WO2017071158A1

WO2017071158A1 - Method, device, and vehicle-mounted system and terminal for authenticating permission to operate

Info

Publication number: WO2017071158A1
Application number: PCT/CN2016/078099
Authority: WO
Inventors: 周福家
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-10-30
Filing date: 2016-03-31
Publication date: 2017-05-04
Also published as: CN105282164B; CN105282164A

Abstract

Disclosed are a method, device, and vehicle-mounted system and terminal for authenticating permission to operate, used, in an Internet-of-Vehicles system, for dividing in advance a biometric feature authentication template into a plurality of authentication template segments to generate disguised segments, and separately storing combinations of said authentication template segments and disguised segments in different storage locations; comprised are: receiving first biometric feature information inputted by a current user; obtaining said plurality of authentication template segments and said disguised segments; filtering said disguised segments and combining said plurality of authentication template segments to produce said biometric feature authentication template; comparing the first biometric feature information and the biometric feature authentication template, and if they match, then the authentication is successful. In the method, device, and vehicle-mounted system and terminal for authenticating permission to operate provided by the present invention, a method involving authentication, separation, disguise, and storage is employed, and the security of the process of authentication during remote operation is improved. The present invention also provides a vehicle-mounted system.

Description

Method, device, vehicle system and terminal for verifying operation authority

Technical field

The invention relates to the technical field of vehicle network control, in particular to a method, device, vehicle system and terminal for verifying operation authority.

Background technique

The vehicle networking system refers to the acquisition, storage and transmission of all working conditions and static and dynamic information of the vehicle by installing the vehicle terminal equipment on the vehicle instrument panel. The system is divided into three parts: vehicle terminal, cloud computing processing platform, data analysis platform, and effective monitoring and management of vehicles according to different functional requirements of different industries. The operation of the vehicle often involves multiple switching quantities, sensor analog quantities, CAN signal data, etc. During the operation of the vehicle, the generated vehicle data is continuously sent back to the back-end database to form massive data, which is realized by the cloud computing platform. The “filter cleaning” of massive data, the data analysis platform reports the data in a report for management personnel to view.

Typically, authentication is required before a control request is sent to the vehicle system. Therefore, how to improve the security of the authentication process in remote operation is a technical problem to be solved by those skilled in the art.

Summary of the invention

An object of the present invention is to provide a method, an apparatus, an in-vehicle system and a terminal for verifying operation authority, and aim to solve the problem of insufficient security in the authentication process for remote operation in the prior art.

In order to solve the above technical problem, the present invention provides a method for verifying operation authority, which is used in a vehicle networking system to divide a biometric verification template into a plurality of verification template segments in advance, generate a disguised segment, and respectively respectively perform the verification template segment. The combination with the camouflage segment is stored in a different storage location, including:

Receiving first biometric information input by the current user;

Obtaining the plurality of verification template fragments and the camouflage fragments;

Filtering the camouflage segment, and combining the plurality of verification template segments to generate the biometric verification template;

Comparing the first biometric information with the biometric verification template, and the verification is successful when the matching is consistent.

Optionally, the biometric verification template is divided into a plurality of verification template segments in advance, and the camouflage segments are generated, and respectively storing the combination of the verification template segments and the camouflage segments in different storage locations includes:

Dividing the biometric verification template into two parts of the first verification template segment and the second verification template segment along the feature line;

Generating a camouflage segment, the camouflage segment and the first verification template segment being synthesized into a camouflage template;

The camouflage template is stored in the in-vehicle system, and the second verification template segment and the camouflage segment are stored in the cloud server.

Optionally, the acquiring the multiple verification template segments and the camouflage segments includes:

Obtaining a second verification template segment and a camouflage segment stored in the cloud server, and acquiring a camouflage template stored in the in-vehicle system.

Optionally, before the receiving the first biometric information input by the current user, the method further includes:

The current user accesses the cloud server by inputting the account password to obtain the status information of the vehicle.

