Encryption method, system, device and medium for Internet of Vehicles user information security

Abstract

The present invention relates to an encryption method, system, device and medium for user information security of an Internet of Vehicles, comprising the following steps: vehicle information encryption, when a vehicle computer is started or a user logs in, a key is obtained to asymmetrically encrypt vehicle information and user information; whether a service request carries a TOKEN is determined, if so, the service request carries the TOKEN and the service processing is performed directly; if not, a request is made to the cloud to obtain a generated TOKEN and the encrypted TOKEN is sent to a vehicle computer or a mobile terminal, and the service request carries the TOKEN for service processing; service processing, a key is obtained to asymmetrically encrypt service information, and the complexity of service logic is determined, and a service processing method is determined according to the complexity of service logic; through the above steps, reliable encryption of user information and vehicle information is ensured in the process of vehicle-cloud collaboration to avoid information leakage.

Description

Technical Field

[0001] The present application relates to the field of vehicle-cloud collaborative technology, and specifically to an encryption method, system, device, and medium for the security of user information of Internet of Vehicles. Background Art

[0002] With the development of society, people's requirements for cars are no longer limited to the "transportation" of traditional cars such as power, but have put forward higher requirements for the comfort, driving experience, intelligence, and differentiation of cars. First, users pay more attention to the driving experience, so they have put forward higher requirements for assisted driving and automatic driving functions. Second, users pay more attention to intelligence and hope to provide more intelligent services on the car computer, such as voice assistants, music, audiobooks, games, short videos and other services. This is the promotion of intelligent connected car technology on the consumer side.

[0003] With the rapid development of communication technology, the interaction between car computers and service ends has become more convenient. In addition, with the improvement of car computer performance, it has become possible to provide users with more personalized and intelligent services on car computers. Therefore, the number of connected cars has exploded. On the one hand, in order to provide users with more intelligent and accurate services, it is necessary to know the user's vehicle information and owner information, which requires users to provide a certain degree of vehicle and owner information. On the other hand, in the process of providing services to users on the cloud platform, the process of car-cloud collaboration is involved. Therefore, in these two processes, user information may be leaked, endangering user information security. For such problems, the invention patent "Information encryption, decryption method and information encryption, decryption device" (patent application number: CN201810162140.7) discloses: sending path information to a server to request an encrypted public key; receiving a public key generated by the server based on the number of hops and target node identification information in the path information; using the public key to encrypt the information area of ​​the information frame to be sent. However, this technical solution has the following disadvantages: the hierarchical structure of this information security encryption method is not clear enough, and it cannot adapt to the complex environment of the Internet of Vehicles, the encryption is not persistent, and there is a lack of management security for public and private keys. Summary of the invention

[0004] In view of the shortcomings of the prior art described above, the present invention provides an encryption method, system, device, and medium for user information security of the Internet of Vehicles, so as to solve the problem that the information security encryption method in the prior art has an unclear hierarchical structure and cannot adapt to the complex environment of the Internet of Vehicles.

[0005] The present invention provides:

[0006] An encryption method for user information security of Internet of Vehicles, comprising the steps of:

[0007] When the vehicle computer is started or the mobile user logs in, the vehicle information and user information are obtained, asymmetrically encrypted, and then the TOKEN is obtained through verification;

[0008] If the service request does not carry a token, the service request is rejected; if the service request carries a token, the service request is encrypted and the service request is sent out.

[0009] Obtain and send the corresponding key to decrypt the service request;

[0010] According to the encryption type of the business request, the corresponding encryption information is obtained, the business request is decrypted according to the encryption information, and the decrypted business information is logically processed, and the processed data is encrypted and persistently stored and waits for the next call.

[0011] In one embodiment of the present application, when the vehicle is started or the mobile user logs in, the vehicle information and user information are obtained and asymmetrically encrypted before obtaining the TOKEN through verification, including:

[0012] The user initiates vehicle real-name authentication, and fills in and submits the vehicle information and user information required for real-name authentication on the user terminal on the vehicle computer or mobile terminal;

[0013] Obtain the key to encrypt the user information and vehicle information, and send the encrypted user information and vehicle information to the cloud to request real-name authentication;

[0014] After receiving the encrypted user information and vehicle information, the cloud obtains the key to decrypt the user information and vehicle information;

[0015] When the decrypted vehicle information and user information are correct, the real-name authentication is successful, and the vehicle information and user information are encrypted and stored in the database; when the decrypted vehicle information and user information are incorrect, the real-name authentication fails and the process returns to re-authenticate the real-name.

