WO2024016486A1 - Data transmission method and apparatus, device, and computer readable storage medium - Google Patents

Abstract

A data transmission method and apparatus, a device, and a computer readable storage medium. The method comprises: receiving encrypted request data sent by an authentication party, the encrypted request data being encrypted and obtained after the authentication party verifies the identity of a requester (S110); performing identity verification on the authentication party, and obtaining an identity verification result of the authentication party (S120); and if the identity verification result of the authentication party indicates that verification is successful, generating a control instruction according to the encrypted request data, and encrypting the control instruction to obtain an encrypted control instruction (S130). The identity of the authentication party is verified, thus a disguised authentication party is prevented from passing verification. The encrypted control instruction is sent to a sub-control party, so that the sub-control party decrypts the encrypted control instruction, and performs control processing according to the decrypted control instruction (S140). The encrypted control instruction can be decrypted merely by using a related decryption key, thereby avoiding leakage of the control instruction.

Description

Data transmission method and device, equipment, computer-readable storage medium

This application requests the priority of the Chinese patent application submitted to the China Patent Office on July 21, 2022, with the application number 202210861016.6, and the invention name is "data transmission method and device, equipment, computer-readable storage medium", and its entire content is approved by This reference is incorporated into this application.

Technical field

Embodiments of the present application belong to the field of transportation, and in particular relate to a data transmission method, device, equipment, and computer-readable storage medium.

Background technique

The traditional distributed electronic and electrical architecture includes independent engine anti-theft system design, VCU (Vehicle control unit, vehicle controller) anti-theft system design, BMS (Battery Management System, battery management system) anti-theft system design, electronic key and digital key anti-theft system design System design, etc., with the rapid development of modern automobile intelligence and electrification, the proportion of automobile electronics and software is getting higher and higher. The original traditional distributed electronic and electrical architecture can no longer meet the existing functional needs. Based on the traditional distributed electronic and electrical architecture, it is generally possible to unlock by sending a signal through an electronic key or digital key, and the security is not high.

Contents of the invention

In order to solve the above technical problems, embodiments of the present application respectively provide a data transmission method, device, equipment, and computer-readable storage medium to authenticate the identity of the authenticating party and perform secondary encryption during the request data transmission process.

Additional features and advantages of the invention will be apparent from the detailed description which follows, or, in part, may be learned by practice of the invention.

According to one aspect of the embodiment of the present application, a data transmission method is provided, which is applied to the general controller and includes: receiving encrypted request data sent by the authenticator; wherein the encrypted request data is the authenticator's request data. Obtained by encrypting the requesting party after passing the identity verification; performing identity verification on the authenticating party to obtain the identity verification result of the authenticating party; if the identity verification result of the authenticating party indicates that the verification is successful, the encrypted Generate control instructions based on the request data, and encrypt the control instructions to obtain encrypted control instructions; send the encrypted control instructions to the sub-controller, so that the sub-controller can process the encrypted control instructions. The control instructions are decrypted, and control processing is performed according to the decrypted control instructions.

According to one aspect of the embodiment of the present application, another data transmission method is provided, which is applied to the sub-controller, including: receiving an encrypted control instruction sent by the general controller; wherein the encrypted control instruction is the After the total controller successfully authenticates the authenticator, it generates a control instruction based on the encrypted request data sent by the authenticator, and encrypts the control instruction; the encrypted control instruction is Decrypt to obtain the decrypted control instructions, and perform control processing according to the decrypted control instructions.

According to one aspect of the embodiment of the present application, another data transmission method is provided, which is applied to the authenticating party, including: receiving the request data sent by the requesting party; performing identity verification on the requesting party to obtain the identity verification of the requesting party Result; If the identity verification result of the requester indicates that the verification is successful, the request data is encrypted to obtain the encrypted request data; the encrypted request data is sent to the total controller so that the total controller After the controller successfully authenticates the authenticator, it generates a control instruction based on the encrypted request data, and encrypts the control instruction to obtain an encrypted control instruction.

According to one aspect of the embodiment of the present application, an information processing device is provided, which is applied to the general controller and includes: an encrypted request receiving module configured to receive encrypted request data sent by the authenticating party; wherein the encrypted The request data is encrypted after the authenticator passes the identity verification of the requester; the authenticator identity verification module is configured to perform identity verification on the authenticator and obtain the identity verification result of the authenticator; control instructions An encryption module configured to generate a control instruction based on the encrypted request data if the identity verification result of the authenticator indicates that the verification is successful, and encrypt the control instruction to obtain an encrypted control instruction; encryption control The instruction sending module is configured to send the encrypted control instruction to the sub-controller, so that the sub-controller decrypts the encrypted control instruction and performs control processing according to the decrypted control instruction.

In another embodiment, the encrypted request data includes a random number used by the authenticator; the authenticator identity verification module includes: a random number acquisition unit configured to acquire the random number, and record Regarding the time corresponding to the authenticator and the time corresponding to the total controller when obtaining the random number; the authenticator verification success unit is configured to detect that the random number is not stored, and the authenticator corresponding If the time matches the time corresponding to the total controller, it is determined that the identity verification of the authenticator is successful, and an identity verification result used to represent the success of the identity verification of the authenticator is obtained; the authenticator verification failure unit is configured If it is detected that the random number is stored, or the time corresponding to the authenticator does not match the time corresponding to the total controller, then it is determined that the identity verification of the authenticator failed, and the method used to characterize the The authentication result of the authenticator's failed authentication.

According to one aspect of the embodiment of the present application, another information processing device is provided, which is applied to a sub-controller and includes: an encrypted control instruction receiving module configured to receive an encrypted control instruction sent by the general controller; wherein, The encrypted control instruction is obtained by the general controller generating a control instruction based on the encrypted request data sent by the authenticator after successfully authenticating the authenticator, and encrypting the control instruction; The control instruction decryption module is configured to decrypt the encrypted control instruction, obtain the decrypted control instruction, and perform control processing according to the decrypted control instruction.

In another embodiment, the control instruction decryption module includes: a requesting party's identity verification result receiving unit configured to receive the requesting party's identity verification result sent by the authenticating party; a control instruction decryption unit configured to: If the identity verification result of the requesting party indicates that the verification is successful, the encrypted control instruction is decrypted to obtain the decrypted control instruction.

According to one aspect of the embodiment of the present application, another information processing device is provided, applied to the authenticator, including: a request data receiving module configured to receive the request data sent by the requesting party; a requesting party identity verification module configured to Perform identity verification on the requester to obtain the identity verification result of the requester; a request data encryption module configured to encrypt the request data if the identity verification result of the requester indicates that the verification is successful, and obtain Encrypted request data; The encrypted request data sending module is configured to send the encrypted request data to the general controller, so that after the general controller successfully authenticates the authentication party, it can send the encrypted request data to the authenticator according to the encrypted request data. The subsequent request data is used to generate a control instruction, and the control instruction is encrypted to obtain an encrypted control instruction.

In another embodiment, the information processing device further includes: a control sending module configured to send the identity verification result of the requesting party to a sub-controlling party, so that the sub-controlling party When the identity verification result indicates that the verification is successful, the encrypted control instruction is decrypted to obtain the decrypted control instruction.

