Vehicle-mounted equipment data secure transmission method, system and device and electronic equipment

Abstract

The invention is suitable for the technical field of data transmission, and provides a vehicle-mounted equipment data secure transmission method, system and device and electronic equipment, and the method comprises the steps: obtaining a communication connection request sent by first vehicle-mounted equipment; based on the communication connection request, sending a second key application to a security management platform, the second key application being used for instructing the security management platform to verify whether the second vehicle-mounted device is a pairing device of the first vehicle-mounted device; if the second vehicle-mounted device is the pairing device of the first vehicle-mounted device, determining the dynamic key of the first vehicle-mounted device as a dynamic key corresponding to the second vehicle-mounted device; obtaining a dynamic key sent by the security management platform and a first random code of the first vehicle-mounted equipment; verifying the legality of the communication connection request based on the dynamic key and the first random code; and if the validity verification is passed, performing data security transmission with the first vehicle-mounted equipment based on the dynamic key. According to the invention, the security and reliability of data transmission between the vehicle-mounted devices can be ensured.

Description

Technical Field

[0001] The present application relates to the technical field of data transmission, and in particular to a method, system, device and electronic equipment for securely transmitting data of an in-vehicle device. Background Art

[0002] With the development of the Internet of Vehicles (IoV) and smart cars, the number of onboard devices in vehicles is increasing, and data transmission and information exchange between devices are becoming increasingly frequent. However, communication between these devices also faces increasing security challenges, such as information leakage, unauthorized access, and man-in-the-middle attacks. While existing solutions exist for key management and identity authentication of onboard devices, most rely on fixed keys or simple authentication mechanisms, which cannot effectively address complex attack scenarios.

[0003] In view of this, how to ensure the security and reliability of data transmission between on-board devices and ensure the normal operation of the on-board system is an issue that needs to be considered at present. Summary of the Invention

[0004] The embodiments of the present application provide a method, system, device, and electronic device for securely transmitting data between vehicle-mounted devices, which can ensure the security and reliability of data transmission between vehicle-mounted devices and guarantee the normal operation of the vehicle-mounted system.

[0005] In a first aspect, an embodiment of the present application provides a method for securely transmitting data from an in-vehicle device, which is applied to a security management platform. The method includes:

[0006] Obtaining a first key application sent by a first vehicle-mounted device, where the first key application carries a first random code;

[0007] generating a dynamic key for the first vehicle-mounted device based on the first key application;

[0008] Sending the dynamic key to the first vehicle-mounted device, so that the first vehicle-mounted device encrypts the first random code based on the dynamic key and generates a communication connection request and sends it to the second vehicle-mounted device;

[0009] Obtaining a second key application sent by the second vehicle-mounted device based on the communication connection request;

[0010] Verifying, based on the second key application, whether the second in-vehicle device is a paired device of the first in-vehicle device;

[0011] If the second vehicle-mounted device is a paired device of the first vehicle-mounted device, determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device;

[0012] The dynamic key and the first random code are sent to the second vehicle-mounted device, so that the second vehicle-mounted device verifies the legitimacy of the communication connection request based on the dynamic key and the first random code. If the legitimacy verification passes, data is securely transmitted with the first vehicle-mounted device based on the dynamic key.

[0013] In a possible implementation of the first aspect, the first key application further includes a first device identifier and a first timestamp; and generating a dynamic key for the first vehicle-mounted device based on the first key application includes:

[0014] Verifying whether the first device identifier is a legitimate identifier;

[0015] If the first device identifier is a legal identifier, a dynamic key for the first vehicle-mounted device is generated based on the first timestamp and a preset key generation algorithm.

[0016] In a possible implementation of the first aspect, the second key application includes a second timestamp; and determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device includes:

[0017] determining whether the second timestamp is within the validity period of the dynamic key;

[0018] If the second timestamp is within the validity period of the dynamic key, the dynamic key of the first vehicle-mounted device is determined as the dynamic key corresponding to the second vehicle-mounted device.

[0019] In a possible implementation of the first aspect, the second key application carries a second random code, and after determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device, the method further includes:

[0020] The second random code is sent to the first vehicle-mounted device, where the second random code is used by the first vehicle-mounted device to perform reverse verification on the connection confirmation information fed back by the second vehicle-mounted device.

[0021] In a possible implementation of the first aspect, the method further includes:

[0022] Obtaining a first pairing data packet uploaded by the first vehicle-mounted device and a second pairing data packet uploaded by the second vehicle-mounted device;

[0023] determining, based on the first pairing data packet and the second pairing data packet, whether a pairing relationship exists between the first vehicle-mounted device and the second vehicle-mounted device;

[0024] If there is a pairing relationship between the first vehicle-mounted device and the second vehicle-mounted device, the pairing relationship between the first vehicle-mounted device and the second vehicle-mounted device is recorded.

[0025] In a second aspect, an embodiment of the present application provides a method for securely transmitting data of an in-vehicle device, which is applied to a second in-vehicle device, including:

[0026] Obtaining a communication connection request sent by the first vehicle-mounted device;

[0027] Based on the communication connection request, a second key application is sent to the security management platform, where the second key application is used to instruct the security management platform to verify whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device; if the second vehicle-mounted device is a paired device of the first vehicle-mounted device, determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device;

[0028] Obtaining the dynamic key and the first random code of the first vehicle-mounted device sent by the security management platform;

[0029] Verifying the legitimacy of the communication connection request based on the dynamic key and the first random code;

[0030] If the legitimacy verification is passed, data is securely transmitted with the first vehicle-mounted device based on the dynamic key.

