Vehicle video monitoring device, wireless user terminal and vehicle communication method

Abstract

An embodiment of the present invention provides an in-vehicle video monitoring device, a wireless user terminal, and an in-vehicle communication method. The device is connected to the wireless user terminal and includes: a video memory; a wireless hotspot module through which the wireless user terminal establishes a wireless network connection to receive identity encryption data and a session request signal sent by the wireless user terminal; a data decryption module for decrypting the identity encryption data to obtain the identity information of the wireless user terminal; a request response module for determining whether the identity information meets a preset identity condition, marking the wireless user terminal whose identity information meets the preset identity condition as a connectable terminal, and sending an authentication success signal to the connectable terminal through the wireless hotspot module; a first session establishment module for establishing a communication session channel; and a data sending module for responding to a data access signal and sending corresponding video data to the connectable terminal through the communication session channel. This embodiment can effectively improve the security of in-vehicle communication.

Description

Technical Field

[0001] Embodiments of the present invention relate to the technical field of vehicle-mounted monitoring devices, and in particular, to a vehicle-mounted video monitoring device, a wireless user terminal, and a vehicle-mounted communication method. Background Art

[0002] Currently, vehicle-mounted video monitoring devices with functions such as video recording and video storage are usually installed on motor vehicles. Moreover, the vehicle-mounted video monitoring device can also be wirelessly network-connected to a wireless user terminal (e.g., a mobile phone) to facilitate the user to access the video data stored in the vehicle-mounted video monitoring device through an application (APP) on the wireless user terminal.

[0003] An existing communication method between a vehicle-mounted video monitoring device and a wireless user terminal is mainly as follows: The vehicle-mounted video monitoring device generates a wireless network hotspot. After the wireless user terminal connects to the wireless network hotspot, a session communication is established with the vehicle-mounted video monitoring device, and a resource access requirement is directly sent to the vehicle-mounted video monitoring device through the session communication, and then the video resources are accessed.

[0004] However, the inventor found during specific implementation that since video data usually contains some sensitive information, higher data security policies should be adopted. However, in the existing communication method, after the wireless user terminal connects to the wireless network hotspot, it can directly access the video data in the vehicle-mounted video monitoring device, and the video data is easily stolen by lawbreakers, and the security is relatively poor. Summary of the Invention

[0005] The technical problem to be solved by the embodiments of the present invention is to provide a vehicle-mounted video monitoring device that can effectively improve the security of vehicle-mounted communication.

[0006] The technical problem to be further solved by the embodiments of the present invention is to provide a wireless user terminal that can effectively improve the security of vehicle-mounted communication.

[0007] The technical problem to be further solved by the embodiments of the present invention is to provide a vehicle-mounted communication method that can effectively improve the security of vehicle-mounted communication.

[0008] To solve the above technical problems, the embodiments of the present invention first provide the following technical solution: A vehicle-mounted video monitoring device, comprising:

[0009] A video memory for storing video data;

[0010] A wireless hotspot module, which is used to generate a wireless network hotspot, and respond to connection requests from corresponding wireless user terminals to establish a wireless network connection with the wireless user terminals to receive identity encrypted data and session request signals sent by the wireless user terminals; a data decryption module, connected to the wireless hotspot module, which is used to decrypt the identity encrypted data based on a first predetermined data encryption technology to obtain the identity information of the wireless user terminal;

[0011] A request response module, respectively connected to the wireless hotspot module and the data decryption module, which is used to respond to the session request signal to determine whether the identity information meets the preset identity conditions. If it meets, mark the wireless user terminal as a connectable terminal, generate an authentication success signal, and send the authentication success signal to the connectable terminal through the wireless hotspot module;

[0012] A first session establishment module, respectively connected to the request response module and the wireless hotspot module, which is used to respond to the authentication success signal and cooperate with the connectable terminal to establish a communication session channel through the wireless hotspot module; and

[0013] A data sending module, respectively connected to the wireless hotspot module, the first session establishment module and the video memory, which is used to receive and respond to data access signals sent by the connectable terminal through the communication session channel, and send the corresponding video data in the video memory to the connectable terminal through the communication session channel.

[0014] Further, the wireless hotspot module also receives session encrypted data sent by the connectable terminal; the data decryption module also decrypts the session encrypted data based on a second predetermined data encryption technology to obtain the device type value of the connectable terminal; the video data includes real-time video data and delayed video data, and the first session establishment module includes:

[0015] A permission setting unit, respectively connected to the data decryption module and the wireless hotspot module, with a permission table built-in that reflects the corresponding relationship between the device type value of the wireless user terminal and the access permissions of different data types of the video data. It is used to respond to the authentication success signal to find the device type value matching the connectable terminal in the permission table, add the identity information of the connectable terminal with the corresponding device type value in the permission table to the device white list, assign the corresponding access permission to the connectable terminal, and send a session establishment signal and a communication session code to the connectable terminal through the wireless hotspot module; and a first channel establishment unit, respectively connected to the wireless hotspot module and the permission setting unit, which is used to cooperate with the connectable terminal through the wireless hotspot module and the data decryption module according to the corresponding communication session code and access permission to establish a communication session channel that can realize data encryption and decryption;

[0016] The data sending module is also connected to the permission setting unit, and when responding to the data access signal, it first determines whether there is identity information in the device white list that matches the currently accessed wireless user terminal. If there is, it sends the video data in the video memory that matches the access permission of the connectable terminal to the connectable terminal through the communication session channel.

