Vehicle-machine interconnection method and device based on near field communication, vehicle and storage medium

Abstract

The application relates to a vehicle-machine interconnection method and device based on near field communication, a vehicle and a storage medium, which comprises the following steps: in response to the touch between a preset mobile terminal and an NFC tag of the vehicle, reading the connection parameter information stored in the NFC tag, constructing a high-speed data transmission channel between the preset mobile terminal and the vehicle according to the connection parameter information, and performing data transmission between the vehicle and the preset mobile terminal through the high-speed data transmission channel. Thus, the problems of complicated hand-to-vehicle interconnection operation, lack of unified security authentication mechanism and inability to realize personalized scene linkage in the prior art are solved, the exchange of connection parameters is completed in the instant touch between the mobile terminal and the vehicle, a Wi-Fi / Bluetooth dual channel is automatically established and encrypted identity authentication is triggered, then personalized scene linkage driven by a cloud rule engine is executed, so that the simple trigger, security authentication and intelligent scene of hand-to-vehicle interconnection are realized.

Description

Technical Field

[0001] This application relates to the field of vehicle technology, and in particular to a vehicle-to-everything (V2X) interconnection method, device, vehicle, and storage medium based on near-field communication. Background Technology

[0002] With the development of mobile internet and automotive intelligence, the interconnection between mobile phones and car systems has become a necessity. Among them, NFC (Near Field Communication) technology has been widely used. For example, Bluetooth speakers, wireless headphones and other devices use NFC tags to store Bluetooth MAC (Media Access Control) addresses, and the mobile phone can automatically complete Bluetooth pairing after touching the tag.

[0003] In related technologies, the connection methods for vehicle-to-vehicle connectivity are mainly through Bluetooth wireless connection or USB wired connection.

[0004] However, Bluetooth wireless connection requires users to manually turn on their phone's Bluetooth, search for the vehicle's infotainment system, and confirm pairing, which is a cumbersome process; USB (Universal Serial Bus) wired connection requires a data cable, which is limited by the physical interface, resulting in a poor user experience, and this needs to be addressed urgently. Summary of the Invention

[0005] This application provides a vehicle-to-everything (V2X) interconnection method, device, vehicle, and storage medium based on near-field communication to solve problems such as cumbersome operation of vehicle-to-everything (V2X) interconnection, lack of a unified security authentication mechanism, and inability to achieve personalized scene linkage in related technologies.

[0006] The first aspect of this application provides a vehicle-to-everything (V2X) interconnection method based on near-field communication, comprising the following steps: In response to the contact between a preset mobile terminal and the vehicle's NFC tag, the connection parameter information stored in the NFC tag is read, wherein the connection parameter information includes the Bluetooth MAC address, the wireless network password, and the vehicle identification code; A high-speed data transmission channel is constructed between the preset mobile terminal and the vehicle based on the connection parameter information; Data is transmitted between the vehicle and the preset mobile terminal through the high-speed data transmission channel.

[0007] According to one embodiment of this application, before constructing a high-speed data transmission channel between the preset mobile terminal and the vehicle based on the connection parameter information, the method further includes: The system receives authentication information sent by the preset mobile terminal, wherein the authentication information includes the public key, digital certificate, and key credential of the preset mobile terminal. The preset mobile terminal is authenticated based on the identity authentication information, and a connection parameter information request from the preset mobile terminal is received when the identity authentication information passes the authentication. Based on the connection parameter information, a high-speed data transmission channel between the vehicle and the preset mobile terminal is requested to be constructed.

[0008] According to one embodiment of this application, the step of authenticating the preset mobile terminal based on the identity authentication information includes: A preset dynamic verification mechanism is generated based on the identity authentication information, and the preset dynamic verification mechanism is sent to the preset mobile terminal; Receive the digital signature result generated by the preset mobile terminal based on the preset dynamic verification mechanism, wherein the digital signature result is calculated by the preset mobile terminal using its private key on the preset dynamic verification mechanism; The digital signature result is verified using the public key of the preset mobile terminal. When the verification result meets the first preset verification condition, the identity authentication is determined to be successful, and the certificate chain of the digital certificate is verified to meet the second preset verification condition. When the certificate chain of the digital certificate meets the second preset verification condition, the user's permission level is determined using the key credential, and the permission level is sent to the preset mobile terminal.

[0009] According to one embodiment of this application, after establishing a high-speed data transmission channel between the preset mobile terminal and the vehicle, the method further includes: Based on the high-speed data transmission channel, the target information of the preset mobile terminal is obtained, and the target information and identity authentication information are sent to the cloud rule engine; Receive the scene mode instruction set from the cloud-based rule engine; According to the scene mode instruction set, control the vehicle to perform corresponding vehicle control actions.

[0010] According to one embodiment of this application, the target information includes at least one of the current location of the preset mobile terminal, the current time, and user schedule data.

[0011] According to the near-field communication-based vehicle-to-everything (V2X) interconnection method of this application embodiment, in response to the contact between a preset mobile terminal and the NFC tag of a vehicle, the connection parameter information stored in the NFC tag is read, a high-speed data transmission channel between the preset mobile terminal and the vehicle is constructed based on the connection parameter information, and data is transmitted between the vehicle and the preset mobile terminal through the high-speed data transmission channel. This solves the problems of cumbersome operation, lack of unified security authentication mechanism, and inability to achieve personalized scene linkage in related technologies. By completing the exchange of connection parameters at the moment the mobile terminal and the vehicle touch, a Wi-Fi / Bluetooth dual channel is automatically established and encrypted identity authentication is triggered. Then, personalized scene linkage driven by a cloud-based rule engine is executed, thereby achieving simplified triggering, secure authentication, and intelligent scene-based V2X interconnection.

