CN115107701A - Automobile anti-theft authentication method and system - Google Patents

Abstract

The invention provides an automobile anti-theft authentication method and system. The car anti-theft authentication method applied to the vehicle controller VCU includes: sending an authentication request message to the keyless entry and start system PEPS at regular intervals, the authentication request message including the encrypted first car PIN code; receiving an authentication response fed back by the PEPS message, and decrypt the authentication response message through the first key, the authentication response message includes the encrypted second car PIN code; judge whether the decrypted second car PIN code matches the first car PIN code, if so, then authenticate Success, otherwise, authentication fails. The present invention performs bidirectional authentication through the authentication request message including the encrypted first car PIN code and the authentication response message including the encrypted second car PIN code, and the authentication process is simple, safe and reliable.

Description

Automobile anti-theft authentication method and system

technical field

The invention mainly relates to the technical field of automobiles, and in particular, to a method and system for automobile anti-theft authentication.

Background technique

The car anti-theft system is a system set up to prevent the car itself or the items in the car from being stolen. At present, according to the structure, it can be divided into 4 types: mechanical type, electronic type, chip type and network type. At present, electronic type is mainly used, and it is gradually transitioning to network type. The mechanical type is difficult to resist theft of heavy tools such as large scissors and hacksaws. The electronic type can activate the car's anti-theft system by decoding the radio waves or infrared rays emitted by the remote control. The disadvantage of network anti-theft is that it is expensive and has to pay a certain service fee every month.

Therefore, there is an urgent need for a chip-based anti-theft authentication method and system for automobiles with high security performance and low cost.

SUMMARY OF THE INVENTION

The technical problem to be solved by the present invention is to provide a chip type automobile anti-theft authentication method and system to solve the problem of low safety performance of the existing automobile anti-theft system.

In order to solve the above technical problems, the present invention provides a vehicle anti-theft authentication method, which is applied to the vehicle controller VCU, including: sending the authentication request message to the keyless entry and start system PEPS at regular intervals, the authentication request The message includes the encrypted first car PIN code; the authentication response message fed back by the PEPS is received, and the authentication response message is decrypted by the first key, and the authentication response message includes the encrypted second car PIN code; judgment Whether the decrypted second car PIN code matches the first car PIN code, if so, the authentication succeeds; otherwise, the authentication fails.

Optionally, the encrypted first car PIN code is generated by encrypting the first car PIN code with a first key, wherein both the first key and the first car PIN code are learned of.

Optionally, the method further includes judging whether the first key and the first car PIN code have been learned, and if not, the authentication fails.

Optionally, if the first key has not been learned, enter the first key learning process.

Optionally, the steps of the first key learning process include: receiving a key learning message sent by the PEPS, and decrypting the key learning message by using a default key, where the key learning message includes encrypted The decrypted second key is verified; if the verification is passed, the second key is pre-stored in the storage unit as the learned first key.

Optionally, the step of the first key learning process further includes sending a key learning result message to the PEPS, where the key learning result message includes a response code.

Optionally, if the first car PIN code has not been learned, enter the first car PIN code learning process.

Optionally, the steps of the first automobile PIN code learning process include: receiving a PIN code learning message sent by the PEPS, and decrypting the PIN code learning message by using a default key, and the PIN code learning message includes: The encrypted second car PIN code; the decrypted second car PIN code is verified, and if the verification is passed, the second car PIN code is pre-stored in the storage unit as the learned first car PIN code.

Optionally, the step of the first vehicle PIN code learning process further includes sending a PIN code learning result message to the PEPS, where the PIN code learning result message includes a response code.

Optionally, the method further includes: receiving an anti-theft reset message sent by the PEPS, and decrypting the anti-theft reset message by using a default key, where the anti-theft reset message includes the encrypted second automobile PIN code; Whether the second car PIN code matches the first car PIN code, and if so, set the value of the first car PIN code and the value of the first key to the first value.

Optionally, the method further includes sending a reset result message to the PEPS, where the reset result message includes a response code.

Optionally, the method further includes judging whether the authentication response message is received within a threshold time, and if not, the authentication fails.

In order to solve the above technical problems, the present invention provides a vehicle anti-theft authentication method, which is applied to the keyless entry and start system PEPS. key to decrypt the authentication request message, which includes the encrypted first car PIN code; determine whether the decrypted first car PIN code matches the second car PIN code pre-stored by itself, if so, according to The second key, the second car PIN code and the second random number generate an authentication response message, if not, use the second value as the authentication response message; send the authentication response message to the VCU, all The authentication response message is used to determine whether the authentication is successful.

Optionally, the method further includes: sending a key learning message to the VCU at regular intervals, the key learning message including the encrypted second key; judging whether the VCU is received within a time threshold The key learning result message, if not, the key learning failed this time.