[0017] Furthermore, the device further includes:

[0018] A status detection module, which is respectively connected to the wireless hotspot module and the data sending module, is used to detect the connection status between the wireless user terminal and the wireless network hotspot, and delete the corresponding identity information in the device white list when the connection between the wireless user terminal and the wireless network hotspot is disconnected.

[0019] On the other hand, to solve the above further technical problems, the embodiment of the present invention further provides the following technical solution: A wireless user terminal, connected to a vehicle-mounted video monitoring device, includes:

[0020] A hotspot connection module, used to connect to the wireless network hotspot generated by the vehicle-mounted video monitoring device to establish a wireless network connection with the vehicle-mounted video monitoring device;

[0021] An information storage module, used to pre-store the identity information uniquely corresponding to this terminal;

[0022] A data encryption module, connected to the information storage module, is used to encrypt the identity information based on a first predetermined data encryption technology to obtain identity encrypted data;

[0023] A session request module, connected to the data encryption module and the hotspot connection module, is used to send a session request signal and the identity encrypted data to the vehicle-mounted video monitoring device through the hotspot connection module;

[0024] A second session establishment module, connected to the hotspot connection module, is used to cooperate with the vehicle-mounted video monitoring device to establish a communication session channel through the hotspot connection module in response to the authentication success signal sent by the vehicle-mounted video monitoring device and received and forwarded by the hotspot connection module; and

[0025] A data access module, respectively connected to the hotspot connection module and the session request module, is used to send a data access signal to the vehicle-mounted video monitoring device through the communication session channel, and receive the video data sent by the vehicle-mounted video monitoring device through the communication session channel.

[0026] Further, the information storage module further prestores the device type value of this terminal; the data encryption module further encrypts the device type value based on a second predetermined data encryption technology to obtain session encryption data; the second session establishment module includes:

[0027] An information sending unit, connected to the data encryption module and the hotspot connection module, for sending the session encryption data to the in-vehicle video monitoring device through the hotspot connection module; and

[0028] A second channel establishment unit, connected to the data encryption module and the hotspot connection module, for receiving a session establishment signal and a communication session code sent by the in-vehicle video monitoring device through the hotspot connection module, and in response to the session establishment signal, cooperating with the in-vehicle video monitoring device through the hotspot connection module and the data encryption module according to the corresponding communication session code to establish a communication session channel capable of implementing data encryption and decryption.

[0029] On the other hand, to solve the above further technical problems, the embodiment of the present invention further provides the following technical solution: An in-vehicle communication method, including:

[0030] Generating a wireless network hotspot and establishing a wireless network connection with the wireless user terminal in response to a connection request of the corresponding wireless user terminal;

[0031] Receiving identity encryption data and a session request signal sent by the wireless user terminal based on the wireless network connection;

[0032] Decrypting the identity encryption data based on a first predetermined data encryption technology to obtain the identity information of the wireless user terminal; judging whether the identity information meets a preset identity condition in response to the session request signal, if it meets, marking the wireless user terminal as a connectable terminal, and after generating an authentication success signal, sending the authentication success signal to the connectable terminal based on the wireless network connection;

[0033] Cooperating with the connectable terminal to establish a communication session channel based on the wireless network connection;

[0034] Receiving a data access signal sent by the connectable terminal through the communication session channel; and

[0035] Responding to the data access signal and sending corresponding video data to the connectable terminal through the communication session channel.

[0036] Further, after sending an authentication success signal to the connectable terminal, session encryption data sent by the connectable terminal is also received based on the wireless network connection, and the session encryption data is decrypted based on a second predetermined data encryption technique to obtain the device type value of the connectable terminal. The video data includes real-time video data and delayed video data. Specifically, establishing a communication session channel with the connectable terminal based on the wireless network connection includes:

[0037] In response to the authentication success signal, search for the device type value matching the connectable terminal in the pre-stored permission table, add the identity information of the connectable terminal with the corresponding device type value in the permission table to the device white list and assign the corresponding access permission to the connectable terminal, and send a session establishment signal and a communication session code to the connectable terminal based on the wireless network connection. The permission table reflects the corresponding relationship between the device type value of the wireless user terminal and the access permissions of different data types of the video data; and

[0038] Based on the wireless network connection and the second predetermined data encryption technique, and in accordance with the corresponding communication session code and access permission, cooperate with the connectable terminal to establish a communication session channel that can implement data encryption and decryption;

[0039] When responding to the data access signal, first determine whether there is identity information matching the currently accessed wireless user terminal in the device white list. If it exists, send the video data matching the access permission of the connectable terminal to the connectable terminal through the communication session channel.

[0040] Further, the method further includes:

[0041] Detect the connection status between the wireless user terminal and the wireless network hotspot, and delete the corresponding identity information in the device white list when the connection between the wireless user terminal and the wireless network hotspot is disconnected.