[0012] A second aspect of this application provides a vehicle-to-everything (V2X) interconnection device based on near-field communication, comprising: The reading module is used to read the connection parameter information stored in the NFC tag in response to the contact between the preset mobile terminal and the vehicle's NFC tag. The connection parameter information includes the Bluetooth MAC address, the wireless network password, and the vehicle identification code. A construction module is used to construct a high-speed data transmission channel between the preset mobile terminal and the vehicle based on the connection parameter information; The transmission module is used to transmit data between the vehicle and the preset mobile terminal through the high-speed data transmission channel.

[0013] According to one embodiment of this application, before constructing a high-speed data transmission channel between the preset mobile terminal and the vehicle based on the connection parameter information, the construction module further includes: The first receiving unit is configured to receive the identity authentication information sent by the preset mobile terminal, wherein the identity authentication information includes the public key, digital certificate and key credential of the preset mobile terminal; An authentication unit is used to authenticate the preset mobile terminal based on the authentication information, and to receive a connection parameter information request from the preset mobile terminal when the authentication information is successful. The construction unit is used to request the construction of a high-speed data transmission channel between the vehicle and the preset mobile terminal based on the connection parameter information.

[0014] According to one embodiment of this application, the authentication unit includes: A generation subunit is used to generate a preset dynamic verification mechanism based on the identity authentication information and send the preset dynamic verification mechanism to the preset mobile terminal; A receiving subunit is configured to receive a digital signature result generated by the preset mobile terminal based on the preset dynamic verification mechanism, wherein the digital signature result is obtained by the preset mobile terminal's private key using the preset dynamic verification mechanism; The verification subunit is used to verify the digital signature result using the public key of the preset mobile terminal, and when the verification result meets the first preset verification condition, it determines that the identity authentication is successful, and verifies whether the certificate chain of the digital certificate meets the second preset verification condition. The determination subunit is used to determine the user's permission level using the key credential when the certificate chain of the digital certificate meets the second preset verification condition, and to send the permission level to the preset mobile terminal.

[0015] According to one embodiment of this application, after establishing a high-speed data transmission channel between the preset mobile terminal and the vehicle, the construction module further includes: The acquisition unit is used to acquire the target information of the preset mobile terminal based on the high-speed data transmission channel, and send the target information and identity authentication information to the cloud rule engine; The second receiving unit is used to receive the scene mode instruction set of the cloud rule engine; The control unit is used to control the vehicle to perform corresponding vehicle control actions according to the scene mode instruction set.

[0016] According to one embodiment of this application, the target information includes at least one of the current location of the preset mobile terminal, the current time, and user schedule data.

[0017] According to the vehicle-to-everything (V2X) interconnection device based on near-field communication (NFC) embodiments of this application, in response to the contact between a preset mobile terminal and the vehicle's NFC tag, the device reads the connection parameter information stored in the NFC tag, constructs a high-speed data transmission channel between the preset mobile terminal and the vehicle based on the connection parameter information, and transmits data between the vehicle and the preset mobile terminal through the high-speed data transmission channel. This solves the problems of cumbersome operation, lack of unified security authentication mechanism, and inability to achieve personalized scene linkage in related technologies. By completing the exchange of connection parameters the instant the mobile terminal and vehicle touch, it automatically establishes a Wi-Fi / Bluetooth dual channel and triggers encrypted identity authentication, and then executes personalized scene linkage driven by a cloud-based rule engine, thereby achieving simplified triggering, secure authentication, and intelligent scene-based V2X interconnection.

[0018] A third aspect of this application provides a vehicle, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the vehicle-to-machine interconnection method based on near-field communication as described in the above embodiments.

[0019] A fourth aspect of this application provides a computer-readable storage medium storing computer instructions for causing the computer to perform the near-field communication-based vehicle-to-machine interconnection method as described in the above embodiments.

[0020] A fifth aspect of this application provides a computer program product, including a computer program that is executed to implement the near-field communication-based vehicle-to-machine interconnection method described in the above embodiments.

[0021] Additional aspects and advantages of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of this application. Attached Figure Description

[0022] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, wherein: Figure 1 This is a flowchart illustrating a vehicle-to-machine (V2M) interconnection method based on near-field communication according to an embodiment of this application. Figure 2 This is a flowchart illustrating the vehicle-to-truck interconnection process according to one embodiment of this application; Figure 3 This is an example diagram of a vehicle-to-everything (V2X) interconnection device based on near-field communication according to an embodiment of this application; Figure 4 This is a schematic diagram of the structure of an electronic device according to an embodiment of this application. Detailed Implementation

[0023] The embodiments of this application are described in detail below. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain this application, and should not be construed as limiting this application.

[0024] The following description, with reference to the accompanying drawings, outlines a vehicle-to-everything (V2X) interconnection method, apparatus, vehicle, and storage medium based on near-field communication (NFC). Addressing the issues of cumbersome operation, lack of unified security authentication mechanisms, and inability to achieve personalized scene linkage in related technologies mentioned in the background, this application provides a V2X interconnection method based on NFC. In this method, in response to the contact between a preset mobile terminal and the vehicle's NFC tag, connection parameter information stored in the NFC tag is read. A high-speed data transmission channel is constructed between the preset mobile terminal and the vehicle based on the connection parameter information, and data is transmitted between the vehicle and the preset mobile terminal through this high-speed data transmission channel. This solves the problems of cumbersome operation, lack of unified security authentication mechanisms, and inability to achieve personalized scene linkage in related technologies. By exchanging connection parameters at the instant the mobile terminal and vehicle touch, a Wi-Fi / Bluetooth dual-channel is automatically established and encrypted identity authentication is triggered. Then, personalized scene linkage driven by a cloud-based rule engine is executed, thereby achieving simplified triggering, secure authentication, and intelligent scene-based V2X interconnection.

[0025] Specifically, before introducing the embodiments of this application, we will first introduce the relevant technologies of this application and the existing technical problems.

