Information acquisition method, device, equipment, storage medium and program product
By using SMS service network and dynamic key encryption technology, the security issues of vehicle information during cloud transmission are solved, and the secure transmission and storage of user credential information are achieved.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-20
- Publication Date
- 2026-06-23
AI Technical Summary
When the vehicle's infotainment system accesses the cloud, the identity credentials can be easily obtained by third parties during transmission, which reduces the security of the vehicle's information.
User credential information is transmitted via SMS through the SMS service network. The initial SMS message is encrypted using a dynamic key to generate an encrypted SMS message. The correspondence between the encrypted dynamic key and the communication identification information of the vehicle terminal is stored in the cloud. The vehicle terminal decrypts the message to obtain the user credential information.
This improves the security of user credentials during transmission, reduces the risk of leakage, and enhances the security of vehicle information.
Smart Images
Figure CN122269228A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of electronic information technology, and in particular to an information acquisition method, apparatus, device, storage medium, and program product. Background Technology
[0002] Currently, to improve the security of in-vehicle infotainment system information, in-vehicle systems need to verify their identity using identity credentials (JWT, JSON Web Token) when accessing the cloud. Upon successful authentication, the cloud provides the corresponding services to the in-vehicle system. In related technologies, the in-vehicle system needs to send a credential request to the cloud to obtain the identity credentials, and the cloud returns the identity credentials to the in-vehicle system via an interface. However, the problem with this solution is that the identity credentials sent from the cloud to the in-vehicle system can be easily obtained by third parties, leading to credential leakage and thus reducing the security of the in-vehicle system information. Summary of the Invention
[0003] One objective of this application is to provide an information acquisition method that has the advantage of sending user credential information to the vehicle terminal via SMS, thereby improving the data encryption security of the SMS channel through the SMS service network and thus enhancing the security of the distributed user credential information.
[0004] One objective of this application is to provide an information acquisition method that, by associating vehicle identification information with device identification information of the communication module, verifies the identity of the in-vehicle terminal. This allows for the generation of user credential information upon successful authentication of the in-vehicle terminal, thereby improving the security of the generated user credential information.
[0005] One objective of this application is to provide an information acquisition method with the advantage of first generating user credential information in the cloud and then generating an initial SMS message based on the user credential information; then, encrypting the initial SMS message using a preset first encryption method with a dynamic key to obtain an encrypted SMS message; finally, generating an SMS message using the communication identification information of the vehicle terminal and the encrypted SMS message. This allows the SMS service network to extract the encrypted SMS message in a ciphertext state from the SMS message, thereby reducing the probability of the SMS service network leaking user credential information and improving the security of sending user credential information.
[0006] One objective of this application is to provide an information acquisition method. Its advantage lies in that the cloud, by storing the correspondence between encrypted dynamic keys and the communication identification information of the vehicle-mounted terminal, can determine the dynamic key of the vehicle-mounted terminal based on its communication identification information when the vehicle-mounted terminal needs to obtain a dynamic key. Thus, when the vehicle-mounted terminal needs to obtain a dynamic key, the cloud can accurately retrieve the corresponding dynamic key from multiple correspondences using the vehicle-mounted terminal's communication identification information.
[0007] One objective of this application is to provide an information acquisition method. Its advantage lies in sending an encrypted dynamic key from the cloud to the vehicle-mounted terminal, allowing the vehicle-mounted terminal to decrypt the encrypted dynamic key and obtain the dynamic key itself. Finally, using a first encryption method, the encrypted SMS message is decrypted using the dynamic key to obtain an initial SMS message containing user credential information. Because the dynamic key remains in encrypted form during communication between the vehicle-mounted terminal and the cloud, the risk of leakage is reduced, thereby improving the security of user credential information.
[0008] One objective of this application is to provide an information acquisition method that has the advantage of further reducing the risk of user credential information being leaked during the process of the SMS service network sending user credential information to the vehicle terminal by encrypting the initial SMS message, thereby improving the security of the vehicle terminal in acquiring user credential information.
[0009] One objective of this application is to provide an information acquisition method. Its advantage lies in that the vehicle-mounted terminal obtains an encrypted dynamic key through interaction with the cloud, and then uses a first encryption method to decrypt the encrypted SMS message using the dynamic key to obtain an initial SMS message containing user credential information. Because the dynamic key is in an encrypted state during communication between the vehicle-mounted terminal and the cloud, the risk of leakage is reduced, thereby improving the security of user credential information.
[0010] One objective of this application is to provide an information acquisition method, the advantage of which is that by encrypting user credential information through a vehicle interconnection module, the user credential information can be kept in an encrypted state, thereby reducing the risk of leakage of user credential information and improving the security of storing user credential information.
[0011] To achieve the aforementioned objective, the technical solution of this application embodiment is implemented as follows:
[0012] In a first aspect, embodiments of this application provide an information acquisition method, including:
[0013] In response to a first request for obtaining user credential information sent by the vehicle terminal, the vehicle terminal is authenticated.
[0014] Upon successful authentication of the vehicle-mounted terminal, an SMS message is generated and sent to the SMS service network; the SMS message carries the user credential information and the communication identification information of the vehicle-mounted terminal.
[0015] The SMS service network is used to send the user credential information to the vehicle terminal via SMS using the communication identification information of the vehicle terminal.
[0016] Secondly, embodiments of this application provide an information acquisition method, including:
[0017] In response to the login operation of the vehicle terminal, a first request for obtaining user credential information is sent to the cloud;
[0018] Receive user credentials information sent by the SMS service network;
[0019] The user credential information is sent by the SMS service network via the communication identification information of the vehicle terminal through an SMS message; the communication identification information of the vehicle terminal is sent to the SMS service network via an SMS message; the SMS message is generated when the vehicle terminal's identity verification is successful.