Optionally, the method further includes: sending a PIN code learning message to the VCU at regular intervals, where the PIN code learning message includes the encrypted second vehicle PIN code; The PIN code learning result message sent by the above VCU, if not, the PIN code learning failed this time.

Optionally, the method further includes: sending an anti-theft reset message to the VCU at regular intervals, the anti-theft reset message including the encrypted second automobile PIN code; Reset the feedback message, if not, this reset fails.

In order to solve the above technical problems, the present invention provides a vehicle anti-theft authentication system, the system includes: a vehicle controller VCU, used for sending the authentication request message to the keyless entry and start system PEPS at regular intervals, the authentication The request message includes the encrypted first car PIN code and the authentication response message fed back by the PEPS, and judges whether the authentication is successful according to the authentication response message; the keyless entry and start system PEPS is used to receive the transmission from the vehicle controller VCU. and decrypt the authentication request message through its own pre-stored second key, determine whether the decrypted first car PIN code matches its own pre-stored second car PIN code, and send it according to the matching result. The authentication response message is sent to the VCU, and the authentication response message includes the encrypted second vehicle PIN code.

Optionally, the step of sending the authentication response message to the VCU according to the matching result includes: if the matching is successful, generating an authentication response message according to the second key, the second car PIN code and the second random number. ; If the match is unsuccessful, use the second value as the authentication response message.

Optionally, the encrypted first car PIN code is generated by encrypting the first car PIN code with a first key, wherein both the first key and the first car PIN code are learned.

Optionally, the step of judging whether the authentication is successful according to the authentication response message includes: decrypting the authentication response message by using the first key; Whether the car PIN code matches, if yes, the authentication is successful, otherwise, the authentication fails.

Compared with the prior art, the present invention has the following advantages:

The automobile anti-theft authentication method of the present invention performs two-way authentication through the authentication request message including the encrypted first car PIN code and the authentication response message including the encrypted second car PIN code, and the authentication process is simple, safe and reliable; the first key of the VCU Both the PIN code of the first car and the first auto have a self-learning function, which can conveniently and efficiently complete the factory configuration of this function on the production line; the VCU also has the anti-theft authentication reset function, which is convenient for after-sales reconfiguration.

Description of drawings

The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiments of the application and together with the description serve to explain the principles of the invention. In the attached picture:

1 is a state transition diagram of a vehicle controller VCU according to an embodiment of the present invention;

Fig. 2 is a flow chart of a vehicle anti-theft authentication method according to an embodiment of the present invention;

Fig. 3 is the flow chart of the automobile anti-theft authentication method of the optimized embodiment of Fig. 2;

4 is a schematic structural diagram of an authentication request message according to an embodiment of the present invention;

5 is a schematic structural diagram of an authentication response message according to an embodiment of the present invention;

6 is a flowchart of a first key learning process according to an embodiment of the present invention;

7 is a schematic structural diagram of a key learning message according to an embodiment of the present invention;

8 is a schematic structural diagram of a key learning result message according to an embodiment of the present invention;

9 is a flowchart of a learning process of a first automobile PIN code according to an embodiment of the present invention;

10 is a schematic structural diagram of a PIN code learning message according to an embodiment of the present invention;

11 is a schematic structural diagram of a PIN code learning result message according to an embodiment of the present invention;

12 is a flowchart of a reset process of the first key and the first automobile PIN code according to an embodiment of the present invention;

13 is a schematic structural diagram of an anti-theft reset message according to an embodiment of the present invention;

14 is a schematic structural diagram of a reset result message according to an embodiment of the present invention;

15 is a flow chart of a method for anti-theft authentication of a vehicle according to another embodiment of the present invention;

FIG. 16 is a system block diagram of a vehicle anti-theft authentication system according to an embodiment of the present invention.

Detailed ways

In order to illustrate the technical solutions of the embodiments of the present application more clearly, the following briefly introduces the accompanying drawings that are used in the description of the embodiments. Obviously, the accompanying drawings in the following description are only some examples or embodiments of the present application. For those of ordinary skill in the art, without any creative effort, the present application can also be applied to the present application according to these drawings. other similar situations. Unless obvious from the locale or otherwise specified, the same reference numbers in the figures represent the same structure or operation.

As shown in this application and in the claims, unless the context clearly dictates otherwise, the words "a", "an", "an" and/or "the" are not intended to be specific in the singular and may include the plural. Generally speaking, the terms "comprising" and "comprising" only imply that the clearly identified steps and elements are included, and these steps and elements do not constitute an exclusive list, and the method or apparatus may also include other steps or elements.

