Intelligent terminal data transmission method and device

Abstract

The present invention provides a method and device for transmitting data of an intelligent terminal. After establishing a link with the first platform, a first authentication result is obtained according to a first authentication instruction. When the first authentication result is authentication passed, data signal acquisition is performed through a first module to obtain a first data signal set. The first data signal set is sent to a second module through the first module, and the first data signal set is packaged through the second module. The first package data is serialized through the second module, and the first processing result data is compressed and encrypted through the second module to obtain a first data encryption result. The first data encryption result is encrypted and verified, and when the encryption verification passes, the first data encryption result is sent to the first platform. The technical problem that the data transmission efficiency is low and the data security is difficult to ensure in the process of vehicle data acquisition and transmission in the prior art is solved.

Description

Technical Field

[0001] The present invention relates to the field of automobile data transmission, and in particular to a smart terminal data transmission method and device. Background Art

[0002] In today's society, cars have become an indispensable means of transportation in people's lives. With the development of science and technology and the improvement of people's living standards, people's requirements for cars are getting higher and higher. Cars are no longer just ordinary means of transportation, but have become a culture and a symbol. The importance of cars is self-evident. With the increasing number of traffic accidents today, safety and energy saving are the direction and eternal theme of automobile development.

[0003] Technology is constantly driving the updating and iteration of automotive equipment, and big data is becoming an inevitable trend in the development of the Internet. With the development of technologies such as 5G (5th-Generation), smart driving, and V2X (Vehicle-to-Everything), the amount of vehicle data monitoring has increased dramatically, and the effectiveness, stability, and security of the data are also increasing.

[0004] However, in the process of implementing the technical solution of the invention in this application, it is found that the above technology has at least the following technical problems:

[0005] In the process of vehicle data collection and transmission in the prior art, there are technical problems such as low data transmission efficiency and difficulty in ensuring data security. Summary of the invention

[0006] The embodiments of the present invention provide a smart terminal data transmission method and device, which solve the technical problems in the prior art of vehicle data collection and transmission, that is, low data transmission efficiency and difficulty in ensuring data security.

[0007] In order to solve the above technical problems, the present invention adopts the following technical solutions:

[0008] According to one aspect of the present invention, a smart terminal data transmission method is provided, which is applied to a vehicle-mounted network terminal, wherein the vehicle-mounted network terminal has a built-in first chip, a first module, and a second module, and the vehicle-mounted network terminal is communicatively connected to a first platform, and the method includes:

[0009] After establishing a link with the first platform, obtaining a first authentication instruction;

[0010] According to the first authentication instruction, perform certificate authentication of the in-vehicle network terminal, the first chip, and the first platform to obtain a first authentication result;

[0011] When the first authentication result is authentication passed, data signal collection is performed through the first module to obtain a first data signal set;

[0012] Sending the first data signal set to the second module through the first module, and performing packet processing on the first data signal set through the second module to obtain a first group of packet data;

[0013] Performing data serialization processing on the first group of package data by the second module to obtain a first processing result;

[0014] The first processing result data is compressed and then encrypted by the second module to obtain a first data encryption result;

[0015] Performing data encryption verification on the first data encryption result, and when the encryption verification passes, sending the first data encryption result to the first platform.

[0016] Optionally, performing certificate authentication of the in-vehicle networking terminal, the first chip, and the first platform according to the first authentication instruction to obtain a first authentication result includes:

[0017] Obtaining a first random number generating instruction according to the first authentication instruction, and sending the first random number generating instruction to the first chip;

[0018] Obtaining a first encrypted random number through the first chip, wherein the first encrypted random number is a random number encrypted by the first chip based on a platform public key;

[0019] Sending the first encrypted random number to the first platform to obtain a first feedback ciphertext;

[0020] Sending the first feedback ciphertext to the first chip to obtain a first reply authentication result of the first chip;

[0021] Obtain a second encrypted random number according to the first reply authentication result, send the second encrypted random number to the first chip, and obtain a second feedback ciphertext from the first chip;

[0022] The second feedback ciphertext is sent to the first platform to obtain the first authentication result of the first platform.