[0031] In a third aspect, an embodiment of the present application provides a vehicle-mounted device data security transmission system, including a first vehicle-mounted device, a second vehicle-mounted device, and a security management platform, wherein:

[0032] The first vehicle-mounted device is used to send a first key application to the security management platform, where the first key application carries a first random code;

[0033] The security management platform is configured to generate a dynamic key for the first vehicle-mounted device based on the first key application, and send the dynamic key to the first vehicle-mounted device;

[0034] The first vehicle-mounted device is further configured to generate a communication connection request after encrypting the first random code based on the dynamic key, and send the communication connection request to the second vehicle-mounted device;

[0035] The second vehicle-mounted device is used to obtain the communication connection request, and send a second key application to the security management platform based on the communication connection request;

[0036] The security management platform is further configured to obtain the second key application, and based on the second key application, verify whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device; if the second vehicle-mounted device is a paired device of the first vehicle-mounted device, determine the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device; and send the dynamic key and the first random code to the second vehicle-mounted device;

[0037] The second vehicle-mounted device is further configured to verify the legitimacy of the communication connection request based on the dynamic key and the first random code, and if the legitimacy verification passes, secure data transmission is performed with the first vehicle-mounted device based on the dynamic key.

[0038] In a fourth aspect, an embodiment of the present application provides a vehicle-mounted device data security transmission device, which is applied to a second vehicle-mounted device, including:

[0039] a connection request acquiring unit, configured to acquire a communication connection request sent by the first vehicle-mounted device;

[0040] a second application sending unit, configured to send a second key application to the security management platform based on the communication connection request, wherein the second key application is used to instruct the security management platform to verify whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device; and if the second vehicle-mounted device is a paired device of the first vehicle-mounted device, determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device;

[0041] a data acquisition unit, configured to acquire the dynamic key and the first random code of the first vehicle-mounted device sent by the security management platform;

[0042] a connection verification unit, configured to verify the legitimacy of the communication connection request based on the dynamic key and the first random code;

[0043] The second secure transmission unit is configured to perform secure data transmission with the first vehicle-mounted device based on the dynamic key if the legitimacy verification is passed.

[0044] In the fifth aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and running on the processor. When the processor executes the computer program, it implements the method for secure transmission of vehicle-mounted equipment data as described in the first aspect or the second aspect above.

[0045] In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the method for securely transmitting vehicle-mounted device data as described in the first aspect or the second aspect above.

[0046] In a fifth aspect, an embodiment of the present application provides a computer program product, which, when running on an electronic device, enables the electronic device to execute the method for securely transmitting vehicle-mounted device data as described in the first aspect or the second aspect above.

[0047] In an embodiment of the present application, the second vehicle-mounted device obtains a communication connection request sent by the first vehicle-mounted device, and based on the communication connection request, sends a second key application to the security management platform. The security management platform verifies whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device. If the second vehicle-mounted device is a paired device of the first vehicle-mounted device, the dynamic key of the first vehicle-mounted device is determined to be the dynamic key corresponding to the second vehicle-mounted device. The second vehicle-mounted device obtains the dynamic key sent by the security management platform and the first random code of the first vehicle-mounted device, and verifies the legitimacy of the communication connection request based on the dynamic key and the first random code. If the legitimacy verification passes, data is securely transmitted with the first vehicle-mounted device based on the dynamic key. This application uses the security management platform to authenticate the second vehicle-mounted device before sending the dynamic key, which can effectively ensure the accuracy of key distribution. The second vehicle-mounted device uses the dynamic key and random code to verify the communication connection request of the first vehicle-mounted device. After the verification passes, the second vehicle-mounted device transmits data with the first vehicle-mounted device based on the dynamic key, which can effectively avoid illegal communication, ensure the security and reliability of data transmission between vehicle-mounted devices, and thus ensure the normal operation of the vehicle-mounted system. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the embodiments or descriptions of the prior art. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0049] Figure 1 This is a system architecture diagram of the method for securely transmitting data from an in-vehicle device provided in an embodiment of the present application;

[0050] Figure 2 This is a flowchart of the implementation method of the security management platform side vehicle-mounted device data security transmission method provided in the embodiment of the present application;

[0051] Figure 3 This is a flowchart of a method for securely transmitting vehicle-mounted device data on a second vehicle-mounted device side provided in an embodiment of the present application;

[0052] Figure 4This is a flowchart of a method for securely transmitting vehicle-mounted device data on a first vehicle-mounted device side provided in an embodiment of the present application;

[0053] Figure 5 This is a structural block diagram of a vehicle-mounted device data security transmission device provided in an embodiment of the present application;

[0054] Figure 6 This is a structural block diagram of another vehicle-mounted device data security transmission device provided in an embodiment of the present application;

[0055] Figure 7 This is a structural block diagram of another vehicle-mounted device data security transmission device provided in an embodiment of the present application;

[0056] Figure 8 Schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0057] In the following description, specific details such as specific system structures and techniques are provided for purposes of illustration rather than limitation to facilitate a thorough understanding of the embodiments of the present application. However, it will be apparent to those skilled in the art that the present application may be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to avoid obscuring the description of the present application with unnecessary detail.