In another embodiment, the authenticator includes a server, and the requester includes an application program; the request data receiving module includes: a request data receiving unit configured to receive request data sent by the application program through the network; The requester identity verification module includes: an identity verification unit of the application program, configured to authenticate the application program and obtain the identity verification result of the application program.

In another embodiment, the authenticator includes a receiver, the requester includes an initiator; the request data receiving module includes: receiving request data sent by the initiator through the network; the requester identity verification module includes: Perform identity verification on the initiator to obtain an identity verification result of the initiator.

In another embodiment, the requester is a signal transmitter, the authenticator is an anti-theft controller of a vehicle, and the request data includes a random number used by the signal transmitter; the requester identity verification module It includes: a vehicle random number obtaining unit configured to obtain the random number, and record the time corresponding to the signal transmitter and the time corresponding to the anti-theft controller when obtaining the random number; the signal transmitter identity verification is successful. The unit is configured to determine that the identity verification of the signal transmitter is successful if it detects that the random number is not stored and the time corresponding to the signal transmitter matches the time corresponding to the anti-theft controller, and obtain An identity verification result used to represent the successful identity verification of the signal transmitter; the signal transmitter identity verification failure unit is configured to detect that the random number is stored, or the time corresponding to the signal transmitter and the If the time corresponding to the anti-theft controller does not match, it is determined that the identity verification of the signal transmitter has failed, and an identity verification result used to represent the identity verification failure of the signal transmitter is obtained.

In another embodiment, the requester is a signal transmitter, the authenticator is an anti-theft controller of the vehicle, the anti-theft controller includes a remote anti-theft device and/or a local anti-theft device; the requester identity verification module It includes: a first vehicle signal transmitter verification unit configured for the remote anti-theft device to perform identity verification on the mobile terminal to obtain an identity verification result of the signal transmitter; or a second vehicle signal transmitter verification unit configured to perform identity verification on the mobile terminal. The local anti-theft device is configured to perform identity verification on the key and obtain the identity verification result of the signal transmitter.

In another embodiment, if the anti-theft controller includes a remote anti-theft device and a local anti-theft device; the requester identity verification module includes: a first vehicle verification unit configured as the remote anti-theft device to the mobile terminal Perform identity verification to obtain the identity verification result of the mobile terminal; a second vehicle verification unit configured as the local anti-theft device to perform identity verification on the key to obtain the identity verification result of the key; vehicle signal transmitter identity The verification unit is configured to obtain the identity verification result of the signal transmitter based on the identity verification result of the mobile terminal and the identity verification result of the key.

In another embodiment, the identity verification result of the signal transmitter includes a successful verification result and a failed verification result; the successful verification result indicates that the identity of the mobile terminal and the identity of the key have passed the verification; The failed verification result indicates that at least one of the identity of the mobile terminal or the identity of the key has failed to pass verification.

According to an aspect of an embodiment of the present application, an electronic device is provided, including: a controller; and a memory for storing one or more programs, to execute when the one or more programs are executed by the controller. The above data transmission method.

According to one aspect of the embodiment of the present application, a computer-readable storage medium is also provided, on which computer-readable instructions are stored. When the computer-readable instructions are executed by a processor of the computer, the computer is caused to execute the above-mentioned data. Transmission method.

According to an aspect of the embodiment of the present application, a computer program product or computer program is also provided. The computer program product or computer program includes computer instructions, and the computer instructions are stored in a computer-readable storage medium. The processor of the computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device performs the above-mentioned data transmission method.

In the technical solution provided by the embodiment of this application, the request data sent by the authenticator is encrypted after the authenticator passes the identity verification of the requester; the identity verification of the authenticator is performed to obtain the identity verification result of the authenticator; If the identity verification result of the authenticator indicates that the verification is successful, the control instructions are generated based on the encrypted request data, and the control instructions are encrypted to obtain the encrypted control instructions; the identity of the authenticator is verified to avoid disguised authenticators. approved. The encrypted control instruction is sent to the sub-controller, so that the sub-controller decrypts the encrypted control instruction and performs control processing according to the decrypted control instruction. The authenticator performs the first encrypted transmission of the request data. The controller generates control instructions based on the encrypted request data and encrypts the control instructions. That is, a second encryption is performed during the transmission of the request data. Only the relevant key is known Only in this way can the relevant data in the encrypted data be obtained, ensuring the security during the transmission of request data and control instructions and avoiding data leakage.

It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and do not limit the present application.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the application and together with the description, serve to explain the principles of the application. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without exerting creative efforts. In the attached picture:

Figure 1 is a flow chart of a data transmission method according to an exemplary embodiment of the present application;

Figure 2 is a flow chart of another data transmission method based on the embodiment shown in Figure 1;

Figure 3 is a flow chart of another data transmission method according to an exemplary embodiment of the present application;

Figure 4 is a flow chart of another data transmission method proposed based on the embodiment shown in Figure 3;

Figure 5 is a flow chart of another data transmission method according to an exemplary embodiment of the present application;

Figure 6 is a schematic diagram of an application scenario of a data transmission method according to an exemplary embodiment of the present application;

Figure 7 is a schematic diagram of the vehicle domain control architecture shown in an exemplary embodiment of the present application;

Figure 8 is a flow chart of another data transmission method proposed based on the embodiment shown in Figure 5;

Figure 9 is a flow chart of another data transmission method proposed based on the embodiment shown in Figure 5;

Figure 10 is a flow chart of another data transmission method proposed based on the embodiment shown in Figure 5;

Figure 11 is a flow chart of another data transmission method proposed based on the embodiment shown in Figure 5;

Figure 12 is a flow chart of another data transmission method proposed based on the embodiment shown in Figure 11;

Figure 13 is a schematic structural diagram of an information processing device according to an exemplary embodiment of the present application;

Figure 14 is a schematic structural diagram of another information processing device according to an exemplary embodiment of the present application;

Figure 15 is a schematic structural diagram of another information processing device according to an exemplary embodiment of the present application;

Figure 16 is a schematic structural diagram of a computer system of an electronic device according to an exemplary embodiment of the present application.

The realization of the purpose, functional features and advantages of the present application will be further described with reference to the embodiments and the accompanying drawings.

Detailed ways

Reference will now be made in detail to exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this application. Rather, they are merely examples of apparatus and methods consistent with aspects of the application as detailed in the appended claims.

The block diagrams shown in the figures are functional entities only and do not necessarily correspond to physically separate entities. That is, these functional entities may be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and/or processor devices and/or microcontroller devices. entity.

The flowcharts shown in the drawings are only illustrative, and do not necessarily include all contents and operations/steps, nor must they be performed in the order described. For example, some operations/steps can be decomposed, and some operations/steps can be combined or partially combined, so the actual order of execution may change according to actual conditions.

The "plurality" mentioned in this application means two or more than two. "And/or" describes the association of related objects, indicating that there can be three relationships. For example, A and/or B can mean: A exists alone, A and B exist simultaneously, and B exists alone. The character "/" generally indicates that the related objects are in an "or" relationship.

First, please refer to FIG. 1 , which is a flow chart of a data transmission method according to an exemplary embodiment of the present application. This method applies to the total controller, including at least S110 to S140. The details are as follows:

S110: Receive the encrypted request data sent by the authenticator; the encrypted request data is encrypted after the authenticator passes the identity verification of the requester.