Optionally, after the current user accesses the cloud server by inputting the account password, before the receiving the first biometric information input by the current user, the method further includes:

Receiving second biometric information input by the user;

Comparing the second biometric information with preset authorization template information;

When the match is successful, the subsequent verification is performed.

Optionally, after comparing the first biometric information with the biometric verification template, when the verification is successful, the verification further includes:

The in-vehicle system is responsive to the control command entered by the current user.

Optionally, the control instruction that the onboard system responds to the current user input includes:

The in-vehicle system responds to a control instruction input by a current user within a preset authorization period, When the preset authorization period is exceeded, it needs to be verified again.

Optionally, after the in-vehicle system responds to the control instruction input by the current user, the method further includes:

The generated biometric verification template is cleared.

The invention also provides a verification device for operating authority, which is used in a vehicle networking system to divide a biometric verification template into a plurality of verification template segments in advance, generate a camouflage segment, and respectively respectively respectively respectively the verification template segment and the camouflage segment The combination is stored in different storage locations, and the verification device includes:

a receiving module, configured to receive first biometric information input by a current user;

An obtaining module, configured to acquire the multiple verification template segments and the camouflage segment;

a synthesis module, configured to filter out the camouflage segment, and combine the plurality of verification template segments to generate the biometric verification template;

And a comparison module, configured to compare the first biometric information with the biometric verification template, and the verification succeeds when the matching is consistent.

The present invention also provides an in-vehicle system comprising any of the above-described verification devices for operating authority.

The present invention also provides a terminal comprising the in-vehicle system as described in any of the above aspects.

The method and device for verifying the operation authority provided by the present invention generates a camouflage segment by dividing the biometric verification template into a plurality of verification template segments in advance, and separately stores the combination of the verification template segment and the camouflage segment in different storage locations. When the remote operation is authenticated, the verification template segment and the masquerading segment are obtained, the masquerading segment is filtered, and the verification template segments are combined to generate a biometric verification template; and the first biometric information and biometric verification of the current user are received. Templates are compared for verification. It can be seen that the method and device for verifying the operation authority provided by the present invention adopts the method of authentication and separation masquerading storage, which can improve the security of the authentication process in remote operation. Further, the present invention also provides an in-vehicle system and a terminal using the same.

DRAWINGS

FIG. 1 is a specific implementation manner of a method for verifying operation authority provided by the present invention Flow chart

2 is a flowchart of pre-establishing authentication information in another specific implementation manner of the method for verifying operation authority provided by the present invention;

3 is a flowchart of another specific implementation manner of a method for verifying operation authority provided by the present invention;

4 is a flowchart of pre-establishing authentication information in another specific implementation manner of a method for verifying operation authority provided by the present invention;

FIG. 5 is a flowchart of still another specific implementation manner of a method for verifying operation authority according to the present invention; FIG.

6 is a structural block diagram of a specific implementation manner of an apparatus for verifying operation authority provided by the present invention;

FIG. 7 is a structural block diagram of a terminal according to the present invention.

detailed description

The present invention will be further described in detail below in conjunction with the drawings and embodiments. It is apparent that the described embodiments are only a part of the embodiments of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

A flowchart of a specific implementation manner of the method for verifying the operation authority provided by the present invention is shown in FIG. 1 , and the method includes:

Step S100: The biometric verification template is divided into a plurality of verification template segments in advance, and a camouflage segment is generated, and the combination of each verification template segment and the camouflage segment is stored in different storage locations respectively;

In the present application, the masquerading fragment is false verification information generated for masquerading the verification template, and the masquerading template may be generated with the partial verification template fragment in the verification template. For example, in a specific implementation method of authenticating by fingerprint information, the fingerprint texture information for verification is used as a verification template, and is divided into two parts (A and B), and the A picture is randomly complemented to generate a camouflage piece C. Then, the combination of each verification template segment and the masquerading segment, that is, the combination of A and C, and the combination of B and C, are respectively stored in different storage locations. Specifically, can The segment B and the segment C are stored in the cloud server by storing the half-truth fingerprint information composed of the segment A and the segment C in the in-vehicle system.

