CN115056747A - Pluggable vehicle-mounted control device, vehicle control system and vehicle control method - Google Patents

Abstract

A pluggable vehicle-mounted control device, a vehicle control system using the vehicle-mounted control device, and a vehicle control method, wherein the vehicle-mounted control system is applied to a plurality of vehicles each including a vehicle-mounted automatic diagnosis system interface, and includes a plurality of A server terminal with binding information and connected to a communication network, a plurality of mobile device terminals respectively connected with the signal of the server terminal through the communication network, and a plurality of pluggable terminals respectively installed on the vehicle-mounted automatic diagnosis system interface The vehicle-mounted control device, generates a first seed code and a second seed code through the servo terminal and one of the vehicle-mounted control devices, respectively, and passes the first seed code and the second seed code to the The server, one of the vehicle-mounted control devices, and one of the mobile device are interactively verified by three parties, so as to enhance the security of executing the function activation command.

Description

Pluggable vehicle control device, vehicle control system and vehicle control method

technical field

The invention relates to a vehicle-mounted control device, in particular to a pluggable vehicle-mounted control device, a vehicle control system applying the vehicle-mounted control device, and a vehicle control method.

Background technique

Referring to FIG. 1, a vehicle control system based on Bluetooth technology and cloud verification technology, the vehicle control system includes a mobile device 11, a server 14 connected to the mobile device 11 by a signal, a vehicle (not shown) The door lock control device 13 , and an in-vehicle device 12 electrically connected to the door lock control device 13 .

The mobile device 11 has a mobile phone processor 111 that needs to install a vehicle control application, a mobile phone positioning module 112 for obtaining a position signal of a mobile terminal located by a global positioning system (GPS), and a first Bluetooth communication chipset 113, and a first network communication chipset 114, the mobile device 11 can wirelessly communicate with the server 14 and the in-vehicle device 12 through the vehicle control application.

The in-vehicle device 12 has an in-vehicle microprocessor 121, an in-vehicle positioning module 122 for obtaining a vehicle position signal located by a global positioning system (GPS), and a pairing and connection to the first Bluetooth communication chipset The second Bluetooth communication chip set 123 of 113, and a second network communication chip set 124 signally connected to the first network communication chip set 114 via a communication network.

When in use, the mobile device 11 needs to be bound with the in-vehicle device 12 in advance, and transmit the mobile terminal position signal and the vehicle position signal to the server 14 in real time, and the in-vehicle microprocessor 121 is connected by detecting Bluetooth When the user wants to unlock the door lock control device 13 through the mobile device 11, he sends an unlock signal to the server 14 through the car control application program, and the server 14 can use the mobile device 11 to unlock the door lock control device 13. The bluetooth connection confirmation signal knows whether the first bluetooth communication chip set 113 and the second bluetooth communication chip set 123 are connected by bluetooth, so as to judge whether the user is already beside the vehicle, when the server 14 judges the first bluetooth communication chip set 113 is connected to the second Bluetooth communication chipset 123 via Bluetooth, and transmits an unlocking command corresponding to the unlocking signal to the in-vehicle device 12 to unlock the door lock control device 13 and open the door of the vehicle. The existing vehicle control system simply determines whether to unlock or not based on the proximity of the mobile device 11 and the in-vehicle device 12 , which has security concerns.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a pluggable vehicle-mounted control device, vehicle control system and vehicle control method which can overcome the disadvantages described in the background art.

The pluggable in-vehicle control device of the present invention is applied to a mobile device terminal including a mobile terminal short-range communication unit, a server terminal signally connected to the mobile device terminal through a communication network, and a vehicle including an on-board automatic diagnosis system interface. The in-vehicle control device includes an on-board automatic diagnosis system interface that can be pluggable and installed on the on-board automatic diagnosis system interface of the vehicle, and an on-board short-range terminal connected to the mobile device terminal signal by sending and receiving short-range wireless signals. a communication unit, a vehicle-mounted network communication unit connected to the server signal through the communication network, and a vehicle-mounted control unit, the vehicle-mounted control unit is electrically connected to the vehicle-mounted short-range communication unit and the vehicle-mounted network A communication unit, and the interface of the vehicle-mounted automatic diagnosis system. After the vehicle-mounted control unit receives the background wake-up command sent from the server through the vehicle-mounted network communication unit, it transitions from the low power consumption state to the execution state, and generates an indication that the vehicle-mounted control device is in the The background wake-up confirmation signal in the execution state is executed, and the background wake-up confirmation signal is transmitted to the server through the in-vehicle network communication unit, so that the server generates and transmits the first seed code including the first seed code. information to the mobile device terminal and the vehicle control device; after the vehicle terminal network communication unit receives the first subcode information from the server terminal, the vehicle terminal control unit according to the first seed code information The first seed code contained in the code information is used to calculate and obtain the first local key; after the vehicle-mounted short-range communication unit receives the short-range wake-up command sent from the mobile device through the mobile-end short-range communication unit , the on-board control unit transitions from the low power consumption state to the execution state, and generates a short-range wake-up confirmation signal indicating that the on-board control device is in the execution state, and communicates with the on-board short-range communication unit through the on-board short-range communication unit Sending the short-range wake-up confirmation signal to the mobile device, so that the mobile device generates and transmits a second subcode request signal to the vehicle control device through the mobile short-range communication unit; After the terminal short-range communication unit receives the second seed code request signal transmitted from the mobile device end through the mobile terminal short-range communication unit, the vehicle-mounted control unit generates second seed code information including the second seed code , and transmit the second subcode information to the mobile device through the vehicle-mounted short-range communication unit, so that the mobile device obtains and transmits the second external key to the mobile device according to the second subcode. The on-board control device; the on-board control unit calculates and obtains a second local key according to the second seed code; the on-board network communication unit receives from the server and includes an indication of the vehicle to be opened The first encrypted information of the function opening command of the function, and the first external key obtained from the server and calculated by the server according to the first seed code, and received by the vehicle-mounted short-range communication unit After receiving the second external key from the mobile device, the vehicle-mounted control unit associates the first local key with the first external key, and the second local key with the The second external keys are compared respectively; when the vehicle-mounted control unit determines that the first local key is the same as the first external key and the second local key is the same as the second external key At the same time, the first encrypted information is decrypted and the function activation instruction is retrieved, so as to request the vehicle to execute the vehicle function to be activated by the function activation instruction.

