A method, system and device for inter-application data encryption communication based on a dbus bus

Abstract

The application discloses an inter-application data encryption communication method based on a dbus bus, an inter-application data encryption communication system based on the dbus bus, an inter-application data encryption communication device based on the dbus bus, an electronic device, a storage medium and a vehicle, and comprises the following steps: a session is created between a server and a client, and a communication session process is executed; a communication daemon process is executed to perform communication authentication processing on the communication session process; the communication authentication processing comprises communication encryption through an authorization certificate and an authorization key, and authentication of a session data unit is performed according to the certificate and the key; if the authentication result is true, the session data unit is retained in the communication session process; and if the authentication result is false, the session data unit in the communication session process is blocked. Through the above scheme, the authorization certificate and the authorization key are double-authenticated, and the security level of the communication connection is improved relative to the original encryption mode of the digital certificate or the digital key alone.

Description

Technical Field

[0001] This application relates to the field of communications, and in particular to an inter-application data encryption communication method, an inter-application data encryption communication system, an inter-application data encryption communication device, an electronic device, a storage medium, and a vehicle based on a dbus bus. Background Technology

[0002] Currently, in-vehicle infotainment systems mainly consist of two parts: an information system, primarily operating on Linux or QNX, and an entertainment system, primarily operating on Android. With advancements in technology, the security of information systems has become increasingly important. Although some redundancy designs have been incorporated into the system design, such as data encryption and secure data storage, there is a lack of comprehensive technical solutions for encrypting data communication between applications.

[0003] For example, the existing default IPC communication methods in Linux and QNX are plaintext communication, and the data is not encrypted. If data encryption is required, then services or applications that do not treat IPC communication as such need to encrypt the data first, and then decode it after the data transmission is completed. Each client and server side of IPC communication needs to encrypt and decode the data, and it is also impossible to guarantee that communication data within the system will not be damaged or information will be leaked when non-system default programs are running.

[0004] Therefore, this application proposes a highly versatile encrypted communication framework to implement communication encryption, with the aim of reducing application development cycle and improving development efficiency. Summary of the Invention

[0005] The purpose of this invention is to provide an inter-application data encryption communication method, an inter-application data encryption communication system, an inter-application data encryption communication device, an electronic device, a storage medium, and a vehicle based on the D-Bus bus, thereby solving at least one of the aforementioned technical problems.

[0006] This invention provides the following solution:

[0007] According to one aspect of the present invention, an inter-application data encryption communication method based on the dbus bus is provided, characterized in that a server and a client establish communication, and the inter-application data encryption communication method based on the dbus bus includes:

[0008] The server and client create a session and execute the communication session process.

[0009] The communication daemon performs communication authentication on the communication session process.

[0010] The communication authentication process includes encrypting communication using an authorization certificate and an authorization key, and authenticating session data units based on the certificate and key.

[0011] If the authentication result is true, the session data unit is retained in the communication session process;

[0012] If the authentication result is false, then the session data unit in the communication session process will be blocked.

[0013] Furthermore, the encryption of the authorization key communication includes:

[0014] During the execution of a communication session, the server or client sends session data and encrypts the session data to generate encrypted data.

[0015] The encrypted data packets are then processed into data packets of one or more lengths;

[0016] The data packet is forwarded to the client or server by the execution of the communication daemon process, and encrypted data is obtained by unpacking the data packet.

[0017] This involves processing encrypted data packets into data packets, including mixing redundant and invalid data into the data packets;

[0018] After unpacking the data packets, redundant and invalid data are removed to obtain the encrypted data.

[0019] Furthermore, the authentication includes:

[0020] During the execution of the communication session, after the server starts the service mode, it sends an authentication request to the communication daemon process;

[0021] The authentication daemon performs authentication matching processing on authentication requests, blocks authentication requests that fail to match in the communication session process, and returns the authentication results of successful authentication matching to the server.

