CN115442064A - A vehicle controller diagnosis method, device, equipment and medium - Google Patents

Abstract

The present disclosure relates to a vehicle controller diagnostic method, apparatus, device and medium, comprising: responding to an identity authentication request sent by the diagnostic equipment, and performing mutual authentication with the diagnostic equipment; after the mutual authentication is passed, the controller with the access right of the diagnostic equipment is authorized in response to the access request sent by the diagnostic equipment, so that before the diagnostic equipment diagnoses the controller, the identities of the diagnostic equipment and the vehicle are authenticated through a mutual authentication mechanism, and further the safety of the subsequent diagnostic equipment in diagnosing the controller is ensured.

Description

A vehicle controller diagnosis method, device, equipment and medium

technical field

The present disclosure relates to the technical field of vehicle communication, and in particular to a vehicle controller diagnosis method, device, equipment and medium.

Background technique

With the rapid development of electronic, intelligent and networked vehicles, the scale and complexity of in-vehicle electronic systems are increasing. Among them, vehicle Ethernet technology is expected to become the backbone network of future intelligent vehicles.

In the prior art, based on an open OBD (On Board Diagnostics, on-board automatic diagnosis system) network interface or other interfaces, each controller in the Ethernet of the vehicle can be accessed and diagnosed. Specifically, the after-sales diagnostic instrument (PC, client program and other equipment) can perform specified business operations on the vehicle, such as reading Version information, modify vehicle configuration, read fault codes, etc.

In the prior art, in the process of accessing and diagnosing each controller in the vehicle Ethernet based on the OBD network interface, there will be vehicle information security risks, for example, the OBD interface is vulnerable to hacker attacks, and the vehicle bus network is subject to hacker attacks, etc. .

Therefore, how to ensure the safety of diagnosing each controller in the vehicle Ethernet technology has become a problem to be solved.

Contents of the invention

In order to solve the above technical problems or at least partly solve the above technical problems, the present disclosure provides a vehicle controller diagnosis method, device, equipment and medium.

In a first aspect, an embodiment of the present disclosure provides a method for diagnosing a vehicle controller, including:

performing mutual authentication with the diagnostic device in response to the identity authentication request sent by the diagnostic device;

After the mutual authentication is passed, in response to the access request sent by the diagnostic device, authorize the controller with the access authority of the diagnostic device.

Optionally, the mutual authentication with the diagnostic device includes:

In response to the identity authentication request sent by the diagnostic device, generate a first authentication message and send the first authentication message to the diagnostic device;

receiving a second authentication message sent by the diagnostic device after the first authentication message is authenticated, and authenticating the second authentication message;

When the authentication of the second authentication packet is passed, confirm that the mutual authentication is passed.

Optionally, the generating a first authentication message and sending the first authentication message to the diagnostic device in response to the identity authentication request sent by the diagnostic device includes:

Obtain identification information in response to the identity authentication request sent by the diagnostic device;

After signing the identification information based on the first private key, generate a first authentication message and send the first authentication message to the diagnostic device, so that the diagnostic device uses the first public key to verify the first authentication message performing authentication, wherein the first public key and the first private key are a key pair.

Optionally, the authenticating the second authentication message includes:

The second authentication message is authenticated by using a second public key, wherein the second authentication message is generated by the diagnostic device after signing the identification information based on a second private key, and the second The public key and the second private key are a key pair.

Optionally, the access request includes authorization controller identification information;

In response to the access request sent by the diagnostic device, authorizing the controller with access rights to the diagnostic device includes:

In response to the access request sent by the diagnostic device, determine the controller corresponding to the authorized controller identification information, and send an authorization request to the authorization module, so that the authorization module performs the authorization on the controller based on the authorization request. authorized.

Optionally, the access request includes user identification information;

In response to the access request sent by the diagnostic device, authorizing the controller with access rights to the diagnostic device includes:

In response to the access request sent by the diagnostic device, determine a target controller that the diagnostic device has access rights based on the user identification information, and authorize the target controller that the diagnostic device has access rights.

