WO2019128354A1

WO2019128354A1 - Safety authentication apparatus and method for vehicle anti-theft, device and computer program

Info

Publication number: WO2019128354A1
Application number: PCT/CN2018/108336
Authority: WO
Inventors: 魏建平; 许鹏飞
Original assignee: 威马智慧出行科技（上海）有限公司
Priority date: 2017-12-29
Filing date: 2018-09-28
Publication date: 2019-07-04
Also published as: CN108235291A

Abstract

The present invention provides a safety authentication apparatus and method for vehicle anti-theft. The safety authentication apparatus comprises a T-Box unit configured to circularly execute an authorization process, the authorization process comprising that the T-Box unit executes Bluetooth-based authentication to a client of a user; and a BCM unit configured to update an authorization state based on an authorization result after the authorization process is executed each time. The T-Box unit executes the authorization process of the next cycle after a preset time interval, and the authorization state comprises an authorization pass state or an authorization fail state, wherein the authorization pass state is used as the basis for the user to use the vehicle legally by the BCM unit. FIG. 6

Description

Safety certification device, method, device and computer program for vehicle theft prevention

This application claims the priority of the Chinese Patent Application filed on Dec. 29, 2017, the Chinese Patent Office, Application No. 201711471603.X, entitled "A Safety Authentication Device and Method for Vehicle Anti-Theft", the entire contents of which is hereby incorporated by reference. This is incorporated herein by reference.

Technical field

The invention relates to the field of vehicle anti-theft, in particular to a safety authentication device, method, device and computer program for vehicle anti-theft.

Background technique

With the increase in the number of cars, the car was stolen and brought great anxiety to the society. As a result, the car's anti-theft authentication system came into being. At present, the engine anti-theft locking system is more used, and a password transponder is hidden in the key. In the absence of a legal key, the engine cannot be started, thus effectively preventing theft of the vehicle. However, this anti-theft technology has a strong dependence on the physical key. When the vehicle is used by many people or the owner forgets to carry the key with him, the vehicle cannot be used normally, which causes a bad user experience.

The object of the present invention is to achieve a method of starting a vehicle without relying on a physical key and simultaneously performing safety authentication, thereby preventing theft of the vehicle. Among them, the owner can authorize multiple mobile phones to be the Bluetooth key of the vehicle for a certain period of time or for a long time; carrying the authorized mobile phone, the user can use the vehicle's anti-theft authentication system to verify the normal use of the vehicle.

Summary of the invention

A brief overview of one or more aspects is provided below to provide a basic understanding of these aspects. This summary is not an extensive overview of all aspects that are conceived, and is not intended to identify key or critical elements in all aspects. Its sole purpose is to present some concepts in one or more aspects

According to an aspect of the present invention, a secure authentication method for ensuring a legitimate use right of a user for a vehicle, the secure authentication method includes:

Performing an authentication process cyclically, the authentication process including performing Bluetooth-based authentication with respect to a client of the user;

After each execution of the authentication process, the authentication state is updated based on the authentication result and the authentication process of the next cycle is performed after the predetermined time interval, where the authentication state includes an authentication pass state or an authentication fail state, where The authentication pass status is used as the basis for the legitimate use of the vehicle by the user.

Further, the performing Bluetooth-based authentication includes:

Detecting whether Bluetooth connection with the client is connected;

If not connected, the authentication fails;

If the connection is maintained, the user identity information from the client is received, and based on the user identity information stored in the locality and the received user identity information, whether the user of the client is an authenticated user is determined. If the two are inconsistent, the authentication fails.

Further, the performing Bluetooth-based authentication further includes:

If the local user identity information is consistent with the received user identity information, determining a distance between the client and the vehicle based on the Bluetooth signal strength of the client;

If the distance is greater than the predetermined distance threshold, the authentication fails.

Further, the predetermined distance threshold is 3-5 meters.

Further, the updating the authentication status based on the authentication result includes:

If the Bluetooth-based authentication fails, the authentication status is set to an authentication fail status.

Further, the authentication process further includes:

After the Bluetooth-based authentication is successful, key-based authentication is performed.

If the key-based authentication is successful, the authentication state is set to an authentication pass state.

Further, the updating the authentication status based on the authentication result further includes:

An expiration date is set for the authentication pass state, the length of the validity period being greater than the predetermined time interval, wherein the authentication pass status within the validity period is used for the basis of the user's legitimate use of the vehicle.

Further, the key-based authentication includes:

Generating a random number by the body control module unit and transmitting it to the vehicle control and communication module unit;

And receiving, by the vehicle control and communication module unit, the received random number by using a work key, and transmitting the encrypted random number to the vehicle body control module unit;

Decrypting the received encrypted random number by the body control module unit using a local working key;

The random number obtained by the decryption is compared with the random number originally transmitted to the vehicle control and communication module unit. If the two are identical, the key-based authentication is successful, otherwise it fails.

Further, it also includes:

Transmitting, by the body control module unit, a key request to the vehicle control and communication module unit, the key request including a serial number of the body control module unit;

The work key is generated by the vehicle control and communication module unit in response to the key request based on the serial number of the vehicle body control module unit, and the generated work key is transmitted to the vehicle body control module unit Used as a local work key for the body control module unit,

In the key-based authentication process, in response to receiving the random number, the work key is generated based on the serial number of the body control module unit for encryption of the random number.

Further, the cyclically performing the authentication process begins in response to the controller local area network of the vehicle control and communication module unit being awakened, and terminated in response to controller local area network sleep of the vehicle control and communication module.

Further, between every two cycles, the authentication process of the next cycle is directly triggered in response to detecting that the door is opened, the brake plate is depressed, or the key is inserted after the start button is pressed.

According to an aspect of the present invention, there is provided a security authentication apparatus for ensuring a legitimate use right of a user for a vehicle, the secure authentication apparatus comprising:

a vehicle control and communication module unit, the vehicle control and communication module unit cyclically performing an authentication process, the authentication process including the vehicle control and communication module unit performing Bluetooth-based authentication with respect to a client of the user;

a vehicle body control module unit, each time the authentication process is performed, the vehicle body control module unit updates an authentication state based on an authentication result, and after a predetermined time interval, the vehicle control and communication module unit performs an authentication process of a next cycle The authentication status includes an authentication pass status or an authentication fail status, wherein the authentication pass status is used by the body control module unit as a basis for the user's legitimate use of the vehicle.

