Carrier, authentication method and apparatus for carrier and control device, and medium

Abstract

Provided in the present description are an authentication method and apparatus for a carrier and a control device, and a medium and a vehicle. The method comprises: in response to establishing a communication channel with a control device and on the basis of the communication channel, receiving a unique identifier sent by the control device; acquiring a matching result between the unique identifier of the control device and several pieces of legitimate preset identification information; and when the matching result indicates that matching is successful, sending authentication data of the carrier to the control device, wherein the authentication data indicates that the control device and the carrier are successfully authenticated.

Description

Vehicle and authentication method, device, and medium for vehicle and control device

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims priority to the Chinese patent application filed with the China Patent Office on July 27, 2023, with application number 202310938818.7, the entire contents of which are incorporated by reference into this application. Technical Field

[0003] The embodiments of this specification relate to, but are not limited to, the field of data interaction technology, and in particular relate to, but are not limited to, a vehicle and an authentication method, apparatus, and medium for a vehicle and a control device. Background Art

[0004] In addition to traditional direct-insert keys, vehicle keys also include remote control keys. When a user uses a remote control key to control a vehicle, it sends signals to the vehicle via wireless technology to control various vehicle functions (such as locking and unlocking doors and opening or closing power windows). Therefore, the advantage of a remote control key is that the user can control the vehicle from the vicinity without having to insert the key into the door or the car.

[0005] Summary of the Invention

[0006] The following is a summary of the subject matter described in detail herein. This summary is not intended to limit the scope of the claims. According to a first aspect of an embodiment of this specification, a method for authenticating a vehicle and a control device is provided, applied to the vehicle, the method comprising:

[0007] In response to establishing a communication channel with the control device, receiving a unique identifier of the control device based on the communication channel;

[0008] Obtaining a matching result between the unique identifier of the control device and a plurality of legal preset identification information;

[0009] When the matching result indicates a successful match, authentication data indicating successful authentication between the control device and the vehicle is sent to the control device.

[0010] According to a second aspect of an embodiment of this specification, a method for authenticating a vehicle and a control device is provided, which is applied to the control device. The method includes:

[0011] In response to establishing a communication channel with the vehicle, sending the unique identifier to the vehicle via the communication channel;

[0012] Receive authentication data sent by the vehicle, wherein the authentication data is sent after the vehicle obtains a matching result that the unique identifier successfully matches a number of legal preset identification information, and the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0013] According to a third aspect of an embodiment of this specification, a method for authenticating a vehicle and a control device is provided, which is applied to a cloud, wherein the cloud communicates with the vehicle, and the method includes:

[0014] Obtaining a unique identifier sent by the vehicle; the unique identifier is received by the vehicle from the control device based on a communication channel established with the control device;

[0015] A matching result is obtained by matching the unique identifier with several stored legal preset identification information, and the matching result is sent to the vehicle; when the matching result indicates a successful match, the vehicle sends the authentication data of the vehicle to the control device, wherein the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0016] According to a fourth aspect of the embodiments of this specification, there is provided an authentication apparatus for a vehicle and a control device, which is applied to a vehicle, and includes:

[0017] a first receiving module, configured to, in response to establishing a communication channel with the control device, receive a unique identifier sent by the control device based on the communication channel;

[0018] A first acquisition module is used to obtain a matching result between the unique identifier of the control device and a plurality of legal preset identification information;

[0019] The first sending module is configured to send authentication data of the vehicle to the control device when the matching result indicates a successful match, wherein the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0020] According to a fifth aspect of the embodiments of this specification, there is provided an authentication apparatus for a vehicle and a control device, which is applied to the control device, and the apparatus includes:

[0021] a second sending module, configured to, in response to establishing a communication channel with the vehicle, send a unique identifier to the vehicle via the communication channel;

[0022] The second receiving module is used to receive the authentication data of the vehicle sent by the vehicle; the authentication data is sent after the vehicle obtains the matching result of the unique identifier and a number of legal preset identification information, and the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0023] According to the sixth aspect of the embodiments of this specification, a computer-readable storage medium is provided, on which a computer program is stored. When the program is executed by a processor, the steps of the vehicle and control device authentication method as described in any one of the embodiments provided in the first aspect, the second aspect, or the third aspect are implemented.

[0024] According to the seventh aspect of the embodiments of this specification, a vehicle is provided, comprising a memory, a processor, and a computer program stored in the memory and runnable on the processor; wherein the processor is configured to execute the steps of the vehicle and control device authentication method as described in any one of the embodiments provided in the first aspect, the second aspect, or the third aspect.

[0025] The technical solutions provided by the embodiments of this specification may have the following beneficial effects:

[0026] In the embodiment of this specification, when the control device approaches the vehicle, the vehicle and the control device can establish a communication channel based on a preset communication method (such as wireless communication). Since the control device and the vehicle have not yet been successfully authenticated, in order to achieve pairing authentication with the vehicle, the control device will send its own unique identifier to the vehicle through the communication channel to indicate its identity.

[0027] After receiving the unique identifier from the control device, the vehicle verifies its legitimacy by matching it against several pre-set, valid identifiers. If a match is found, the unique identifier is deemed legitimate, allowing authentication between the control device and the vehicle. The vehicle's authentication data is then sent to the control device.

[0028] This method allows authentication of the control device and the vehicle to be completed at any stage after vehicle production (for example, after the user picks up the vehicle, they can place the control device close to the vehicle to establish a communication channel and then complete authentication). This eliminates the need for the manufacturer to pre-write the vehicle's authentication data into the control device, nor does it require the control device to be sold bundled with the vehicle. This helps to weaken the binding relationship between the vehicle and the control device.

