Key full life cycle management method and device for vehicle production

Abstract

The invention relates to the technical field of vehicle production, in particular to a key full life cycle management method and device for vehicle production, and the method comprises the steps: verifying and scanning identification information and identification information in a vehicle interface in the production process of a vehicle, so as to construct a communication channel between an information safety management and control platform connected with the vehicle; requesting a secret key of the vehicle, and filling the secret key into an electronic control unit of the vehicle after the secret key is successfully requested; and reading an actual key in the electronic control unit of the vehicle filled with the key, and comparing whether the actual key is consistent with the key so as to update key management information of the information security management and control platform according to comparison information of the actual key and the key. Therefore, the problems that in the related technology, the vehicle secret key generally lacks a safe and reliable storage strategy and an effective encryption means, secret key wrong filling and secret key missing filling are easily caused by misoperation or randomness, and the strict requirements of modern vehicle production for safety and efficiency cannot be met are solved.

Description

Technical Field

[0001] This application relates to the field of vehicle production technology, and in particular to a method and apparatus for key lifecycle management in vehicle production. Background Technology

[0002] In related technologies, during the key management process of vehicle production, vehicle keys are generally stored in plaintext on ordinary servers or terminals, and there is no strict identity authentication mechanism for the production line equipment involved in the distribution. Any connected device can obtain the key. In addition, the process of filling the key into the vehicle also relies heavily on manual operation or simple script execution.

[0003] However, in related technologies, vehicle keys generally lack secure and reliable storage strategies, which may lead to keys being obtained by unauthorized devices. Furthermore, the keys lack effective encryption methods during the storage stage, and the filling process is opaque, difficult to audit, and relies on manual operation. This makes it easy for keys to be filled incorrectly or missed due to operational errors or arbitrariness, or even for the same key to be reused. This lack of standardized and automated processes not only severely restricts production efficiency but also causes the keys to lose effective control at the end of their entire life cycle, failing to meet the stringent safety and efficiency requirements of modern vehicle production, and urgently needs to be addressed. Summary of the Invention

[0004] This application provides a method and apparatus for key lifecycle management in vehicle production, addressing the problems in related technologies, such as the general lack of secure and reliable storage strategies for vehicle keys, which leads to the possibility of keys being obtained by unauthorized devices; the lack of effective encryption methods during key storage; the opaque and difficult-to-audit filling process, which relies on manual operation and is prone to errors or omissions due to operational mistakes or arbitrariness. This not only severely restricts production efficiency but also causes the keys to lose effective control at the end of the entire lifecycle, failing to meet the stringent safety and efficiency requirements of modern vehicle production.

[0005] The first aspect of this application provides a key lifecycle management method for vehicle production, comprising the following steps: during the vehicle production process, acquiring the vehicle's scanning identification information and verifying whether the scanning identification information is consistent with the identification information in the vehicle interface, so as to establish a communication channel between the information security management platform connected to the vehicle if the scanning identification information is consistent with the identification information; based on the communication channel, requesting the vehicle's key, and after the key request is successful, loading the key into the vehicle's electronic control unit; reading the actual key in the vehicle's electronic control unit after the key is loaded, and comparing whether the actual key is consistent with the key, so as to update the key management information of the information security management platform according to the comparison information of the actual key and the key.

[0006] Through the above technical means, the embodiments of this application can ensure that only authorized devices can participate in key distribution by enforcing identity authentication of the distribution device, thus preventing the illegal acquisition of keys from the source. Secondly, by adopting a secure storage encryption strategy, the confidentiality of keys is achieved during static storage, avoiding the exposure of keys to risks in plaintext form. Finally, by establishing a standardized and automated production line filling process, personnel are freed from tedious operations, which not only greatly improves production efficiency but also completely eliminates security and quality problems caused by human error. This achieves controllability, auditability, and standardization of keys in the filling process, ultimately forming a secure closed loop covering the entire lifecycle of key storage, distribution, and filling.

[0007] Optionally, in one embodiment of this application, the construction of a communication channel between the information security management platform and the vehicle includes: constructing a session key between the information security management platform and the platform based on the digital certificate of the platform; and constructing a communication channel between the platform and the platform based on the session key.

[0008] Through the above technical means, the embodiments of this application can identify the identities of both parties based on the digital certificate of the information security management platform and the digital certificate of the handheld electric inspection device, thereby negotiating a session key to build an end-to-end encrypted secure channel, thus effectively ensuring the security of information transmission.

[0009] Optionally, in one embodiment of this application, requesting the vehicle's key based on the communication channel includes: verifying the integrity of the requested parameters, the legality of the service, the legality of the device identity, and the repetition of the request; and requesting the vehicle's key if the verification of the integrity of the parameters, the legality of the service, the legality of the device identity, and the repetition of the request is successful.

[0010] Through the above technical means, the embodiments of this application can verify parameter integrity, business legality, device identity legality, and application duplication, and form a defense-in-depth system in combination with two-way authentication at the transport layer. This can not only completely avoid security risks in identity and device authentication, but also ensure that key management requests are compliant and standardized, avoid key chaos caused by duplicate applications, and build a full-process security defense for subsequent key interaction.