Further, the vehicle control and communication module unit includes a Bluetooth module and a determination module.

The Bluetooth module detects whether a Bluetooth connection between the vehicle control and communication module and the client is connected;

If not connected, the authentication fails;

If the connection is maintained, the Bluetooth module receives the user identity information from the client, and the determining module determines, according to the user identity information stored locally and the received user identity information, whether the user of the client is an authenticated user, if If the two are inconsistent, the authentication fails.

Further, the vehicle control and communication module unit further includes a distance calculation module,

The distance calculation module is configured to determine, according to the Bluetooth signal strength of the client, the client and the vehicle, if the user identity information stored locally is consistent with the received user identity information distance,

The determining module determines whether the distance is greater than a predetermined distance threshold, and if so, the authentication fails.

Further, the predetermined distance threshold is 3-5 meters.

Further, if the Bluetooth-based authentication fails, the body control module unit sets the authentication state to an authentication failure state.

Further, the authentication process further includes:

After the Bluetooth-based authentication is successful, the vehicle control and communication module unit and the vehicle body control module unit perform key-based authentication.

Further, if the key-based authentication is successful, the body control module unit sets the authentication state to an authentication pass state.

Further, if the key-based authentication is successful, the body control module unit further sets an expiration date for the authentication pass state, the length of the validity period being greater than the predetermined time interval, wherein the validity period is The authentication pass status is used as the basis for the user's legitimate use of the vehicle.

Further, the vehicle body control module unit includes a random number generation module, a decryption module, and a determination module, and the vehicle control and communication module unit includes an encryption module.

In the key-based authentication, the random number generating module generates a random number and transmits it to the vehicle control and communication module unit, and the encryption module of the vehicle control and communication module unit uses a work key pair. Receiving the random number encryption, and transmitting the encrypted random number to the body control module unit, the decryption module of the body control module unit decrypting the received encrypted random number by using a local working key, The comparison module compares the random number obtained by the decryption with the random number originally transmitted to the vehicle control and communication module unit, and if the two match, the key-based authentication succeeds, otherwise it fails.

Further, the vehicle control and communication module unit further includes a key generation module,

The body control module unit transmits a key request to the vehicle control and communication module unit, the key request including a serial number of the body control module unit, and the key generation module is responsive to the key request, Generating the work key based on a serial number of the body control module unit, and transmitting the generated work key to a local work key saved by the body control module unit for the body control module unit,

In the key-based authentication process, the key generation module generates the work key for the randomization based on the serial number of the body control module unit in response to receiving the random number. The encryption of the number.

According to an aspect of the present invention, a secure authentication electronic device is provided, comprising:

At least one processor; and,

a memory communicatively coupled to the at least one processor; wherein

The memory stores instructions executable by the one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform all of the steps of the secure authentication method as previously described.

According to an aspect of the invention, there is provided a computer program comprising computer code adapted to perform all the steps of the secure authentication method as described above when run on a computer.

Further, the computer program is embodied on a computer readable medium.

DRAWINGS

The above features and advantages of the present invention will be better understood from the following description of the appended claims. In the figures, components are not necessarily drawn to scale, and components having similar related features or features may have the same or similar reference numerals.

1 shows a block diagram of a remote authorization system in accordance with an aspect of the present invention;

2 shows a flow chart of a remote authorization method in accordance with an aspect of the present invention;

Figure 3 shows a flow chart of a remote authorization method in accordance with a first embodiment of the present invention;

4 shows a flow chart of a remote authorization method in accordance with a second embodiment of the present invention;

Figure 5 illustrates a functional block diagram of a TSP in accordance with an aspect of the present invention;

6 shows a flow chart of a secure authentication method in accordance with an embodiment of the present invention;

FIG. 7 is a block diagram showing a secure authentication apparatus according to an embodiment of the present invention; FIG.

FIG. 8 illustrates a data flow diagram of secure authentication in accordance with an embodiment of the present invention;

9 is a block diagram showing the hardware structure of a secure authentication electronic device in accordance with an aspect of the present invention.

Detailed ways

The invention is described in detail below with reference to the drawings and specific embodiments. It is to be noted that the aspects described below in conjunction with the drawings and the specific embodiments are merely exemplary and are not to be construed as limiting the scope of the invention.

In order to solve the problem of theft of the vehicle, the present invention provides a mode for utilizing the related APP on the electronic device that is carried, and the APP logs in the User ID, and the plurality of User IDs can be authorized by the owner ID, so that the user does not carry the car key. In this case, the vehicle can be turned on by using the electronic device that is carried around and the vehicle is safely verified based on the user information of the APP or the like.

The Telematics BOX (T-Box) is a very important component in today's connected car-mounted systems. Its main function is to interconnect the car and the Telematics Service Provider (TSP). Usually TSP deploys a smart T service strategy, interacts with the remote vehicle T-Box, and cooperates with the vehicle BCM/ECU (body control module) to complete the request of the user T service. The usual usage scenario is that a legitimate user with a vehicle can use the registered mobile APP to connect with the TSP, and the TSP can send a start command to the T-Box according to the registered mobile APP user.

1 shows a block diagram of a remote authorization system in accordance with an aspect of the present invention. As shown in FIG. 1, remote authorization system 100 can include client 110n, TSP 120, and T-Box 130m. The client 110n may be a mobile terminal having a near field wireless communication function, and the near field wireless communication function herein may include a contactless transmission technology such as Bluetooth, NFC (Near Field Communication), infrared communication, or the like. The client 110 can be a smart terminal such as a smart phone, a palmtop computer, or an ipad.