[0026] NFC mobile phone interconnection is based on the use of near field communication technology to achieve fast and wireless data exchange and connection establishment between mobile phones and other devices at a very close distance (usually <10cm). It is not a single function, but a bridge for connection triggering and authentication, aiming to simplify the interaction process between devices.

[0027] Currently, NFC works by having device A (such as a mobile phone) touch device B (such as a Bluetooth speaker, wireless headphones, or Wi-Fi printer). Device B's NFC tag has its Bluetooth MAC address or Wi-Fi connection information pre-stored. After the mobile phone reads this information, it automatically turns on Bluetooth / Wi-Fi and completes the pairing connection without requiring the user to manually search or enter a password. Currently, NFC functionality is widely used for pairing mid-to-high-end Bluetooth headphones, speakers, and cameras.

[0028] In related technologies, various vehicle-to-car connectivity methods primarily use Bluetooth wireless or USB wired connections, with a few using QR codes. This functionality is now widely adopted in vehicles from various global car brands. However, these methods suffer from the following technical problems: (1) Short connection distance: 1) Strict alignment requirements: The effective working distance of NFC is usually only 0-4cm, which means that users must put two mobile phones back to back and almost touch them together, and roughly align them with the NFC antenna area. This process is not intuitive and convenient, and is far less free than scanning QR codes; 2) Cannot achieve continuous connection: Once the devices are separated, the NFC connection will be interrupted. It cannot maintain a stable link for several meters or even longer after the connection is established, like Bluetooth or Wi-Fi. Therefore, it is not suitable for scenarios that require continuous interaction or long-distance control. (2) Low data transmission rate: 1) Only applicable to "handshake" protocol: The theoretical maximum rate of NFC is usually only 424kbps. This speed is more than enough to transmit a contact or a website link, but it cannot meet the needs of modern interconnection such as transmitting high-definition pictures, large files or performing real-time screen mirroring; 2) Relying on secondary switching: Due to the low rate, all interconnection scenarios that require high-speed data transmission must first exchange Wi-FiDirect or Bluetooth connection parameters through NFC, and then automatically switch to these high-speed channels for actual transmission, thus adding a step of complexity; (3) Hardware availability and inconsistent location: 1) "Privileged" functions of specific mobile phone brands: The NFC function of other related mobile phone brands has long been mainly open to their own services such as Apple Pay. Only in recent years have they gradually opened some background reading permissions to third-party applications. However, the experience of actively initiating a connection with "One-Touch" is still strictly limited on iOS, thus failing to achieve a unified experience across platforms; 2) Unclear antenna location: The built-in location of the NFC antenna is different for different brands and models of mobile phones. Users may need to try many times to find the accurate sensing point, which destroys the seamless experience that "One-Touch" should have. (4) Limited functionality and insufficient interaction depth: 1) "One-time" triggering: The typical NFC interconnection scenario is "tap to transfer a photo" or "tap to connect to the network", thus lacking dynamism and context awareness. In contrast, solutions based on QR codes or system-level interconnection frameworks can provide more options on the same interface (such as selecting which files to transfer, whether to start screen projection, etc.); 2) Inability to handle complex logic: The amount of information stored in NFC tags or interactions is very limited, usually just a URI (Uniform Resource Identifier) ​​or a short instruction. It cannot handle complex connection logic that requires multi-step confirmation or authentication. Modern interconnection frameworks are based on distributed soft buses, which can achieve deeper collaboration such as application flow and hardware capability sharing, which NFC cannot do at all. (5) Potential security and privacy risks: 1) Unintentional triggering: Since NFC is near field communication, malicious devices can disguise themselves as legitimate NFC tags or devices and attempt to establish a connection or trigger certain operations without the user's knowledge (e.g. on a crowded bus). Although the extremely short distance reduces the risk, there is still a theoretical possibility. 2) Invisible interaction: Bluetooth connection requires the user to confirm in the pop-up window, QR code requires the user to actively scan, while the NFC tap action itself may be too fast, and the user completes the connection authorization without seeing the phone prompt clearly.

[0029] Therefore, based on the above technical problems, this application mainly addresses the following issues: (1) Connection triggering and identity authentication: How to enable users to complete complex pairing authentication with a single touch, replacing cumbersome Bluetooth search, Wi-Fi password input, and other processes; (2) Contradiction between low speed and high demand: NFC speed cannot meet the large data transmission needs of audio and video streams, application projection, etc.; (3) Cross-protocol stack collaboration: How to enable NFC touch events to accurately trigger the establishment of Bluetooth and Wi-Fi connections and automatically launch the corresponding in-vehicle applications; (4) Security and privacy issues: How to prevent malicious devices from simulating attacks through NFC and ensure the security of data transmission after the connection is established; (5) Standardization and fragmentation issues: How to achieve a unified NFC interconnection experience for different mobile phone manufacturers and different car brands, avoiding "one protocol for one car model".

[0030] The main technical solutions involved include: (1) NFC bearer connection parameters: In the car NFC tag or chip, a unified resource identifier containing information such as Bluetooth MAC address, Wi-Fi SSID / password, and vehicle identification code is pre-written or dynamically generated. The mobile phone reads and parses this information after touching it. (2) NFC as a “connection fuse”: NFC is only responsible for triggering and exchanging connection parameters. The actual data transmission (such as Android Auto / CarPlay screen mirroring, music streaming, and application data synchronization) is immediately switched to high-speed Wi-Fi or Bluetooth channels. (3) System layer services and intent mechanism: The mobile phone operating system listens for NFC events; after parsing the URI, the system service automatically initiates Bluetooth pairing and Wi-Fi connection according to the protocol. After the connection is successful, the system automatically starts the corresponding vehicle connectivity application through intent. (4) Dynamic password and encrypted link: 1) Static tag protection: Use NFC tags that support password protection or the car's built-in security chip to prevent malicious writing; 2) Dynamic parameters: The vehicle system can periodically update the Wi-Fi password read by NFC, or use a one-time token; 3) Link encryption: The established Wi-Fi and Bluetooth connections themselves are encrypted using WPA2 / WPA3, AES and other standard encryption. (5) Follow industry standards: Adopt or be compatible with standard protocols such as Digital Key issued by CCC (Car Connectivity Consortium). This standard defines how to use a mobile phone as a car key through NFC, BLE (Bluetooth Low Energy) and UWB (Ultra Wide Band), which includes a standardized connection process.

