Internet of vehicles platform permission management method and system, electronic device and storage medium
By employing a multi-level user object authorization control method, administrators and user accounts of the vehicle networking platform are authorized level by level. Combined with organizational structure and role management, this solves the problem of lax user data access control in the vehicle networking platform system, achieving flexible yet rigorous permission management and reducing the risk of information leakage.
Patent Information
- Application Number
- CN202510009612.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-01-03
- Publication Date
- 2026-07-03
AI Technical Summary
Existing vehicle networking platform systems are not rigorous enough in managing the permissions of functional modules, and cannot effectively control the access permissions of different users to vehicle data items, leading to an increased risk of information leakage.
A multi-level user object authorization control method is adopted. The main administrator account is initialized through the platform authorization file, and the vendor administrators and user accounts are authorized level by level. Combined with organizational structure and role management, data access permissions are refined.
It implements flexible and rigorous access control, ensuring that different user objects can only access the data items they should have, reducing the risk of information leakage and improving system security.
Smart Images
Figure CN122339714A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of vehicle networking, and in particular to a method, system, electronic device, and storage medium for managing permissions on a vehicle networking platform. Background Technology
[0002] Early vehicle networking platform systems were mostly developed for transportation companies to achieve vehicle location and monitoring needs. The system's functional permission management was not very well considered. Generally, it was simply geared towards transportation companies, and functional module permissions were allocated according to role management. Once a user had permission for a certain functional module, they could access all the data items provided by that functional module.
[0003] However, in the context of connected and intelligent vehicles, various vehicle networking platform systems collect massive amounts of real-time operational data from various sensors on vehicles. The users of these platforms are also increasing, typically including platform operators, vehicle manufacturers, dealers, financial and insurance companies, transportation companies, fleets, vehicle owners, and drivers. Therefore, in addition to rigorous functional module permission management, vehicle networking platform systems also need data item access control to ensure that different users can access different vehicle data items within the same functional module. Summary of the Invention
[0004] The main objective of this invention is to overcome the aforementioned deficiencies in the prior art and to propose a method, system, electronic device, and storage medium for managing permissions on a vehicle networking platform. This method employs multi-level user object authorization control, which is more flexible and rigorous.
[0005] The present invention adopts the following technical solution:
[0006] A method for managing permissions on a vehicle-to-everything (V2X) platform involves pre-setting a platform authorization file that authorizes platform operators to use the V2X platform.
[0007] The vehicle networking platform is initialized using the platform authorization file, and a general administrator account is generated for use by the platform operator.
[0008] Log in to the vehicle networking platform using the master administrator account to authorize the manufacturer's access to the functions of the vehicle networking platform and create a manufacturer administrator account;
[0009] The manufacturer's administrator can log in to the vehicle networking platform using their account to authorize users to use the platform's functions and create user accounts.
[0010] The platform authorization file is a key file used by the platform operator to use the vehicle networking platform, which includes a temporary super administrator account and password; the general administrator account is generated using the temporary super administrator account and password; after logging into the vehicle networking platform through the general administrator account, the temporary super administrator account is automatically destroyed.
[0011] The platform authorization file also includes a list of permissions authorized to the platform operator. When the vehicle networking platform is initialized, a platform function list for the platform operator is generated based on the permission list. The general administrator account has the function permissions and data permissions of the vehicle networking platform corresponding to the platform function list.
[0012] The system logs into the vehicle networking platform through the master administrator account to authorize manufacturers to use the platform's functional permissions and create manufacturer administrator accounts. Specifically, it creates manufacturer information, assigns platform functional permissions to each manufacturer individually, and creates a manufacturer administrator account for each manufacturer. The manufacturer administrator account has the platform functional permissions and data permissions assigned to the manufacturer.