The master controller receives the encrypted request data sent by the authenticator after passing the authentication of the requester.

The requester can be a terminal that sends the request data, such as a mobile phone, a computer, or an application in the mobile phone. The authenticator has the function of verifying the identity of the requester. The authenticator is an independent physical server, or it can be a server cluster or distributed system composed of multiple physical servers. Multiple servers can form a blockchain, and the server is a block chain. There are no restrictions on the nodes on the chain.

For example, the requesting party is the requesting APP in the mobile phone and the server in the authenticating party's cloud. The encrypted request data is encrypted after the authenticating party passes the identity verification of the requesting party. The user sends the request data to the receiving end of the server through the requesting APP in the mobile phone. When the server receives the request data, it verifies the account identity of the requesting APP in the mobile phone. After the requesting party's identity verification passes, the authenticator encrypts the requesting data. Outgoing.

S120: Perform identity verification on the authenticator and obtain the identity verification result of the authenticator.

The overall controller can be a central controller/unit, that is, a controller/unit that integrates control of the entire device. It controls multiple sub-controllers/units. It has the function of verifying the identity of the authenticating party, and also has the ability to encrypt control instructions and send control instructions. function.

The master controller performs identity verification on the authenticator. For example, the master controller receives the encrypted request data from the authenticator, authenticates the identity of the authenticator, and obtains the identity verification result indicating whether the authentication of the authenticator is successful or failed.

S130: If the authenticator's identity verification result indicates that the verification is successful, a control instruction is generated based on the encrypted request data, and the control instruction is encrypted to obtain an encrypted control instruction.

If the identity of the authenticating party passes the verification of the general controller, the general controller decrypts the encrypted request data and obtains the decrypted request data. The total controller generates a control instruction corresponding to the request data based on the decrypted request data, and encrypts it to obtain the encrypted control instruction, which is similar to encrypting the request data for the second time.

It is worth noting that the authenticator encrypts the request data according to the specified encryption key and sends it to the master controller. The master controller can decrypt the encrypted request data according to the decryption key that matches the specified encryption key. , get the decrypted request data. If the main controller encrypts the control instructions, the control instructions can be encrypted using the designated encryption key used by the authenticator, or other keys can be used to encrypt the control instructions. Just ensure that the main controller uses the encryption key to encrypt the control instructions. The key matches the decryption key used by the sub-controller to decrypt the control instructions.

S140: Send the encrypted control instruction to the sub-controller, so that the sub-controller can decrypt the encrypted control instruction and perform control processing according to the decrypted control instruction.

The sub-controller is the downstream party of the main controller, that is, the sub-controller is controlled by the main controller, and the main controller can control the sub-controller to perform control processing by sending relevant control instructions to the sub-controller.

The sub-controller receives the encrypted control instruction sent by the main controller, uses the matching decryption key to decrypt the encrypted control instruction, and performs control processing according to the decrypted control instruction.

This embodiment receives the encrypted request data sent by the authenticator after the authenticator passes the authentication of the requester, and then encrypts the request data before sending it, because it can only be decrypted by using the relevant key, ensuring that the request data is Security during transmission avoids request data leakage.

At the same time, the identity of the authenticator is verified to obtain the identity verification result of the authenticator; if the identity verification result of the authenticator indicates that the verification is successful, the control instructions are generated based on the encrypted request data, and the control instructions are encrypted to obtain the encrypted Control instructions; the identity of the authenticator is verified to prevent the disguised authenticator from passing the verification. The encrypted control instruction is sent to the sub-controller, so that the sub-controller decrypts the encrypted control instruction and performs control processing according to the decrypted control instruction. The authenticator performs the first encrypted transmission of the request data. The controller generates control instructions based on the encrypted request data and encrypts the control instructions. That is, a second encryption is performed during the transmission of the request data. Only the relevant key is used. Only in this way can the control instructions in the encrypted control instructions be obtained, which ensures the security during the transmission of the control instructions and avoids the leakage of the control instructions.

Please refer to Figure 2, which is a flow chart of another data transmission method based on the embodiment shown in Figure 1. Among them, the method at least includes S210 to S230. The encrypted request data includes the random number used by the authenticator. The details are as follows:

S210: Obtain a random number, and record the time corresponding to the authenticator and the time corresponding to the total controller when obtaining the random number.

The random number is the number used by the authenticator and the total controller. When obtaining a random number, record the time corresponding to the authenticator and the time corresponding to the total controller. This step can effectively prevent replay attacks, that is, the timestamp and random number are used as the basis for determining whether a replay attack has occurred, thus making Authentication results are more accurate.

S220: If it is detected that the random number is not stored, and the time corresponding to the authenticator matches the time corresponding to the total controller, it is determined that the identity verification of the authenticator is successful, and the identity verification result used to represent the success of the identity verification of the authenticator is obtained. .

For example, if the random number is 4 and the stored random numbers include 1, 2 and 3, then the random number 4 has not been used. At the same time, the time corresponding to the authenticator is 10:10, and the time corresponding to the total controller is 10:10. is 10:10, then the two times are the same, and the identity of the authenticator has passed the verification of the master controller.

S230: If it is detected that a random number is stored, or the time corresponding to the authenticator does not match the time corresponding to the total controller, it is determined that the identity verification of the authenticator failed, and the identity verification used to characterize the identity verification failure of the authenticator is obtained. result.

For example, if the random number is 4, and the stored random numbers include 2, 3 and 4, then the random number 4 has been used; or the time corresponding to the authenticator is 10:10, and the time corresponding to the total controller is 10: 00, then the two times are inconsistent; or it is detected that a random number is stored, and the time corresponding to the authenticator does not match the time corresponding to the general controller, which indicates that the identity of the authenticator has not been verified by the general controller, and the authenticator's The authentication result indicates an authentication failure. In addition, this embodiment can also prevent replay attacks by programming changed rolling codes, so that the transmission process of request data becomes more secure.

This embodiment prevents replay attacks by detecting whether the encrypted request data includes the random number used by the authenticator, as well as the timestamps of the authenticator and the general controller, so that the general controller can accurately verify the identity of the authenticator, thereby This makes the identity verification results of the authenticating party more accurate.

Please refer to FIG. 3 , which is a flow chart of another data transmission method according to an exemplary embodiment of the present application. This method applies to sub-controllers, including at least S310 to S320. The details are as follows:

S310: Receive the encrypted control instruction sent by the general controller; wherein, the encrypted control instruction is generated by the general controller based on the encrypted request data sent by the authenticator after successful identity verification of the authenticator, and The control instructions are encrypted.

The sub-controller receives the encrypted control instruction sent by the main controller. The encrypted control instruction is obtained by the main controller encrypting the control instruction using a designated encryption key.

S320: Decrypt the encrypted control instruction to obtain the decrypted control instruction, and perform control processing according to the decrypted control instruction.

The sub-controller uses the designated decryption key to decrypt the received encrypted control instruction, and performs control processing according to the decrypted control instruction. In this embodiment, the designated decryption key and the designated encryption key are matching key pairs.