[0029] It should be understood that the above general description and the following detailed description are only exemplary and explanatory and are not limiting of the present specification. Other aspects will become apparent upon reading and understanding the accompanying drawings and detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the specification and, together with the description, serve to explain the principles of the specification.

[0031] FIG1 shows an application scenario diagram of an authentication method for a vehicle and a control device provided in an embodiment of this specification.

[0032] FIG2 shows a flow chart of a method for authenticating a vehicle and a control device provided in an embodiment of this specification.

[0033] FIG3 shows a flowchart of another method for authenticating a vehicle and a control device provided in an embodiment of this specification.

[0034] FIG4 shows a block diagram of an interaction between a cloud, a control device, and a vehicle provided in an embodiment of this specification.

[0035] FIG5 is a hardware structure diagram of a vehicle in which an authentication device for a vehicle and a control device is located according to an exemplary embodiment of this specification. DETAILED DESCRIPTION

[0036] Exemplary embodiments will be described in detail herein, with examples illustrated in the accompanying drawings. In the following description, when referring to the drawings, identical numerals in different figures represent identical or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments are not intended to represent all embodiments consistent with this specification. Rather, they are merely examples of apparatus and methods consistent with certain aspects of this specification, as detailed in the appended claims.

[0037] The terms used in this specification are for the purpose of describing specific embodiments only and are not intended to limit this specification. As used in this specification and the appended claims, the singular forms "a," "an," "the," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and / or" as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items.

[0038] It should be understood that although the terms first, second, third, etc. may be used in this specification to describe various information, such information should not be limited to these terms. These terms are merely used to distinguish information of the same type from one another. For example, first information may also be referred to as second information, and similarly, second information may also be referred to as first information without departing from the scope of this specification. Depending on the context, the term "if" as used herein may be interpreted as "when," "when," or "in response to determining."

[0039] In this specification and in the embodiments, a vehicle refers to a tool or mechanical device used to transport people, goods, or equipment. A vehicle can be a land, water, or air vehicle used for movement and transportation in different environments. There are many types of vehicles, including but not limited to cars, trucks, trains, ships, airplanes, motorcycles, bicycles, etc. For easier understanding, the following description uses a vehicle as an example.

[0040] Both the control device and the vehicle are equipped with wireless communication modules for realizing wireless communication between the vehicle and the control device (such as low-power Bluetooth communication, near-field communication, etc.). Common control devices include: mobile phones, tablets, vehicle-specific keys (such as vehicle remote control keys with buttons), etc.

[0041] To ensure the security of the control device, the vehicle must authenticate the control device by pairing it with the vehicle. The vehicle's authentication data is sent to the control device, completing the authentication process. The successfully authenticated control device is then used as the correct key (for ease of description, the control device will be referred to as the key below). This ensures that only the user holding the correct key can control the vehicle, improving vehicle security.

[0042] In the related art, the manufacturer usually completes the authentication between the key and the vehicle in advance, writes the authentication data directly into the key, and then sells it to the user through the dealer. After the user gets the key carrying the authentication data, he can directly control the vehicle. The disadvantage of this pre-authentication method is that the vehicle and the key must be sold according to the pre-authentication relationship, the sales method is not flexible enough, and once the key is lost, the only way is to contact the manufacturer to re-authenticate a new key, which is obviously more troublesome. Figure 1 shows an application scenario diagram of an authentication method for a vehicle and a control device provided in an embodiment of this specification. As shown in Figure 1: When the authentication data of the vehicle is stored in the key, after the key enters a specific area of ​​the vehicle (the range covered by the communication), a communication channel can be established between the vehicle and the key, and the key can send the control instructions carrying the authentication data to the vehicle through the communication channel. After verifying that the authentication data is correct, the vehicle executes the control instructions sent by the key.

[0043] However, this method of pre-writing authentication data into the key will lead to the following problems: For users: If the manufacturer matches 4 keys to each vehicle by default, then when the user wants 5 keys (or loses a key and needs to obtain a new key), the dealer cannot directly configure it for the user. It is necessary to negotiate with the manufacturer, and then the manufacturer will write the authentication information of the vehicle purchased by the user into the new key, and redistribute the new key to the dealer, and then the dealer will deliver it to the user. This is obviously more troublesome.

[0044] For manufacturers and dealers, maintaining the key paired with the vehicle is crucial during vehicle production and sales, as the key-to-vehicle binding cannot be removed. This can lead to redundant keys for writing vehicle authentication data (for example, some customers only require a mechanical insert key, or some simply need to activate the remote key function on their phone). Furthermore, the binding between the vehicle and key must be maintained at all times. If the wrong key is used, the user will be unable to control the vehicle properly.

[0045] The embodiments of this specification provide a method, apparatus, medium, and vehicle for authenticating a vehicle and a control device, which do not require the manufacturer to write the vehicle's authentication data into the control device in advance, thereby eliminating the need for the control device to be sold bundled with the vehicle and improving the security of the key while ensuring the flexibility of key activation.

[0046] Next, the embodiments of this specification are described in detail.

[0047] When the control device does not store the vehicle's authentication data (i.e., the manufacturer does not need to write the vehicle's authentication data into the key in advance), pairing authentication must first be performed between the control device and the vehicle so that the control device can control the vehicle to perform specific operations after the pairing authentication is completed.

[0048] In order to complete the pairing authentication between the vehicle and the control device, Figure 2 shows a flowchart of an authentication method for a vehicle and a control device provided in an embodiment of this specification. As shown in Figure 2, the method is applied to the vehicle (for example, it can be the central processing unit of the vehicle), and the method includes steps 201 to 203.

[0049] Step 201 : In response to establishing a communication channel with a control device, a unique identifier of the control device is received based on the communication channel, wherein different control devices have different unique identifiers.