[0022] Furthermore, the authentication also includes:

[0023] During the execution of the communication session, after the client starts the client mode, it sends an authentication request to the communication daemon process;

[0024] The authentication daemon performs authentication matching processing on authentication requests, blocks authentication requests that fail to match in the communication session process, and returns the authentication result of successful matching to the client.

[0025] Furthermore, the mixing of redundant and invalid data into the data packet includes:

[0026] Set the ratio parameters for redundant and invalid data on the server and client sides, and set corresponding parameters for removing redundant and invalid data on the client and server sides.

[0027] According to two aspects of the present invention, an inter-application data encryption communication system based on the dbus bus is provided, the inter-application data encryption communication system based on the dbus bus includes: a communication module daemon process module and a communication session module;

[0028] The communication module daemon is used to authenticate each session process and block unauthorized modules based on the authentication failure of the session process.

[0029] The communication session module is used to create a session and, during the communication session process, initiate an authentication request to the communication module daemon module.

[0030] The communication module daemon process module performs authentication processing on each session process of the communication session module based on the authentication request initiated by the communication session module.

[0031] Specifically, unauthorized modules are marked based on the result of authentication failure in the session process, and sessions initiated by unauthorized modules are blocked.

[0032] According to three aspects of the present invention, an inter-application data encryption communication device based on a D-Bus bus is provided, the D-Bus bus-based inter-application data encryption communication device comprising:

[0033] The session creation module is used to create a session between the server and the client and execute the communication session process.

[0034] The authentication module is used to execute the communication daemon to perform communication authentication on the communication session process.

[0035] According to four aspects of the present invention, an electronic device is provided, comprising: a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other via the communication bus;

[0036] The memory stores a computer program that, when executed by the processor, causes the processor to perform the steps of the D-Bus-based inter-application data encryption communication method.

[0037] According to five aspects of the present invention, a computer-readable storage medium is provided, comprising: storing a computer program executable by an electronic device, wherein when the computer program is run on the electronic device, the electronic device causes the electronic device to perform the steps of the dbus-based inter-application data encryption communication method.

[0038] According to six aspects of the present invention, a vehicle is provided, comprising:

[0039] An electronic device for implementing the steps of the D-Bus bus-based inter-application encrypted data communication method;

[0040] The processor runs a program, and when the program runs, it executes the steps of the inter-application data encryption communication method based on the dbus bus by taking data output from the electronic device.

[0041] A storage medium for storing a program that, when running, executes the steps of the D-Bus bus-based inter-application data encryption communication method on data output from an electronic device.

[0042] The above solution achieves the following beneficial technical effects:

[0043] This application enhances the security level of communication connections through dual authentication, compared to the original method of encrypting solely with digital certificates or digital keys.

[0044] This application presents an encrypted communication method based on Linux or QNX systems, which can automatically encrypt and decrypt communication data between applications, ensuring information security during data communication, reducing application development cycles, and improving development and deployment efficiency.

[0045] This application reduces the probability of data decryption by incorporating redundant and invalid data during the data encryption process. Attached Figure Description

[0046] Figure 1 This is a flowchart of an inter-application data encryption communication method based on the dbus bus provided by one or more embodiments of the present invention.

[0047] Figure 2 This is a structural diagram of an inter-application data encryption communication device based on the dbus bus provided in one or more embodiments of the present invention.

[0048] Figure 3 This is a schematic diagram of an inter-application data encryption communication system based on the dbus bus provided by one or more embodiments of the present invention.

[0049] Figure 4 This is a schematic diagram of an inter-application communication framework according to a specific embodiment of the present invention.

[0050] Figure 5 This is a schematic diagram illustrating inter-application communication data encryption according to a specific embodiment of the present invention.

[0051] Figure 6 This is a schematic diagram of inter-application communication authentication according to a specific embodiment of the present invention.