Optionally, the access request includes authorization controller identification information and user identification information;

In response to the access request sent by the diagnostic device, authorizing the controller with access rights to the diagnostic device includes:

determining a target controller based on the authorized controller identification information in response to the access request sent by the diagnostic device;

The access authority of the diagnostic device to the target controller is determined from the target controller based on the user identification information, so that the authorization module authorizes the target controller within the access authority based on the authorization request.

Optionally, after the diagnostic device is authenticated, after authorizing the controller with access authority to the diagnostic device in response to the access request sent by the diagnostic device, the method further includes:

remove access rights issued to the controller in response to a shutdown request sent by the diagnostic device; or,

When it is detected that the state of the diagnostic device is offline, delete the access authority issued to the controller.

In a second aspect, an embodiment of the present disclosure provides a device for diagnosing a vehicle controller, including:

An identity authentication module, configured to perform mutual authentication with the diagnostic device in response to the identity authentication request sent by the diagnostic device;

An authorization module, configured to authorize the controller with access authority of the diagnostic device in response to the access request sent by the diagnostic device.

In a third aspect, an embodiment of the present disclosure provides an electronic device, including:

one or more processors;

storage means for storing one or more programs,

When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of the first aspects.

In a fourth aspect, an embodiment of the present disclosure provides a computer-readable storage medium, on which a computer program is stored, and when the program is executed by a processor, the method described in any one of the first aspects is implemented.

Compared with the prior art, the technical solutions provided by the embodiments of the present disclosure have the following advantages:

The vehicle controller diagnostic method, device, device, and medium provided by the embodiments of the present disclosure perform mutual authentication with the diagnostic device in response to the identity authentication request sent by the diagnostic device; after the mutual authentication is passed, in response to the access request sent by the diagnostic device, Authorize the controller that has access to the diagnostic equipment, where the identity authentication request is a request for mutual authentication with the diagnostic equipment, that is, the mutual authentication of identities between the vehicle and the diagnostic equipment, so that before the diagnostic equipment diagnoses the controller, Through the mutual authentication mechanism, the identities of the diagnostic equipment and the vehicle are authenticated, thereby ensuring the safety of subsequent diagnostic equipment for diagnosing the controller.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description serve to explain the principles of the disclosure.

In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, for those of ordinary skill in the art, In other words, other drawings can also be obtained from these drawings without paying creative labor.

FIG. 1 is a schematic flowchart of a method for diagnosing a vehicle controller provided by an embodiment of the present disclosure;

Fig. 2 is a schematic flowchart of another vehicle controller diagnosis method provided by an embodiment of the present disclosure;

Fig. 3 is an interactive schematic diagram of vehicle controller diagnosis provided by an embodiment of the present disclosure;

Fig. 4 is a schematic flowchart of another vehicle controller diagnosis method provided by an embodiment of the present disclosure;

Fig. 5 is an interactive schematic diagram of another vehicle controller diagnosis provided by an embodiment of the present disclosure;

Fig. 6 is an interactive schematic diagram of another vehicle controller diagnosis provided by an embodiment of the present disclosure;

Fig. 7 is a schematic structural diagram of a diagnostic device for a vehicle controller provided by an embodiment of the present disclosure;

Fig. 8 is a schematic structural diagram of an electronic device provided by an embodiment of the present disclosure.

detailed description

In order to more clearly understand the above objects, features and advantages of the present disclosure, the solutions of the present disclosure will be further described below. It should be noted that, in the case of no conflict, the embodiments of the present disclosure and the features in the embodiments can be combined with each other.

In the following description, many specific details are set forth in order to fully understand the present disclosure, but the present disclosure can also be implemented in other ways than described here; obviously, the embodiments in the description are only some of the embodiments of the present disclosure, and Not all examples.

The vehicle controller diagnosis method provided by the embodiment of the present disclosure is applied to the intelligent vehicle, and the method provided by the embodiment of the present disclosure can be executed by the intelligent vehicle.

Fig. 1 is a schematic flowchart of a method for diagnosing a vehicle controller provided by an embodiment of the present disclosure. As shown in Fig. 1 , the method for diagnosing a vehicle controller specifically includes the following:

S10. Perform mutual authentication with the diagnostic device in response to the identity authentication request sent by the diagnostic device.