Both client 110 and T-Box 130 can communicate with TSP 120 over a wireless network. Wireless networks may be such as CDMA, TDMA, FDMA, OFDMA, SC-FDMA, and other networks. A CDMA network can implement radio technologies such as Universal Terrestrial Radio Access (UTRA), cdma2000, and the like. UTRA includes Wideband CDMA (W-CDMA) and other CDMA variants. In addition, cdma2000 covers the IS-2000, 5IS-95, and IS-856 standards. A TDMA system can implement a radio technology such as the Global System for Mobile Communications (GSM). An OFDMA system can implement such as Evolved UTRA (E-UTRA), Ultra Mobile Broadband (UMB), IEEE 802.11 (Wi-Fi), IEEE 802.16 (WiMAX), IEEE 802.20,

Radio technology such as the same. UTRA and E-UTRA are part of the Universal Mobile Telecommunications System (UMTS). 3GPP Long Term Evolution (LTE) is a release of UMTS that uses E-UTRA, which employs OFDMA on the downlink and SC-FDMA on the uplink. UTRA, E-UTRA, UMTS, LTE and GSM are described in documents from an organization named "3rd Generation Partnership Project (3GPP)". In addition, cdma2000 and UMB are described in documents from an organization named "3rd Generation Partnership Project 2" (3GPP2).

2 shows a flow diagram of a remote authorization method 200 that may be performed by TSP 120 in FIG. 1 in accordance with an aspect of the present invention. As shown in FIG. 2, the remote authorization method 200 can include the following steps.

Step 201: Receive an authorization request from the client 110n, the authorization request including the requester identity information.

The user of the client 110, as a requester, can log in to the APP on the client 110n and then send an authorization request to the TSP 120. The authorization request may be a usage right authorization request for the vehicle. The requester identity information herein may be information that characterizes the identity of the requester, such as a mobile phone number.

Step 202: Perform authorization authentication on the authorization request based on the requester identity information.

Authorization certification is based on the identity of the requester. The specific authorization authentication implementation method is as follows.

Step 203: In response to the authentication being successful, the authorization information about the requester is sent to the T-Box 130m storage of the target authorized vehicle, and the T-Box information of the target authorized vehicle is transmitted to the client 110 for storage.

Authorization information may be generated by the TSP 120. The authorization information may include the subscriber's subscriber identification information, which is used to uniquely identify the requestor, such as the User ID uniquely assigned by the TSP 120 when the subscriber was registered.

The authorization information may also include one or more of an authorization category, an authorization validity period, and a license key. Authorization categories may include owner users, home users, and general users. The corresponding license validity period of the owner user can be permanent. The corresponding authorization validity period of the home user may also be permanent or a subscription time period.

In addition, the authorization information may also include information such as a user nickname, a login password, and the like. The login password can be encrypted and stored using encryption methods such as MD5.

The T-Box 130m of the target authorized vehicle may store the above authorization information for the user to provide an authorization basis for the subsequent use of the client 110n near field control vehicle. The client 110n may store T-Box information of the target authorized vehicle.

The T-Box information may include one or more of a vehicle's vehicle VIN number, an authorization expiration date, and a vehicle control key.

FIG. 3 shows a flow chart of a remote authorization method 300 in accordance with a first embodiment of the present invention. The remote authorization method 300 can be performed by the TSP 120 of FIG. As shown in FIG. 3, the remote authorization method 300 can include the following steps.

Step 301: Receive an authorization request from the vehicle owner's client 110-N1, the authorization request including the requester identity information.

In this embodiment, it is assumed that the user of the client 110-N1 is the owner of the vehicle, and the requester at this time is the owner of the vehicle, and the identity information of the requester is the identity information of the owner. The owner first needs to turn on the function of the wireless near field control vehicle and obtain the certification authorization. Therefore, the owner of the vehicle successfully logs in to the APP installed on the client 110-N1 by using the account and password obtained in advance, and then sends an authorization request to the TSP 120 to enable the wireless near field control function and obtain authorization at the same time.

In practice, when the owner is buying a car, a new owner's account can be created with the dealer management system (DMS) to the TSP 120, which is bound with the vehicle's VIN number and associated owner identity information, the owner identity The information is unique code information that can distinguish the identity of the owner, such as a mobile phone number, an ID card, a passport or a driver's license, or the like, or unique user identification information such as a User ID. When the account is created, the password for the owner of the vehicle to log in can be randomly generated by the TSP 120. Of course, the user can modify the password later.

When you want to open the wireless near-field control car, the owner can use the owner's identity information such as mobile phone number, ID card, passport or driver's license, or unique user identification information such as User ID and password to log in to the APP. In the APP, you can specify the vehicle and select to open. Wireless near field control options, wireless here includes Bluetooth, NFC, infrared and other contactless transmission technologies.

After receiving the authorization request, the TSP 120 may detect that the authorization request includes turning on the wireless near field control instruction, thereby responding to the instruction, identifying the received authorization request as a vehicle owner authorization request, and performing authorization authentication to enable the Wireless near field control function.

Step 302: Retrieve the presence or absence of the owner identity information in the local database that matches the identity information of the requester. If yes, the authorization is successful, otherwise the authorization authentication fails.

As described above, the TSP 120 locally stores a vehicle owner identity information database in which the vehicle owner identity information and the vehicle VIN bound thereto are stored in association. Therefore, the TSP 120 only needs to retrieve whether the identity information of the owner identity information database matches the identity information of the requester.

Step 303: In response to the authentication being successful, the authorization information about the owner is transmitted to the T-Box 130m storage of the target authorized vehicle, and the T-Box information of the target authorized vehicle is transmitted to the client 110-N1 for storage.

The authorization information herein includes one or more of the requester's user identification information, authorization category, authorization validity period, and car control key. The user identification information may include unique code information such as a User ID, a mobile phone number, an ID card, a passport, or a driver's license. At this time, the authorization category is the owner of the vehicle, and the authorization period is permanent. In addition, the authorization information may also include information such as a user nickname, a login password, and the like. The login password can be encrypted and stored using encryption methods such as MD5.

The T-Box 130m of the target authorized vehicle may store the above authorization information for the user to provide an authorization basis for subsequent use of the client 110-N1 near field control vehicle.

In addition, the client 110-N1 may store T-Box information of the target authorized vehicle. The T-Box information may include one or more of a vehicle's vehicle VIN number, an authorization expiration date, and a vehicle control key.

FIG. 4 shows a flow chart of a remote authorization method 400 in accordance with a second embodiment of the present invention. The remote authorization method 400 can be performed by the TSP 120 of FIG. As shown in FIG. 4, the remote authorization method 400 can include the following steps.

Step 401: Receive an authorization request from the borrower's client 110-N2, the authorization request including the requester identity information.