[0050] To complete pairing authentication between the control device and the vehicle, you need to first establish a communication channel between the control device and the vehicle. The following examples illustrate several ways to establish a communication channel between the vehicle and the control device.

[0051] Method 1: The vehicle performs periodic detection at specific time intervals to determine whether there is a control device approaching. When the vehicle detects that a control device is approaching (as shown in Figure 1, the control device enters the communication coverage of the vehicle), the vehicle can initiate a broadcast signal to prompt all potential control devices around it to initiate a pairing authentication request. This broadcast signal usually contains some identification marks so that the control device can distinguish requests from different vehicles. Among them, these identification marks may include, for example, the ID of the control device, manufacturer code, vehicle model, pairing request code, security information, and other custom information. After the control device receives the broadcast signal from the vehicle, it initiates a pairing authentication request to the vehicle, thereby performing pairing authentication with the vehicle. Through the above operations, the control device can establish a secure communication channel with the vehicle.

[0052] Method 2: The control device actively sends a broadcast signal to the vehicle. After receiving the broadcast signal, the vehicle responds with a pairing authentication request to the control device. After receiving the pairing authentication request from the vehicle, the control device establishes a secure communication channel with the vehicle. In some cases, after receiving the broadcast signal from the control device, for example, when the vehicle confirms that the broadcast signal sent by the control device is valid, the vehicle responds with a pairing authentication request to the control device.

[0053] After the control device and the vehicle establish a communication channel in the above manner, the control device performs pairing authentication with the vehicle by sending a unique identifier to the vehicle.

[0054] When the control device and the vehicle establish a communication channel through other means, the unique identifier can be actively sent by the control device to the vehicle, thereby initiating the pairing authentication process.

[0055] A unique identifier is used to distinguish different control devices and indicates whether the control device is qualified to complete pairing authentication with the vehicle. The unique identifier can include the identity of the control device, the unique activation key of the control device, or the identity, activation key, or the binding relationship between the identity and activation key. The unique identifier is set for the key during the key production (generation) process and is stored in the key's secure storage space.

[0056] Step 202: Obtain a matching result between the unique identifier of the control device and a plurality of legal preset identifier information.

[0057] When several legal preset identification information are stored in the vehicle, the matching result can be obtained by the vehicle matching the unique identification of the control device with several legal preset identification information; when several legal preset identification information are not stored in the vehicle, the matching result can be the vehicle sending the unique identification of the control device to an area where several legal preset identification information is stored (such as the cloud), and the matching result returned after the area where several legal preset identification information is stored queries.

[0058] When the unique identifier of the control device is consistent with any legal preset identification information, the matching result indicates a successful match; when the unique identifier of the control device is inconsistent with any legal preset identification information, the matching result indicates a failed match.

[0059] Step 203 : When the matching result indicates a successful match, authentication data indicating successful authentication between the control device and the vehicle is sent to the control device.

[0060] When the matching result indicates a successful match, it indicates that this control device can be used as a correct key to control the vehicle, so the authentication data of the vehicle is sent to the control device.

[0061] Authentication data can be generated by the vehicle itself or written into the vehicle by the manufacturer during production. This data includes, but is not limited to, the authentication key (used by the control device to subsequently control the vehicle, which is different from the activation key included in the key's unique identifier), key usage permissions, and validity period.

[0062] In an embodiment of the present specification, when the control device approaches the vehicle, the vehicle and the control device can establish a communication channel based on a preset communication method (such as wireless communication). Since the control device and the vehicle have not yet been successfully authenticated, in order to achieve pairing authentication with the vehicle, the control device will send its own unique identifier to the vehicle through the communication channel to indicate its identity.

[0063] After receiving the unique identifier from the control device, the vehicle verifies its legitimacy by matching it against several pre-set, valid identifiers. If a match is found, the unique identifier is deemed valid, allowing authentication between the control device and the vehicle. The vehicle's authentication data is then sent to the control device.

[0064] This method allows authentication of the control device and the vehicle to be completed at any stage after vehicle production (for example, after the user picks up the vehicle, they can place the control device close to the vehicle to establish a communication channel and then complete authentication). This eliminates the need for the manufacturer to pre-write the vehicle's authentication data into the control device, nor does it require the control device to be sold bundled with the vehicle. This helps to weaken the binding relationship between the vehicle and the control device.

[0065] In one feasible embodiment, when the unique identifier is stored in the control device, the unique identifier includes: the identity identifier of the control device and / or the activation key of the control device. When performing step 202 to obtain a matching result between the unique identifier of the control device and multiple valid preset identification information, the following three situations are included.

[0066] Case 1: When the unique identifier of the control device is the identity identifier of the control device, a matching result between the identity identifier and the plurality of legal preset identification information is obtained, and the preset identification information is a legal identity identifier.

[0067] When the identity identifier of the control device is a self-contained identity identifier of the control device, after each batch of control devices is produced by the legitimate manufacturer, the self-contained identity identifier of each control device can be directly obtained as the legitimate identity identifier, thereby obtaining a plurality of legitimate preset identification information. Alternatively, the identity identifier of the control device can be a unique identity identifier pre-assigned to each control device produced by the legitimate manufacturer, and these unique identity identifiers pre-assigned to all control devices are used as the legitimate identity identifier, thereby obtaining a plurality of legitimate preset identification information.

[0068] In this way, when a control device is authenticated with a vehicle and several legal preset identification information are stored in the vehicle, when the vehicle receives the identity of the control device, it can find a legal identity that matches the identity of the control device in several preset identification information, thereby obtaining a successful matching result, where the matching here can refer to the identity of the control device being consistent with one of the multiple legal identity identifiers stored in the vehicle.