[0016] In one embodiment of the present application, obtaining a TOKEN through verification includes:

[0017] Obtain the key for decryption and obtain vehicle information;

[0018] Verify the correctness and integrity of the decrypted vehicle information; if the verification passes, the cloud receives the business request, generates a TOKEN and returns it to the vehicle or mobile terminal; if the verification fails, the business request is interrupted.

[0019] In one embodiment of the present application, according to the encryption type of the service request, obtaining corresponding encrypted information, decrypting the encrypted information, and performing logical processing on the decrypted information includes: when the logic complexity of the service information contained in the service request is not greater than a set threshold, encrypting the service information in the service request in an asymmetric manner;

[0020] Obtain the corresponding key and decrypt it to obtain business information.

[0021] In one embodiment of the present application, according to the encryption type of the service request, obtaining corresponding encrypted information, decrypting the encrypted information, and performing logical processing on the decrypted information further includes:

[0022] When the logic complexity of the service information contained in the service request is greater than a set threshold, the service information is encrypted in a symmetrical manner;

[0023] Obtain the corresponding key and call multiple processing systems to decrypt the encrypted information at the same time to obtain business information.

[0024] In one embodiment of the present application, decrypting and obtaining information includes:

[0025] When the decrypted information does not involve user information or vehicle information, the business information is directly decrypted; when the business information after decryption involves user information or vehicle information, the business information is decrypted after obtaining the user information or vehicle information.

[0026] In one embodiment of the present application, decrypting and obtaining service information includes:

[0027] When querying information, sensitive information in key information is desensitized.

[0028] An encryption system for user information security of Internet of Vehicles, comprising:

[0029] User and vehicle information module, used to obtain vehicle information and user information when the vehicle is started or the mobile user logs in;

[0030] Terminal module, used for asymmetric encryption of vehicle information and user information;

[0031] The gateway module is used to verify the encrypted vehicle information and user information, generate a token and feed it back to the vehicle computer or mobile terminal;

[0032] A key management module, used to obtain and send a corresponding key to decrypt the service request;

[0033] The business module is used to cancel the business request when the business request does not carry a token; encrypt the business request when the business request carries a token and issue the business request; and obtain the corresponding encrypted information according to the business request, decrypt the encrypted information, and perform logical processing on the decrypted information.

[0034] The persistent encryption module is used to encrypt the processed data and store it persistently and wait for the next call.

[0035] An electronic device, comprising:

[0036] one or more processors;

[0037] A storage device for storing one or more programs, which, when executed by the one or more processors, enables the electronic device to implement the encryption method for the security of user information of the Internet of Vehicles as described in any one of claims 1 to 7.

[0038] A computer-readable storage medium having computer-readable instructions stored thereon, which, when executed by a processor of the computer, enables the computer to execute the encryption method for the security of user information of an Internet of Vehicles as claimed in any one of claims 1 to 7.

[0039] Beneficial effects of the present invention:

[0040] In the present invention, after the user initiates a business request on the vehicle or mobile terminal, the business information is first encrypted and transmitted to the cloud. After the cloud obtains the key to decrypt the business information, it determines whether the business logic processing involves vehicle information and user information. If not, it directly performs business logic processing to complete the business processing; if it involves sensitive information such as vehicle information and user information, the cloud determines whether the business request carries a TOKEN. If so, it directly bypasses the reading of the vehicle information and user information and performs business processing. If it does not carry a TOKEN, it requests the cloud to obtain a generated TOKEN and encrypts it and sends it to the vehicle or mobile terminal. The business request carries the TOKEN for business processing. There is no need to transmit user information and vehicle information during the processing process, which increases the security of user information and vehicle information in the vehicle-cloud collaboration process, prevents external attacks from affecting subsequent business logic, and prevents external attacks from illegally obtaining user information.