[0011] Optionally, in one embodiment of this application, the method further includes: encrypting the key using the built-in password card of the server of the information security management platform; storing the ciphertext of the encryption process in the active key pool; and clearing the plaintext key from the server memory, so as to load the key into the electronic control unit of the vehicle.

[0012] Through the above technical means, the embodiments of this application can apply for a key from the handheld electric inspection device to the information security management and control platform. After the information security management and control platform successfully applies for and receives the key from VSTC, it immediately encrypts the key with the platform master key through the built-in hardware cryptographic card of the information security management and control platform's server. The ciphertext is stored in the active key pool and the plaintext is promptly cleared from memory. Thus, by relying on the high security features of the hardware cryptographic card to ensure the security of the key encryption process, and by combining ciphertext storage with timely plaintext clearing, the risk of key leakage is effectively avoided, achieving the highest security level of static key storage. At the same time, it ensures that the key can be securely retrieved later, building a solid security defense for the entire life cycle of business keys.

[0013] Optionally, in one embodiment of this application, updating the key management information of the information security management platform based on the comparison information of the actual key and the key includes: when the actual key and the key are the same and the actual key is not invalid information, updating the final status of the key in the active key pool to "key filling successful"; when the actual key and the key are not the same or the actual key is invalid information, updating the final status of the key in the active key pool to "key verification failed".

[0014] Through the above technical means, the embodiments of this application can locally verify the consistency and validity of the vehicle-side ECU key and the key issued by the platform after the key is loaded into the vehicle's electronic control unit. After the result is uploaded, the information security management platform updates the final status of the key and marks the business status, realizing closed-loop verification and precise control of the key usage process throughout its entire life cycle. At the same time, it forms an auditable security chain, fully ensuring the safe, compliant and traceable use of the key.

[0015] A second aspect of this application provides a key lifecycle management device for vehicle production, comprising: a construction module, configured to acquire vehicle scanning identification information during vehicle production and verify whether the scanning identification information is consistent with identification information in the vehicle interface, so as to construct a communication channel between the scanning identification information and the information security management platform connected to the vehicle if the scanning identification information is consistent with the identification information; a request module, configured to request the vehicle's key based on the communication channel, and after the key request is successful, to load the key into the vehicle's electronic control unit; and a management module, configured to read the actual key in the vehicle's electronic control unit after the key is loaded, and compare whether the actual key is consistent with the key, so as to update the key management information of the information security management platform according to the comparison information of the actual key and the key.

[0016] Through the above technical means, the embodiments of this application can ensure that only authorized devices can participate in key distribution by enforcing identity authentication of the distribution device, thus preventing the illegal acquisition of keys from the source. Secondly, by adopting a secure storage encryption strategy, the confidentiality of keys is achieved during static storage, avoiding the exposure of keys to risks in plaintext form. Finally, by establishing a standardized and automated production line filling process, personnel are freed from tedious operations, which not only greatly improves production efficiency but also completely eliminates security and quality problems caused by human error. This achieves controllability, auditability, and standardization of keys in the filling process, ultimately forming a secure closed loop covering the entire lifecycle of key storage, distribution, and filling.

[0017] Optionally, in one embodiment of this application, the construction module includes: a first construction unit, configured to construct a session key between the information security management platform and the information security management platform based on the digital certificate of the information security management platform; and a second construction unit, configured to construct a communication channel between the information security management platform and the information security management platform according to the session key.

[0018] Through the above technical means, the embodiments of this application can identify the identities of both parties based on the digital certificate of the information security management platform and the digital certificate of the handheld electric inspection device, thereby negotiating a session key to build an end-to-end encrypted secure channel, thus effectively ensuring the security of information transmission.

[0019] Optionally, in one embodiment of this application, the request module includes: a verification unit, configured to verify the parameter integrity, business validity, device identity validity, and request duplication of the request; and a request unit, configured to request the key of the vehicle if the parameter integrity, business validity, device identity validity, and request duplication are successfully verified.

[0020] Through the above technical means, the embodiments of this application can verify parameter integrity, business legality, device identity legality, and application duplication, and form a defense-in-depth system in combination with two-way authentication at the transport layer. This can not only completely avoid security risks in identity and device authentication, but also ensure that key management requests are compliant and standardized, avoid key chaos caused by duplicate applications, and build a full-process security defense for subsequent key interaction.

[0021] Optionally, in one embodiment of this application, it further includes: an encryption module, used to encrypt the key through the built-in password card of the server of the information security management platform; and a filling module, used to store the ciphertext of the encryption process to the active key pool and clear the plaintext of the key in the server memory, so as to fill the key into the electronic control unit of the vehicle.