[0020] Thirdly, embodiments of this application provide an information acquisition device, including:
[0021] The verification module is used to verify the identity of the vehicle terminal in response to the first request for obtaining user credential information sent by the vehicle terminal.
[0022] The generation module is used to generate an SMS message and send the SMS message to the SMS service network when the vehicle terminal's authentication is successful; the SMS message carries the user credential information and the communication identification information of the vehicle terminal.
[0023] The SMS service network is used to send the user credential information to the vehicle terminal via SMS using the communication identification information of the vehicle terminal.
[0024] Fourthly, embodiments of this application provide an information acquisition device, including:
[0025] The vehicle connectivity module is used to respond to the login operation of the in-vehicle terminal by sending a first request to the cloud for obtaining user credential information;
[0026] The communication module is used to receive user credential information sent by the SMS service network;
[0027] The user credential information is sent by the SMS service network via the communication identification information of the vehicle terminal through an SMS message; the communication identification information of the vehicle terminal is sent to the SMS service network via an SMS message; the SMS message is generated when the vehicle terminal's identity verification is successful.
[0028] Fifthly, embodiments of this application provide a computer device, including: a memory for storing executable instructions; and a processor for implementing the method provided in the above embodiments when executing the executable instructions stored in the memory.
[0029] Sixthly, embodiments of this application provide a computer-readable storage medium storing executable instructions, which, when executed by a processor, implement the method provided in the above embodiments.
[0030] In a seventh aspect, embodiments of this application provide a computer program product, including a computer program or instructions, wherein when the computer program or instructions are executed by a processor, they implement the method provided in the above embodiments.
[0031] It should be understood that the above general description and the following detailed description are merely exemplary and explanatory, and are not intended to limit the technical solutions of this application. Attached Figure Description
[0032] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with this application and, together with the specification, serve to explain the technical solutions of this application.
[0033] Figure 1 A schematic diagram of the implementation process of an information acquisition method provided in this application embodiment. Figure 1 ;
[0034] Figure 2 A schematic diagram of the implementation process of an information acquisition method provided in this application embodiment. Figure 2 ;
[0035] Figure 3 A schematic diagram of the implementation process of an information acquisition method provided in this application embodiment. Figure 3 ;
[0036] Figure 4 A schematic diagram of the implementation process of an information acquisition method provided in this application embodiment. Figure 4 ;
[0037] Figure 5 A schematic diagram of the implementation process of an information acquisition method provided in this application embodiment. Figure 5
[0038] Figure 6A schematic diagram of the implementation process of an information acquisition method provided in this application embodiment. Figure 6 ;
[0039] Figure 7 A schematic diagram of the implementation process of an information acquisition method provided in this application embodiment. Figure 7 ;
[0040] Figure 8 A schematic diagram of the composition structure of an information acquisition device provided in this application embodiment. Figure 1 ;
[0041] Figure 9 A schematic diagram of the composition structure of an information acquisition device provided in this application embodiment. Figure 2 ;
[0042] Figure 10 This is a schematic diagram of the hardware entity of a computer device provided in an embodiment of this application. Detailed Implementation
[0043] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application are further described in detail below with reference to the accompanying drawings and embodiments. The described embodiments should not be regarded as limitations on this application. All other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0044] In the following description, references to "some embodiments" refer to a subset of all possible embodiments. It is understood that "some embodiments" may be the same or different subsets of all possible embodiments and may be combined with each other without conflict. The terms "first / second / third" are used merely to distinguish similar objects and do not represent a specific ordering of objects. It is understood that "first / second / third" may be interchanged in a specific order or sequence where permitted, so that the embodiments of this application described herein can be implemented in an order other than that illustrated or described herein.
[0045] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains. The terminology used herein is for descriptive purposes only and is not intended to limit the scope of this application.
[0046] To address the issue of low security of vehicle information in related technologies, this application provides an information acquisition method that can be executed by the cloud. Figure 1 A schematic diagram of the implementation process of an information acquisition method provided in this application embodiment. Figure 1 ,like Figure 1 As shown, the method includes the following steps S101 and S102:
[0047] Step S101: In response to the first request for obtaining user credential information sent by the vehicle terminal, the vehicle terminal is authenticated.
[0048] Here, user credential information is used to verify the identity of the vehicle terminal during the provision of services in the cloud by various applications. For example, this user credential information can be a JWT (Junior Tag Token). The JWT contains the vehicle terminal's user identification information, a valid timestamp, and signature information.
[0049] In this embodiment of the application, the first acquisition request is generated based on the user logging into the vehicle terminal. That is, the vehicle terminal can respond to the login operation and generate a first acquisition request for the user's credential information.
[0050] In this embodiment, the first acquisition request carries the identity information of the vehicle terminal. The cloud can authenticate the vehicle terminal using the identity information. Exemplarily, this identity information includes at least one of the following: the Integrated Circuit Card Identifier (ICCID) of the Subscriber Identity Module (SIM) in the vehicle terminal, or the Mobile Station International Subscriber Directory Number (MSISDN).
[0051] Step S102: If the vehicle terminal authentication is successful, an SMS message is generated and sent to the SMS service network; the SMS message carries the user credential information and the communication identification information of the vehicle terminal.
[0052] The SMS service network is used to send the user credential information to the vehicle terminal via SMS using the communication identification information of the vehicle terminal.
[0053] Here, the SMS service network can be an operator providing SMS services. For example, the SMS service network can be at least one of the following: a mobile network, a China Unicom network, and a China Telecom network. The communication identification information of the vehicle terminal can be the mobile number of the communication module in the vehicle terminal. For example, the communication module can be a Telematics Box (TBOX).
[0054] In this embodiment, the cloud can first generate user credential information for the vehicle terminal, and then construct an SMS message based on the generated user credential information. In some embodiments, to improve information security, the cloud can encrypt the user credential information, and then construct an SMS message based on the encrypted user credential information.