[0041] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] The drawings herein are incorporated into the specification and constitute a part of the specification, showing embodiments consistent with the present application, and together with the specification, are used to explain the principles of the present application. Obviously, the drawings described below are only some embodiments of the present application, and for those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0043] Figure 1 It is a schematic diagram of communication connection between a vehicle terminal, a mobile terminal and a cloud terminal shown in an exemplary embodiment of the present application;

[0044] Figure 2 is a simplified flow chart showing encryption of user information and vehicle information according to an exemplary embodiment of the present application;

[0045] Figure 3 is an exemplary embodiment of the present application showing a user real-name flow chart;

[0046] Figure 4 It is a schematic diagram of the system structure of this application;

[0047] Figure 5 It is a flow chart of the business request processing in this application;

[0048] Figure 6 A schematic diagram of the structure of a computer system suitable for implementing an electronic device of an embodiment of the present application is shown. DETAILED DESCRIPTION

[0049] The following will describe the embodiments of the present invention with reference to the accompanying drawings and preferred embodiments. Those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be understood that the preferred embodiments are only for illustrating the present invention, not for limiting the scope of protection of the present invention.

[0050] It should be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present invention, and thus the drawings only show components related to the present invention rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0051] In the following description, numerous details are discussed to provide a more thorough explanation of the embodiments of the present invention. However, it is obvious to those skilled in the art that the embodiments of the present invention can be implemented without these specific details. In other embodiments, well-known structures and devices are shown in the form of block diagrams rather than in detail to avoid making the embodiments of the present invention difficult to understand.

[0052] First of all, it should be explained that the Internet of Vehicles can realize an integrated network of intelligent traffic management, intelligent dynamic information services and vehicle control. It is a typical application of Internet of Things technology in the field of transportation systems. It is the only way for mobile Internet and Internet of Things to develop towards business substance and depth. It is an integrated technology for the future development of information communication, environmental protection, energy conservation, and safety.

[0053] Refers to a dynamic mobile communication system that enables vehicles to communicate with the public network through the interaction between vehicles, vehicles and roads, vehicles and people, vehicles and sensor equipment, etc. It can realize information sharing through the interconnection between vehicles, vehicles and people, and vehicles and roads, collect information about vehicles, roads and the environment, and process, calculate, share and safely publish information collected from multiple sources on the information network platform, effectively guide and supervise vehicles according to different functional requirements, and provide professional multimedia and mobile Internet application services.

[0054] From the network perspective, the vehicle network system is a three-layer system of "end, pipe and cloud".

[0055] The first layer (end system): The end system is the intelligent sensor of the car, which is responsible for collecting and acquiring the intelligent information of the vehicle and sensing the driving status and environment. It is a ubiquitous communication terminal with in-vehicle communication, vehicle-to-vehicle communication, and vehicle-to-network communication. It is also a device that enables the car to have capabilities such as vehicle network addressing and network trusted identification.

[0056] The second layer (management system): solves the interconnection between vehicles, vehicles and roads, vehicles and networks, vehicles and people, etc., realizes communication and roaming between vehicle ad hoc networks and various heterogeneous networks, and ensures real-time, serviceability and network ubiquity in terms of functions and performance. At the same time, it is a unity of public networks and private networks.

[0057] The third layer (cloud system): The Internet of Vehicles is a vehicle operation information platform with a cloud architecture. Its ecological chain includes ITS, logistics, passenger and freight transportation, dangerous vehicles, auto repair and auto parts, car rental, enterprise and institution vehicle management, automobile manufacturers, 4S stores, vehicle management, insurance, emergency rescue, mobile Internet, etc. It is a convergence of massive information from multiple sources, so it requires cloud computing functions such as virtualization, security authentication, real-time interaction, and massive storage. Its application system is also a complex system centered on vehicle data aggregation, calculation, scheduling, monitoring, management and application.

[0058] The following embodiments mainly solve the information security problem when business requests are made between the vehicle terminal, mobile terminal and cloud during the vehicle network collaboration process.

[0059] Figure 1 FIG. 1 is a schematic diagram of an implementation environment for secure encryption of vehicle network user information, shown in an exemplary embodiment of the present application. Figure 1 As shown, after the vehicle computer is started, the user logs in with the user account on the vehicle computer or mobile terminal, establishes a communication channel with the cloud after login, starts identity authentication, and makes a business processing request after the identity authentication is passed. During the business processing request, encryption operations are performed for user information security.

[0060] in, Figure 1 The mobile terminal 100 shown can be any terminal device that supports the installation of navigation map software, such as a smart phone, a car computer, a tablet computer, a laptop computer, or a wearable device, but is not limited thereto. Figure 1 The cloud 102 shown refers to a cloud server, which can be, for example, an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms, and is not limited here. The mobile terminal 1000 can communicate with the cloud 102 and the vehicle terminal 101 through wireless networks such as 3G (third generation mobile information technology), 4G (fourth generation mobile information technology), and 5G (fifth generation mobile information technology), and is not limited here.