[0052] Figure 7 This is a block diagram of an electronic device structure for an inter-application data encryption communication method based on the dbus bus, provided by one or more embodiments of the present invention. Detailed Implementation

[0053] The technical solution of the present invention will now be clearly and completely described with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0054] Figure 1 This is a flowchart of an inter-application data encryption communication method based on the dbus bus provided by one or more embodiments of the present invention.

[0055] like Figure 1 As shown, the server and client establish communication. The data encryption communication method between applications based on the D-Bus bus includes:

[0056] Step S1: A session is created between the server and the client, and the communication session process is executed;

[0057] Step S2: Execute the communication daemon process to perform communication authentication on the communication session process;

[0058] Step S3, the communication authentication process includes encrypting communication using an authorization certificate and an authorization key, and authenticating the session data unit based on the certificate and key;

[0059] Step S4: If the authentication result is true, then retain the session data unit in the communication session process;

[0060] Step S5: If the authentication result is false, then block the session data unit in the communication session process.

[0061] The above solution achieves the following beneficial technical effects:

[0062] This application enhances the security level of communication connections by using dual authentication with both an authorization certificate and an authorization key, compared to the original method of encryption using only digital certificates or digital keys.

[0063] This application presents an encrypted communication method based on Linux or QNX systems, which can automatically encrypt and decrypt communication data between applications, ensuring information security during data communication, reducing application development cycles, and improving development and deployment efficiency.

[0064] This application reduces the probability of data decryption by incorporating redundant and invalid data during the data encryption process.

[0065] Specifically, applications can be used as servers or clients on Linux or QNX systems. This allows for automatic encryption and decryption of communication data between applications (services), ensuring information security during data communication, reducing application (service) development cycles, and improving development and deployment efficiency. Currently, most solutions establish sessions between applications (services) using plaintext communication; if session data is intercepted, information may be leaked.

[0066] For example, IPC is a method of inter-application communication. Linux and QNX use IPC by default. IPC communication itself is plaintext communication; data is not encrypted. If data encryption is required, then any service or application that treats IPC communication must first encrypt the data, and then decrypt it after transmission. Each client and server in an IPC communication needs to encrypt and decrypt the data, and it's impossible to guarantee against damage to internal communication data or information leakage when non-system default programs are running. Therefore, using double encryption when sending data increases the difficulty of cracking and achieves data security. Double authentication when receiving data further enhances the level of data security.

[0067] The communication daemon can be nested within the communication session process and start with the main system. Each communication session will first undergo authentication by the communication daemon to remove data that poses a risk of leakage. It can even block modules and applications that fail to authenticate data transmission, preventing certain cracked applications from masquerading as applications within the system.

[0068] For example, when calling the communication module to execute a communication session, the session process must be performed while the communication daemon is running.

[0069] Of course, IPC communication is only one way for system applications to communicate, not the only way. Other communication methods can also refer to the dual authentication method.

[0070] In this embodiment, the encryption of the authorization key communication includes:

[0071] During the execution of a communication session, the server or client sends session data and encrypts the session data to generate encrypted data.

[0072] The encrypted data packets are then processed into data packets of one or more lengths;

[0073] The communication daemon forwards data packets to the client or server, and the encrypted data is obtained by unpacking the data packets.

[0074] This involves processing encrypted data packets into data packets, including mixing redundant and invalid data into the data packets;

[0075] After unpacking the data packets, redundant and invalid data are removed to obtain the encrypted data.

[0076] Specifically, authorization certificates are usually pre-set authentication mechanisms that rely on digital certificate services, while keys are set and executed within the system. Data can be encrypted first using the public key to generate encrypted data, and then the data is obtained in plaintext through dual authentication. When receiving data, the data is first decrypted using the key for the first authentication process, and then a second authentication process is performed using the digital certificate.

[0077] When encrypting data, the data can be packaged into multiple data packets of different lengths, making it impossible for the cracking party to identify the data segmentation boundaries. In addition, some redundant or invalid data that is unrelated to the original plaintext data should be added to the data so that the decoded data cannot directly reflect a data style with practical significance.