[0055] In this embodiment, the cloud can send SMS messages to the SMS service network using a preset communication protocol. In some embodiments, the cloud can use Hypertext Transfer Protocol Secure (HTTPS) to send SMS messages to the SMS service network.
[0056] In this embodiment of the application, after the SMS service network receives the SMS message, it can send an SMS message to the vehicle terminal through the communication identification information of the vehicle terminal. The SMS message includes user credential information.
[0057] Understandably, in the relevant technologies, the cloud sends user credential information to the vehicle terminal, which is a public-to-private communication interaction, while the SMS service network sends user credential information to the vehicle terminal, which is a public-to-public communication interaction. In this way, the SMS service network can improve the encryption security of SMS channel data, thereby enhancing the security of the vehicle terminal obtaining user credential information.
[0058] In this embodiment, the cloud can respond to a first request for user credential information sent by the vehicle terminal. If the vehicle terminal's authentication is successful, the cloud sends an SMS message carrying the user credential information and the vehicle terminal's communication identification information to the SMS service network. This allows the SMS service network to send the user credential information to the vehicle terminal via SMS using the vehicle terminal's communication identification information. Therefore, compared to cloud-based methods of sending user credential information to the vehicle terminal, sending the information via SMS improves the encryption security of the SMS channel through the SMS service network, thereby enhancing the security of the sent user credential information.
[0059] Figure 2 This is a schematic diagram of the implementation flow of an information acquisition method provided in an embodiment of this application. Figure 2 This method can be executed by the cloud. The first acquisition request mentioned above carries the vehicle identification information of the vehicle corresponding to the vehicle terminal and the device identification information of the communication module of the vehicle terminal; the "authentication of the vehicle terminal" in step S101 can be implemented through steps S201 to S203, combined with Figure 2 The steps shown are explained.
[0060] Step S201: Determine the correlation between the vehicle identification information of the vehicle and the device identification information of the communication module.
[0061] For example, the vehicle identification information of the vehicle can be the Vehicle Identification Number (VIN), and the device identification information of the communication module can be the International Mobile Equipment Identity (IMEI) of the TBOX containing the SIM card.
[0062] In this embodiment, the cloud stores the vehicle identification information of different vehicles and the correspondence between them and the device identification information of its own communication module. After the cloud extracts the vehicle identification information and the device identification information of the communication module from the first acquisition request, it can determine whether the vehicle identification information and the device identification information of the communication module are related based on the different correspondences, and determine whether the identity verification of the vehicle terminal is successful based on the correlation between the two.
[0063] Step S202: If the vehicle identification information representing the vehicle matches the device identification information of the communication module, it is determined that the vehicle terminal authentication is successful.
[0064] Step S203: If the vehicle identification information representing the vehicle does not match the device identification information of the communication module, it is determined that the vehicle terminal authentication has failed.
[0065] In this embodiment, the vehicle identification information of the vehicle is matched with the device identification information of the communication module, which means that there is a correspondence between the vehicle identification information and the device identification information of the communication module in the cloud database. At this time, it can be determined that the communication module belongs to the vehicle, that is, the vehicle terminal authentication is successful.
[0066] In this embodiment, the identity of the vehicle-mounted terminal can be verified by correlating the vehicle identification information with the device identification information of the communication module. This allows for the generation of user credential information once the vehicle-mounted terminal's identity verification is successful, thereby improving the security of the generated user credential information.
[0067] Figure 3 This is a schematic diagram of the implementation flow of an information acquisition method provided in an embodiment of this application. Figure 3 This method can be executed by the cloud. The "generating SMS message" step S102 above can be achieved through steps S301 to S303, combining... Figure 3 The steps shown are explained.
[0068] Step S301: Generate the user credential information, and generate an initial SMS message based on the user credential information.
[0069] In this embodiment of the application, the initial SMS message carries user credential information, and the initial SMS message is plaintext data.
[0070] Step S302: Based on the dynamic key, the initial SMS message is encrypted using a preset first encryption method to obtain an encrypted SMS message.
[0071] In this embodiment of the application, the cloud can first generate a dynamic key according to a preset key generation algorithm, and then encrypt the initial SMS message using a first encryption method to obtain an encrypted SMS message. The preset key generation algorithm can be a random number generation algorithm; the first encryption method can be an encryption method agreed upon in advance between the cloud and the vehicle terminal.
[0072] Step S303: Generate the SMS message based on the communication identification information of the vehicle terminal and the encrypted SMS message.
[0073] The SMS service network is used to send the encrypted SMS message to the vehicle terminal via SMS using the communication identification information of the vehicle terminal.
[0074] In this embodiment, the SMS message includes communication identification information of the vehicle terminal in plaintext and encrypted SMS message in ciphertext. Thus, after the SMS message is sent to the SMS service network, the SMS service network can extract the communication identification information and the encrypted SMS message from the message, preventing it from obtaining user credential information and reducing the possibility of leakage from the SMS service network.
[0075] Meanwhile, the SMS messages sent by the SMS service network to the vehicle terminal are also encrypted SMS messages in a ciphertext state, which can further improve the security when sending user credential information.
[0076] In this embodiment, the cloud first generates user credential information and, based on this information, generates an initial SMS message. Then, using a dynamic key and a preset first encryption method, the initial SMS message is encrypted to obtain an encrypted SMS message. Finally, an SMS message is generated using the communication identification information of the vehicle terminal and the encrypted SMS message. This allows the SMS service network to extract the encrypted SMS message from the encrypted SMS message, thereby reducing the probability of the SMS service network leaking user credential information and improving the security of sending user credential information.