[0013] Authorize users to use the functions of the vehicle networking platform by logging in with the manufacturer's administrator account, specifically including the following:
[0014] After logging into the vehicle networking platform through the manufacturer's administrator account, an organizational structure and roles are created. The organizational structure has a hierarchical structure. The roles are assigned the range of vehicles they can access and exclusive platform function permissions, and data access permissions are assigned to each platform function. User accounts are created and assigned to a certain level of the organizational structure. Roles are assigned to the user accounts, and the user's access permissions are restricted.
[0015] When a user logs into the vehicle networking platform using the user account, the vehicle networking platform first verifies the legitimacy of the user account to determine whether the user account is allowed to log in. If the user account is allowed, the vehicle networking platform loads the exclusive function permission list for the user's role and the customized open data permissions for each function. The user then accesses the corresponding platform resources according to the exclusive function permissions provided by the vehicle networking platform.
[0016] A vehicle-to-everything (V2X) platform access control system, which pre-configures platform authorization files for authorized platform operators to use the V2X platform; and also includes:
[0017] The initialization module uses the platform authorization file to initialize the vehicle networking platform and generates a master administrator account for use by the platform operator.
[0018] The manufacturer management module is used to authorize manufacturers to use the functional permissions of the vehicle networking platform and create manufacturer administrator accounts after logging in through the general administrator account;
[0019] The user management module is used to authorize users to use the functions of the vehicle networking platform and create user accounts after logging in through the manufacturer's administrator account.
[0020] It also includes an organization management module, a role management module, a function permission management module, and a data permission management module; the organization management module and the role management module are used to create organizational structures and assign roles respectively after the vendor administrator account logs in; the function permission management module is used to provide the role management module with a detailed list of platform functions that can be assigned; the data permission management module is used to provide the function permission management module with a list of all data items that can be accessed in each platform function.
[0021] An electronic device, characterized in that the device includes a processor and a memory, wherein the memory stores at least one instruction or at least one program, and the at least one instruction or the at least one program is loaded and executed by the processor using the vehicle networking platform permission management method.
[0022] A computer-readable storage medium, characterized in that the storage medium stores at least one instruction or at least one program, wherein the at least one instruction or at least one program is loaded and executed by a processor to implement the vehicle network platform permission management method.
[0023] As can be seen from the above description of the present invention, compared with the prior art, the present invention has the following beneficial effects:
[0024] This invention employs a multi-level user object authorization control method, and adds data item access permission control on the basis of platform function permission control. It designs a more flexible and rigorous platform user access permission authorization management system, which can customize minimum data item access permissions for various user objects of the platform system while ensuring that the platform system will not be accessed by unauthorized access to functional modules, thereby avoiding the exposure of too many data items and causing information leakage. Attached Figure Description
[0025] Figure 1 This is a schematic diagram of the overall system structure of the present invention;
[0026] Figure 2 This is a diagram illustrating the three-part authorization control mechanism;
[0027] Figure 3 This is a diagram illustrating the initial permissions for the platform operator.
[0028] Figure 4This is a diagram illustrating the authorization of manufacturer functions and permissions.
[0029] Figure 5 A diagram illustrating user permission authorization;
[0030] Figure 6 This is a diagram illustrating the restriction of user access.
[0031] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. Detailed Implementation
[0032] The present invention will be further described below through specific embodiments.
[0033] See Figure 1 , Figure 2 The present invention discloses a vehicle network platform permission management method, which adopts a multi-level user object authorization control method to manage the vehicle network platform. The objects using the vehicle network include platform contractors, platform operators, and manufacturers. The platform contractor is the platform developer, responsible for the development and construction of the platform; the platform operator is the platform owner, responsible for the overall operation and management of the platform; and the manufacturer can be a vehicle manufacturer, which manages the company's internal organizational structure and vehicles through the platform.
[0034] The platform pre-configures a platform authorization file for authorized platform operators to use the vehicle-to-everything (V2X) platform. This authorization file serves as the key file allowing the platform operator to use the V2X platform. As shown in the table below, the platform authorization file primarily includes the temporary super administrator account and password, the platform operator's name and unique identifier, the platform authorization period, the platform initialization date, the number of days the platform has been used, and a list of platform functions authorized to the operator. The super administrator is a temporary administrator used by the platform contractor during platform initialization.