Mutual authentication refers to the identity authentication of the vehicle diagnostic equipment and the authentication of the identity of the vehicle by the diagnostic equipment. First, the diagnostic equipment sends an identity authentication request to the vehicle. mutual authentication.

The diagnostic device in the embodiment of the present application may be an intelligent diagnostic device/personal computer/personal handheld terminal/OBD device, etc., which can communicate with the smart vehicle via Ethernet.

S20. After the mutual authentication is passed, in response to the access request sent by the diagnostic device, authorize the controller with the access authority of the diagnostic device.

In a specific example, the access request in this embodiment of the present application includes: a request for a read operation, a request for a write operation, a request for a read-write operation, and the like. Of course, in the embodiment of the present application, there may be more different divisions of the request authority of the controller, and for the sake of clarity and brevity, the embodiment of the present application does not list them one by one. It should be understood that the specific expressions of the scope of the requested authority in the embodiments of the present application are examples. Authorization includes authorization operations for read permissions, authorization operations for write permissions, and authorization operations for read and write permissions.

Specifically, the authorization of the controller with access rights to the diagnostic equipment includes:

The vehicle sends an authorization request to the authorization module in the vehicle, so as to authorize the controller with access authority to the diagnostic equipment through the authorization module.

It should be noted that, in a specific embodiment, the controller of the vehicle Ethernet includes a domain control unit and an electronic control unit, one domain control unit communicates with one or more electronic controller units, and the domain control unit can obtain information related to The message information corresponding to one or more electronic control units connected to the domain control unit in communication. Therefore, in the embodiment of the present disclosure, the authorization of the controller with access authority to the diagnostic equipment is mainly to the domain control unit in the vehicle Ethernet To perform an authorization operation, different domain control units correspond to a piece of identification information, and each domain control unit communicates with the authorization module respectively.

Optionally, as an implementable manner, in response to the access request sent by the diagnostic device, determine the controller corresponding to the authorized controller identification information, and send the authorization request to the authorization module, so that the authorization module can issue an authorization request to the controller based on the authorization request. Authorize.

Specifically, the access request sent by the diagnostic device includes authorized controller identification information. For example, the authorized controller identification information included in the access request is controller 1, controller 3, and controller 5. At this time, the vehicle receives the information sent by the diagnostic device. After the access request, based on the authorized controller identification information included in the access request, select the controller corresponding to the authorized controller identification information. After the vehicle determines the controller corresponding to the authorization identification information, it sends an authorization request to the vehicle's authorization module, so that the authorization module authorizes the controller corresponding to the authorization identification information.

Optionally, as another implementable manner, in response to the access request sent by the diagnostic device, determine the target controller with the access right for the diagnostic device based on the user identification information, and authorize the target controller with the access right for the diagnostic device.

Specifically, the access request sent by the diagnostic device includes user identification information. After receiving the access request sent by the diagnostic device, the vehicle selects the target controller that the diagnostic device has access rights based on the user identification information included in the access request. After the controller, an access request is sent to the authorization module of the vehicle, so that the authorization module authorizes the target controller.

Exemplarily, the process of authorizing the target controller includes: opening a specified service rule and other operations, allowing the specified controller to perform read or write related functional operations.

Optionally, as yet another implementable manner, in response to the access request sent by the diagnostic device, the target controller is determined based on the authorized controller identification information; and the access of the diagnostic device to the target controller is determined from the target controller based on the user identification information Authorization, so that the authorization module authorizes the target controller within the access authorization based on the authorization request.

Specifically, the access request sent by the diagnostic device includes authorized controller identification information and user identification information. For example, the authorized controller identification information included in the access request is controller 1, controller 3, and controller 5. At this time, the vehicle is receiving After receiving the access request sent by the diagnostic device, select the target controller corresponding to the authorized controller identification information based on the authorized controller identification information included in the access request, and then select the target controller from the determined target controller based on the user identification information included in the access request. Determine the access authority of the diagnostic equipment to the target controller, for example, determine that the controller 5 has access authority to the user identification information, then send an authorization request to the authorization module of the vehicle, so that the authorization module performs a check on the target controller, that is, the controller 5 authorized.