[0031] Specifically, Figure 1 This is a flowchart illustrating a vehicle-to-machine (V2M) interconnection method based on near-field communication provided in an embodiment of this application.

[0032] like Figure 1 As shown, the vehicle-to-machine (V2M) interconnection method based on near-field communication includes the following steps: In step S101, in response to the contact between the preset mobile terminal and the vehicle's NFC tag, the connection parameter information stored in the NFC tag is read, wherein the connection parameter information includes the Bluetooth MAC address, the wireless network password, and the vehicle identification code.

[0033] The preset mobile terminal can be selected by those skilled in the art according to their usage needs, and no specific limitation is made here.

[0034] Specifically, in order to resolve the contradiction between being always ready and saving power when the vehicle is in a dormant state after being turned off, this application introduces a dual-mode dormant architecture and heterogeneous wake-up logic. The system can maintain its ability to perceive the outside world under low power consumption and wake up the high-power main vehicle system only when the user has a clear intention to interact.

[0035] Specifically, after the vehicle is turned off and locked, the entire vehicle's electronic and electrical architecture enters a deep sleep mode. The main vehicle system and the high-power Wi-Fi communication module immediately cut off the main power supply and enter a deep sleep state to eliminate the risk of leakage. At this time, the control of the system is transferred to an ultra-low-power coprocessor (such as an MCU based on the ARM Cortex-M core) independent of the main system. This coprocessor and the connected BLE module and NFC controller maintain extremely low power consumption at the microampere level. In terms of power management, the NFC controller adopts an "interrupt suspension" mode, and its radio frequency front-end is in a high-impedance listening state, while the BLE module maintains intermittent broadcasting and scanning. That is, the vehicle continuously broadcasts a BLE signal containing its identity information at extremely low power. The user's mobile phone can continuously or intermittently listen to the BLE broadcast of the vehicle list in the background. As the main channel for communication between the vehicle and the outside world, it ensures that even when the vehicle's battery power is limited, the system can still maintain standby capability for several weeks or even several months.

[0036] When the phone detects the vehicle's BLE signal and the received signal strength indicator gradually increases, reaching a preset proximity threshold, the phone determines that the user intends to use the vehicle. At this point, the phone can perform two operations: first, it pushes a lightweight notification to the user saying "Approach the vehicle, touch to unlock," guiding the user to the next step; second, the phone automatically activates the NFC controller's drive current, switching it from passive listening to active read / write preparation, thereby shortening the handshake delay during subsequent touches.

[0037] Furthermore, when a user brings their phone close to the NFC sensing area on the door handle or B-pillar, the physical wake-up mechanism is immediately activated. This action generates a weak induced current for the passive NFC tag or directly triggers an interrupt signal for the active NFC reader. This signal is sufficient to wake up the BLE coprocessor, which is in a microampere-level sleep state. After the coprocessor is woken up, it starts the full NFC reader function and completes the identity authentication and data transmission channel construction process with the phone. After successful authentication, the coprocessor sends a "wake-up" signal to the vehicle network to activate the main vehicle system.

[0038] Therefore, this application solves the power consumption problem of the vehicle-side NFC module in the vehicle's sleep state through the collaborative wake-up mechanism of low-power Bluetooth and NFC, and achieves the following technical effects: (1) Ultra-low power consumption of the vehicle-side: During most of the sleep time, the vehicle-side only maintains the microampere current of BLE broadcast and NFC interruption detection, which is negligible to the battery consumption and can be parked for up to several months; (2) Seamless user experience: The user still perceives "one touch to open", but behind it is the efficient collaboration of BLE proximity perception and NFC precise triggering, which avoids the NFC module working at full power throughout the process.

[0039] Furthermore, such as Figure 2As shown, after waking up the vehicle, when a preset mobile terminal (e.g., a mobile phone) enters the radio frequency field range of the vehicle's NFC reader, an inductive coupling effect establishes a communication link. At this time, the vehicle's NFC controller sends a read command to the user's preset mobile terminal. The vehicle's NFC reader reads the vehicle identification code and user identity public key pre-installed in the mobile phone's NFC chip. The preset mobile terminal, in card emulation mode, responds to the read request through its built-in security unit or host card emulation service, outputting a pre-encapsulated NDEF (NFC Data Exchange Format) message. Simultaneously, the vehicle's system writes the aforementioned NDEF record containing the token and Wi-Fi information to the preset mobile terminal. This message is not ordinary text or a link, but a carefully designed URI (Uniform Resource Identifier). This URI not only contains the last few digits of the vehicle identification code as a unique identifier, but also a one-time, time-limited wireless network password, i.e., a dynamic token, and the name of the Wi-Fi hotspot currently created by the vehicle's system, SSID (Service Set Identifier) ​​(or the mobile hotspot information that the vehicle's system wants to connect to in STA mode), ensuring that only mobile phones with specific vehicle connectivity services installed can correctly identify and process the information.

[0040] The NDEF record payload contains key connection parameters required for establishing a high-speed interconnect. These parameters are encoded in key-value pairs or specific URI formats. The vehicle identification number (VIN) contains the last six digits or the complete 17-digit code of the vehicle's VIN (Vehicle Identification Number). This code serves not only as the vehicle's identification number but also as a basis for verifying on the mobile device whether the correct vehicle is connected, preventing users from accidentally connecting to the hotspot of the same vehicle next door.