[0042] On the other hand, to solve the above further technical problems, the embodiments of the present invention further provide the following technical solution: A vehicle-mounted communication method includes:

[0043] Establish a wireless network connection with a vehicle-mounted video monitoring device by connecting to the wireless network hotspot generated by the vehicle-mounted video monitoring device;

[0044] Encrypt the pre-stored identity information based on a first predetermined data encryption technique to obtain identity encryption data, and the identity information corresponds uniquely to this terminal;

[0045] Send the session request signal and the identity encryption data to the vehicle-mounted video monitoring device based on the wireless network connection;

[0046] Receive the authentication success signal sent by the in-vehicle video monitoring device based on the wireless network connection;

[0047] In response to the authentication success signal, cooperate with the in-vehicle video monitoring device to establish a communication session channel based on the wireless network connection;

[0048] Send a data access signal to the in-vehicle video monitoring device through the communication session channel; and

[0049] Receive the video data sent by the in-vehicle video monitoring device through the communication session channel.

[0050] Further, after receiving the authentication success signal sent by the in-vehicle video monitoring device, encrypt the device type value of the pre-stored local terminal based on the second predetermined data encryption technology to obtain session encryption data. The step of cooperating with the in-vehicle video monitoring device to establish a communication session channel based on the wireless network connection in response to the authentication success signal specifically includes: sending the session encryption data to the in-vehicle video monitoring device based on the wireless network connection;

[0051] Receive the session establishment signal and the communication session code sent by the in-vehicle video monitoring device based on the wireless network connection; and in response to the session establishment signal, cooperate with the in-vehicle video monitoring device based on the wireless network connection and the second predetermined data encryption technology to establish a communication session channel capable of data encryption and decryption according to the corresponding communication session code.

[0052] After adopting the above technical solution, the embodiments of the present invention have at least the following beneficial effects: When the in-vehicle video monitoring device of the embodiment of the present invention establishes a wireless network connection with the wireless user terminal through the wireless hotspot module, it receives the identity encryption data and the session request signal sent by the wireless user terminal. First, it needs to decrypt the identity encryption data through the data decryption module to obtain the identity information of the wireless user terminal, so as to prevent lawbreakers from easily forging the identity information of the wireless user terminal to communicate with the in-vehicle video monitoring device. Further, the request response module is used to judge the identity information of the wireless user terminal to determine whether it meets the preset identity conditions, and only mark the wireless user terminal whose identity information meets the preset identity conditions as a connectable terminal, further ensuring the security of communication. Then, send an authentication success signal to the connectable terminal correspondingly, and then establish a communication session channel with the connectable terminal through the first session establishment module. Finally, send the corresponding video data in the video memory to the connectable terminal through the communication session channel through the data sending module, realizing the communication between the in-vehicle video monitoring device and the wireless user terminal, and effectively improving the security of data transmission. Description of the Drawings

[0053] Figure 1This is a schematic diagram showing the connection between an optional embodiment of the in-vehicle video monitoring device of the present invention and a wireless user terminal.

[0054] Figure 2 This is a schematic diagram showing the connection between another optional embodiment of the in-vehicle video monitoring device of the present invention and a wireless user terminal.

[0055] Figure 3 This is a flowchart showing the steps of an optional embodiment of the in-vehicle communication method of the present invention.

[0056] Figure 4 This is a detailed flowchart of step S15 in an optional embodiment of the in-vehicle communication method of the present invention.

[0057] Figure 5 This is a flowchart showing the steps of another optional embodiment of the in-vehicle communication method of the present invention.

[0058] Figure 6 This is a detailed flowchart of step S25 in another optional embodiment of the in-vehicle communication method of the present invention. Detailed implementation manners

[0059] The following further elaborates on the present application in conjunction with the accompanying drawings and specific embodiments. It should be understood that the following illustrative embodiments and explanations are only used to explain the present invention and do not limit the present invention. Moreover, in the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined with each other.

[0060] As Figure 1 shown, an optional embodiment of the present invention provides an in-vehicle video monitoring device 1, including:

[0061] A video memory 10 for storing video data;

[0062] A wireless hotspot module 11 for generating a wireless network hotspot and establishing a wireless network connection with the corresponding wireless user terminal 3 in response to the connection request of the wireless user terminal 3 to receive the identity encryption data and session request signal sent by the wireless user terminal 3;

[0063] A data decryption module 12 connected to the wireless hotspot module 11 for decrypting the identity encryption data based on a first predetermined data encryption technology to obtain the identity information of the wireless user terminal 3;

[0064] A request response module 13 connected to the wireless hotspot module 11 and the data decryption module 12 respectively for judging whether the identity information meets the preset identity conditions in response to the session request signal. If it meets the conditions, the wireless user terminal 3 is marked as a connectable terminal, and an authentication success signal is generated and sent to the connectable terminal through the wireless hotspot module 11;

[0065] The first session establishment module 14 is respectively connected to the request response module 13 and the wireless hotspot module 11, and is configured to establish a communication session channel with the connectable terminal through the wireless hotspot module 11 in response to the authentication success signal; and

[0066] The data sending module 15 is respectively connected to the wireless hotspot module 11, the first session establishment module 14, and the video memory 10, and is configured to receive and respond to the data access signal sent by the connectable terminal through the communication session channel, and send the corresponding video data in the video memory 10 to the connectable terminal through the communication session channel.