[0077] In some embodiments, the above information acquisition method can also be implemented through steps 11 and 12:
[0078] Step 11: The dynamic key is encrypted using a preset second encryption method to obtain the encrypted dynamic key.
[0079] Here, the second encryption method can be the same as the first encryption method, or it can be a different encryption method.
[0080] In this embodiment of the application, the cloud can encrypt the dynamic key after it is generated.
[0081] Step 12: Store the correspondence between the encrypted dynamic key and the communication identification information of the vehicle terminal.
[0082] In this embodiment, the cloud can store the correspondence between the encrypted dynamic key and the communication identification information of the vehicle terminal. Thus, when the vehicle terminal receives an encrypted SMS message from the SMS service network and needs to decrypt it, it can send a request carrying its communication identification information to the cloud. The cloud can then obtain the encrypted dynamic key from multiple correspondences using the vehicle terminal's communication identification information and send the encrypted dynamic key to the vehicle terminal.
[0083] In this embodiment, the cloud, by storing the correspondence between the encrypted dynamic key and the communication identification information of the vehicle terminal, can determine the dynamic key of the vehicle terminal based on the communication identification information of the vehicle terminal when the vehicle terminal needs to obtain the dynamic key. Thus, when the vehicle terminal needs to obtain the dynamic key, the cloud can accurately obtain the corresponding dynamic key from multiple correspondences using the communication identification information of the vehicle terminal.
[0084] In some embodiments, the above information acquisition method can also be implemented through steps 21 and 22, which can be performed after step 12:
[0085] Step 21: Receive a second acquisition request for the dynamic key sent by the vehicle terminal; the second acquisition request carries the communication identification information of the vehicle terminal.
[0086] In this embodiment, after receiving an encrypted SMS message sent by the SMS service network, the vehicle terminal needs to decrypt the encrypted SMS message using a dynamic key to obtain user credential information. At this time, the vehicle terminal can send a second acquisition request carrying communication identification information to the cloud.
[0087] Step 22: Based on the communication identification information of the vehicle terminal and the corresponding relationship, determine the encrypted dynamic key and send the encrypted dynamic key to the vehicle terminal.
[0088] The vehicle-mounted terminal is used to decrypt the encrypted dynamic key using the second encryption method to obtain a dynamic key; and based on the dynamic key, to decrypt the encrypted SMS message using the first encryption method to obtain the initial SMS message.
[0089] In this embodiment, the cloud can determine the corresponding encrypted dynamic key from multiple correspondences based on the communication identification information carried in the second acquisition request. Since the second encryption method used to encrypt the dynamic key is pre-agreed upon by the cloud and the vehicle terminal, when the vehicle terminal receives the encrypted dynamic key sent by the cloud, it can use the second encryption method to decrypt the encrypted dynamic key, thereby obtaining the dynamic key. Then, the first encryption method is used, and the encrypted SMS message is decrypted using the dynamic key to obtain the initial SMS message, thereby obtaining the user credential information in the initial SMS message.
[0090] In this embodiment, an encrypted dynamic key is sent from the cloud to the vehicle terminal, allowing the vehicle terminal to decrypt the encrypted dynamic key and obtain the dynamic key. Finally, using a first encryption method, the encrypted SMS message is decrypted using the dynamic key to obtain an initial SMS message containing user credential information. Because the dynamic key is in an encrypted state during communication between the vehicle terminal and the cloud, the risk of leakage is reduced, thereby improving the security of user credential information.
[0091] Figure 4 This is a schematic diagram of the implementation flow of an information acquisition method provided in an embodiment of this application. Figure 4 This method can be executed by the vehicle-mounted terminal. For example... Figure 4 As shown, the method includes steps S401 and S402.
[0092] Step S401: In response to the login operation of the vehicle terminal, a first request for obtaining user credential information is sent to the cloud.
[0093] In this embodiment of the application, when a user logs into the vehicle terminal, the vehicle terminal can send a first acquisition request to the cloud to obtain user credential information.
[0094] Understandably, users log in to the in-vehicle terminal to use its application services. The in-vehicle terminal needs to verify its identity with the application server using user credentials. Only after successful authentication can the application server provide the corresponding application services. Therefore, when a user logs in to the in-vehicle terminal, the terminal needs to send an initial request to the cloud.
[0095] Step S402: Receive user credential information sent by the SMS service network.
[0096] The user credential information is sent by the SMS service network via the communication identification information of the vehicle terminal through an SMS message; the communication identification information of the vehicle terminal is sent to the SMS service network via an SMS message; the SMS message is generated when the vehicle terminal's identity verification is successful.
[0097] In this embodiment, the vehicle-mounted terminal can respond to a login operation by sending a first request to the cloud for user credential information; then, it receives the user credential information sent via SMS from the SMS service network. Thus, compared to the cloud-to-vehicle-mounted terminal method in related technologies, sending user credential information via SMS from the SMS service network enhances the encryption security of SMS channel data, thereby improving the security of the vehicle-mounted terminal obtaining user credential information.
[0098] Figure 5 This is a schematic diagram of the implementation flow of an information acquisition method provided in an embodiment of this application. Figure 5 This method can be executed by the vehicle-mounted terminal. Based on Figure 4 , Figure 4 Step S402 can be updated to step S501, combining Figure 5 The steps shown are explained.
[0099] Step S501: Receive encrypted SMS messages sent by the SMS service network.
[0100] The encrypted SMS message is obtained by encrypting the initial SMS message using a preset first encryption method based on a dynamic key; the initial SMS message is generated based on the user credential information.
[0101] In this embodiment, the cloud can generate user credential information after the vehicle terminal's authentication is successful, and then generate an initial SMS message in plaintext based on the user credential information. To improve the security of the user credential information during communication, the cloud can encrypt the initial SMS message using a dynamic key to obtain an encrypted SMS message. Then, based on the encrypted SMS message and the vehicle terminal's communication identification information, an SMS message is generated and sent to the SMS service network. Because the vehicle terminal's communication identification information is in plaintext, the SMS service network can extract the communication identification information from the SMS message, and thus send an encrypted SMS message to the vehicle terminal via SMS using the communication identification information.