[0061] A weak network is also called a weak network environment, which has the characteristics of low network transmission rate. In a weak network or no network environment, the mobile terminal 100 cannot make network requests to the cloud 102, which will result in the inability to perform business requests containing user information and vehicle information. Users can only process single-machine business requests on the vehicle side.

[0062] The above-mentioned problems are generally applicable in general vehicle networking application scenarios. When a user makes a service request on a vehicle terminal or a mobile terminal, in order to solve these problems, the embodiments of the present application respectively propose a road condition refreshing method, a road condition refreshing device, an electronic device, a computer-readable storage medium, and a computer program product, which will be described in detail below.

[0063] See also Figure 2 , Figure 2is a flowchart of an exemplary embodiment of the present application showing an encryption method for Internet of Vehicles user information security. The method can be applied to Figure 1 The implementation environment shown is specifically executed by the mobile terminal 100 in the implementation environment in cooperation with the vehicle terminal 101. It should be understood that the method can also be applied to other exemplary implementation environments and be specifically executed by devices in other implementation environments. This embodiment does not limit the implementation environment to which the method is applicable.

[0064] See also Figure 2 After the user establishes a communication channel with the cloud on the vehicle or mobile terminal, the following steps are included when making a service request:

[0065] When the vehicle computer is started or the mobile user logs in, the vehicle information and user information are obtained, asymmetrically encrypted, and then the TOKEN is obtained through verification;

[0066] If the service request does not carry a token, the service request is rejected; if the service request carries a token, the service request is encrypted and the service request is sent out.

[0067] Obtain and send the corresponding key to decrypt the service request;

[0068] According to the encryption type of the business request, the corresponding encryption information is obtained, the business request is decrypted according to the encryption information, and the decrypted business information is logically processed, and the processed data is encrypted and persistently stored and waits for the next call.

[0069] Unlike symmetric encryption algorithms, asymmetric encryption algorithms require two keys: a public key and a private key. The public key and the private key are a pair. If the public key is used to encrypt data, it can only be decrypted with the corresponding private key; if the private key is used to encrypt data, it can only be decrypted with the corresponding public key. Because encryption and decryption use two different keys. After the car computer is started or the user logs in on the mobile terminal, the asymmetric encryption method is used to encrypt the vehicle information and user information. This can ensure that when the car computer and the mobile terminal establish a communication channel connection with the cloud, the vehicle information and user information will not be leaked or obtained by attacks, and the user information and vehicle information are persistently stored after encryption. When a user initiates a business request on the vehicle or mobile terminal, business logic processing is performed by determining whether a TOKEN is carried. Based on the determination of whether a TOKEN is contained, the business request is bypassed to directly query vehicle information and user information, thereby ensuring the security of vehicle information and user information during business logic processing. In order to increase the efficiency of business logic processing, after initiating a business request, the complexity of the business logic is first tested. When the complexity of the business logic is greater than the set threshold, it enters the cloud for flow processing to improve the processing efficiency of business logic processing. After the business processing is completed, the vehicle information, user information and business information on the vehicle are encrypted and persistently stored to ensure the security of the vehicle information, user information and business information involved in the business processing stage.

[0070] In one embodiment of the present application, when the vehicle is started or the mobile user logs in, the vehicle information and user information are obtained and asymmetrically encrypted before obtaining the TOKEN through verification, including:

[0071] The user initiates vehicle real-name authentication, and fills in and submits the vehicle information and user information required for real-name authentication on the user terminal on the vehicle computer or mobile terminal;

[0072] Obtain the key to encrypt the user information and vehicle information, and send the encrypted user information and vehicle information to the cloud to request real-name authentication;

[0073] After receiving the encrypted user information and vehicle information, the cloud obtains the key to decrypt the user information and vehicle information;

[0074] When the decrypted vehicle information and user information are correct, the real-name authentication is successful, and the vehicle information and user information are encrypted and stored in the database; when the decrypted vehicle information and user information are incorrect, the real-name authentication fails and the process returns to re-authenticate the real-name.