In this embodiment, the relevant data is transmitted with the sub-controller as the executor, and the received encrypted control instructions are decrypted and the control processing is performed according to the decrypted control instructions to complete the request in the encrypted request data. control operations. During the request data transmission process, the request data is equivalent to segmented secondary encryption, ensuring the security during the request data transmission process and avoiding request data leakage.

FIG. 4 is a flow chart of another data transmission method proposed based on the embodiment shown in FIG. 3 . The method also includes S410 to S420 in S320 as shown in Figure 3, which are introduced in detail below:

S410: Receive the identity verification result of the requester sent by the authenticator.

The authenticator verifies the identity of the requesting party and then sends the identity verification result of the requesting party to the sub-controller, including the verification result of success or failure of the requesting party's identity verification.

S420: If the identity verification result of the requesting party indicates that the verification is successful, the encrypted control instruction is decrypted to obtain the decrypted control instruction.

Only when the sub-controller receives the verification result of successful identity verification of the requester sent by the authenticator will it decrypt the received encrypted control instruction and perform control processing according to the decrypted control instruction.

This embodiment further illustrates the precondition for the sub-controller to decrypt the encrypted control instruction, that is, it needs to receive the verification result of the requester's identity verification from the authenticator, thereby making the entire data transmission process more secure to prevent transmission Data leakage or tampering occurs in various aspects.

Figure 5 is a flow chart of another data transmission method according to an exemplary embodiment of the present application. This method applies to authenticators, including at least S510 to S540. The details are as follows:

S510: Receive the request data sent by the requester.

The authenticator receives the request data sent by the requester, and the request data carries the identity information of the sender.

S520: Perform identity verification on the requester and obtain the identity verification result of the requester.

The authenticator matches the identity information of the sender carried in the request data with the identity information of the requester. If they match, it means that the requester has passed the identity verification, and the identity verification result means that the verification is successful; if they do not match, it means that the requester has not. Authentication is passed and its authentication result represents an authentication failure.

S530: If the requester's identity verification result indicates that the verification is successful, the request data is encrypted and the encrypted request data is obtained;

This embodiment limits that if the requesting party passes the identity verification, the authenticating party will encrypt the request data to obtain encrypted request data. The encrypted request data carries the sender's identity information, that is, it carries the authenticating party's own identity information. Identity Information.

S540: Send the encrypted request data to the master controller, so that after the master controller successfully authenticates the authenticator, it generates a control instruction based on the encrypted request data, encrypts the control instruction, and obtains the encrypted Control instruction.

The master controller receives the encrypted request data carrying the sender's identity information sent by the authenticator, and performs identity verification on the authenticator. Based on the identity information of the sender carried in the encrypted request data and the preset authentication party's The identity information is matched. If the match is successful, it means that the identity of the authenticator has passed the verification of the master controller.

In this embodiment, relevant data is transmitted with the authenticator as the executor. The request data sent by the requester who has passed the identity authentication is encrypted, and the encrypted request data is sent to the master controller, so that the master controller can verify the authentication. After the party's identity authentication is successful, the control instruction is generated based on the encrypted request data, and the control instruction is encrypted to obtain the encrypted control instruction. During the request data transmission process, the request data is equivalent to segmented secondary encryption, ensuring the security during the request data transmission process and avoiding request data leakage.

In another embodiment, based on the embodiment shown in Figure 5, after S520, it also includes: sending the identity verification result of the requesting party to the sub-controller, so that the identity verification result of the sub-controlling party on the requesting party indicates that the verification is successful. When, the encrypted control instructions are decrypted to obtain the decrypted control instructions.

For specific instructions, refer to S420 above.

This embodiment is different from the traditional request control process. Currently, the requester sends request data to the sub-controller, so that the sub-controller can perform control processing according to the request data. It did not send the request data to the general controller. It lacked the processing of the request data by the general controller, which reduced its integrated control performance. It also lacked the identity authentication of the requester, and the request data was not encrypted during the transmission process to prevent duplication. Put the attack and other processing. In this implementation example, the controller needs to receive the verification result that the requester's identity is successfully authenticated before decrypting the encrypted control instructions. Moreover, the encrypted control instructions are generated by the total controller based on the encryption of the request data, that is, the request data is in During the transmission process, it has undergone secondary encryption to prevent theft to ensure the security of data transmission.

Please refer to FIG. 6 , which is a schematic diagram of an application scenario of a data transmission method according to an exemplary embodiment of the present application. Among them, the smart client APP and electronic key are the requesters, the server and key signal receiver of the cloud server are the authenticators, the central domain control unit is the master controller, and the power output control unit is the sub-controller. This embodiment also provides a vehicle domain control architecture, in which the central domain control unit can also be connected to control other units, as shown in Figure 7. Figure 7 is a vehicle domain control architecture illustrated in an exemplary embodiment of the present application. Schematic diagram. Among them, the central domain control unit is located in the central domain, and the power output end control unit is located in the power domain. The vehicle domain control architecture is not only compatible with the domain control architecture that separates the central domain and the power domain, but is also compatible with other domain control architectures, forming a highly integrated domain control architecture. As shown in Figure 7, in addition to connecting the control power domain, the central domain also connects the control: front area controller, left area controller, right area controller, rear area controller, cockpit domain, intelligent driving domain and chassis safety domain. This vehicle domain control architecture not only meets the new national standards, but also meets the anti-theft requirements of power systems such as European standards. Without increasing the hardware cost, it improves the anti-theft performance of the vehicle power domain system, making vehicle anti-theft safer and more reliable.

As shown in Figure 6, the user can trigger a request for domain control of the vehicle through the remote anti-theft module or the local anti-theft module. For example, the user sends request data to the server of the cloud server through the smart client APP in the remote anti-theft module. The server verifies the identity of the smart client APP, for example, verifies the account ID (Identity document, identification number) of the smart client APP, and obtains the identity verification result or failed identity verification result. Or the user sends the original request data through the electronic key, and the signal receiver authenticates the electronic key.

The server or key signal receiver on the cloud server encrypts the request data based on SecOc (Secure Onboard Communication, SecOc, encrypted communication), and transmits the encrypted request data to the central domain control unit based on E2E (End to End, end-to-end) , the total controlling party in this application. The central domain control unit decrypts the encrypted request data, generates control instructions based on the decrypted request data, encrypts them and transmits them to the power output end control unit, which is the sub-controller of this application.

The power output end control unit receives the encrypted control instructions and can directly decrypt them, and then performs control processing according to the decrypted control instructions. In some embodiments, the power output control unit needs to receive the verification result that the requester's identity is passed from the remote anti-theft module or the local anti-theft module, so that the power output control unit can decrypt the encrypted control instructions, and then Control processing is performed based on the decrypted control instructions. If the relevant verification results are not received, or the verification results indicate that the requester's identity verification failed, the power output control unit will not perform the decryption operation and stop subsequent control processing operations. Among them, the remote anti-theft module or the local anti-theft module can encrypt the identity verification result of the requester based on SecOc, and send the encrypted identity verification result of the requester to the power output control unit based on E2E.