In this embodiment, assume that the user of client 110-N1 is the owner of the vehicle and the user of client 110-N2 is the borrower identity. Correspondingly, the authorization request is a borrowing authorization request. At this time, the requester is a borrower, and the identity information of the requester is the identity information of the borrower. In addition to including the identity information of the requester, the borrowing authorization request includes the identity information of the owner, that is, the identity information of the owner of the vehicle that the requester wishes to borrow. Preferably, the borrowing authorization request may further include information such as the driver's driving license.

In practice, the borrower also needs to create an account, and then log in to the APP, and then choose to apply for authorization, such as filling in the owner's identity information such as the owner's mobile phone number, ID card, passport, driver's license or User ID, etc., click on the application. The client 110-N2 APP submits the application to the TSP 120.

Step 402: Forward the authorization request to the client 110-N1 of the designated owner according to the owner identity information.

For example, after receiving the authorization application, the TSP 120 may forward the application to the owner APP according to the identity information of the owner such as the mobile phone number. The owner can view the application notice in the APP. According to the applicant's identity information, the owner can specify the vehicle, the authorization category (home user or general user), and the authorization duration (if it is a home user, the authorization duration can be forever). The owner can click to agree or reject, and the APP synchronizes the application results to TSP 120.

Step 403: Receive an authorization response from the client 110-N1 of the designated owner. If the authorization response is an consent authorization command, the authorization authentication succeeds, otherwise the authorization authentication fails.

After receiving the authorization response, the TSP 120 feeds back the authorization response to the applicant's client 110-N2 based on the applicant information, such as the mobile number.

Step 404: In response to the authentication being successful, the authorization information about the borrower is sent to the T-Box 130m storage of the target authorized vehicle, and the T-Box information of the target authorized vehicle is transmitted to the borrower's client 110-N2 for storage. .

The authorization information herein includes one or more of the requester's user identification information, authorization category, authorization validity period, and car control key. The user identification information may include a User ID, a mobile phone number, and the like. At this time, the authorization category is a home user or a general user. For home users, the authorization period can be permanent. In addition, the authorization information may also include information such as a user nickname, a login password, and the like. The login password can be encrypted and stored using encryption methods such as MD5.

The T-Box 130m of the target authorized vehicle may store the above authorization information for the user to provide an authorization basis for subsequent use of the client 110-N2 near field control vehicle.

In addition, the borrower's client 110-N2 can store the T-Box information of the target authorized vehicle. The T-Box information may include one or more of a vehicle's vehicle VIN number, an authorization expiration date, and a vehicle control key.

For users whose authorization validity period is not permanent, such as home users and general users, the corresponding client 110-N2 and the T-Box 130m for the authorized vehicle may respectively delete the locally stored authorization information and T-Box after the authorization expiration period expires. Information to prevent users from expiring use and stealth leaks.

Although the above method is illustrated and described as a series of acts for simplicity of the explanation, it should be understood and appreciated that these methods are not limited by the order of the acts, as some acts may occur in different orders in accordance with one or more embodiments. And/or concurrently with other acts from what is illustrated and described herein or that are not illustrated and described herein, but are understood by those skilled in the art.

FIG. 5 shows a functional block diagram of a TSP 500 in accordance with an aspect of the present invention. As shown in FIG. 5, the TSP 500 may include a transceiver unit 501 and a control unit 502.

The transceiver unit 501 can be configured to receive an authorization request from a client, the authorization request including requester identity information. The requester at this time is the owner of the vehicle, and the identity information of the requester is the identity information of the owner. The control unit 502 may be configured to perform authorization authentication on the authorization request based on the requester identity information, and in response to the authentication being successful, the control unit 02 may control the transceiving unit 501 to transmit the authorization information about the requester to the T-Box storage of the target authorized vehicle, And transmitting the T-Box information of the target authorized vehicle to the client storage.

In an embodiment, the authorization request is a vehicle owner authorization request, and the vehicle owner authorization request may include vehicle identification information of the target authorized vehicle. The control unit 502 can retrieve whether the owner identity information matching the requester identity information exists in the local database, and if yes, the authorization authentication succeeds, otherwise the authorization authentication fails.

More specifically, the owner authorization request may also include turning on the wireless near field control command. The control unit 502 can identify the received authorization request as a vehicle owner authorization request in response to detecting that the open wireless near field control instruction is included in the authorization request.

As an example, the authorization information may include one or more of the requester's user identification information, authorization category, authorization validity period, and car control key. In this example, the authorization category is the owner of the vehicle and the authorization period can be permanent.

In another example, the authorization request may be a borrow authorization request, and the borrow authorization request may also include owner identity information. The requester at this time is a borrower, and the identity information of the requester is the identity information of the borrower. The control unit 502 can control the transceiver unit 501 to forward the authorization request to the client of the designated vehicle owner according to the vehicle owner identity information, and receive the authorization response from the client of the designated vehicle owner. If the authorization response is the consent authorization command, the authorization is successful, otherwise the authorization is authorized. Authentication failed.

As an example, the consent authorization instruction may include vehicle identification information, an authorization validity period, and an authorization category of the target authorized vehicle. The control unit 502 can control the transceiver unit 501 to transmit the requester's authorization information to the T-Box storage of the target authorized vehicle based on the vehicle identification information.

As an example, the authorization information may include one or more of the requester's user identification information, authorization category, authorization validity period, and car control key. In this example, the authorization category may include a home user and a general user, and when the authorization category is a home user, the authorization validity period may be permanent.

As an example, the T-Box information may include one or more of a vehicle VIN number of the target authorized vehicle, an authorization expiration date, and a car control key.

A user who has been authorized to authenticate successfully has the right to operate the vehicle, but after the authorized user starts the vehicle, if there is a situation of leaving the vehicle or forgetting to lock the car, any other person can still operate the activated vehicle, which will aggravate the stolen vehicle. Case.