[0023] Optionally, sending the first encrypted random number to the first platform to obtain a first feedback ciphertext includes:

[0024] Decrypting the first encrypted random number based on the platform private key through the first platform to obtain a first random number;

[0025] Signing a certificate based on the platform private key through the first platform to obtain first signature information;

[0026] The first signature information is encrypted based on the first random number through the first platform, and the first feedback ciphertext is obtained according to the encryption result.

[0027] Optionally, sending the first feedback ciphertext to the first chip to obtain a first reply authentication result of the first chip includes:

[0028] decrypting the first feedback ciphertext based on the first random number through the first chip to obtain the first signature information;

[0029] The first chip performs signature verification and authentication on the first signature information based on the platform public key, and obtains the first reply authentication result according to the signature verification and authentication result.

[0030] Optionally, obtaining a second encrypted random number according to the first reply authentication result, sending the second encrypted random number to the first chip, and obtaining a second feedback ciphertext of the first chip includes:

[0031] When the first reply authentication result is authentication success, sending the first reply authentication result to the first platform;

[0032] Obtaining the second encrypted random number, wherein the second encrypted random number is a random number generated by the first platform according to the first reply authentication result and encrypted with the SE public key;

[0033] Sending the second encrypted random number to the first chip, and decrypting the second encrypted random number by the first chip using the SE private key to obtain a second random number;

[0034] Performing certificate signing based on the SE private key by the first chip to obtain second signature information;

[0035] The second signature is encrypting based on the second random number by the first chip to obtain the second feedback ciphertext.

[0036] Optionally, sending the second feedback ciphertext to the first platform to obtain the first authentication result of the first platform includes:

[0037] Decrypting the second feedback ciphertext based on the second random number through the first platform to obtain the second signature information;

[0038] The first platform verifies and authenticates the second signature information based on the SE public key to obtain the first authentication result.

[0039] Optionally, the first group of package data is serialized by the second module based on protocol buffer 3 to obtain the first processing result.

[0040] Optionally, the first processing result data is compressed by the second module based on snappy, and encryption is performed according to the data compression result to obtain the first data encryption result.

[0041] According to another aspect of the present invention, there is provided a smart terminal data transmission device, the device comprising:

[0042] A first obtaining module, used to obtain a first authentication instruction after establishing a link with the first platform;

[0043] A second obtaining module is used to perform certificate authentication of the vehicle-mounted network connection terminal, the first chip, and the first platform according to the first authentication instruction, and obtain a first authentication result;

[0044] A third obtaining module is used to collect data signals through the first module to obtain a first data signal set when the first authentication result is authentication passed;

[0045] a fourth obtaining module, configured to send the first data signal set to a second module through the first module, and perform packet processing on the first data signal set through the second module to obtain a first group of packet data;

[0046] A first processing module, configured to perform data serialization processing on the first group of package data through the second module to obtain a first processing result;

[0047] A second processing module, configured to compress the first processing result data and then perform encryption processing through the second module to obtain a first data encryption result;

[0048] The first sending module is used to perform encryption verification on the first data encryption result, and when the encryption verification passes, send the first data encryption result to the first platform.

[0049] According to another aspect of the present invention, a control device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the method described in the first aspect when executing the program.

[0050] According to another aspect of the present invention, a car is provided, comprising the smart terminal data transmission device as described above.

[0051] According to another aspect of the present invention, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the smart terminal data transmission method described above are implemented.

[0052] The beneficial effects of the present invention are:

[0053] The above scheme establishes a connection with the platform through the on-board Internet terminal, and performs an authentication process after the connection is established. When the authentication is passed, the MCU (Motor Control Unit) collects the vehicle data through the controller area network (Controller Area Network, CAN for short), and transmits the data to the MPU (Microprocessor Unit) for processing. After the MPU performs data serialization, data compression, and data encryption verification on the CAN original data, the data is sent to the platform through TCP (Transmission Control Protocol) to ensure that the data can be transmitted to the enterprise platform for display more efficiently, securely and stably. For security reasons, the two-way authentication between the terminal and the platform is strengthened, so as to achieve the technical effect of improving the security and stability of data transmission, saving communication data traffic, and improving data transmission efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] Figure 1 A schematic diagram of a flow chart of a smart terminal data transmission method provided by an embodiment of the present invention;

[0055] Figure 2 A schematic diagram of the structure of a smart terminal data transmission device provided by an embodiment of the present invention.