The existing IMMO (Immobilizer, engine anti-theft locking system) is developed on the basis of the universal VATS. It inherits the idea of VATS in terms of anti-theft principles, that is, it uses the password of the chip in the key to match the password in the starter switch. Control the starting of the engine to prevent theft. In some embodiments of this application, remote anti-theft and local anti-theft need to be carried out at the same time, that is, the remote and local anti-theft modules are started at the same time to verify the identities of the smart client APP and the electronic key, and it is determined that the functions of both modules are target users. Triggered to improve the vehicle's anti-theft performance.

The remote anti-theft module and the local anti-theft module in this embodiment constitute the identity information verification system of the requesting party. They can independently verify the identity information of the requesting party. The remote and local anti-theft modules can also be started at the same time to verify the smart client APP and electronic files. The identity of the key is verified and it is determined that the functions of the two modules are triggered by the target user, thereby enhancing the anti-theft function of the vehicle. At the same time, in some embodiments, the power output control unit needs to receive the identity verification result of the requester sent by the remote anti-theft module and/or the local anti-theft module, and use the identity verification result to determine whether the identity of the requester has passed the verification. Only after the party's identity verification passes, the power output control unit decrypts the encrypted control instructions and performs control processing based on the decrypted control instructions, making the entire data transmission process more secure.

FIG. 8 is a flow chart of another data transmission method proposed based on the embodiment shown in FIG. 5 . Among them, the authenticator includes the server, the requester includes the application, the method S510 includes S810, and the S520 includes S820. The following is a detailed introduction:

S810: Receive request data sent by the application through the network.

S820: Perform authentication on the application program and obtain the authentication result of the application program.

As shown in Figure 6, the smart client APP in the remote anti-theft module is the application program of this embodiment, and the server of the cloud server is the server of this embodiment. The user sends request data to the server of the cloud server through the smart client APP, and the cloud server The server on the server side verifies the identity of the smart client APP, for example, verifies the account ID of the smart client APP, and obtains the identity verification result or failed identity verification result.

In this example, the smart client APP in the remote anti-theft module needs to be strongly bound to a physical carrier, such as a mobile phone, and must meet identity authentication and anti-replay attacks during communication. The anti-replay attack uses a random number ratio. It is compared with the timestamp and needs to be programmed with changing rolling codes to make the anti-theft system more secure and reliable.

FIG. 9 is a flow chart of another data transmission method proposed based on the embodiment shown in FIG. 5 . Among them, the authenticator includes the receiver, the requester includes the initiator, the method S510 includes S910, and S520 includes S920. The following is a detailed introduction:

S910: Receive request data sent by the initiator through the network.

S920: Perform authentication on the initiator and obtain the authentication result of the initiator.

As shown in Figure 6, the electronic key in the local anti-theft module is the starter of this embodiment, and the key signal receiver is the receiver of this embodiment. The user sends request data to the key signal receiver by touching the electronic key, and the key signal The receiver verifies the identity of the electronic key, for example, by verifying whether the identity of the key signal receiver matches a preset identity, thereby obtaining the identity verification result or failed identity verification result of the electronic key.

The electronic key in this embodiment can transmit request data to the key signal receiver through a wireless radio frequency network, Bluetooth, cellular network, etc. It also needs to meet identity authentication and anti-replay attacks during communication. The anti-replay attacks use a random number ratio. It is compared with the timestamp and needs to be programmed with changing rolling codes to make the anti-theft system more secure and reliable.

FIG. 10 is a flow chart of another data transmission method proposed based on the embodiment shown in FIG. 5 . Among them, the requesting party is the signal transmitter, and the authenticating party is the anti-theft controller of the vehicle. The request data includes the random number used by the signal transmitter; the method S520 includes S1010 to S1030, which are introduced in detail below:

S1010: Obtain a random number, and record the time corresponding to the signal transmitter and the time corresponding to the anti-theft controller when the random number is obtained.

The random number in this embodiment is a number generated during the data interaction process between the signal transmitter and the vehicle's anti-theft controller. When obtaining a random number, record the time corresponding to the signal transmitter and the time corresponding to the vehicle's anti-theft controller. This step can effectively prevent replay attacks, that is, the timestamp and random number are used as the basis for determining whether a replay attack has occurred. , thus making the identity verification results of the signal transmitter more accurate.

S1020: If it is detected that the random number is not stored and the time corresponding to the signal transmitter matches the time corresponding to the anti-theft controller, it is determined that the identity verification of the signal transmitter is successful, and the identity verification of the signal transmitter is obtained. Authentication results.

If it is detected that the random number is not stored, it means that the random number has not been used by the signal transmitter and the vehicle's anti-theft controller. If the time corresponding to the signal transmitter matches the time corresponding to the anti-theft controller, it is determined that the anti-theft controller is correct. Authentication of the signal sender was successful.

S1030: If it is detected that a random number is stored, or the time corresponding to the signal transmitter does not match the time corresponding to the anti-theft controller, it is determined that the identity verification of the signal transmitter has failed, and the identity verification failure used to characterize the signal transmitter is obtained. the authentication result.

For example, if the random number is 10, and the stored random numbers include 6, 9 and 10, then the random number 10 has been used; or the time corresponding to the signal transmitter is 10:10, and the time corresponding to the anti-theft controller is 10 :00, then the two times are not phased; or it is detected that a random number is stored, and the time corresponding to the signal transmitter and the time corresponding to the anti-theft controller do not match, both indicate that the identity of the authenticator has not been verified by the anti-theft controller, and the signal The sender's authentication result indicates an authentication failure.

In this embodiment, the data transmission method is applied in the field of vehicles. The identity of the signal transmitter is verified through the anti-theft controller of the vehicle. According to the parameters of random number and time stamp, replay attacks are effectively prevented.

FIG. 11 is a flow chart of another data transmission method proposed based on the embodiment shown in FIG. 5 . Among them, the requester is the signal transmitter, and the authenticator is the anti-theft controller of the vehicle. The anti-theft controller includes a remote anti-theft device and/or a local anti-theft device; the signal transmitter corresponding to the remote anti-theft device is a mobile terminal, and the signal corresponding to the local anti-theft device The transmitter is a key with signal sending function; if the anti-theft controller includes a remote anti-theft device or a local anti-theft device; the method S520 includes S1110 or S1120, which will be introduced in detail below:

S1110: The remote anti-theft device performs identity verification on the mobile terminal and obtains the identity verification result of the signal transmitter.

The remote anti-theft device can be a server on the cloud server, which performs identity verification on the mobile terminal in the cloud. Due to sufficient cloud computing resources, identity verification is faster.

The mobile terminal can be a mobile phone, a tablet computer, a laptop, etc., and can specifically be a smart client APP in a physical carrier. The user can send request data carrying user information to the remote anti-theft controller through the smart client APP, so that the The remote anti-theft device authenticates the smart client APP in the cloud based on the user information carried in the request data.

S1120: The local anti-theft device authenticates the key and obtains the identity authentication result of the signal transmitter.

The key in this embodiment has the function of sending signals, but the reachable range of the signals it sends is limited. The local anti-theft device needs to be within a certain physical distance to receive the signals sent by the key.

In this embodiment, the anti-theft controller of the vehicle only needs to perform remote verification or local verification of the signal transmitter, and then the identity verification of the signal transmitter by the anti-theft controller can be completed. Among them, if the identity verification of the mobile terminal by the remote anti-theft device is successful, or the identity verification of the key by the local anti-theft device is successful, then the identity authentication of the signal transmitter by the vehicle's anti-theft controller is successful, that is, only local identity verification or remote identity verification is required. , the subsequent data transmission process can be carried out.