In the pluggable on-board control device of the present invention, the first subcode information further includes a first time parameter indicating the validity period of the first subcode; the on-board control unit passes through the on-board network After the communication unit receives the first seed code information from the server, it determines whether the first seed code information expires and becomes invalid according to the first time parameter. When one kind of subcode information has not expired, the vehicle-mounted control unit calculates and obtains the first local key according to the first subcode.

The vehicle control system of the present invention is applied to multiple vehicles, the vehicles respectively include an on-board automatic diagnosis system interface, the vehicle control system includes a servo terminal, a plurality of mobile device terminals, and a plurality of on-board control devices, and the servo terminal stores The binding information is connected to the communication network, and each of the binding information includes a mobile device identification code and a vehicle system identification code; the mobile device terminals correspond to the mobile device identification codes respectively, and each mobile device terminal passes The communication network is connected with the signal of the servo terminal; the vehicle-mounted control devices are respectively corresponding to the vehicle-mounted system identification codes and can be plugged and unplugged, and are respectively installed in the vehicle-mounted automatic diagnosis system interface, and each vehicle-mounted control device is connected through the The communication network is signal-connected to the server, and can perform short-range data transmission with the bound mobile device according to the binding information; the server receives a signal from one of the mobile devices. After receiving the first subcode request signal from the terminal, a background wake-up command is generated and sent to one of the corresponding vehicle-mounted control devices; one of the vehicle-mounted control devices switches from a low-power state after receiving the background wake-up command to the execution state, and generates and transmits a background wake-up confirmation signal indicating that one of the vehicle-mounted control devices is in the execution state to the server; after receiving the background wake-up confirmation signal, the server generates and transmits Send the first seed code information including the first seed code to one of the mobile device terminals and one of the on-board control devices, and obtain a first external key according to the first seed code; one of the on-board control devices After receiving the first seed code information, the device obtains a first local key according to the first seed code contained in the first seed code information; After a short-range wake-up command from the mobile device, transition from the low power consumption state to the execution state, and transmit a short-range wake-up confirmation signal indicating that one of the vehicle-mounted control devices is in the execution state to one of the the mobile device end; one of the mobile device end generates and transmits a second subcode request signal to one of the vehicle-mounted control devices after receiving the short-range wake-up confirmation signal; wherein one of the vehicle-mounted control devices receives the After receiving the second seed code request signal, generate and transmit second seed code information including the second seed code to one of the mobile devices; one of the mobile devices receives the second seed code After receiving the information, obtain and transmit a second external key to one of the vehicle-mounted control devices according to the second seed code; one of the vehicle-mounted control devices obtains a second local key according to the second seed code; wherein The in-vehicle control device receives the first encrypted information from the server and includes a function enable command indicating the vehicle function to be enabled, the first external key from the server, and an After the second external key on the mobile device side, one of the in-vehicle control devices combines the first local key with the first external key, and the second local key with the first key. Two external keys are performed separately comparison; when one of the in-vehicle control devices determines that the first local key is the same as the first external key and the second local key is the same as the second external key, the The first encrypted information is decrypted and the function enabling instruction is retrieved, so as to request the vehicle to execute the vehicle function to be enabled by the function enabling instruction.

In the vehicle control system of the present invention, the first subcode request signal includes a mobile terminal identification code corresponding to one of the mobile device terminals, and the server terminal determines whether the mobile terminal identification code corresponding to one of the mobile device terminals is is the same as any one of the mobile device identification codes; when the server determines that one of the mobile terminal identification codes is the same as one of the mobile device identification codes, it generates and transmits the background wake-up command to Corresponding one of the vehicle-mounted control devices.

In the vehicle control system of the present invention, the second subcode information further includes a second time parameter indicating the validity period of the second subcode, and one of the mobile devices receives a message from one of the in-vehicle After controlling the second seed code information of the device, according to the second time parameter, it is determined whether the second seed code information expires and becomes invalid, and when one of the mobile devices determines that the second seed code information is not When expired, the second external key is calculated and obtained according to the second seed code.

The vehicle control method of the present invention operates through a vehicle control system, the vehicle control system includes several mobile device terminals, several vehicle-mounted control devices correspondingly installed in several vehicles, and communicates with one of the mobile device terminals and one of the mobile device terminals through a communication network. One of the server terminals to which the vehicle-mounted control device is signal-connected, and each mobile device terminal includes a mobile-side short-range communication unit, wherein one of the mobile device terminals communicates with one of the vehicle-mounted control devices through the mobile-side short-range communication unit for short-range communication Data transmission, the vehicle control method includes the following steps: (A) after receiving a background wake-up command sent from the server, one of the vehicle control devices transitions from a low power consumption state to an execution state, and generates and Sending a background wake-up confirmation signal indicating that one of the in-vehicle control devices is in the execution state to the server, so that the server generates and transmits the first seed code information including the first seed code to one of them. The mobile device terminal and one of the vehicle-mounted control devices; (B) after receiving the first subcode information from the server, one of the vehicle-mounted control devices contains the information according to the first subcode information. (C) after receiving a short-range wake-up command from one of the mobile devices, one of the on-board control devices transitions from the low-power state to the execution state, and transmits a short-range wake-up confirmation signal indicating that one of the vehicle-mounted control devices is in the execution state to one of the mobile devices, so that one of the mobile devices generates and transmits a second A seed code request signal is sent to one of the vehicle control devices; (D) after receiving the second seed code request signal from one of the mobile devices, one of the vehicle control devices generates and transmits a signal including a first The second seed code information of the second seed code is sent to one of the mobile devices, so that one of the mobile devices can obtain and transmit a second external key to one of the vehicle control devices according to the second seed code. (E) one of the on-board control devices obtains a second local key according to the second seed code; (F) after receiving a function opening command indicating the vehicle function to be opened from the server After the first encrypted information, the first external key from the server and calculated by the server according to the first seed code, and the second external key from one of the mobile devices , wherein one of the vehicle-mounted control devices compares the first local key with the first external key, and the second local key and the second external key, respectively; and (G) When one of the in-vehicle control devices determines that the first local key is the same as the first external key and the second local key is the same as the second external key, encrypting the first The information is decrypted and the function opening command is retrieved, so as to request the vehicle to execute the vehicle function to be enabled by the function opening command.