[0056] Description of reference numerals:

[0057] 11 - first acquisition module; 12 - second acquisition module; 13 - third acquisition module; 14 - fourth acquisition module; 15 - first processing module; 16 - second processing module; 17 - first sending module. DETAILED DESCRIPTION

[0058] In order to make the objectives, technical solutions and advantages of the present invention more clear, the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments.

[0059] The present invention aims to provide a smart terminal data transmission method and device in view of the problems that, in the process of vehicle data collection and transmission in the prior art, the data transmission efficiency is low and the data security is difficult to ensure.

[0060] like Figure 1As shown, one embodiment of the present invention provides a smart terminal data transmission method, which is applied to a vehicle-mounted network terminal, wherein the vehicle-mounted network terminal has a built-in first chip, a first module, and a second module, and the vehicle-mounted network terminal is communicatively connected to a first platform, and the method includes:

[0061] Step S11: after establishing a link with the first platform, obtaining a first authentication instruction;

[0062] Step S12: performing certificate authentication of the vehicle-mounted network connection terminal, the first chip, and the first platform according to the first authentication instruction, and obtaining a first authentication result;

[0063] Specifically, the vehicle-mounted network terminal (Telematics BOX, referred to as T-BOX) is the front-end device of the vehicle monitoring and management system, which is generally secretly installed in various vehicles. The vehicle-mounted terminal device is mainly composed of various external devices such as a vehicle-mounted video server, an LCD (Liquid Crystal Display) touch screen, an external camera, a call handle, and a car anti-theft device, which can collect vehicle data. The first chip is a built-in security chip SE, the first module is an MCU module, that is, a micro control unit module, and the second module is an MPU module, that is, a microprocessor module. The first platform can be an enterprise TSP monitoring platform. The first platform is connected to the vehicle-mounted network terminal for communication and data exchange. Before data collection and transmission, a link is established between the vehicle-mounted network terminal and the first platform. When the link is successfully established, a first authentication instruction is obtained. The first authentication instruction is used to perform two-way authentication between the first platform and the vehicle-mounted network terminal. According to the first authentication instruction, the certificate authentication of the vehicle-mounted network terminal, the first chip, and the first platform is performed.

[0064] Further, the authentication process includes generating a random number through the first chip, and performing RSA encryption according to the random number and the platform public key, sending the encryption result to the vehicle-mounted network terminal, the vehicle-mounted network terminal sending the encryption result to the first platform, decrypting through the first platform, AES128 encrypting the signature information of the random number, and sending it to the vehicle-mounted network terminal, the vehicle-mounted network terminal performs signature verification authentication through the first chip, sends the signature verification authentication result to the vehicle-mounted network terminal, sends the signature verification authentication result to the first platform, generates a second random number through the first platform, and encrypts the second random number, sends the encrypted second random number to the vehicle-mounted network terminal, forwards it to the first chip through the vehicle-mounted network terminal, decrypts through the first chip, and signs the certificate with the obtained second random number, encrypts the signature information and sends it to the vehicle-mounted network terminal, sends the encrypted signature information to the first platform for authentication through the vehicle-mounted network terminal, and sends the authentication result to the vehicle-mounted network terminal, and the authentication result is the first authentication result. Through two-way hardware encryption authentication, the encryption level is strengthened and the stability is improved, achieving the technical effect of improving the security of data transmission.

[0065] Step S13: When the first authentication result is authentication passed, data signal collection is performed through the first module to obtain a first data signal set;

[0066] Step S14: sending the first data signal set to the second module through the first module, and performing packet processing on the first data signal set through the second module to obtain a first packet data set;

[0067] Specifically, when the first authentication result received by the vehicle-mounted network terminal is a result of authentication passing, data transmission with the first platform can be performed. First, the vehicle data is collected through the first module of the vehicle-mounted network terminal, that is, the MUC module. The collection process is as follows: MCU collects the whole vehicle data through CAN, and obtains the first data signal set according to the collection result. When the collection is completed, the first module transmits the first data signal set to the second module, and the second module is the MPU module. The MPU module packages the CAN original data to obtain the first package data. The packaging process is a process of assembling according to a self-defined protocol. Through the collection and packaging of data, a solid foundation is laid for the subsequent encryption and compression of data.