[0022] Through the above technical means, the embodiments of this application can apply for a key from the handheld electric inspection device to the information security management and control platform. After the information security management and control platform successfully applies for and receives the key from VSTC, it immediately encrypts the key with the platform master key through the built-in hardware cryptographic card of the information security management and control platform's server. The ciphertext is stored in the active key pool and the plaintext is promptly cleared from memory. Thus, by relying on the high security features of the hardware cryptographic card to ensure the security of the key encryption process, and by combining ciphertext storage with timely plaintext clearing, the risk of key leakage is effectively avoided, achieving the highest security level of static key storage. At the same time, it ensures that the key can be securely retrieved later, building a solid security defense for the entire life cycle of business keys.

[0023] Optionally, in one embodiment of this application, the management module includes: a first update unit, configured to update the final status of the key in the active key pool to "key filling successful" when the actual key and the key are the same and the actual key is not invalid information; and a second update unit, configured to update the final status of the key in the active key pool to "key verification failed" when the actual key and the key are not the same or the actual key is invalid information.

[0024] Through the above technical means, the embodiments of this application can locally verify the consistency and validity of the vehicle-side ECU key and the key issued by the platform after the key is loaded into the vehicle's electronic control unit. After the result is uploaded, the information security management platform updates the final status of the key and marks the business status, realizing closed-loop verification and precise control of the key usage process throughout its entire life cycle. At the same time, it forms an auditable security chain, fully ensuring the safe, compliant and traceable use of the key.

[0025] A third aspect of this application provides an electronic device, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the key lifecycle management method for vehicle production as described in the above embodiments.

[0026] A fourth aspect of this application provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described key lifecycle management method for vehicle production.

[0027] A fifth aspect of this application provides a computer program product, including a computer program that, when executed, is used to implement the above-described key lifecycle management method for vehicle production.

[0028] This application embodiment can establish a communication channel between the information security management platform connected to the vehicle and the vehicle during the vehicle production process, after verifying that the scanned identification information of the vehicle matches the vehicle identification information. This allows the platform to request the vehicle's key and fill it into the vehicle's electronic control unit. Then, the actual key is compared with the key, and the information security management platform manages the key information. This achieves several advantages: First, by introducing mandatory authentication of the distribution device, it ensures that only authorized devices can participate in key distribution, preventing unauthorized key acquisition at the source. Second, by adopting a secure storage encryption strategy, it ensures the confidentiality of the key during static storage, preventing the key from being exposed to risks in plaintext. Even if the data is stolen, it cannot be cracked, greatly improving the security of the key itself. Finally, by establishing a standardized and automated production line filling process, it frees personnel from tedious operations, significantly improving production efficiency and completely eliminating security and quality problems caused by human error. This achieves controllability, auditability, and standardization of the key in the filling process, ultimately forming a secure closed loop covering the entire lifecycle of key storage, distribution, and filling. This solves the problems in related technologies, such as the general lack of secure and reliable storage strategies for vehicle keys, which may lead to keys being obtained by unauthorized devices; the lack of effective encryption methods during key storage; the opaque and difficult-to-audit filling process, which relies on manual operation and is prone to errors or omissions due to operational mistakes or arbitrariness. This not only severely restricts production efficiency but also causes the keys to lose effective control at the end of their entire life cycle, making it impossible to meet the stringent safety and efficiency requirements of modern vehicle production.

[0029] Additional aspects and advantages of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of this application. Attached Figure Description

[0030] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, wherein: Figure 1 This is a flowchart illustrating a key lifecycle management method for vehicle production according to an embodiment of this application; Figure 2 This is a schematic diagram of a key lifecycle management device for vehicle production provided according to an embodiment of this application; Figure 3 This is a schematic diagram of the structure of an electronic device provided according to an embodiment of this application.

[0031] Figure label: 10 - Key lifecycle management device for vehicle production; 100 - Building module, 200 - Request module and 300 - Management module; 301 - Memory, 302 - Processor and 303 - Communication interface. Detailed Implementation

[0032] The embodiments of this application are described in detail below. Examples of these embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain this application, and should not be construed as limiting this application.