The relative arrangement of the components and steps, the numerical expressions and numerical values set forth in these embodiments do not limit the scope of the present application unless specifically stated otherwise. Meanwhile, it should be understood that, for the convenience of description, the dimensions of various parts shown in the accompanying drawings are not drawn in an actual proportional relationship. Techniques, methods, and devices known to those of ordinary skill in the relevant art may not be discussed in detail, but where appropriate, such techniques, methods, and devices should be considered part of the authorized description. In all examples shown and discussed herein, any specific value should be construed as illustrative only and not as limiting. Accordingly, other examples of exemplary embodiments may have different values. It should be noted that like numerals and letters refer to like items in the following figures, so once an item is defined in one figure, it does not require further discussion in subsequent figures.

In the description of this application, it should be understood that the orientations indicated by the orientation words such as "front, rear, top, bottom, left, right", "horizontal, vertical, vertical, horizontal" and "top, bottom" etc. Or the positional relationship is usually based on the orientation or positional relationship shown in the drawings, which is only for the convenience of describing the present application and simplifying the description, and these orientations do not indicate or imply the indicated device or element unless otherwise stated. It must have a specific orientation or be constructed and operated in a specific orientation, so it cannot be construed as a limitation on the protection scope of the application; the orientation words "inside and outside" refer to the inside and outside relative to the contour of each component itself.

For ease of description, spatially relative terms, such as "on", "over", "on the surface", "above", etc., may be used herein to describe what is shown in the figures. The spatial positional relationship of one device or feature shown to other devices or features. It should be understood that spatially relative terms are intended to encompass different orientations of the device in use or operation in addition to the orientation depicted in the figures. For example, if the device in the figures is turned over, elements described as "above" or "over" other devices or features would then be oriented "below" or "over" the other devices or features under other devices or constructions". Thus, the exemplary term "above" can encompass both an orientation of "above" and "below." The device may also be otherwise oriented (rotated 90 degrees or at other orientations) and the spatially relative descriptions used herein interpreted accordingly.

In addition, it should be noted that the use of words such as "first" and "second" to define components is only for the convenience of distinguishing corresponding components. Unless otherwise stated, the above words have no special meaning and therefore cannot be understood to limit the scope of protection of this application. In addition, although the terms used in this application are selected from well-known and common terms, some terms mentioned in the specification of this application may be chosen by the applicant at his or her judgment, and the detailed meanings of which are set forth herein. described in the relevant section of the description. Furthermore, it is required that the application be understood not only by the actual terms used, but also by the meaning implied by each term.

Flow diagrams are used in this application to illustrate operations performed by a system according to an embodiment of the application. It should be understood that the preceding or following operations are not necessarily performed in exact order. Rather, the various steps may be processed in reverse order or concurrently. At the same time, other actions are either added to these processes, or a step or steps are removed from these processes.

Vehicle Control Unit (VCU), also known as vehicle control unit, is the core electronic control unit that realizes vehicle control decisions, and is now widely used in pure electric vehicles and hybrid vehicles. The vehicle controller VCU can be mutually authenticated with the keyless entry and start system (Passive Entry Passive Start, PEPS) to realize the vehicle anti-theft authentication method. FIG. 1 is a state transition diagram of a vehicle controller VCU according to an embodiment of the present invention. As shown in FIG. 1 , the vehicle controller VCU has two states: the armed state 11 and the disarmed state 12 . The default state of the VCU after power-on initialization is completed is the armed state 11. When the authentication between the VCU and the PEPS is unsuccessful, the VCU is still in the defense state 11; if the communication authentication between the VCU and the PEPS is successful, the VCU transitions from the defense state 11 to the disarm state 12. The VCU can only allow the system to start when it is in disarmed state 12.

FIG. 2 is a flow chart of a method 200 for car theft prevention authentication according to an embodiment of the present invention, and FIG. 3 is a flow chart of the method 300 for car theft prevention authentication according to the optimized embodiment of FIG. 2 . Both the vehicle anti-theft authentication method 200 and the vehicle anti-theft authentication method 300 are applied to the vehicle controller VCU. As shown in FIG. 2 , the method 200 for vehicle anti-theft authentication includes the following steps:

Step S210: Send an authentication request message to the keyless entry and start system PEPS at regular intervals, where the authentication request message includes the encrypted first car PIN code;

Step S220: Receive the authentication response message fed back by the PEPS, and decrypt the authentication response message by using the first key, and the authentication response message includes the encrypted second car PIN code;

Step S230: Determine whether the decrypted second car PIN code matches the first car PIN code, if so, the authentication succeeds, otherwise, the authentication fails.