[0069] However, when the vehicle receives the identity identification of the control device produced illegally, since the preset identification information stored in the vehicle does not include the identity identification of the control device produced illegally, a matching result of failure will be obtained.

[0070] Case 2: when the unique identifier of the control device is the activation key of the control device, a matching result between the activation key and the plurality of legal preset identification information is obtained, and the preset identification information is the legal activation key.

[0071] The unique identifier can also be an activation key, not an identity identifier. For example, the activation key for a control device can be a unique activation key pre-assigned to each control device produced by a legitimate manufacturer. These unique activation keys pre-assigned to all control devices are used as the legitimate activation keys corresponding to the vehicle, thereby obtaining a number of legitimate preset identification information.

[0072] When a control device is authenticated with a vehicle and several legal preset identification information are stored in the vehicle, when the vehicle receives the activation key of the control device, it can find a legal activation key that matches the activation key of the control device in the several preset identification information, thereby obtaining a successful matching result, where the matching here may mean that the activation key of the control device is consistent with a legal activation key among the multiple legal activation keys stored in the vehicle.

[0073] However, when a vehicle receives activation keys for illegally produced control devices, it will fail to match them because the activation keys for these illegally produced devices are not included in the vehicle's stored identification information. Furthermore, because activation keys for different control devices are unique, even if an unauthorized individual obtains a key, it can only be used to steal that control device; they cannot use that key to replicate other control devices for other vehicles.

[0074] Case three: When the unique identifier of the control device includes the identity identifier and activation key of the control device, the binding relationship between the identity identifier and the activation key is obtained relative to the matching result of the several legal preset identification information, and the preset identification information includes: the binding relationship between the legal identity identifier and the legal activation key.

[0075] The identity and activation key of the control device are generated in the aforementioned manner, which will not be described in detail here. After determining the identity and activation key of each control device, a binding relationship between the identity and the activation key is generated.

[0076] It should be noted that when the activation key is written to the control device, the information sent by the control device can be encrypted using the activation key, thereby further improving the communication security between the vehicle and the control device.

[0077] In a feasible embodiment, the vehicle communicates with a cloud (eg, a server), and the preset identification information is stored in the cloud.

[0078] If the preset identification information is stored in the cloud, the unique identification in the control device is also written into the control device after the cloud interacts with the manufacturer of the control device.

[0079] When the unique identification of the control device includes the identity identification and activation key of the control device, Figure 3 shows a flowchart of another authentication method for a vehicle and a control device provided in an embodiment of this specification. As shown in Figure 3, when executing step 202 to obtain the matching result between the unique identification of the control device and several legal preset identification information, it includes steps 301 to 302.

[0080] Step 301: Send the identity identifier to the cloud; and receive a legal activation key that matches the identity identifier and is found on the cloud.

[0081] Because the cloud stores several pieces of legal, preset identification information, including bindings between legal identities and legal activation keys, upon receiving the identity sent by the control device, the cloud can determine whether the identity matches any legal identity corresponding to the vehicle. If so, it can further determine the legal activation key bound to the legal identity. This legal activation key is then used as the legal activation key matching the identity and sent to the vehicle.

[0082] Step 302: Obtain a matching result between the activation key and the legal activation key, wherein the matching result is used to indicate whether the binding relationship between the identity identifier and the activation key is a legal binding relationship, wherein a legal binding relationship may indicate that the binding relationship between the identity identifier of the control device and the activation key matches the binding relationship between the identity identifier and the legal activation key.

[0083] The activation key of the control device can be directly compared with the retrieved legal activation key. If the comparison is consistent, it indicates that the binding relationship between the control device's identity and the retrieved legal activation key is recorded in the preset identification information and is the same as the binding relationship between the legal identity and the legal activation key in the preset identification information. Since a legal activation key matching the identity has been retrieved in step 301, it indicates that the preset identification information stored in the cloud includes a legal identity that is consistent with the identity of the control device. In this case, the legal identity in step 302 and the identity are the same.

[0084] When executing step 201, receiving the unique identifier sent by the control device based on the communication channel includes: receiving target information sent by the control device based on the communication channel; the target information includes the identity identifier, and encrypted data after encrypting the specified data with the activation key.

[0085] Then, when the activation key is sent to the carrier in a non-plaintext manner, when executing step 302 to obtain the matching result between the activation key and the legal activation key, the following steps are included: decrypting the encrypted data based on the legal activation key to obtain a matching result of whether the decryption is successful.

[0086] Because the unique identifier of the control device includes both an identity identifier and an activation key, the activation key can be used to encrypt the specified data in the control device to generate encrypted data, which the control device then sends to the vehicle. This allows the activation key to be sent indirectly to the vehicle without having to be sent in plain text, preventing the plain text activation key from being intercepted or stolen during information exchange, thereby further ensuring the security of data communications between the vehicle and the control device.

[0087] Since the activation key is transmitted in the form of encrypted designated data, the queried legal activation key can be used directly to decrypt the encrypted data of the control device. If the decryption is successful, it means that the activation key used by the control device to encrypt the designated data is consistent with the queried legal activation key. At this time, it means that the binding relationship between the identity of the control device and the legal activation key corresponding to the vehicle is recorded in the preset identification information, and is the same as the binding relationship between the legal identity and the legal activation key in the preset identification information. The matching result indicates a successful match. Conversely, if the decryption fails, it means that the activation key used by the control device to encrypt the designated data is inconsistent with the legal activation key, so the matching result indicates a failed match.

[0088] Through the above method, on the one hand, by storing the preset identification information in the cloud, the storage space in the vehicle can be freed up. When the vehicle needs to query whether the unique identification of the control device is legal, it only needs to obtain the corresponding data from the cloud and then match it. It is also convenient to obtain the latest preset identification information through the cloud in time after the cloud is updated; on the other hand, since the unique identification of the control device also includes the activation key, the security of information interaction can be further improved through the binding relationship between the activation key and the identity identification.