[0033] The following describes a method and apparatus for key lifecycle management in vehicle production, based on embodiments of the present application, with reference to the accompanying drawings. Addressing the issues mentioned in the background art, where vehicle keys generally lack secure and reliable storage strategies, potentially leading to keys being obtained by unauthorized devices; and the lack of effective encryption methods during key storage, with opaque and difficult-to-audit filling processes relying on manual operation, making them highly susceptible to errors or omissions due to operational mistakes or arbitrariness, this not only severely restricts production efficiency but also renders the keys uncontrolled at the end of their lifecycle, failing to meet the stringent safety and efficiency requirements of modern vehicle production, the present application provides a key lifecycle management method for vehicle production. In this method, during vehicle production, after verifying the consistency between the vehicle's scanned identification information and the vehicle identification information, a communication channel is established between the method and an information security management platform connected to the vehicle. This allows the method to request the vehicle's key and fill it into the vehicle's electronic control unit. Then, a comparison is performed between the actual key and the key, using the key management information from the information security management platform. Thus, by introducing mandatory identity authentication for distribution devices, it ensures that only authorized devices can participate in key distribution, preventing unauthorized key acquisition at the source. Secondly, by adopting a secure storage encryption strategy, the confidentiality of keys during static storage is ensured, preventing keys from being exposed to risks in plaintext form. Even if the data is stolen, it cannot be cracked, greatly improving the security of the key itself. Finally, by establishing a standardized and automated production line filling process, personnel are freed from tedious operations, which not only significantly improves production efficiency but also completely eliminates security and quality problems caused by human error. This achieves controllability, auditability, and standardization of keys in the filling process, ultimately forming a secure closed loop covering the entire lifecycle of key storage, distribution, and filling. This solves the problems in related technologies, such as the general lack of secure and reliable storage strategies for vehicle keys, which may lead to keys being obtained by unauthorized devices; the lack of effective encryption methods during key storage; the opaque and difficult-to-audit filling process, which relies on manual operation and is prone to errors or omissions due to operational mistakes or arbitrariness. This not only severely restricts production efficiency but also causes the keys to lose effective control at the end of their entire life cycle, making it impossible to meet the stringent safety and efficiency requirements of modern vehicle production.

[0034] Specifically, Figure 1 This is a flowchart illustrating a key lifecycle management method for vehicle production, provided as an embodiment of this application.

[0035] like Figure 1 As shown, the key lifecycle management method for vehicle production includes the following steps: In step S101, during the vehicle production process, the vehicle's scanned identification information is acquired, and it is verified whether the scanned identification information is consistent with the identification information in the vehicle interface. If the scanned identification information is consistent with the identification information, a communication channel is established between the information security management platform connected to the vehicle.

[0036] It is understandable that the scanned identification information here refers to the vehicle's VIN (Vehicle Identification Number), a 17-character code, scanned using a handheld electronic inspection device (a portable device specifically designed for reading, verifying, and diagnosing vehicle electronic data, possessing multiple functions such as scanning, communication, and data processing). This unique identification information can be used to identify the vehicle. The information security management platform here can be understood as the central system responsible for security authentication, data encryption, and communication control within the vehicle electronic inspection system. Examples include the monitoring platform of a traffic management department or the production line management platform of an automaker, depending on the specific information security management platform used for the vehicle.

[0037] In some embodiments, considering the numerous problems in vehicle production key management, this application can acquire the vehicle's scanning identification information during the vehicle production process, and after acquiring the information, verify whether the vehicle's scanning identification information scanned by the handheld electronic inspection device is consistent with the identification information in the vehicle interface. In order to establish a communication channel between the handheld electronic inspection device and the information security management platform connected to the vehicle when the vehicle's scanning identification information scanned by the handheld electronic inspection device is consistent with the identification information in the vehicle interface, thereby realizing the construction of a secure communication channel for subsequent key management.

[0038] In this context, the identification information in the vehicle interface refers to the VIN code stored in the vehicle's ECU (Electronic Control Unit) that can be directly read by using a handheld electronic diagnostic device connected to the vehicle's OBD interface (On-Board Diagnostic Interface) via a data cable or wireless communication method.

[0039] Since the VIN code stored in the vehicle ECU is the original VIN code written when the vehicle leaves the factory, the authenticity and accuracy of this VIN code are the highest. By verifying the consistency between the scanned identification information of the vehicle scanned by the handheld electronic inspection device and the identification information in the vehicle interface, the correctness of the vehicle operation can be verified, so that subsequent steps can be carried out when the vehicle operation is accurate.

[0040] This application embodiment can perform dual verification by scanning the VIN code on the outside of the vehicle (obtaining the scanned identification information of the vehicle) and reading the original VIN code stored in the vehicle interface (identification information in the vehicle interface), thereby confirming that the operation object is correct and avoiding certain business risks in the subsequent process due to scanning the wrong vehicle, VIN code tampering, or misoperation, thus ensuring the security foundation for subsequent data interaction and security authentication.

[0041] Optionally, in one embodiment of this application, constructing a communication channel between the information security management platform and the vehicle includes: constructing a session key between the information security management platform and the platform based on the platform's digital certificate; and constructing a communication channel between the platform and the platform based on the session key.

[0042] As those skilled in the art will understand, vehicle key management is usually issued and managed by an information security management platform. Therefore, in this application embodiment, a communication channel can be established between the handheld electric inspection device and the information security management platform when it is verified that the scanning identification information of the vehicle scanned by the handheld electric inspection device is consistent with the identification information of the vehicle interface.

[0043] In actual implementation, this application also requires certain authentication when constructing the communication channel between the handheld electric inspection device and the information security management platform.

[0044] Specifically, the embodiments of this application can perform identity authentication based on the digital certificate of the information security management platform. For example, based on the digital certificate of the information security management platform and combined with the digital certificate of the handheld electric inspection device, two-way identity authentication is performed at the beginning of the communication between the handheld electric inspection device and the information security management platform. That is, the identity of the information security management platform is authenticated while the identity of the handheld electric inspection device is also authenticated. When both identities are verified, the two can negotiate a session key, thereby establishing an end-to-end encrypted security channel for all subsequent data transmissions.

