A detection method, device, apparatus and storage medium

Abstract

The application discloses a detection method, device and equipment and a storage medium. The method comprises the following steps: obtaining an initial side information set in a security access service process of a target controller; performing time-frequency transformation on side information in the initial side information set to obtain a target side information set, wherein the target side information set comprises at least one window information, and each window information comprises at least two groups of target frequency information; performing multivariate detection on frequency information in the target side information set according to attribute information of each group of target frequency information in the target side information set and correlation parameters of any two groups of target frequency information in the same window to determine a detection result of the target controller. Through the technical scheme, the efficiency and accuracy of side information leakage detection can be improved.

Description

Technical Field

[0001] This invention relates to the field of vehicle information security technology, and in particular to a detection method, device, equipment, and storage medium. Background Technology

[0002] As the global automotive industry moves towards electrification, intelligence, connectivity, and sharing, vehicle-to-everything (V2X) technology is developing rapidly. The connectivity of various intelligent hardware devices in vehicles is gradually increasing. Among them, the vehicle controller integrates cryptographic protocols and algorithms, and is an important security foundation unit that provides core cryptographic functions. However, the security of cryptographic protocols and algorithms is threatened by both mathematical analysis and physical analysis. When running cryptographic algorithms, physical information related to intermediate data or execution operations is inevitably generated, such as execution time, energy consumption, electromagnetic radiation, and sound characteristics. Physical information that is intrinsically related to intermediate data and execution operations is called side information leakage. Attacks that use these information leaks to recover keys are usually called side-channel analysis.

[0003] Automotive smart hardware is exposed to open network environments, and its actual security is seriously threatened by side-channel analysis. Side-channel information leakage detection is an important technique in side-channel security assessment, which can determine whether the side-channel information generated during the operation of cryptographic algorithms can pass statistical tests at a specified significance level, without needing to recover secret parameters through side-channel attacks. However, in existing technologies, side-channel information leakage detection in automotive controllers easily ignores the correlation between side-channel information, resulting in low efficiency and low accuracy. Summary of the Invention

[0004] This invention provides a detection method, apparatus, device, and storage medium that can improve the efficiency and accuracy of side information leakage detection.

[0005] According to one aspect of the present invention, a detection method is provided, comprising:

[0006] Obtain the initial set of information during the process of the target controller providing secure access services;

[0007] The side information in the initial side information set is subjected to time-frequency transformation to obtain the target side information set, wherein the target side information set includes: at least one window information, and each window information includes at least two sets of target frequency information;

[0008] Based on the attribute information of each set of target frequency information in the target-side information set and the relevant parameters of any two sets of target frequency information in the same window, multivariate detection is performed on the frequency information in the target-side information set to determine the detection result of the target controller.

[0009] According to another aspect of the present invention, a detection device is provided, the detection device comprising:

[0010] The acquisition module is used to acquire the initial set of side information during the process of the target controller providing secure access services;

[0011] The module is used to perform time-frequency transformation on the side information in the initial side information set to obtain the target side information set, wherein the target side information set includes: at least one window information, and each window information includes at least two sets of target frequency information;

[0012] The determination module is used to perform multivariate detection on the frequency information in the target side information set based on the attribute information of each group of target frequency information in the target side information set and the relevant parameters of any two groups of target frequency information in the same window, and to determine the detection result of the target controller.

[0013] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0014] At least one processor; and

[0015] A memory communicatively connected to the at least one processor; wherein,

[0016] The memory stores a computer program that can be executed by the at least one processor, the computer program being executed by the at least one processor to enable the at least one processor to perform the detection method described in any embodiment of the present invention.

[0017] According to another aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions for causing a processor to execute and implement the detection method described in any embodiment of the present invention.

[0018] This invention addresses the problem of low efficiency and accuracy in detecting side information leaks caused by easily ignoring the correlation between side information during the secure access service process of a target controller. It involves performing a time-frequency transformation on the side information in the initial side information set to obtain a target side information set, which includes at least one window of information, each window containing at least two sets of target frequency information. The target side information set is further analyzed using multivariate detection based on the attribute information of each set of target frequency information and the relevant parameters of any two sets of target frequency information within the same window. This method improves the efficiency and accuracy of side information leak detection.

