Vehicle management method for anti-disassembly, anti-shielding and anti-cracking vehicle locking through GPS (Global Positioning System)

Abstract

The invention discloses a vehicle management method for anti-disassembly, anti-shielding and anti-cracking vehicle locking through a GPS (Global Positioning System), which comprises a background server, a GPS communication module and a vehicle control unit, and is characterized in that the GPS communication module is in communication connection with the background server and the vehicle control unit respectively; when the vehicle is started each time, the vehicle control unit sends a message with a new dynamic secret key to the GPS communication module, and the dynamic secret key is encrypted through a public key; and the GPS communication module receives the message and decrypts the message to obtain the dynamic key, and data messages between the whole vehicle controller and the GPS communication module are encrypted by using the dynamic key subsequently. According to the invention, the vehicle out-of-control caused by illegal dismounting or shielding of the GPS equipment is effectively prevented, and the potential safety hazard that a fixed key system is easy to crack is solved. A dynamic secret key mechanism ensures that communication data is unique each time, and the possibility that vehicle locking control is bypassed through message playback attack is thoroughly blocked.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of vehicle remote monitoring and management, in particular to a vehicle management method for GPS anti-disassembly, anti-shielding and anti-cracking lock vehicle. BACKGROUND

[0002] In the engineering machinery leasing industry, GPS remote monitoring technology has become an important means to ensure asset security. However, there are three major security vulnerabilities in current GPS monitoring systems: first, physical protection is insufficient, and criminals can remove GPS equipment through violence; second, signal interference problem, GPS signal is easy to be shielded by professional equipment; third, the security of communication protocol is low, and vehicle control commands may be intercepted and cracked. The existing technical solutions mainly use fixed key encryption and periodic heartbeat detection mechanism. This static security strategy has obvious defects: once the fixed key is cracked, the attacker can simulate the legal communication for a long time; and the lock vehicle mechanism that simply depends on the network connection state will cause the legal user to be unable to normally use the vehicle in the signal blind area. More seriously, some solutions do not establish a component identity authentication mechanism, so that the key components can be replaced at will. In addition, the existing system is too simple in handling the offline state, either completely locking the vehicle affecting the work, or lacking effective period control causing security risks. These technical defects not only make the leasing enterprises face the risk of asset loss, but also affect the device use experience of normal users. SUMMARY

[0003] Therefore, the present application provides a vehicle management method for GPS anti-disassembly, anti-shielding and anti-cracking lock vehicle, which has the advantages of dynamic key update mechanism to effectively prevent communication protocol cracking, component identity authentication based active security protection, and intelligent offline state processing to protect the legal user's rights and interests.

[0004] To achieve the above purpose, the present application provides the following technical scheme: A vehicle management method for GPS anti-disassembly, anti-shielding and anti-cracking lock vehicle, comprising: a background server, a GPS communication module and a vehicle controller, the GPS communication module is in communication connection with the background server and the vehicle controller respectively, the vehicle controller reports its own state to the background server through the GPS communication module, and the background server issues an instruction to the vehicle controller through the GPS communication module; each time the vehicle starts, the vehicle controller sends a message with a new dynamic key to the GPS communication module, and the dynamic key is encrypted by a public key; the GPS communication module receives the message and decrypts the message to obtain the dynamic key, and the data message between the vehicle controller and the GPS communication module in the subsequent is encrypted by the dynamic key.

[0005] Preferably, the GPS communication module is provided with a VIN code, when the GPS communication module obtains a dynamic key, the GPS communication module will first send a VIN code message encrypted by the dynamic key to the vehicle controller, the vehicle controller receives the VIN code message and decrypts it to obtain the VIN code, the vehicle controller verifies the VIN code, if the verification is passed, the user obtains the use permission of the vehicle, if the verification is not passed, the user cannot use the vehicle.

[0006] Preferably, the GPS communication module is provided with a VIN code, when the GPS communication module obtains a dynamic key, the GPS communication module will first send a VIN code message encrypted by the dynamic key to the vehicle controller, the vehicle controller receives the VIN code message and decrypts it to obtain the VIN code, the vehicle controller verifies the VIN code, if the verification is passed, the user obtains the use permission of the vehicle, if the verification is not passed, the user cannot use the vehicle.