According to an aspect of the present invention, a secure authentication method for securing a user's right to use a vehicle is provided. In an embodiment, as shown in FIG. 6, the security authentication method includes:

S610: The T-Box unit performs Bluetooth-based authentication with the client of the user, and if the authentication succeeds, S620 is performed, and if the authentication fails, S630 is performed;

S620: The T-Box unit and the BCM unit perform key-based authentication, if the authentication succeeds, S640 is performed, and if the authentication fails, S630 is performed;

S630: The authentication fails, and the update authentication status is the authentication failure status, and S650 is performed;

S640: The authentication is successful, and the update authentication state is the authentication pass state, and S660 is executed;

S650: Limit operation authority and send a message to the client, and execute S660;

S660: After the status update, the next authentication authentication is started after a predetermined time, and S610 is performed.

Preferably, the predetermined time can be set to 10 seconds.

The above steps are an authentication process, which includes Bluetooth-based authentication and key-based authentication. Those skilled in the art can understand that the authentication process may only include a Bluetooth-based authentication process or only a secret-based authentication process. The key authentication process can achieve the purpose of security authentication. The difference is that the security between the authentication processes containing different steps is different.

In an embodiment, the step S610 is performed by the T-Box unit and the client of the user.

Bluetooth-based authentication includes:

S611: determining whether the Bluetooth between the T-Box unit and the client is in a connected state, if it is in the connected state, executing S612, and if in the disconnected state, executing S630;

S612: The T-Box unit receives the user identity information sent by the client, and matches the identity information with the identity information of the authorized user stored locally by the T-Box unit. If the matching succeeds, executing S613, if the matching fails, executing S630;

S613: Calculate the separation distance between the client and the vehicle. If the distance value is less than the predetermined distance threshold, the step S610 is successful, and S620 is performed. If the distance value is greater than the predetermined distance threshold, the authentication fails to execute S630.

Further, the force measurement method in step S613 may be that the T-Box unit performs measurement based on indicators such as the strength of the Bluetooth signal transmitted by the client and/or the signal transmission time.

Preferably, the predetermined distance threshold can be set to 3-5 meters.

Those skilled in the art can understand that the T-Box unit and the user's client perform a Bluetooth-based authentication step to increase or decrease the corresponding authentication step according to requirements.

In an embodiment, the step S620, that is, the step of performing the key-based authentication by the T-Box unit and the BCM unit, includes:

S624: After the Bluetooth authentication succeeds, the T-Box unit sends the authentication request information to the BCM unit, and after receiving the authentication request information, the BCM unit generates a random number and sends the data to the T-Box unit.

S625: The T-Box unit encrypts the received random number by using a working key and sends it back to the BCM unit.

S626: The BCM unit decrypts the received data by using a local working key, and compares the decrypted random number with the originally sent random number. If the two sets of data are consistent, the authentication succeeds in executing S640, if the two sets of data are different The authentication fails to execute S630.

Further, the BCM unit of each vehicle has a unique SN sequence number, and before the authentication process starts, the BCM unit sends a key request to the T-Box unit, the key request including the SN sequence number, and the T-Box unit responds Based on the key request, a work key is generated based on the received SN sequence number, and the work key is sent to the BCM unit to be used as a local work key of the BCM unit, and the SN sequence number is stored. After receiving the random number sent by the BCM unit, the T-Box unit generates a work key based on the locally stored SN sequence number for encrypting the random number, and sends the encrypted data to the BCM unit. Used for key verification.

In the process of generating the work key, the BCM unit decrypts the received encrypted data according to the local working key, thereby verifying whether the T-Box unit is a work key generated based on the SN serial number of the BCM unit. At the same time, the working key generated by the T-Box unit based on the SN serial number is also a verification of whether the serial number of the BCM unit is a locally saved serial number.

Further, the above authentication process is that the BCM unit verifies the T-Box unit, and those skilled in the art can understand that if the T-Box unit needs to verify the BCM unit, a key-based authentication method can also be adopted. That is, the random number generated by the T-Box unit is sent to the BCM unit, and the BCM unit encrypts the received random number based on the local working key and sends it back to the T-Box unit, and the T-Box unit receives the received work key pair. The data is decrypted, and the decrypted random number is compared with the originally transmitted random number. If they are consistent, the authentication is successful, and if different, the authentication fails.

The key authentication method ensures the matching of the BCM unit and the T-Box unit, and prevents the theft of the BCM or T-Box unit by using technology.

Further, an validity period may be set for the authentication pass state according to the requirement, and the validity period should be greater than the predetermined time interval in step S660, and the authentication pass status in the validity period is the basis of the user's operation authority to the vehicle. In the complicated situation such as communication delay or communication interruption, the authentication process is not completed or the new authentication status is not updated in time. On the one hand, the last authentication status permission can be maintained for a period of time without causing great trouble to the user. On the other hand, the limitation of the validity period also prevents the thief from disconnecting the communication network of the vehicle and the BCM unit is in the state of authentication pass.

Those skilled in the art will appreciate that the validity period can be specifically set based on the basic failure recovery time or signal delay time of the CAN communication network.

Further, the authentication process is started when the CAN communication network of the T-Box unit is woken up, and ends after the CAN communication network is dormant.

Preferably, when the BCM unit detects an operation such as a door opening, a brake pedal depression, or a start stop button pressing without detecting a key insertion, it directly contacts the next authentication process.

According to an aspect of the present invention, a security authentication apparatus for securing a user's right to use a vehicle is provided.

In an embodiment, the secure authentication device includes a T-Box unit 710, a BCM unit 720, and a client 730. The client 730 is configured to download the vehicle controlled APP and log in the user identity information, and perform Bluetooth communication with the in-vehicle T-Box unit 710 to control the vehicle. The T-Box unit 710 is configured to begin performing an authentication process every predetermined time interval, the authentication process including performing Bluetooth-based authentication with the client 730. The BCM unit 720 is configured to control the vehicle and, after the authentication process ends, update the authentication status based on the authentication result, and use the authentication status as a basis for the user to legally use the vehicle.

Preferably, the predetermined time interval can be set to 10 seconds.