According to the vehicle control method of the present invention, the server terminal is also signally connected to the mobile device terminal and the vehicle-mounted control device through the communication network, and the server terminal stores several binding information corresponding to the mobile device terminal. Each of the binding information includes a mobile device identification code and an in-vehicle system identification code, and the mobile device identification code corresponds to the in-vehicle system identification code respectively. Before step (A), the vehicle control method further includes the following Step: (H) after receiving the first seed code request signal from one of the mobile device terminals, since the first seed code request signal includes a mobile terminal identification code corresponding to one of the mobile device terminals, the The server determines whether the mobile terminal identification code corresponding to one of the mobile device terminals is the same as any one of the mobile device identification codes; and (I) when the server terminal determines that the mobile terminal identification code corresponds to one of the mobile device identification codes When the mobile terminal identification code of the mobile device is the same as one of the mobile device identification codes, the background wake-up command is generated and transmitted to the corresponding one of the in-vehicle control devices.

In the vehicle control method of the present invention, in step (D), after receiving the second subcode request signal, one of the in-vehicle control devices generates and transmits the second subcode information to one of the The mobile device side, and the second seed code information further includes a second time parameter indicating the validity period of the second seed code.

In the vehicle control method of the present invention, in step (D), after receiving the second subcode request signal from one of the mobile devices, one of the vehicle control devices generates and transmits the second subcode request signal. The seed code information is sent to one of the mobile equipment terminals, so that one of the mobile equipment terminals calculates and obtains the second external key according to the second seed code, and transmits it to one of the vehicle-mounted control devices, And generate the second receiving period corresponding to the validity period of the second seed code; Step (F) includes the following steps: (F-1) after receiving the second external key from one of the mobile device ends , wherein one of the in-vehicle control devices determines whether the second external key is invalid due to expiration according to the second reception period; and (F-2) when one of the in-vehicle control devices according to the second reception period When determining that the second external key has not expired, compare the first local key with the first external key and the second local key with the second external key respectively .

The beneficial effect of the present invention is that: the on-board control device, the vehicle control system and the vehicle control method of the present invention generate the first subcode and the second subcode respectively through the servo terminal and one of the on-board control devices, and hand over the first seed code and the second seed code to the server, one of the vehicle-mounted control devices, and one of the mobile devices for three-party interactive verification. One of the in-vehicle control devices executes the function activation command transmitted by one of the mobile device terminals, so as to enhance the safety of the vehicle executing the function activation command.

Description of drawings

Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, wherein:

1 is a functional block diagram of an existing vehicle control system;

2 is a functional block diagram of one embodiment of the vehicle control system of the present invention;

FIG. 3 , FIG. 4 and FIG. 5 are flowcharts for explaining the control method of the embodiment.

Detailed ways

Referring to FIG. 2, an embodiment of the vehicle control system of the present invention is applied to a plurality of vehicles 8. The vehicle control system includes a plurality of mobile device terminals 2, a plurality of vehicle-mounted control devices 3, and a servo terminal 4. Each vehicle 8 each includes an on-board automatic diagnosis system interface 81, a vehicle bus module 82 whose signal is connected to the on-board automatic diagnosis system interface 81, and a vehicle bus module for controlling the vehicle 8's own electrical system and whose signal is connected to the vehicle bus module 82 body control unit 83. In this embodiment, for the sake of simplicity, two of the mobile device 2 , the vehicle-mounted control device 3 and the vehicle 8 are taken as an example, and the mobile device 2 and the vehicle-mounted control device 3 are matched with each other. and one of the vehicles 8 will be described.

One of the mobile device terminals 2 includes a mobile terminal short-range communication unit 21 , a mobile terminal network communication unit 22 , a mobile terminal processing unit 23 , and a mobile terminal positioning unit 24 . In this embodiment, one of the mobile device terminals 2 is a smart phone, and the mobile terminal short-range communication unit 21 may be a built-in Bluetooth chip module (Bluetooth Module) or a near field of one of the mobile device terminals 2 Wireless communication module (NFC Module) to realize short-range wireless data transmission and reception. The mobile terminal network communication unit 22 is a multi-bit cellular network chip set, and is connected to a communication network 200 through corresponding base stations to realize data transmission and reception. The mobile terminal processing unit 23 stores a mobile terminal identification code for distinguishing and identifying the mobile device terminal 2 . The mobile terminal positioning unit 24 receives and obtains a position signal indicating the current position of one of the mobile device terminals 2 through a global positioning system (GPS). The communication network 200 accesses the vehicle control application software programming of the server terminal 4, and sends a function enable command for indicating the vehicle function to be enabled through the vehicle control application software programming. It should be noted that the components selected by the mobile terminal short-range communication unit 21 , the mobile terminal network communication unit 22 , and the mobile terminal positioning unit 24 are not limited to this.