[0058] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and / or components, but does not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or collections thereof.

[0059] It will also be understood that the term "and / or" used in this specification and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.

[0060] As used in this specification and the appended claims, the term "if" can be interpreted as "when" or "upon" or "in response to determining" or "in response to detecting," depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" can be interpreted as meaning "upon determination" or "in response to determining" or "upon detection of [described condition or event]" or "in response to detecting [described condition or event]," depending on the context.

[0061] In addition, in the description of the present application specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0062] References to "one embodiment" or "some embodiments" in this specification mean that a particular feature, structure, or characteristic described in conjunction with that embodiment is included in one or more embodiments of the present application. Thus, phrases such as "in one embodiment," "in some embodiments," "in other embodiments," and "in other embodiments" appearing in various places in this specification do not necessarily refer to the same embodiment, but rather mean "one or more but not all embodiments," unless otherwise specifically emphasized. The terms "including," "comprising," "having," and variations thereof all mean "including but not limited to," unless otherwise specifically emphasized.

[0063] By way of example and not limitation, the in-vehicle device data secure transmission method provided in the embodiments of the present application can be applied to electronic devices that require data transmission of various types of data, including in-vehicle devices, mobile phones, tablet computers, laptop computers, ultra-mobile personal computers (UMPCs), desktop computers, and other electronic devices capable of data transmission. The embodiments of the present application do not impose any restrictions on the specific types of electronic devices.

[0064] Figure 1 A system architecture diagram of a vehicle-mounted device data security transmission system provided in an embodiment of the present application is shown, which is detailed as follows: For ease of explanation, only the parts related to the embodiment of the present application are shown.

[0065] Reference Figure 1 The vehicle-mounted device data security transmission system includes a first vehicle-mounted device 1, a second vehicle-mounted device 2 and a security management platform 3, wherein:

[0066] The first vehicle-mounted device 1 is used to send a first key application to the security management platform 3 , where the first key application carries a first random code.

[0067] The security management platform 3 is used to generate a dynamic key for the first vehicle-mounted device 1 based on the first key application, and send the dynamic key to the first vehicle-mounted device 1 .

[0068] The first vehicle-mounted device 1 is further configured to generate a communication connection request after encrypting the first random code based on the dynamic key, and send the communication connection request to the second vehicle-mounted device 2 .

[0069] The second vehicle-mounted device 2 is used to obtain the communication connection request, and send a second key application to the security management platform 3 based on the communication connection request.

[0070] The security management platform 3 is also used to obtain the second key application, and based on the second key application, verify whether the second vehicle-mounted device 2 is a paired device of the first vehicle-mounted device 1; if the second vehicle-mounted device 2 is a paired device of the first vehicle-mounted device 1, the dynamic key of the first vehicle-mounted device 1 is determined as the dynamic key corresponding to the second vehicle-mounted device 2; and the dynamic key and the first random code are sent to the second vehicle-mounted device 2.

[0071] The second vehicle-mounted device 2 is further configured to verify the legitimacy of the communication connection request based on the dynamic key and the first random code, and if the legitimacy verification is successful, secure data transmission is performed with the first vehicle-mounted device 1 based on the dynamic key.

[0072] In the embodiment of the present application, if the first vehicle-mounted device 1 wants to apply for an encryption key from the security management platform 3 , it needs to establish a pairing relationship with the second vehicle-mounted device 2 in advance and file the pairing relationship on the security management platform 3 .

[0073] In some embodiments, the first vehicle-mounted device 1 and the second vehicle-mounted device 2 exchange their respective device identifiers based on a pre-set key. That is, the first vehicle-mounted device 1 encrypts the first device identifier using the pre-set key and sends it to the second vehicle-mounted device 2. The second vehicle-mounted device 2 encrypts the second device identifier using the pre-set key and sends it to the first vehicle-mounted device 1. The first vehicle-mounted device 1 packages the first device identifier and the second device identifier to generate a first pairing data packet and uploads it to the security management platform 3. The second vehicle-mounted device 2 packages the first device identifier and the second device identifier to generate a second pairing data packet and uploads it to the security management platform 3. The security management platform 3 obtains the first pairing data packet uploaded by the first vehicle-mounted device 1 and the second pairing data packet uploaded by the second vehicle-mounted device 2. The first pairing data packet includes the first device identifier of the first vehicle-mounted device 1 and the device identifier of its paired device, and the second pairing data packet includes the second device identifier of the second vehicle-mounted device 2 and the device identifier of its paired device. Based on the first pairing data packet and the second pairing data packet, determine whether there is a pairing relationship between the first vehicle-mounted device 1 and the second vehicle-mounted device 2; if the device identifier of the pairing device uploaded by the first vehicle-mounted device 1 is the same as the second device identifier uploaded by the second vehicle-mounted device 2, and the device identifier of the pairing device uploaded by the second vehicle-mounted device 2 is the same as the first device identifier uploaded by the first vehicle-mounted device 1, it can be confirmed that there is a pairing relationship between the first vehicle-mounted device 1 and the second vehicle-mounted device 2, and the security management platform 3 records the pairing relationship between the first vehicle-mounted device 1 and the second vehicle-mounted device 2.