In an embodiment, the T-Box unit includes: a Bluetooth module 711, a determination module 712, a distance calculation module 713, and an encryption module 714. When the Bluetooth-based authentication starts, the Bluetooth module 711 detects whether it is in a Bluetooth connection state with the client 730. If it is not in the connection state, the authentication fails. If it is in the connected state, the information is sent to the determination module 712 to trigger the determination module 712. Starting to perform identity information determination; the determining module 712 receives the user identity information sent by the client 730 and matches the user identity information with the local user identity information, and the authentication fails if the user identity information of the client is not the local user identity information. If the user identity information of the client is the local user identity information, the information is sent to the distance calculation module 713 to trigger the distance calculation; the distance calculation module 713 is configured to calculate the separation distance from the client 730, if the interval distance exceeds If the preset distance threshold is used, the authentication fails. If the interval is less than the preset distance threshold, the Bluetooth-based authentication process succeeds, and the authentication result information is sent to the BCM unit 720. If the authentication fails in any link, the authentication failure result is sent to the BCM unit 720. The BCM unit 720 updates the authentication status based on the received authentication success or the result of the authentication failure.

In another embodiment, the T-Box unit includes: a Bluetooth module 711, a determination module 712, a distance calculation module 713, an encryption module 714, and a control center 715.

When the Bluetooth-based authentication is started, the control center 715 triggers the Bluetooth module 711 to perform a Bluetooth connection determination, the Bluetooth module 711 detects whether it is in a Bluetooth connection state with the client 730, and sends the determination result to the control center 715;

The control center 715 sends a verification failure result to the BCM unit 720 or sends a message to the determination module 712 to trigger the user identity information verification based on the received Bluetooth connection result;

The determining module 712 determines whether the user of the client 730 is an authorized user based on the received user identity information and the local user identity information, and sends the determination result to the control center 715;

The control center 715 verifies that the result of the verification failure is sent to the BCM unit 720 or sends the information to the distance calculation module 713 based on the received user identity information to trigger the distance verification;

The distance calculation module 713 measures the separation distance from the client 730, and compares the separation distance with the preset distance threshold, and sends the verification result to the control center 715;

The control center 715 sends verification success or verification success information to the BCM unit 720 based on the distance verification result;

The BCM unit 720 updates the authentication status based on the information of the verification success or the verification failure sent by the control center 715.

Preferably, the predetermined distance threshold can be set to 3-5 meters.

In an embodiment, the BCM unit 720 includes: a random number generating module 721, a decrypting module 722, and a determining module 723. The T-Box unit 710 includes an encryption module 714. After the distance calculation module 713 sends the verification success information to the BCM unit 720, the random number generation module 721 generates a random number and sends it to the encryption module 714 and the determination module 723. The encryption module 714 encrypts the received random number based on the work key. And transmitting the encrypted data to the decryption module 722, the decryption module 722 decrypts the received data based on the local working key, and sends the decrypted data to the determining module 723, and the determining module 723 will receive the received data. The two sets of data are compared. If the two data are consistent, the authentication state is changed to the authentication pass state. If the two data are different, the authentication state is changed to the authentication fail state.

In another embodiment, the BCM unit 720 includes: a random number generating module 721, a decrypting module 722, and a determining module 723. The T-Box unit 710 includes an encryption module 714 and a control center 715. After the control center 715 sends the verification success information to the BCM unit 720, the random number generation module 721 generates a random number and sends it to the encryption module 714 and the determination module 723. The encryption module 714 encrypts the received random number based on the work key. The encrypted data is sent to the control center 715, and the control center 715 sends the encrypted data to the decryption module 722, which decrypts the received data based on the local work key, and decrypts the decrypted data. The method is sent to the judging module 723, and the judging module 723 compares the two sets of data received. If the two data are consistent, the authentication status is changed to the authentication pass status. If the two data are different, the authentication status is changed to the authentication status. Pass the status.

In an embodiment, the BCM unit 720 includes: a random number generating module 721, a decrypting module 722, and a determining module 723. The T-Box unit 710 includes a Bluetooth module 711, a determination module 712, a distance calculation module 713, an encryption module 714, and a key generation module 716. Before the authentication process begins, the BCM unit sends a key request to the key generation module 716, the key request including the SN sequence number, and the key generation module 716 generates a SN sequence number based on the received SN sequence number in response to the key request. The work key is sent to the BCM unit 720 to be used as the local work key of the BCM unit 720 while the SN sequence number is stored. In the authentication process, the data flow diagram is as shown in FIG. 8. The random number generation module 721 sends the generated random number to the determination module 723, the encryption module 714, and the key generation module 716, and the key generation module 716 receives After the random number, the work key is generated based on the locally stored SN sequence number and sent to the encryption module 714. The encryption module 714 encrypts the random number based on the work key and sends it to the decryption module 722, and the decryption module 722 decrypts the received data and sends the decrypted data to the determining module 723. The determining module 723 compares whether the received two sets of data are consistent, and updates the authentication status based on the comparison result.

In another embodiment, the BCM unit 720 includes: a random number generating module 721, a decrypting module 722, and a determining module 723. The T-Box unit 710 includes an encryption module 714, a control center 715, and a key generation module 716. Before the authentication process begins, the BCM unit 720 sends a key request to the control center 715, the key request includes the SN sequence number, and the control center 715 stores the SN sequence number and sends a generate key command to the key generation module 716. The key generation module 716 generates a work key based on the received SN sequence number in response to the key request, and sends the work key to the control center 715, and the control center 715 sends the work key to the BCM unit 720. Used as a local work key for the BCM unit 720. In the authentication process, after receiving the random number generated by the random number generating module 721, the control center 715 sends it to the encryption module 714 and sends the SN sequence number to the key generation module 716, and the key generation module 716 generates The work key is sent to the encryption module 714, and the encryption module 714 encrypts the random number based on the received work key, thereby performing a subsequent authentication process.

Further, if the authentication status is a failing state, the user's vehicle operation authority is restricted, such as prohibiting restarting, prohibiting acceleration, etc., and sending information to the user client 730 to remind the user that the authentication fails and the operation authority is limited. And / or will stop after a certain time.

Further, the T-Box unit 710 cyclically performs an authentication process or terminates the authentication process based on the state of the CAN communication network.

Further, the BCM unit 720 directly triggers the authentication process of the next cycle in response to detecting that the door is opened, the brake pedal is depressed, or the stop button is pressed, and the key insertion is not detected.

According to one aspect of the invention, a secure authentication electronic device is provided for securing a user's legal right to use the vehicle.

As shown in FIG. 9, in an embodiment, the secure authentication electronic device includes:

At least one processor 901; and,

a memory 902 communicatively coupled to the at least one processor 901; wherein

The memory 902 stores instructions executable by the one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform all steps of the secure authentication method as described above .