[0068] Step S15: performing data serialization processing on the first group of package data through the second module to obtain a first processing result;

[0069] Step S16: compressing the first processing result data and then performing encryption processing through the second module to obtain a first data encryption result;

[0070] Step S17: Performing data encryption verification on the first data encryption result, and when the encryption verification passes, sending the first data encryption result to the first platform.

[0071] Further, the first group of package data is serialized by the second module based on the protocol buffer3 method to obtain the first processing result;

[0072] Furthermore, the first processing result data is compressed by the second module based on snappy, and encrypted according to the data compression result to obtain the first data encryption result.

[0073] Specifically, the data serialization process refers to the process of converting the state information of a data object into a form that can be stored or transmitted. The data serialization process of the present application is preferably the protocol buffer 3 method, which can serialize structured data in binary format and has the advantage of being able to deserialize the serialized data to restore the original data structure. The data it represents can be more efficient and the data can be compressed smaller. The first group of package data is serialized by the protocol buffer 3 method to obtain a first processing result, wherein the first processing result is the result after the serialization process. Data compression is a technical method for reducing the amount of data to reduce storage space, improve its transmission, storage and processing efficiency, or reorganize the data according to a certain algorithm to reduce data redundancy and storage space without losing useful information. The data of the present application is preferably compressed by the snappy method, and the volume will be reduced by about 1 / 3 of the original after data compression, so as to achieve the effect of subsequently increasing the transmission speed of data. The data encryption verification follows the previous method to ensure the security and integrity of the data. When the encryption verification passes, the first data encryption result is sent to the first platform. Through the process of data serialization, compression and encryption, the security of the data is guaranteed, the volume of the data is reduced, and the transmission efficiency of the data set can be improved.

[0074] Optionally, performing certificate authentication of the in-vehicle networking terminal, the first chip, and the first platform according to the first authentication instruction to obtain a first authentication result includes:

[0075] Obtaining a first random number generating instruction according to the first authentication instruction, and sending the first random number generating instruction to the first chip;

[0076] Obtaining a first encrypted random number through the first chip, wherein the first encrypted random number is a random number encrypted by the first chip based on a platform public key;

[0077] Sending the first encrypted random number to the first platform to obtain a first feedback ciphertext;

[0078] Sending the first feedback ciphertext to the first chip to obtain a first reply authentication result of the first chip;

[0079] Obtain a second encrypted random number according to the first reply authentication result, send the second encrypted random number to the first chip, and obtain a second feedback ciphertext from the first chip;

[0080] The second feedback ciphertext is sent to the first platform to obtain the first authentication result of the first platform.

[0081] Specifically, the vehicle-mounted network terminal obtains the first random number generation instruction through the first authentication instruction, and sends the first random number generation instruction to the first chip through the vehicle-mounted network terminal. After receiving the first random number generation instruction, the first chip generates a first random number, and performs RSA encryption on the first random number through the platform public key to generate a first encrypted random number, and feeds back the first encrypted random number to the vehicle-mounted network terminal. The vehicle-mounted network terminal sends the received first encrypted random number to the first platform. After receiving the first encrypted random number, the first platform first performs decryption processing to obtain the first random number. The first feedback ciphertext is obtained according to the first random number, platform private key, and signature information obtained by decryption. The first feedback ciphertext is sent to the vehicle-mounted network terminal through the first platform. After receiving the first feedback ciphertext, the vehicle-mounted network terminal sends the first feedback ciphertext to the first chip for signature verification and authentication. The first chip sends the result of the signature verification and authentication to the vehicle-mounted network terminal. If the signature verification and authentication fails at this time, the link between the vehicle-mounted network terminal and the first platform is disconnected. If the authentication is successful, the first reply authentication result is sent to the first platform, and the second random number is obtained through the first platform, and the second random number is RSA encrypted through the first platform through the SE public key, and the encryption result is fed back to the vehicle networking terminal. The vehicle networking terminal sends the encryption result (i.e., the second encrypted random number) to the first chip, and after decryption through the first chip, the second feedback ciphertext is obtained based on the SE private key, signature information, and the second random number obtained by decryption, and the second feedback ciphertext is sent to the vehicle networking terminal. The vehicle networking terminal forwards the second feedback ciphertext to the first platform, and after decryption of the second feedback ciphertext through the first platform, the signature verification authentication is performed to obtain the first authentication result. According to the result of the signature verification authentication, it is decided whether to perform data transmission between the vehicle networking terminal and the first platform, so as to achieve the technical effect of improving data security.