In some preferred embodiments, as shown in FIG. 3 , before step S210 , it further includes step S205 : judging whether the first key and the first car PIN code have been learned. If the judgment result is yes, then go to step S210, otherwise, it is judged that the authentication fails. In addition, before step S220, it also includes step S215: judging whether the authentication response message is received within the threshold time, if yes, enter step S220, otherwise the authentication fails.

Steps S205 to S230 will be described in detail below with reference to FIG. 2 and FIG. 3 .

In S205, it is determined whether the first key and the first car PIN code have been learned. The vehicle controller VCU stores the default first key and the first vehicle PIN code in the storage unit when it leaves the factory. After the initial configuration of the VCU is completed, determine whether the VCU is the default first key and the first car PIN code. If it is the default value, it means that it has not been learned. The first key and the first car PIN code need to enter the learning process. Failed; if after learning, go to step S220. The learned first key is consistent with the second key pre-stored in the PEPS, and the learned first car PIN code is consistent with the second car PIN code pre-stored in the PEPS.

In step S210, the VCU generates a first random number, and then encrypts the learned first car PIN code with the learned first key and an encryption algorithm to generate an encrypted first car PIN code, and then according to the first random number Number and encrypted first car PIN code to generate authentication request message. The encryption algorithm may be a symmetric encryption algorithm or an asymmetric encryption algorithm, and the type of the encryption algorithm is not limited in this application. In some embodiments, the encryption algorithm is preferably Advanced Encryption Standard (AES). FIG. 4 is a schematic structural diagram of an authentication request message 400 according to an embodiment of the present invention. As shown in FIG. 4, the authentication request message 400 includes name, sender, receiver, ID, and data fields. The data field includes the first random number and the encrypted first car PIN code. The length of the first random number may be 4 bytes (Bytes), and the encrypted first car PIN code is also 4 bytes.

In step S210, an authentication request message is sent to the keyless entry and start system PEPS at intervals, for example, the VCU sends the same authentication request message to the PEPS every 100ms. The time interval for the VCU to send the authentication request message to the PEPS may be set as required, which is not limited in this application.

In S215, it is determined whether the authentication response message is received within the threshold time, and if not, the authentication fails. The threshold time can be set as required, which is not limited in this application. For example, it is judged whether the authentication response message is received within 2 seconds, if not, the authentication fails, and if so, the process goes to step S220.

In step S220, the authentication response message may be generated from the second random number, the second key pre-stored in the PEPS, and the second car PIN code. Specifically, the PEPS generates a second random number, then encrypts the second car PIN code by using the second key and an encryption algorithm to generate an encrypted second car PIN code, and then encrypts the second car PIN code according to the second random number and the encrypted second car PIN code to generate an authentication response message. The encryption algorithm adopted by PEPS is the same as the encryption algorithm adopted by VCU. FIG. 5 is a schematic structural diagram of an authentication response message 500 according to an embodiment of the present invention. As shown in FIG. 5, the authentication response message 500 includes name, sender, receiver, ID, and data fields. The data field includes the second random number and the encrypted second car PIN code. The length of the second random number may be 4 bytes (Bytes), and the encrypted second car PIN code is also 4 bytes. The VCU receives the authentication response message fed back by the PEPS, and since the learned first key is consistent with the second key, the VCU can decrypt the authentication response message by using the first key.

In some embodiments, the authentication response message may also be generated from a second value, and the second value may be set according to a convention. For example, the second value can be set to be all 0xFF of 8 bytes. After the VCU receives the authentication response message, before decrypting the authentication response message, it further includes the steps of: firstly judging whether the authentication response message is a set value, if so, directly judging that the authentication fails, and if not, decrypting the authentication response message .

In step S230, it is judged whether the decrypted second car PIN code matches the first car PIN code, if so, the authentication is successful, otherwise, the authentication fails.

In some embodiments, if it is determined that the first key has not been learned, the first key learning process is entered. The VCU needs to support the learning function. When the VCU is in a new state (the default first key or the first car PIN code), the VCU can update the first key and the first car PIN code through the learning function. FIG. 6 is a flowchart of a first key learning process 600 according to an embodiment of the present invention. As shown in Figure 6, the steps of the first key learning process 600 include:

Step S610: Receive the key learning message sent by the PEPS, and decrypt the key learning message by using the default key, where the key learning message includes the encrypted second key. The storage units of the VCU and the PEPS both store the same default key by default. The default key is only available before leaving the factory, that is, the learning process of the first key can only be completed before leaving the factory. After the car leaves the factory, the default key is invisible to ordinary users, and only users with super privileges (such as after-sales engineers) can obtain the default key. FIG. 7 is a schematic structural diagram of a key learning message 700 according to an embodiment of the present invention. As shown in FIG. 7, the key learning message 700 includes name, sender, receiver, ID, and data fields. The data field includes the encrypted second key, and the length of the encrypted second key is 8 bytes.