One of the in-vehicle control devices 3 includes an in-vehicle automatic diagnosis system interface 31, an in-vehicle short-range communication unit 32, an in-vehicle network communication unit 33 for signally connecting the mobile device 2 and the in-vehicle control device 3, and An on-board control unit 34 electrically connected to the on-board network communication unit 33 , the on-board short-range communication unit 32 and the on-board automatic diagnosis system interface 31 . The vehicle-mounted terminal control unit 34 stores a vehicle-mounted terminal identification code, and the vehicle-mounted terminal identification code matches the vehicle 8 to which the vehicle-mounted terminal control unit 34 is electrically connected, and is used to identify the vehicle-mounted terminal control unit 34 electrical connection. connected to the vehicle 8 . The on-board automatic diagnosis system interface 31 can be respectively plugged and installed on the on-board automatic diagnosis system interface 81, and the on-board short-range communication unit 32 may be a Bluetooth chip module (Bluetooth Module), or a near-field wireless communication module (NFC). Module), to realize short-range wireless data transmission and reception, the mobile terminal network communication unit 22 is a multi-bit cellular network chip set, and is connected to the Internet through the corresponding base station, but it should be noted that all The components selected and used by the vehicle-mounted short-range communication unit 32 and the vehicle-mounted network communication unit 33 are not limited thereto.

The server 4 includes a server network communication unit 41 connected to the communication network 200, a server storage unit 42 storing a plurality of binding information corresponding to the mobile device 2, and an electrical connection The server-side network communication unit 41 and the server-side processing unit 43 of the server-side storage unit 42, wherein each binding information includes a mobile device identification code and an in-vehicle system identification code. In this embodiment, the server 4 is a network host with a network connection function, and the mobile identification code and the mobile device in the binding information stored in the mobile processing unit 23 The identification codes are both International Mobile Equipment Identity (IMEI), and the vehicle identification codes stored in the vehicle control unit 34 and the vehicle system identification codes in the binding information are both vehicles Identifier (Vehicle Identification Number, VIN), but not limited to the above.

The following will describe the operation details between one of the mobile device terminals 2, one of the vehicle-mounted control devices 3, and the server terminal 4 by executing a vehicle control method in this embodiment. The vehicle control method includes a first A sub-verify program, a second sub-verify program, and an alignment program.

Referring to FIG. 2 and FIG. 3 , the first seed verification programming includes steps 501 - 515 .

In step 501 , through the mobile processing unit 23 of one of the mobile devices 2 , a first subcode request signal including the mobile identification code and a first subcode request signal generated by the mobile positioning unit 24 are generated. The obtained location signal is sent to the server 4 via the mobile network communication unit 22 .

In step 502, the server processing unit 43 of the server 4 receives a first seed code request from one of the mobile device 2 and including one of the mobile identification codes After receiving the signal, the server processing unit 43 determines whether a mobile terminal identification code corresponding to one of the mobile device terminals 2 is the same as any one of the mobile terminal identification codes included in the binding information. same. In addition, in other application aspects, such as car rental service, after receiving the first subcode request signal and the location signal, the server 4 will select the vehicle control device 3 according to the location signal. The one closest to one of the mobile device terminals 2 is one of the vehicle-mounted control devices 3, and at the same time, the one of the mobile terminal identification codes corresponding to the selected one of the mobile device terminals 2 and one of the selected The in-vehicle terminal identification code corresponding to the in-vehicle control device 3 is bound in real time and stored as new binding information, and step 504 is executed, so as to achieve the effect of facilitating the user to rent a nearby vehicle 8 .

In step 503, when the server-side processing unit 43 determines that one of the mobile terminal identification codes is not the same as any one of the mobile device identification codes, it means that one of the mobile device terminals 2 has not been sent to all the mobile terminal identification codes. The server terminal 4 provides one of the mobile terminal identification codes to establish a binding relationship with any corresponding mobile device terminal 2 , so it cannot continue to be used, or returns to step 501 .

In step 504, when the server-side processing unit 43 determines that one of the mobile terminal identification codes is the same as any one of the mobile device identification codes, a background wake-up command is generated and communicated via the server-side network The unit 41 transmits the background wake-up command to the corresponding one of the in-vehicle control devices 3 .

In step 505 , through the on-board control unit 34 of one of the on-board control devices 3 , the on-board network communication unit 33 of one of the on-board control devices 3 receives the data from the server 4 . After the background wake-up command is sent, it transitions from a low power consumption state to an execution state, and generates a background wake-up confirmation signal indicating that one of the vehicle-mounted control devices 3 is in the execution state, and passes through one of the The in-vehicle terminal network communication unit 33 of the in-vehicle control device 3 transmits the data to the server terminal 4 . When one of the in-vehicle control devices 3 is in a low power consumption state, the in-vehicle control unit 34 is periodically activated, and when the in-vehicle control unit 34 is activated, the corresponding battery voltage of the vehicle 8 and the position signal; and when one of the vehicle-mounted control devices 3 is in the execution state, it remains activated and is received by the vehicle-side network communication unit 33 and the vehicle-side short-range communication unit 32 in one of the vehicle-mounted control devices 3 In addition, after the on-board control unit 34 receives a background wake-up command sent from the server 4, it is convenient for the execution state to pass a waiting period, if not received within the waiting period To other signals, it returns to the low-power state.

In step 506, the server processing unit 43 generates a first seed code message after receiving the background wake-up confirmation signal via the server network communication unit 41, and communicates via the server network The unit 41 transmits the first seed code information to one of the mobile device terminals 2 and one of the in-vehicle control devices 3, wherein the first seed code information includes a first seed code and an indicator indicating The first time parameter of the validity period of the first seed code. In this embodiment, the first seed code is generated through a pseudorandom number generator, but not limited to this.

In step 507 , through the on-board control unit 34 of one of the on-board control devices 3 , the on-board network communication unit 33 of one of the on-board control devices 3 receives the data from the server 4 . After the first seed code information is stored, a first local key is obtained through a key encryption algorithm according to the first seed code contained in the first seed code information. In this embodiment, the key encryption algorithm may adopt the Advanced Encryption Standard (Advanced Encryption Standard), but it is not limited thereto. In addition, the vehicle-mounted control unit 34 can also determine whether the first seed code information expires and becomes invalid according to the first time parameter. When the vehicle-mounted control unit 34 determines that the first seed code information has not expired, The in-vehicle terminal control unit 34 then calculates and obtains the first local key according to the first seed code.