The vehicle controller diagnosis method provided by the embodiment of the present disclosure performs mutual authentication with the diagnostic device in response to the identity authentication request sent by the diagnostic device; after the mutual authentication is passed, the diagnostic device has access authority in response to the access request sent by the diagnostic device The identity authentication request is a request for mutual authentication with the diagnostic equipment, that is, the mutual authentication of identities between the vehicle and the diagnostic equipment, so that before the diagnostic equipment diagnoses the controller, through the mutual authentication mechanism, the The identities of the diagnostic equipment and the vehicle are authenticated, thereby ensuring the safety of subsequent diagnostic equipment for diagnosing the controller.

Fig. 2 is a schematic flowchart of another vehicle controller diagnosis method provided by an embodiment of the present disclosure, and Fig. 3 is an interactive schematic diagram of a vehicle controller diagnosis provided by an embodiment of the present disclosure. The embodiment of the present disclosure is based on the above-mentioned embodiment On the basis, with reference to FIG. 2 and FIG. 3, a possible implementation of step S10 includes:

S11. In response to the identity authentication request sent by the diagnostic device, generate a first authentication message and send the first authentication message to the diagnostic device.

Referring to Fig. 3, the diagnostic device first sends an identity authentication request to the vehicle, and after the vehicle receives the identity authentication request sent by the diagnostic device, it generates a first authentication message based on the identity authentication request and sends it to the diagnostic device, so that the diagnostic device can recognize the first The authentication message is authenticated.

That is, the vehicle sends a first authentication message including vehicle information to the diagnostic device, so that the diagnostic device authenticates the identity of the vehicle based on the first authentication message sent by the vehicle.

S12. Receive a second authentication packet sent by the diagnostic device after the first authentication packet is authenticated, and authenticate the second authentication packet.

Continue referring to FIG. 3 , after the vehicle sends the first authentication message to the diagnostic device, the diagnostic device authenticates the first authentication message sent by the vehicle, and when the diagnostic device passes the authentication of the first authentication message, the diagnostic device sends the second authentication message. The authentication message is sent to the vehicle, so that the vehicle authenticates the identity of the diagnostic device based on the second authentication message sent by the diagnostic device.

S13. When the authentication of the second authentication packet is passed, confirm that the mutual authentication is passed.

When the vehicle passes the authentication of the second authentication message, it can be confirmed that both the diagnostic equipment and the vehicle have passed the authentication. After receiving the access request sent by the diagnostic equipment, the vehicle authorizes the controller with access authority to the diagnostic equipment. .

Fig. 4 is a schematic flowchart of another vehicle controller diagnosis method provided by an embodiment of the present disclosure, and Fig. 5 is an interactive schematic diagram of another vehicle controller diagnosis method provided by an embodiment of the present disclosure. The embodiment of the present disclosure is based on the above-mentioned embodiment On the basis of, as shown in Figure 4, a specific implementable manner of step S11 includes:

S110. Obtain identification information in response to the identity authentication request sent by the diagnostic device.

Wherein, the identification information is used to identify the identity of the vehicle, specifically, the identification information is used to identify the ID of the vehicle.

The diagnostic device sends an identity authentication request to the vehicle, and after receiving the identity authentication request sent by the diagnostic device, the vehicle first generates identification information of the vehicle based on the identity authentication request.

S111. After signing the identification information based on the first private key, generate a first authentication message and send the first authentication message to the diagnostic device, so that the diagnostic device uses the first public key to authenticate the first authentication message.

Wherein, the first public key and the first private key are a key pair.

After the vehicle obtains the identity authentication request and generates identification information, it signs the identification information generated by the vehicle through the first private key, generates a first authentication message and sends the first authentication message to the diagnostic device, and the diagnostic device receives the first authentication message and verify the first authentication message.

Specifically, the vehicle randomly generates identification information in response to the identity authentication request sent by the diagnostic device, and the vehicle signs the generated identification information with a first private key to generate a first authentication message and send the first authentication message to the diagnostic device. Since the first private key is private and the first public key is public, when the diagnostic device can use the first public key to authenticate the first authentication message, it means that the diagnostic device has passed the authentication of the vehicle.

When the implementation of step S11 of the vehicle controller diagnosis method includes step S110 and step S111, a possible implementation of step S12 includes:

S120. Authenticate the second authentication message sent by the diagnostic device by using the second public key.