[0074] The first vehicle-mounted device 1 and the second vehicle-mounted device 2 include but are not limited to electronic devices with communication capabilities such as smart vehicle-mounted terminals and tablet computers. The security management platform 3 can be a smart terminal such as a remote server or a cloud server.

[0075] In one possible implementation, the vehicle-mounted device data security transmission system can use Bluetooth technology, WIFI technology or 3G / 4G / 5G technology to establish a wireless connection between the security management platform 3 and the first vehicle-mounted device 1 and the second vehicle-mounted device 2. The first vehicle-mounted device 1 and the second vehicle-mounted device 2 can use both wireless connection and serial port technology or USB interface technology to establish a wired connection.

[0076] Figure 2 The implementation process of the vehicle-mounted device data security transmission method provided in the embodiment of the present application is shown. In this embodiment, the execution subject of the process is Figure 1 The security management platform 3 shown in FIG. 3 includes steps S201 to S207. The specific implementation principles of each step are as follows:

[0077] Step S201: Obtain a first key application sent by a first vehicle-mounted device, where the first key application carries a first random code.

[0078] The security management platform receives the first key application sent by the first vehicle-mounted device in real time. In this embodiment, the first key application is an encryption key application.

[0079] Step S202: Generate a dynamic key for the first vehicle-mounted device based on the first key application.

[0080] In this embodiment, the dynamic key generated by the security management platform is a key with a limited validity period. The dynamic key is valid only during the current connection between the first vehicle-mounted device and the second vehicle-mounted device. If the first vehicle-mounted device and the second vehicle-mounted device fail to successfully establish a connection or the connection is disconnected, the dynamic key becomes invalid.

[0081] The first key application also includes a first device identifier and a first timestamp. In one possible implementation, the security management platform verifies whether the first device identifier is a legal identifier. If the first device identifier is a legal identifier, a dynamic key for the first vehicle-mounted device is generated based on the first timestamp and a preset key generation algorithm. The security management platform verifies the legality of the first device identifier, including verifying whether the first device identifier is a registered and authenticated device identifier. If the first device identifier is a registered and authenticated device identifier, the first device identifier is determined to be a legal identifier.

[0082] In some embodiments, before generating the dynamic key of the first vehicle-mounted device, the security management platform searches for the pairing relationship corresponding to the first device identifier in the pairing relationship record table. If a corresponding pairing relationship record is found for the first device identifier, the dynamic key of the first vehicle-mounted device is generated. Otherwise, a key application failure is fed back to the first vehicle-mounted device, prompting that there is no paired device for the first device and the dynamic key cannot be applied for.

[0083] The validity period of the dynamic key can be determined based on the first timestamp. For example, the timestamp obtained by adding a preset time length to the first timestamp is determined as the expiration timestamp of the dynamic key.

[0084] Step S203: Sending the dynamic key to the first vehicle-mounted device, so that the first vehicle-mounted device encrypts the first random code based on the dynamic key and generates a communication connection request and sends it to the second vehicle-mounted device.

[0085] Step S204: Obtain a second key application sent by the second vehicle-mounted device based on the communication connection request.

[0086] The security management platform receives the second key application sent by the second vehicle-mounted device in real time. In this embodiment, the second key application is a decryption key application.

[0087] Step S205: Based on the second key application, verify whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device.

[0088] The security management platform searches the pairing record table to see if there's a pairing record between the second device identifier and the first device identifier. If so, the second vehicle-mounted device is confirmed to be the paired device of the first vehicle-mounted device. Before sending the first vehicle-mounted device's dynamic key to the second vehicle-mounted device, the security management platform verifies that the second vehicle-mounted device is the paired device of the first vehicle-mounted device. This effectively ensures the validity and security of the dynamic key and prevents the key from being sent to unauthorized devices.

[0089] Step S206: If the second vehicle-mounted device is a paired device of the first vehicle-mounted device, the dynamic key of the first vehicle-mounted device is determined as the dynamic key corresponding to the second vehicle-mounted device.

[0090] In one possible implementation, the second key application includes a second timestamp, and a determination is made as to whether the second timestamp is within the validity period of the dynamic key. If the second timestamp is within the validity period of the dynamic key, the dynamic key of the first vehicle-mounted device is determined to be the dynamic key corresponding to the second vehicle-mounted device. If the second timestamp is not within the validity period of the dynamic key, the second key application of the second vehicle-mounted device is determined to have failed. A key application failure notification is fed back to the second vehicle-mounted device. By verifying the validity period of the second timestamp, the security of the dynamic key can be effectively guaranteed, preventing unauthorized applications.

[0091] Step S207: Send the dynamic key and the first random code to the second vehicle-mounted device, so that the second vehicle-mounted device verifies the legitimacy of the communication connection request based on the dynamic key and the first random code. If the legitimacy verification is passed, data is securely transmitted with the first vehicle-mounted device based on the dynamic key.

[0092] When the security management platform sends the dynamic key to the second vehicle-mounted device, it also sends the first random code of the first vehicle-mounted device, which is used by the second vehicle-mounted device to verify the legitimacy of the communication connection request, ensure the security of the communication connection, and guarantee the reliability of data transmission.