[0045] This application embodiment can identify the identities of both parties based on the digital certificates of the information security management platform and the handheld electric inspection device, thereby negotiating a session key to build an end-to-end encrypted secure channel, thus effectively ensuring the security of information transmission.

[0046] Step S102: Based on the communication channel, request the vehicle's key, and after the key request is successful, load the key into the vehicle's electronic control unit.

[0047] In other embodiments, after establishing a communication channel between the handheld electronic inspection device and the information security management platform connected to the vehicle, this application can, based on the established communication channel, have the handheld electronic inspection device request the vehicle's key from the information security management platform connected to the vehicle, and then, after the key request is successful, have the key loaded into the vehicle's electronic control unit through the handheld electronic inspection device.

[0048] For example, a handheld electronic inspection device can initiate a key management request to an information security management platform connected to the vehicle through a completed communication channel. After receiving the key management request from the handheld electronic inspection device, the information security management platform can perform business authentication and verification on the key management request. After successful business authentication and verification, the platform will issue the vehicle's key to the handheld electronic inspection device so that the key can be loaded into the vehicle's electronic control unit through the handheld electronic inspection device.

[0049] In this embodiment, after establishing a communication channel between the handheld electronic inspection device and the information security management platform connected to the vehicle, the handheld electronic inspection device requests the vehicle's key from the information security management platform through the communication channel, receives the key through the communication channel, and then loads the key into the vehicle's electronic control unit, effectively ensuring the confidentiality and security of the key during transmission.

[0050] Optionally, in one embodiment of this application, requesting the vehicle's key based on the communication channel includes: verifying the integrity of the requested parameters, the legality of the service, the legality of the device identity, and the repetition of the request; and requesting the vehicle's key if the verification of parameter integrity, service legality, device identity legality, and request repetition is successful.

[0051] Based on the descriptions of other embodiments, it is understood that this application can request the vehicle's key from the information security management platform connected to the vehicle through a constructed secure communication channel. After receiving the key management request from the handheld electronic inspection device, the information security management platform will verify the key management request.

[0052] In some embodiments, the authentication and verification of key management requests in this application includes, but is not limited to, verifying the integrity of the parameters of the key management request, the legality of the business, the legality of the device identity, and the repetition of the request.

[0053] For example, after successful identity verification and the establishment of a secure communication channel between the handheld electric inspection device and the information security management platform, the handheld electric inspection device can initiate a key management request to the information security management platform. Upon receiving the request, the information security management platform will sequentially perform the following business layer authentication and verification: (1) Parameter integrity verification: that is, checking whether the necessary parameters in the key management request are complete; (2) Business legality verification: The information security management platform verifies whether the VIN code of the vehicle in the key management request has a valid order and whether the requested key business type is legal by querying the data management platform; (3) Verification of device identity: Check whether the MAC address of the handheld electric inspection device is in the pre-authorized whitelist. This can be combined with step (2) to form a combination of "transmission layer two-way authentication" and "application layer triple verification", which constitutes a defense-in-depth system and completely solves the security risks of identity authentication and device authentication. (4) Request duplicate verification (vehicle duplicate application verification): Determine whether the vehicle has applied for the key repeatedly through the historical application records. If the application is repeated, record the old key as unavailable and apply for a new key for the vehicle.

[0054] After successful verification, the information security management platform can initiate a key application or update request to VSTC (Vehicle Safety Testing Center) through the established secure communication channel. After securely obtaining the key from VSTC, it will be distributed to the handheld electronic testing device, which will then install it into the vehicle's electronic control unit.

[0055] This application embodiment can form a defense-in-depth system by verifying parameter integrity, business legitimacy, device identity legitimacy, and application duplication, combined with two-way authentication at the transport layer. This can not only completely avoid security risks in identity and device authentication, but also ensure that key management requests are compliant and standardized, avoid key chaos caused by duplicate applications, and build a full-process security defense for subsequent key interaction.

[0056] Optionally, in one embodiment of this application, the method further includes: encrypting the key using the built-in password card of the information security management platform server; storing the encrypted text of the encryption process in the active key pool; and clearing the plaintext key from the server memory to load the key into the vehicle's electronic control unit.

[0057] In some embodiments, to further enhance the security of key management, this application may further process the key. That is, after the information security management platform successfully requests the key from the VSTC, the key is encrypted by the password card built into the server of the information security management platform, and the ciphertext during the encryption process is stored in the active key pool. At the same time, the plaintext key in the server memory is cleared, and then it is sent to the handheld electronic inspection device, which then fills the vehicle's electronic control unit.

[0058] Specifically, upon receiving the key, the information security management platform can immediately access the hardware cryptographic card built into its server and encrypt the business key using the protected platform master key stored on the card. The encrypted ciphertext is securely stored in the active key pool, while the plaintext key can be promptly cleared from the server's temporary memory. Because the hardware cryptographic card possesses physical tamper-proof features, it ensures that the master key cannot be exported or leaked.