[0067] When the vehicle-mounted video monitoring device 1 according to the embodiment of the present invention establishes a wireless network connection with the wireless user terminal 3 through the wireless hotspot module 11 and receives the identity encryption data and the session request signal sent by the wireless user terminal 3, it is necessary to first decrypt the identity encryption data through the data decryption module 12 to obtain the identity information of the wireless user terminal 3, so as to prevent criminals from easily forging the identity information of the wireless user terminal 3 to communicate with the vehicle-mounted video monitoring device 1. Further, the request response module 13 is used to judge the identity information of the wireless user terminal 3 to determine whether it meets the preset identity conditions, and only mark the wireless user terminal 3 whose identity information meets the preset identity conditions as a connectable terminal, further ensuring the security of communication. Then, an authentication success signal is sent to the connectable terminal correspondingly, and then a communication session channel is established with the connectable terminal through the first session establishment module 14. Finally, the corresponding video data in the video memory 10 is sent to the connectable terminal through the communication session channel by the data sending module 15, realizing the communication between the vehicle-mounted video monitoring device 1 and the wireless user terminal 3, and effectively improving the security of data transmission.

[0068] In an optional embodiment of the present invention, as Figure 2 shown, the wireless hotspot module 11 also receives the session encryption data sent by the connectable terminal; the data decryption module 12 is also configured to decrypt the session encryption data based on the second predetermined data encryption technology to obtain the device type value of the connectable terminal; the video data includes real-time video data and delayed video data, and the first session establishment module 14 includes:

[0069] A permission setting unit 141, which is respectively connected to the wireless hotspot module 11 and the request-response module 13, and has a permission table built-in that reflects the corresponding relationship between the device type value of the wireless user terminal 3 and the access permissions of different data types of the video data. It is used to respond to the authentication success signal, search in the permission table for the device type value that matches the connectable terminal, add the identity information of the connectable terminal with the corresponding device type value in the permission table to the device white list and assign the corresponding access permission to the connectable terminal, and send a session establishment signal and a communication session code to the connectable terminal through the wireless hotspot module 11; and

[0070] A first channel establishment unit 143, which is respectively connected to the wireless hotspot module 11, the data decryption module 12 and the permission setting unit 141, and is used to cooperate with the connectable terminal through the wireless hotspot module 11 and the data decryption module 12 to establish a communication session channel that can realize data encryption and decryption according to the corresponding communication session code and access permission; the data sending module 15 is also connected to the permission setting unit 141, and when responding to the data access signal, first judges whether there is identity information in the device white list that matches the currently accessed wireless user terminal 3. If it exists, the video data in the video memory 10 that matches the access permission of the connectable terminal is sent to the connectable terminal through the communication session channel.

[0071] In this embodiment, the wireless hotspot module 11 receives the session encryption data sent by the connectable terminal, and after decrypting it by using the data decryption module 12, obtains the device type value of the connectable terminal. Thus, the permission setting unit 141 sets the data access permission of the connectable terminal according to the permission table and the device type value, so as to prevent the connectable terminal from randomly accessing and reading all types of video data in the video memory 10 and improve the data security; moreover, by cooperating with the connectable terminal to establish a communication session channel that can realize data encryption and decryption according to the corresponding communication session code and access permission, when conducting session communication through the communication session channel, encryption and decryption are always required to ensure the security of data transmission; in addition, by verifying and judging the identity information that matches the currently accessed wireless user terminal 3 with the device white list, other terminals are prevented from illegally communicating with the in-vehicle video monitoring device 1, and the communication security is improved.

[0072] In an alternative embodiment of the present invention, as Figure 2 shown, the device 1 further includes:

[0073] The status detection module 16 is respectively connected to the wireless hotspot module 11 and the data sending module 15, and is configured to detect the connection status between the wireless user terminal 3 and the wireless network hotspot, and delete the corresponding identity information in the device white list when the connection between the wireless user terminal 3 and the wireless network hotspot is disconnected. In this embodiment, after the wireless user terminal 3 is disconnected from the wireless network hotspot, by deleting its corresponding identity information in the device white list, it is possible to prevent criminals from impersonating this identity information to communicate with the vehicle-mounted video monitoring device 1.

[0074] On the other hand, as Figure 1 shown, another embodiment of the present invention provides a wireless user terminal 3, connected to the vehicle-mounted video monitoring device 1, including:

[0075] A hotspot connection module 30, configured to connect to the wireless network hotspot generated by the vehicle-mounted video monitoring device 1 to establish a wireless network connection with the vehicle-mounted video monitoring device 1;

[0076] An information storage module 32, configured to pre-store identity information uniquely corresponding to this terminal;

[0077] A data encryption module 34, connected to the information storage module 32, configured to encrypt the identity information based on a first predetermined data encryption technology to obtain identity encrypted data;

[0078] A session request module 35, connected to the data encryption module 34 and the hotspot connection module 30, configured to send a session request signal and the identity encrypted data to the vehicle-mounted video monitoring device 1 through the hotspot connection module;

[0079] A second session establishment module 36, connected to the hotspot connection module 30, configured to cooperate with the vehicle-mounted video monitoring device 1 to establish a communication session channel through the hotspot connection module 30 in response to an authentication success signal sent by the vehicle-mounted video monitoring device 1 and received and forwarded by the hotspot connection module 30; and

[0080] A data access module 38, respectively connected to the hotspot connection module 30 and the session request module 35, configured to send a data access signal to the vehicle-mounted video monitoring device 1 through the communication session channel, and receive video data sent by the vehicle-mounted video monitoring device 1 through the communication session channel.