[0102] In this embodiment, the vehicle-mounted terminal receives encrypted SMS messages sent via SMS service network. By encrypting the initial SMS message, the risk of user credential information being leaked during the transmission of user credential information from the SMS service network to the vehicle-mounted terminal is further reduced, thereby improving the security of the vehicle-mounted terminal obtaining user credential information.
[0103] Figure 6 This is a schematic diagram of the implementation flow of an information acquisition method provided in an embodiment of this application. Figure 6 This method can be executed by the vehicle-mounted terminal. For example... Figure 6 As shown, the above method also includes steps S601 to S604.
[0104] Step S601: Send a second retrieval request for the dynamic key to the cloud.
[0105] Here, the second acquisition request carries the communication identification information of the vehicle terminal, which is used to determine the dynamic key.
[0106] In this embodiment of the application, after receiving the encrypted SMS message sent by the SMS service network, the vehicle terminal needs to send a second acquisition request to the cloud to obtain the dynamic key.
[0107] Step S602: Receive the encrypted dynamic key sent by the cloud; the encrypted dynamic key is obtained by encrypting the dynamic key using a preset second encryption method.
[0108] In this embodiment, the cloud stores different correspondences between encrypted dynamic keys and communication identification information of the vehicle terminal. The cloud can search for the corresponding encrypted dynamic key among multiple correspondences based on the communication identification information of the vehicle terminal. The encrypted dynamic key is generated by encrypting the dynamic key using a second encryption method after it has been generated by the cloud. After finding the encrypted dynamic key corresponding to the communication identification information of the vehicle terminal, the cloud can send the encrypted dynamic key to the vehicle terminal.
[0109] Step S603: Decrypt the encrypted dynamic key using the second encryption method to obtain the dynamic key.
[0110] Here, the second encryption method is pre-agreed upon by the cloud and the vehicle terminal. Therefore, after the vehicle terminal receives the encrypted dynamic key, it can use the second encryption method to decrypt the encrypted dynamic key to obtain the dynamic key.
[0111] Step S604: Based on the dynamic key, the encrypted SMS message is decrypted using the first encryption method to obtain the initial SMS message.
[0112] In this embodiment, the vehicle-mounted terminal obtains an encrypted dynamic key through interaction with the cloud. Then, using a first encryption method, it decrypts the encrypted SMS message with the dynamic key to obtain an initial SMS message containing user credential information. Because the dynamic key is in encrypted form during communication between the vehicle-mounted terminal and the cloud, the risk of leakage is reduced, thereby improving the security of the user credential information.
[0113] In some embodiments, the vehicle terminal includes a communication module and a vehicle interconnection module; the above information acquisition method can also be implemented through steps 31 to 34:
[0114] Step 31: Send the initial SMS message to the vehicle interconnection module through the communication module.
[0115] Here, the communication module can be the TBOX in the vehicle, and the vehicle connectivity module can be the Connect Car Service (CCS) module in the vehicle.
[0116] Understandably, the in-vehicle terminal obtains user credentials when the user logs in to use the application services within the terminal. The module within the in-vehicle terminal that interacts with the application server is the vehicle connectivity module. Therefore, after the communication module receives the initial SMS message sent from the cloud, it does not need to parse the initial SMS message; instead, it forwards it to the vehicle connectivity module.
[0117] In this embodiment, the communication module sends an initial SMS message to the vehicle connectivity module via a Scalable service-oriented middleware protocol over IP (SOME / IP).
[0118] Step 32: The initial SMS message is parsed through the vehicle interconnection module to obtain the user credential information.
[0119] Step 33: Using the vehicle interconnection module, the user credential information is encrypted based on the verification information of the user credential information to obtain encrypted user credential information.
[0120] In this embodiment of the application, in order to reduce the risk of leakage of user credential information, the user credential information needs to be encrypted after being parsed from the initial SMS message. In some embodiments, the hash value of the user credential information can be determined first, and then the hash value can be used as a key to encrypt the user credential information.
[0121] In some embodiments, when user credential information is updated, the key also needs to be updated, that is, the key is re-determined based on the updated user credential information.
[0122] Step 34: The encrypted user credential information is stored in the secure storage area of the vehicle terminal through the vehicle interconnection module.
[0123] In some embodiments, the vehicle terminal can provide user credential information to other modules of the vehicle terminal through the vehicle interconnection module.
[0124] For example, the account module in the vehicle terminal obtains user credential information through the vehicle interconnection module, and then the account module uses the user credential information to call the account interface to obtain user information; the weather module in the vehicle terminal obtains user credential information through the vehicle interconnection module, and then the weather module uses the user credential information to call the weather interface to obtain current weather information; the payment module in the vehicle terminal obtains user credential information through the vehicle interconnection module, and then the payment module uses the user credential information to call the payment interface to generate an order.
[0125] In this embodiment, the initial SMS message is sent to the vehicle connectivity module via the communication module; the vehicle connectivity module parses the initial SMS message to obtain user credential information; the vehicle connectivity module encrypts the user credential information based on the verification information of the user credential information to obtain encrypted user credential information; and the vehicle connectivity module stores the encrypted user credential information in the secure storage area of the vehicle terminal. In this way, encrypting the user credential information through the vehicle connectivity module ensures that the user credential information is in an encrypted state, thereby reducing the risk of leakage and improving the security of storing user credential information.
[0126] Figure 7 This is a schematic diagram of the implementation flow of an information acquisition method provided in an embodiment of this application. Figure 7 .like Figure 7 As shown, the method includes the following steps S701 to S711:
[0127] In step S701, the vehicle terminal responds to the user's login operation by sending a credential request to the cloud.