[0093] In one possible implementation, if it is verified that the second vehicle-mounted device is not a paired device of the first vehicle-mounted device, the pairing relationship record table is searched to see whether there is a pairing relationship record for the second device identifier. If so, and the other paired devices in the found pairing relationship record have applied for a dynamic key, the dynamic key and random code of the other paired device are sent to the second vehicle-mounted device, so that the second vehicle-mounted device can verify the legitimacy of the received communication connection request based on the dynamic key and random code of the other paired device.

[0094] In one possible implementation, the second key application carries a second random code, which the security management platform sends to the first vehicle-mounted device. The second random code is used by the first vehicle-mounted device to reversely verify the connection confirmation information provided by the second vehicle-mounted device. After the reverse verification is successful, the first vehicle-mounted device and the second vehicle-mounted device formally establish a communication connection. Before the communication connection is disconnected, the first and second vehicle-mounted devices securely transmit data based on the dynamic key.

[0095] A random code is an irregular, unpredictable string of characters or numerical sequences generated by an encryption algorithm or random number generator. A random code is both random and unique. In one possible implementation, the random code is also time-sensitive. The random code is tied to a timestamp or session period and expires after a timeout.

[0096] In an embodiment of the present application, the security management platform receives a first key application from a first vehicle-mounted device, generates a dynamic key for the first vehicle-mounted device, receives a second key application from a second vehicle-mounted device, and after verifying that the second vehicle-mounted device is a paired device of the first vehicle-mounted device, sends a dynamic key to the second vehicle-mounted device. By authenticating the second vehicle-mounted device, the security of the dynamic key of the first vehicle-mounted device is ensured to avoid distribution to illegal devices.

[0097] Figure 3 The implementation process of the vehicle-mounted device data security transmission method provided in the embodiment of the present application is shown. In this embodiment, the execution subject of the process is Figure 1 The second vehicle-mounted device 2 shown is described in detail as follows:

[0098] Step S301: Obtain a communication connection request sent by a first vehicle-mounted device.

[0099] The communication connection request is generated by the first vehicle-mounted device after being encrypted based on a dynamic key.

[0100] Step S302: Based on the communication connection request, a second key request is sent to the security management platform. The second key request is used to instruct the security management platform to verify whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device; if the second vehicle-mounted device is a paired device of the first vehicle-mounted device, the dynamic key of the first vehicle-mounted device is determined as the dynamic key corresponding to the second vehicle-mounted device.

[0101] The second key application includes a second device identifier, a second random code, and a second timestamp. After receiving the communication connection request sent by the first vehicle-mounted device, the second vehicle-mounted device generates a second random code locally on the second vehicle-mounted device, and packages the second key application based on the second device identifier, the second random code, and the second timestamp, where the second timestamp is the timestamp of the packaging.

[0102] Step S303: Acquire the dynamic key sent by the security management platform and the first random code of the first vehicle-mounted device.

[0103] Step S304: Verify the legitimacy of the communication connection request based on the dynamic key and the first random code.

[0104] The second vehicle-mounted device decrypts the communication connection request using the dynamic key to obtain the first device identifier and the first random code of the first vehicle-mounted device. The decrypted first device identifier is compared with the first device identifier stored locally on the second vehicle-mounted device, and the decoded first random code is compared with the first random code sent by the security management platform. If the two identifiers match, the communication connection request is deemed to have passed the legitimacy verification.

[0105] In some embodiments, after decrypting the communication connection request, a first timestamp is obtained, and the first timestamp is used to verify the timeliness of the communication connection request. The current timestamp is compared with the first timestamp, and if the difference between the two timestamps exceeds a preset time threshold, the communication connection request is determined to be invalid.

[0106] Step S305: If the legitimacy verification is passed, data is securely transmitted with the first vehicle-mounted device based on the dynamic key.

[0107] In an embodiment of the present application, after receiving the communication connection request sent by the first vehicle-mounted device, the second vehicle-mounted device applies to the security management platform for the decryption key of the communication connection request, and uses the dynamic key and the first random code sent by the security management platform to verify the legitimacy of the communication connection request. Only after the legitimacy verification is passed does it confirm the establishment of a communication connection with the first vehicle-mounted device and perform data transmission, thereby ensuring the security of data transmission between vehicle-mounted devices and helping to ensure the safe operation of the vehicle-mounted system.

[0108] In one possible implementation, after the second vehicle-mounted device confirms the legitimacy of the communication connection request, it encrypts the second random code using the dynamic key, generates connection confirmation information, and feeds this connection confirmation information back to the first vehicle-mounted device, allowing the first vehicle-mounted device to reversely verify the second vehicle-mounted device. After the reverse verification of the first vehicle-mounted device is successful, the first vehicle-mounted device and the second vehicle-mounted device formally establish a communication connection. Before the communication connection is disconnected, the first and second vehicle-mounted devices securely transmit data based on the dynamic key.

[0109] Figure 4 The implementation process of the vehicle-mounted device data security transmission method provided in the embodiment of the present application is shown. In this embodiment, the execution subject of the process is Figure 1 The first vehicle-mounted device 1 shown is described in detail as follows:

[0110] Step S401: Send a first key application to a key management platform, where the first key application carries a first random code.

[0111] In this embodiment, before sending a communication connection request to a second vehicle-mounted device, the first vehicle-mounted device generates a first random code locally on the first vehicle-mounted device. The first device identifier, the first random code, and a first timestamp are packaged to generate a first key request. The first timestamp is the current timestamp. The encryption key is requested by sending the first key request to the key management platform.