[0059] This application embodiment allows the handheld electrical inspection device to apply for a key from the information security management platform. After the information security management platform successfully applies for and receives the key from the VSTC, it immediately encrypts the key using the platform's master key via the platform's built-in hardware cryptographic card on the server. The ciphertext is stored in the active key pool, and the plaintext is promptly removed from memory. This approach effectively avoids the risk of key leakage by leveraging the high security features of the hardware cryptographic card and combining ciphertext storage with timely plaintext removal. It achieves the highest level of security for static key storage and ensures that the key can be securely retrieved later, thus building a solid security defense for the entire lifecycle of business keys.

[0060] Step S103: Read the actual key in the vehicle's electronic control unit after key filling, and compare the actual key with the key to see if they match, so as to update the key management information of the information security management platform based on the actual key and the key comparison information.

[0061] In other embodiments, after the handheld electronic testing device feeds the key into the vehicle's electronic control unit, in order to ensure that the handheld electronic testing device successfully feeds the key into the vehicle's electronic control unit and that the vehicle successfully receives the key fed into the handheld electronic testing device, this application may perform further key verification.

[0062] Specifically, this application embodiment can read the actual key in the vehicle's electronic control unit after the key is filled, and then compare the actual key in the vehicle's current electronic control unit with the key issued by the information security management platform through a constructed secure communication channel. Based on the comparison result between the actual key and the key issued by the information security management platform, feedback is sent to the information security management platform through the constructed secure communication channel, thereby updating the key and management information in the information security management platform.

[0063] This application embodiment can compare the consistency between the actual key in the vehicle ECU and the key issued by the platform through a secure communication channel. Based on the comparison result, the platform key and management information are updated. This can not only accurately verify the consistency of keys and avoid business security risks caused by key mismatch, but also synchronize platform key data in real time, ensuring the accuracy and security of the key throughout its entire life cycle, and laying a solid foundation for key security for subsequent vehicle electronic testing and other businesses.

[0064] Optionally, in one embodiment of this application, the key management information of the information security management platform is updated based on the actual key and the key comparison information, including: when the actual key and the key are the same and the actual key is not invalid information, the final status of the key in the active key pool is updated to key filling successful; when the actual key and the key are different or the actual key is invalid information, the final status of the key in the active key pool is updated to key verification failed.

[0065] In actual implementation, when updating the key management information of the information security management platform based on the comparison information between the actual key in the vehicle ECU and the key issued by the information security management platform, this application can update the final key status of the active key pool in the information security management platform to "key filling successful" if the actual key in the vehicle ECU and the key in the information security management platform are the same and the information of the actual key is not invalid.

[0066] If the actual key in the vehicle ECU is inconsistent with the key in the information security management platform, or if the actual key is invalid, this application embodiment can update the final key status of the active key pool in the information security management platform to key verification failure.

[0067] Specifically, if the handheld electronic inspection device determines that the actual key read from the vehicle's electronic control unit is consistent with the key issued by the information security management platform and is not invalid, the handheld electronic inspection device can upload the verification result (success) to the information security management platform through a secure communication channel. The information security management platform can update the final status of the corresponding key in the active key pool based on the uploaded verification result, such as "filling successful", and mark the key's business status as "execution completed", thereby updating the vehicle's lifecycle status in the information security management platform.

[0068] If the handheld electronic inspection device determines that the actual key read from the vehicle's electronic control unit is inconsistent with the key in the information security management platform, it can report the verification failure to the information security management platform through a secure communication channel. After receiving the verification failure information from the handheld electronic inspection device, the information security management platform can mark the key's business status as "abnormal", thereby completing the closed-loop verification of the key usage process and the final confirmation of the full life cycle status, forming an auditable security chain.

[0069] This application embodiment can locally verify the consistency and validity of the vehicle-side ECU key and the key issued by the platform after the key is loaded into the vehicle's electronic control unit. After the result is uploaded, the information security management platform updates the final status of the key and marks the business status, realizing closed-loop verification and precise management of the key usage process throughout its entire life cycle. At the same time, it forms an auditable security chain, fully ensuring the safe, compliant and traceable use of the key.

[0070] According to the key lifecycle management method for vehicle production proposed in this application, during the vehicle production process, after verifying that the vehicle's scanned identification information matches the vehicle identification information, a communication channel is established between the information security management platform connected to the vehicle. This allows the platform to request the vehicle's key and fill it into the vehicle's electronic control unit. Then, the actual key is compared with the key, and the information security management platform manages the key information. This achieves several advantages: First, by introducing mandatory authentication of the distribution device, it ensures that only authorized devices can participate in key distribution, preventing unauthorized key acquisition at the source. Second, by adopting a secure storage encryption strategy, it ensures the confidentiality of the key during static storage, preventing the key from being exposed to risks in plaintext form. Even if the data is stolen, it cannot be cracked, greatly improving the security of the key itself. Finally, by establishing a standardized and automated production line filling process, it frees personnel from tedious operations, significantly improving production efficiency and completely eliminating security and quality problems caused by human error. This achieves controllability, auditability, and standardization of the key in the filling process, ultimately forming a secure closed loop covering the entire lifecycle of key storage, distribution, and filling. This solves the problems in related technologies, such as the general lack of secure and reliable storage strategies for vehicle keys, which may lead to keys being obtained by unauthorized devices; the lack of effective encryption methods during key storage; the opaque and difficult-to-audit filling process, which relies on manual operation and is prone to errors or omissions due to operational mistakes or arbitrariness. This not only severely restricts production efficiency but also causes the keys to lose effective control at the end of their entire life cycle, making it impossible to meet the stringent safety and efficiency requirements of modern vehicle production.