[0081] When the wireless user terminal 3 in the embodiment of the present invention establishes a wireless network connection with the in-vehicle video monitoring device 1 through the hotspot connection module 30, it is necessary to first encrypt the identity information through the data encryption module 34 to obtain identity encryption data, and send the session request signal and the identity encryption data to the in-vehicle video monitoring device 1 to ensure the security of the transmission of the identity information; when the in-vehicle video monitoring device 1 determines that this terminal is a connectable terminal, it sends an authentication success signal to this terminal, and then the wireless user terminal 3 cooperates with the in-vehicle video monitoring device 1 through the second session establishment module 36 to establish a communication session channel through the hotspot connection module 30. Finally, the data access module 38 sends a data access signal to the in-vehicle video monitoring device 1 through the communication session channel, and receives the video data sent by the in-vehicle video monitoring device 1 through the communication session channel, realizing the communication between the in-vehicle video monitoring device 1 and the wireless user terminal 3, which can effectively improve the security of data transmission.

[0082] In specific implementation, it can be understood that the first predetermined data encryption technology is the RSA data encryption and decryption algorithm; the second predetermined data encryption technology is the AES data encryption and decryption algorithm; in addition, the identity information of different types of wireless user terminals 3 may be different, for example: IP address, IMEI code, etc., and the IP address is usually adopted in this solution.

[0083] In an alternative embodiment of the present invention, as Figure 2 shown, the information storage module 32 also prestores the device type value of this terminal; the data encryption module 34 also encrypts the device type value based on the second predetermined data encryption technology to obtain session encryption data; the second session establishment module 36 includes:

[0084] An information sending unit 361, connected to the data encryption module 34 and the hotspot connection module 30, for sending the session encryption data to the in-vehicle video monitoring device 1 through the hotspot connection module 30; and

[0085] A second channel establishment unit 363, connected to the data encryption module 34 and the hotspot connection module 30, for receiving the session establishment signal and the communication session code sent by the in-vehicle video monitoring device 1 through the hotspot connection module 30, and in response to the session establishment signal, cooperating with the in-vehicle video monitoring device 1 through the hotspot connection module 30 and the data encryption module 34 according to the corresponding communication session code to establish a communication session channel that can realize data encryption and decryption.

[0086] In this embodiment, the device type value of this terminal is also encrypted by the data encryption module 34 to obtain session encryption data, and the session encryption data is sent to the vehicle-mounted video monitoring device 1 through the hotspot connection module 30 to ensure the security of the transmission of the device type value. When the vehicle-mounted video monitoring device 1 confirms that this terminal can have a session according to the device type value of this terminal, it sends information such as a session establishment signal and a communication session code to this terminal. Thus, the second channel establishment unit 363 responds to the session establishment signal and cooperates with the vehicle-mounted video monitoring device 1 to establish a communication session channel capable of data encryption and decryption. When having a session communication through the communication session channel, encryption and decryption are always required to ensure the security of data transmission.

[0087] In specific implementation, the device type values of wireless user terminals 3 of different types are also different. For example, when the device type value type of the wireless user terminal 3 is 1, the terminal is a real-time video preview device, which correspondingly accesses the real-time video in the video storage 10 of the vehicle-mounted video monitoring device 1. When the vehicle-mounted video monitoring device 1 grants it data access permission, it can grant it the access permission of the RTSP application on port 554 of the video storage 10. When the device type value type of the wireless user terminal 3 is 2, the terminal is a file download device, which correspondingly accesses the delayed video in the video storage 10 of the vehicle-mounted video monitoring device 1. When the vehicle-mounted video monitoring device 1 grants it data access permission, it can grant it the access permission of the HTTP application on port 8080 of the video storage 10.

[0088] On the other hand, as Figure 3 shown, the embodiment of the present invention further provides a vehicle-mounted communication method, including:

[0089] S11: Generate a wireless network hotspot, and establish a wireless network connection with the wireless user terminal 3 in response to the connection request of the corresponding wireless user terminal 3;

[0090] S12: Receive the identity encryption data and the session request signal sent by the wireless user terminal 3 based on the wireless network connection;

[0091] S13: Decrypt the identity encryption data based on the first predetermined data encryption technology to obtain the identity information of the wireless user terminal 3;

[0092] S14: Judge whether the identity information meets the preset identity conditions in response to the session request signal. If it meets, mark the wireless user terminal 3 as a connectable terminal, and generate an authentication success signal and send the authentication success signal to the connectable terminal based on the wireless network connection;

[0093] S15: Cooperate with the connectable terminal to establish a communication session channel based on the wireless network connection; and

[0094] S16: Receive a data access signal sent by the connectable terminal through the communication session channel;

[0095] S17: In response to the data access signal, send the corresponding video data to the connectable terminal through the communication session channel.

[0096] In the embodiment of the present invention, when establishing a wireless network connection with the wireless user terminal 3, the identity encryption data and the session request signal sent by the wireless user terminal 3 are received. It is necessary to decrypt the identity encryption data first to obtain the identity information of the wireless user terminal 3, so as to prevent criminals from easily forging the identity information of the wireless user terminal 3 to communicate with the vehicle-mounted video monitoring device 1. Further, by judging the identity information of the wireless user terminal 3, it is determined whether it meets the preset identity conditions, and only the wireless user terminal 3 whose identity information meets the preset identity conditions is marked as a connectable terminal, further ensuring the security of communication. Then, a successful authentication signal is sent to the connectable terminal correspondingly. Then, a communication session channel is established with the connectable terminal. Finally, the corresponding video data in the video memory 10 is sent to the connectable terminal through the communication session channel, realizing the communication between the vehicle-mounted video monitoring device 1 and the wireless user terminal, and effectively improving the security of data transmission.