Step S620: Verify the decrypted second key. The verification method may be CRC16 or CRC32, and the application does not limit the verification method. It is judged whether the verification is passed, and if the verification fails, the key learning process is ended. If the verification is passed, go to step S630.

Step S630: Determine whether the value of the first key is the first value, and if not, no operation is performed, and the learning process is ended. If yes, go to step S640. The first value may be 0xFF. For example, it is determined whether the value of the first key is 0xFF, and if the value of the first key is 0xFF, it means that the first key has been learned and no operation is required.

Step S640: Pre-store the second key in the storage unit as the learned first key. Specifically, the value of the second key is replaced with the value of the first key in the storage unit of the VCU, and after learning, the first key is consistent with the second key.

In some embodiments, the learning process of the first key further includes sending a key learning result message to the PEPS, where the key learning result message includes a response code. Among them, the response code represents the result of key learning. FIG. 8 is a schematic structural diagram of a key learning result message 800 according to an embodiment of the present invention. As shown in FIG. 8, the key learning result message 800 includes name, sender, receiver, ID, and data fields. The data field includes the response code and padding data. The length of the response code is 1 byte, and the length of the padding data is 7 bytes. The definition of the response code can be shown in Table 1:

Table 1

answer code describe 00 VCU executes successfully 20 request not supported twenty one Unknown reason, the request could not be executed 30 VCU is busy 31 VCU unlearned, no SK 32 VCU not learning, no PIN 33 VCU has learned SK, but SK does not meet 34 The VCU has learned the PIN, but the PIN does not match 35 SK or PIN CRC check error 36 Request not executed due to PIN mismatch

According to Table 1, when the response code received by the PEPS is 00, it means that the VCU is successfully executed and the key learning is successful. When the response code received by the PEPS is other values, it indicates the failure of key learning and the reason for the failure.

In some embodiments, if it is determined that the first car PIN code has not been learned, the process of learning the first car PIN code is entered. FIG. 9 is a flowchart of a learning process 900 of the first automobile PIN code according to an embodiment of the present invention. As shown in Figure 9, the steps of the learning process 900 of the first automobile PIN code include:

Step S910: Receive the PIN code learning message sent by the PEPS, and decrypt the PIN code learning message by using the default key, where the PIN code learning message includes the encrypted second car PIN code. FIG. 10 is a schematic structural diagram of a PIN code learning message 1000 according to an embodiment of the present invention. As shown in FIG. 10, the PIN code learning message 1000 includes name, sender, receiver, ID, and data fields. The data field includes the encrypted second car PIN code, CRC16 and padding data. The length of the encrypted second car PIN code is 4 bytes, the length of the CRC16 is 2 bytes, and the length of the padding data is 2 bytes.

Step S920: Verify the decrypted second car PIN code, and if the verification fails, end the PIN code learning process. If the verification is passed, go to step S930.

Step S930: Determine whether the value of the first car PIN code is the first value, if not, do not operate, and end the learning process. If yes, go to step S940. The first value may be 0xFF. For example, it is determined whether the value of the first car PIN code is all 0xFF, and if not, it means that the first car PIN code has been learned and no operation is required.

Step S940: The second car PIN code is pre-stored in the storage unit as the first car PIN code. Specifically, the value of the second car PIN code is replaced with the value of the first car PIN code in the storage unit of the VCU, and after learning, the first car PIN code is consistent with the second car PIN code.

In some embodiments, the learning process of the first automobile PIN code further includes sending a PIN code learning result message to the PEPS. The PIN code learning result message includes a response code and filling data. The PIN code learning result is represented by the answer code. FIG. 11 is a schematic structural diagram of a PIN code learning result message 1100 according to an embodiment of the present invention. As shown in FIG. 11, the PIN code learning result message 1100 includes name, sender, receiver, ID, and data fields. The data field includes the response code and padding data. The length of the response code is 1 byte, and the length of the padding data is 7 bytes. The definition of the response code can be as shown in Table 1. According to Table 1, when the response code received by the PEPS is 00, it means that the VCU is successfully executed and the PIN code learning is successful. When the response code received by the PEPS is other values, it indicates the failure of PIN code learning and the reason for the failure.

In some embodiments, the automobile anti-theft authentication method further includes a reset process of the first key and the first automobile PIN code. The reset process can be done before the car leaves the factory or after it leaves the factory. For example, when the car has a problem and needs to reset the first key and the first car PIN code after the car leaves the factory, the after-sales engineer resets the first key and the first car PIN code through the default key. FIG. 12 is a flowchart of a reset process 1200 of the first key and the first car PIN code according to an embodiment of the present invention. As shown in FIG. 12 , the steps of the reset flow 1200 of the first key and the first car PIN code include:

Step S1201: Determine whether the first car PIN code stored in the VCU is the first value (0xFF), if so, it means that it is already in the default state, no reset is required, and the reset process ends. If not, go to step S1202.