[0078] Both the server and client can initiate data transmission, with the other side handling authentication. Both the server and client have pre-defined encryption and decoding parameters to ensure compatibility and exclude unauthorized connections.

[0079] In this embodiment, authentication includes:

[0080] During the execution of a communication session, after the server starts the service mode, it sends an authentication request to the communication daemon process;

[0081] The authentication daemon processes authentication requests, blocks authentication requests that fail to match during the communication session, and returns successful authentication results to the server.

[0082] Specifically, for example, after the server starts service mode, it first sends an authentication request to the communication daemon. After authentication, in addition to blocking illegal data and allowing legitimate data, it also returns the authentication result to the server that sent the authentication request. If the server is legitimate, but the authentication fails in this round due to some data interference, it can resend the data and re-initiate the authentication process, ultimately allowing valid data to be delivered to the client.

[0083] In this embodiment, authentication also includes:

[0084] During the execution of a communication session, after the client starts client mode, it sends an authentication request to the communication daemon process;

[0085] The communication daemon performs authentication matching on authentication requests, blocks authentication requests that fail to match in the communication session process, and returns the authentication result of successful matching to the client.

[0086] Specifically, for example, when a client starts client mode, it first sends an authentication request to the communication daemon. After authentication, in addition to blocking illegal data and allowing legitimate data, it also returns the authentication result to the client that initiated the authentication request. If the client is legitimate but the authentication fails due to data interference, it can re-initiate the authentication process, ultimately allowing valid data to be transmitted to the server. Whether the application acts as a server or a client is not fixed and can be switched according to the specific application scenario, but the authentication process does not lose its data protection function regardless of whether it is a server or a client.

[0087] In this embodiment, mixing redundant and invalid data into the data packet includes:

[0088] Set parameters for the proportion of redundant and invalid data on both the server and client sides, and set parameters for removing redundant and invalid data on both the client and server sides respectively.

[0089] Specifically, communication between the server and the client does not use plaintext directly; the encryption method and decoding scheme need to be set accordingly to ensure that authentication can be performed smoothly.

[0090] For example, if the ratio of redundant and invalid data used for server-side encryption differs from the ratio used for client-side decoding, the encryption state on the server side may be unclear, preventing the client from successfully decoding. It's also possible that a server can have multiple clients; by adjusting the ratio of redundant and invalid data, a single server can communicate with multiple clients. A client can also connect to multiple servers and choose to receive encrypted data from one of them for decoding.

[0091] On the same server or client, different ratios of redundant and invalid data can be used for sending and receiving, and the data can be rotated or reset according to preset jump rules.

[0092] Figure 2 This is a structural diagram of an inter-application data encryption communication device based on the dbus bus provided in one or more embodiments of the present invention.

[0093] like Figure 2 As shown, the application-to-application data encryption communication device based on the dbus bus includes: a session creation module and an authentication processing module;

[0094] The session creation module is used to create sessions between the server and the client and execute the communication session process.

[0095] The authentication module is used to execute the communication daemon to perform communication authentication on the communication session process.

[0096] It is worth noting that although this system only discloses the session creation module and the authentication processing module, it does not mean that this device is limited to the above-mentioned basic functional modules. On the contrary, what this invention intends to express is that, based on the above-mentioned basic functional modules, those skilled in the art can add one or more functional modules in combination with the prior art to form an infinite number of embodiments or technical solutions. That is to say, this system is open rather than closed. It cannot be assumed that the scope of protection of the claims of this invention is limited to the above-disclosed basic functional modules just because this embodiment only discloses a few basic functional modules.

[0097] Figure 3 This is a schematic diagram of an inter-application data encryption communication system based on the dbus bus provided by one or more embodiments of the present invention.

[0098] like Figure 3 As shown, the application-to-application encrypted data communication system based on the dbus bus includes: a communication module daemon process module and a communication session module;

[0099] The communication module daemon is used to authenticate each session process and block unauthorized modules based on the authentication failure of the session process.