Wherein, the second authentication message is generated by the diagnostic device after signing the identification information based on the second private key, and the second public key and the second private key are a key pair.

After the diagnostic device passes the authentication of the first authentication message, the diagnostic device will send the second authentication message to the vehicle, and the second authentication message is generated by the diagnostic device by signing the identification information with the second private key. If the second public key corresponding to the second private key is included, after the vehicle receives the second authentication message, it can decrypt the second authentication message through the second public key, thereby realizing the vehicle's authentication of the diagnostic device.

It should be noted that, in the method for diagnosing the vehicle controller provided in the above embodiment, in the process of signing the identification information based on the first private key and authenticating the second authentication message sent by the diagnostic device through the second public key, execute The action of signing the identification information or performing the action of authenticating the second authentication message may be performed based on the vehicle, specifically, it may be an identity authentication module in the vehicle.

In the vehicle controller diagnosis method provided by the embodiments of the present disclosure, the vehicle generates identification information after receiving an identity authentication request, and generates a first authentication message and sends the first authentication message after signing the identification information based on the first private key. to the diagnostic device, so that the diagnostic device authenticates the first authentication message through the first public key, that is, the diagnostic device decrypts the first authentication message through the first public key, thereby realizing the authentication of the vehicle by the diagnostic device, and After the diagnostic device passes the authentication of the first authentication message, the diagnostic device signs the identification information with the second private key to generate the second authentication message, and then sends the second authentication message to the vehicle, so that the vehicle uses the second public key pair The second authentication message is authenticated, that is, the vehicle decrypts the second authentication message through the second public key, and then completes the vehicle's authentication of the diagnostic device, realizes a two-way authentication mechanism, and ensures the safety of the diagnostic device's diagnosis of the controller.

As an implementable manner, the vehicle controller diagnosis method provided in the embodiment of the present disclosure further includes:

In response to the shutdown request sent by the diagnostic device, the access rights issued to the controller are deleted.

As shown in FIG. 6 , when the vehicle receives the shutdown request sent by the diagnostic device, the vehicle deletes the access permission issued to the controller, so that the diagnostic device's access permission to the vehicle is closed.

As another possible implementation manner, continue referring to FIG. 6 , when it is detected that the status of the diagnostic device is offline, the access permission issued to the controller is deleted.

In addition, if the diagnostic device does not send a shutdown request after completing the diagnosis of the controller, but directly shuts down the diagnostic device, and the corresponding diagnostic device is not offline at this time, when the vehicle detects that the diagnostic device is offline, the vehicle shuts down The access permissions issued to the controller.

In the above-mentioned embodiments, the vehicle end is used as an example for illustration. In the following, specific embodiments will be introduced and the diagnosis equipment side will be used as the execution body for specific description.

Specifically: the diagnostic methods of the vehicle controller include:

Send an identity authentication request to the vehicle, so that the vehicle can perform mutual authentication with the diagnostic device based on the access request.

First, the diagnostic device sends an identity authentication request to the vehicle, and the vehicle performs identity authentication with the diagnostic device based on the identity authentication request after receiving the identity authentication request sent by the diagnostic device.

After the vehicle is authenticated, an access request is sent to the vehicle, so that the vehicle authorizes the controller with access authority to the diagnostic device based on the access request.

After the identity mutual authentication between the diagnostic equipment and the vehicle is passed, the two-way authentication between the vehicle and the diagnostic equipment is completed. At this time, the diagnostic equipment sends an access request to the vehicle, so that the vehicle can control the access authority of the diagnostic equipment based on the access request. device for authorization.

As a possible implementation manner, after the identity authentication request is sent to the vehicle, the first authentication message sent by the vehicle is received, and the first authentication message is authenticated.

First, the diagnostic device sends an identity authentication request to the vehicle. After receiving the identity authentication request sent by the diagnostic device, the vehicle generates a first authentication message based on the identity authentication request and sends it to the diagnostic device, so that the diagnostic device performs the first authentication message. certified. That is, the vehicle sends a first authentication message including vehicle information to the diagnostic device, so that the diagnostic device authenticates the identity of the vehicle based on the first authentication message sent by the vehicle.