In step 508, after receiving the first seed code information from the server 4 via the mobile network communication unit 22 through the mobile processing unit 23 of one of the mobile devices 2 , one of the mobile terminal processing unit 23 of the mobile device terminal 2 can determine the current time when the first seed code information is sent and the validity period of the first seed code according to the first time parameter, wherein The mobile terminal processing unit 23 of the mobile device terminal 2 adds up the time when the first seed code information is sent and adds up its validity period and compares it with the time when the first seed code information is received to determine whether the first seed code information is received. Invalid due to expiration, but not limited to this method of judging failure.

In step 509, when the mobile terminal processing unit 23 of one of the mobile device terminals 2 determines that the first subcode information is invalid due to expiration, it means that one of the mobile device terminals 2 fails to receive the information in time. Therefore, one of the mobile devices 2 ends the first seed verification programming without returning data according to the first seed code information, or performs step 501 again.

In step 510, when the mobile processing unit 23 of one of the mobile devices 2 determines, according to the first time parameter, the validity period of the first seed code that is still in the current reception period of the first seed code information inside, the first seed code contained in the first seed code information is retrieved, and the first seed code and the function start command indicating the vehicle function to be turned on are passed through an existing data The encryption and decryption algorithm is encrypted into a second encrypted information, and the second encrypted information is transmitted to the server terminal 4, wherein the function activation command is for the user to operate one of the vehicles selected by the mobile device terminal 2 The function opening command may be defined as releasing the locked state of the vehicle 8 , turning on the air conditioner mounted on the vehicle 8 , or a related executable function.

In step 511 , the server processing unit 43 transmits the first subcode information to one of the mobile devices 2 and one of the in-vehicle control devices 3 via the server network communication unit 41 After that, a first receiving period corresponding to the validity period of the first seed code is generated, and the server-side processing unit 43 separates the time according to the first receiving period, and determines whether the second encrypted information is not due to failure It will be invalid if received within the first receiving period.

In step 512 , when the server-side processing unit 43 has not received the first returned message from one of the mobile devices 2 via the server-side network communication unit 41 after the first receiving period Two encrypted information, which means that one of the mobile devices 2 fails to return the second encrypted information in time, then ends the first seed verification programming or returns an error indicating that the second encrypted information is invalid message to one of the mobile device terminals 2, so that one of the mobile device terminals 2 re-executes step 501.

In step 513 , when the server processing unit 43 receives the second encrypted information returned from one of the mobile devices 2 via the server network communication unit 41 within the first receiving period , and decrypt the first subcode and the function enabling instruction through the existing data encryption and decryption algorithm.

In step 514, the server processing unit 43 obtains a first external key by passing the first seed code through the key encryption algorithm.

In step 515, through the server-side processing unit 43, encrypt the function start command and the on-board system identification code matched with one of the on-board control devices 3 through the existing data encryption and decryption algorithm is a first encrypted message, and the first encrypted message and the first external key are transmitted to one of the in-vehicle control devices 3 .

Referring to FIG. 2 and FIG. 4 , the second seed verification programming includes steps 601 - 609 .

In step 601, the mobile terminal processing unit 23 and the mobile terminal short-range communication unit 21 of one of the mobile device terminals 2 continuously detect whether there is one of the in-vehicle control units that can be matched within its effective range. The vehicle-mounted short-range communication unit 32 in the device 3, when the mobile-side short-range communication unit 21 detects that the vehicle-mounted short-range communication unit 32 is within its effective range, communicates with the vehicle-mounted short-range communication unit 32 through a wireless signal. signal connection and send a short-range wake-up command. In this embodiment, Bluetooth 5.0 (Bluetooth 5.0), a wireless communication standard, is used between the mobile short-range communication unit 21 and the vehicle-mounted short-range communication unit 32 to realize short-range data transmission.

In step 602 , the short-range wake-up command from one of the mobile devices 2 is received via the on-board short-range communication unit 32 through the on-board control unit 34 of one of the on-board control devices 3 Then, transition from the low power consumption state to the execution state, and transmit a short-range wake-up confirmation signal to one of the mobile device terminals 2 indicating that one of the in-vehicle control devices 3 is in the execution state.

In step 603 , after receiving the short-range wake-up confirmation signal via the mobile-end short-range communication unit 21 through the mobile-end processing unit 23 of one of the mobile device ends 2 , a second seed code request is generated signal, and transmits the second subcode request signal to one of the vehicle-mounted control devices 3 via the mobile terminal short-range communication unit 21 .

In step 604 , after receiving the second seed code request signal through the on-board control unit 34 of one of the on-board control devices 3 , a second seed is generated after receiving the second seed code request signal via the on-board short-range communication unit 32 code information, and transmit it to one of the mobile device terminals 2 via the vehicle-mounted short-range communication unit 32, wherein the second seed code information includes a second seed code, and an indicator indicating the second seed code The second time parameter of the expiration date. The vehicle-mounted terminal control unit 34 obtains a second local key through the key encryption algorithm according to the second seed code. In this embodiment, the second seed code is generated by multiple pseudo-random generators. , but not limited to this.

In step 605, through the mobile processing unit 23 of one of the mobile devices 2, the second seed from one of the in-vehicle control devices 3 is received via the mobile short-range communication unit 21 After receiving the code information, one of the mobile devices 2 can determine the current time when the second seed code information is sent and the validity period of the second seed code according to the second time parameter, and one of the mobile devices The terminal 2 adds the current time when the second seed code information is sent to its validity period and compares it with the current time when it is received, to determine whether the second seed code information is invalid due to expiration.

In step 606, when the mobile processing unit 23 of one of the mobile devices 2 determines that the second seed code information is invalid due to expiration, it means that one of the mobile devices 2 fails to receive the information in time. Therefore, one of the mobile devices 2 ends the second seed verification programming without returning data according to the second seed code information, or performs step 601 again.