Step S101: Receive first biometric information input by the current user;

Specifically, the first biometric information may be input by the mobile terminal, and may of course be input by other devices, which does not affect the implementation of the present invention.

Step S102: Acquire a plurality of verification template segments and a camouflage segment;

Step S103: Filter out the camouflage segments, and combine the multiple verification template segments to generate a biometric verification template.

Step S104: comparing the first biometric information with the biometric verification template, and the verification is successful when the matching is consistent.

The method for verifying the operation authority provided by the present invention generates a camouflage segment by dividing the biometric verification template into a plurality of verification template segments in advance, and separately stores the combination of the verification template segment and the camouflage segment in different storage locations. When the remote operation is authenticated, the verification template segment and the masquerading segment are obtained, the masquerading segment is filtered, and the verification template segments are combined to generate a biometric verification template; and the first biometric information and biometric verification of the current user are received. Templates are compared for verification. It can be seen that the verification method for the operation authority provided by the present invention adopts the method of authentication separation and masquerading storage, which can improve the security of the authentication process in remote operation.

It should be noted that the verification method of the operation authority provided by the present invention can divide the biometric verification template into a plurality of segments and store them to enhance the security of the vehicle control operation. This embodiment is further described by taking the biometric verification template into two segments as an example.

In another specific embodiment of the method for verifying the operation authority provided by the present invention, as shown in FIG. 2, the foregoing step S100 may be specifically:

Step S1001: The biometric verification template is divided into two parts of the first verification template segment and the second verification template segment along the feature line in advance;

Step S1002: generating a camouflage segment, and the camouflage segment and the first verification template segment are synthesized into a camouflage template;

Step S1003: storing the camouflage template in the vehicle system, and storing the second verification template segment and the camouflage segment in the cloud server.

It should be noted that the above biometric verification template is not limited to being divided into two parts, nor is it limited to segmentation along a feature line. For example, the picture may be directly divided into two parts. The first verification template fragment and the second verification template fragment may be combined into a complete verification template, or may be synthesized into a valid verification information capable of identifying the user. This does not affect the implementation of the present invention.

As shown in the flowchart of another specific embodiment of the method for verifying the operation authority provided by the present invention, the specific process of the verification may be:

Step S201: Receive first biometric information input by the current user by the mobile terminal;

Step S202: Acquire a second verification template segment and a camouflage segment stored in the cloud server, and acquire a camouflage template stored in the in-vehicle system;

Step S203: Filter out the camouflage segment, and combine the first verification template segment and the second verification template segment to generate a biometric verification template.

Step S204: comparing the first biometric information with the biometric verification template, and the verification is successful when the matching is consistent.

The biometric information referred to in the present invention may specifically use information such as a fingerprint or an iris, and of course other information may be used, which does not affect the implementation of the present invention.

This embodiment is further described by taking a fingerprint as an example. The present invention provides another specific implementation manner of the operation authority verification method. As shown in the flowchart of the method for establishing authentication information in advance, the process includes:

Step S3001: The in-vehicle console inputs the verified fingerprint, and divides the fingerprint texture information into two parts along the feature line, that is, the valid verification information is divided into two texture maps, that is, the first verification template fragment A and the first Second verification template fragment B;

Step S3002: Randomly complete the A picture, that is, generate the camouflage segment C, and at this time, the in-vehicle system stores a half-true and half-false fingerprint information, that is, a first verification template segment A and a camouflage template composed of the camouflage segment C;

Step S3003: Send the camouflage segment C and the second verification template segment B to the cloud service Server for storage.

The input fingerprint exists in the vehicle end and the cloud server. When the request is sent, the user needs to input the fingerprint and perform authentication. The process of authentication is shown in FIG. 5, and the process includes:

Step S301: The cloud server sends specific instructions for the vehicle state to control the vehicle, such as starting warm-up in winter and turning on air-conditioning in summer;

Step S302: the mobile terminal enters a fingerprint and sends it to the cloud;

Step S303: The cloud sends the to-be-verified fingerprint and the second verification template segment B and the camouflage segment C stored in the cloud to the vehicle end;

Step S304: the vehicle end compares the second verification template segment B, the camouflage segment C with the locally stored camouflage template, and removes the same portion, that is, the camouflage segment C;

Step S305: Recombining the first verification template segment A and the second verification template segment B into a true fingerprint image;

Step S306: The fingerprint to be verified is compared with the real fingerprint.