[0019] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0020] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present invention and should not be regarded as a limitation on the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 This is a flowchart of a detection method according to Embodiment 1 of the present invention;

[0022] Figure 2 This is a schematic diagram of the structure of a detection device according to Embodiment 2 of the present invention;

[0023] Figure 3 This is a schematic diagram of the structure of an electronic device according to Embodiment 3 of the present invention. Detailed Implementation

[0024] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0025] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0026] It is understood that before using the technical solutions disclosed in the various embodiments of this disclosure, users should be informed of the types, scope of use, and usage scenarios of the personal information involved in this disclosure in an appropriate manner in accordance with relevant laws and regulations, and user authorization should be obtained.

[0027] Example 1

[0028] Figure 1 This is a flowchart of a detection method according to Embodiment 1 of the present invention. This embodiment is applicable to the detection of information leakage on the vehicle controller side. The method can be executed by the detection device in this embodiment, which can be implemented in software and / or hardware, such as... Figure 1 As shown, the method specifically includes the following steps:

[0029] S110, Obtain the initial set of information during the process of the target controller providing secure access services.

[0030] The target controller can be a vehicle controller. The initial side information set is the set of side information obtained by the cryptographic algorithm when executing the secure access service in the vehicle controller, collected through diagnostic equipment.

[0031] Specifically, the method for obtaining the initial side information set during the process of providing secure access services to the target controller can be as follows: the target controller can be provided with secure access services through diagnostic equipment, and at the same time, the initial side information set when the target controller runs cryptographic algorithms can be collected using an oscilloscope and an electromagnetic probe.

[0032] S120, perform time-frequency transformation on the side information in the initial side information set to obtain the target side information set, wherein the target side information set includes: at least one window information, and each window information includes at least two sets of target frequency information.

[0033] The target side information set is the frequency information set corresponding to the initial side information set obtained by performing a time-frequency transformation on the initial side information set. The target side information set includes at least one window of information, and each window contains at least two sets of target frequency information. The target frequency information is the frequency information corresponding to the side information obtained by performing a time-frequency transformation on the side information in the initial side information set. It should be noted that the target side information set can be obtained directly by performing a time-frequency transformation on the side information in the initial side information set, or the frequency information obtained by performing a time-frequency transformation on the side information in the initial side information set can be filtered according to preset conditions, and the target side information set can be generated based on the filtered frequency information. The preset condition can be that the signal-to-noise ratio (SNR) of the frequency information corresponding to each set of side information is greater than or equal to a preset SNR threshold.

[0034] Specifically, the method of performing time-frequency transformation on the side information in the initial side information set to obtain the target side information set can be as follows: perform time-frequency transformation on the side information in the initial side information set, and generate the target side information set based on the frequency information corresponding to the side information obtained by the time-frequency transformation. The target side information set may include at least one window information, and each window information includes at least two sets of target frequency information.

[0035] S130, based on the attribute information of each group of target frequency information in the target side information set and the relevant parameters of any two groups of target frequency information in the same window, perform multivariate detection on the frequency information in the target side information set to determine the detection result of the target controller.

[0036] The attribute information for each set of target frequency information may include the amount of information leakage corresponding to each set of target frequency information, as well as the sample mean vector and the overall mean corresponding to each set of target frequency information. The relevant parameters for any two sets of target frequency information within the same window may include the dimension of the information within the same window, the correlation coefficient between any two sets of target frequency information within the same window, and other parameters.

[0037] Among them, the multivariate detection method can be multivariate Hotelling's T 2 -Test can also be used for other multivariate hypothesis testing methods, without any specific restrictions.

[0038] The detection result of the target controller can be either "side information leakage exists" or "side information leakage does not exist".

[0039] Specifically, the method for determining the detection result of the target controller by performing multivariate detection on the frequency information in the target-side information set based on the attribute information of each group of target frequency information in the target-side information set and the relevant parameters of any two groups of target frequency information in the same window can be as follows: perform multivariate detection on the frequency information in the target-side information set based on the relevant parameters of each group of target frequency information in the target-side information set and any two groups of target frequency information in the same window to obtain the target hypothesis value corresponding to the information in the same window, compare the target hypothesis value with the significance level value corresponding to the multivariate detection, and determine the detection result of the target controller based on the comparison result.