In step 607, when the mobile terminal processing unit 23 of one of the mobile device terminals 2 determines, according to the second time parameter, the validity period of the second seed code that is still in the current reception period of the second seed code information , obtain a second external key according to the second seed code, and transmit the second external key to one of the mobile devices 2 via the mobile short-range communication unit 21 of one of the mobile devices 2 The on-board control device 3 is described.

In step 608, the second subcode information is transmitted through the on-board control unit 34 of one of the on-board control devices 3, and the on-board short-range communication unit 32 of one of the on-board control devices 3 After reaching one of the mobile device terminals 2, a second receiving period corresponding to the validity period of the second subcode is generated. whether the second external key is invalid due to not being received within the second receiving period.

In step 609 , when the on-board control unit 34 of one of the on-board control devices 3 has not passed through the on-board short-range communication unit of one of the on-board control devices 3 after the second receiving period 32 When the second external key returned by one of the mobile device terminals 2 is received, it means that one of the mobile device terminals 2 fails to return the second external key in time, and the first Second sub-verification programming.

Referring to FIG. 2 and FIG. 5 , the alignment programming includes steps 701 - 711 .

In step 701 , following step 515 of FIG. 3 , the in-vehicle control unit 34 of one of the in-vehicle control devices 3 receives the data from the in-vehicle network communication unit 33 of one of the in-vehicle control devices 3 . After receiving the first encrypted information and the first external key from the server 4, the first local key and the first external key are compared to determine whether they are the same.

In step 702, when the in-vehicle control unit 34 of one of the in-vehicle control devices 3 determines that the first local key is different from the first external key, the in-vehicle control unit 3 of one of the in-vehicle control devices 3 determines that the first local key is different from the first external key. The on-board control unit 34 cancels the decryption of the first encrypted information, ends the comparison programming, and generates a first key indicating that the first local key is different from the first external key. error information, and transmit the first error information to the server 4 and one of the mobile device 2 via the on-board network communication unit 33 of one of the on-board control devices 3, so that one of the The mobile device terminal 2 performs step 501 again.

In step 703, when the on-board control unit 34 of one of the on-board control devices 3 determines that the first local key is the same as the first external key, the on-board control unit 34 determines that the first local key is the same as the first external key. The first encrypted information is decrypted to obtain the function start command and an identification code of the vehicle terminal to be compared.

In step 704 , through the on-board control unit 34 of one of the on-board control devices 3 , it is determined that the on-board identification code to be compared obtained by decryption in step 703 is the same as the one stored in the on-board control device 3 . Whether the vehicle terminal identification codes are the same.

In step 705 , when the on-board terminal control unit 34 of one of the on-board control devices 3 determines that the on-board terminal identification code to be compared does not match the on-board terminal identification code stored in one of the on-board control devices 3 At the same time, the comparison programming is ended, and a second error message indicating that the identification code of the vehicle-mounted terminal to be compared is different from the identification code of the vehicle-mounted terminal stored in one of the vehicle-mounted control devices 3 is generated. The in-vehicle network communication unit 33 of one of the in-vehicle control devices 3 transmits the second error message to the server 4 and one of the mobile device ends 2, so that one of the mobile device ends 2 Step 501 is executed again.

In step 706 , following step 608 of FIG. 4 , when the on-board control unit 34 of one of the on-board control devices 3 passes through the on-board control unit 3 of one of the on-board control devices 3 within the second receiving period The vehicle-mounted short-range communication unit 32 receives the second external key returned by one of the mobile device terminals 2, and compares the second local key with the second external key.

In step 707, when the on-board control unit 34 of one of the on-board control devices 3 determines that the second local key is different from the second external key, the comparison programming is ended, and at the same time a A third error message indicating that the second local key is different from the second external key, and the third error message is reported via the on-board short-range communication unit 32 of one of the on-board control devices 3 The information is transmitted to one of the mobile device terminals 2, so that one of the mobile device terminals 2 performs step 601 again.

In step 708, when the on-board control unit 34 of one of the on-board control devices 3 determines that the following conditions are met: (1) the first local key is the same as the first external key; (2) ) The identification code of the vehicle-mounted terminal to be compared is the same as the identification code of the vehicle-mounted terminal stored in one of the vehicle-mounted control devices 3; and (3) when the second local key is the same as the second external key ; The on-board control unit 34 of one of the on-board control devices 3 transmits the function start command and the on-board identification code to be compared to the vehicle electrically connected to one of the on-board control devices 3 8. In this embodiment, the vehicle bus module 82 is a controller area network (ControllerArea Network BUS, CAN BUS), and the body control unit 83 is a body controller (Body Control Module, BCM). The vehicle body control unit 83 can receive the function start command and the vehicle terminal identification code to be compared through the vehicle bus module 82 .

In step 709 , the vehicle body control unit 83 of the vehicle 8 is electrically connected to one of the vehicle-mounted control devices 3 , after receiving the function start command and the identification code of the vehicle-mounted terminal to be compared, Compare the vehicle-mounted terminal identification code in its memory with the vehicle-mounted terminal identification code to be compared.

In step 710, when the vehicle body control unit 83 determines that the identification code of the vehicle-mounted terminal to be compared is different from the identification code of the vehicle-mounted terminal in its memory, the comparison programming is ended.

In step 711 , when the vehicle body control unit 83 determines that the identification code of the vehicle-mounted terminal to be compared is the same as the identification code of the vehicle-mounted terminal of the vehicle body control unit 83 , the vehicle 8 Execute the vehicle function to be turned on by the function turning on command.

To sum up, in the vehicle control device, vehicle control system and vehicle control method of the present invention, the first seed code and the second seed code are respectively generated by the servo terminal 4 and one of the vehicle control devices 3, and hand over the first seed code and the second seed code to the server 4, one of the vehicle control devices 3, and one of the mobile device 2 for three-party interactive verification, and after the three-party verification is successful , so that one of the in-vehicle control devices 3 executes the function activation command transmitted by one of the mobile device terminals 2, so as to enhance the safety of the vehicle 8 executing the function activation command, so the present invention can indeed be achieved the goal of.