One processor 902 is taken as an example in FIG.

The electronic device may further include an input device 903 and an output device 904.

The processor 901, the memory 902, the input device 903, and the display device 904 may be connected by a bus or other means, and the bus connection is taken as an example.

The memory 902 is a non-volatile computer readable storage medium, and can be used for storing non-volatile software programs, non-volatile computer-executable programs, and modules, such as program instructions corresponding to the security authentication method in the embodiment of the present application. / Module, for example, the method flow shown in Figure 6. The processor 901 executes various functional applications and data processing by executing non-volatile software programs, instructions, and modules stored in the memory 902, that is, implementing the secure authentication method in the above embodiments.

The memory 902 may include a storage program area and an storage data area, wherein the storage program area may store an operating system, an application required for at least one function; the storage data area may store data created according to use of the secure authentication method, and the like. Moreover, memory 902 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid state storage device. In some embodiments, memory 902 can optionally include memory remotely located relative to processor 901 that can be connected over a network to a device that performs a secure authentication method. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The input device 903 can receive input user clicks and generate signal inputs related to user settings and function control of the secure authentication method. Display device 904 can include a display device such as a display screen.

The one or more modules are stored in the memory 902, and when executed by the one or more processors 901, the secure authentication method in any of the above method embodiments is performed.

According to an aspect of the invention, there is provided a storage medium storing computer instructions for performing all the steps of the secure authentication method as described above when the computer executes the computer instructions.

Those skilled in the art will appreciate that information, signals, and data may be represented using any of a variety of different technologies and techniques. For example, the data, instructions, commands, information, signals, bits (bits), symbols, and chips referenced throughout the above description may be by voltage, current, electromagnetic waves, magnetic fields or magnetic particles, light fields or optical particles, or any thereof. Combined to represent.

Those skilled in the art will further appreciate that the various illustrative logical blocks, modules, circuits, and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or combinations of both. To clearly illustrate this interchangeability of hardware and software, various illustrative components, blocks, modules, circuits, and steps are described above generally in the form of their functionality. Whether such functionality is implemented as hardware or software depends on the particular application and design constraints imposed on the overall system. The skilled person will be able to implement the described functionality in a different manner for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the invention.

The various illustrative logic modules, and circuits described in connection with the embodiments disclosed herein may be general purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASICs), field programmable gate arrays (FPGAs), or other programmable Logic devices, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein are implemented or executed. A general purpose processor may be a microprocessor, but in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine. The processor may also be implemented as a combination of computing devices, such as a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such configuration.

The steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied in hardware, in a software module executed by a processor, or in a combination of the two. A software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor to enable the processor to read and write information to/from the storage medium. In the alternative, the storage medium can be integrated into the processor. The processor and the storage medium can reside in an ASIC. The ASIC can reside in the user terminal. In the alternative, the processor and the storage medium may reside as a discrete component in the user terminal.

In one or more exemplary embodiments, the functions described may be implemented in hardware, software, firmware, or any combination thereof. If implemented as a computer program product in software, the functions may be stored on or transmitted as one or more instructions or code on a computer readable medium. Computer readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one place to another. A storage medium may be any available media that can be accessed by a computer. By way of example and not limitation, such computer readable media may comprise RAM, ROM, EEPROM, CD-ROM or other optical disk storage, disk storage or other magnetic storage device, or can be used to carry or store instructions or data structures. Any other medium that is desirable for program code and that can be accessed by a computer. Any connection is also properly referred to as a computer readable medium. For example, if the software is transmitted from a web site, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave. The coaxial cable, fiber optic cable, twisted pair cable, DSL, or wireless technologies such as infrared, radio, and microwave are included in the definition of the medium. Disks and discs as used herein include compact discs (CDs), laser discs, optical discs, digital versatile discs (DVDs), floppy discs, and Blu-ray discs, in which disks are often reproduced magnetically. Data, and discs optically reproduce data with a laser. Combinations of the above should also be included within the scope of computer readable media.

The previous description of the disclosure is provided to enable any person skilled in the art to make or use the disclosure. Various modifications to the present disclosure will be obvious to those skilled in the art, and the general principles defined herein may be applied to other variations without departing from the spirit or scope of the disclosure. The present disclosure is not intended to be limited to the examples and designs described herein, but rather the broadest scope of the principles and novel features disclosed herein.

The above-mentioned embodiments are merely illustrative of several embodiments of the present invention, and the description thereof is more specific and detailed, but is not to be construed as limiting the scope of the invention. It should be noted that a number of variations and modifications may be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of the invention should be determined by the appended claims.

Claims

A security authentication method for ensuring a legitimate use right of a user for a vehicle, characterized in that the security authentication method comprises:

Performing an authentication process cyclically, the authentication process including performing Bluetooth-based authentication with respect to a client of the user;

After each execution of the authentication process, the authentication state is updated based on the authentication result and the authentication process of the next cycle is performed after the predetermined time interval, where the authentication state includes an authentication pass state or an authentication fail state, where The authentication pass status is used as the basis for the legitimate use of the vehicle by the user.
The secure authentication method according to claim 1, wherein said performing Bluetooth-based authentication comprises:

Detecting whether Bluetooth connection with the client is connected;

If not connected, the authentication fails;

If the connection is maintained, the user identity information from the client is received, and based on the user identity information stored in the locality and the received user identity information, whether the user of the client is an authenticated user is determined. If the two are inconsistent, the authentication fails.
The secure authentication method according to claim 2, wherein said performing Bluetooth-based authentication further comprises:

If the local user identity information is consistent with the received user identity information, determining a distance between the client and the vehicle based on the Bluetooth signal strength of the client;

If the distance is greater than the predetermined distance threshold, the authentication fails.
The security authentication method according to claim 3, wherein said predetermined distance threshold is 3-5 meters.
The security authentication method according to claim 1, wherein the updating the authentication status based on the authentication result comprises:

If the Bluetooth-based authentication fails, the authentication status is set to an authentication fail status.
The security authentication method according to claim 1, wherein the authentication process further comprises:

After the Bluetooth-based authentication is successful, key-based authentication is performed.
The security authentication method according to claim 6, wherein the updating the authentication status based on the authentication result comprises:

If the key-based authentication is successful, the authentication state is set to an authentication pass state.
The security authentication method according to claim 7, wherein the updating the authentication status based on the authentication result further comprises:

An expiration date is set for the authentication pass state, the length of the validity period being greater than the predetermined time interval, wherein the authentication pass status within the validity period is used for the basis of the user's legitimate use of the vehicle.
The secure authentication method according to claim 6, wherein the key-based authentication comprises:

Generating a random number by the body control module unit and transmitting it to the vehicle control and communication module unit;

And receiving, by the vehicle control and communication module unit, the received random number by using a work key, and transmitting the encrypted random number to the vehicle body control module unit;

Decrypting the received encrypted random number by the body control module unit using a local working key;

The random number obtained by the decryption is compared with the random number originally transmitted to the vehicle control and communication module unit. If the two are identical, the key-based authentication is successful, otherwise it fails.
The security authentication method according to claim 9, further comprising:

Transmitting, by the body control module unit, a key request to the vehicle control and communication module unit, the key request including a serial number of the body control module unit;

The work key is generated by the vehicle control and communication module unit in response to the key request based on the serial number of the vehicle body control module unit, and the generated work key is transmitted to the vehicle body control module unit Used as a local work key for the body control module unit,

In the key-based authentication process, in response to receiving the random number, the work key is generated based on the serial number of the body control module unit for encryption of the random number.
The secure authentication method of claim 1 wherein said cyclically performing an authentication process begins in response to wake-up of a controller area network of a vehicle control and communication module unit, and responsive to a vehicle control and communication module The controller area network sleeps and terminates.
The safety authentication method according to claim 1, wherein between two cycles, in response to detecting that the door is opened, the brake plate is depressed, or the stop button is pressed, the key insertion is not detected. Trigger the authentication process for the next cycle.
A safety authentication device for ensuring a legitimate use right of a user for a vehicle, characterized in that the safety certification device comprises:

a vehicle control and communication module unit, the vehicle control and communication module unit cyclically performing an authentication process, the authentication process including the vehicle control and communication module unit performing Bluetooth-based authentication with respect to a client of the user;

a vehicle body control module unit, each time the authentication process is performed, the vehicle body control module unit updates an authentication state based on an authentication result, and after a predetermined time interval, the vehicle control and communication module unit performs an authentication process of a next cycle The authentication status includes an authentication pass status or an authentication fail status, wherein the authentication pass status is used by the body control module unit as a basis for the user's legitimate use of the vehicle.
The security authentication device according to claim 13, wherein said vehicle control and communication module unit comprises a Bluetooth module and a determination module.

The Bluetooth module detects whether a Bluetooth connection between the vehicle control and communication module and the client is connected;

If not connected, the authentication fails;

If the connection is maintained, the Bluetooth module receives the user identity information from the client, and the determining module determines, according to the user identity information stored locally and the received user identity information, whether the user of the client is an authenticated user, if If the two are inconsistent, the authentication fails.
The safety authentication device according to claim 14, wherein said vehicle control and communication module unit further comprises a distance calculation module,

The distance calculation module is configured to determine, according to the Bluetooth signal strength of the client, the client and the vehicle, if the user identity information stored locally is consistent with the received user identity information distance,

The determining module determines whether the distance is greater than a predetermined distance threshold, and if so, the authentication fails.
The security authentication device of claim 15 wherein said predetermined distance threshold is 3-5 meters.
The security authentication device according to claim 13, wherein if the Bluetooth-based authentication fails, the body control module unit sets the authentication state to an authentication failure state.
The security authentication device according to claim 13, wherein the authentication process further comprises:

After the Bluetooth-based authentication is successful, the vehicle control and communication module unit and the vehicle body control module unit perform key-based authentication.
The security authentication device according to claim 18, wherein said body control module unit sets said authentication state to an authentication pass state if said key-based authentication is successful.
The security authentication apparatus according to claim 19, wherein, if said key-based authentication is successful, said body control module unit further sets an expiration date for said authentication pass state, said validity period being longer than said A predetermined time interval in which the authentication pass status during the validity period is used for the basis of the user's legitimate use of the vehicle.
A safety authentication device according to claim 18, wherein said vehicle body control module unit comprises a random number generation module, a decryption module and a determination module, and said vehicle control and communication module unit comprises an encryption module.

In the key-based authentication, the random number generating module generates a random number and transmits it to the vehicle control and communication module unit, and the encryption module of the vehicle control and communication module unit uses a work key pair. Receiving the random number encryption, and transmitting the encrypted random number to the body control module unit, the decryption module of the body control module unit decrypting the received encrypted random number by using a local working key, The comparison module compares the random number obtained by the decryption with the random number originally transmitted to the vehicle control and communication module unit, and if the two match, the key-based authentication succeeds, otherwise it fails.
The security authentication device according to claim 21, wherein said vehicle control and communication module unit further comprises a key generation module,

The body control module unit transmits a key request to the vehicle control and communication module unit, the key request including a serial number of the body control module unit, and the key generation module is responsive to the key request, Generating the work key based on a serial number of the body control module unit, and transmitting the generated work key to a local work key saved by the body control module unit for the body control module unit,

In the key-based authentication process, the key generation module generates the work key for the randomization based on the serial number of the body control module unit in response to receiving the random number. The encryption of the number.
The secure authentication device of claim 13 wherein said cyclically performing an authentication process begins in response to wake-up of a controller local area network of a vehicle control and communication module unit, and responsive to a vehicle control and communication module The controller area network sleeps and terminates.
The safety authentication device according to claim 13, wherein between every two cycles, in response to detecting that the door is opened, the brake plate is depressed, or the stop button is pressed, the key insertion is not detected. Trigger the authentication process for the next cycle.
A security authentication electronic device, comprising:

At least one processor; and,

a memory communicatively coupled to the at least one processor; wherein

The memory stores instructions executable by the one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform the method of any one of claims 1 to 12 All steps of the secure authentication method.
A computer program comprising computer code adapted to perform all the steps of the secure authentication method of any one of claims 1 to 12 when run on a computer.
The computer program of claim 26 wherein said computer program is embodied on a computer readable medium.