[0075] When the user initiates a service request on the vehicle or mobile terminal, the system determines whether the service request carries a TOKEN instruction. If the service request carries a TOKEN, it indicates that the service request has been verified by the system and there is no need to perform binding verification of the vehicle information and user information. The TOKEN, as an identity token, directly completes the business logic processing, bypassing the transmission verification of user information and vehicle information, thereby increasing the security of user information and vehicle information in the vehicle-cloud collaboration process. If the service request does not contain a TOKEN instruction, it is necessary to verify the service request and obtain the TOKEN to ensure that the service request is a legal operation. The cloud is requested to obtain the TOKEN, and the key is first obtained to decrypt the logged-in vehicle information and user information. After obtaining the vehicle information and user information, the information is queried and compared with the verified complete vehicle information to determine whether the decrypted vehicle information and user information are correct and complete. If the verification passes, the TOKEN instruction is encrypted and generated and returned to the vehicle or mobile terminal. The service request carries the generated TOKEN instruction for business logic processing.

[0076] In one embodiment of the present application, obtaining a TOKEN through verification includes:

[0077] Obtain the key for decryption and obtain vehicle information;

[0078] Verify the correctness and integrity of the decrypted vehicle information; if the verification passes, the cloud receives the business request, generates a TOKEN and returns it to the vehicle or mobile terminal; if the verification fails, the business request is interrupted.

[0079] In some cases, when the business request initiated by the user on the mobile terminal or the vehicle terminal does not involve the participation of vehicle information or user information, the business logic processing is performed directly. The processing flow is: obtain the key to decrypt the business information, and perform business logic processing directly after decryption. If the business processing involves vehicle information or user information, request to obtain user information or vehicle information, determine whether the business request carries a TOKEN, and perform business logic processing on the business request.

[0080] In one embodiment of the present application, Figure 3 As shown, the user initiates vehicle real-name authentication, including the following steps:

[0081] The user initiates the vehicle real-name authentication. When the user performs the real-name authentication, the user fills in and submits the vehicle information and user information required for the real-name authentication on the user terminal on the vehicle computer or mobile terminal;

[0082] Encryption of user information and vehicle information. After receiving the submitted user information and vehicle information, the user terminal obtains the key to encrypt the user information and vehicle information, and sends the encrypted user information and vehicle information to the cloud to request real-name authentication;

[0083] Decryption of user information and vehicle information: after receiving the encrypted user information and vehicle information, the cloud system obtains the key to decrypt the user information and vehicle information;

[0084] Determine whether the decrypted vehicle information is complete and correct, and whether the vehicle information filled in by the user is legal and in normal status. If not, the real-name authentication fails. If so, determine whether the decrypted user information is complete and correct, and whether the user information filled in by the user is complete and correct. If not, the real-name authentication fails, and the user needs to correct the information and resubmit it. If so, the real-name authentication passes, and then the vehicle information and user information that pass the real-name authentication are encrypted through the persistent encryption module and stored in the database, and the real-name authentication is successful.

[0085] When a user purchases and uses a vehicle for the first time, according to relevant systems, and in order to provide users with better services and ensure the safety of users and vehicles, the user needs to actively initiate the real-name authentication of the vehicle. First, when the user authenticates the real name, the vehicle information and user information required for the real-name authentication are encrypted using the real-name authentication key. After the cloud receives the real-name request, it obtains the corresponding key to decrypt the vehicle information and user information, and then determines whether the vehicle is legal and in normal state. If not, the real-name authentication fails. If the vehicle is legal and normal, continue to determine whether the user information filled in by the user is complete and correct. If not, the real-name authentication fails; if correct, the vehicle information and user information submitted by the user are encrypted and stored in the database for persistence, and the real-name authentication is successful. If the user fails to authenticate the real name, the information needs to be corrected and the real name is re-authenticated. It should be noted that when verifying the integrity and correctness of the user information, in order to ensure the security of the user information, it is connected to the public security household registration system, and the public security household registration system is directly used to determine whether the user's filled-in information is correct, to ensure the security of the user information filling process.

[0086] This application also provides an encryption system for the security of user information in the Internet of Vehicles, such as Figure 4 As shown, including:

[0087] The terminal module is used to asymmetrically encrypt the user information and vehicle information of the vehicle computer or mobile terminal. When the vehicle computer or mobile terminal interacts with the cloud, if the information contains user information or vehicle information, the key is obtained to asymmetrically encrypt the user information or vehicle information.