[0097] In an alternative embodiment of the present invention, after completing step S14, the session encryption data sent by the connectable terminal is also received based on the wireless network connection, and the session encryption data is decrypted based on the second predetermined data encryption technology to obtain the device type value of the connectable terminal. The video data includes real-time video data and delayed video data; as Figure 4 shown, the step S15 specifically includes:

[0098] S151: In response to the successful authentication signal, search for the device type value matching the connectable terminal in the permission table, add the identity information of the connectable terminal with the corresponding device type value in the permission table to the device white list and assign the corresponding access permission to the connectable terminal, and send a session establishment signal and a communication session code to the connectable terminal based on the wireless network connection. The permission table reflects the corresponding relationship between the device type value of the wireless user terminal 3 and the access permissions of different data types of the video data; and

[0099] S152: Based on the wireless network connection and the second predetermined data encryption technology, and in accordance with the corresponding communication session code and access permission, cooperate with the connectable terminal to establish a communication session channel capable of realizing data encryption and decryption;

[0100] When executing step S17 in response to the data access signal, first determine whether there is identity information in the device white list that matches the currently accessed wireless user terminal 3. If it exists, send the video data matching the access permission of the connectable terminal to the connectable terminal through the communication session channel.

[0101] In this embodiment, by receiving the session encryption data sent by the connectable terminal and obtaining the device type value of the connectable terminal after decryption, the data access permission of the connectable terminal is set according to the permission table and the device type value, thereby preventing the connectable terminal from randomly accessing and reading all types of video data and improving data security. Moreover, by cooperating with the connectable terminal based on the corresponding communication session code and access permission to establish a communication session channel that can implement data encryption and decryption, encryption and decryption are always required during session communication through the communication session channel to ensure the security of data transmission. In addition, by verifying and judging the identity information matching the currently accessed wireless user terminal 3 with the device white list, other terminals are prevented from illegally communicating with the in-vehicle video monitoring device 1, improving communication security.

[0102] In an alternative embodiment of the present invention, the method further includes:

[0103] Detect the connection status between the wireless user terminal 3 and the wireless network hotspot, and delete the corresponding identity information in the device white list when the connection between the wireless user terminal 3 and the wireless network hotspot is disconnected. In this embodiment, after the wireless user terminal 3 is disconnected from the wireless network hotspot, by deleting its corresponding identity information in the device white list, criminals are prevented from impersonating this identity information to communicate with the in-vehicle video monitoring device 1.

[0104] On the other hand, as Figure 5 shown, the embodiment of the present invention further provides an in-vehicle communication method, including:

[0105] S21: Establish a wireless network connection with the in-vehicle video monitoring device 1 by connecting to the wireless network hotspot generated by the in-vehicle video monitoring device 1;

[0106] S22: Encrypt the pre-stored identity information based on the first predetermined data encryption technology to obtain identity encryption data, and the identity information corresponds uniquely to this terminal;

[0107] S23: Send a session request signal and the identity encryption data to the in-vehicle video monitoring device 1 based on the wireless network connection;

[0108] S24: Receive the authentication success signal sent by the in-vehicle video monitoring device 1 based on the wireless network connection;

[0109] S25: In response to the authentication success signal, cooperate with the in-vehicle video monitoring device 1 to establish a communication session channel based on the wireless network connection;

[0110] S26: Send a data access signal to the in-vehicle video monitoring device 1 through the communication session channel; and

[0111] S27: Receive the video data sent by the in-vehicle video monitoring device 1 through the communication session channel.

[0112] In the embodiment of the present invention, through the above method, when the wireless user terminal 3 establishes a wireless network connection with the in-vehicle video monitoring device 1, it is necessary to first encrypt the identity information to obtain identity encryption data, and send the session request signal and the identity encryption data to the in-vehicle video monitoring device 1 to ensure the security of the transmission of identity information; when the in-vehicle video monitoring device 1 determines that this terminal is a connectable terminal, it sends an authentication success signal to this terminal, so that the wireless user terminal 3 and the in-vehicle video monitoring device 1 cooperate to establish a communication session channel, and finally send a data access signal to the in-vehicle video monitoring device 1 through the communication session channel, and receive the video data sent by the in-vehicle video monitoring device 1 through the communication session channel, realizing the communication between the in-vehicle video monitoring device 1 and the wireless user terminal 3, and effectively improving the security of data transmission.

[0113] In an alternative embodiment of the present invention, after completing step S24, the device type value of the pre-stored terminal is encrypted based on the second predetermined data encryption technology to obtain session encryption data. As Figure 6 shown, the step S25 specifically includes: S251: Send the session encryption data to the in-vehicle video monitoring device 1 based on the wireless network connection;

[0114] S252: Receive the session establishment signal and the communication session code sent by the in-vehicle video monitoring device 1 based on the wireless network connection; and

[0115] S253: In response to the session establishment signal, cooperate with the in-vehicle video monitoring device 1 based on the wireless network connection and the second predetermined data encryption technology to establish a communication session channel capable of data encryption and decryption according to the corresponding communication session code.