[0128] In this embodiment of the application, the CCS module in the vehicle terminal can initiate an HTTPS request, the content of which includes the vehicle identification code and the IMEI of the TBOX.
[0129] In step S702, the cloud responds to the credential request, verifies the identity of the vehicle terminal, and generates identity credentials and an identity credential SMS message based on the identity credentials if the verification is successful.
[0130] In this embodiment of the application, the cloud can determine whether the VIN and IMEI carried in the credential request are consistent with the data stored in the cloud. If they are consistent, the cloud can determine that the authentication of the vehicle terminal is successful.
[0131] In this embodiment of the application, the identity credential (JWT, JSON Web Token) includes a user ID, a valid timestamp, and a signature. The signature is used to determine the integrity and source credibility of the identity credential.
[0132] Step S703: A key is randomly generated in the cloud, and the key is encrypted using the second encryption method to obtain the encrypted key. The correspondence between the encrypted key and the TBOX phone number is stored.
[0133] In step S704, the cloud encrypts the identity credential SMS message based on the first encryption method and key to obtain an encrypted message.
[0134] In step S705, the cloud sends the encrypted message to the SMS operator.
[0135] In step S706, the SMS operator sends an encrypted message to the vehicle terminal via the TBOX's phone number.
[0136] In step S707, the vehicle terminal sends a request to the cloud containing the phone number of the TBOX.
[0137] In step S708, the cloud determines the encrypted key based on the TBOX phone number in the corresponding relationship and sends the encrypted key to the vehicle terminal.
[0138] In step S709, the vehicle terminal uses the second encryption method to decrypt the encrypted key to obtain the key.
[0139] In step S710, the vehicle terminal decrypts the encrypted message based on the key and the first encryption method to obtain the identity credential SMS message.
[0140] In step S711, the vehicle terminal parses the identity credential SMS message through the CCS module to obtain the identity credential, encrypts the identity credential using the hash value of the identity credential, and stores the encrypted identity credential in the secure partition.
[0141] In this embodiment of the application, the TBOX in the vehicle terminal can receive encrypted messages sent by the SMS operator, and then the TBOX decrypts the encrypted messages to obtain the identity credential SMS messages, and sends the identity credential SMS messages to the CCS module.
[0142] In this embodiment of the application, the CCS module provides the in-vehicle device with requests for other interfaces to implement different functions, such as:
[0143] The account application uses identity credentials to call the account interface to obtain user information;
[0144] Weather apps use identity credentials to call weather APIs to obtain current weather information;
[0145] The payment module uses identity credentials to call the payment interface to generate an order.
[0146] Figure 8 A schematic diagram of the composition structure of an information acquisition device provided in this application embodiment. Figure 1 ,like Figure 8 As shown, the information acquisition device 800 includes: a verification module 801 and a generation module 802, wherein:
[0147] Verification module 801 is used to verify the identity of the vehicle terminal in response to a first request for obtaining user credential information sent by the vehicle terminal.
[0148] The generation module 802 is used to generate an SMS message and send the SMS message to the SMS service network when the vehicle terminal authentication is successful; the SMS message carries the user credential information and the communication identification information of the vehicle terminal.
[0149] The SMS service network is used to send the user credential information to the vehicle terminal via SMS using the communication identification information of the vehicle terminal.
[0150] In some embodiments, the first acquisition request carries vehicle identification information of the vehicle corresponding to the vehicle terminal and device identification information of the communication module of the vehicle terminal; the verification module 801 is further configured to determine the correlation between the vehicle identification information of the vehicle and the device identification information of the communication module; if the correlation indicates that the vehicle identification information of the vehicle matches the device identification information of the communication module, the vehicle terminal authentication is determined to be successful; if the correlation indicates that the vehicle identification information of the vehicle does not match the device identification information of the communication module, the vehicle terminal authentication is determined to be unsuccessful.
[0151] In some embodiments, the generation module 802 is further configured to generate the user credential information and generate an initial SMS message based on the user credential information; encrypt the initial SMS message using a preset first encryption method based on a dynamic key to obtain an encrypted SMS message; and generate the SMS message based on the communication identification information of the vehicle terminal and the encrypted SMS message; wherein, the SMS service network is configured to send the encrypted SMS message to the vehicle terminal via SMS using the communication identification information of the vehicle terminal.
[0152] In some embodiments, the information acquisition device 800 further includes an encryption module and a storage module; the encryption module is further configured to encrypt the dynamic key using a preset second encryption method to obtain an encrypted dynamic key; the storage module is further configured to store the correspondence between the encrypted dynamic key and the communication identification information of the vehicle terminal.
[0153] In some embodiments, the information acquisition device 800 further includes: a receiving module and a sending module; the receiving module is configured to receive a second acquisition request for the dynamic key sent by the vehicle terminal; the second acquisition request carries communication identification information of the vehicle terminal; the sending module is configured to determine the encrypted dynamic key based on the communication identification information of the vehicle terminal and the corresponding relationship, and send the encrypted dynamic key to the vehicle terminal; wherein, the vehicle terminal is configured to decrypt the encrypted dynamic key using the second encryption method to obtain the dynamic key; and based on the dynamic key, decrypt the encrypted SMS message using the first encryption method to obtain the initial SMS message.
[0154] Figure 9 A schematic diagram of the composition structure of an information acquisition device provided in this application embodiment. Figure 2 ,like Figure 9 As shown, the information acquisition device 900 includes: a vehicle interconnection module 901 and a communication module 902, wherein:
[0155] The vehicle connectivity module 901 is used to respond to the login operation of the vehicle terminal by sending a first request to the cloud for obtaining user credential information.