[0035]
[0036] The method of the present invention includes the following steps:
[0037] S1 uses the platform authorization file to initialize the vehicle networking platform and generates a master administrator account for use by the platform operator.
[0038] This step is the first level of the three-tier authorization control system: platform operator initialization of permission authorization. Platform initialization is a functional module used by the platform contractor to initialize the platform; it requires importing the platform authorization file to complete the initialization operation. See also... Figure 3 Specifically, it includes the following:
[0039] The S1.1 platform contractor imports the platform authorization document into the vehicle networking platform. Based on the platform function list in the authorization document, the vehicle networking platform generates a platform function list exclusive to the platform operator.
[0040] S1.2 Use the temporary super administrator account and password provided with the platform authorization document to generate a master administrator account for the platform operator. The master administrator account is provided to the platform operator as the master administrator for managing the platform. The master administrator account has all functional permissions of the platform after initialization according to the authorization document.
[0041] S1.3 is configured so that after the platform operator logs in to the platform using the master administrator account, the temporary super administrator is automatically destroyed and can no longer access the platform. This ensures that the platform contractor does not reserve a super account to access the platform, reducing the risk of platform data leakage.
[0042] S2 logs into the vehicle networking platform using the master administrator account to authorize the manufacturer's access to the platform's functions and creates a manufacturer administrator account. This step is the second level of the three-tier authorization control system, specifically authorizing manufacturer permissions.
[0043] The platform operator uses the platform's administrator account to operate and manage the platform independently. This administrator possesses all authorized functional and data permissions for the platform and can further create manufacturer administrator accounts and assign platform functional permissions to their clients, typically vehicle manufacturers. (See [link to documentation]). Figure 4 Specifically, it includes the following:
[0044] After logging into the platform using the master management account, the S2.1 platform operator can create manufacturer information for vehicle manufacturers. Multiple manufacturers can be created, each manufacturer being an independent node, and the data between manufacturers is completely isolated.
[0045] S2.2 Assigns platform function permissions individually to each vendor, restricting the functions available to the vendor. Depending on the vendor's needs, the platform operator can choose to assign all authorized function permissions to the vendor, or select specific functions from the function list for allocation.
[0046] S2.3 creates a vendor administrator account for each vendor. By default, the vendor administrator has all the functional permissions assigned to them by the platform operator, as well as all data access permissions for each functional module.
[0047] S3 logs into the vehicle networking platform through the manufacturer's administrator account to authorize users' access to the platform's functions and create user accounts. This step is the third level of the three-tier authorization control system, where the manufacturer's administrator authorizes user permissions.
[0048] Vehicle manufacturers can access the platform using the manufacturer administrator account assigned to them by the platform operator. They can then further customize their organizational structure, user roles, user accounts, and allocate platform function permissions according to their own operational and management needs. See also Figure 5Specifically, it includes the following:
[0049] After logging into the platform with their vendor administrator account and password, vendor administrators in S3.1 can create organizational structures according to their own business management needs. These organizational structures are hierarchical, with the vendor serving as the top-level node.
[0050] S3.2 Create a role, assign the range of vehicles that the role can access, assign platform function permissions specific to the role, and assign data access permissions to each function.
[0051] S3.3 Create a user account. The user belongs to a specific level of the organizational hierarchy. Assign roles to the user account to restrict the user's access permissions. The user account can then log in to the platform and access platform resources within the limits of its role.
[0052] The invention also includes step S4, which restricts user access; see below. Figure 6 As shown below:
[0053] S4.1 When a user logs in to the platform with their username and password, the legitimacy of the username is first verified to determine whether the username is allowed to log in to the platform.
[0054] S4.2 When a user account is allowed to log in to the platform, based on the user's role attributes, load the exclusive function permission list for that role and the customized open data permissions for each function.
