Display system and method for enhancing network information security of DLP projection vehicle lamp

Abstract

The invention discloses a display system and method for enhancing DLP projection vehicle lamp network information safety, and belongs to the technical field of vehicle lamp information safety. The system comprises a communication module used for receiving encrypted video data and control data sent by a vehicle body; the decryption module is used for decrypting the data transmitted by the communication module; the identity authentication module is used for periodically diagnosing the data decrypted by the decryption module and judging whether the current user information is valid or not; and the intrusion detection module is used for monitoring the network security state of the system in real time and detecting and preventing unauthorized access and operation. According to the display system and method for enhancing the network information security of the DLP projection vehicle lamp provided by the invention, the information security module is added in the DLP projection system, so that the possibility that the DLP projection vehicle lamp control system is maliciously attacked in data transmission is reduced, and the vehicle privacy and the driving safety are protected.

Description

Technical Field

[0001] The invention relates to a display system and a method for enhancing network information security of a DLP projection vehicle lamp, belonging to the technical field of vehicle lamp information security. Background Art

[0002] At present, the DLP projection lighting system is a new type of lighting control system that can project patterns or videos onto the road surface to form various animation effects. It can assist the driver in road identification during driving, and can also play various user-favorite animations during parking, enhancing the interactive experience between people and vehicles. However, although the current DLP projection lighting system has been developed in various functionalities, it has also brought about a series of information security issues brought about by access to the vehicle body Ethernet environment, which has brought great security risks to the driver's privacy and also led to a series of problems such as road safety. Summary of the invention

[0003] The technical problem to be solved by the present invention is to overcome the shortcomings of the prior art and provide a display system and method for enhancing the network information security of DLP projection lamps. By adding an information security module to the DLP projection system, the possibility of the DLP projection lamp control system being maliciously attacked during data transmission is reduced, thereby protecting vehicle privacy and driving safety.

[0004] In order to solve the above technical problems, the technical solution of the present invention is: In one aspect, the present invention provides a display system for enhancing network information security of DLP projection vehicle lamps, comprising: A communication module, used for receiving encrypted video data and control data sent by the vehicle body; A decryption module, used for decrypting data transmitted by the communication module; The identity authentication module is used to perform periodic diagnosis on the decrypted data of the decryption module to determine whether the current user information is valid; Intrusion detection module, used to monitor the network security status of the system in real time, detect and prevent unauthorized access and operation; The control module is used to receive the video data decrypted by the decryption module, process the video data authenticated by the identity authentication module at the protocol level, and then perform projection control; The DLP light source module is used to generate a projection light beam according to the projection control information of the control module.

[0005] Another aspect of the present invention provides an information security processing method for a display system for enhancing network information security of a DLP projection vehicle lamp, which comprises the following steps: Step S1, the vehicle body sends the encrypted control signal and video data to the communication module; Step S2: After receiving the data, the communication module pre-processes the data and sends it to the decryption module; Step S3: After receiving the data, the decryption module decrypts it according to the encryption and decryption algorithm; Step S4: The identity authentication module will periodically diagnose the decrypted data to determine whether the current user information is valid; Step S5, the control module receives and processes the video data decrypted by the decryption module, and processes the corresponding video data at the protocol level after the identity authentication is passed; Step S6: The intrusion detection module monitors the network security status of the system in real time during the period of steps S1 to S5, and detects network traffic, system logs and abnormal behaviors to identify potential security threats; Step S7: The DLP light source module projects the correct image or video data.

[0006] Further, in step S3, after receiving the data, the decryption module performs decryption according to the encryption and decryption algorithm, which specifically includes the following steps: The encrypted video data and control data are decrypted in reverse using the AES-256 algorithm, and the data is decrypted using the authenticated key.

[0007] Furthermore, in step S4, the identity authentication module will periodically diagnose the decrypted data to determine whether the current user information is valid, which specifically includes the following steps: Set up a whitelist of trusted devices for the system; The identity authentication module checks each received data stream to ensure that the source of the data stream matches the device in the trusted device whitelist, and unauthorized devices and network nodes cannot pass the authentication; The identity authentication module performs identity authentication when the device is first connected to check whether the device matches the device in the trusted device whitelist; During the transmission of the data stream, periodic authentication checks are performed on the connected device to recheck whether the device matches the device in the trusted device whitelist.

[0008] Furthermore, the trusted device whitelist includes registered and authenticated trusted video source devices.

[0009] Further, in step S6, the intrusion detection module monitors the network security status of the system in real time during the period of step S1 to step S5, and detects network traffic, system logs and abnormal behaviors to identify potential security threats, which specifically includes the following steps: The intrusion detection module monitors network traffic and checks the header information of the traffic data packet and the payload content of the data packet; The intrusion detection module detects the scanning behavior of the system port and identifies potential port scanning attacks by analyzing the pattern of different source IP addresses trying to connect to multiple ports; The intrusion detection module collects and analyzes system logs in real time.