[0100] The communication session module is used to create sessions and initiate authentication requests to the communication module daemon during the communication session process.

[0101] The communication module daemon process module performs authentication processing on each session process of the communication session module based on the authentication request initiated by the communication session module.

[0102] Specifically, unauthorized modules are marked based on the result of authentication failure in the session process, and sessions initiated by unauthorized modules are blocked.

[0103] Specifically, the communication module daemon can be used as the main process of the communication architecture to authenticate each session (i.e., the connection of each communication module), and unauthorized modules will be blocked. The communication module daemon also includes an external interface module, a data scheduling module, and a communication authentication module. The external interface module is used to implement communication with the communication modules and system console command scheduling. The data scheduling module is used to establish a data buffer and schedule and transfer received / sent data. The communication authentication module is used to implement dual authentication of the communication modules and to block connections from unauthorized modules (including unauthorized modules masquerading as authorized modules).

[0104] The communication session module also includes a communication module, an external interface module, a communication authentication module, a service mode processing module, a client mode processing module, a data encryption module, and a data decryption module. The communication module is used by the communication session process to call the basic communication library, establish a connection with the main process, encrypt / decrypt communication data, and implement both service and client communication modes. The external interface module is used for the communication session process's calling interface. The communication authentication module is used to implement communication authentication with the main process. The service mode processing module is used to implement basic network communication reception, large data packet differential and merging, data broadcasting and subscription, and other functions. The client mode processing module is used to implement basic network communication reception, large data packet differential and merging. The data encryption module is used to encrypt input data, encrypting the data using an encryption algorithm, assembling the encrypted data into fixed-length data packets, and mixing in redundant and invalid data packets. The data decryption module is used to decrypt the data, removing redundant and invalid data, and then encrypting the data using a decryption algorithm.

[0105] Figure 4 This is a schematic diagram of an inter-application communication framework according to a specific embodiment of the present invention.

[0106] Figure 5 This is a schematic diagram illustrating inter-application communication data encryption according to a specific embodiment of the present invention.

[0107] Figure 6 This is a schematic diagram of inter-application communication authentication according to a specific embodiment of the present invention.

[0108] like Figure 4 As shown, a server module and a client mode are set up between the two communication modules, and a daemon process is executed to protect the data between the server and the client.

[0109] like Figure 5 As shown, for example, when implementing data broadcasting and subscription functions, after the session process calls the send data interface, the sent data will be encrypted by the encryption module to generate encrypted data. The encrypted data is then packetized into data packets of one or more fixed lengths, and redundant and invalid data are mixed into the data packets. The proportion and quantity of mixed data can be set through the interface. The data packets are then forwarded by the main process to the target session process. The receiving session unpacks the data packets, removes invalid and redundant data, decodes the data, and sends a callback back to the session.

[0110] like Figure 6 As shown, the communication daemon starts when the main system starts, and other processes that call the communication module need to depend on the startup status of the communication daemon.

[0111] For example, during communication authentication, both the server and client sides of the session process need to perform communication authentication. The session process initiates an authentication request, the daemon process matches the request information, and returns the authentication result. When the client authenticates, it needs to match the authentication information provided by the service; authentication requests that do not match are considered invalid. Invalid authentication requests and sessions will be blocked.

[0112] Communication authentication includes the authorized certificate and the authorized public key. Dual authentication using both the certificate and public key is performed. During the authentication process, the authentication content needs to be encrypted before submitting the authentication request.

[0113] Digital certificates and key technology are existing technologies. Combining the two encryption technologies for dual authentication enhances the level of data confidentiality.

[0114] Figure 7 This is a block diagram of an electronic device structure for a vehicle active anti-theft method provided in one or more embodiments of the present invention.