[0055] S4.3 users can access relevant platform resources based on the exclusive functional permissions provided by the platform.
[0056] Based on this, the present invention also provides a vehicle network platform access control system, which implements three-level authorization control using the above-mentioned vehicle network platform access control method, comprising:
[0057] The initialization module is used by the platform contractor to initialize the vehicle networking platform using the platform authorization file and generate a master administrator account for use by the platform operator. The initialization module executes step S1 of the aforementioned vehicle networking platform permission management method.
[0058] The manufacturer management module is a functional module used by the platform operator to manage vehicle manufacturers, i.e., the manufacturers. It assigns platform function permissions and manufacturer administrator accounts to vehicle manufacturers. After the platform operator logs in using the master administrator account, it authorizes manufacturers to use the vehicle networking platform's function permissions and creates manufacturer administrator accounts. The manufacturer management module is used to execute step S2 of the aforementioned vehicle networking platform permission management method.
[0059] The user management module is used to authorize users' access to the vehicle networking platform and create user accounts after the vehicle manufacturer logs in with the manufacturer administrator account. The user management module is used to execute step S3 of the aforementioned vehicle networking platform permission management method.
[0060] This invention also includes an organization management module, a role management module, a function permission management module, and a data permission management module. The organization management module and the role management module are used to create organizational structures and assign roles after the vendor administrator account logs in. The organization management module is used by the vendor administrator to manage the internal organizational structure of their company, which is similar to departments and branches, such as production departments, sales departments, maintenance departments, and agents. The role management module is used by the vendor administrator to define various user roles, allowing for convenient allocation of exclusive platform access permissions to users of the same type.
[0061] The Function Access Management module provides the Role Management module with a detailed list of platform functions that can be assigned. This list is allocated to the vehicle manufacturer by the platform operator through the Manufacturer Management module, and each manufacturer has its own exclusive platform function list. The Data Access Management module provides the Function Access Management module with a list of all accessible data items for each platform function. After creating roles through the Role Management module, the manufacturer administrator assigns function module permissions to the roles and allocates accessible data items to each function module.
[0062] The system of this invention also includes a vehicle management module and a user access management module. The vehicle management module is used by vehicle manufacturers to manage information about the vehicles they produce and sell. The data item list provided in the data access management module refers to various types of data generated around the vehicle, including file information, operating condition data, etc.
[0063] The user access management module is used to verify whether a user can log in to the platform and to restrict the user's access to limited platform functions and data based on the user's role. User account information is provided by the user management module.
[0064] The method and system of this invention provide a multi-level user object authorization control method, and add data item access permission control on the basis of platform function permission control. It designs a more flexible and rigorous platform user access permission authorization management system, which can customize the minimum data item access permissions for various user objects of the platform system while ensuring that the platform system will not be illegally accessed by unauthorized access to functional modules, thereby avoiding the exposure of too many data items and causing information leakage.
[0065] Based on this, the present invention also proposes an electronic device, the device including a processor and a memory, the memory storing at least one instruction or at least one program, the at least one instruction or at least one program being loaded and executed by the processor to implement the above-mentioned vehicle networking platform permission management method.
[0066] The present invention also proposes a computer-readable storage medium storing at least one instruction or at least one program, wherein the at least one instruction or at least one program is loaded and executed by a processor to implement the above-described vehicle network platform access control method. This computer-readable medium may be included in the electronic device described in the above embodiments; or it may exist independently and not assembled into the electronic device.
[0067] The aforementioned computer-readable medium carries one or more programs that, when executed by an electronic device, cause the electronic device to implement the methods described in the above embodiments.
[0068] It should be noted that although several modules or units for the device used to perform actions have been mentioned in the detailed description above, this division is not mandatory. In fact, according to embodiments of this disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.
[0069] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, touch terminal, or network device, etc.) to execute the method according to the embodiments of this disclosure.
[0070] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein.