Claims (9)

1. A pluggable vehicle-mounted control device is applied to a mobile equipment terminal containing a mobile terminal short-range communication unit, a servo terminal connected with the mobile equipment terminal through a communication network, and a vehicle containing a vehicle-mounted automatic diagnosis system interface, and is characterized in that: the vehicle-mounted control device comprises a vehicle-mounted automatic diagnosis system interface which can be inserted into and pulled out of the vehicle-mounted automatic diagnosis system interface of the vehicle, a vehicle-mounted end short-range communication unit which is connected with the mobile equipment end signal through a short-range wireless receiving and sending signal, a vehicle-mounted end network communication unit which is connected with the servo end signal through the communication network, and a vehicle-mounted end control unit which is electrically connected with the vehicle-mounted end short-range communication unit, the vehicle-mounted end network communication unit and the vehicle-mounted automatic diagnosis system interface, wherein after receiving a background awakening command transmitted from the servo end through the vehicle-mounted end network communication unit, the vehicle-mounted end control unit is converted from a low power consumption state to an execution state and generates a background awakening signal indicating that the vehicle-mounted control device is in the execution state, and transmitting the background wake-up confirmation signal to the server through the vehicle-mounted end network communication unit, so that the server generates and transmits first seed code information including a first seed code to the mobile equipment end and the vehicle-mounted control device, after the vehicle-mounted end network communication unit receives the first seed code information from the server, the vehicle-mounted end control unit calculates and obtains a first local secret key according to the first seed code included in the first seed code information, and after the vehicle-mounted end short-range communication unit receives a short-range wake-up command transmitted by the mobile end through the mobile end short-range communication unit from the mobile equipment end, the vehicle-mounted end control unit switches from the low-power consumption state to the execution state and generates a short-range wake-up confirmation signal indicating that the vehicle-mounted control device is in the execution state, and transmitting the short-range wake-up confirmation signal to the mobile equipment terminal through the vehicle-mounted terminal short-range communication unit, so that the mobile equipment terminal generates and transmits a second seed code request signal to the vehicle-mounted control device through the mobile terminal short-range communication unit, after the vehicle-mounted terminal short-range communication unit receives the second seed code request signal transmitted from the mobile equipment terminal through the mobile terminal short-range communication unit, the vehicle-mounted terminal control unit generates second seed code information containing a second seed code, and transmits the second seed code information to the mobile equipment terminal through the vehicle-mounted terminal short-range communication unit, so that the mobile equipment terminal obtains and transmits a second external key to the vehicle-mounted control device according to the second seed code, and the vehicle-mounted terminal control unit calculates and obtains a second local key according to the second seed code, receiving first encryption information which comes from the servo terminal and contains a function starting instruction indicating a vehicle function to be started and a first external secret key which comes from the servo terminal and is obtained by the servo terminal according to the first seed code calculation at the vehicle-mounted terminal network communication unit, and after receiving the second external secret key from the mobile equipment end through the vehicle-mounted end short-range communication unit, the vehicle-mounted terminal control unit respectively compares the first local secret key with the first external secret key and the second local secret key with the second external secret key, when the vehicle-mounted end control unit judges that the first local secret key is the same as the first external secret key and the second local secret key is the same as the second external secret key, and decrypting the first encrypted information and capturing the function starting instruction to request the vehicle to execute the vehicle function to be started by the function starting instruction.

2. The pluggable vehicle-mounted control device according to claim 1, characterized in that: the first seed code information further comprises a first time parameter indicating the validity period of the first seed code; after the vehicle-mounted end control unit receives the first seed code information from the servo end through the vehicle-mounted end network communication unit, whether the first seed code information is expired and is invalid is judged according to the first time parameter, and when the vehicle-mounted end control unit judges that the first seed code information is not expired, the vehicle-mounted end control unit calculates and obtains the first local secret key according to the first seed code.

3. A vehicle control system is applied to a plurality of vehicles, and each vehicle comprises an on-board automatic diagnosis system interface, and is characterized in that: the vehicle control system comprises a servo end, a plurality of mobile equipment ends and a plurality of vehicle-mounted control devices, wherein the servo end stores binding information and is connected to a communication network, each binding information comprises a mobile equipment identification code and a vehicle-mounted system identification code, the mobile equipment ends respectively correspond to the mobile equipment identification codes, each mobile equipment end is in signal connection with the servo end through the communication network, the vehicle-mounted control devices respectively correspond to the vehicle-mounted system identification codes and can be plugged in and pulled out and respectively installed on a vehicle-mounted automatic diagnosis system interface, each vehicle-mounted control device is in signal connection with the servo end through the communication network and can perform short-range data transmission with the bound mobile equipment ends according to the binding information; the server generates and transmits a background wake-up command to one of the corresponding vehicle-mounted control devices after receiving a first seed code request signal from one of the mobile device terminals, wherein one of the vehicle-mounted control devices is switched from a low-power consumption state to an execution state after receiving the background wake-up command, generates and transmits a background wake-up confirmation signal indicating that one of the vehicle-mounted control devices is in the execution state to the server, generates and transmits first seed code information including a first seed code to one of the mobile device terminals and one of the vehicle-mounted control devices after receiving the background wake-up confirmation signal, and obtains a first external key according to the first seed code, wherein one of the vehicle-mounted control devices obtains a first local key according to the first seed code included in the first seed code information after receiving the first seed code information, wherein one of the onboard control devices transitions from the low power consumption state to the execution state upon receiving a short-range wake-up command from one of the mobile device terminals and transmits a short-range wake-up acknowledge signal indicating that one of the onboard control devices is in the execution state to one of the mobile device terminals, wherein one of the mobile device terminals generates and transmits a second seed code request signal to one of the onboard control devices upon receiving the short-range wake-up acknowledge signal, wherein one of the onboard control devices generates and transmits second seed code information including a second seed code to one of the mobile device terminals upon receiving the second seed code request signal, wherein one of the mobile device terminals obtains and transmits a second external key to one of the onboard control devices according to the second seed code information upon receiving the second seed code information, wherein one of the onboard control devices obtains a second local key according to the second seed code, wherein after receiving first encryption information from the server and including a function opening instruction indicating a vehicle function to be opened, the first external key from the server, and the second external key from one of the mobile device ends, one of the onboard control devices compares the first local key with the first external key, and the second local key with the second external key, respectively, and when one of the onboard control devices determines that the first local key is the same as the first external key and the second local key is the same as the second external key, decrypts the first encryption information and retrieves the function opening instruction, so as to request the vehicle to execute the vehicle function to be started by the function starting instruction.