Step S1202: Receive the anti-theft reset message sent by the PEPS, and decrypt the anti-theft reset message by using the default key, where the anti-theft reset message includes the encrypted second vehicle PIN code. FIG. 13 is a schematic structural diagram of an anti-theft reset message 1300 according to an embodiment of the present invention. As shown in Figure 13, the immobilizer reset message 1300 includes name, sender, receiver, ID, and data fields. The data field includes the encrypted second car PIN code and the second random number. The length of the encrypted second car PIN code is 4 bytes, and the length of the second random number is 4 bytes.

Step S1203: Determine whether the decrypted second car PIN code matches the first car PIN code, and if not, end the reset process. If yes, go to step S1204.

Step S1204: Set the value of the first car PIN code and the value of the first key as the first value. Specifically, the value of the first car PIN code and the value of the first key in the VCU storage unit are erased, so that the value of the first car PIN code and the value of the first key are both 0xFF.

In some embodiments, the reset process of the first key and the first car PIN code further includes sending a reset result message to the PEPS. The reset result message includes an answer code and padding data. The reset result is indicated by an acknowledgement code. FIG. 14 is a schematic structural diagram of a reset result message 1400 according to an embodiment of the present invention. As shown in FIG. 14, the reset result message 1400 includes name, sender, receiver, ID, and data fields. The data field includes the response code and padding data. The length of the response code is 1 byte, and the length of the padding data is 7 bytes. The definition of the response code can be as shown in Table 1. According to Table 1, when the response code received by the PEPS is 00, it means that the VCU is successfully executed and the reset is successful. When the response code received by the PEPS is other values, it indicates the reset failure and the reason for the failure.

The automobile anti-theft authentication method of the present invention performs two-way authentication through the authentication request message including the encrypted first car PIN code and the authentication response message including the encrypted second car PIN code, and the authentication process is simple, safe and reliable; the first key of the VCU Both the PIN code of the first car and the first auto have a self-learning function, which can conveniently and efficiently complete the factory configuration of this function on the production line; the VCU also has the anti-theft authentication reset function, which is convenient for after-sales reconfiguration.

FIG. 15 is a flowchart of a vehicle anti-theft authentication method 1500 according to another embodiment of the present invention. The vehicle anti-theft authentication method 1500 is applied to a keyless entry and start system PEPS. As shown in FIG. 15 , the method 1500 for vehicle anti-theft authentication includes the following steps:

Step S1501: Receive the authentication request message sent by the vehicle controller VCU, and decrypt the authentication request message by using the second key pre-stored by itself, where the authentication request message includes the encrypted first vehicle PIN code. The encrypted first car PIN code is generated by encrypting the learned first car PIN code with a learned first key and an encryption algorithm. The learned first key is identical to the second key. Therefore, the PEPS can decrypt the authentication request message including the encrypted first car PIN code using the second key and the same encryption algorithm as the VCU.

Step S1502: Determine whether the decrypted first car PIN code matches the second car PIN code pre-stored by itself, if not, go to step S1503, if so, go to step S1504.

Step S1503: Use the second value as the authentication response message. The value of the second value can be set according to the convention, for example, it can be set to all 0xFF of 8 bytes, indicating that the one-way authentication of the authentication of the VCU to the PEPS fails, and thus the overall authentication fails.

Step S1504: Generate an authentication response message according to the second key, the second car PIN code and the second random number.

Step S1505: Send an authentication response message to the VCU, where the authentication response message is used to determine whether the authentication is successful.

In some embodiments, the vehicle anti-theft authentication method further includes sending a key learning message to the VCU at regular intervals, where the key learning message includes the encrypted second key; and judging whether the key learning message sent by the VCU is received within a time threshold Result message, if not, the key learning failed this time.

In some embodiments, the vehicle anti-theft authentication method further includes sending a PIN code learning message to the VCU at regular intervals, where the PIN code learning message includes an encrypted second vehicle PIN code; determining whether the PIN code sent by the VCU is received within a time threshold Learning result message, if not, the current PIN code learning fails.

In some embodiments, the vehicle anti-theft authentication method further includes sending an anti-theft reset message to the VCU at regular intervals, where the anti-theft reset message includes an encrypted second vehicle PIN code; judging whether the reset result message sent by the VCU is received within a time threshold, If not, this reset fails.