[0040] By acquiring the initial side information set during the secure access service process of the target controller; performing time-frequency transformation on the side information in the initial side information set to obtain the target side information set, wherein the target side information set includes: at least one window information, each window information including at least two sets of target frequency information; performing multivariate detection on the frequency information in the target side information set based on the attribute information of each set of target frequency information in the target side information set and the relevant parameters of any two sets of target frequency information in the same window, and determining the detection result of the target controller, the detection efficiency and accuracy of side information leakage detection can be improved by considering the correlation between side information and performing multivariate detection on the frequency information in the target side information set based on the correlation between side information.

[0041] Optionally, the side information in the initial side information set is subjected to time-frequency transformation to obtain the target side information set, including:

[0042] Perform time-frequency transformation on each piece of side information in the initial side information set to obtain a first side information set, wherein the first side information set includes: the first frequency information corresponding to each piece of side information in the initial side information set;

[0043] Obtain the signal-to-noise ratio of the first frequency information corresponding to each side information in the first side information set;

[0044] Delete the first frequency information with a signal-to-noise ratio less than the target threshold from the first side information set to obtain the target side information set.

[0045] The first side information set is generated by performing a time-frequency transformation on each side information in the initial side information set, and then using the frequency information corresponding to all the obtained side information. The first frequency information is the frequency information corresponding to each side information in the initial side information set after time-frequency transformation. The target threshold can be set according to actual needs. The target side information set is the side information set obtained by filtering the first side information set based on the signal-to-noise ratio.

[0046] Specifically, a time-frequency transformation is performed on each piece of side information in the initial side information set to obtain a first side information set. This first side information set includes the first frequency information corresponding to each piece of side information in the initial side information set. This can be achieved by performing a time-frequency transformation on each piece of side information in the initial side information set using the Discrete Short-Time Fourier Transform (DSFT) to obtain at least one window of information. The first side information set is generated from the first frequency information corresponding to each piece of side information in the initial side information set within all window information. It should be noted that when performing the time-frequency transformation on the side information using the DSFT, the Fourier transform formula can be:

[0047]

[0048] Where x[n] is the first time-domain information corresponding to each side information in the initial side information set, w[n] represents the window function, n represents the length of the window function, and STFT{x[n]}(m,w) is the first frequency information corresponding to each side information.

[0049] Specifically, the signal-to-noise ratio (SNR) of the first frequency information corresponding to each side information in the first side information set can be obtained as follows: The SNR of the first frequency information can be calculated based on the signal variance and noise variance corresponding to the first frequency information for each side information. The formula for the SNR is:

[0050]

[0051] Where var(f(v)) represents the signal variance corresponding to the first frequency information, var noise This represents the noise variance.

[0052] Specifically, the method for obtaining the target side information set by deleting the first frequency information with a signal-to-noise ratio less than the target threshold from the first side information set can be as follows: delete the first frequency information with a signal-to-noise ratio less than the target threshold from the first side information set to obtain the target frequency information set, and generate the target side information set based on the target frequency information set.

[0053] By performing time-frequency transformation on each piece of side information in the initial side information set, a first side information set is obtained. The signal-to-noise ratio (SNR) of the first frequency information corresponding to each piece of side information in the first side information set is obtained. The first frequency information with an SNR less than the target threshold in the first side information set is deleted to obtain the target side information set. This can delete the frequency information corresponding to side information with low SNR, thereby improving the efficiency of side information leakage detection.

[0054] Optionally, a time-frequency transformation is performed on each piece of side information in the initial side information set to obtain a first side information set, including:

[0055] The frequency information leakage output information is determined based on the intermediate value parameter and the multivariate Gaussian distributed noise signal.

[0056] The second side information set is obtained by performing time-frequency transformation on the side information of the initial side information set according to the preset window function;

[0057] The target window function and the target window function length are determined based on the frequency information leakage output information and the second-side information set.

[0058] The first side information set is obtained by performing time-frequency transformation on the side information of the initial side information set based on the target window function and the target window function length.