[0010] Furthermore, the system log includes: Network connection log, which is used to record all network connection information entering and leaving the system; A security event log, which is used to record all authentication, authorization and network access failure events; File modification log, which is used to monitor the modification history of system files and configurations.

[0011] By adopting the above technical solution, the DLP projection lamp system of the present invention reduces the possibility of malicious attacks on the DLP projection lamp control system during data transmission by introducing encryption and decryption technology combined with identity authentication and intrusion detection, thereby protecting vehicle privacy and driving safety. It effectively solves the information security problem of the emerging DLP projection lamp in vehicle network security, meets the demand for information security in the auxiliary driving system, and improves the security of road information. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 A principle block diagram of a display system for enhancing network information security of DLP projection vehicle lights according to the present invention; Figure 2 The present invention is a flow chart of an information security processing method for a display system for enhancing network information security of a DLP projection vehicle lamp. DETAILED DESCRIPTION

[0013] In order to make the contents of the present invention more clearly understood, the present invention is further described in detail below based on specific embodiments in conjunction with the accompanying drawings.

[0014] Embodiment 1 like Figure 1 As shown, this embodiment provides a display system for enhancing network information security of DLP projection vehicle lamps, which includes: The communication module is used to receive the encrypted video data and control data sent by the vehicle body.

[0015] The decryption module is used to decrypt the data transmitted by the communication module.

[0016] The identity authentication module is used to perform periodic diagnosis on the decrypted data of the decryption module to determine whether the current user information is valid.

[0017] The intrusion detection module is used to monitor the network security status of the system in real time, detect and prevent unauthorized access and operation.

[0018] The control module is used to receive the video data decrypted by the decryption module, process the video data authenticated by the identity authentication module at the protocol level, and then perform projection control. For the control module, the process of processing data is as follows: Receive the video data decrypted by the decryption module, and process the video data authenticated by the identity authentication module at the protocol level, that is, process and analyze the decrypted plaintext data in real time, such as adjusting the video format to a format suitable for projection by the DLP light source module; Perform operations such as image correction and brightness adjustment on video data to adapt to different road and environmental conditions; Based on the vehicle body control data and road environment information, the control module can dynamically adjust the projection content, brightness and angle, such as projecting driving assistance signs or other information; The processed data is sent to the DLP light source module through the interface of the control module to control the projection content of the DLP light source module.

[0019] The DLP light source module is used to generate a high-resolution projection beam according to the projection control information of the control module.

[0020] Embodiment 2 like Figure 2 As shown, this embodiment provides an information security processing method for a display system for enhancing network information security of a DLP projection vehicle lamp as in Embodiment 1, which comprises the following steps: Step S1, the vehicle body sends the encrypted control signal and video data to the communication module; Step S2: After receiving the data, the communication module pre-processes the data and sends it to the decryption module; Step S3: After receiving the data, the decryption module decrypts it according to the encryption and decryption algorithm; Step S4: The identity authentication module will periodically diagnose the decrypted data to determine whether the current user information is valid; Step S5, the control module receives and processes the video data decrypted by the decryption module, and processes the corresponding video data at the protocol level after the identity authentication is passed; Step S6: The intrusion detection module monitors the network security status of the system in real time during the period from step S1 to step S5, and detects network traffic, system logs and abnormal behaviors to identify potential security threats; Step S7: The DLP light source module projects the correct image or video data.

[0021] In step S3 of this embodiment, after receiving the data, the decryption module performs decryption according to the encryption and decryption algorithm, which specifically includes the following steps: For the decryption module, it is necessary to support the security protocol requirements of the entire vehicle for decryption. Since DLP is a video stream transmitted via Ethernet, AES decryption is performed on each data packet when the data is sent. The encrypted video data and control data are decrypted in reverse using the AES-256 algorithm, and the data is decrypted using the authenticated key to ensure secure data transmission.

[0022] In step S4 of this embodiment, the identity authentication module will periodically diagnose the decrypted data to determine whether the current user information is valid, which specifically includes the following steps: The identity authentication module is designed to prevent external hackers from entering the DLP control system through illegal networks and conducting illegal video delivery, which could lead to driving safety hazards. Therefore, in addition to security verification of the data source itself, the source of the video data is also required to be periodically checked and protected to ensure that the video source is from the DLP system's whitelist.

[0023] Set up a trusted device whitelist for the system. The trusted device whitelist includes registered and authenticated trusted video source devices (such as the central control system inside the vehicle, ADAS system, etc.); The identity authentication module checks each received data stream (video data and control data) to ensure that the source of the data stream matches the device in the trusted device whitelist. Unauthorized devices and network nodes cannot pass the authentication. To further enhance security, the identity authentication module performs identity verification when the device is first connected to check whether the device matches the device in the trusted device whitelist; During the transmission of the data stream, periodic authentication checks are performed on the connected device to recheck whether the device matches the device in the trusted device whitelist.

[0024] The identity authentication module not only authenticates the device when it is first connected, but also periodically re-verifies the source of the video data at fixed time intervals to ensure that the data source is always a device trusted by the system. The interval of periodic authentication can be flexibly set according to the security requirements of the system. Common settings are to authenticate once every 30 seconds or 1 minute to ensure that even if hackers try to forge legitimate devices for short-term attacks, they cannot continue to maintain control of the system.