[0156] Communication module 902 is used to receive user credential information sent by the SMS service network;
[0157] The user credential information is sent by the SMS service network via the communication identification information of the vehicle terminal through an SMS message; the communication identification information of the vehicle terminal is sent to the SMS service network via an SMS message; the SMS message is generated when the vehicle terminal's identity verification is successful.
[0158] In some embodiments, the communication module 902 is further configured to receive encrypted SMS messages sent by the SMS service network; wherein the encrypted SMS messages are obtained by encrypting an initial SMS message using a preset first encryption method based on a dynamic key; and the initial SMS messages are generated based on the user credential information.
[0159] In some embodiments, the communication module 902 is further configured to send a second acquisition request for the dynamic key to the cloud; receive the encrypted dynamic key sent by the cloud; the encrypted dynamic key is obtained by encrypting the dynamic key using a preset second encryption method; decrypt the encrypted dynamic key using the second encryption method to obtain the dynamic key; and decrypt the encrypted SMS message using the first encryption method based on the dynamic key to obtain the initial SMS message.
[0160] In some embodiments, the communication module 902 is further configured to send the initial SMS message to the vehicle interconnection module; the vehicle interconnection module 901 is further configured to parse the initial SMS message to obtain the user credential information; the vehicle interconnection module 901 is further configured to encrypt the user credential information based on the verification information of the user credential information to obtain encrypted user credential information; the vehicle interconnection module 901 is further configured to store the encrypted user credential information in the secure storage area of the vehicle terminal.
[0161] The descriptions of the apparatus embodiments above are similar to those of the method embodiments above, and have similar beneficial effects. In some embodiments, the functions or modules included in the apparatus provided in this disclosure can be used to perform the methods described in the method embodiments above. For technical details not disclosed in the apparatus embodiments of this application, please refer to the descriptions of the method embodiments of this application for understanding.
[0162] It should be noted that, in the embodiments of this application, if the above-described data processing method is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiments of this application, or the part that contributes to the related technology, can be embodied in the form of a software product. This software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, mobile hard drives, read-only memory (ROM), magnetic disks, or optical disks. Thus, the embodiments of this application are not limited to any specific hardware, software, or firmware, or any combination of hardware, software, and firmware.
[0163] This application provides a computer device including a memory and a processor. The memory stores a computer program that can run on the processor. When the processor executes the program, it implements some or all of the steps in the above-described method.
[0164] This application provides a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements some or all of the steps in the above-described method. The computer-readable storage medium can be transient or non-transient.
[0165] This application provides a computer program including computer-readable code. When the computer-readable code is run in a computer device, the processor in the computer device performs some or all of the steps in the above-described method.
[0166] This application provides a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program. When the computer program is read and executed by a computer, it implements some or all of the steps in the above-described method. This computer program product can be implemented specifically through hardware, software, or a combination thereof. In some embodiments, the computer program product is specifically embodied as a computer storage medium; in other embodiments, the computer program product is specifically embodied as a software product, such as a software development kit (SDK), etc.
[0167] It should be noted that the descriptions of the various embodiments above tend to emphasize the differences between them, while their similarities or commonalities can be referred to interchangeably. The descriptions of the above embodiments of the device, storage medium, computer program, and computer program product are similar to the descriptions of the above method embodiments and have similar beneficial effects. For technical details not disclosed in the embodiments of the device, storage medium, computer program, and computer program product of this application, please refer to the descriptions of the method embodiments of this application for understanding.
[0168] Figure 10 This is a schematic diagram of the composition structure of a computer device provided in an embodiment of this application, such as... Figure 10 As shown, the computer device 1000 includes a memory 1010 and a processor 1020; wherein, the memory 1010 stores a computer program that can run on the processor 1020; when the processor 1020 executes the computer program, it implements the information acquisition method provided in the above embodiments.
[0169] The memory 1010 stores computer programs that can run on the processor. The memory 1010 is configured to store instructions and applications that can be executed by the processor 1020. It can also cache data to be processed or already processed (e.g., image data, audio data, voice communication data and video communication data) in the processor 1020 and the various modules in the control device 1000. It can be implemented by flash memory or random access memory (RAM).
[0170] The processor 1020 implements the steps of any of the above control methods when executing a program. The processor 1020 typically controls the overall operation of the computer device 1000.
[0171] This application provides a computer storage medium that stores one or more programs, which can be executed by one or more processors to implement the steps of the information acquisition method as described in any of the above embodiments.
[0172] It should be noted that the descriptions of the storage medium and device embodiments above are similar to the descriptions of the method embodiments above, and have similar beneficial effects. For technical details not disclosed in the storage medium and device embodiments of this application, please refer to the descriptions of the method embodiments of this application for understanding.
[0173] The aforementioned processor can be at least one of the following: Application Specific Integrated Circuit (ASIC), Digital Signal Processor (DSP), Digital Signal Processing Device (DSPD), Programmable Logic Device (PLD), Field Programmable Gate Array (FPGA), Central Processing Unit (CPU), Controller, Microcontroller, and Microprocessor. It is understood that other electronic devices can also implement the functions of the aforementioned processor, and this application does not specifically limit the specific implementation.
[0174] The aforementioned computer storage media / memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), magnetic random access memory (FRAM), flash memory, magnetic surface memory, optical disc, or compact disc read-only memory (CD-ROM), etc.; or it can be various terminals that include one or any combination of the above-mentioned memories, such as mobile phones, computers, tablet devices, personal digital assistants, etc.
[0175] It should be understood that the phrase "one embodiment" or "an embodiment" throughout the specification means that a specific feature, structure, or characteristic related to the embodiment is included in at least one embodiment of this application. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. It should be understood that in the various embodiments of this application, the sequence numbers of the above steps / processes do not imply a sequential order of execution; the execution order of each step / process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application. The sequence numbers of the above embodiments of this application are merely descriptive and do not represent the superiority or inferiority of the embodiments.