[0112] Step S402: Obtain the dynamic key generated by the key management platform based on the first key application.

[0113] The dynamic key sent by the key management platform to the first vehicle-mounted device is an encryption key, which is used to encrypt the communication connection request.

[0114] Step S403: Generate a communication connection request after encrypting the first random code based on the dynamic key, and send the communication connection request to the second vehicle-mounted device.

[0115] The communication connection request is used to request to establish a communication connection with the second vehicle-mounted device for secure data transmission.

[0116] The communication connection request also includes the encrypted first device identifier and the first timestamp.

[0117] In one possible implementation, the first vehicle-mounted device also receives a random code from the second vehicle-mounted device sent by the security management platform. When the first vehicle-mounted device receives connection confirmation information from the second vehicle-mounted device, it decrypts the connection confirmation information using the dynamic key, obtains the second random code and second device identifier sent by the second vehicle-mounted device, compares the second device identifier with the second device identifier stored locally on the first vehicle-mounted device, and compares the second random code with the second random code sent by the security management platform. If the two devices match, the first vehicle-mounted device successfully de-verifies the second vehicle-mounted device. The first vehicle-mounted device and the second vehicle-mounted device formally establish a communication connection. Before the communication connection is disconnected, the first vehicle-mounted device and the second vehicle-mounted device securely transmit data based on the dynamic key.

[0118] In the real-time application, the first vehicle-mounted device applies for an encryption key from the security management platform, encrypts data using the encryption key to generate a communication connection request, and then sends it to the second vehicle-mounted device, which is conducive to ensuring the security of device data transmission.

[0119] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0120] Corresponding to the vehicle-mounted device data security transmission method described in the above embodiment, Figure 5-Figure 7 A structural block diagram of the vehicle-mounted device data security transmission device provided in an embodiment of the present application is shown. For the sake of convenience, only the parts related to the embodiment of the present application are shown.

[0121] Reference Figure 5 The vehicle-mounted device data security transmission device is applied to the security management platform, including: an application acquisition unit 51, a key generation unit 52, a verification and determination unit 53, and an information transmission unit 54, wherein:

[0122] The application obtaining unit 51 is configured to obtain a first key application sent by a first vehicle-mounted device, the first key application carrying a first random code; and further configured to obtain a second key application sent by a second vehicle-mounted device based on the communication connection request;

[0123] A key generation unit 52, configured to generate a dynamic key for the first vehicle-mounted device based on the first key application;

[0124] a verification and determination unit 53 configured to verify, based on the second key application, whether the second in-vehicle device is a paired device of the first in-vehicle device; and if the second in-vehicle device is a paired device of the first in-vehicle device, determining the dynamic key of the first in-vehicle device as the dynamic key corresponding to the second in-vehicle device;

[0125] The information transmission unit 54 is used to send the dynamic key to the first vehicle-mounted device, so that the first vehicle-mounted device encrypts the first random code based on the dynamic key and generates a communication connection request and sends it to the second vehicle-mounted device; it is also used to send the dynamic key and the first random code to the second vehicle-mounted device, so that the second vehicle-mounted device verifies the legitimacy of the communication connection request based on the dynamic key and the first random code. If the legitimacy verification is passed, data is securely transmitted with the first vehicle-mounted device based on the dynamic key.

[0126] As a possible implementation manner of the present application, the first key application further includes a first device identifier and a first timestamp, and the key generation unit 52 is further configured to:

[0127] Verifying whether the first device identifier is a legitimate identifier;

[0128] If the first device identifier is a legal identifier, a dynamic key for the first vehicle-mounted device is generated based on the first timestamp and a preset key generation algorithm.

[0129] As a possible implementation manner of the present application, the second key application includes a second timestamp, and the verification and determination unit 53 is further configured to:

[0130] determining whether the second timestamp is within the validity period of the dynamic key;

[0131] If the second timestamp is within the validity period of the dynamic key, the dynamic key of the first vehicle-mounted device is determined as the dynamic key corresponding to the second vehicle-mounted device.

[0132] As a possible implementation of the present application, the second key application carries a second random code, and the information transmission unit 54 is further configured to:

[0133] The second random code is sent to the first vehicle-mounted device, where the second random code is used by the first vehicle-mounted device to perform reverse verification on the connection confirmation information fed back by the second vehicle-mounted device.

[0134] As a possible implementation of the present application, the above-mentioned vehicle-mounted device data secure transmission device further includes:

[0135] The pairing recording unit is configured to obtain a first pairing data packet uploaded by a first vehicle-mounted device and a second pairing data packet uploaded by a second vehicle-mounted device; determine whether a pairing relationship exists between the first vehicle-mounted device and the second vehicle-mounted device based on the first pairing data packet and the second pairing data packet; and if a pairing relationship exists between the first vehicle-mounted device and the second vehicle-mounted device, record the pairing relationship between the first vehicle-mounted device and the second vehicle-mounted device.

[0136] Reference Figure 6 The vehicle-mounted device data security transmission device is applied to the first vehicle-mounted device, including: a first application sending unit 61, a first key acquisition unit 62, and a first security transmission unit 63, wherein:

[0137] A first application sending unit 61 is configured to send a first key application to the key management platform, where the first key application carries a first random code;

[0138] A first key acquisition unit 62 is configured to acquire a dynamic key generated by the key management platform based on the first key application;

[0139] The first secure transmission unit 63 is configured to encrypt the first random code based on the dynamic key to generate a communication connection request, and send the communication connection request to the second vehicle-mounted device.

