CN114928817A - Vehicle remote control method based on encrypted short message - Google Patents

Abstract

The invention discloses a vehicle remote control method based on encrypted short messages, which comprises the following steps: encrypting and encoding a remote vehicle wake-up function in the form of short messages; delivering to a vehicle-mounted intelligent terminal through a short message gateway of an operator; and receiving the encrypted short message by the vehicle-mounted intelligent terminal And carry out judgment, verification and decryption; after confirming the wake-up SMS, the in-vehicle intelligent terminal executes the vehicle wake-up function; connects to the vehicle TSP cloud through the MQTT protocol and performs certificate verification; updates the list of trusted encrypted SMS sources and trusted servers. The above technical solution is based on mature short message technology, integrates encryption technology and digital certificate authentication system, establishes a security mechanism for one vehicle, one certificate, and realizes a safe and reliable vehicle remote control method.

Description

A vehicle remote control method based on encrypted short message

technical field

The invention relates to the technical field of vehicle control, in particular to a vehicle remote control method based on encrypted short messages.

Background technique

In the context of the upgrading of the entire automobile industry, the development of connected vehicles is an inevitable trend, and remote vehicle control is gradually becoming popular, which puts forward higher requirements for vehicle safety wake-up and control functions. Using the mature SMS technology as the carrier, it integrates the digital signature certificate system and encryption technology. The cloud TSP server and the vehicle-end intelligent terminal form a one-vehicle-one-certificate scheme. After encrypting the SMS content, it is sent to the vehicle through the operator's SMS gateway. Intelligent terminal, the terminal receives the encrypted short message, calls the PKI SDK in the vehicle intelligent terminal system and the communication link layer for decryption and digital signature verification, obtains the remote wake-up command and high-priority vehicle control command, realizes the remote wake-up of the vehicle, and has High priority remote vehicle control function.

The traditional short message-based vehicle remote control does not encrypt or authenticate the content of the short message, so there is a risk of the content being easily intercepted, and there is a potential security risk. The vehicle remote wake-up function based on wireless data communication, the vehicle terminal cannot maintain a constant connection for a long time, and the wireless data network is congested and the data connection is unstable, which leads to the failure of the vehicle remote wake-up, thus affecting the realization of other vehicle remote control functions.

Chinese patent document CN106292449B discloses a "system and method for remotely controlling vehicles based on encrypted short messages". Including: client, used to encrypt short messages and send short messages to GSM communication module; GSM communication module, used to transmit short messages and car data, and verify new short messages; car anti-theft device, used to collect according to the content of short messages car data, and send the car data to the GSM communication module. In the present invention, the short message is encrypted by the client, and a serial number is added to each short message; the client sends the short message to the GSM communication module through the GSM network, and the GSM communication module processes the short message through the serial number and the time stamp. Verification, and send the verified SMS to the car alarm. The above technical solution only encrypts communication through SMS encryption, and the encryption method is single, and it is difficult to satisfy the uniqueness of one vehicle, one certificate.

SUMMARY OF THE INVENTION

The invention mainly solves the technical problem that the original technical scheme has a single encryption method and is difficult to satisfy the uniqueness of one vehicle, one certificate, and provides a vehicle remote control method based on encrypted short messages. Based on mature short message technology, the invention integrates encryption technology and digital certificate. Certification system, establish a safety mechanism for one vehicle, one certificate, and realize a safe and reliable vehicle remote control method.

The above-mentioned technical problems of the present invention are mainly solved by the following technical solutions: the present invention comprises the following steps:

S1 encrypts and encodes the remote vehicle wake-up function in the form of SMS;

S2 is sent to the vehicle intelligent terminal through the operator's SMS gateway;

S3 vehicle-mounted intelligent terminal receives encrypted short messages and performs judgment, verification and decryption;

After S4 confirms the wake-up message, the vehicle-mounted intelligent terminal executes the vehicle wake-up function;

S5 connects to the vehicle TSP cloud through the MQTT protocol and performs certificate verification;

S6 updates the list of trusted encrypted SMS sources and trusted servers;

S7 updates the built-in device certificate and public key certificate of the in-vehicle smart terminal.