[0116] In this embodiment, the device type value of this terminal is also encrypted to obtain session encryption data, and the session encryption data is sent to the in-vehicle video monitoring device 1 to ensure the security of the transmission of the device type value. When the in-vehicle video monitoring device 1 confirms that this terminal can conduct a session based on the device type value of this terminal, it will send information such as a session establishment signal and a communication session code to this terminal. Then, in response to the session establishment signal, a communication session channel capable of data encryption and decryption is established in cooperation with the in-vehicle video monitoring device 1. When conducting session communication through the communication session channel, encryption and decryption are always required to ensure the security of data transmission.

[0117] If the functions described in the embodiments of the present invention are implemented in the form of software function modules or units and sold or used as independent products, they can be stored in a storage medium readable by a computing device. Based on such an understanding, the part that makes a contribution to the prior art in the embodiments of the present invention or a part of this technical solution can be embodied in the form of a software product. This software product is stored in a storage medium and includes several instructions for causing a computing device (which can be a personal computer, a server, a mobile computing device, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The foregoing storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks, or optical discs that can store program codes. The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. For the same or similar parts between the various embodiments, reference can be made to each other.

[0118] The embodiments of the present invention have been described above with reference to the accompanying drawings. However, the present invention is not limited to the above specific embodiments. The above specific embodiments are merely illustrative and not restrictive. Under the inspiration of the present invention, those of ordinary skill in the art can also make many forms without departing from the spirit and scope protected by the claims of the present invention. All of these fall within the protection scope of the present invention.

Claims

1. A vehicle-mounted video monitoring device, including a video memory for storing video data, characterized in that, The device further includes: A wireless hotspot module for generating a wireless network hotspot and establishing a wireless network connection with a corresponding wireless user terminal in response to a connection request from the wireless user terminal to receive identity encrypted data and a session request signal sent by the wireless user terminal; A data decryption module connected to the wireless hotspot module for decrypting the identity encrypted data based on a first predetermined data encryption technique to obtain the identity information of the wireless user terminal; A request response module connected to the wireless hotspot module and the data decryption module respectively, for judging whether the identity information meets a preset identity condition in response to the session request signal. If it meets, marking the wireless user terminal as a connectable terminal, generating an authentication success signal, and sending the authentication success signal to the connectable terminal through the wireless hotspot module; A first session establishment module connected to the request response module and the wireless hotspot module respectively, for establishing a communication session channel with the connectable terminal through the wireless hotspot module in response to the authentication success signal; and A data sending module connected to the wireless hotspot module, the first session establishment module and the video memory respectively, for receiving and responding to a data access signal sent by the connectable terminal through the communication session channel and sending corresponding video data in the video memory to the connectable terminal through the communication session channel.

2. The vehicle video monitoring device according to claim 1, wherein, The wireless hotspot module further receives session encrypted data sent by the connectable terminal; The data decryption module further decrypts the session encrypted data based on a second predetermined data encryption technique to obtain the device type value of the connectable terminal; The video data includes real-time video data and delayed video data. The first session establishment module includes: A permission setting unit connected to the wireless hotspot module and the request response module respectively, with a permission table built-in that reflects the corresponding relationship between the device type value of the wireless user terminal and the access permissions of different data types of the video data. It is used to search for the device type value matching the connectable terminal in the permission table in response to the authentication success signal, add the identity information of the connectable terminal with the corresponding device type value in the permission table to the device white list, assign the corresponding access permission to the connectable terminal, and send a session establishment signal and a communication session code to the connectable terminal through the wireless hotspot module; and A first channel establishment unit connected to the wireless hotspot module and the permission setting unit respectively, for establishing a communication session channel capable of data encryption and decryption with the connectable terminal through the wireless hotspot module and the data decryption module according to the corresponding communication session code and access permission; The data sending module is further connected to the permission setting unit, and when responding to the data access signal, first judges whether there is identity information matching the currently accessed wireless user terminal in the device white list. If it exists, sends the video data matching the access permission of the connectable terminal in the video memory to the connectable terminal through the communication session channel.

3. The vehicle-mounted video monitoring device according to claim 2, characterized in that, The device further includes: A status detection module, which is respectively connected to the wireless hotspot module and the data sending module, and is used to detect the connection status between the wireless user terminal and the wireless network hotspot, and delete the corresponding identity information in the device whitelist when the connection between the wireless user terminal and the wireless network hotspot is disconnected.

4. A wireless user terminal, connected to a vehicle-mounted video surveillance device, characterized in that, The wireless user terminal includes: A hotspot connection module, which is used to connect to the wireless network hotspot generated by the vehicle-mounted video monitoring device to establish a wireless network connection with the vehicle-mounted video monitoring device; An information storage module, which is used to pre-store the identity information uniquely corresponding to this terminal; A data encryption module, which is connected to the information storage module, and is used to encrypt the identity information based on a first predetermined data encryption technology to obtain identity encrypted data; A session request module, which is connected to the data encryption module and the hotspot connection module, and is used to send a session request signal and the identity encrypted data to the vehicle-mounted video monitoring device through the hotspot connection module; A second session establishment module, which is connected to the hotspot connection module, and is used to cooperate with the vehicle-mounted video monitoring device to establish a communication session channel through the hotspot connection module in response to the authentication success signal sent by the vehicle-mounted video monitoring device and received and forwarded by the hotspot connection module; and A data access module, which is respectively connected to the hotspot connection module and the session request module, and is used to send a data access signal to the vehicle-mounted video monitoring device through the communication session channel, and receive the video data sent by the vehicle-mounted video monitoring device through the communication session channel.