[0140] Reference Figure 7 The vehicle-mounted device data security transmission device is applied to the second vehicle-mounted device, including: a connection request acquisition unit 71, a second application sending unit 72, a data acquisition unit 73, a connection verification unit 74, and a second security transmission unit 75, wherein:

[0141] A connection request acquiring unit 71 is configured to acquire a communication connection request sent by the first vehicle-mounted device;

[0142] A second application sending unit 72 is configured to send a second key application to the security management platform based on the communication connection request, wherein the second key application is used to instruct the security management platform to verify whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device; if the second vehicle-mounted device is a paired device of the first vehicle-mounted device, determine the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device;

[0143] A data acquisition unit 73 is configured to acquire the dynamic key and the first random code of the first vehicle-mounted device sent by the security management platform;

[0144] a connection verification unit 74, configured to verify the legitimacy of the communication connection request based on the dynamic key and the first random code;

[0145] The second secure transmission unit 75 is configured to perform secure data transmission with the first vehicle-mounted device based on the dynamic key if the legitimacy verification is passed.

[0146] It should be noted that the information interaction, execution process, etc. between the above-mentioned devices / units are based on the same concept as the method embodiment of this application. Their specific functions and technical effects can be found in the method embodiment section and will not be repeated here.

[0147] The embodiment of the present application further provides a computer-readable storage medium storing a computer program, wherein the computer program is executed by a processor to implement the following Figures 2 to 4 The steps of any method for securely transmitting data from an in-vehicle device are represented.

[0148] The embodiment of the present application further provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, wherein when the processor executes the computer program, Figures 2 to 4 The steps of any method for securely transmitting data from an in-vehicle device are represented.

[0149] The embodiment of the present application also provides a computer program product, which, when executed on an electronic device, enables the electronic device to execute the following Figures 2 to 4 The steps of any method for securely transmitting data from an in-vehicle device are represented.

[0150] Figure 8 Schematic diagram of an electronic device provided by an embodiment of the present application. Figure 8 As shown, the electronic device 8 of this embodiment includes: a processor 80, a memory 81, and a computer program 82 stored in the memory 81 and executable on the processor 80. When the processor 80 executes the computer program 82, the steps in the above-mentioned embodiments of the method for securely transmitting data from an in-vehicle device are implemented, such as Figure 2 Steps S201 to S207 shown, Figure 3 Steps S301 to S305 shown or Figure 4 Alternatively, when the processor 80 executes the computer program 82, the functions of the modules / units in the above-mentioned device embodiments are realized, for example, Figure 5The functions of the units 51 to 54 shown, Figure 6 The functions of the units 61 to 63 shown or Figure 7 The functions of units 71 to 75 are shown.

[0151] For example, the computer program 82 may be divided into one or more modules / units, which are stored in the memory 81 and executed by the processor 80 to implement the present application. The one or more modules / units may be a series of computer-readable instruction segments capable of performing specific functions, and the instruction segments are used to describe the execution process of the computer program 82 in the electronic device 8.

[0152] The electronic device 8 may be a vehicle-mounted intelligent terminal. The electronic device 8 may include, but is not limited to, a processor 80 and a memory 81. Those skilled in the art will understand that Figure 8 It is only an example of the electronic device 8 and does not constitute a limitation of the electronic device 8. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the electronic device 8 may also include input and output devices, network access devices, buses, etc.

[0153] The processor 80 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor.

[0154] The memory 81 may be an internal storage unit of the electronic device 8, such as a hard disk or memory of the electronic device 8. The memory 81 may also be an external storage device of the electronic device 8, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the electronic device 8. Furthermore, the memory 81 may include both an internal storage unit of the electronic device 8 and an external storage device. The memory 81 is used to store the computer program and other programs and data required by the electronic device. The memory 81 may also be used to temporarily store data that has been output or is about to be output.

[0155] It should be noted that the information interaction, execution process, etc. between the above-mentioned devices / units are based on the same concept as the method embodiment of this application. Their specific functions and technical effects can be found in the method embodiment section and will not be repeated here.

[0156] Those skilled in the art can clearly understand that, for the convenience and brevity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated into one processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0157] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and when the computer program is executed by the processor, it can implement the steps of the above-mentioned various method embodiments. Wherein, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may at least include: any entity or device capable of carrying the computer program code to the device / terminal device, a recording medium, a computer memory, a read-only memory (ROM), a random access memory (RAM), an electric carrier signal, a telecommunication signal and a software distribution medium. For example, a USB flash drive, a mobile hard disk, a magnetic disk or an optical disk. In some jurisdictions, according to legislation and patent practice, a computer-readable medium cannot be an electric carrier signal or a telecommunication signal.

[0158] In the above embodiments, the description of each embodiment has its own focus. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant description of other embodiments.

[0159] The above-described embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present application, and should all be included in the scope of protection of the present application.