[0088] When the vehicle computer or mobile terminal interacts with the cloud, and needs to send sensitive information including vehicle information and user information to the cloud, the terminal module is used to request the key to encrypt the vehicle information and user information, and then transmit the information after encryption to ensure security during the transmission process. Asymmetric encryption is selected as the encryption method to improve security and reliability.

[0089] The gateway module is responsible for request authentication between the vehicle terminal and the mobile terminal, and is responsible for symmetric encryption of the vehicle information of the user's vehicle terminal and the user information of the mobile terminal combined with the timestamp, generating a token and returning it to the vehicle terminal or the mobile terminal, and performing business processing in conjunction with the business request through the generated token;

[0090] The gateway module is responsible for generating TOKENs when business requests are made, adding timestamps to the vehicle information and user information on the vehicle and mobile terminals, and performing symmetric encryption in conjunction with the timestamps. When business requests involve vehicle information and user information, the symmetrically encrypted vehicle information and user information are decrypted, and the vehicle information and user information are compared and verified. Symmetric encryption can improve the processing speed of business requests. After the TOKEN is generated, it is sent to the vehicle or mobile terminal to ensure the security of the user's vehicle information and mobile user personal information, prevent external attacks from affecting subsequent business logic, and prevent external attacks from illegally obtaining user information.

[0091] The business module is responsible for processing business logic, obtaining keys to asymmetrically encrypt business information, and judging the complexity of business logic. If the complexity of business logic is greater than the set threshold, the business information is transferred to the cloud and symmetrically encrypted during the cloud transfer process; if it is not greater than the set threshold, the cloud directly processes the business; in the process of processing business logic, the user information or vehicle information involved is desensitized, such as only the last four digits of the user's mobile phone number are displayed, etc. By desensitizing key information, it is ensured that the management end user cannot obtain and view the user's sensitive information, and if the business logic processing requires user information or vehicle information, the user information or vehicle information required for key decryption is obtained to process the business logic; during the business request process, the business module needs to calculate the complexity of business logic. If the complexity of business logic is greater than the set threshold, the business logic processing selects the business system to be used according to the complexity of business logic, including business system one, business system two, etc., to jointly complete the business logic processing. Assuming that the business logic processing requires two business systems to cooperate in processing, when business system one needs to call business system two, the special key obtained from the key management module is used to symmetrically encrypt this information. The reason for using symmetric encryption is that although it is circulated within multiple business systems, all business processing is circulated within the smart car cloud platform. The use of symmetric encryption can speed up the encryption and decryption speed while ensuring security, and improve the ability to process business. When business system 2 receives this information, it also obtains the required key from the key management module, decrypts the information, completes the business logic processing within the scope of business system 2's capabilities, and returns it to complete the business logic processing.

[0092] Persistent encryption module, responsible for the persistent encryption and storage of user information, vehicle information and business information;

[0093] First, when the information to be stored involves the user's information security, it is necessary to obtain the key in this module and encrypt the sensitive information, and then store it persistently. When querying this information from the database, the retrieved data needs to be decrypted. Through this module, the business layer can be unaware of the encrypted storage of data and can operate it like ordinary data, as if the data is not encrypted and stored. This module can ensure that sensitive information is not stored in plain text in the database, further ensuring the user's sensitive information.

[0094] The user and vehicle information module is used to store user information and vehicle information. When the user information and vehicle information in the user and vehicle information module are called, asymmetric encryption processing is performed in combination with the persistent encryption module; when other modules need this information, they can obtain it from this module, ensuring that the user information and vehicle information are encrypted and called on demand, further ensuring the security of user information.

[0095] The key management module is used to manage all keys, and keys are obtained through the key management module for encryption or decryption.

[0096] In one embodiment of the present application, the business module further includes:

[0097] A decryption unit, used to obtain a key from a key management module to decrypt vehicle information and obtain vehicle information;

[0098] The verification unit is used to verify the correctness and integrity of the decrypted vehicle information. If the verification passes, the cloud receives the business request, generates a TOKEN and returns it to the vehicle or mobile terminal; if the verification fails, the business request is interrupted.

[0099] In one embodiment of the present application, the business module further includes:

[0100] The business logic judgment unit is used to judge whether the business logic contains user information or vehicle information. If not, the key decryption business information is obtained from the key management module for business processing; if user information or vehicle information is involved, the user information or vehicle information is obtained from the user and vehicle information module and decrypted for business processing.