Further, the embodiment may further include:

Step S307: The in-vehicle system responds to the control instruction input by the current user;

That is, after the authentication is passed, the in-vehicle system completes the self-control according to the instructions. Further, the in-vehicle system can respond to the control command input by the current user within the preset authorization period, and when the preset authorization period is exceeded, the verification is performed again.

Step S308: Clear the generated biometric verification template and wait for the execution of the next authentication.

The method for verifying the operation authority provided by the embodiment of the present invention uses the fingerprint authentication method to separate and store the authentication information and camouflage the authentication information, thereby improving the security of the authentication process in the remote operation.

As a preferred embodiment, the method for verifying the operation authority provided by the present invention may further include: before receiving the first biometric information input by the mobile terminal by the current user:

The current user accesses the cloud server by inputting an account password, and obtains status information of the vehicle;

The in-vehicle system corresponds to a unique account of the cloud server, and the status information of the vehicle (including information such as interior temperature, fuel tank reading and parking position) is uploaded to the cloud server account through the flow card. At this time, the mobile phone application accesses the vehicle state information of the cloud server through the account password, and the cloud server obtains the display permission.

As a preferred embodiment, the method for verifying the operation authority provided by the present invention may further include, after receiving the first biometric information input by the mobile terminal by the current user, after the current user accesses the cloud server by inputting the account password. :

Receiving the second biometric information input by the user; comparing the second biometric information with the preset authorization template information; and when the matching is successful, performing the subsequent verification operation.

If the cloud server account wants to send certain requests to the vehicle, the user needs to authorize the cloud account first, and then the cloud account can have the right to send a request to the vehicle system. After 5 minutes of authorization, the permissions are automatically reclaimed. If you need to send again, you will need to authorize again. In this embodiment, an authorization process is added before the authentication, and only when the authorization is passed, the cloud account can have the send permission, and the following authentication process can be further performed. It can be seen that the security of the remote operation can be further improved by the setting of the process.

It should be pointed out that the user authorization method can adopt the biological information method, that is, the fingerprint or the iris. The information is directly stored in the cloud account when it is entered, and the information is transmitted to the cloud through the mobile application end, and is verified by the cloud. It should be clear that the authorization template information used in this process should be different from the biometric verification template used in the authentication process.

In this embodiment, the cloud server remotely authenticates the vehicle system, and uses two verifications to obtain part of the operation authority of the vehicle, and finally realizes remote viewing and remote operation, thereby further enhancing the security of vehicle control.

A structural block diagram of a specific implementation manner of the verification device for operating authority provided by the present invention is shown in FIG. 6. In the vehicle networking system, the biometric verification template is divided into a plurality of verification template segments in advance, and a camouflage segment is generated. Each of the verification template fragments and the combination of the masquerading segments are stored in different storage locations, and the verification device includes:

The receiving module 100 is configured to receive first biometric information input by a current user;

An obtaining module 200, configured to acquire the multiple verification template segments and the camouflage film segment;

a synthesis module 300, configured to filter out the camouflage segment, and combine the multiple verification template segments to generate the biometric verification template;

The comparison module 400 is configured to compare the first biometric information with the biometric verification template, and the verification is successful when the matching is consistent.

The verification device for the operation authority provided by the present invention corresponds to the above method, and details are not described herein again.

The present invention also provides an in-vehicle system comprising the verification device for the operational authority provided above.

FIG. 3 is a structural block diagram of a terminal provided by the present invention. The present invention also provides a terminal 500 comprising the in-vehicle system according to any of the above aspects.