Claims

1. A method for securely transmitting data of an on-vehicle device, characterized in that: Applied to a security management platform, the method includes: Obtaining a first key application sent by a first vehicle-mounted device, where the first key application carries a first random code; generating a dynamic key for the first vehicle-mounted device based on the first key application; Sending the dynamic key to the first vehicle-mounted device, so that the first vehicle-mounted device encrypts the first random code based on the dynamic key and generates a communication connection request and sends it to the second vehicle-mounted device; Obtaining a second key application sent by the second vehicle-mounted device based on the communication connection request; Verifying, based on the second key application, whether the second in-vehicle device is a paired device of the first in-vehicle device; If the second vehicle-mounted device is a paired device of the first vehicle-mounted device, determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device; The dynamic key and the first random code are sent to the second vehicle-mounted device, so that the second vehicle-mounted device verifies the legitimacy of the communication connection request based on the dynamic key and the first random code. If the legitimacy verification passes, data is securely transmitted with the first vehicle-mounted device based on the dynamic key.

2. The method according to claim 1, characterized in that The first key application further includes a first device identifier and a first timestamp; and generating a dynamic key for the first vehicle-mounted device based on the first key application includes: Verifying whether the first device identifier is a legitimate identifier; If the first device identifier is a legal identifier, a dynamic key for the first vehicle-mounted device is generated based on the first timestamp and a preset key generation algorithm.

3. The method according to claim 1, characterized in that The second key application includes a second timestamp; and determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device includes: determining whether the second timestamp is within the validity period of the dynamic key; If the second timestamp is within the validity period of the dynamic key, the dynamic key of the first vehicle-mounted device is determined as the dynamic key corresponding to the second vehicle-mounted device.

4. The method according to claim 1, wherein The second key application carries a second random code, and after determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device, the method further includes: The second random code is sent to the first vehicle-mounted device, where the second random code is used by the first vehicle-mounted device to perform reverse verification on the connection confirmation information fed back by the second vehicle-mounted device.

5. The method according to any one of claims 1 to 4, characterized in that The method further comprises: Obtaining a first pairing data packet uploaded by the first vehicle-mounted device and a second pairing data packet uploaded by the second vehicle-mounted device; determining, based on the first pairing data packet and the second pairing data packet, whether a pairing relationship exists between the first vehicle-mounted device and the second vehicle-mounted device; If there is a pairing relationship between the first vehicle-mounted device and the second vehicle-mounted device, the pairing relationship between the first vehicle-mounted device and the second vehicle-mounted device is recorded.

6. A method for securely transmitting data of an on-vehicle device, characterized in that: Applicable to the second vehicle-mounted device, including: Obtaining a communication connection request sent by the first vehicle-mounted device; Based on the communication connection request, a second key application is sent to the security management platform, where the second key application is used to instruct the security management platform to verify whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device; if the second vehicle-mounted device is a paired device of the first vehicle-mounted device, determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device; Obtaining the dynamic key and the first random code of the first vehicle-mounted device sent by the security management platform; Verifying the legitimacy of the communication connection request based on the dynamic key and the first random code; If the legitimacy verification is passed, data is securely transmitted with the first vehicle-mounted device based on the dynamic key.

7. A vehicle-mounted equipment data security transmission system, characterized in that: It includes a first vehicle-mounted device, a second vehicle-mounted device, and a security management platform, wherein: The first vehicle-mounted device is used to send a first key application to the security management platform, where the first key application carries a first random code; The security management platform is configured to generate a dynamic key for the first vehicle-mounted device based on the first key application, and send the dynamic key to the first vehicle-mounted device; The first vehicle-mounted device is further configured to generate a communication connection request after encrypting the first random code based on the dynamic key, and send the communication connection request to the second vehicle-mounted device; The second vehicle-mounted device is used to obtain the communication connection request, and send a second key application to the security management platform based on the communication connection request; The security management platform is further configured to obtain the second key application, and based on the second key application, verify whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device; if the second vehicle-mounted device is a paired device of the first vehicle-mounted device, determine the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device; and send the dynamic key and the first random code to the second vehicle-mounted device; The second vehicle-mounted device is further configured to verify the legitimacy of the communication connection request based on the dynamic key and the first random code, and if the legitimacy verification passes, secure data transmission is performed with the first vehicle-mounted device based on the dynamic key.

8. A vehicle-mounted equipment data security transmission device, characterized in that: Applicable to the second vehicle-mounted device, including: a connection request acquiring unit, configured to acquire a communication connection request sent by the first vehicle-mounted device; a second application sending unit, configured to send a second key application to the security management platform based on the communication connection request, wherein the second key application is used to instruct the security management platform to verify whether the second vehicle-mounted device is a paired device of the first vehicle-mounted device; and if the second vehicle-mounted device is a paired device of the first vehicle-mounted device, determining the dynamic key of the first vehicle-mounted device as the dynamic key corresponding to the second vehicle-mounted device; a data acquisition unit, configured to acquire the dynamic key and the first random code of the first vehicle-mounted device sent by the security management platform; a connection verification unit, configured to verify the legitimacy of the communication connection request based on the dynamic key and the first random code; The second secure transmission unit is configured to perform secure data transmission with the first vehicle-mounted device based on the dynamic key if the legitimacy verification is passed.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that: When the processor executes the computer program, the method for securely transmitting vehicle-mounted device data according to any one of claims 1 to 6 is implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method for securely transmitting data of an in-vehicle device according to any one of claims 1 to 6 is implemented.

Images