[0041] Furthermore, after reading the NDEF record, the mobile terminal extracts the Token and Wi-Fi information. Subsequently, the system network module automatically uses the Token as the PSK (Pre-Shared Key) to connect to the Wi-Fi hotspot specified by the vehicle system. The Token's validity period is set to 30 seconds, after which it becomes invalid to prevent replay attacks.

[0042] Thus, the above mechanism solves the "cold start" delay problem, enabling the establishment of a high-speed channel within 3 seconds of touch, and replacing the process of manually finding Wi-Fi hotspots and entering complex passwords, compressing the manual configuration process that may have taken more than 30 seconds into one step.

[0043] In step S102, a high-speed data transmission channel between a preset mobile terminal and the vehicle is constructed based on the connection parameter information.

[0044] According to one embodiment of this application, before constructing a high-speed data transmission channel between a preset mobile terminal and a vehicle based on connection parameter information, the method further includes: receiving authentication information sent by the preset mobile terminal, wherein the authentication information includes the public key, digital certificate, and key credential of the preset mobile terminal; authenticating the preset mobile terminal based on the authentication information, and receiving a connection parameter information request from the preset mobile terminal when the authentication information passes; and constructing a high-speed data transmission channel between the vehicle and the preset mobile terminal based on the connection parameter information request.

[0045] According to one embodiment of this application, authenticating a preset mobile terminal based on identity authentication information includes: generating a preset dynamic verification mechanism based on the identity authentication information and sending the preset dynamic verification mechanism to the preset mobile terminal; receiving a digital signature result generated by the preset mobile terminal based on the preset dynamic verification mechanism, wherein the digital signature result is calculated by the preset mobile terminal's private key using the preset dynamic verification mechanism; verifying the digital signature result using the preset mobile terminal's public key, and determining that the identity authentication is successful when the verification result meets a first preset verification condition, and verifying whether the certificate chain of the digital certificate meets a second preset verification condition; when the certificate chain of the digital certificate meets the second preset verification condition, determining the user's permission level using a key credential, and sending the permission level to the preset mobile terminal.

[0046] The preset dynamic verification mechanism, the first preset verification condition, and the second preset verification condition can all be set by those skilled in the art based on actual verification needs and verification security, and are not specifically limited here.

[0047] Specifically, such as Figure 2 As shown, after the preset mobile terminal reads the connection parameter information via NFC, and before formally establishing a high-speed Wi-Fi data transmission channel, the system must execute a strict two-way authentication process based on public key infrastructure. This process aims to ensure that the connection request comes from a legitimate authorized device and to prevent replay attacks and relay attacks.

[0048] Specifically, during the initial pairing of the vehicle, the pre-set mobile terminal and the vehicle's infotainment system exchange their respective asymmetric encryption public keys via an NFC secure channel and authenticate each other. After successful authentication, the pre-set mobile terminal generates a unique key credential containing user identity authentication information and permission level (highest level). This key credential is then encrypted using the vehicle's public key and synchronized to the automaker's digital key service platform via the cloud. In addition, users can invite family members or friends via a mobile app, specifying permission levels (such as driving permission, time-limited permission, unlocking permission only, etc.). The cloud service platform then generates a "sub-key" corresponding to the permissions and sends it to the invited user's mobile phone via an encrypted channel.

[0049] Furthermore, once the NFC reader on the vehicle detects the preset mobile terminal entering the radio frequency field and completes the initial protocol handshake, it immediately generates a preset dynamic verification mechanism, namely a random number challenge. This random number has a one-time characteristic, meaning that a completely new value is generated with each touch interaction. The vehicle sends this random number challenge to the preset mobile terminal via the NFC data link, requesting the preset mobile terminal to sign the response. After receiving the random number challenge, the preset mobile terminal's built-in digital key application calls the private key stored in the security unit and uses an asymmetric encryption algorithm to perform a digital signature operation on the random number challenge, generating a signature result. It then uses the preset mobile terminal's public key to verify the digital signature result, and finally transmits the signature result, the preset mobile terminal's public key, the digital certificate, and the key credential back to the vehicle system via NFC.

[0050] After receiving the identity authentication information, the vehicle uses a pre-set cloud root certificate to verify whether the certificate chain of the digital certificate meets the second preset verification condition, that is, to verify the authenticity of the user's digital certificate and confirm that it has not been tampered with or expired. Subsequently, the vehicle uses the public key of the preset mobile terminal or the locally stored whitelist to verify the digital signature result. When the verification result meets the first preset verification condition, if the decrypted data matches the random number challenge initially sent by the vehicle system, it proves that the preset mobile terminal is the legitimate holder. At this point, the identity authentication is deemed successful, and the request is not a replay of old data (replay attack). At the same time, the vehicle uses the key credential to determine the user's permission level, that is, to parse the permission bits in the key credential to determine whether the user has the permission to request the current service (for example, a user with only "unlock permission" cannot request to start the "engine"), and sends the permission level to the preset mobile terminal.

[0051] Furthermore, during the aforementioned challenge-response process, the vehicle can measure the physical response time of NFC communication. Since the NFC communication distance is extremely short (<10cm), a legitimate response should be completed within a microsecond-level time threshold. If the response time exceeds the preset threshold, the system determines that there is a risk of relay attack (i.e., the signal is intercepted by a malicious device and forwarded to a real mobile phone at a distance, processed, and then transmitted back). The vehicle will immediately terminate the authentication process and refuse to establish a connection.

[0052] Therefore, only when the above verification passes will the vehicle recognize the preset mobile terminal as a trusted device. At this time, the vehicle will lift the access restrictions on the network module and officially receive the connection parameter information request sent by the preset mobile terminal. In response to the connection parameter information request, the vehicle will generate or release the dynamic credentials (such as a one-time Wi-Fi password or session token) required to establish a high-speed data transmission channel (i.e., the Wi-Fi connection channel between the preset mobile terminal and the vehicle), thereby completing the switch from the secure authentication state to the high-speed interconnection state. At the same time, it also ensures that the establishment of the high-speed channel is based on an absolutely trusted identity.