The vehicle remote control method with encrypted text messages can execute high-priority remote vehicle control commands and services, including but not limited to unlocking the vehicle, flashing the lights and whistle, and opening the trunk. It can be integrated with the vehicle remote wake-up method based on wireless data communication, and under the premise of ensuring safety, it can improve the success rate of vehicle remote control.

Preferably, after receiving the encrypted short message in step S3, the vehicle-mounted intelligent terminal first judges whether the sender of the encrypted short message is from a trusted server, and then performs the validity check of the short message. First determine whether it is from a trusted server, so as to conduct the first judgment and screening to improve work efficiency.

Preferably, the validity check of the short message includes time validity check, _{the current time of the terminal} T-T is _{decrypted to obtain the sending} time≤T _{time validity threshold} , so as to avoid vehicle remote control errors caused by repeated short message sending or short message delay. operating conditions. Time verification ensures that the encrypted message content cannot be reused.

Preferably, the decryption in step S3 specifically includes that the bottom layer of the vehicle intelligent terminal system and the communication link layer call the built-in PKI SDK to perform decryption operations on the encrypted short message and digital signature verification, and confirm that it is a credible wake-up function short message. The encryption algorithms include AES, SM1, etc., which can cooperate with the digital certificate authentication system to effectively encrypt and decrypt the vehicle's remote wake-up information, etc., and when the encrypted short message is intercepted, it is not easy to be cracked, leaving security risks.

Preferably, in step S5, the vehicle-mounted intelligent terminal is connected to the vehicle TSP cloud through the MQTT protocol, and firstly, the validity of the vehicle's built-in certificate and the CA's secondary certificate server is verified, including whether the vehicle equipment certificate is legal and within the validity period, Whether it conforms to the uniqueness of one vehicle, one certificate, realizes the two-way identity authentication between the vehicle and the TSP platform, and ensures the security of the MQTT communication link.

Preferably, the vehicle TSP cloud certificate system uses a secondary certificate chain structure, which is composed of a root certificate-secondary certificate-platform certificate-vehicle terminal certificate. The platform certificate, the access gateway certificate, the built-in certificate of the vehicle terminal, and the device certificate are all It is issued by a secondary certificate agency to realize the certification system of one vehicle, one certificate.

Preferably, the in-vehicle intelligent terminal in step S6 is connected to the vehicle TSP cloud through the MQTT protocol, and the in-vehicle intelligent terminal can update the built-in device certificate and public key certificate, and update the list of trusted encrypted short message sources. When the validity period, or revoked by the CA certificate system, does not meet the identity authentication requirements of one vehicle, one certificate, the vehicle initiates a certificate update request service, the TSP platform reviews the vehicle's equipment information, and applies to the CA secondary server for equipment certificate update, and issues a certificate. A new equipment certificate is issued to the vehicle. After remotely controlling the vehicle through encrypted short messages, the vehicle-mounted intelligent terminal is connected to the vehicle TSP cloud through the MQTT protocol, and the vehicle-mounted intelligent terminal can update the built-in device certificate, public key certificate, etc.

Preferably, when the TSP platform updates the list of trusted encrypted SMS sources, after completing the two-way identity authentication between the vehicle and the TSP platform, the TSP platform sends the IP addresses and ports in the list of trusted encrypted SMS sources to the vehicle terminal through the MQTT protocol. Update it.

The beneficial effects of the present invention are:

The vehicle is remotely controlled by encrypted SMS, and the in-vehicle intelligent terminal is connected to the vehicle TSP cloud through the MQTT protocol, and responds to high-priority vehicle control commands, including but not limited to unlocking the vehicle, flashing the lights and whistle, and opening the trunk. In response to the car owner's mobile phone APP control command, the vehicle intelligent terminal can perform complete remote vehicle control functions. The in-vehicle intelligent terminal can update the list of trusted encrypted short message sources and update the list of trusted servers. The in-vehicle smart terminal can update the built-in device certificate, public key certificate, etc. The in-vehicle intelligent terminal can feed back to the vehicle TSP cloud whether the vehicle is in a low power consumption state based on the power-on and power-off conditions of the vehicle.

Description of drawings

Figure 1 is a flow chart of the present invention.

