A tbox security access device

Abstract

The utility model relates to the field of automobile manufacturing, concretely relates to a TBox safety access device. USB interface is arranged at the left and right sides of safety access device, and USB interface is connected with PC end and TBOX end respectively, and the inside of safety access device is provided with chip, and chip is connected with the USB structure electricity of both sides, and TBOX safety authentication communication code is solidified on the chip, and PC end USB interface is connected to chip and power module, and the power voltage setting is 5V. The utility model device, through the generation check tool whether safety of safety password, the identity safety can access TBOX, can have access TBOX internal information or log on the basis of reserving the reserved USB mouth, brings the convenient for the debugging of research and development.

Description

Technical Field

[0001] This utility model relates to the field of automobile manufacturing, specifically to a TBox secure access device. Background Technology

[0002] Automotive TBOX modules, which communicate with external clouds, frequently encounter software bugs. Therefore, USB debugging ports are often provided for developers to analyze problems in detail and even rewrite software in case of system crashes, preventing the need for disassembly and rewiring. However, this USB port for developers could also become an entry point for external attackers to obtain vehicle information or attack the vehicle, necessitating security measures. Current solutions include not soldering the USB port onto mass-produced hardware to prevent it from being used as an attack entry point. However, this requires disassembling the TBOX, rewiring, and rewriting the software if a system crash occurs; debug logs cannot be obtained from USB and must be transmitted to the cloud, incurring significant bandwidth costs. Utility Model Content

[0003] To solve the above problems, this utility model provides a secure access device that requires a security password to access the internal components of the TBOX module, while retaining the USB interface of the TBOX module. The specific technical solution is as follows:

[0004] A TBox secure access device has USB interfaces on its left and right sides, which are respectively connected to a PC and a TBox. The secure access device contains a chip that is electrically connected to the USB structures on both sides. The chip has a TBox security authentication communication code embedded in it. The PC's USB interface is connected to the chip and a power module, and the power supply voltage is set to 5V.

[0005] Furthermore, the chip is equipped with a fragile label or a fuse structure to achieve physical tamper protection.

[0006] Furthermore, the USB interface is set to Type A or Type C.

[0007] When using this utility model, the secure access steps are as follows:

[0008] (1) Confirm that the PC tool and TBOX are connected via the USB port of the TBox secure access device; (2) The user loads the identity certificate obtained from the R&D department into the tool; (3) After clicking the start button on the tool, the tool starts sending the identity certificate to TBOX; (4) After receiving the identity certificate of the tool, TBOX uses the pre-made public key to parse the received certificate and verify whether the certificate is valid; (5) If the identity certificate is verified, the tool serial number attached to the certificate is read and a HASH value is generated by SHA256 or a private algorithm based on this number; (6) TBOX takes the last 6 bits of the HASH value as the security password to enter the system and sends an ACK message indicating that the identity certificate has been received to the tool; (7) After receiving the ACK message from TBOX, the tool generates a HASH value using the same algorithm as TBOX and sends the last 6 bits to TBOX; (8) TBOX compares the received HASH value with the HASH value generated above. If they are the same, the tool is allowed to access internal information and a success value is returned. If they are different, an error value is returned directly; (9) After receiving the result returned by TBOX, if the received result is successful, the tool automatically inputs adb. Enter the TBOX system via shell or other commands; if the received data is incorrect, display the verification failure and the corresponding error value.

[0009] This utility model device verifies the security of the security password generation tool. If the identity is secure, access to the TBOX is possible. It can access the internal information or logs of the TBOX while retaining the USB port, which brings convenience to the debugging of research and development. Attached Figure Description

[0010] Figure 1 A schematic diagram of the structure of this utility model;

[0011] Figure 2 This utility model provides a diagram illustrating the secure access steps during use. Detailed Implementation

[0012] The technical solutions of the present utility model will be clearly and completely described below with reference to the accompanying drawings of the embodiments. Obviously, the described embodiments are only some embodiments of the present utility model, and not all embodiments. Based on the embodiments of the present utility model, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the protection scope of the present utility model.

[0013] like Figure 1As shown, a TBox secure access device has USB ports on both the left and right sides, connecting to a PC and the TBox respectively. An internal chip is electrically connected to the USB ports on both sides, and the chip contains TBox security authentication communication code. The PC's USB port is connected to the chip and a power module, with a power supply voltage of 5V. The chip is equipped with a tamper-evident tag or fuse structure for physical tamper protection.

[0014] The USB interface can be set to Type A or Type C. Alternatively, a USB-to-serial adapter can be set up to adapt to different connection ports.

[0015] When using this utility model, the secure access steps are as follows: Figure 2 As shown, specifically:

[0016] (1) Confirm that the PC tool and TBOX are connected via the USB port of the TBox secure access device;

[0017] (2) Users load identity certificates obtained from internal R&D into the tool;

[0018] (3) After clicking the start button on the tool, the tool will start sending the identity certificate to TBOX;

[0019] (4) After receiving the identity certificate of the tool, TBOX uses the pre-made public key to parse the received certificate and verify whether the certificate is valid;

[0020] (5) If the identity certificate verification is successful, the tool serial number attached to the certificate is read and a HASH value is generated using SHA256 or a private algorithm based on this serial number;

[0021] (6) TBOX takes the last 6 bits of the HASH value as the security password to enter the system and sends an ACK message to the tool indicating that the identity certificate has been received;

[0022] (7) After receiving the ACK message from TBOX, the tool generates a HASH value using the same algorithm as TBOX and sends the last 6 bits to TBOX;

[0023] (8) TBOX compares the received HASH value with the HASH value generated above. If they are the same, the tool is allowed to access internal information and a success value is returned. If they are different, an error value is returned directly.

[0024] (9) After the tool receives the result returned by TBOX, if the received result is successful, it will automatically enter adbshell or other commands to enter the TBOX system; if the received data is incorrect, it will display the verification failure and the corresponding error value.

[0025] The preferred embodiments of this patent have been described in detail above. However, this patent is not limited to the above embodiments. Within the scope of knowledge possessed by those skilled in the art, various changes can be made without departing from the spirit of this patent.

Claims

1. A TBox secure access device, characterized in that: USB interfaces are provided on the left and right sides of the secure access device, respectively, and the USB interfaces are connected to the PC and the TBOX. The secure access device contains a chip, which is electrically connected to the USB structures on both sides. The chip has TBOX security authentication communication code embedded in it. The PC USB interface is connected to the chip and the power module, and the power supply voltage is set to 5V.

2. The TBox secure access device according to claim 1, characterized in that: The chip is equipped with a fragile label or fuse structure to achieve physical tamper protection.

3. The TBox secure access device according to claim 1, characterized in that: The USB interface is set to Type A or Type C.

Images