[0071] The above are merely specific embodiments of the present invention, but the design concept of the present invention is not limited thereto. Any non-substantial modifications made to the present invention using this concept shall be considered as infringing upon the protection scope of the present invention.
Claims
1. A method for managing permissions of an Internet of Vehicles platform, characterized in that, Pre-configure the platform authorization file for authorized platform operators to use the vehicle networking platform; The vehicle networking platform is initialized using the platform authorization file, and a general administrator account is generated for use by the platform operator. Log in to the vehicle networking platform using the master administrator account to authorize the manufacturer's access to the functions of the vehicle networking platform and create a manufacturer administrator account; The manufacturer's administrator can log in to the vehicle networking platform using their account to authorize users to use the platform's functions and create user accounts. 2.The Internet of Vehicles platform permission management method of claim 1, wherein, The platform authorization file is the key file for the platform operator to use the vehicle networking platform, which includes a temporary super administrator account and password; The temporary super administrator account and password are used to generate the main administrator account; after logging into the vehicle network platform through the main administrator account, the temporary super administrator account is automatically destroyed. 3.The method of claim 1, wherein, The platform authorization file also includes a list of permissions authorized to the platform operator. When the vehicle networking platform is initialized, a platform function list for the platform operator is generated based on the permission list. The general administrator account has the function permissions and data permissions of the vehicle networking platform corresponding to the platform function list. 4.The method of claim 1, wherein, The system logs into the vehicle networking platform through the master administrator account to authorize manufacturers to use the platform's functional permissions and create manufacturer administrator accounts. Specifically, it creates manufacturer information, assigns platform functional permissions to each manufacturer individually, and creates a manufacturer administrator account for each manufacturer. The manufacturer administrator account has the platform functional permissions and data permissions assigned to the manufacturer. 5.The method of claim 1, wherein, Authorize users to use the functions of the vehicle networking platform by logging in with the manufacturer's administrator account, specifically including the following: After logging into the vehicle networking platform through the manufacturer's administrator account, an organizational structure and roles are created. The organizational structure has a hierarchical structure. The roles are assigned the range of vehicles they can access and exclusive platform function permissions, and data access permissions are assigned to each platform function. Create a user account and assign it to a specific level of organization within the organizational structure. Assign roles to the user account and restrict the user's access permissions. 6.The method of claim 1, wherein, When a user logs into the vehicle networking platform using the user account, the vehicle networking platform first verifies the legitimacy of the user account to determine whether the user account is allowed to log in. If the user account is allowed, the vehicle networking platform loads the exclusive function permission list for the user's role and the customized open data permissions for each function. The user then accesses the corresponding platform resources according to the exclusive function permissions provided by the vehicle networking platform.
7. An Internet of Vehicles platform permission management system, characterized in that, A pre-configured platform authorization document for authorized platform operators to use the vehicle networking platform; also includes: The initialization module uses the platform authorization file to initialize the vehicle networking platform and generates a master administrator account for use by the platform operator. The manufacturer management module is used to authorize manufacturers to use the functional permissions of the vehicle networking platform and create manufacturer administrator accounts after logging in through the general administrator account; The user management module is used to authorize users to use the functions of the vehicle networking platform and create user accounts after logging in through the manufacturer's administrator account. 8.The system of claim 7, wherein, It also includes an organization management module, a role management module, a function permission management module, and a data permission management module; The organization management module and role management module are used to create organizational structures and assign roles respectively after the vendor administrator account logs in. The function permission management module is used to provide the role management module with a detailed list of platform functions that can be assigned. The data permission management module is used to provide the function permission management module with a list of all data items that can be accessed in each platform function.
9. An electronic device, comprising: The device includes a processor and a memory, wherein the memory stores at least one instruction or at least one program, and the at least one instruction or the at least one program is loaded and executed by the processor according to any one of claims 1-6.
10. A computer readable storage medium characterized by The storage medium stores at least one instruction or at least one program, which is loaded and executed by a processor to implement the vehicle networking platform permission management method as described in any one of claims 1-6.