FIG. 2 is a function diagram of a vehicle wake-up function of the present invention.

FIG. 3 is a structural diagram of a secondary certificate chain according to the present invention.

Detailed ways

The technical solutions of the present invention will be further described in detail below through embodiments and in conjunction with the accompanying drawings.

Embodiment: A vehicle remote control method based on encrypted short messages in this embodiment, as shown in Figure 1 and Figure 2, includes encrypting and encoding the remote vehicle wake-up function in the form of short messages. The encryption algorithm includes AES, SM1, etc., which can Cooperate with the digital certificate authentication system to effectively encrypt and decrypt the vehicle's remote wake-up information, etc., and when the encrypted short message is intercepted, it is not easy to be cracked, leaving security risks. It is sent to the vehicle intelligent terminal through the operator's SMS gateway. The bottom layer of the vehicle intelligent terminal system and the communication link layer call the built-in PKI SDK to decrypt the encrypted SMS and perform digital signature verification. The terminal performs the vehicle wake-up function, then establishes a mobile data connection, and connects to the vehicle TSP cloud through the MQTT protocol. The vehicle remote control method with encrypted text messages can execute high-priority remote vehicle control commands and services, including but not limited to unlocking the vehicle, flashing the lights and whistle, and opening the trunk.

The encrypted short message is sent to the in-vehicle intelligent terminal through the operator's SMS gateway with high reliability. After receiving the encrypted short message, the in-vehicle intelligent terminal first judges whether the sender of the encrypted short message is from a trusted server, and ensures the content of the encrypted short message through time verification. Cannot be reused.

The bottom layer of the vehicle intelligent terminal system and the communication link layer call the built-in PKI SDK to perform decryption operations on the encrypted SMS and digital signature verification. After confirming that the SMS is a credible wake-up function, the vehicle-mounted intelligent terminal performs the vehicle wake-up function, and then establishes a mobile data connection. Connect to the vehicle TSP cloud through the MQTT protocol.

Take the remote wake-up encrypted SMS message as an example:

1234567899870478;asdfghjkl;20180227164359

The content of the short message is encrypted by AES. After receiving the encrypted short message, the car wakes up from the dormant state and performs the following actions in sequence: decrypt the short message, verify the validity of the short message, and execute condition judgment. Among them, the validity of the short message includes the time validity test, T _{(the current time of the terminal)} -T _{(the sending time obtained after decryption)} ≤ T _{(the time validity threshold)} , to avoid the repeated short message sending or the wrong operation of the vehicle remote control caused by the delay of the short message situation happens.

The vehicle TSP cloud certificate system uses a secondary certificate chain structure, which consists of a root certificate—secondary certificate—platform certificate—vehicle terminal certificate. Issuance to realize the certification system of one vehicle, one certificate.

The in-vehicle intelligent terminal is connected to the vehicle TSP cloud through the MQTT protocol. First, it verifies the validity of the vehicle's built-in certificate and the CA's secondary certificate server, including whether the vehicle equipment certificate is legal and within the validity period, and whether it conforms to the uniqueness of one vehicle, one certificate. It can realize the two-way identity authentication between the vehicle and the TSP platform, ensure the security of the MQTT communication link, and execute high-priority remote vehicle control commands and services, including but not limited to unlocking the vehicle, flashing the lights and whistle, turning on trunk etc.

After remotely waking up the vehicle through encrypted SMS, the vehicle intelligent terminal connects to the vehicle TSP cloud through the MQTT protocol. The vehicle intelligent terminal can update the built-in device certificate, public key certificate, etc., and update the list of trusted encrypted SMS sources. When the vehicle equipment certificate exceeds the legal validity period, or is revoked by the CA certificate system, or does not meet the identity authentication requirements of one vehicle, one certificate, the vehicle initiates the certificate update request service, and the TSP platform reviews the vehicle equipment information, etc., to the CA level 2 The server applies for device certificate update, and issues a new device certificate to the vehicle. Similarly, when the TSP platform updates the list of trusted encrypted SMS sources, after completing the two-way identity authentication between the vehicle and the TSP platform, the TSP platform sends the IP addresses and ports in the list of trusted encrypted SMS sources to the vehicle through the MQTT protocol. terminal to update it.