Optionally, the first authentication message sent by the vehicle is received, and the first authentication message is authenticated by using the first public key.

Wherein, the first authentication message is generated by the vehicle after signing the identification information based on the first private key, the first public key and the first private key are a pair of keys, and the identification information is generated by the vehicle after receiving the identity authentication request. .

The diagnostic device sends an identity authentication request to the vehicle, and after receiving the identity authentication request sent by the diagnostic device, the vehicle first generates identification information of the vehicle based on the identity authentication request. After the vehicle obtains the identity authentication request and generates identification information, it signs the identification information generated by the vehicle through the first private key, generates a first authentication message and sends the first authentication message to the diagnostic device, and the diagnostic device passes The first public key verifies the first authentication message.

As an implementable manner, after the first authentication message is authenticated, it is confirmed that the vehicle is authenticated.

After the vehicle sends the first authentication message to the diagnostic device, the diagnostic device authenticates the first authentication message sent by the vehicle, and when the diagnostic device passes the authentication of the first authentication message, it confirms that the vehicle is authenticated, and the diagnostic device Sending the second authentication message to the vehicle, so that the vehicle verifies the identity of the diagnostic device based on the second authentication message sent by the diagnostic device.

After the vehicle is authenticated, a second authentication message is sent to the vehicle, so that the vehicle authenticates the second authentication message.

Specifically, after the vehicle is authenticated, the identification information is signed based on the second private key, and the second authentication message is sent to the vehicle, so that the vehicle can authenticate the second authentication message, wherein the second public key and The second private key is a key pair.

After the diagnostic device passes the authentication of the first authentication message, the diagnostic device will send the second authentication message to the vehicle, and the second authentication message is generated by the diagnostic device by signing the identification information with the second private key. If the second public key corresponding to the second private key is included, after the vehicle receives the second authentication message, it can decrypt the second authentication message through the second public key, thereby realizing the vehicle's authentication of the diagnostic device.

In the vehicle Ethernet diagnostic method provided by the embodiments of the present disclosure, the diagnostic device authenticates the first authentication message through the first public key, that is, the diagnostic device decrypts the first authentication message through the first public key, and then realizes the diagnosis of the diagnostic device. The authentication of the vehicle, and after the diagnostic device passes the authentication of the first authentication message, the diagnostic device signs the identification information through the second private key to generate the second authentication message, and then sends the second authentication message to the vehicle, so that the vehicle is based on The second public key authenticates the second authentication message, that is, the vehicle decrypts the second authentication message through the second public key, and then completes the vehicle's authentication of the diagnostic device. The first two key pairs implement a two-way authentication mechanism. Ensure the safety of diagnosis equipment for controller diagnosis.

As an implementable manner, the vehicle Ethernet diagnostic method also includes:

A shutdown request is sent to the vehicle, so that the vehicle deletes the access rights sent to the controller based on the shutdown request.

When the vehicle passes the authentication of the second authentication message, it can be determined that the authentication requests of both the diagnostic equipment and the vehicle both pass. After receiving the access request sent by the diagnostic equipment, the vehicle performs a Authorization, which in turn enables the diagnostic device to diagnose the controller.

Fig. 7 is a schematic structural diagram of a vehicle controller diagnostic device provided by an embodiment of the present disclosure. As shown in Fig. 7, the vehicle controller diagnostic device includes:

An identity authentication module 710, configured to perform mutual authentication with the diagnostic device in response to the identity authentication request sent by the diagnostic device;

The authorization module 720 is configured to, in response to the access request sent by the diagnostic device, authorize the controller with the access authority of the diagnostic device.

The vehicle controller device provided by the embodiment of the present disclosure performs mutual authentication with the diagnostic equipment in response to the identity authentication request sent by the diagnostic equipment; The controller authorizes, wherein, the identity authentication request is a request for mutual authentication with the diagnostic equipment, that is, the mutual authentication of identities between the vehicle and the diagnostic equipment, so that before the diagnostic equipment diagnoses the controller, through the mutual authentication mechanism, the diagnosis The identity of the device and the vehicle is authenticated, thereby ensuring the safety of the subsequent diagnostic equipment for diagnosing the controller.