[0082] Optionally, sending the first encrypted random number to the first platform to obtain a first feedback ciphertext includes:

[0083] Decrypting the first encrypted random number based on the platform private key through the first platform to obtain a first random number;

[0084] Signing a certificate based on the platform private key through the first platform to obtain first signature information;

[0085] The first signature information is encrypted based on the first random number through the first platform, and the first feedback ciphertext is obtained according to the encryption result.

[0086] Specifically, after receiving the first encrypted random number sent by the vehicle-mounted network terminal, the first platform decrypts the first encrypted random number using the platform private key to obtain a decryption result, which is the first random number. The certificate is signed using the platform private key to obtain first signature information, and the first platform performs AES128 encryption on the first signature information based on the first random number obtained by decryption, obtains the first feedback ciphertext based on the encryption result, and sends the first feedback ciphertext to the vehicle-mounted network terminal.

[0087] Optionally, sending the first feedback ciphertext to the first chip to obtain a first reply authentication result of the first chip includes:

[0088] decrypting the first feedback ciphertext based on the first random number through the first chip to obtain the first signature information;

[0089] The first chip performs signature verification and authentication on the first signature information based on the platform public key, and obtains the first reply authentication result according to the signature verification and authentication result.

[0090] Specifically, after the first chip receives the first feedback ciphertext, the first chip performs AES128 decryption of the first feedback ciphertext according to the first random number, obtains the first signature information, and then verifies the first signature information through the platform public key, obtains the first reply authentication result based on the signature verification and authentication result, and sends the first reply authentication result to the vehicle-mounted network terminal through the first chip.

[0091] Optionally, obtaining a second encrypted random number according to the first reply authentication result, sending the second encrypted random number to the first chip, and obtaining a second feedback ciphertext of the first chip includes:

[0092] When the first reply authentication result is authentication success, sending the first reply authentication result to the first platform;

[0093] Obtaining the second encrypted random number, wherein the second encrypted random number is a random number generated by the first platform according to the first reply authentication result and encrypted with the SE public key;

[0094] Sending the second encrypted random number to the first chip, and decrypting the second encrypted random number by the first chip using the SE private key to obtain a second random number;

[0095] Performing certificate signing based on the SE private key by the first chip to obtain second signature information;

[0096] The second signature is encrypting based on the second random number by the first chip to obtain the second feedback ciphertext.

[0097] Specifically, when the first authentication result is successful authentication, the first reply authentication result is sent to the first platform, the first platform generates a second random number based on the first reply authentication result, performs RSA encryption on the second random number through the SE public key to obtain the second encrypted random number, and sends the second encrypted random number to the vehicle network terminal, the vehicle network terminal forwards the second encrypted random number to the first chip, the first chip decrypts the second encrypted random number through the SE private key to obtain the second random number, the certificate is signed by the first chip using the SE private key to obtain the second signature information, the second signature information is encrypted by AES128 through the second random number to obtain the second feedback ciphertext, and the second feedback ciphertext is sent to the vehicle network terminal.

[0098] Optionally, sending the second feedback ciphertext to the first platform to obtain the first authentication result of the first platform includes:

[0099] Decrypting the second feedback ciphertext based on the second random number through the first platform to obtain the second signature information;

[0100] The first platform verifies and authenticates the second signature information based on the SE public key to obtain the first authentication result.

[0101] Specifically, after the first platform receives the second feedback ciphertext, the first platform performs AES128 decryption of the second feedback ciphertext based on the second random number to obtain the second signature information, and verifies and authenticates the second signature information through the SE public key. When the verification and authentication fails, the link between the vehicle-mounted network terminal and the first platform is disconnected, and the authentication failure result is returned to end the process; when the verification and authentication succeeds, the first authentication result is obtained, and the first authentication result is sent to the vehicle-mounted network terminal.