[0053] Therefore, based on the above identity authentication mechanism, secure and hierarchical vehicle access and control permission management is achieved. The private key does not leave the secure element or trusted execution environment of the mobile phone. The communication process is protected against eavesdropping, tampering, and relaying, achieving fine-grained permission management. Keys can be remotely distributed and revoked, perfectly replacing physical keys and cards. Even when the mobile phone is out of power (relying on NFC's residual power mode), its secure element can still complete the basic challenge-response process to unlock the car door.

[0054] In step S103, data is transmitted between the vehicle and the preset mobile terminal through a high-speed data transmission channel.

[0055] According to one embodiment of this application, after establishing a high-speed data transmission channel between a preset mobile terminal and a vehicle, the method further includes: obtaining target information of the preset mobile terminal based on the high-speed data transmission channel, and sending the target information and identity authentication information to a cloud rule engine; receiving a scene mode instruction set from the cloud rule engine; and controlling the vehicle to perform corresponding vehicle control actions according to the scene mode instruction set.

[0056] The target information includes at least one of the following: the current location of the preset mobile terminal, the current time, and the user's schedule data.

[0057] Specifically, after the preset mobile terminal and the vehicle successfully establish a high-speed data transmission channel, the system immediately switches from the connection state to the service state. The core of this stage is to utilize the high bandwidth and low latency characteristics of the high-speed data transmission channel, combined with the powerful computing capabilities of the cloud, to realize personalized cabin configuration based on user identity and environmental context.

[0058] Specifically, once the high-speed data transmission channel is established, the preset mobile terminal is no longer just a carrier for identity authentication, but transforms into an extension of the vehicle's context perception. Through this high-speed data transmission channel, the vehicle or cloud service will actively request and obtain the target information of the preset mobile terminal. This information constitutes the contextual environment for judging the user's intent, mainly including the current location, current time, and user schedule data of the preset mobile terminal.

[0059] The preset mobile terminal's current location is used to determine the vehicle's parking location, and the current system time is used to distinguish different time periods such as weekday commuting, weekend travel, or returning home late at night; the user's schedule data is the user's schedule data within the preset mobile terminal (such as the next meeting location and to-do items in the calendar), used to predict the user's potential destination.

[0060] Furthermore, the vehicle-side package the target information obtained above with the identity authentication information verified in the previous stage (such as user ID (identification) and permission level), and sends it to the cloud rule engine through the cloud interface. Then, it performs multi-dimensional logical matching, such as identity matching and condition matching. Identity matching can identify whether the current user is the car owner, a family member, or a temporary visitor. Condition matching can combine time and location to determine whether the current scenario meets preset rules. The rule engine can be customized by the user in the mobile app or the car manufacturer's cloud. For example, it may determine: "The current user is the car owner, the time is 08:00, the location is home, and the calendar shows going to the company", thus matching "weekday morning rush hour commuting mode". Once the cloud rule engine matches the corresponding scenario, it will generate a standardized scenario mode instruction set and send it to the vehicle-side through a high-speed data transmission channel. After receiving the instruction set, the actuator module on the vehicle-side will parse it into specific hardware control signals and automatically execute a series of complex vehicle control actions to achieve a personalized cockpit experience for the user.

[0061] For example, the rule engine may include: (1) Rule A: If the user is the car owner and touches the driver's door between 07:00 and 09:00, the "Work Mode" will be executed: unlock all doors, adjust the seat and steering wheel to position 1, turn on the air conditioning to 22°C, play the daily news podcast, and navigate to the company; (2) Rule B: If the user is the car owner and touches the driver's door after 20:00, the "Night Mode" will be executed: only unlock the driver's door, dim the interior lights, and mute the entertainment system; (3) Rule C: If the user is a family member and touches the door with NFC, the system will automatically switch to his / her seat and music preferences.

[0062] Furthermore, once NFC authentication is successful, the mobile phone, on the established high-speed data transmission channel, not only sends its identity information but also its current context information (such as the current GPS (Global Positioning System) location, time, battery level, and even the next event in the phone's calendar) to the vehicle's infotainment system. The vehicle's infotainment system then sends the user's identity and context information to the cloud-based rule engine. The engine matches the information according to preset rules and sends the matched "scene mode" instruction set to the vehicle's infotainment system. The actuator modules on the vehicle's infotainment system (which control the seats, air conditioning, entertainment system, etc.) then execute the instructions automatically according to the sequence.

[0063] Therefore, based on the aforementioned personalized workflow engine with context awareness and cloud configuration, simple connection actions can be upgraded into intelligent services with intent understanding. The vehicle transforms from a tool into a user-aware partner, enabling personalized cockpit experiences for users. Each family member can obtain an exclusive driving environment, and the rich application ecosystem of mobile phones (calendar, music, navigation) is deeply integrated with the vehicle's hardware capabilities, creating unlimited possibilities for functional expansion.

[0064] In summary, this application can achieve the following beneficial effects: (1) One-click connection: Users do not need to do any searching or input operations on their mobile phones or in-vehicle systems. They can complete device discovery and authentication simply by touching the device, making the user experience extremely simplified. (2) Play to strengths and avoid weaknesses: Combining the convenience of NFC and the high speed of Wi-Fi, users can enjoy the convenience of "tap to tap" while enjoying a high-quality experience of high-definition large screen, lossless audio and low-latency interaction. (3) Seamless integration: It realizes a fully automated process from physical touch-wireless connection-application launch, which is imperceptible to the user and provides a smooth experience; (4) Safe and reliable: Prevents vehicles from being maliciously connected and data eavesdropped on, and protects the privacy and security of users' vehicle data and personal mobile phone data; (5) Interoperability: Car owners are no longer limited to a specific mobile phone brand. As long as the mobile phone and the vehicle support the same standard, a consistent interconnected experience can be achieved, promoting the development of the ecosystem.