Optionally, the identity authentication module includes:

A first authentication message sending module, configured to generate a first authentication message and send the first authentication message to the diagnostic device in response to the identity authentication request sent by the diagnostic device;

A message authentication module, configured to receive a second authentication message sent by the diagnostic device after the first authentication message is authenticated, and authenticate the second authentication message;

The first judging module is configured to confirm that the mutual authentication passes when the second authentication message passes the authentication.

Optionally, the first authentication message sending module is specifically used for:

Obtain identification information in response to the identity authentication request sent by the diagnostic device;

After signing the identification information based on the first private key, generate a first authentication message and send the first authentication message to the diagnostic device, so that the diagnostic device uses the first public key to authenticate the first authentication message, wherein the first A public key and the first private key are a key pair.

Optionally, the message authentication module is specifically used for:

Use the second public key to authenticate the second authentication message sent by the diagnostic device, where the second authentication message is generated by the diagnostic device after signing the identification information based on the second private key, the second public key and the second private key The key is a pair of key pairs.

Optionally, a specific implementation manner of the authorization module includes:

The access request includes authorization controller identification information;

In response to the access request sent by the diagnostic device, determine the controller corresponding to the authorized controller identification information, and send the authorization request to the authorization module, so that the authorization module authorizes the controller based on the authorization request.

Optionally, another specific implementation manner of the authorization module includes:

The access request includes user identification information;

In response to the access request sent by the diagnostic device, determine the target controller with the access right for the diagnostic device based on the user identification information, and authorize the target controller with the access right for the diagnostic device.

Optionally, another specific implementation manner of the authorization module includes:

The access request includes authorization controller identification information and user identification information;

In response to the access request sent by the diagnostic device, determine the target controller based on the authorized controller identification information;

The access authority of the diagnostic device to the target controller is determined from the target controller based on the user identification information, so that the authorization module authorizes the target controller within the access authority based on the authorization request.

Optionally, also include:

The first access right deletion module is configured to delete the access right issued to the controller in response to the shutdown request sent by the diagnostic device.

The second access authority deletion module is configured to delete the access authority issued to the controller when detecting that the diagnosis device is in an offline state.

The device provided by the embodiment of the present invention can execute the method provided by any embodiment of the present invention, and has corresponding functional modules and beneficial effects for executing the method.

It is worth noting that in the above-mentioned embodiment of the device, the included units and modules are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be realized; in addition, each functional unit The specific names are only for the convenience of distinguishing each other, and are not used to limit the protection scope of the present invention.

FIG. 8 is a schematic structural diagram of an electronic device provided by an embodiment of the present disclosure. As shown in FIG. 8 , the electronic device includes a processor 810, a memory 820, an input device 830, and an output device 840; the number of processors 810 in the computer device There may be one or more, and a processor 810 is taken as an example in FIG. connection as an example.

The memory 820, as a computer-readable storage medium, can be used to store software programs, computer-executable programs and modules, such as program instructions/modules corresponding to the methods in the embodiments of the present invention. The processor 810 executes various functional applications and data processing of the computer device by running software programs, instructions and modules stored in the memory 820 , that is, implements the methods provided by the embodiments of the present invention.

The memory 820 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application program required by at least one function; the data storage area may store data created according to the use of the terminal, and the like. In addition, the memory 820 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid-state storage devices. In some examples, the memory 820 may further include memory located remotely from the processor 810, and these remote memories may be connected to the computer device through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The input device 830 can be used to receive input numbers or character information, and generate key signal input related to user settings and function control of electronic equipment, and can include a keyboard, a mouse, and the like. The output device 840 may include a display device such as a display screen.

An embodiment of the present disclosure also provides a vehicle, where the vehicle includes the electronic device provided in the above embodiment.

Embodiments of the present disclosure also provide a storage medium containing computer-executable instructions, and the computer-executable instructions are used to implement the method provided by the embodiments of the present invention when executed by a computer processor.

Of course, a storage medium containing computer-executable instructions provided by an embodiment of the present invention, the computer-executable instructions are not limited to the above-mentioned method operations, and can also perform related operations in the methods provided by any embodiment of the present invention .