The specific embodiments described herein are merely illustrative of the spirit of the invention. Those skilled in the art to which the present invention pertains can make various modifications or additions to the described specific embodiments or substitute in similar manners, but will not deviate from the spirit of the present invention or go beyond the definitions of the appended claims range.

Although this article uses more terms such as vehicle intelligent terminal and TSP cloud, it does not rule out the possibility of using other terms. These terms are used only to more conveniently describe and explain the essence of the present invention; it is contrary to the spirit of the present invention to interpret them as any kind of additional limitation.

Claims (8)

1. a vehicle remote control method based on encrypted short message, is characterized in that, comprises the following steps: S1 encrypts and encodes the remote vehicle wake-up function in the form of SMS; S2 is sent to the vehicle intelligent terminal through the operator's SMS gateway; S3 vehicle-mounted intelligent terminal receives encrypted short messages and performs judgment, verification and decryption; After S4 confirms the wake-up message, the vehicle-mounted intelligent terminal executes the vehicle wake-up function; S5 connects to the vehicle TSP cloud through the MQTT protocol and performs certificate verification; S6 updates the list of trusted encrypted SMS sources and trusted servers; S7 updates the built-in device certificate and public key certificate of the in-vehicle smart terminal. 2. a kind of vehicle remote control method based on encrypted short message according to claim 1, is characterized in that, after described step S3 vehicle-mounted intelligent terminal receives encrypted short message, first judges whether encrypted short message sender is from trusted server, Then check the validity of the SMS. 3. a kind of vehicle remote control method based on encrypted short message according to claim 2, is characterized in that, described short message legitimacy check comprises time validity check, T _{terminal current time} -T _{obtains sending time after decryption≤} T _{time validity threshold} to avoid misoperation of vehicle remote control caused by repeated SMS sending or SMS delay. 4. a kind of vehicle remote control method based on encrypted short message according to claim 1 or 2 or 3, is characterized in that, described step S3 decryption specifically comprises, the bottom layer of vehicle intelligent terminal system and communication link layer call built-in PKI SDK Perform decryption operation and digital signature verification on the encrypted short message, and confirm that it is a credible wake-up function short message. 5. a kind of vehicle remote control method based on encrypted short message according to claim 1, is characterized in that, described step S5 vehicle-mounted intelligent terminal is connected to vehicle TSP cloud by MQTT protocol, at first to vehicle built-in certificate and CA's two. The level certificate server verifies its validity, including whether the vehicle equipment certificate is legal and within the validity period, and whether it conforms to the uniqueness of one vehicle, one certificate, realizes the two-way identity authentication between the vehicle and the TSP platform, and ensures the security of the MQTT communication link. 6. A kind of vehicle remote control method based on encrypted short message according to claim 1 or 5, it is characterized in that, described vehicle TSP cloud certificate system uses secondary certificate chain structure, is composed of root certificate-secondary certificate-platform certificate -Composed of vehicle terminal certificate, platform certificate, access gateway certificate, vehicle terminal built-in certificate, and device certificate are all issued by the secondary certificate authority to realize one vehicle one certificate certification system. 7. a kind of vehicle remote control method based on encrypted short message according to claim 1, is characterized in that, described step S6 vehicle-mounted intelligent terminal is connected to vehicle TSP cloud by MQTT protocol, vehicle-mounted intelligent terminal The key certificate is updated, and the list of trusted encrypted SMS sources is updated. When the vehicle equipment certificate exceeds the legal validity period, or is revoked by the CA certificate system, and does not meet the identity authentication requirements of one vehicle, one certificate, the vehicle initiates the certificate update request service. The TSP platform reviews the equipment information of the vehicle, applies to the CA secondary server for the renewal of the equipment certificate, and issues a new equipment certificate to the vehicle. 8. a kind of vehicle remote control method based on encrypted short message according to claim 5 or 7, is characterized in that, when TSP platform updates trustworthy encrypted short message source list, after completing the two-way identity authentication of vehicle and TSP platform, by The TSP platform sends the IP address and port in the trusted encrypted short message source list to the vehicle terminal through the MQTT protocol to update it.

Images