present invention, anti-theft authentication is implemented through interaction between the vehicle communication system and the vehicle body control system to ensure vehicle safety.

[0124] Reference Figure 5a , shows a schematic diagram of an anti-theft authentication process provided by an embodiment of the present invention, the specific process is as follows:

[0125] The vehicle's onboard communication system TBOX can send the received remote control commands to the BCM of the body controller. After receiving the remote control commands, the BCM sends three frames of random number seeds to TBOX.

[0126] TBOX can detect whether it is in a legal authentication environment and send an authentication response message to BCM. The authentication response message may include an authentication response data frame and a challenge data frame.

[0127] After receiving the authentication response message, BCM checks whether the authentication response message meets the requirements. If it is correct, it executes the remote control response end process. If not, it executes the exception handling process.

[0128] Reference Figure 5b , shows a schematic diagram of an anti-theft authentication exception handling process provided by an embodiment of the present invention, the specific process is as follows:

[0129] When the first authentication fails, BCM can send the random number seed to TBOX for a second authentication. After TBO generates an authentication response message based on the random number seed, it sends the authentication response message to BCM again.

[0130] If the second authentication fails, you can set it to not respond to the anti-theft authentication request within a preset time (such as 10s). If the second authentication fails, BCM sends an authentication success response to TBOX to complete the authentication.

[0131] Reference Figure 5c , shows a schematic diagram of an anti-theft authentication exception handling process provided by an embodiment of the present invention, the specific process is as follows:

[0132] BCM can send the random seed to TBOX again. If TBOX does not receive the random seed within a preset time (e.g., 2 seconds), it will send the random seed request message again. If TBOX still does not receive the random seed within a preset time (e.g., 2 seconds), it will send the random seed request message to BCM for the third time. If TBOX fails to receive the random seed three times, it will report authentication failure and display "Anti-theft authentication failed, please lie down and try again."

[0133] Reference Figure 5d , shows a schematic diagram of an anti-theft authentication exception handling process provided by an embodiment of the present invention, the specific process is as follows:

[0134] The BCM can send the random number seed to the TBOX again. The TBOX generates an anti-theft challenge data frame based on the random number seed and sends it to the BCM. The frame is timed within the TBOX. If no feedback is received from the BCM within 6 seconds, an error code is fed back to the TSP, and remote control messages are stopped, ending the anti-theft authentication message.

[0135] If the BCM receives an authentication failure status within 6 seconds, it will feedback an error code to the TSP, stop sending remote control messages, and end this anti-theft authentication message.

[0136] It should be noted that for the sake of simplicity, the method embodiments are described as a series of actions. However, those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in this specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0137] Reference Figure 6 , shows a schematic structural diagram of a remote anti-theft authentication device provided by an embodiment of the present invention, which is applied to a vehicle-mounted communication system and may specifically include the following modules:

[0138] A remote control command sending module 601 is configured to send a remote control command to a vehicle body control system upon receiving the remote control command;

[0139] an authentication response message sending module 602, configured to, upon receiving a random number seed sent by the vehicle body control system, generate an authentication response message according to the random number seed and send the authentication response message to the vehicle body control system;

[0140] The verification exception module 603 is configured to determine that the anti-theft authentication has failed when a verification exception is detected in the authentication response message.

[0141] In one embodiment of the present invention, the apparatus further comprises:

[0142] a random number seed request message sending module, configured to send a random number seed request message to the vehicle body control system if the random number seed sent by the vehicle body control system is not received;

[0143] The first retransmission module is configured to determine that the anti-theft authentication fails when the number of times the random number seed request message is sent reaches a first retransmission number and the random number seed is not received.

[0144] In one embodiment of the present invention, the verification exception module 603 is used to:

[0145] If the verification result generated by the vehicle body control system based on the authentication response message is not received, or the received verification result indicates that the authentication has failed, it is determined that the anti-theft authentication has failed.

[0146] In one embodiment of the present invention, the remote control command sending module 601 is used to:

[0147] When it is identified that the vehicle is in a non-remote high-voltage power state, the remote control command is received.

[0148] In one embodiment of the present invention, the authentication response message includes an authentication response data frame and a challenge data frame; the authentication response data frame is obtained based on the random number seed; the challenge data frame is obtained by iteratively calculating according to the number of calculation rounds based on the random number seed and the key array, the key array and the number of calculation rounds are determined according to an anti-theft authentication algorithm, and the anti-theft authentication algorithm is used to extract local variables based on the key array, and iteratively generate a challenge data frame according to the local variables and the random number seed according to the number of calculation rounds.

[0149] In this embodiment of the present invention, the authentication response message further includes:

[0150] Security access code identifier: used to indicate whether the vehicle communication system writes a security access code;

[0151] Busy flag: used to indicate whether the vehicle communication system is in a busy state;

[0152] Self-authentication success flag: used to indicate whether the vehicle communication system has successfully self-authenticated.

[0153] In an embodiment of the present invention, the vehicle's on-board communication system can obtain a remote control command and send the remote control command to the vehicle's body control system; when receiving a random number seed sent by the body control system, it can generate an authentication response message based on the random number seed and send the authentication response message to the body control system; when an abnormality in the authentication response message verification is identified, it is determined that the anti-theft authentication has failed, so that the anti-theft authentication can be achieved through the random number seed, ensuring the safety of the vehicle, and the anti-theft authentication result can be quickly determined.