Through the above description about the implementation mode, those skilled in the art can clearly understand that the present invention can be realized by means of software and necessary general-purpose hardware, and of course it can also be realized by hardware, but in many cases the former is a better implementation mode . Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a floppy disk of a computer , read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), flash memory (FLASH), hard disk or optical disc, etc., including several instructions to make a computer device (which can be a personal computer, A server, or a network device, etc.) executes the methods described in various embodiments of the present invention.

It should be noted that in this article, relative terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply these No such actual relationship or order exists between entities or operations. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes elements not expressly listed. other elements of or also include elements inherent in such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

The above descriptions are only specific implementation manners of the present disclosure, so that those skilled in the art can understand or implement the present disclosure. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments described herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (11)

1. A method for diagnosing a vehicle controller, comprising: performing mutual authentication with the diagnostic device in response to the identity authentication request sent by the diagnostic device; After the mutual authentication is passed, in response to the access request sent by the diagnostic device, authorize the controller with the access authority of the diagnostic device. 2. The method according to claim 1, wherein the mutual authentication with the diagnostic device comprises: In response to the identity authentication request sent by the diagnostic device, generate a first authentication message and send the first authentication message to the diagnostic device; receiving a second authentication message sent by the diagnostic device after the first authentication message is authenticated, and authenticating the second authentication message; When the authentication of the second authentication packet is passed, confirm that the mutual authentication is passed. 3. The method according to claim 2, wherein the generating a first authentication message and sending the first authentication message to the diagnostic device in response to the identity authentication request sent by the diagnostic device comprises: Obtain identification information in response to the identity authentication request sent by the diagnostic device; After signing the identification information based on the first private key, generate a first authentication message and send the first authentication message to the diagnostic device, so that the diagnostic device uses the first public key to verify the first authentication message performing authentication, wherein the first public key and the first private key are a key pair. 4. The method according to claim 3, wherein the authenticating the second authentication message comprises: The second authentication message is authenticated by using a second public key, where the second authentication message is generated by the diagnostic device after signing the identification information based on a second private key, and the second The public key and the second private key are a key pair. 5. The method according to claim 1, wherein the access request includes authorization controller identification information; In response to the access request sent by the diagnostic device, authorizing the controller with access rights to the diagnostic device includes: In response to the access request sent by the diagnostic device, determine the controller corresponding to the authorized controller identification information, and send an authorization request to the authorization module, so that the authorization module performs the authorization on the controller based on the authorization request. authorized. 6. The method according to claim 1, wherein the access request includes user identification information; In response to the access request sent by the diagnostic device, authorizing the controller with access rights to the diagnostic device includes: In response to the access request sent by the diagnostic device, determine a target controller that the diagnostic device has access rights based on the user identification information, and authorize the target controller that the diagnostic device has access rights. 7. The method according to claim 1, wherein the access request includes authorization controller identification information and user identification information; In response to the access request sent by the diagnostic device, authorizing the controller with access rights to the diagnostic device includes: determining a target controller based on the authorized controller identification information in response to the access request sent by the diagnostic device; The access authority of the diagnostic device to the target controller is determined from the target controller based on the user identification information, so that the authorization module authorizes the target controller within the access authority based on the authorization request. 8. The method according to any one of claims 5-7, characterized in that, after the diagnostic device is authenticated, in response to the access request sent by the diagnostic device, there is access to the diagnostic device After the permission controller authorizes, it also includes: remove access rights issued to the controller in response to a shutdown request sent by the diagnostic device; or, When it is detected that the state of the diagnostic device is offline, delete the access authority issued to the controller. 9. A vehicle controller diagnostic device, characterized in that it comprises: An identity authentication module, configured to perform mutual authentication with the diagnostic device in response to the identity authentication request sent by the diagnostic device; An authorization module, configured to authorize the controller with access authority of the diagnostic device in response to the access request sent by the diagnostic device. 10. An electronic device, characterized in that it comprises: one or more processors; storage means for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors are made to implement the method according to any one of claims 1-8. 11. A computer-readable storage medium, on which a computer program is stored, wherein, when the program is executed by a processor, the method according to any one of claims 1-8 is realized.

Images