[0176] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.
[0177] The above description is merely an embodiment of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application.
Claims
1. An information acquisition method, wherein, The method is applied in the cloud; the method includes: In response to a first request for obtaining user credential information sent by the vehicle terminal, the vehicle terminal is authenticated. Upon successful authentication of the vehicle-mounted terminal, an SMS message is generated and sent to the SMS service network; the SMS message carries the user credential information and the communication identification information of the vehicle-mounted terminal. The SMS service network is used to send the user credential information to the vehicle terminal via SMS using the communication identification information of the vehicle terminal.
2. The method according to claim 1, wherein, The first acquisition request carries vehicle identification information of the vehicle corresponding to the vehicle terminal and device identification information of the communication module of the vehicle terminal; the authentication of the vehicle terminal includes: Determine the correlation between the vehicle identification information of the vehicle and the device identification information of the communication module; If the vehicle identification information representing the vehicle matches the device identification information of the communication module, it is determined that the vehicle terminal authentication is successful. If the vehicle identification information representing the vehicle does not match the device identification information of the communication module, it is determined that the vehicle terminal authentication has failed.
3. The method according to claim 1, wherein, The generation of the SMS message includes: Generate the user credential information, and generate an initial SMS message based on the user credential information; Based on the dynamic key, the initial SMS message is encrypted using a preset first encryption method to obtain an encrypted SMS message; The SMS message is generated based on the communication identification information of the vehicle terminal and the encrypted SMS message; The SMS service network is used to send the encrypted SMS message to the vehicle terminal via SMS using the communication identification information of the vehicle terminal.
4. The method according to claim 3, wherein, The method further includes: The dynamic key is encrypted using a preset second encryption method to obtain an encrypted dynamic key; The system stores the correspondence between the encrypted dynamic key and the communication identification information of the vehicle terminal.
5. The method according to claim 4, wherein, The method further includes: The system receives a second acquisition request for the dynamic key sent by the vehicle-mounted terminal; the second acquisition request carries the communication identification information of the vehicle-mounted terminal. Based on the communication identification information of the vehicle terminal and the corresponding relationship, the encrypted dynamic key is determined and sent to the vehicle terminal; The vehicle-mounted terminal is used to decrypt the encrypted dynamic key using the second encryption method to obtain a dynamic key; and based on the dynamic key, to decrypt the encrypted SMS message using the first encryption method to obtain the initial SMS message.
6. An information acquisition method, wherein, The method is applied to an in-vehicle terminal; the method includes: In response to the login operation of the vehicle terminal, a first request for obtaining user credential information is sent to the cloud; Receive user credentials information sent by the SMS service network; The user credential information is sent by the SMS service network via the communication identification information of the vehicle terminal through an SMS message; the communication identification information of the vehicle terminal is sent to the SMS service network via an SMS message; the SMS message is generated when the vehicle terminal's identity verification is successful.
7. The method according to claim 6, wherein, The user credential information received from the SMS service network includes: Receive encrypted SMS messages sent by the SMS service network; The encrypted SMS message is obtained by encrypting the initial SMS message using a preset first encryption method based on a dynamic key; the initial SMS message is generated based on the user credential information.
8. The method according to claim 7, wherein, The method further includes: Send a second retrieval request for the dynamic key to the cloud; Receive the encrypted dynamic key sent by the cloud; the encrypted dynamic key is obtained by encrypting the dynamic key using a preset second encryption method; The encrypted dynamic key is decrypted using the second encryption method to obtain the dynamic key; Based on the dynamic key, the encrypted SMS message is decrypted using the first encryption method to obtain the initial SMS message.
9. The method according to claim 7 or 8, wherein, The vehicle-mounted terminal includes a communication module and a vehicle interconnection module; the method further includes: The initial SMS message is sent to the vehicle connectivity module via the communication module. The user credential information is obtained by parsing the initial SMS message through the vehicle connectivity module. The vehicle interconnection module encrypts the user credential information based on the verification information of the user credential information to obtain encrypted user credential information. The encrypted user credential information is stored in the secure storage area of the vehicle terminal through the vehicle interconnection module.
10. An information acquisition device, wherein, The device is used in the cloud and includes: The verification module is used to verify the identity of the vehicle terminal in response to the first request for obtaining user credential information sent by the vehicle terminal. The generation module is used to generate an SMS message and send the SMS message to the SMS service network when the vehicle terminal's authentication is successful; the SMS message carries the user credential information and the communication identification information of the vehicle terminal. The SMS service network is used to send the user credential information to the vehicle terminal via SMS using the communication identification information of the vehicle terminal.
11. An information acquisition device, wherein, The device is used in a vehicle-mounted terminal, and the device includes: The vehicle connectivity module is used to respond to the login operation of the in-vehicle terminal by sending a first request to the cloud for obtaining user credential information; The communication module is used to receive user credential information sent by the SMS service network; The user credential information is sent by the SMS service network via the communication identification information of the vehicle terminal through an SMS message; the communication identification information of the vehicle terminal is sent to the SMS service network via an SMS message; the SMS message is generated when the vehicle terminal's identity verification is successful.
12. A computer device, wherein, include: Memory, used to store executable instructions; A processor, when executing executable instructions stored in the memory, implements the method of any one of claims 1 to 5, or the method of any one of claims 6 to 9.
13. A computer-readable storage medium, wherein, The storage medium stores executable instructions that, when executed by a processor, implement the method described in any one of claims 1 to 5, or the method described in any one of claims 6 to 9.
14. A computer program product comprising a computer program or instructions, wherein, When the computer program or instructions are executed by a processor, they implement the method according to any one of claims 1 to 5, or the method according to any one of claims 6 to 9.