[0007] Preferably, when the use period of the vehicle expires, if the vehicle controller does not receive the instruction of extending the use period of the vehicle sent by the background server through the GPS communication module, the vehicle controller controls the vehicle to be locked.

[0008] Preferably, when the VIN code verification of the GPS communication module is not passed, the vehicle controller controls the vehicle to be locked; when the GPS communication module needs to be replaced and the replacement is completed, the background server sends a replacement GPS communication module instruction to the vehicle controller through the GPS communication module, so as to update the pre-stored VIN code in the vehicle controller, so that the VIN code is matched with the replaced GPS communication module.

[0009] Preferably, if the GPS communication module is not connected with the background server, the vehicle controller can check the use period data of the vehicle saved in the GPS communication module, if the vehicle is still within the use period, the vehicle can be normally used, if the vehicle is not within the use period, the vehicle is automatically locked.

[0010] The application has the advantages that compared with the prior art, the application effectively prevents the vehicle from losing control caused by illegal removal or shielding of the GPS device, and solves the security risk that the fixed key system is easy to be cracked. The dynamic key mechanism ensures that each communication data is unique, and completely blocks the possibility of bypassing the vehicle locking control through message playback attack. The double encryption system considers the key transmission security and communication efficiency.

[0011] Additional aspects and advantages of the application will be described in the following description, some of which will become apparent from the following description, or will be learned by practice of the application. BRIEF DESCRIPTION OF DRAWINGS

[0012] Figure 1 is the communication flow chart of the GPS communication module and the vehicle controller of the application. DETAILED DESCRIPTION

[0013] Embodiments of the present application are described below in detail with reference to the accompanying drawings, wherein the same or similar components are denoted by the same or similar reference numerals throughout the drawings. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to explain the present application, and are not to be understood as limiting the present application.

[0014] In addition, the terms "first", "second", etc. are used only for the purpose of description, and are not to be understood as indicating or implying relative importance or implying the number of the technical features indicated. Therefore, the features defined as "first", "second", etc. can explicitly or implicitly include one or more of the features. In the description of the present application, the meaning of "a plurality of" is two or more, unless otherwise specifically limited.

[0015] Reference is made below to Figure 1 A heat dissipation control method for an excavator based on an ambient temperature and a working condition in an embodiment of the present application is described.

[0016] A vehicle management method for GPS anti-disassembly, anti-shielding and anti-cracking lock is disclosed in the embodiments of the present application, comprising a background server, a GPS communication module and a vehicle controller, the GPS communication module is in communication connection with the background server and the vehicle controller respectively, the vehicle controller reports its own state to the background server through the GPS communication module, and the background server issues an instruction to the vehicle controller through the GPS communication module; the vehicle controller sends a message with a new dynamic key to the GPS communication module every time the vehicle is powered on, and the dynamic key is encrypted by a public key; the GPS communication module receives the message and decrypts it to obtain the dynamic key, and the data messages between the vehicle controller and the GPS communication module are encrypted using the dynamic key.

[0017] The dynamic key is a random encryption key generated each time the vehicle is started, which is used to ensure the independence and unpredictability of each communication session. Public key encryption refers to the use of asymmetric encryption algorithm for key transmission, which is used to ensure that the dynamic key is not stolen or tampered with during transmission. The background server refers to the control center deployed in the cloud, which is responsible for receiving vehicle state data and issuing management instructions. The vehicle controller refers to the core control unit of the vehicle, which has the functions of key generation, data encryption and instruction execution.

[0018] Specifically, when the vehicle starts, the vehicle controller immediately generates a new dynamic key and sends an encrypted message to the GPS communication module through public key encryption. The GPS communication module uses the pre-stored private key to decrypt the message to obtain the dynamic key, and completes the security handshake. Thereafter, all communication data between the two parties is encrypted using the dynamic key, including state reporting and instruction transmission. Since the key is updated each time the vehicle starts, even if a single communication is intercepted, the subsequent communication rules cannot be derived. The background server monitors the vehicle status in real time through the encrypted channel, and when it detects that the GPS is abnormally offline, it can immediately trigger the security mechanism.