FIG. 12 is a flow chart of another data transmission method proposed based on the embodiment shown in FIG. 11 . Among them, if the anti-theft controller includes a remote anti-theft device and a local anti-theft device; the method S520 includes S1210 to S1230, which are introduced in detail below:

S1210: The remote anti-theft device performs identity verification on the mobile terminal and obtains the identity verification result of the mobile terminal.

The identity verification result of the mobile terminal by the remote anti-theft device is the identity verification result of the mobile terminal, which is part of the identity verification result that constitutes the signal transmitter.

S1220: The local anti-theft device authenticates the key and obtains the key's identity verification result.

The authentication result of the key by the local immobilizer is the authentication result of the key, which forms part of the authentication result of the signal transmitter.

S1230: Obtain the identity verification result of the signal transmitter based on the identity verification result of the mobile terminal and the identity verification result of the key.

In a specific embodiment, the identity verification result of the signal transmitter includes a successful verification result and a failed verification result; a successful verification result indicates that the identity of the mobile terminal and the identity of the key have passed the verification; a failed verification result indicates that the identity of the mobile terminal or the identity of at least one of the key's identities has not been verified.

If the identity verification result of the mobile terminal represents the identity verification failure of the mobile terminal, or the identity verification result of the key represents the identity verification failure of the key, then an identity verification result indicating the identity verification failure of the signal transmitter is obtained.

If the identity verification result of the mobile terminal indicates that the identity verification of the mobile terminal is successful, and the identity verification result of the key indicates that the identity verification of the key is successful, then an identity verification result indicating that the identity verification of the signal transmitter is successful is obtained.

In this embodiment, the anti-theft controller of the vehicle needs to perform remote verification and local verification of the signal transmitter, and only after the double verification is passed, the anti-theft controller can successfully authenticate the signal transmitter. The double verification mechanism makes the vehicle The anti-theft system is more secure and reliable.

Another aspect of the present application also provides an information processing device, as shown in Figure 13. Figure 13 is a schematic structural diagram of an information processing device according to an exemplary embodiment of the present application. Among them, the information processing device is applied to the main controller, including:

The encrypted request receiving module 1310 is configured to receive encrypted request data sent by the authenticator; wherein the encrypted request data is encrypted after the authenticator passes the identity verification of the requester.

The authenticator identity verification module 1330 is configured to perform identity verification on the authenticator and obtain the identity verification result of the authenticator.

The control instruction encryption module 1350 is configured to generate a control instruction based on the encrypted request data and encrypt the control instruction to obtain an encrypted control instruction if the authenticator's identity verification result indicates that the verification is successful.

The encrypted control instruction sending module 1370 is configured to send the encrypted control instruction to the sub-controller, so that the sub-controller decrypts the encrypted control instruction and performs control processing according to the decrypted control instruction.

In another embodiment, the encrypted request data includes a random number used by the authenticator; the authenticator identity verification module 1330 includes:

The random number obtaining unit is configured to obtain the random number, and record the time corresponding to the authenticator and the time corresponding to the total controller when obtaining the random number.

The authenticator verification success unit is configured so that if it is detected that the random number is not stored and the time corresponding to the authenticator matches the time corresponding to the total controller, it is determined that the identity verification of the authenticator is successful and a value used to characterize the authenticator is obtained. Authentication result for successful authentication.

The authenticator verification failure unit is configured to determine that the identity verification of the authenticator failed if it detects that a random number is stored, or that the time corresponding to the authenticator does not match the time corresponding to the total controller, and is used to characterize the authenticator. Authentication result for authentication failure.

As shown in FIG. 14 , FIG. 14 is a schematic structural diagram of another information processing device according to an exemplary embodiment of the present application. Among them, the information processing device is applied to the sub-controlling party, including:

The encrypted control instruction receiving module 1410 is configured to receive the encrypted control instruction sent by the general controller; wherein the encrypted control instruction is based on the encrypted control instruction sent by the authenticator after the general controller successfully authenticates the authenticator. The request data generates control instructions and encrypts the control instructions.

The control instruction decryption module 1430 is configured to decrypt the encrypted control instruction, obtain the decrypted control instruction, and perform control processing according to the decrypted control instruction.

In another embodiment, the control instruction decryption module 1430 includes:

The requesting party's identity verification result receiving unit is configured to receive the requesting party's identity verification result sent by the authenticating party.

The control instruction decryption unit is configured to decrypt the encrypted control instruction to obtain the decrypted control instruction if the identity verification result of the requesting party indicates that the verification is successful.

As shown in FIG. 15 , FIG. 15 is a schematic structural diagram of another information processing device according to an exemplary embodiment of the present application. Among them, the information processing device is used in the authenticating party, including:

The request data receiving module 1510 is configured to receive the request data sent by the requesting party;

The requester identity verification module 1530 is configured to authenticate the requester and obtain the identity verification result of the requester;

The request data encryption module 1550 is configured to encrypt the request data to obtain encrypted request data if the requester's identity verification result indicates that the verification is successful;

The encrypted request data sending module 1570 is configured to send the encrypted request data to the general controller, so that after the general controller successfully authenticates the authenticator, it can generate a control instruction based on the encrypted request data and control the control. The instructions are encrypted and the encrypted control instructions are obtained.

In another embodiment, the information processing device further includes:

The control sending module is configured to send the identity verification result of the requesting party to the sub-controller, so that when the identity verification result of the requesting party indicates that the verification is successful, the sub-controlling party decrypts the encrypted control instruction and obtains the decrypted control instruction. Control instruction.

In another embodiment, the authenticator includes a server, and the requester includes an application; the request data receiving module 1510 includes:

a request data receiving unit configured to receive request data sent by the application through the network;

Requestor authentication module 1530 includes:

The authentication unit of the application is configured to authenticate the application and obtain the authentication result of the application.

In another embodiment, the authenticator includes a receiver, and the requester includes an initiator; the request data receiving module 1510 includes:

Receives request data sent over the network by the initiator.

Requestor authentication module 1530 includes:

Authenticate the initiator and get the authentication result of the initiator.

In another embodiment, the requesting party is the signal transmitter, the authenticating party is the anti-theft controller of the vehicle, and the request data includes the random number used by the signal transmitter; the requesting party identity verification module includes:

The vehicle random number acquisition unit is configured to acquire the random number, and record the time corresponding to the signal transmitter and the time corresponding to the anti-theft controller when acquiring the random number.

The signal transmitter identity verification success unit is configured to determine that the identity verification of the signal transmitter is successful if it detects that no random number is stored and the time corresponding to the signal transmitter matches the time corresponding to the anti-theft controller. Authentication result that characterizes successful authentication of the signal sender.

The signal transmitter identity verification failure unit is configured to determine that the identity verification of the signal transmitter fails if it detects that a random number is stored or that the time corresponding to the signal transmitter does not match the time corresponding to the anti-theft controller. An authentication result that characterizes a signal sender's authentication failure.