[0089] It should be noted that when the unique identifier only includes the identity of the control device, the identity can be sent to the cloud, and the cloud can obtain a legitimate identity that is identical to the identity from the preset identification information to determine that the match result is successful. Alternatively, all preset identification information in the cloud can be obtained and matched one by one to obtain a matching result.

[0090] Similarly, when the unique identifier only includes the activation key of the control device, matching can also be performed in the above manner.

[0091] In a feasible embodiment, the vehicle communicates with the cloud, and the preset identification information is stored in the cloud.

[0092] In this case, the matching can be performed directly through the cloud, and the matching result can be obtained from the cloud. Therefore, when executing step 202 to obtain the matching result between the unique identifier of the control device and the plurality of legal preset identification information, the following steps are included: the unique identifier received from the control device is sent to the cloud; and the matching result feedback from the cloud for the unique identifier of the control device is received. The matching result is determined by the cloud after matching the unique identifier of the control device with the plurality of stored legal preset identification information.

[0093] For the three situations of the unique identification of the control device, the following methods can be used to obtain the matching results.

[0094] Case 1: The unique identifier includes only the identity identifier. The identity identifier received from the control device is sent to the cloud. The cloud determines whether there is a legitimate identity identifier that matches the control device's identity identifier based on the preset identification information. If so, a match result is generated indicating a successful match.

[0095] Case 2: The unique identifier includes only the activation key. The activation key received from the control device is sent to the cloud. The cloud then determines whether a legitimate activation key that matches the activation key of the control device exists based on the valid activation key corresponding to the preset identification information. If so, a match result is generated indicating a successful match.

[0096] Alternatively, encrypted data encrypted with the activation key received from the control device is sent to the cloud. The cloud then decrypts the data using each valid activation key. The valid activation key that can successfully decrypt the encrypted data is used as the valid activation key that matches the activation key of the control device, and a matching result is generated indicating a successful match. If none of the valid activation keys can successfully decrypt the encrypted data, a matching result is generated indicating a failed match.

[0097] In case three, the unique identifier includes both the identity and activation key. In this case, both the identity and activation key received from the control device can be sent to the cloud. The cloud can then determine whether the pre-set identification information contains a binding relationship between the identity and activation key that is identical to the binding relationship between the identity and activation key. If so, a match result is generated indicating a successful match.

[0098] Alternatively, the identity received from the control device and the encrypted data obtained by encrypting the specified data using the activation key are sent to the cloud. The cloud first obtains a legitimate identity that matches the identity of the control device and the legitimate activation key corresponding to the legitimate identity. The encrypted data is then decrypted using the legitimate activation key. If the decryption is successful, a match result indicating a successful match is generated.

[0099] Through the above method, on the one hand, by storing the preset identification information in the cloud, the storage space in the vehicle can be freed up; on the other hand, the matching of the unique identifier can be completed in the cloud, freeing up the computing power of the vehicle. The vehicle only needs to obtain the matching result to complete the pairing authentication with the control device.

[0100] In a feasible embodiment, after executing step 203 to send the authentication data of the vehicle to the control device, the method further includes the following steps: receiving a control instruction sent by the control device for controlling the vehicle to perform a specific operation, the control instruction is generated by the control device in response to the user's control operation, and the control instruction carries the authentication data, and after determining that the vehicle and the control device are successfully authenticated based on the authentication data, performing the specific operation.

[0101] Examples of specific operations include: opening and closing doors, unlocking, locking, starting, opening and closing windows, and so on. When generating a control command, the control device processes it based on its stored authentication data. For example, it may encrypt or sign the control command using the authentication key contained in the authentication data. Upon receiving the control command, the vehicle will also decrypt it using the authentication key. If decryption is successful, the control device has permission to control the vehicle, and the vehicle will then execute the control command normally.

[0102] A user control operation can be generated by the user pressing a designated button (physical or virtual), such as pressing the "Lock Vehicle" button. A user control operation can also be automatically generated in response to the user's voice. When the control device receives the user's control operation, it generates a control instruction for controlling the vehicle to complete the specific operation. The control operation corresponds to the specific operation.

[0103] After the vehicle receives the control instruction, since the control instruction includes authentication data (or at least part of the authentication data), it can determine whether the control device has successfully authenticated itself. If the authentication is successful, the control instruction is considered to be issued by a legitimate control device, and the control instruction can be executed to allow the vehicle to complete a specific operation.

[0104] In a feasible embodiment, a method for authenticating a vehicle and a control device is provided, which is applied to the control device, and the method includes: in response to establishing a communication channel with the vehicle, sending a unique identifier of the control device to the vehicle through the communication channel; receiving authentication data of the vehicle sent by the vehicle, wherein the authentication data is sent after the vehicle obtains a matching result of a successful match between the unique identifier and a number of legal preset identification information, and the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0105] After receiving the authentication data of the vehicle sent by the vehicle, the method also includes the following steps: generating a control instruction for controlling the vehicle to perform a specific operation in response to a user's control operation, the control instruction carrying the authentication data; sending the control instruction to the vehicle so that the vehicle performs the specific operation after determining that the vehicle and the control device are successfully authenticated based on the authentication data.

[0106] The relevant contents in the above steps have been introduced in the above embodiments and will not be repeated here.

[0107] Figure 4 shows an interaction block diagram between a cloud, a control device and a vehicle provided in an embodiment of this specification. As shown in Figure 4, a method for completing vehicle and control device authentication through the cloud, the vehicle and the control device is introduced, including steps 401 to 407.