4. The vehicle control system according to claim 3, characterized in that: the first sub-code request signal comprises a mobile terminal identification code corresponding to one of the mobile equipment terminals, and the server determines whether the mobile terminal identification code corresponding to one of the mobile equipment terminals is the same as any one of the mobile equipment identification codes; and when the servo terminal judges that one of the mobile terminal identification codes is the same as one of the mobile equipment identification codes, generating and transmitting the background awakening command to a corresponding one of the vehicle-mounted control devices.

5. The vehicle control system according to claim 3, characterized in that: the second seed code information further includes a second time parameter indicating a valid period of the second seed code, and after receiving the second seed code information from one of the onboard control devices, one of the mobile device terminals determines whether the second seed code information is expired and expired according to the second time parameter, and when one of the mobile device terminals determines that the second seed code information is not expired, the mobile device terminal calculates and obtains the second external key according to the second seed code.

6. A vehicle control method operated by a vehicle control system, characterized by: the vehicle control system comprises a plurality of mobile equipment terminals, a plurality of vehicle-mounted control devices correspondingly installed on a plurality of vehicles, and a server terminal in signal connection with one of the mobile equipment terminals and one of the vehicle-mounted control devices through a communication network, wherein each mobile equipment terminal comprises a mobile terminal short-range communication unit, one of the mobile equipment terminals performs short-range data transmission with one of the vehicle-mounted control devices through the mobile terminal short-range communication unit, and the vehicle control method comprises the following steps:

(A) after receiving a background wake-up command transmitted from the server, one of the vehicle-mounted control devices is switched from a low-power consumption state to an execution state, and generates and transmits a background wake-up confirmation signal indicating that one of the vehicle-mounted control devices is in the execution state to the server, so that the server generates and transmits first seed code information including a first seed code to one of the mobile equipment terminals and one of the vehicle-mounted control devices;

(B) after the first seed code information from the servo terminal is received, one of the vehicle-mounted control devices calculates and obtains a first local secret key according to the first seed code contained in the first seed code information;

(C) after receiving a short-range wake-up command from one of the mobile device terminals, one of the onboard control devices transitions from the low-power state to the execution state and transmits a short-range wake-up confirmation signal indicating that one of the onboard control devices is in the execution state to one of the mobile device terminals, so that one of the mobile device terminals generates and transmits a second seed code request signal to one of the onboard control devices;

(D) after receiving the second seed code request signal from one of the mobile device terminals, one of the vehicle-mounted control devices generates and transmits second seed code information including a second seed code to one of the mobile device terminals, so that one of the mobile device terminals obtains and transmits a second external secret key to one of the vehicle-mounted control devices according to the second seed code;

(E) one of the vehicle-mounted control devices obtains a second local secret key according to the second seed code;

(F) after receiving first encryption information which is from the servo terminal and contains a function starting instruction indicating a vehicle function to be started, a first external secret key which is from the servo terminal and is obtained by the servo terminal through calculation according to the first seed code, and a second external secret key which is from one of the mobile equipment terminals, one of the vehicle-mounted control devices respectively compares the first local secret key with the first external secret key, and the second local secret key with the second external secret key; and

(G) and when one of the vehicle-mounted control devices judges that the first local secret key is the same as the first external secret key and the second local secret key is the same as the second external secret key, decrypting the first encrypted information and acquiring the function starting instruction so as to request the vehicle to execute the vehicle function to be started by the function starting instruction.

7. The vehicle control method according to claim 6, characterized in that: the server is connected with the mobile equipment terminal and the vehicle-mounted control device through the communication network, the server stores a plurality of binding information corresponding to the mobile equipment terminal, each binding information comprises a mobile equipment identification code and a vehicle-mounted system identification code, the mobile equipment identification codes respectively correspond to the vehicle-mounted system identification codes, and the vehicle control method further comprises the following steps before the step (A):

(H) after receiving a first seed code request signal from one of the mobile device terminals, the server determines whether the mobile terminal identification code corresponding to one of the mobile device terminals is the same as any one of the mobile device identification codes because the first seed code request signal includes a mobile terminal identification code corresponding to one of the mobile device terminals; and

(I) and when the servo terminal judges that the mobile terminal identification code corresponding to one of the mobile equipment terminals is the same as one of the mobile equipment identification codes, generating and transmitting the background awakening command to one of the corresponding vehicle-mounted control devices.

8. The vehicle control method according to claim 6, characterized in that: in step (D), after receiving the second seed code request signal, one of the onboard control devices generates and transmits the second seed code information to one of the mobile device sides, and the second seed code information further includes a second time parameter indicating a valid period of the second seed code.

9. The vehicle control method according to claim 8, characterized in that: in step (D), after receiving the second seed code request signal from one of the mobile device terminals, one of the onboard control apparatuses generates and transmits the second seed code information to one of the mobile device terminals, so that one of the mobile device terminals calculates and obtains the second external secret key according to the second seed code, transmits the second external secret key to one of the onboard control apparatuses, and generates a second receiving period corresponding to the valid period of the second seed code; the step (F) includes the steps of:

(F-1) after receiving the second external key from one of the mobile device sides, one of the in-vehicle control apparatuses determining whether the second external key is expired according to the second reception deadline; and

(F-2) when one of the vehicle-mounted control devices judges that the second external secret key is not expired according to the second receiving deadline, comparing the first local secret key with the first external secret key, and comparing the second local secret key with the second external secret key.

Images