[0071] Next, referring to the accompanying drawings, a key lifecycle management device for vehicle production is described according to an embodiment of this application.

[0072] Figure 2 This is a schematic diagram of the key lifecycle management device for vehicle production according to an embodiment of this application.

[0073] like Figure 2 As shown, the key lifecycle management device 10 for vehicle production includes: a construction module 100, a request module 200, and a management module 300.

[0074] The system includes a construction module 100, which acquires the vehicle's scanned identification information during the vehicle's production process and verifies whether the scanned identification information matches the identification information in the vehicle's interface. If the scanned identification information matches the identification information, a communication channel is established between the information security management platform connected to the vehicle. The request module 200 requests the vehicle's key based on the communication channel and, upon successful key request, installs the key into the vehicle's electronic control unit. The management module 300 reads the actual key in the vehicle's electronic control unit after the key has been installed and compares whether the actual key matches the key. Based on the comparison information, the management module updates the key management information of the information security management platform.

[0075] Optionally, in one embodiment of this application, the construction module 100 includes: a first construction unit, used to construct a session key between the information security management platform and the information security management platform based on the digital certificate of the information security management platform; and a second construction unit, used to construct a communication channel between the information security management platform and the information security management platform according to the session key.

[0076] Optionally, in one embodiment of this application, the request module 200 includes: a verification unit for verifying the integrity of the request parameters, the legality of the business, the legality of the device identity, and the repetition of the request; and a request unit for requesting the vehicle's key if the verification of the integrity of the parameters, the legality of the business, the legality of the device identity, and the repetition of the request is successful.

[0077] Optionally, in one embodiment of this application, it further includes: an encryption module for encrypting the key using the built-in password card of the server of the information security management platform; and a filling module for storing the ciphertext of the encryption process in the active key pool and clearing the plaintext of the key in the server memory, so as to fill the key into the vehicle's electronic control unit.

[0078] Optionally, in one embodiment of this application, the management module 300 includes: a first update unit, configured to update the final status of the key in the active key pool to key filling success when the actual key and the key are the same and the actual key is not invalid information; and a second update unit, configured to update the final status of the key in the active key pool to key verification failure when the actual key and the key are different or the actual key is invalid information.

[0079] It should be noted that the foregoing explanation of the key lifecycle management method embodiment for vehicle production also applies to the key lifecycle management device for vehicle production in this embodiment, and will not be repeated here.

[0080] According to the embodiments of this application, the key lifecycle management device for vehicle production can establish a communication channel with the information security management platform connected to the vehicle during the vehicle production process, after verifying that the scanned identification information of the vehicle matches the vehicle identification information. This allows the device to request the vehicle's key and fill it into the vehicle's electronic control unit. Then, the actual key is compared with the key, and the information security management platform manages the key information. This achieves several advantages: First, by introducing mandatory authentication of the distribution device, it ensures that only authorized devices can participate in key distribution, preventing unauthorized key acquisition at the source. Second, by adopting a secure storage encryption strategy, it ensures the confidentiality of the key during static storage, preventing the key from being exposed to risks in plaintext form. Even if the data is stolen, it cannot be cracked, greatly improving the security of the key itself. Finally, by establishing a standardized and automated production line filling process, it frees personnel from tedious operations, significantly improving production efficiency and completely eliminating security and quality problems caused by human error. This achieves controllability, auditability, and standardization of the key in the filling process, ultimately forming a secure closed loop covering the entire lifecycle of key storage, distribution, and filling. This solves the problems in related technologies, such as the general lack of secure and reliable storage strategies for vehicle keys, which may lead to keys being obtained by unauthorized devices; the lack of effective encryption methods during key storage; the opaque and difficult-to-audit filling process, which relies on manual operation and is prone to errors or omissions due to operational mistakes or arbitrariness. This not only severely restricts production efficiency but also causes the keys to lose effective control at the end of their entire life cycle, making it impossible to meet the stringent safety and efficiency requirements of modern vehicle production.

[0081] Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of this application. The electronic device may include: The memory 301, the processor 302, and the computer program stored on the memory 301 and capable of running on the processor 302.

[0082] When the processor 302 executes the program, it implements the key lifecycle management method for vehicle production provided in the above embodiments.