[0108] Step 401: The cloud generates a unique identifier and writes it into the control device.

[0109] When authentication between the vehicle and the control device is completed through the cloud, a unique identifier in the control device is generated through the cloud and stored in the secure storage area of ​​the control device.

[0110] Among them, if the control device is produced by a key manufacturer, then the encrypted unique identifier can be transmitted through the communication channel (public channel) between the cloud and the key manufacturer for secure transmission. Alternatively, the unique identifier (which can be encrypted or not) is transmitted through a dedicated communication channel between the cloud and the key manufacturer. Among them, a dedicated communication channel is a dedicated physical or logical channel, such as a dedicated channel negotiated between two endpoints through a dedicated program (such as a protocol for secure transmission on the network through encryption technology, or a logical transmission channel). The data transmitted in this transmission channel only serves to exchange activation keys. Alternatively, it can be transmitted through manual emails, messages, calls, etc.

[0111] In step 402, the vehicle generates authentication data, which includes an authentication key. The authentication key for each vehicle is different and can be written into the vehicle by the vehicle manufacturer (stored in a secure area) or automatically generated by the vehicle.

[0112] Step 403: Establish a communication channel. A communication channel is established between the vehicle and the control device.

[0113] Step 404: Send the unique identifier. The control device sends the unique identifier to the vehicle.

[0114] Step 405: Send the unique identifier. The vehicle sends the received unique identifier of the control device to the cloud.

[0115] Step 406: Obtain matching results. The cloud matches the received unique identifier with several stored legal preset identifiers to obtain matching results.

[0116] Step 407: Writing authentication data: When the matching result indicates a successful match, the control device writes the authentication data received from the vehicle into the control device.

[0117] The relevant contents involved in the above steps 401 to 407 have been described in the above embodiments and will not be repeated here.

[0118] In a feasible embodiment, a method for authenticating a vehicle and a control device is provided, which is applied to a cloud, and the cloud communicates with the vehicle. The method includes: obtaining a unique identifier of the control device sent by the vehicle; the unique identifier is received by the vehicle from the control device based on a communication channel established with the control device, and different control devices have different unique identifiers; after matching the unique identifier with several stored legal preset identification information, a matching result is obtained, and the matching result is sent to the vehicle, and when the matching result indicates a successful match, the vehicle sends the authentication data of the vehicle to the control device, and the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0119] When the unique identifier includes the identity identifier and activation key of the control device, the method includes: obtaining the identity identifier included in the unique identifier of the control device sent by the vehicle; querying the legal activation key that matches the identity identifier included in the unique identifier in several stored legal preset identification information, and sending the legal activation key to the vehicle, so that the vehicle obtains the matching result between the activation key included in the unique identifier and the legal activation key based on the legal activation key, and the matching result is used to indicate whether the binding relationship between the identity identifier included in the unique identifier and the activation key is a legal binding relationship.

[0120] Among them, the relevant contents involved in the above steps have been explained in the above embodiments and will not be repeated here.

[0121] In a feasible embodiment, a vehicle and control device authentication device is provided, which is applied to a vehicle, and the device includes: a first receiving module, for responding to establishing a communication channel with the control device, and receiving a unique identifier sent by the control device based on the communication channel, different control devices have different unique identifiers; a first acquisition module, for obtaining a matching result between the unique identifier of the control device and a number of legal preset identification information; a first sending module, for sending the authentication data of the vehicle to the control device when the matching result indicates a successful match, the authentication data representing that the control device and the vehicle are successfully authenticated.

[0122] In a feasible implementation manner, the unique identifier is stored in the control device, and the unique identifier includes: an identity identifier of the control device and / or an activation key of the control device.

[0123] The first acquisition module is further configured to obtain a matching result between the identity identifier of the control device and the plurality of legal preset identification information when the unique identifier is the identity identifier, and the preset identification information is a legal identity identifier.

[0124] When the unique identifier is the activation key, a matching result between the activation key of the control device and the plurality of legal preset identification information is obtained, and the preset identification information is the legal activation key.

[0125] When the unique identifier includes the identity identifier and activation key of the control device, the matching result of the binding relationship between the identity identifier of the control device and the activation key relative to the several legal preset identification information is obtained, and the preset identification information includes: the binding relationship between the legal identity identifier and the legal activation key.

[0126] In a feasible embodiment, the vehicle communicates with the cloud, and the preset identification information is stored in the cloud.

[0127] The first acquisition module is also used to send the identity identifier received from the control device to the cloud when the unique identifier includes the identity identifier and activation key of the control device; receive the legal activation key that matches the identity identifier queried by the cloud from the multiple legal preset identification information; obtain the matching result between the activation key of the control device and the queried legal activation key, and the matching result is used to indicate whether the binding relationship between the identity identifier of the control device and the activation key is a legal binding relationship.

[0128] In a feasible implementation scheme, the first receiving module is further used to: receive target information sent by the control device based on the communication channel; the target information includes the identity of the control device, and encrypted data after encrypting the specified data of the control device with the activation key.

[0129] The first acquisition module is further configured to decrypt the encrypted data based on the legal activation key to obtain a matching result indicating whether the decryption is successful.

[0130] In a feasible embodiment, the vehicle communicates with the cloud, and the preset identification information is stored in the cloud.

[0131] The first acquisition module is further used to: send the unique identifier received from the control device to the cloud; receive a matching result fed back by the cloud for the unique identifier, where the matching result is determined after the cloud matches the unique identifier with the plurality of legal preset identification information.