[0065] According to the near-field communication-based vehicle-to-everything (V2X) interconnection method of this application embodiment, in response to the contact between a preset mobile terminal and the NFC tag of a vehicle, the connection parameter information stored in the NFC tag is read, a high-speed data transmission channel between the preset mobile terminal and the vehicle is constructed based on the connection parameter information, and data is transmitted between the vehicle and the preset mobile terminal through the high-speed data transmission channel. This solves the problems of cumbersome operation, lack of unified security authentication mechanism, and inability to achieve personalized scene linkage in related technologies. By completing the exchange of connection parameters at the moment the mobile terminal and the vehicle touch, a Wi-Fi / Bluetooth dual channel is automatically established and encrypted identity authentication is triggered. Then, personalized scene linkage driven by a cloud-based rule engine is executed, thereby achieving simplified triggering, secure authentication, and intelligent scene-based V2X interconnection.

[0066] Next, referring to the accompanying drawings, a vehicle-to-machine interconnection device based on near-field communication proposed according to an embodiment of this application is described.

[0067] Figure 3 This is a block diagram of a vehicle-to-machine interconnection device based on near-field communication according to an embodiment of this application.

[0068] like Figure 3 As shown, the vehicle-to-machine interconnection device 10 based on near-field communication includes: a reading module 100, a building module 200, and a transmission module 300.

[0069] The reading module 100 is used to read the connection parameter information stored in the NFC tag in response to the contact between the preset mobile terminal and the vehicle's NFC tag. The connection parameter information includes the Bluetooth MAC address, the wireless network password, and the vehicle identification code. Module 200 is used to construct a high-speed data transmission channel between a preset mobile terminal and a vehicle based on connection parameter information; The transmission module 300 is used to transmit data between the vehicle and the preset mobile terminal through a high-speed data transmission channel.

[0070] According to one embodiment of this application, before constructing a high-speed data transmission channel between a preset mobile terminal and a vehicle based on connection parameter information, the construction module 200 further includes: The first receiving unit is used to receive authentication information sent by a preset mobile terminal, wherein the authentication information includes the public key, digital certificate and key credential of the preset mobile terminal; The authentication unit is used to authenticate the identity of the preset mobile terminal based on the identity authentication information, and to receive the connection parameter information request from the preset mobile terminal when the identity authentication information is successful. The construction unit is used to request the construction of a high-speed data transmission channel between the vehicle and the preset mobile terminal based on the connection parameter information.

[0071] According to one embodiment of this application, the authentication unit includes: The generation subunit is used to generate a preset dynamic verification mechanism based on identity authentication information and send the preset dynamic verification mechanism to a preset mobile terminal. The receiving subunit is used to receive the digital signature result generated by the preset mobile terminal based on the preset dynamic verification mechanism, wherein the digital signature result is calculated by the preset mobile terminal using the private key of the preset dynamic verification mechanism; The verification subunit is used to verify the digital signature result using the public key of the preset mobile terminal, and when the verification result meets the first preset verification condition, it determines that the identity authentication is successful, and verifies whether the certificate chain of the digital certificate meets the second preset verification condition. The determination subunit is used to determine the user's permission level using the key credential when the certificate chain of the digital certificate meets the second preset verification condition, and to send the permission level to the preset mobile terminal.

[0072] According to one embodiment of this application, after establishing a high-speed data transmission channel between a preset mobile terminal and a vehicle, the construction module 200 further includes: The acquisition unit is used to acquire target information of a preset mobile terminal based on a high-speed data transmission channel, and send the target information and identity authentication information to the cloud rule engine; The second receiving unit is used to receive the scene mode instruction set of the cloud rule engine; The control unit is used to control the vehicle to perform corresponding vehicle control actions according to the scene mode instruction set.

[0073] According to one embodiment of this application, the target information includes at least one of the following: the current location of the preset mobile terminal, the current time, and user schedule data.

[0074] According to the vehicle-to-everything (V2X) interconnection device based on near-field communication (NFC) embodiments of this application, in response to the contact between a preset mobile terminal and the vehicle's NFC tag, the device reads the connection parameter information stored in the NFC tag, constructs a high-speed data transmission channel between the preset mobile terminal and the vehicle based on the connection parameter information, and transmits data between the vehicle and the preset mobile terminal through the high-speed data transmission channel. This solves the problems of cumbersome operation, lack of unified security authentication mechanism, and inability to achieve personalized scene linkage in related technologies. By completing the exchange of connection parameters the instant the mobile terminal and vehicle touch, it automatically establishes a Wi-Fi / Bluetooth dual channel and triggers encrypted identity authentication, and then executes personalized scene linkage driven by a cloud-based rule engine, thereby achieving simplified triggering, secure authentication, and intelligent scene-based V2X interconnection.

[0075] Figure 4 A schematic diagram of the structure of a vehicle provided in an embodiment of this application. The vehicle may include: The memory 401, the processor 402, and the computer program stored on the memory 401 and capable of running on the processor 402.

[0076] When the processor 402 executes the program, it implements the vehicle-to-machine interconnection method based on near-field communication provided in the above embodiments.

[0077] Furthermore, the vehicle also includes: Communication interface 403 is used for communication between memory 401 and processor 402.

[0078] The memory 401 is used to store computer programs that can run on the processor 402.

[0079] Memory 401 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk storage device.

[0080] If the memory 401, processor 402, and communication interface 403 are implemented independently, then the communication interface 403, memory 401, and processor 402 can be interconnected via a bus to complete communication between them. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized into address buses, data buses, control buses, etc. For ease of representation, Figure 4 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0081] Optionally, in a specific implementation, if the memory 401, processor 402, and communication interface 403 are integrated on a single chip, then the memory 401, processor 402, and communication interface 403 can communicate with each other through an internal interface.

[0082] Processor 402 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of this application.

[0083] This embodiment also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described vehicle-to-machine interconnection method based on near-field communication.