In another embodiment, the requesting party is the signal transmitter, and the authenticating party is the anti-theft controller of the vehicle. The anti-theft controller includes a remote anti-theft device and/or a local anti-theft device; the requesting party identity verification module includes:

The first vehicle signal transmitter verification unit is configured as a remote anti-theft device to perform identity verification on the mobile terminal and obtain the identity verification result of the signal transmitter; or

The second vehicle signal transmitter verification unit is configured as a local anti-theft device to perform identity verification on the key and obtain the identity verification result of the signal transmitter.

In another embodiment, if the anti-theft controller includes a remote anti-theft device and a local anti-theft device; the requester identity verification module includes:

The first vehicle verification unit is configured as a remote anti-theft device to perform identity verification on the mobile terminal and obtain the identity verification result of the mobile terminal.

The second vehicle verification unit is configured as a local anti-theft device to perform identity verification on the key and obtain the identity verification result of the key.

The vehicle signal transmitter identity verification unit is configured to obtain the identity verification result of the signal transmitter based on the identity verification result of the mobile terminal and the identity verification result of the key.

In another embodiment, the identity verification result of the signal transmitter includes a successful verification result and a failed verification result; a successful verification result represents that the identity of the mobile terminal and the identity of the key have passed the verification; a failed verification result represents that the identity of the mobile terminal The identity of at least one of the identity or the key's identity has not been verified.

It should be noted that the information processing device provided by the above embodiments and the data transmission method provided by the previous embodiments belong to the same concept, and the specific manner in which each module and unit performs operations has been described in detail in the method embodiments. Here No longer.

Another aspect of the application also provides an electronic device, including: a controller; and a memory for storing one or more programs, to perform the above method when the one or more programs are executed by the controller.

Please refer to FIG. 16 . FIG. 16 is a schematic structural diagram of a computer system of an electronic device according to an exemplary embodiment of the present application. It shows a schematic structural diagram of a computer system of an electronic device suitable for implementing the embodiment of the present application.

It should be noted that the computer system 1600 of the electronic device shown in FIG. 16 is only an example, and should not impose any restrictions on the functions and scope of use of the embodiments of the present application.

As shown in Figure 16, the computer system 1600 includes a central processing unit (Central Processing Unit, CPU) 1601, which can be loaded into a random computer according to a program stored in a read-only memory (Read-Only Memory, ROM) 1602 or from a storage portion 1608. Access the program in the memory (Random Access Memory, RAM) 1603 to perform various appropriate actions and processing, such as performing the method in the above embodiment. In RAM 1603, various programs and data required for system operation are also stored. CPU 1601, ROM 1602 and RAM 1603 are connected to each other through bus 1604. An input/output (I/O) interface 1605 is also connected to bus 1604.

The following components are connected to the I/O interface 1605: an input part 1606 including a keyboard, a mouse, etc.; an output part 1607 including a cathode ray tube (Cathode Ray Tube, CRT), a liquid crystal display (Liquid Crystal Display, LCD), etc., and a speaker, etc. ; a storage part 1608 including a hard disk, etc.; and a communication part 1609 including a network interface card such as a LAN (Local Area Network) card, a modem, etc. The communication section 1609 performs communication processing via a network such as the Internet. Driver 1610 is also connected to I/O interface 1605 as needed. Removable media 1611, such as magnetic disks, optical disks, magneto-optical disks, semiconductor memories, etc., are installed on the drive 1610 as needed, so that a computer program read therefrom is installed into the storage portion 1608 as needed.

In particular, according to embodiments of the present application, the process described above with reference to the flowchart may be implemented as a computer software program. For example, embodiments of the present application include a computer program product including a computer program carried on a computer-readable medium, the computer program including a computer program for performing the method shown in the flowchart. In such embodiments, the computer program may be downloaded and installed from the network via communications portion 1609, and/or installed from removable media 1611. When the computer program is executed by the central processing unit (CPU) 1601, various functions defined in the system of the present application are executed.

It should be noted that the computer-readable medium shown in the embodiments of the present application may be a computer-readable signal medium or a computer-readable storage medium, or any combination of the above two. The computer-readable storage medium may be, for example, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination thereof. More specific examples of computer readable storage media may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard drive, random access memory (RAM), read only memory (ROM), removable Programmable Read-Only Memory (Erasable Programmable Read Only Memory, EPROM), flash memory, optical fiber, portable compact disk read-only memory (Compact Disc Read-Only Memory, CD-ROM), optical storage device, magnetic storage device, or any of the above suitable The combination. As used herein, a computer-readable storage medium may be any tangible medium that contains or stores a program for use by or in connection with an instruction execution system, apparatus, or device. In this application, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, in which a computer-readable computer program is carried. Such propagated data signals may take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium that can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device . Computer programs embodied on computer-readable media may be transmitted using any suitable medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operations of possible implementations of systems, methods, and computer program products according to various embodiments of the present application. Each block in the flow chart or block diagram may represent a module, program segment, or part of the code. The above-mentioned module, program segment, or part of the code includes one or more executable components for implementing the specified logical function. instruction. It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown one after another may actually execute substantially in parallel, or they may sometimes execute in the reverse order, depending on the functionality involved. It will also be noted that each block in the block diagram or flowchart illustration, and combinations of blocks in the block diagram or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or operations, or may be implemented by special purpose hardware-based systems that perform the specified functions or operations. Achieved by a combination of specialized hardware and computer instructions.

The units involved in the embodiments of this application can be implemented in software or hardware, and the described units can also be provided in a processor. Among them, the names of these units do not constitute a limitation on the unit itself under certain circumstances.

Another aspect of the present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the above data transmission method is implemented. The computer-readable storage medium may be included in the electronic device described in the above embodiments, or may exist separately without being assembled into the electronic device.

Another aspect of the present application also provides a computer program product or computer program, which includes computer instructions stored in a computer-readable storage medium. The processor of the computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device performs the data transmission method provided in the above embodiments.

According to an aspect of the embodiment of the present application, a computer system is also provided, including a central processing unit (Central Processing Unit, CPU), which can process data according to a program stored in a read-only memory (Read-Only Memory, ROM) or from The storage part loads the program into the random access memory (Random Access Memory, RAM) to perform various appropriate actions and processing, such as performing the method in the above embodiment. In RAM, various programs and data required for system operation are also stored. CPU, ROM and RAM are connected to each other through buses. Input/Output (I/O) interfaces are also connected to the bus.

The following components are connected to the I/O interface: input parts including keyboard, mouse, etc.; including output parts such as cathode ray tubes (Cathode Ray Tube, CRT), liquid crystal displays (Liquid Crystal Display, LCD), etc., and speakers; including hard disks The storage part, etc.; and the communication part including network interface cards such as LAN (Local Area Network) cards, modems, etc. The communication section performs communication processing via a network such as the Internet. Drives are also connected to I/O interfaces as needed. Removable media, such as magnetic disks, optical disks, magneto-optical disks, semiconductor memories, etc., are installed on the drive as needed, so that the computer program read therefrom is installed into the storage section as needed.

The above content is only a preferred exemplary embodiment of the present application and is not intended to limit the implementation of the present application. Those of ordinary skill in the art can easily make corresponding modifications or modifications based on the main concept and spirit of the present application. Therefore, the protection scope of this application should be subject to the protection scope required by the claims.