[0019] Through the above technical solution, the application effectively prevents the vehicle from losing control due to the illegal removal or shielding of the GPS device, and solves the security hidden danger that the fixed key system is easy to be cracked. The dynamic key mechanism ensures that each communication data is unique, completely blocking the possibility of bypassing the vehicle locking control through message playback attacks. The double encryption system takes into account the security of key transmission and communication efficiency.

[0020] In some embodiments, a VIN code is provided in the GPS communication module. After the GPS communication module obtains the dynamic key, it will first send a VIN code message encrypted by the dynamic key to the vehicle controller. The vehicle controller receives the VIN code message and decrypts it to obtain the VIN code. The vehicle controller verifies the VIN code, and if it passes, the user obtains the use permission of the vehicle, otherwise the user cannot use the vehicle.

[0021] The VIN code refers to the vehicle identification number, which is the unique hardware identifier of the GPS communication module and is used to bind the module to a specific vehicle. VIN code verification refers to the vehicle controller comparing the decrypted VIN code with the pre-stored legal VIN code. If they are not consistent, it is determined that the module is illegal.

[0022] Specifically, after the vehicle is powered on, the vehicle controller generates a new dynamic key and sends it to the GPS communication module through public key encryption. After the GPS communication module decrypts the dynamic key, it immediately encrypts the VIN code stored in itself using the key and sends it to the vehicle controller. The vehicle controller decrypts the VIN code using the dynamic key and compares it with the legal VIN code stored locally. If they are consistent, the vehicle control function is activated; if they are not consistent, the permission locking mechanism is triggered and the power supply is cut off. For example, when a criminal installs a GPS communication module of another vehicle into a target vehicle, the VIN code does not match the target vehicle, and the vehicle controller directly refuses authorization in the verification stage, making the vehicle unable to start. At the same time, since the VIN code message is encrypted using the dynamic key, even if the attacker intercepts the encrypted message of a certain communication, due to the timeliness of the dynamic key, it cannot be forged through replay attacks.

[0023] Compared with the prior art, the existing scheme only detects the GPS online state periodically or encrypts the heartbeat packet using a fixed key, and there is a risk of module replacement attack. For example, dynamic ciphertext is used to encrypt the heartbeat packet, but the module identity is not bound at the hardware level, so the attacker can still bypass the detection by replacing the module from the same manufacturer. The present scheme combines VIN code verification with dynamic encryption to prevent message forgery at the communication level while binding the module to the vehicle at the hardware level, effectively preventing module replacement behavior under double protection. In addition, the problem of unlocking instructions not being encrypted in the prior art is solved in the present scheme, and all key instructions are included in the dynamic encryption protection range.

[0024] Through the above technical scheme, the present application can prevent illegal use of vehicles by replacing other vehicles' same type GPS communication modules, while avoiding the reuse of critical components on other vehicles after being disassembled. The dynamic encryption VIN code transmission mechanism ensures that the attacker cannot forge a legitimate identity through message interception or replay attacks, and the hardware-level VIN code binding limits the universality of the module from the physical layer, so that the illegally replaced module is completely disabled due to the failure to pass the verification.

[0025] In some embodiments, the GPS communication module stores vehicle usage period data, and the background server sends instructions to replace the GPS communication module or change the vehicle usage period to the vehicle controller through the GPS communication module.

[0026] The replace GPS communication module instruction is an instruction to update the pre-stored VIN code in the vehicle controller. The vehicle usage period data refers to the time range information stored in the GPS communication module, which is used to determine whether the vehicle can continue to be used based on the locally stored period data when the GPS communication module is disconnected from the background server. The instruction to change the vehicle usage period is a configuration command sent by the background server to the vehicle controller through an encrypted communication link, which can be implemented by using HTTPS protocol or TLS encrypted channel to transmit the instruction content, ensuring that the instruction cannot be tampered with or forged during transmission.

[0027] Specifically, the GPS communication module internally pre-stores vehicle usage period data, which is read and verified by the vehicle controller when the vehicle starts. When the background server needs to adjust the usage period, it sends an update instruction to the GPS communication module through an encrypted communication link, which is forwarded to the vehicle controller by the GPS communication module. The vehicle controller decrypts and verifies the instruction and writes the updated period data to the storage unit of the GPS communication module. In the case of disconnection between the GPS communication module and the background server, the vehicle controller directly reads the locally stored period data, and if the current time exceeds the period range, the vehicle locking mechanism is triggered.