[0101] In one embodiment of the present application, it further includes:

[0102] The real-name authentication module is used for real-name authentication when a user purchases and uses a vehicle for the first time. When the user performs real-name authentication, the vehicle information and user information required for real-name authentication are filled in and submitted in the terminal module on the vehicle computer or mobile terminal. The terminal module obtains the key to encrypt the user information and vehicle information, and sends the encrypted user information and vehicle information to the cloud to request real-name authentication. After the cloud receives the encrypted user information and vehicle information, it obtains the key to decrypt the user information and vehicle information; determines whether the decrypted vehicle information is legal and in a normal state. If not, the real-name authentication fails. If so, determines whether the decrypted user information is complete and correct, determines whether the user information filled in by the user is complete and correct, if not, the real-name authentication fails, the user corrects the information and resubmits it for real-name authentication; if so, the real-name authentication passes, and then the vehicle information and user information that pass the real-name authentication are encrypted by the persistent encryption module and stored in the database, and the real-name authentication is successful.

[0103] The present application also provides an electronic device, the electronic device comprising:

[0104] one or more processors;

[0105] A storage device is used to store one or more programs. When the one or more programs are executed by the one or more processors, the electronic device implements the encryption method for the security of user information of the Internet of Vehicles as described in any one of the above.

[0106] The present application also provides a readable storage medium having computer-readable instructions stored thereon, which, when executed by a processor of the computer, enables the computer to execute the encryption method for the security of user information of the Internet of Vehicles as described in any one of claims 1 to 4.

[0107] Figure 6 The structure diagram of the computer system suitable for implementing the electronic device of the embodiment of the present application is shown. It should be noted that: Figure 6 The computer system 600 of the electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0108] like Figure 6As shown, the computer system 600 includes a central processing unit (CPU) 601, which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM) 602 or the program loaded from the storage part 608 to the random access memory (RAM) 603, such as executing the method described in the above embodiment. In the RAM 603, various programs and data required for system operation are also stored. The CPU 601, ROM 602 and RAM 603 are connected to each other through a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0109] The following components are connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN (Local Area Network) card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 610 as needed so that a computer program read therefrom is installed into the storage section 608 as needed.

[0110] In particular, according to an embodiment of the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present application includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a computer program for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication section 609, and / or installed from a removable medium 611. When the computer program is executed by a central processing unit (CPU) 601, various functions defined in the system of the present application are executed.

[0111] It should be noted that the computer-readable medium shown in the embodiment of the present application can be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium can be, for example, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, wherein a computer-readable computer program is carried. This propagated data signal can take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. A computer program contained on a computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0112] The flowchart and block diagram in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the system, method and computer program product according to various embodiments of the present application. Wherein, each box in the flowchart or block diagram can represent a module, a program segment, or a part of the code, and the above-mentioned module, program segment, or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0113] The units involved in the embodiments described in this application may be implemented by software or hardware, and the units described may also be set in a processor. The names of these units do not, in some cases, constitute limitations on the units themselves.

[0114] Another aspect of the present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor of a computer, the computer executes the encryption method for the security of user information of the Internet of Vehicles as described above. The computer-readable storage medium may be included in the electronic device described in the above embodiment, or may exist independently without being assembled into the electronic device.

[0115] Another aspect of the present application also provides a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. A processor of a computer device reads the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes the encryption method for the security of vehicle network user information provided in each of the above embodiments.

[0116] The above embodiments are merely illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone familiar with the technology may modify or change the above embodiments without violating the spirit and scope of the present invention. Therefore, all equivalent modifications or changes made by a person of ordinary skill in the art without departing from the spirit and technical ideas disclosed by the present invention shall still be covered by the claims of the present invention.

Claims

1. An encryption method for user information security in Internet of Vehicles, characterized in that: Includes steps: When the vehicle computer is started or the mobile user logs in, the vehicle information and user information are obtained, asymmetrically encrypted and transmitted to the cloud. The cloud obtains the key for decryption to obtain the vehicle information, verifies the correctness and integrity of the decrypted vehicle information, obtains the TOKEN through verification and returns it to the vehicle computer or mobile terminal; In response to a service request from the vehicle or mobile terminal to the cloud, the cloud determines whether the service request carries a token. If the service request does not carry a token, the cloud refuses to process the service request. If the service request carries a token, the cloud encrypts the service request and sends the service request. The cloud obtains the corresponding key and decrypts the service request; The cloud obtains the corresponding encryption information according to the encryption type of the business request, decrypts the business request according to the encryption information, performs logical processing on the decrypted business information, encrypts the processed data and stores it persistently and waits for the next call, wherein the logical processing includes encrypting the business information in the business request in an asymmetric manner when the logic complexity of the business information contained in the business request is not greater than a set threshold, obtaining the corresponding key, and decrypting to obtain the business information.