Claims (15)

1. A data transmission method, characterized in that it is applied to the general controller, and the method includes:

   Receive encrypted request data sent by the authenticating party; wherein the encrypted request data is encrypted after the authenticating party passes the identity verification of the requesting party;

   Perform identity verification on the authenticating party and obtain the identity verification result of the authenticating party;

   If the identity verification result of the authenticator indicates that the verification is successful, a control instruction is generated according to the encrypted request data, and the control instruction is encrypted to obtain an encrypted control instruction;

   The encrypted control instruction is sent to the sub-controller, so that the sub-controller decrypts the encrypted control instruction and performs control processing according to the decrypted control instruction.
2. The method according to claim 1, wherein the encrypted request data includes a random number used by the authenticator; and performing identity verification on the authenticator obtains the identity verification of the authenticator. Results include:

   Obtain the random number, and record the time corresponding to the authenticator and the time corresponding to the total controller when obtaining the random number;

   If it is detected that the random number is not stored, and the time corresponding to the authenticator matches the time corresponding to the total controller, it is determined that the identity verification of the authenticator is successful, and a value used to characterize the authenticator is obtained. Authentication result of successful authentication;

   If it is detected that the random number is stored, or the time corresponding to the authenticator does not match the time corresponding to the total controller, it is determined that the identity verification of the authenticator failed, and a value used to represent the authentication is obtained. The authentication result of the party's authentication failure.
3. A data transmission method, characterized in that it is applied to a sub-controller, and the method includes:

   Receive an encrypted control instruction sent by the general controller; wherein the encrypted control instruction is generated based on the encrypted request data sent by the authenticator after the general controller successfully authenticates the authenticator. instructions, obtained by encrypting the control instructions;

   Decrypt the encrypted control instruction to obtain the decrypted control instruction, and perform control processing according to the decrypted control instruction.
4. The method according to claim 3, characterized in that, decrypting the encrypted control instructions to obtain the decrypted control instructions includes:

   Receive the identity verification result of the requesting party sent by the authenticating party;

   If the identity verification result of the requesting party indicates that the verification is successful, the encrypted control instruction is decrypted to obtain the decrypted control instruction.
5. A data transmission method, characterized in that it is applied to the authenticating party, and the method includes:

   Receive request data sent by the requester;

   Perform identity verification on the requesting party and obtain the identity verification result of the requesting party;

   If the identity verification result of the requester indicates that the verification is successful, the request data is encrypted to obtain encrypted request data;

   The encrypted request data is sent to the general controller, so that after the general controller successfully authenticates the authentication party, it generates a control instruction based on the encrypted request data and performs the control instruction on the Encrypt to obtain the encrypted control instructions.
6. The method according to claim 5, characterized in that, after the identity verification of the requester is performed and the identity verification result of the requester is obtained, the method further includes:

   The identity verification result of the requester is sent to the sub-controller, so that when the identity verification result of the requester indicates that the verification is successful, the sub-controller decrypts the encrypted control instruction to obtain the Decrypted control instructions.
7. The method according to claim 5 or 6, characterized in that the authenticator includes a server, and the requester includes an application; and receiving the request data sent by the requester includes:

   Receive request data sent by the application over the network;

   The identity verification of the requester and obtaining the identity verification result of the requester include:

   Perform identity verification on the application program to obtain the identity verification result of the application program.
8. The method according to claim 5 or 6, characterized in that the authenticator includes a receiver, the requester includes an initiator; and receiving the request data sent by the requester includes:

   Receive request data sent by the initiator over the network;

   The identity verification of the requester and obtaining the identity verification result of the requester include:

   Perform identity verification on the initiator to obtain an identity verification result of the initiator.
9. The method according to claim 5, characterized in that the requester is a signal transmitter, the authenticator is an anti-theft controller of the vehicle, and the request data includes a random number used by the signal transmitter; The process of performing identity verification on the requesting party and obtaining the identity verification result of the requesting party includes:

   Obtain the random number, and record the time corresponding to the signal transmitter and the time corresponding to the anti-theft controller when the random number is obtained;

   If it is detected that the random number is not stored, and the time corresponding to the signal transmitter matches the time corresponding to the anti-theft controller, it is determined that the identity verification of the signal transmitter is successful, and the identity verification for the signal transmitter is obtained. Authentication result of successful authentication of the signal sender;

   If it is detected that the random number is stored, or the time corresponding to the signal transmitter does not match the time corresponding to the anti-theft controller, it is determined that the identity verification of the signal transmitter has failed, and the information used to characterize the information is obtained. The authentication result of a failed authentication for the signal sender described above.
10. The method according to claim 5, characterized in that the requester is a signal transmitter, the authenticator is an anti-theft controller of the vehicle, and the anti-theft controller includes a remote anti-theft device and/or a local anti-theft device; The signal transmitter corresponding to the remote anti-theft device is a mobile terminal, and the signal transmitter corresponding to the local anti-theft device is a key with a signal sending function; if the anti-theft controller includes a remote anti-theft device or a local anti-theft device; The requesting party conducts identity verification and obtains the identity verification result of the requesting party, including:

    The remote anti-theft device performs identity verification on the mobile terminal to obtain the identity verification result of the signal transmitter; or

    The local anti-theft device performs identity verification on the key and obtains the identity verification result of the signal transmitter.
11. The method according to claim 10, characterized in that if the anti-theft controller includes a remote anti-theft device and a local anti-theft device; the identity verification of the requester is performed to obtain the identity verification result of the requester, including :

    The remote anti-theft device performs identity verification on the mobile terminal to obtain the identity verification result of the mobile terminal;

    The local anti-theft device performs identity verification on the key and obtains the identity verification result of the key;

    According to the identity verification result of the mobile terminal and the identity verification result of the key, the identity verification result of the signal transmitter is obtained.
12. The method according to claim 11, characterized in that the identity verification result of the signal transmitter includes a successful verification result and a failed verification result; the successful verification result represents the identity of the mobile terminal and the key The identity of the mobile terminal has passed the verification; the failed verification result indicates that at least one of the identity of the mobile terminal or the identity of the key has not passed the verification.
13. A data transmission device, characterized in that it is applied to the main controller and includes:

    The encrypted request receiving module is configured to receive encrypted request data sent by the authenticating party; wherein the encrypted request data is encrypted after the authenticating party passes the identity verification of the requesting party;

    The authenticator identity verification module is configured to perform identity verification on the authenticator and obtain the identity verification result of the authenticator;

    A control instruction encryption module configured to generate a control instruction based on the encrypted request data if the identity verification result of the authenticator indicates successful verification, and encrypt the control instruction to obtain an encrypted control instruction;

    The encrypted control instruction sending module is configured to send the encrypted control instruction to the sub-controller, so that the sub-controller decrypts the encrypted control instruction and performs control according to the decrypted control instruction. deal with.
14. An electronic device, characterized by including:

    controller;

    A memory used to store one or more programs, which when the one or more programs are executed by the controller, enable the controller to implement the data transmission method according to any one of claims 1 to 12.
15. A computer-readable storage medium, characterized in that computer-readable instructions are stored thereon. When the computer-readable instructions are executed by a processor of a computer, the computer is caused to execute any one of claims 1 to 12. data transmission method.

Images