[0028] Through the technical solution, the application can still automatically trigger the lock operation according to the preset period when the GPS communication module is offline, and avoid illegal use; the background server can remotely adjust the use period through an encrypted channel, meet the demand of flexible extension or termination of the vehicle use permission in the leasing scene, and prevent the vehicle abuse problem caused by malicious tampering of the period data.

[0029] In some embodiments, when the use period of the vehicle expires, if the vehicle control unit does not receive the instruction for extending the use period of the vehicle sent by the background server through the GPS communication module, the vehicle control unit controls the vehicle to lock. Wherein, the lock means that the vehicle control unit limits the power output of the vehicle. The instruction for extending the use period of the vehicle means an operation instruction for updating the time threshold data stored in the GPS communication module.

[0030] Specifically, when the GPS communication module detects that the current time exceeds the preset use period and the background server does not send the instruction for extending the use period of the vehicle to the vehicle control unit through the GPS communication module, the vehicle control unit directly controls the vehicle to lock according to the preset program, so that the vehicle loses the driving ability. If the user or the lessee confirms that the use period needs to be extended, the background server generates an encrypted instruction package containing new period data, the GPS communication module decrypts and updates the internal stored period information, and sends a verification success signal to the vehicle control unit to maintain the normal running state of the vehicle. The process relies on the dynamic key encryption mechanism to ensure the safety of the instruction transmission, and prevents illegal tampering or forgery of the control instruction.

[0031] Through the technical solution, the application effectively solves the problem of illegal occupation after the lease vehicle expires, and the forced lock function directly blocks the vehicle running, while providing a remotely updateable period management mechanism. For example, in the equipment leasing scene in remote mining areas, even if the GPS signal is interrupted, the locally stored period data can still trigger automatic locking; when the lessee completes the renewal, the background can send a delay instruction to restore the use of the equipment, avoiding production interruption caused by communication delay.

[0032] In some embodiments, when the VIN code verification of the GPS communication module fails, the vehicle control unit controls the vehicle to lock; when the GPS communication module needs to be replaced and the replacement is completed, the background server sends a replacement GPS communication module instruction to the vehicle control unit through the GPS communication module to update the pre-stored VIN code in the vehicle control unit, so that it matches the replaced GPS communication module.

[0033] Specifically, when the VIN code verification of the GPS communication module fails, it indicates that there is illegal replacement or tampering behavior, at this time the vehicle control unit directly controls the vehicle to be locked according to the preset program, so that the vehicle immediately enters an inoperable state. When the GPS communication module needs to be replaced due to failure, damage or other reasons and after replacement, the background server sends a GPS communication module replacement instruction to the vehicle control unit through the GPS communication module and synchronously updates the pre-stored VIN code in the vehicle control unit, so as to match the replaced GPS communication module.

[0034] Through the above technical solution, the present application effectively prevents the illegal GPS module from persisting in the vehicle system, ensures that the tampered device cannot evade detection by repeated installation. At the same time, through the automatic instruction issuing mechanism, the risk disposal time is shortened, and secondary safety hazards caused by manual response delay are avoided. The scheme can still maintain the safety policy through the preset instruction logic in the offline environment, and guarantees the continuous protection capability of the vehicle management system.

[0035] In some embodiments, if the GPS communication module is not connected with the background server, the vehicle control unit can check the vehicle use period data saved in the GPS communication module, if it is still within the vehicle use period, the vehicle can be normally used, if it is not within the vehicle use period, the vehicle is automatically locked.

[0036] Among them, the vehicle control unit can check the vehicle use period data saved in the GPS communication module means that the controller directly accesses the module storage unit through the hardware interface. The vehicle is automatically locked means that the vehicle operation is blocked by cutting off the power supply of the power system or limiting the output of the control signal, for example, sending a locking instruction to the engine ECU after detecting the overdue state, so that the vehicle enters an inoperable state.