[0025] In step S6 of this embodiment, the intrusion detection module monitors the network security status of the system in real time during the period of steps S1 to S5, and detects network traffic, system logs and abnormal behaviors to identify potential security threats, which specifically includes the following steps: The intrusion detection module is responsible for real-time monitoring of the network's security status throughout the system's life cycle, detecting abnormal behaviors, potential attacks, and malicious activities to ensure the security of the DLP projection lighting system.

[0026] The intrusion detection module monitors network traffic and checks the header information of traffic packets and the payload content of packets; The intrusion detection module detects the scanning behavior of system ports and identifies potential port scanning attacks by analyzing the pattern of frequent attempts to connect to multiple ports from different source IP addresses; The intrusion detection module collects and analyzes system logs in real time. Through log analysis, the intrusion detection module can promptly discover hidden signs of attacks, such as frequent authentication failures or suspicious file modifications within a specific time period.

[0027] The system log of this embodiment includes: Network connection log: The network connection log is used to record all network connection information in and out of the system, and track the connection time, data volume, video source and target IP of each network node; Security event logs are used to record all authentication, authorization, and network access failures. These logs help detect whether malicious users have attempted to access the system illegally multiple times. File modification log,The file modification log is used to monitor the modification history of important system files and configurations, and prevent hackers from damaging the system by tampering with system configuration files or installing malware.

[0028] The specific embodiments described above further illustrate the technical problems, technical solutions and beneficial effects solved by the present invention. It should be understood that the above are only specific embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A display system for enhancing network information security of DLP projection vehicle lights, characterized in that: It includes: A communication module, used for receiving encrypted video data and control data sent by the vehicle body; A decryption module, used for decrypting data transmitted by the communication module; The identity authentication module is used to perform periodic diagnosis on the decrypted data of the decryption module to determine whether the current user information is valid; Intrusion detection module, used to monitor the network security status of the system in real time, detect and prevent unauthorized access and operation; The control module is used to receive the video data decrypted by the decryption module, process the video data authenticated by the identity authentication module at the protocol level, and then perform projection control; The DLP light source module is used to generate a projection light beam according to the projection control information of the control module.

2. An information security processing method for a display system for enhancing network information security of a DLP projection vehicle lamp as claimed in claim 1, characterized in that: It includes the following steps: Step S1, the vehicle body sends the encrypted control signal and video data to the communication module; Step S2: After receiving the data, the communication module pre-processes the data and sends it to the decryption module; Step S3: After receiving the data, the decryption module decrypts it according to the encryption and decryption algorithm; Step S4: The identity authentication module will periodically diagnose the decrypted data to determine whether the current user information is valid; Step S5, the control module receives and processes the video data decrypted by the decryption module, and performs protocol-level processing on the corresponding video data after identity authentication; Step S6: The intrusion detection module monitors the network security status of the system in real time during the period of steps S1 to S5, and detects network traffic, system logs and abnormal behaviors to identify potential security threats; Step S7: The DLP light source module projects the correct image or video data.

3. The information security processing method according to claim 2, characterized in that: In step S3, after receiving the data, the decryption module performs decryption according to the encryption and decryption algorithm, which specifically includes the following steps: The encrypted video data and control data are decrypted in reverse using the AES-256 algorithm, and the data is decrypted using the authenticated key.

4. The information security processing method according to claim 2, characterized in that: In step S4, the identity authentication module will periodically diagnose the decrypted data to determine whether the current user information is valid, which specifically includes the following steps: Set up a whitelist of trusted devices for the system; The identity authentication module checks each received data stream to ensure that the source of the data stream matches the device in the trusted device whitelist, and unauthorized devices and network nodes cannot pass the authentication; The identity authentication module performs identity authentication when the device is first connected to check whether the device matches the device in the trusted device whitelist; During the transmission of data streams, periodic authentication checks are performed on connected devices to recheck whether the devices match the devices in the trusted device whitelist.

5. The information security processing method according to claim 4, characterized in that: The trusted device whitelist includes registered and authenticated trusted video source devices.

6. The information security processing method according to claim 2, characterized in that: In step S6, the intrusion detection module monitors the network security status of the system in real time during the period of steps S1 to S5, and detects network traffic, system logs and abnormal behaviors to identify potential security threats, which specifically includes the following steps: The intrusion detection module monitors network traffic and checks the header information of the traffic data packet and the payload content of the data packet; The intrusion detection module detects the scanning behavior of the system port and identifies potential port scanning attacks by analyzing the pattern of different source IP addresses trying to connect to multiple ports; The intrusion detection module collects and analyzes system logs in real time.

7. The information security processing method according to claim 6, characterized in that: The system log includes: Network connection log, which is used to record all network connection information entering and leaving the system; A security event log, which is used to record all authentication, authorization and network access failure events; File modification log, which is used to monitor the modification history of system files and configurations.

Images