Method and device for communicating securely between T-box device and ECU device in internet of vehicles system

1. A method for communicating securely between a Telematics Box (T-Box) device and an Electronic Control Unit (ECU) device in an Internet of Vehicles system, the method comprising:

sending, by the T-Box device, a first piece of information to the ECU device, the first piece of information being obtained by XORing a first random number generated by the T-Box device with a hash value of a master key of the Internet of vehicles system;

generating, by the ECU device, a second piece of information according to the first piece of information, the hash value of the master key, and a second random number generated by the ECU device, and sending the second piece of information to the T-Box device;

generating, by the T-Box device, a third piece of information according to the second piece of information, the first random number, and a third random number generated by the T-Box device, and sending the third piece of information to the ECU device;

generating, by the T-Box device, a first key according to the second piece of information and the third random number, and identity information of the T-Box device and an identity of the ECU device;

encrypting, by the T-Box device, an instruction based on the first key to obtain an encrypted instruction, and sending the encrypted instruction to the ECU device;

generating, by the ECU device, a second key, according to the third piece of information and the second random number, and the identity information of the T-Box device and the identity of the ECU device, in response to receiving the encrypted instruction sent by the T-Box device; and

decrypting, by the ECU device, the encrypted instruction based on the second key to obtain the instruction.

2. The method according to claim 1 , further comprising:

sending, by the T-Box device, a first piece of auxiliary information and a second piece of auxiliary information to the ECU device; and

detecting, by the ECU device, whether a first trigger condition for data integrity is satisfied based on the first piece of auxiliary information and the second piece of auxiliary information; and

the generating, by the ECU device, the second piece of information and sending the second piece of information to the T-Box device comprises:

if the first trigger condition is satisfied, performing a timestamp verification, by the ECU device, based on time information of receiving the first piece of auxiliary information and the second piece of auxiliary information; and

if the verification passes, generating the second piece of information, by the ECU device, according to the first piece of information, the hash value of the master key, and the second random number generated by the ECU device, and sending the second piece of information to the T-Box device.

3. The method according to claim 1 , further comprising:

sending, by the ECU device, a third piece of auxiliary information and a fourth piece of auxiliary information to the T-Box device; and

detecting, by the T-Box device, whether a second trigger condition for data integrity is satisfied according to the third piece of auxiliary information and the fourth piece of auxiliary information; and

the generating, by the T-Box device, the third piece of information and sending the third piece of information to the ECU device comprises:

if the second trigger condition is satisfied, performing a timestamp verification, by the T-Box device, based on time information of receiving the third piece of auxiliary information and the fourth piece of auxiliary information; and

if the verification passes, generating the third piece of information, by the T-Box device, according to the second piece of information, and sending the third piece of information to the ECU device.

4. The method according to claim 1 , wherein the encrypting, by the T-Box device, an instruction based on the first key to obtain an encrypted instruction, and sending the encrypted instruction to the ECU device further comprises:

sending, by the T-Box device, a fifth piece of auxiliary information and a sixth piece of auxiliary information to the ECU device; and

the method further comprises:

performing a timestamp verification, by the ECU device, based on time information of receiving the fifth piece of auxiliary information and the sixth piece of auxiliary information; and

the generating, by the ECU device, a second key, according to the third piece of information and the second random number, and the identity information of the T-Box device and the identity of the ECU device, in response to receiving the encrypted instruction sent by the T-Box device, comprises:

if the verification passes, generating, by the ECU device, the second key, according to the third piece of information and the second random number, and the identity information of the T-Box device and the identity of the ECU device, in response to receiving the encrypted instruction sent by the T-Box device.

5. The method according to claim 4 , wherein the decrypting, by the ECU device, the encrypted instruction based on the second key to obtain the instruction comprises:

detecting, by the ECU device, whether a third trigger condition for data integrity is satisfied according to the second key, the fifth piece of auxiliary information and the sixth piece of auxiliary information; and

if the third trigger condition is satisfied, decrypting, by the ECU device, the encrypted instruction based on the second key to obtain the instruction.

6. The method according to claim 1 , wherein after the ECU device obtains the instruction, the method further comprises:

detecting, by the ECU device, whether a fourth trigger condition for deleting the second key and the second random number is satisfied;

if the fourth trigger condition is not satisfied, encrypting, by the ECU device, return data based on the second key to send the encrypted return data to the T-Box device; and

decrypting, by the T-Box device, the received, encrypted return data based on the first key to obtain the return data.

7. The method according to claim 6 , wherein after the T-Box device obtains the return data, if there is no instruction continuously sent to the ECU device, the method further comprises:

deleting, by the T-Box device, the first key, the first random number and the third random number.

8. A non-transitory computer storage medium storing a computer program, the computer program when executed by one or more processors, causes the one or more processors to perform operations, the operations comprise:

sending, by a Telematics Box (T-Box) device, a first piece of information to an Electronic Control Unit (ECU) device, the first piece of information being obtained by XORing a first random number generated by the T-Box device with a hash value of a master key of an Internet of vehicles system;

generating, by the ECU device, a second piece of information according to the first piece of information, the hash value of the master key, and a second random number generated by the ECU device, and sending the second piece of information to the T-Box device;

generating, by the T-Box device, a third piece of information according to the second piece of information, the first random number, and a third random number generated by the T-Box device, and sending the third piece of information to the ECU device;

generating, by the T-Box device, a first key according to the second piece of information and the third random number, and identity information of the T-Box device and an identity of the ECU device;

encrypting, by the T-Box device, an instruction based on the first key to obtain an encrypted instruction, and sending the encrypted instruction to the ECU device;

generating, by the ECU device, a second key, according to the third piece of information and the second random number, and the identity information of the T-Box device and the identity of the ECU device, in response to receiving the encrypted instruction sent by the T-Box device; and

decrypting, by the ECU device, the encrypted instruction based on the second key to obtain the instruction.