[0037] Specifically, when the GPS communication module cannot connect to the background server due to network signal loss or human shielding, the vehicle control unit accesses the internal storage of the module through the preset communication interface and reads the encrypted vehicle use period data. The data has been updated by the background server and stored in the module. After the controller decrypts the encrypted data, it compares the current system time with the use period: if the current time is within the range of the starting date to the ending date, the normal power supply of the vehicle power system is maintained; if the current time exceeds the ending date, a preset locking program is triggered, for example, cutting off the power supply of the fuel pump or prohibiting the steering assist system to work. The process is completely completed locally without relying on cloud communication, and the period data is prevented from being tampered through the encryption storage and dynamic verification mechanism.

[0038] Through the technical solution, the application realizes autonomous permission management of the vehicle based on the locally stored data in a network interruption environment, ensures normal operation of the vehicle within a legal use period, and simultaneously accurately blocks overuse behavior. Specifically, in a network unavailable scenario, an offline verification mechanism is used to avoid work interruption caused by false locking of the vehicle; in a scenario where GPS communication is manually shielded, locally stored encrypted time limit data is used to maintain reliability of permission judgment; and in an overuse scenario, hardware level locking control is used to effectively prevent illegal operation.

[0039] Other configurations and operations of the GPS anti-disassembly, anti-shielding and anti-cracking vehicle management method according to the embodiments of the application are known to those skilled in the art, and are not described in detail here.

[0040] In the description of the present specification, the description of the terms "one embodiment", "some embodiments", "an example", "a specific example", or "some examples" and the like means that the specific features, structures, materials or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present application. In the present specification, the illustrative description of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any appropriate manner in any one or more embodiments or examples. In addition, those skilled in the art can combine and combine the different embodiments or examples described in the present specification and the features of the different embodiments or examples without contradiction.

[0041] Although the embodiments of the present application have been shown and described, those skilled in the art can understand that various changes, modifications, replacements and variations can be made to the embodiments without departing from the principles and spirit of the present application, and the scope of the present application is defined by the claims and their equivalents.

Claims

1. A GPS anti-tampering, anti-shielding and anti-hacking vehicle management method, characterized in that, Comprise: Background server, GPS communication module and vehicle controller, the GPS communication module and the background server and the vehicle controller are respectively communicated connection, the vehicle controller reports its state to the background server through the GPS communication module, the background server issues an order to the vehicle controller through the GPS communication module; Every time the vehicle starts, the vehicle controller will send a message with a new dynamic key to the GPS communication module, and the dynamic key is encrypted by public key; The GPS communication module receives the message and decrypts the message to obtain the dynamic key, and the subsequent data message between the vehicle controller and the GPS communication module is encrypted using the dynamic key.

2. The GPS anti-tampering, anti-shielding and anti-hacking vehicle management method according to claim 1, characterized in that, The GPS communication module is provided with VIN code, when the GPS communication module obtains the dynamic key, it will first send the VIN code message encrypted by the dynamic key to the vehicle controller, the vehicle controller receives the VIN code message and decrypts it to obtain the VIN code, the vehicle controller verifies the VIN code, if it passes, the user obtains the use permission of the vehicle, if not, the user cannot use the vehicle.

3. The GPS anti-tampering, anti-shielding and anti-hacking vehicle management method according to claim 2, characterized in that, The GPS communication module saves the vehicle use period data, and the background server issues a command to the vehicle controller through the GPS communication module to replace the GPS communication module or change the vehicle use period.

4. The GPS anti-tampering, anti-shielding and anti-hacking vehicle management method according to claim 3, characterized in that, When the use period of the vehicle expires, if the vehicle controller does not receive the instruction to extend the use period of the vehicle sent by the background server through the GPS communication module, the vehicle controller controls the vehicle to lock.

5. The GPS anti-tampering, anti-shielding and anti-hacking vehicle management method according to claim 3, characterized in that, When the VIN code of the GPS communication module is not verified, the vehicle controller controls the vehicle to lock; when the GPS communication module needs to be replaced and is replaced, the background server sends a GPS communication module replacement instruction to the vehicle controller through the GPS communication module to update the pre-stored VIN code in the vehicle controller, so as to match the replaced GPS communication module.

6. The GPS anti-tampering, anti-shielding and anti-hacking vehicle management method according to claim 3, characterized in that, If the GPS communication module is not connected with the background server, the vehicle controller can check the vehicle use period data saved in the GPS communication module, if it is still within the vehicle use period, the vehicle can be used normally, if it is not within the vehicle use period, the vehicle is automatically locked.

Images