[0132] In a feasible embodiment, the device also includes: a third receiving module for receiving a control instruction sent by the control device for controlling the vehicle to perform a specific operation after the authentication data of the vehicle is sent to the control device, wherein the control instruction is generated by the control device in response to the user's control operation, and the control instruction carries the authentication data; and an execution module for executing the specific operation after determining that the vehicle is successfully authenticated with the control device based on the authentication data.

[0133] In a feasible embodiment, a device for authenticating a vehicle and a control device is provided, which is applied to the control device. The device includes: a second sending module, for sending a unique identifier of the control device to the vehicle through the communication channel in response to establishing a communication channel with the vehicle; and a second receiving module, for receiving authentication data of the vehicle sent by the vehicle. The authentication data is sent after the vehicle obtains a successful matching result between the unique identifier of the control device and a number of legal preset identification information. The authentication data indicates that the control device and the vehicle are successfully authenticated.

[0134] In a feasible embodiment, the device also includes: an instruction generation module for generating a control instruction for controlling the vehicle to perform a specific operation in response to a user's control operation after receiving the authentication data of the vehicle sent by the vehicle, wherein the control instruction carries the authentication data; a third sending module for sending the control instruction to the vehicle so that the vehicle performs the specific operation after determining that the vehicle and the control device are successfully authenticated based on the authentication data.

[0135] In a feasible embodiment, there is provided an authentication device for a vehicle and a control device, which is applied to a cloud, and the cloud communicates with the vehicle, and the device comprises: a fourth acquisition module, for acquiring a unique identifier of the control device sent by the vehicle; the unique identifier is received by the vehicle from the control device based on a communication channel established with the control device, and different control devices have different unique identifiers; and a feedback module, for matching the unique identifier of the control device with the stored plurality of legal preset identification information, obtaining a matching result, and sending the matching result to the vehicle, and when the matching result indicates a successful match, enabling the vehicle to send the authentication data of the vehicle to the control device, wherein the authentication data indicates that the control device and the vehicle are successfully authenticated.

[0136] The implementation process of the functions and effects of each module in the above-mentioned device is specifically described in the implementation process of the corresponding steps in the above-mentioned method, and will not be repeated here.

[0137] For the device embodiments, since they basically correspond to the method embodiments, the relevant parts can be referred to the partial description of the method embodiments. The device embodiments described above are merely illustrative, wherein the modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, that is, they may be located in one place, or they may be distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this specification. A person of ordinary skill in the art can understand and implement it without paying any creative work.

[0138] FIG5 is a hardware structure diagram of a vehicle in which an authentication device for a vehicle and a control device is located, according to an exemplary embodiment of this specification. As shown in FIG5 , the vehicle may include: a processor 501, a memory 502, an input / output interface 503, a communication interface 504, and a bus 505. The processor 501, the memory 502, the input / output interface 503, and the communication interface 504 are connected to each other within the device via the bus 505.

[0139] The processor 501 can be implemented using a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the authentication method of the vehicle and control device provided in the embodiments of this specification.

[0140] The memory 502 can be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage devices, dynamic storage devices, etc. The memory 502 can store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented through software or firmware, the relevant program code is stored in the memory 502 and is called and executed by the processor 501.

[0141] The input / output interface 503 is used to connect to the input / output module to realize information input and output. The input / output module can be configured as a component in the device (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. Input devices may include a keyboard, mouse, touch screen, microphone, various sensors, etc., and output devices may include a display, speaker, vibrator, indicator light, etc.

[0142] The communication interface 504 is used to connect to a communication module (not shown) to enable communication between the device and other devices. The communication module can communicate via a wired method (such as USB, network cable, etc.) or a wireless method (such as mobile network, WIFI, Bluetooth, etc.).

[0143] The bus 505 comprises a pathway for transmitting information between the various components of the device (eg, the processor 501 , the memory 502 , the input / output interface 503 , and the communication interface 504 ).

[0144] It should be noted that although the above device only shows the processor 501, the memory 502, the input / output interface 503, the communication interface 504, and the bus 505, in a specific implementation, the device may also include other components necessary for normal operation. In addition, it will be understood by those skilled in the art that the above device may only include the components necessary to implement the embodiments of this specification, and does not necessarily include all the components shown in the figure.

[0145] The embodiments of this specification also provide a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the vehicle and control device authentication method as described in any one of the embodiments of this specification.

[0146] Computer-readable media includes permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include transitory computer-readable media (transitory media), such as modulated data signals and carrier waves.

[0147] It should also be noted that the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, commodity, or apparatus that includes a series of elements includes not only those elements but also other elements not explicitly listed, or includes elements inherent to such process, method, commodity, or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not exclude the presence of other identical elements in the process, method, commodity, or apparatus that includes the element.

[0148] The foregoing description of this specification describes specific embodiments. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in an order different from that described in the embodiments and still achieve the desired results. Furthermore, the processes depicted in the accompanying drawings do not necessarily require the specific order shown or the sequential order to achieve the desired results. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

Claims

1. A method for authenticating a vehicle and a control device, applied to the vehicle, the method comprising: (201) in response to establishing a communication channel with the control device, receiving a unique identifier of the control device based on the communication channel; (202) Obtaining a matching result between the unique identifier of the control device and a plurality of legal preset identifier information; (203) When the matching result indicates a successful match, authentication data indicating successful authentication between the control device and the vehicle is sent to the control device.

2. The method according to claim 1, wherein: The obtaining of a matching result between the unique identifier of the control device and the plurality of legal preset identifier information includes any one of the following: When the unique identifier represents the identity identifier of the control device, obtaining a matching result between the identity identifier and the plurality of legal preset identification information, wherein the plurality of legal preset identification information includes the legal identity identifier; When the unique identifier represents an activation key of the control device, obtaining a matching result between the activation key and the plurality of legal preset identification information, wherein the plurality of legal preset identification information includes a legal activation key; or, When the unique identifier includes the identity identifier and the activation key of the control device, the binding relationship between the identity identifier and the activation key is obtained relative to the matching result of the several legal preset identification information, and the several legal preset identification information includes the binding relationship between the legal identity identifier and the legal activation key.