5. The wireless user terminal according to claim 4, characterized in that, The information storage module further pre-stores the device type value of this terminal; the data encryption module further encrypts the device type value based on a second predetermined data encryption technology to obtain session encrypted data; The second session establishment module includes: An information sending unit, which is connected to the data encryption module and the hotspot connection module, and is used to send the session encrypted data to the vehicle-mounted video monitoring device through the hotspot connection module; And A second channel establishment unit, which is connected to the data encryption module and the hotspot connection module, and is used to receive the session establishment signal and the communication session code sent by the vehicle-mounted video monitoring device through the hotspot connection module, and in response to the session establishment signal, cooperate with the vehicle-mounted video monitoring device through the hotspot connection module and the data encryption module according to the corresponding communication session code to establish a communication session channel that can implement data encryption and decryption.

6. A vehicle-mounted communication method, characterized in that, The method includes: Generating a wireless network hotspot, and establishing a wireless network connection with the wireless user terminal in response to the connection request of the corresponding wireless user terminal; Receiving the identity encrypted data and the session request signal sent by the wireless user terminal based on the wireless network connection; Decrypt the identity-encrypted data based on a first predetermined data encryption technique to obtain the identity information of the wireless user terminal; in response to the session request signal, determine whether the identity information meets a preset identity condition. If it meets the condition, mark the wireless user terminal as a connectable terminal, generate an authentication success signal, and send the authentication success signal to the connectable terminal based on the wireless network connection; In response to the authentication success signal, cooperate with the connectable terminal to establish a communication session channel based on the wireless network connection; Receive a data access signal sent by the connectable terminal through the communication session channel; and In response to the data access signal, send corresponding video data to the connectable terminal through the communication session channel.

7. The vehicle-mounted communication method according to claim 6, wherein, After sending an authentication success signal to the connectable terminal, also receive session-encrypted data sent by the connectable terminal based on the wireless network connection, and decrypt the session-encrypted data based on a second predetermined data encryption technique to obtain the device type value of the connectable terminal. The video data includes real-time video data and delayed video data; The step of cooperating with the connectable terminal to establish a communication session channel based on the wireless network connection in response to the authentication success signal specifically includes: In response to the authentication success signal, search for a device type value matching the connectable terminal in a pre-stored permission table, add the identity information of the connectable terminal with the corresponding device type value in the permission table to a device white list and grant the corresponding access permission to the connectable terminal, and send a session establishment signal and a communication session code to the connectable terminal based on the wireless network connection. The permission table reflects the corresponding relationship between the device type value of the wireless user terminal and the access permissions of different data types of the video data; And Based on the wireless network connection and the second predetermined data encryption technique, and in accordance with the corresponding communication session code and access permission, cooperate with the connectable terminal to establish a communication session channel capable of data encryption and decryption; When responding to the data access signal, first determine whether there is identity information in the device white list that matches the currently accessed wireless user terminal. If it exists, send the video data matching the access permission of the connectable terminal to the connectable terminal through the communication session channel.

8. The vehicle-mounted communication method according to claim 7, wherein The method further includes: Detect the connection status between the wireless user terminal and the wireless network hotspot, and delete the corresponding identity information in the device white list when the connection between the wireless user terminal and the wireless network hotspot is disconnected.

9. A vehicle-mounted communication method, characterized in that, The method includes: Connect to a wireless network hotspot generated by an in-vehicle video monitoring device to establish a wireless network connection with the in-vehicle video monitoring device; Encrypt the pre-stored identity information based on a first predetermined data encryption technique to obtain identity-encrypted data, where the identity information corresponds uniquely to this terminal; Send a session request signal and the identity-encrypted data to the in-vehicle video monitoring device based on the wireless network connection; Receive an authentication success signal sent by the in-vehicle video monitoring device based on the wireless network connection; In response to the authentication success signal, cooperate with the in-vehicle video monitoring device to establish a communication session channel based on the wireless network connection; Send a data access signal to the in-vehicle video monitoring device through the communication session channel; and Receive the video data sent by the in-vehicle video monitoring device through the communication session channel.

10. The vehicle-mounted communication method according to claim 9, characterized in that, After receiving the authentication success signal sent by the in-vehicle video monitoring device, further encrypt the device type value of the pre-stored local terminal based on the second predetermined data encryption technology to obtain session encryption data. The step of cooperating with the in-vehicle video monitoring device to establish a communication session channel based on the wireless network connection in response to the authentication success signal specifically includes: Send the session encryption data to the in-vehicle video monitoring device based on the wireless network connection; Receive the session establishment signal and the communication session code sent by the in-vehicle video monitoring device based on the wireless network connection; and In response to the session establishment signal, cooperate with the in-vehicle video monitoring device based on the wireless network connection and the second predetermined data encryption technology to establish a communication session channel capable of data encryption and decryption according to the corresponding communication session code.

Images