[0115] like Figure 7 As shown, this application provides an electronic device, including: a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

[0116] The memory stores a computer program, which, when executed by the processor, causes the processor to perform steps of an inter-application data encryption communication method based on the dbus bus.

[0117] This application also provides a computer-readable storage medium storing a computer program executable by an electronic device, which, when run on the electronic device, causes the electronic device to perform the steps of an inter-application data encryption communication method based on the dbus bus.

[0118] This application also provides a vehicle, including:

[0119] An electronic device for implementing a method for encrypted data communication between applications based on the dbus bus;

[0120] The processor runs a program, and when the program runs, it executes the steps of an inter-application encrypted data communication method based on the dbus bus from the data output by the electronic device.

[0121] A storage medium used to store programs that, when running, execute steps of an inter-application data encryption communication method based on the dbus bus on data output from an electronic device.

[0122] The communication bus mentioned in the above electronic devices can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used to represent it in the diagram, but this does not mean that there is only one bus or one type of bus.

[0123] The electronic device comprises a hardware layer, an operating system layer running on top of the hardware layer, and an application layer running on the operating system. The hardware layer includes hardware such as a central processing unit (CPU), a memory management unit (MMU), and memory. The operating system can be any one or more computer operating systems that control the electronic device through processes, such as Linux, Unix, Android, iOS, or Windows. Furthermore, in this embodiment of the invention, the electronic device can be a smartphone, tablet computer, or other handheld device, or a desktop computer, portable computer, or other electronic device; there is no particular limitation in this embodiment.

[0124] In this embodiment of the invention, the executing entity for electronic device control can be an electronic device itself, or a functional module within an electronic device capable of calling and executing a program. The electronic device can obtain the firmware corresponding to the storage medium. This firmware is provided by the supplier, and different storage media may have the same or different firmware; no limitation is made here. After obtaining the firmware corresponding to the storage medium, the electronic device can write this firmware into the storage medium; specifically, it burns the firmware corresponding to the storage medium into the storage medium. The process of burning the firmware into the storage medium can be implemented using existing technology, and will not be elaborated upon in this embodiment of the invention.

[0125] Electronic devices can also obtain reset commands corresponding to storage media. These reset commands are provided by the supplier, and the reset commands for different storage media can be the same or different, which is not limited here.

[0126] At this time, the storage medium of the electronic device is a storage medium on which the corresponding firmware has been written. The electronic device can respond to the reset command corresponding to the storage medium on which the corresponding firmware has been written, thereby resetting the storage medium on which the corresponding firmware has been written according to the reset command. The process of resetting the storage medium according to the reset command can be implemented by existing technology and will not be described in detail in this embodiment of the invention.

[0127] For ease of description, the above devices are described separately by function as various units and modules. Of course, in implementing this application, the functions of each unit and module can be implemented in one or more software and / or hardware.

[0128] It will be understood by those skilled in the art that, unless otherwise defined, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. It should also be understood that terms such as those defined in general dictionaries should be understood to have the meaning consistent with their meaning in the context of the prior art, and should not be interpreted in an idealized or overly formal sense unless specifically defined.

[0129] For the sake of simplicity, the method embodiments are described as a series of actions. However, those skilled in the art should understand that the embodiments of the present invention are not limited to the described order of actions, because according to the embodiments of the present invention, some steps can be performed in other orders or simultaneously. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions involved are not necessarily essential to the embodiments of the present invention.

[0130] As can be seen from the above description of the embodiments, those skilled in the art can clearly understand that this application can be implemented by means of software plus necessary general-purpose hardware platforms. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in various embodiments or some parts of the embodiments of this application.

[0131] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for encrypted data communication between applications based on the D-Bus bus, characterized in that, The server and client establish communication, and the inter-application data encryption communication method based on the dbus bus includes: The server and client create a session and execute the communication session process. The communication daemon performs communication authentication on the communication session process. The communication authentication process includes encrypting communication using an authorization certificate and an authorization key, and authenticating session data units based on the certificate and key. If the authentication result is true, the session data unit is retained in the communication session process; If the authentication result is false, then the session data unit in the communication session process will be blocked.