3. The method according to claim 1 or 2, wherein: The vehicle communicates with the cloud, and the preset identification information is stored in the cloud; When the unique identifier includes the identity identifier and activation key of the control device, obtaining the matching result between the unique identifier and a plurality of legal preset identification information includes: (301) sending the identity to the cloud; Receiving a legal activation key matched to the identity identifier obtained through the cloud query; (302) Obtaining a matching result between the activation key and the legal activation key, wherein the matching result is used to indicate whether the binding relationship between the identity identifier and the activation key is a legal binding relationship.

4. The method according to claim 3, wherein: The receiving the unique identifier of the control device based on the communication channel includes: Based on the communication channel, receiving target information sent by the control device, wherein the target information includes The identity of the control device and encrypted data obtained by encrypting designated data of the control device using the activation key; The obtaining a matching result between the activation key and the legal activation key includes: The encrypted data is decrypted based on the legal activation key to obtain a matching result of whether the decryption is successful.

5. The method according to claim 1 or 2, wherein: The vehicle communicates with a cloud, and the plurality of legal preset identification information is stored in the cloud; and obtaining a matching result between the unique identification of the control device and the plurality of legal preset identification information includes: Sending the unique identifier to the cloud; A matching result fed back by the cloud for the unique identifier is received, where the matching result is determined after the cloud matches the unique identifier with the plurality of legal preset identification information.

6. The method according to any one of claims 1 to 5, wherein: After sending the authentication data to the control device, the method further includes: receiving a control instruction sent by the control device for controlling the vehicle to perform a specific operation, wherein the control instruction is generated by the control device in response to a control operation of a user, and the control instruction carries the authentication data; After determining that the vehicle and the control device are successfully authenticated based on the authentication data, the specific operation is performed.

7. A method for authenticating a vehicle and a control device, applied to the control device, the method comprising: In response to establishing a communication channel with the vehicle, sending a unique identifier of the control device to the vehicle via the communication channel; Receive authentication data sent by the vehicle, wherein the authentication data is sent after the vehicle obtains a matching result that the unique identifier successfully matches a number of legal preset identification information, and the authentication data indicates that the control device and the vehicle are successfully authenticated.

8. The method according to claim 7, wherein: After receiving the authentication data sent by the vehicle, the method further includes: In response to a control operation of a user, generating a control instruction for controlling the vehicle to perform a specific operation, wherein the control instruction carries the authentication data; The control instruction is sent to the vehicle so that the vehicle performs the specific operation after determining that the vehicle and the control device are successfully authenticated based on the authentication data.

9. A method for authenticating a vehicle and a control device, applied to a cloud, wherein the cloud communicates with the vehicle, the method comprising: Acquire a unique identifier of the control device sent by the vehicle, where the unique identifier is received by the vehicle from the control device based on a communication channel established with the control device; Obtaining a matching result by matching the unique identifier with a plurality of stored legal preset identifier information; Sending the matching result to the vehicle; When the matching result indicates a successful match, the vehicle sends authentication data of the vehicle to the control device, wherein the authentication data represents that the control device and the vehicle are successfully authenticated.

10. The method according to claim 9, wherein: When the unique identifier includes the identity identifier and activation key of the control device, the matching result obtained by matching the unique identifier with a plurality of stored legal preset identification information includes: Obtaining the identity identifier included in the unique identifier; Searching for a legal activation key matching the identity identifier in the stored plurality of legal preset identification information; The legal activation key is sent to the vehicle, so that the vehicle obtains the matching result based on the legal activation key, and the matching result is used to indicate whether the binding relationship between the identity identifier and the activation key is a legal binding relationship.

11. An authentication device for a vehicle and a control device, applied to the vehicle, the device comprising: A first receiving module, configured to, in response to establishing a communication channel with the control device, receive a unique identifier sent by the control device based on the communication channel; A first acquisition module, used to obtain a matching result between the unique identifier of the control device and a plurality of legal preset identification information; The first sending module is used to send the authentication data of the vehicle to the control device when the matching result indicates a successful match, wherein the authentication data represents that the control device and the vehicle are successfully authenticated.

12. A vehicle and control device authentication device, applied to the control device, the device comprising: a second sending module, configured to send a unique identifier to the vehicle through the communication channel in response to establishing a communication channel with the vehicle; A second receiving module, used for receiving the authentication data of the vehicle sent by the vehicle; The authentication data is sent after the vehicle obtains a matching result that the unique identifier successfully matches a number of legal preset identification information, and the authentication data indicates that the control device and the vehicle are successfully authenticated.

13. An authentication device for a vehicle and a control device, applied to a cloud, the cloud communicating with the vehicle, the device comprising: The fourth acquisition module is used to obtain the unique identifier of the control device sent by the vehicle, the unique identifier is received by the vehicle from the control device based on the communication channel established with the control device; and A feedback module is used to obtain a matching result by matching the unique identifier of the control device with a number of legal preset identification information stored, and send the matching result to the vehicle. When the matching result indicates a successful match, the vehicle sends the authentication data of the vehicle to the control device, wherein the authentication data indicates that the control device and the vehicle are successfully authenticated.

14. A computer-readable storage medium having a computer program stored thereon, wherein: When the program is executed by a processor, the steps of any method described in claims 1-10 are implemented.

15. A vehicle, wherein: The carrier comprises a memory (502), a processor (501) and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of any one of the methods of claims 1-6 when executing the computer program.

Images