FIG. 16 is a system block diagram of an automobile anti-theft authentication system 1600 according to an embodiment of the present invention. As shown in FIG. 16 , the vehicle anti-theft authentication system 1600 includes a vehicle controller (VCU) 1601 and a keyless entry and start system (PEPS) 1602 . The vehicle controller 1601 and the keyless entry and start system 1602 can communicate via the CAN network. The vehicle controller 1601 is used to send an authentication request message to the keyless entry and start system 1602 at regular intervals. The authentication request message includes the encrypted first car PIN code, and receives an authentication response message fed back by the keyless entry and start system 1602 , according to the authentication response message to determine whether the authentication is successful. In some embodiments, the encrypted first car PIN code is generated by encrypting the first car PIN code with a first key, wherein both the first key and the first car PIN code are learned.

The keyless entry and start system 1602 is used to receive the authentication request message sent by the vehicle controller 1601, and decrypt the authentication request message through its own pre-stored second key, and determine the decrypted first car PIN code and its own pre-stored PIN code. Whether the PIN code of the second car matches, send an authentication response message to the vehicle controller 1601 according to the matching result.

In some embodiments, the step of sending an authentication response message to the VCU according to the matching result includes: if the matching is successful, generating an authentication response message according to the second key, the second car PIN code and the second random number; Two values as the authentication response message.

In some embodiments, the step of judging whether the authentication is successful according to the authentication response message includes: decrypting the authentication response message by using the first key; judging whether the decrypted second car PIN code matches the first car PIN code, if yes , the authentication succeeds, otherwise, the authentication fails.

In some embodiments, the step of judging whether the authentication is successful according to the authentication response message further includes: before decrypting the authentication response message, firstly judging whether the authentication response message is the second value, if so, directly judging the authentication failure, if not , decrypt the authentication response message.

In some embodiments, the vehicle controller 1601 and the keyless entry and start system 1602 use the same AES algorithm to encrypt and decrypt data, which can minimize the use of VCU resources and ensure data security.

The basic concept has been described above. Obviously, for those skilled in the art, the above disclosure of the invention is only an example, and does not constitute a limitation to the present application. Although not explicitly described herein, various modifications, improvements, and corrections to this application may occur to those skilled in the art. Such modifications, improvements, and corrections are suggested in this application, so such modifications, improvements, and corrections still fall within the spirit and scope of the exemplary embodiments of this application.

Meanwhile, the present application uses specific words to describe the embodiments of the present application. Such as "one embodiment," "an embodiment," and/or "some embodiments" means a certain feature, structure, or characteristic associated with at least one embodiment of the present application. Therefore, it should be emphasized and noted that two or more references to "an embodiment" or "one embodiment" or "an alternative embodiment" in different places in this specification are not necessarily referring to the same embodiment . Furthermore, certain features, structures or characteristics of the one or more embodiments of the present application may be combined as appropriate.

Similarly, it should be noted that, in order to simplify the expressions disclosed in the present application and thus help the understanding of one or more embodiments of the invention, in the foregoing description of the embodiments of the present application, various features are sometimes combined into one embodiment, in the drawings or descriptions thereof. However, this method of disclosure does not imply that the subject matter of the application requires more features than those mentioned in the claims. Indeed, there are fewer features of an embodiment than all of the features of a single embodiment disclosed above.

Although the present application has been described with reference to the current specific embodiments, those skilled in the art should recognize that the above embodiments are only used to illustrate the present application, and can be made without departing from the spirit of the present application. Various equivalent changes or substitutions, therefore, as long as the changes and modifications to the above-mentioned embodiments within the spirit and scope of the present application, all fall within the scope of the claims of the present application.

Claims (20)

1. An automobile anti-theft authentication method is applied to a VCU (vehicle control unit), and is characterized by comprising the following steps:

sending the authentication request message to a keyless entry and startup system PEPS at intervals, wherein the authentication request message comprises an encrypted first automobile PIN code;

receiving an authentication response message fed back by the PEPS, and decrypting the authentication response message through a first key, wherein the authentication response message comprises an encrypted second automobile PIN;

and judging whether the decrypted second automobile PIN code is matched with the first automobile PIN code, if so, successfully authenticating, and otherwise, failing to authenticate.

2. The vehicle anti-theft authentication method according to claim 1, wherein the encrypted first vehicle PIN is generated by encrypting the first vehicle PIN by a first key, wherein the first key and the first vehicle PIN are learned.

3. The vehicle anti-theft authentication method according to claim 2, further comprising: and judging whether the first secret key and the first automobile PIN are learned or not, and if not, failing authentication.

4. The vehicle anti-theft authentication method according to claim 3, wherein if the first key is not learned, a first key learning process is entered.

5. The vehicle anti-theft authentication method according to claim 4, wherein the step of the first key learning procedure comprises:

receiving a key learning message sent by the PEPS, and decrypting the key learning message through a default key, wherein the key learning message comprises an encrypted second key;

and verifying the decrypted second key, and if the verification is passed, pre-storing the second key in a storage unit as the learned first key.