2. The inter-application data encryption communication method based on the D-Bus bus according to claim 1, characterized in that, The authorization key communication encryption includes: During the execution of a communication session, the server or client sends session data and encrypts the session data to generate encrypted data. The encrypted data packets are then processed into data packets of one or more lengths; The data packet is forwarded to the client or server by the execution of the communication daemon process, and encrypted data is obtained by unpacking the data packet. This involves processing encrypted data packets into data packets, including mixing redundant and invalid data into the data packets; After unpacking the data packets, redundant and invalid data are removed to obtain the encrypted data.

3. The inter-application data encryption communication method based on the D-Bus bus according to claim 2, characterized in that, The authentication includes: During the execution of the communication session, after the server starts the service mode, it sends an authentication request to the communication daemon process; The authentication daemon performs authentication matching processing on authentication requests, blocks authentication requests that fail to match in the communication session process, and returns the authentication results of successful authentication matching to the server.

4. The inter-application data encryption communication method based on the D-Bus bus according to claim 3, characterized in that, The authentication also includes: During the execution of the communication session, after the client starts the client mode, it sends an authentication request to the communication daemon process; The authentication daemon performs authentication matching processing on authentication requests, blocks authentication requests that fail to match in the communication session process, and returns the authentication result of successful matching to the client.

5. The inter-application data encryption communication method based on the D-Bus bus according to claim 2, characterized in that, The mixing of redundant and invalid data into the data packet includes: Set the ratio parameters for redundant and invalid data on the server and client sides, and set corresponding parameters for removing redundant and invalid data on the client and server sides.

6. An inter-application data encryption communication system based on the D-Bus bus, characterized in that, The application-to-application encrypted communication system based on the dbus bus includes: a communication module daemon process module and a communication session module; The communication module daemon is used to authenticate each session process and block unauthorized modules based on the authentication failure of the session process. The communication session module is used to create a session and, during the communication session process, initiate an authentication request to the communication module daemon module. The communication module daemon process module performs authentication processing on each session process of the communication session module based on the authentication request initiated by the communication session module. Specifically, unauthorized modules are marked based on the result of authentication failure in the session process, and sessions initiated by unauthorized modules are blocked.

7. An inter-application data encryption communication device based on the D-Bus bus, characterized in that, The application-to-application encrypted communication device based on the dbus bus includes: The session creation module is used to create sessions between the server and the client and execute the communication session process. The authentication processing module is used to execute the communication daemon to perform communication authentication processing on the communication session process; The communication authentication process includes encrypting communication using an authorization certificate and an authorization key, and authenticating session data units based on the certificate and key. If the authentication result is true, the session data unit is retained in the communication session process; If the authentication result is false, then the session data unit in the communication session process will be blocked.

8. An electronic device, characterized in that, include: The processor, communication interface, memory, and communication bus are connected, with the processor, communication interface, and memory communicating with each other via the communication bus. The memory stores a computer program that, when executed by the processor, causes the processor to perform the steps of the inter-application data encryption communication method based on the dbus bus as described in any one of claims 1 to 5.

9. A computer-readable storage medium, characterized in that, include: It stores a computer program executable by an electronic device, which, when run on the electronic device, causes the electronic device to perform the steps of the inter-application data encryption communication method based on the dbus bus as described in any one of claims 1 to 5.

10. A vehicle, characterized in that, include: An electronic device for implementing the steps of the dbus-based inter-application data encryption communication method according to any one of claims 1 to 5; A processor that runs a program, and when the program runs, it executes the steps of the inter-application data encryption communication method based on the dbus bus as described in any one of claims 1 to 5 from data output by the electronic device. A storage medium for storing a program that, when running, performs the steps of the inter-application data encryption communication method based on any one of claims 1 to 5 on data output from an electronic device.

Images