9. A Telematics Box (T-Boxj device for communicating securely with an Electronic Control Unit (ECU) device in an Internet of Vehicles system, the T-Box device comprising:

at least one processor; and

a memory storing instructions, the instructions when executed by the at least one processor, cause the at least one processor to perform operations, the operations comprising:

sending a first piece of information to the ECU device, the first piece of information being obtained by XORing a first random number generated by the T-Box device with a hash value of a master key of the Internet of Vehicles system;

receiving a second piece of information sent by the ECU device, the second piece of information being generated according to the first piece of information, the hash value of the master key, and a second random number generated by the ECU device;

generating a third piece of information according to the second piece of information, the first random number, and a third random number generated by the T-Box device, and sending the third piece of information to the ECU device;

generating a first key according to the second piece of information and the third random number, and identity information of the T-Box device and an identity of the ECU device; and

encrypting an instruction based on the first key to obtain an encrypted instruction, and sending the encrypted instruction to the ECU device.

10. The T-Box device according to claim 9 , wherein the operations further comprise:

sending a first piece of auxiliary information and a second piece of auxiliary information to the ECU device.

11. The T-Box device according to claim 9 , wherein the operations further comprise:

receiving a third piece of auxiliary information and a fourth piece of auxiliary information sent by the ECU device; and

detecting whether a second trigger condition for data integrity is satisfied according to the third piece of auxiliary information and the fourth piece of auxiliary information; and

the generating the third piece of information and sending the third piece of information to the ECU device comprises:

if the second trigger condition is satisfied, performing a timestamp verification based on time information of receiving the third piece of auxiliary information and the fourth piece of auxiliary information; and

if the verification passes, generating the third piece of information according to the second piece of information, and sending the third piece of information to the ECU device.

12. The T-Box device according to claim 9 , wherein the encrypting a to-be-issued instruction based on the first key to send the encrypted instruction to the ECU device comprises:

sending a fifth piece of auxiliary information and a sixth piece of auxiliary information to the ECU device.

13. The T-Box device according to claim 9 , wherein the operations further comprise:

receiving encrypted return data sent by the ECU device, the return data is encrypted by a second key; and

decrypting the received, encrypted return data based on the first key to obtain the return data.

14. The T-Box device according to claim 13 , wherein after the T-Box device obtains the return data, if there is no instruction continuously sent to the ECU device, the operations further comprise:

deleting the first key, the first random number and the third random number.

15. An Electronic Control Unit (ECU) device for communicating securely with a Telematics Box (T-Box) device in an Internet of Vehicles system, the ECU device comprising:

at least one processor; and

a memory storing instructions, the instructions when executed by the at least one processor, cause the at least one processor to perform operations, the operations comprising:

receiving a first piece of information sent by a corresponding the T-Box device, the first piece of information being obtained by XORing a first random number generated by the T-Box device with a hash value of a master key of the Internet of Vehicles system;

generating a second piece of information according to the first piece of information, the hash value of the master key, and a second random number generated by the ECU device, and sending the second piece of information to the T-Box device;

receiving a third piece of information sent by the T-Box device;

receiving encrypted instruction sent by the T-Box device, the encrypted instruction being instruction encrypted by a first key, and the generation of the first key being based on the second piece of information, a third random number generated by the T-Box device, and identity information of the T-Box device and an identity of the ECU device;

generating a second key according to the third piece of information and the second random number, and the identity information of the T-Box device and the identity of the ECU device, in response to receiving the encrypted instruction; and

decrypting the encrypted instruction based on the second key to obtain the instruction.

16. The ECU device according to claim 15 , wherein the operations further comprise:

receiving a first piece of auxiliary information and a second piece of auxiliary information sent by the T-Box device; and

detecting whether a first trigger condition for data integrity is satisfied based on the first piece of auxiliary information and the second piece of auxiliary information; and

the generating the second piece of information and sending the second piece of information to the T-Box device comprises:

if the first trigger condition is satisfied, performing a timestamp verification based on time information of receiving the first piece of auxiliary information and the second piece of auxiliary information; and

if the verification passes, generating the second piece of information, according to the first piece of information, the hash value of the master key, and the second random number generated by the ECU device, and sending the second piece of information to the T-Box device.

17. The ECU device according to claim 15 , wherein the operations further comprise:

sending a third piece of auxiliary information and a fourth piece of auxiliary information to the T-Box device.

18. The ECU device according to claim 15 , wherein the operations further comprise:

receiving a fifth piece of auxiliary information and a sixth piece of auxiliary information sent by the T-Box device; and

performing a timestamp verification based on time information of receiving the fifth piece of auxiliary information and the sixth piece of auxiliary information; and

the generating the second key, in response to receiving the instruction sent by the T-Box device comprises:

if the verification passes, generating the second key, in response to receiving the instruction sent by the T-Box device, according to the third piece of information and the second random number, and the identity information of the T-Box device and the identity of the ECU device.

19. The ECU device according to claim 18 , wherein the decrypting the encrypted instruction based on the second key to obtain the instruction comprises:

detecting whether a third trigger condition for data integrity is satisfied according to the second key, the fifth piece of auxiliary information and the sixth piece of auxiliary information; and

if the third trigger condition is satisfied, decrypting the encrypted instruction based on the second key to obtain the instruction.