In summary, the method, the device, the in-vehicle system and the terminal for verifying the operation authority provided by the present invention generate a camouflage segment by dividing the biometric verification template into a plurality of verification template segments in advance, and separately verify the template segment and the camouflage segment. The combination is stored in a different storage location. When the remote operation is authenticated, the verification template segment and the masquerading segment are obtained, the masquerading segment is filtered, and the verification template segments are combined to generate a biometric verification template; and the first biometric information and biometric verification of the current user are received. Templates are compared for verification. It can be seen that the method, the device, the in-vehicle system and the terminal for verifying the operation authority provided by the invention adopt the method of authenticating and separating the masquerading storage, thereby improving the security of the authentication process in the remote operation.

The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on differences from other embodiments, and the same or similar parts of the respective embodiments may be referred to each other.

The above description of the disclosed embodiments enables those skilled in the art to make or use the invention. Various modifications to these embodiments are obvious to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the present invention is not to be limited to the embodiments shown herein, but the scope of the invention is to be accorded

Claims

A method for verifying operation authority, which is used in a vehicle networking system, characterized in that a biometric verification template is divided into a plurality of verification template segments in advance, and a camouflage segment is generated, and each of the verification template segments and the camouflage segment are respectively respectively The combination is stored in different storage locations, including:

Receiving first biometric information input by the current user;

Obtaining the plurality of verification template fragments and the camouflage fragments;

Filtering the camouflage segment, and combining the plurality of verification template segments to generate the biometric verification template;

Comparing the first biometric information with the biometric verification template, and the verification is successful when the matching is consistent.
The method for verifying the operation authority according to claim 1, wherein the biometric verification template is divided into a plurality of verification template segments in advance, and a camouflage segment is generated, and the combination of each of the verification template segments and the camouflage segment is respectively generated. Storage in different storage locations includes:

Dividing the biometric verification template into two parts of the first verification template segment and the second verification template segment along the feature line;

Generating a camouflage segment, the camouflage segment and the first verification template segment being synthesized into a camouflage template;

The camouflage template is stored in the in-vehicle system, and the second verification template segment and the camouflage segment are stored in the cloud server.
The method for verifying the operation authority according to claim 2, wherein the obtaining the plurality of verification template fragments and the disguised fragments comprises:

Obtaining a second verification template segment and a camouflage segment stored in the cloud server, and acquiring a camouflage template stored in the in-vehicle system.
The method for verifying the operation authority according to any one of claims 1 to 3, further comprising: before the receiving the first biometric information input by the current user:

The current user accesses the cloud server by inputting the account password to obtain the status information of the vehicle.
A method of verifying an operation authority according to claim 4, wherein After the current user accesses the cloud server by inputting the account password, the method further includes: before the receiving the first biometric information input by the current user:

Receiving second biometric information input by the user;

Comparing the second biometric information with preset authorization template information;

When the match is successful, the subsequent verification is performed.
The method for verifying the operation authority according to claim 5, wherein comparing the first biometric information with the biometric verification template, and after the matching is consistent, the verification further comprises:

The in-vehicle system is responsive to the control command entered by the current user.
The method for verifying the operation authority according to claim 6, wherein the control command input by the in-vehicle system in response to the current user comprises:

The in-vehicle system responds to the control command input by the current user within the preset authorization period, and when the preset authorization period is exceeded, the verification is performed again.
The method for verifying the operation authority according to claim 6, further comprising: after the in-vehicle system responds to the control instruction input by the current user:

The generated biometric verification template is cleared.
A verification device for operating authority, which is used in a vehicle networking system, characterized in that a biometric verification template is divided into a plurality of verification template segments in advance, and a camouflage segment is generated, and each of the verification template segments and the camouflage segment are respectively respectively The combination is stored in different storage locations, and the verification device includes:

a receiving module, configured to receive first biometric information input by a current user;

An obtaining module, configured to acquire the multiple verification template segments and the camouflage segment;

a synthesis module, configured to filter out the camouflage segment, and combine the plurality of verification template segments to generate the biometric verification template;

And a comparison module, configured to compare the first biometric information with the biometric verification template, and the verification succeeds when the matching is consistent.
An in-vehicle system characterized by comprising the verification device of the operation authority according to claim 9.
A terminal characterized by comprising the in-vehicle system according to claim 10.