[0083] Furthermore, electronic devices also include: Communication interface 303 is used for communication between memory 301 and processor 302.

[0084] The memory 301 is used to store computer programs that can run on the processor 302.

[0085] The memory 301 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk storage device.

[0086] If the memory 301, processor 302, and communication interface 303 are implemented independently, then the communication interface 303, memory 301, and processor 302 can be interconnected via a bus to complete communication between them. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of representation, Figure 3 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0087] Optionally, in a specific implementation, if the memory 301, processor 302, and communication interface 303 are integrated on a single chip, then the memory 301, processor 302, and communication interface 303 can communicate with each other through an internal interface.

[0088] Processor 302 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of this application.

[0089] This application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described key lifecycle management method for vehicle production.

[0090] This application also provides a computer program product, including a computer program that can run computer instructions. When the computer instructions are executed by a processor, they implement the key lifecycle management method for vehicle production provided in this application.

[0091] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0092] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this application, "N" means at least two, such as two, three, etc., unless otherwise explicitly specified.

[0093] Any process or method described in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or N executable instructions for implementing custom logic functions or processes, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as should be understood by those skilled in the art to which embodiments of this application pertain.

[0094] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of computer-readable media include: an electrical connection having one or more wires (electronic device), a portable computer disk drive (magnetic device), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Alternatively, the computer-readable medium may be paper or other suitable media on which the program can be printed, since the program can be obtained electronically by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in a computer memory.

[0095] It should be understood that the various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, the N steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. If implemented in hardware, as in another embodiment, it can be implemented using any one or more of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0096] Those skilled in the art will understand that all or part of the steps of the methods in the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, the program includes one or a combination of the steps of the method embodiments.

[0097] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0098] The storage medium mentioned above can be a read-only memory, a disk, or an optical disk, etc. Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions, and variations to the above embodiments within the scope of this application.

Claims

1. A method for key lifecycle management in vehicle production, characterized in that, Includes the following steps: During the vehicle production process, the vehicle's scanning identification information is acquired, and the scanning identification information is verified to be consistent with the identification information in the vehicle interface. If the scanning identification information is consistent with the identification information, a communication channel is established between the information security management platform connected to the vehicle. Based on the communication channel, a key for the vehicle is requested, and after the key request is successful, the key is loaded into the vehicle's electronic control unit; The system reads the actual key from the vehicle's electronic control unit after the key has been injected, and compares the actual key with the key to see if they match. Based on the comparison information of the actual key and the key, the system updates the key management information of the information security management platform.

2. The method according to claim 1, characterized in that, The communication channel established between the information security management and control platform connected to the vehicle includes: Based on the digital certificate of the information security management platform, a session key is constructed between the information security management platform and the information security management platform. Based on the session key, a communication channel is established between the system and the information security management platform.

3. The method according to claim 1, characterized in that, The step of requesting the vehicle's key based on the communication channel includes: Verify the completeness of the request parameters, the legality of the business, the legality of the device identity, and the repetition of the request; If the verification of parameter integrity, business validity, device identity validity, and request repeatability is successful, the key of the vehicle is requested.

4. The method according to claim 1, characterized in that, Also includes: The key is encrypted using the built-in password card of the server of the information security management platform; The ciphertext of the encryption process is stored in the active key pool, and the plaintext of the key in the server memory is cleared, so that the key is loaded into the vehicle's electronic control unit.

5. The method according to claim 4, characterized in that, The step of updating the key management information of the information security management platform based on the comparison information between the actual key and the key includes: If the actual key and the key are the same, and the actual key is not invalid information, update the final key status in the active key pool to "key filling successful"; If the actual key and the key are not the same or the actual key is invalid, update the final status of the key in the active key pool to "key verification failed".

6. A key lifecycle management device for vehicle production, characterized in that, include: The construction module is used to acquire the vehicle's scanning identification information during the vehicle's production process and verify whether the scanning identification information is consistent with the identification information in the vehicle's interface, so as to build a communication channel between the information security management platform connected to the vehicle if the scanning identification information is consistent with the identification information. The request module is used to request the key of the vehicle based on the communication channel, and after the key request is successful, to load the key into the electronic control unit of the vehicle; The management module is used to read the actual key in the vehicle's electronic control unit after the key is filled, and compare whether the actual key is consistent with the key, so as to update the key management information of the information security management platform based on the comparison information of the actual key and the key.

7. The apparatus according to claim 6, characterized in that, The building module includes: The first construction unit is used to construct a session key with the information security management platform based on the digital certificate of the information security management platform. The second construction unit is used to construct a communication channel with the information security management platform based on the session key.

8. An electronic device, characterized in that, include: A memory, a processor, and a computer program stored in the memory and executable on the processor, the processor executing the program to implement the key lifecycle management method for vehicle production as described in any one of claims 1-5.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, The program is executed by the processor to implement the key lifecycle management method for vehicle production as described in any one of claims 1-5.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed, it is used to implement the key lifecycle management method for vehicle production as described in any one of claims 1-5.

Images