[0102] In the embodiment of the present invention, a connection is established between the vehicle-mounted network terminal and the platform. After the connection is established, an authentication process is performed. When the authentication is passed, the MCU collects the vehicle data through CAN and transmits the data to the MPU for processing. After the MPU performs data serialization, data compression, and data encryption verification on the original CAN data, the data is sent to the platform through the TCP protocol to ensure that the data can be transmitted to the enterprise platform for display more efficiently, safely and stably. For security reasons, the two-way authentication between the terminal and the platform is strengthened to achieve the technical effect of improving the security and stability of data transmission, saving communication data traffic, and improving data transmission efficiency. Through the process of data serialization, compression and encryption, the security of the data is guaranteed, the volume of the data is reduced, and the technical effect of improving the transmission efficiency of the data set is achieved.

[0103] The embodiment of the present invention further provides a smart terminal data transmission device, which is applied to a vehicle-mounted network terminal, wherein the vehicle-mounted network terminal has a built-in first chip, a first module, and a second module, and the vehicle-mounted network terminal is connected to the first platform for communication, such as Figure 2 As shown, the device comprises:

[0104] A first obtaining module 21, configured to obtain a first authentication instruction after establishing a link with the first platform;

[0105] A second obtaining module 22 is used to perform certificate authentication of the vehicle-mounted network terminal, the first chip, and the first platform according to the first authentication instruction, and obtain a first authentication result;

[0106] A third obtaining module 23 is used to collect data signals through the first module to obtain a first data signal set when the first authentication result is authentication passed;

[0107] A fourth obtaining module 24, configured to send the first data signal set to a second module through the first module, and perform packet processing on the first data signal set through the second module to obtain a first packet data set;

[0108] A first processing module 25, configured to perform data serialization processing on the first group of package data through the second module to obtain a first processing result;

[0109] A second processing module 26, configured to compress the first processing result data and then perform encryption processing through the second module to obtain a first data encryption result;

[0110] The first sending module 27 is used to perform encryption verification on the first data encryption result, and when the encryption verification passes, send the first data encryption result to the first platform.

[0111] Optionally, the second obtaining module 22 includes:

[0112] A first obtaining unit, configured to obtain a first random number generating instruction according to the first authentication instruction, and send the first random number generating instruction to the first chip;

[0113] A second obtaining unit, configured to obtain a first encrypted random number through the first chip, wherein the first encrypted random number is a random number encrypted by the first chip based on a platform public key;

[0114] A third obtaining unit, configured to send the first encrypted random number to the first platform to obtain a first feedback ciphertext;

[0115] A fourth obtaining unit, configured to send the first feedback ciphertext to the first chip to obtain a first reply authentication result of the first chip;

[0116] a fifth obtaining unit, configured to obtain a second encrypted random number according to the first reply authentication result, send the second encrypted random number to the first chip, and obtain a second feedback ciphertext of the first chip;

[0117] The sixth obtaining unit is used to send the second feedback ciphertext to the first platform to obtain the first authentication result of the first platform.

[0118] Optionally, the third obtaining unit includes:

[0119] A first obtaining subunit, configured to decrypt the first encrypted random number based on the platform private key through the first platform to obtain a first random number;

[0120] A second obtaining subunit is used to obtain first signature information by signing a certificate based on the platform private key through the first platform;

[0121] The third obtaining subunit is used to encrypt the first signature information based on the first random number through the first platform, and obtain the first feedback ciphertext according to the encryption result.

[0122] Optionally, the fourth obtaining unit includes:

[0123] a fourth obtaining subunit, configured to decrypt the first feedback ciphertext based on the first random number through the first chip to obtain the first signature information;

[0124] The fifth obtaining subunit is used to perform signature verification and authentication on the first signature information based on the platform public key through the first chip, and obtain the first reply authentication result according to the signature verification and authentication result.

