Method and system for safely accessing after-loading equipment into vehicle electronic system

Abstract

The invention discloses a method for safely accessing an after-loading device to a vehicle electronic system, which comprises the following steps: step S10, after the after-loading device is accessed to an OBD (On-Board Diagnostic) interface, sending encrypted information containing a device ID (Identity) and a pre-stored security certificate of the device to a vehicle-mounted gateway; step S11, the vehicle-mounted gateway initiates an authentication request to a cloud certificate management system according to the received encrypted content; step S12, after receiving the authentication request, the cloud certificate management system decrypts the equipment ID and the security certificate carried in the authentication request; step S13, the cloud certificate management system performs validity and validity verification processing on the device ID and the security certificate, and responds to the vehicle-mounted gateway; and step S14, the vehicle-mounted gateway carries out corresponding processing on the access request of the after-loading equipment according to the response result. The invention further discloses a corresponding system. According to the invention, the security of communication between the after-loading equipment and the vehicle electronic system can be improved.

Description

technical field [0001] The present invention relates to the technical field of information security of vehicle electronic systems, in particular to a method and system for safely accessing a vehicle electronic system by rear-mounted equipment. Background technique [0002] Automotive after-installation equipment is usually developed and sold by third-party product development companies, and is connected to the electronic system of the car through the standard interface provided by the car. On the one hand, it can provide users with customized functions beyond the design of the car manufacturer; Collect vehicle operation data to achieve their own application purposes. Although these after-installed devices provide convenience for users, etc., the quality of after-installed devices is uneven, which is difficult to monitor and supervise. Instead, it is easy to cause car failures or leakage of key data of cars and users. [0003] In particular, identity verification is required...

AI Technical Summary

Problems solved by technology

[0005] First of all, the existing technical solutions are almost all used for diagnostic equipment, without considering the use scenarios of other third-party after-installation equipment

[0006] In addition, the first scheme is less secure because the password may be leaked. Once the password is obtained, anyone can develop a device that can be connected to the vehicle.

The second scheme does not use domestic cryptographic algorithms, and the core module is less autonomous and controllable

The third scheme cannot classify the access device's authority level, and cannot limit the access device's authority

In the third solution, since the decryption method used for the identity authentication module is built into the external device, and any external device shares the same set of decryption algorithms, once it is deciphered, it will cause a great security threat

Images