2. The encryption method for user information security of Internet of Vehicles according to claim 1, characterized in that: The vehicle information and user information are obtained and asymmetrically encrypted before being transmitted to the cloud: The user initiates vehicle real-name authentication, and fills in and submits the vehicle information and user information required for real-name authentication on the user terminal on the vehicle computer or mobile terminal; Obtain the key to encrypt the user information and vehicle information, and send the encrypted user information and vehicle information to the cloud to request real-name authentication; After receiving the encrypted user information and vehicle information, the cloud obtains the key to decrypt the user information and vehicle information; When the decrypted vehicle information and user information are correct, the real-name authentication is successful, and the vehicle information and user information are encrypted and stored in the database; when the decrypted vehicle information and user information are incorrect, the real-name authentication fails and the process returns to re-authenticate the real-name.

3. The encryption method for user information security of Internet of Vehicles according to claim 1, characterized in that: After verifying the correctness and integrity of the decrypted vehicle information, it also includes: When the verification fails, the service request is terminated.

4. The encryption method for user information security of Internet of Vehicles according to claim 1, characterized in that: According to the encryption type of the service request, obtaining corresponding encrypted information, decrypting the encrypted information, and performing logical processing on the decrypted information also includes: When the logic complexity of the service information contained in the service request is greater than a set threshold, the service information is encrypted in a symmetrical manner; Obtain the corresponding key and call multiple processing systems to decrypt the encrypted information at the same time to obtain business information.

5. The encryption method for user information security of Internet of Vehicles according to claim 4, characterized in that: Decryption to obtain business information includes: When the business information after decryption does not involve user information or vehicle information, the business information is directly decrypted to obtain the business information; when the business information after decryption involves user information or vehicle information, the business information is decrypted to obtain the business information after obtaining the user information or vehicle information.

6. The encryption method for vehicle networking user information security according to claim 4 is characterized in that: Decryption to obtain business information includes: When querying information, the sensitive information in the key information is desensitized, the key information includes user information or vehicle information, the sensitive information is used to characterize the identity privacy information in the user information or vehicle information, and the query information includes querying the key information from the encrypted data in persistent storage.

7. An encryption system for the security of user information of an Internet of Vehicles, used to execute the encryption method for the security of user information of an Internet of Vehicles as claimed in claim 1, characterized in that: include: The user and vehicle information module is set in the vehicle and is used to obtain vehicle information and user information when the vehicle computer is started or the mobile user logs in; The terminal module is set in the cloud and is used to transmit the vehicle information and user information to the cloud through asymmetric encryption; The gateway module is set up in the cloud and is used to obtain the key from the cloud for decryption, obtain vehicle information, verify the correctness and integrity of the decrypted vehicle information, obtain the TOKEN through verification and return it to the vehicle terminal or mobile terminal; The business module is arranged in the cloud, and is used to respond to the vehicle terminal or the mobile terminal initiating a business request to the cloud. The cloud determines whether the business request carries a TOKEN. If the business request does not carry a TOKEN, the business request is cancelled. If the business request carries a TOKEN, the business request is encrypted and the business request is issued. According to the encryption type of the business request, the corresponding encrypted information is obtained, the encrypted information is decrypted, and the decrypted information is logically processed, wherein the logical processing includes encrypting the business information in the business request in an asymmetric manner, obtaining the corresponding key, and decrypting to obtain the business information when the logic complexity of the business information in the business request is not greater than a set threshold; A key management module, which is set in the cloud and is used to obtain the corresponding key and decrypt the service request; The persistent encryption module is set up in the cloud and is used to encrypt the processed data and store it persistently and wait for the next call.

8. An electronic device, characterized in that: The electronic device comprises: one or more processors; A storage device for storing one or more programs, which, when executed by the one or more processors, enables the electronic device to implement the encryption method for the security of user information of the Internet of Vehicles as described in any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: Computer-readable instructions are stored thereon, and when the computer-readable instructions are executed by a processor of a computer, the computer is caused to execute an encryption method for user information security of an Internet of Vehicles as claimed in any one of claims 1 to 6.

Images