[0154] Reference Figure 7 , shows a schematic structural diagram of another remote anti-theft authentication device provided by an embodiment of the present invention, which is applied to a vehicle-mounted communication system and may specifically include the following modules:

[0155] The random number seed sending module 701 is used to obtain a random number seed upon receiving a remote control command sent by the vehicle's onboard communication system, and send the random number seed to the onboard communication system;

[0156] an authentication response message receiving module 702 for verifying the authentication response message generated by the vehicle-mounted communication system according to the random number seed upon receiving the authentication response message, and sending the verification result to the vehicle-mounted communication system;

[0157] The exception handling process execution module 703 is used to execute the exception handling process when the verification result is authentication failure.

[0158] In one embodiment of the present invention, the exception handling process execution module 703 may include the following submodules:

[0159] A second retransmission submodule, configured to obtain a random number seed again and send the random number seed to the vehicle communication system;

[0160] The failure count accumulation module is used to determine that the anti-theft authentication has failed when the verification result shows that the number of authentication failures reaches a failure count threshold.

[0161] In one embodiment of the present invention, the apparatus further comprises:

[0162] a third retransmission module, configured to send the random number seed to the in-vehicle communication system if no authentication response message is received from the in-vehicle communication system;

[0163] The retransmission number accumulation module is used to determine that the anti-theft authentication fails when the number of times the random number seed is sent reaches the second retransmission number and the authentication response message is not received.

[0164] In the embodiment of the present invention, anti-theft authentication is implemented through interaction between the vehicle communication system and the vehicle body control system to ensure vehicle safety.

[0165] An embodiment of the present invention further provides an electronic device, which may include a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the above remote anti-theft authentication method is implemented.

[0166] An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the remote anti-theft method described above is implemented.

[0167] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0168] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0169] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, apparatus, or computer program products. Thus, embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0170] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the process in the flowchart and / or block diagram. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0171] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0172] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0173] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they become aware of the basic creative concepts. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0174] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "includes," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that includes a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or terminal device. In the absence of further limitations, an element defined by the phrase "comprises a..." does not exclude the presence of additional identical elements in the process, method, article, or terminal device that includes the element.

[0175] The above is a detailed introduction to a remote anti-theft method and anti-theft authentication system provided. Specific examples are used herein to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the ideas of the present invention, there may be changes in the specific implementation methods and application scopes. In summary, the contents of this specification should not be understood as limiting the present invention.

Claims

1. A remote anti-theft authentication method, characterized in that: In-vehicle communication systems used in vehicles, including: When a remote control command is obtained, the remote control command is sent to the vehicle body control system; Upon receiving the random number seed sent by the vehicle body control system, generating an authentication response message according to the random number seed, and sending the authentication response message to the vehicle body control system; When it is identified that the authentication response message is abnormal, it is determined that the anti-theft authentication has failed.

2. The method according to claim 1, characterized in that After sending the remote control command to the vehicle body control system, the method further includes: In the case of not receiving the random number seed sent by the vehicle body control system, sending a random number seed request message to the vehicle body control system; If the number of times the random number seed request message is sent reaches the first retransmission number and the random number seed is not received, it is determined that the anti-theft authentication has failed.

3. The method according to claim 1, characterized in that The authentication response message verification exception specifically includes: If the verification result generated by the vehicle body control system based on the authentication response message is not received, or the received verification result indicates that the authentication has failed, it is determined that the anti-theft authentication has failed.

4. The method according to claim 1, wherein The method for obtaining the remote control command includes: When it is identified that the vehicle is in a non-remote high-voltage power state, the remote control command is received.

5. The method according to claim 1, characterized in that The authentication response message includes an authentication response data frame and a challenge data frame; the authentication response data frame is obtained according to the random number seed; the challenge data frame is obtained by iteratively calculating according to the random number seed and the key array according to the number of calculation rounds, the key array and the number of calculation rounds are determined according to the anti-theft authentication algorithm, and the anti-theft authentication algorithm is used to extract local variables based on the key array, and iteratively generate the challenge data frame according to the local variables and the random number seed according to the number of calculation rounds.

6. The method according to claim 1, characterized in that The authentication response message also includes: Security access code identifier: used to indicate whether the vehicle communication system writes a security access code; Busy flag: used to indicate whether the vehicle communication system is in a busy state; Self-authentication success flag: used to indicate whether the vehicle communication system has successfully self-authenticated.

7. A remote anti-theft authentication method, characterized in that: Body control systems used in vehicles, including: Upon receiving a remote control command sent by an onboard communication system of the vehicle, obtaining a random number seed and sending the random number seed to the onboard communication system; Upon receiving an authentication response message generated by the vehicle-mounted communication system according to the random number seed, verifying the authentication response message and sending a verification result to the vehicle-mounted communication system; When the verification result is authentication failure, the exception handling process is executed.

8. The method according to claim 7, characterized in that The exception handling process includes: Obtaining a random number seed again, and sending the random number seed to the vehicle communication system; When the verification result shows that the number of authentication failures reaches the failure number threshold, it is determined that the anti-theft authentication has failed.

9. The method according to claim 7, characterized in that After sending the random number seed to the vehicle communication system, the method further includes: In the case of not receiving an authentication response message from the vehicle communication system, sending the random number seed to the vehicle communication system; When the number of times the random number seed is sent reaches the second retransmission number and the authentication response message is not received, it is determined that the anti-theft authentication has failed.

10. An anti-theft authentication system, characterized in that: The anti-theft authentication system includes an on-board communication system and a body control system of a vehicle, wherein the on-board communication system is used to execute the remote anti-theft authentication method according to any one of claims 1 to 6, and the body control system is used to execute the remote anti-theft authentication method according to any one of claims 7 to 9.

Images