[0084] This application also provides a computer program product, including a computer program that is executed to implement the near-field communication-based vehicle-to-machine interconnection method described in the above embodiments.

[0085] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0086] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this application, "N" means at least two, such as two, three, etc., unless otherwise explicitly specified.

[0087] Any process or method described in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more N executable instructions for implementing custom logic functions or processes, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as should be understood by those skilled in the art to which embodiments of this application pertain.

[0088] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of computer-readable media include: an electrical connection having one or more wires (electronic device), a portable computer disk drive (magnetic device), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which programs can be printed, because programs can be obtained electronically, for example, by optically scanning the paper or other media, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0089] It should be understood that the various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, the N steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0090] Those skilled in the art will understand that all or part of the steps of the methods described in the above embodiments can be implemented by a program instructing related hardware, and the program can be stored in a computer-readable storage medium. When executed, the program includes one or a combination of the steps of the method embodiments.

[0091] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0092] The storage medium mentioned above can be a read-only memory, a disk, or an optical disk, etc. Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions, and variations to the above embodiments within the scope of this application.

Claims

1. A vehicle-to-everything (V2X) interconnection method based on near-field communication, characterized in that, Includes the following steps: In response to the contact between a preset mobile terminal and the vehicle's NFC tag, the connection parameter information stored in the NFC tag is read, wherein the connection parameter information includes the Bluetooth MAC address, the wireless network password, and the vehicle identification code; A high-speed data transmission channel is constructed between the preset mobile terminal and the vehicle based on the connection parameter information; Data is transmitted between the vehicle and the preset mobile terminal through the high-speed data transmission channel.

2. The method according to claim 1, characterized in that, Before constructing a high-speed data transmission channel between the preset mobile terminal and the vehicle based on the connection parameter information, the method further includes: The system receives authentication information sent by the preset mobile terminal, wherein the authentication information includes the public key, digital certificate, and key credential of the preset mobile terminal. The preset mobile terminal is authenticated based on the identity authentication information, and a connection parameter information request from the preset mobile terminal is received when the identity authentication information passes the authentication. Based on the connection parameter information, a high-speed data transmission channel between the vehicle and the preset mobile terminal is requested to be constructed.

3. The method according to claim 2, characterized in that, The step of authenticating the preset mobile terminal based on the identity authentication information includes: A preset dynamic verification mechanism is generated based on the identity authentication information, and the preset dynamic verification mechanism is sent to the preset mobile terminal; Receive the digital signature result generated by the preset mobile terminal based on the preset dynamic verification mechanism, wherein the digital signature result is calculated by the preset mobile terminal using its private key on the preset dynamic verification mechanism; The digital signature result is verified using the public key of the preset mobile terminal. When the verification result meets the first preset verification condition, the identity authentication is determined to be successful, and the certificate chain of the digital certificate is verified to meet the second preset verification condition. When the certificate chain of the digital certificate meets the second preset verification condition, the user's permission level is determined using the key credential, and the permission level is sent to the preset mobile terminal.

4. The method according to claim 1, characterized in that, After establishing a high-speed data transmission channel between the preset mobile terminal and the vehicle, the method further includes: Based on the high-speed data transmission channel, the target information of the preset mobile terminal is obtained, and the target information and identity authentication information are sent to the cloud rule engine; Receive the scene mode instruction set from the cloud-based rule engine; According to the scene mode instruction set, control the vehicle to perform corresponding vehicle control actions.

5. The method according to claim 4, characterized in that, The target information includes at least one of the following: the current location of the preset mobile terminal, the current time, and the user's schedule data.

6. A vehicle-to-everything (V2X) interconnection device based on near-field communication, characterized in that, include: The reading module is used to read the connection parameter information stored in the NFC tag in response to the contact between the preset mobile terminal and the vehicle's NFC tag. The connection parameter information includes the Bluetooth MAC address, the wireless network password, and the vehicle identification code. A construction module is used to construct a high-speed data transmission channel between the preset mobile terminal and the vehicle based on the connection parameter information; The transmission module is used to transmit data between the vehicle and the preset mobile terminal through the high-speed data transmission channel.

7. The apparatus according to claim 6, characterized in that, Before constructing a high-speed data transmission channel between the preset mobile terminal and the vehicle based on the connection parameter information, the construction module further includes: The receiving unit is configured to receive authentication information sent by the preset mobile terminal, wherein the authentication information includes the public key, digital certificate, and key credential of the preset mobile terminal; An authentication unit is used to authenticate the preset mobile terminal based on the authentication information, and to receive a connection parameter information request from the preset mobile terminal when the authentication information is successful. The construction unit is used to request the construction of a high-speed data transmission channel between the vehicle and the preset mobile terminal based on the connection parameter information.

8. The apparatus according to claim 7, characterized in that, The authentication unit includes: A generation subunit is used to generate a preset dynamic verification mechanism based on the identity authentication information and send the preset dynamic verification mechanism to the preset mobile terminal; A receiving subunit is configured to receive a digital signature result generated by the preset mobile terminal based on the preset dynamic verification mechanism, wherein the digital signature result is obtained by the preset mobile terminal's private key using the preset dynamic verification mechanism; The verification subunit is used to verify the digital signature result using the public key of the preset mobile terminal, and when the verification result meets the first preset verification condition, it determines that the identity authentication is successful, and verifies whether the certificate chain of the digital certificate meets the second preset verification condition. The determination subunit is used to determine the user's permission level using the key credential when the certificate chain of the digital certificate meets the second preset verification condition, and to send the permission level to the preset mobile terminal.

9. A vehicle, characterized in that, include: A memory, a processor, and a computer program stored in the memory and capable of running on the processor, the processor executing the program to implement the vehicle-to-machine interconnection method based on near-field communication as described in any one of claims 1-5.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, The program is executed by the processor to implement the vehicle-to-machine interconnection method based on near-field communication as described in any one of claims 1-5.

Images