[0125] Optionally, the fifth obtaining unit includes:

[0126] A first sending subunit, configured to send the first reply authentication result to the first platform when the first reply authentication result is successful authentication;

[0127] A sixth obtaining subunit, configured to obtain the second encrypted random number, wherein the second encrypted random number is a random number generated by the first platform according to the first reply authentication result and encrypted with the SE public key;

[0128] a seventh obtaining subunit, configured to send the second encrypted random number to the first chip, and decrypt the second encrypted random number by the first chip using the SE private key to obtain a second random number;

[0129] an eighth obtaining subunit, configured to perform certificate signing based on the SE private key through the first chip to obtain second signature information;

[0130] A ninth obtaining subunit is configured to encrypt the second signature based on the second random number through the first chip to obtain the second feedback ciphertext.

[0131] Optionally, the sixth obtaining unit includes:

[0132] a tenth obtaining subunit, configured to decrypt the second feedback ciphertext based on the second random number through the first platform to obtain the second signature information;

[0133] An eleventh obtaining subunit is used to verify and authenticate the second signature information based on the SE public key through the first platform to obtain the first authentication result.

[0134] Optionally, the first group of package data is serialized by the second module based on protocol buffer 3 to obtain the first processing result.

[0135] Optionally, the first processing result data is compressed by the second module based on snappy, and encryption is performed according to the data compression result to obtain the first data encryption result.

[0136] In an embodiment of the present invention, a connection is established between the vehicle-mounted network terminal and the platform. After the connection is established, an authentication process is performed. When the authentication is passed, the MCU collects vehicle data through CAN and transmits the data to the MPU for processing. The MPU performs data serialization, data compression, and data encryption verification on the CAN original data, and then sends the data to the platform through the TCP protocol to ensure that the data can be transmitted to the enterprise platform for display more efficiently, securely and stably. For security reasons, the two-way authentication between the terminal and the platform is strengthened, so as to achieve the technical effect of improving the security and stability of data transmission, saving communication data traffic, and improving data transmission efficiency.

[0137] An embodiment of the present invention further provides a control device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor; when the processor executes the program, the smart terminal data transmission method as described above is implemented.

[0138] An embodiment of the present invention further provides a car, comprising the smart terminal data transmission device as described above.

[0139] An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of the smart terminal data transmission method described above are implemented.

[0140] The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary personnel in this technical field, several improvements and modifications can be made without departing from the principles described in the present invention. These improvements and modifications are also within the scope of protection of the present invention.

Claims

1. A smart terminal data transmission method, applied to a vehicle-mounted network terminal, wherein the vehicle-mounted network terminal has a first chip, a first module, and a second module built in, and the vehicle-mounted network terminal is communicatively connected to a first platform, characterized in that: The method comprises: After establishing a link with the first platform, obtaining a first authentication instruction; According to the first authentication instruction, perform certificate authentication of the in-vehicle network terminal, the first chip, and the first platform to obtain a first authentication result; When the first authentication result is authentication passed, data signal collection is performed through the first module to obtain a first data signal set, where the first module is an MCU module, i.e., a micro control unit module; The first module sends the first data signal set to the second module, and the second module performs packet processing on the first data signal set to obtain first packet data, wherein the second module is an MPU module, i.e., a microprocessor module; Performing data serialization processing on the first group of package data by the second module to obtain a first processing result; The first processing result data is compressed and then encrypted by the second module to obtain a first data encryption result; Performing data encryption verification on the first data encryption result, and when the encryption verification passes, sending the first data encryption result to the first platform; The step of performing certificate authentication of the vehicle-mounted network connection terminal, the first chip, and the first platform according to the first authentication instruction to obtain a first authentication result includes: Obtaining a first random number generating instruction according to the first authentication instruction, and sending the first random number generating instruction to the first chip; Obtaining a first encrypted random number through the first chip, wherein the first encrypted random number is a random number encrypted by the first chip based on a platform public key; Sending the first encrypted random number to the first platform to obtain a first feedback ciphertext; Sending the first feedback ciphertext to the first chip to obtain a first reply authentication result of the first chip; Obtain a second encrypted random number according to the first reply authentication result, send the second encrypted random number to the first chip, and obtain a second feedback ciphertext from the first chip; The second feedback ciphertext is sent to the first platform to obtain the first authentication result of the first platform.