6. The vehicle anti-theft authentication method according to claim 5, further comprising sending a key learning result message to the PEPS, the key learning result message including a response code.

7. The vehicle anti-theft authentication method according to claim 3, wherein if the first vehicle PIN is not learned, a first vehicle PIN learning process is entered.

8. The vehicle anti-theft authentication method according to claim 4, wherein the step of the first vehicle PIN code learning process comprises:

receiving a PIN learning message sent by the PEPS, and decrypting the PIN learning message through a default key, wherein the PIN learning message comprises an encrypted second automobile PIN;

and verifying the decrypted second automobile PIN code, and if the verification is passed, pre-storing the second automobile PIN code in a storage unit as the learned first automobile PIN code.

9. The vehicle anti-theft authentication method according to claim 5, further comprising sending a PIN learning result message to the PEPS, the PIN learning result message including a response code.

10. The vehicle anti-theft authentication method according to claim 1, further comprising:

receiving an anti-theft reset message sent by the PEPS, and decrypting the anti-theft reset message through a default key, wherein the anti-theft reset message comprises an encrypted second automobile PIN code;

and judging whether the decrypted second automobile PIN code is matched with the first automobile PIN code, and if so, setting the value of the first automobile PIN code and the value of the first secret key as first values.

11. The vehicle anti-theft authentication method according to claim 10, further comprising sending a reset result message to the PEPS, the reset result message including a response code.

12. The vehicle anti-theft authentication method according to claim 1, further comprising determining whether the authentication response message is received within a threshold time, and if not, failing the authentication.

13. An automobile anti-theft authentication method is applied to a keyless entry and start system PEPS and is characterized by comprising the following steps:

receiving an authentication request message sent by a VCU of the vehicle controller, and decrypting the authentication request message through a second secret key prestored by the VCU, wherein the authentication request message comprises an encrypted first vehicle PIN code;

judging whether the decrypted first automobile PIN code is matched with a second automobile PIN code prestored by the automobile, if so, generating an authentication response message according to the second secret key, the second automobile PIN code and a second random number, and if not, taking a second value as the authentication response message;

and sending the authentication response message to the VCU, wherein the authentication response message is used for judging whether the authentication is successful or not.

14. The vehicle anti-theft authentication method according to claim 13, further comprising:

sending a key learning message to the VCU at intervals, the key learning message including the encrypted second key;

and judging whether the key learning result message sent by the VCU is received within a time threshold, and if not, failing to learn the key this time.

15. The vehicle anti-theft authentication method according to claim 13, further comprising:

sending a PIN learning message to the VCU at intervals, the PIN learning message including the encrypted second automobile PIN;

and judging whether the PIN learning result message sent by the VCU is received within a time threshold, and if not, failing to learn the PIN.

16. The vehicle anti-theft authentication method according to claim 13, further comprising:

sending an anti-theft reset message to the VCU at intervals, the anti-theft reset message comprising the encrypted second automobile PIN code;

and judging whether the reset feedback message sent by the VCU is received within a time threshold, and if not, failing to reset this time.

17. An automobile anti-theft authentication system, comprising:

the vehicle control unit VCU is used for sending the authentication request message to the keyless entry and start system PEPS at intervals, receiving an authentication response message fed back by the PEPS and judging whether the authentication is successful or not according to the authentication response message, wherein the authentication request message comprises an encrypted first automobile PIN;

the keyless entry and start system PEPS is used for receiving an authentication request message sent by a VCU of the vehicle controller, decrypting the authentication request message through a second key prestored by the PEPS, judging whether the decrypted first vehicle PIN code is matched with a second vehicle PIN code prestored by the PEPS, and sending an authentication response message to the VCU according to a matching result, wherein the authentication response message comprises the encrypted second vehicle PIN code.

18. The vehicle anti-theft authentication system of claim 17, wherein the step of transmitting the authentication response message to the VCU according to the matching result comprises:

if the matching is successful, generating an authentication response message according to the second secret key, the second automobile PIN code and a second random number;

and if the matching is unsuccessful, using the second value as the authentication response message.

19. The vehicle anti-theft authentication system according to claim 17, wherein the encrypted first vehicle PIN is generated by encrypting the first vehicle PIN with a first key, wherein the first key and the first vehicle PIN are learned.

20. The vehicle immobilizer system of claim 19, wherein the step of determining whether the authentication is successful based on the authentication response message comprises:

decrypting the authentication response message by the first key;

and judging whether the decrypted second automobile PIN code is matched with the first automobile PIN code, if so, the authentication is successful, and otherwise, the authentication is failed.

Images