2. The method according to claim 1, characterized in that The sending the first encrypted random number to the first platform to obtain a first feedback ciphertext includes: Decrypting the first encrypted random number using the first platform based on a platform private key to obtain a first random number; Signing a certificate based on the platform private key through the first platform to obtain first signature information; The first signature information is encrypted based on the first random number through the first platform, and the first feedback ciphertext is obtained according to the encryption result.

3. The method according to claim 2, characterized in that The sending the first feedback ciphertext to the first chip to obtain a first reply authentication result of the first chip includes: decrypting the first feedback ciphertext based on the first random number through the first chip to obtain the first signature information; The first chip performs signature verification and authentication on the first signature information based on the platform public key, and obtains the first reply authentication result according to the signature verification and authentication result.

4. The method according to claim 1, characterized in that The step of obtaining a second encrypted random number according to the first reply authentication result, sending the second encrypted random number to the first chip, and obtaining a second feedback ciphertext of the first chip includes: When the first reply authentication result is authentication success, sending the first reply authentication result to the first platform; Obtaining the second encrypted random number, wherein the second encrypted random number is a random number generated by the first platform according to the first reply authentication result and encrypted with the SE public key; Sending the second encrypted random number to the first chip, and decrypting the second encrypted random number by the first chip using the SE private key to obtain a second random number; Performing certificate signing based on the SE private key by the first chip to obtain second signature information; The second signature is encrypting based on the second random number by the first chip to obtain the second feedback ciphertext.

5. The method according to claim 4, characterized in that The sending the second feedback ciphertext to the first platform to obtain the first authentication result of the first platform includes: Decrypting the second feedback ciphertext based on the second random number through the first platform to obtain the second signature information; The first platform verifies and authenticates the second signature information based on the SE public key to obtain the first authentication result.

6. The method according to claim 1, characterized in that The first group of package data is serialized by the second module based on protocol buffer3 to obtain the first processing result.

7. The method according to claim 1, characterized in that The first processing result data is compressed by the second module based on snappy, and encryption is performed according to the data compression result to obtain the first data encryption result.

8. A smart terminal data transmission device, characterized in that: The device comprises: A first obtaining module, used to obtain a first authentication instruction after establishing a link with the first platform; A second obtaining module is used to perform certificate authentication of the vehicle-mounted network connection terminal, the first chip, and the first platform according to the first authentication instruction, and obtain a first authentication result; A third acquisition module is used for acquiring a first data signal set by collecting data signals through a first module when the first authentication result is authentication passed, wherein the first module is an MCU module, i.e., a micro control unit module; a fourth obtaining module, configured to send the first data signal set to a second module through the first module, perform packet processing on the first data signal set through the second module, and obtain first packet data, wherein the second module is an MPU module, i.e., a microprocessor module; A first processing module, configured to perform data serialization processing on the first group of package data through the second module to obtain a first processing result; A second processing module, configured to compress the first processing result data and then perform encryption processing through the second module to obtain a first data encryption result; A first sending module, used for performing encryption verification on the first data encryption result, and when the encryption verification passes, sending the first data encryption result to the first platform; The second obtaining module comprises: A first obtaining unit, configured to obtain a first random number generating instruction according to the first authentication instruction, and send the first random number generating instruction to the first chip; A second obtaining unit, configured to obtain a first encrypted random number through the first chip, wherein the first encrypted random number is a random number encrypted by the first chip based on a platform public key; A third obtaining unit, configured to send the first encrypted random number to the first platform to obtain a first feedback ciphertext; A fourth obtaining unit, configured to send the first feedback ciphertext to the first chip to obtain a first reply authentication result of the first chip; a fifth obtaining unit, configured to obtain a second encrypted random number according to the first reply authentication result, send the second encrypted random number to the first chip, and obtain a second feedback ciphertext of the first chip; The sixth obtaining unit is used to send the second feedback ciphertext to the first platform to obtain the first authentication result of the first platform.

9. A control device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor; characterized in that: When the processor executes the program, the smart terminal data transmission method according to any one of claims 1 to 7 is implemented.

10. An automobile, characterized in that: It comprises the intelligent terminal data transmission device as claimed in claim 8.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the smart terminal data transmission method as claimed in any one of claims 1 to 7 are implemented.

Images