[0059] The intermediate value parameter can be an intermediate value variable of the target controller cryptographic algorithm. The frequency information leakage output information can be calculated based on the intermediate value parameter and the multivariate Gaussian distributed noise signal. The second side information set is the frequency information set obtained by performing time-frequency transformation on the side information of the initial side information set under a preset function. The second side information set includes the frequency information obtained by performing time-frequency transformation on the side information of the initial side information set according to the preset function. The preset function can include window functions such as Rectangula, Hann, Hamming, and Blackman-Harris. Different preset functions result in different second side information sets. The target window function and the target window function length are the window function and window function length applicable to the time-frequency transformation of the target controller side information.

[0060] Specifically, the method for determining the frequency information leakage output information based on the intermediate value parameter and the multivariate Gaussian distributed noise signal can be as follows: a frequency information leakage model can be constructed based on the intermediate value parameter and the multivariate Gaussian distributed noise signal, and the frequency information leakage output information can be output based on the frequency information leakage model. For example, the frequency information leakage model can be:

[0061] M = f(v) + N 0,∑ ;

[0062] Where v represents the intermediate value parameter, f represents the side information leakage transformation function of the intermediate value parameter, and N 0,∑ Let M represent the frequency information leakage output information, where M is the mean of a multivariate Gaussian noise with a mean of 0 and a covariance matrix of ∑. It should be noted that if the cryptographic algorithm needs to be implemented in software, the frequency information leakage model can be the Hamming weight model; if the cryptographic algorithm needs to be implemented in hardware, the frequency information leakage model can be the Hamming distance model.

[0063] Specifically, the method for obtaining the second side information set by performing time-frequency transformation on the side information of the initial side information set according to the preset window function can be as follows: a preset window function is used to perform time-frequency transformation on the side information in the initial side information set to obtain the second side information set.

[0064] Specifically, the method for determining the target window function and the target window function length based on the frequency information leakage output information and the second-side information set can be as follows: calculate the correlation between the frequency information leakage output information and the frequency information in the second-side information set, determine the window function corresponding to the second-side information set with the smallest correlation as the target window function, and at the same time calculate the signal-to-noise ratio corresponding to the frequency information in the second-side information set with the smallest correlation, and determine the window length of the frequency information with the largest signal-to-noise ratio as the target window function length.

[0065] Specifically, the method for obtaining the first side information set by performing time-frequency transformation on the side information of the initial side information set according to the target window function and the target window function length can be as follows: perform time-frequency transformation on the side information of the initial side information set again according to the target window function and the target window function length, and generate the first side information set according to the first frequency information corresponding to each side information.

[0066] By determining the frequency information leakage output information based on intermediate parameters and multivariate Gaussian noise signals; performing time-frequency transformation on the side information of the initial side information set according to a preset window function to obtain the second side information set; determining the target window function and target window function length based on the frequency information leakage output information and the second side information set; and performing time-frequency transformation on the side information of the initial side information set according to the target window function and target window function length to obtain the first side information set, the accuracy of target controller side information leakage detection can be improved by selecting the most suitable target window function and target window function length for target controller side information leakage detection and obtaining the first side information set based on the target window function and target window function length.

[0067] Optionally, based on the attribute information of each set of target frequency information in the target-side information set and the relevant parameters of any two sets of target frequency information in the same window, multivariate detection is performed on the frequency information in the target-side information set to determine the detection result of the target controller, including:

[0068] Based on the attribute information of each set of target frequency information in the target side information set and the relevant parameters of any two sets of target frequency information in the same window, determine the set of assumed values ​​corresponding to the information in the same window of the target side information set;

[0069] The smallest assumed value in the set of assumed values ​​corresponding to the same window information is determined as the target assumed value of the same window information;

[0070] The detection result of the target controller is determined based on the target assumption value of the same window information.

[0071] The attribute information for each set of target frequency information includes the amount of information leakage corresponding to each set, and may also include the sample mean vector and the overall mean for each set. The relevant parameters for any two sets of target frequency information within the same window may include the dimension of the information within the same window, the correlation coefficient between the two sets, and other parameters. The set of assumed values ​​corresponding to the same window is all assumed values ​​obtained from any two sets of target frequency information within the same window. The target assumed value is the smallest value in the set of assumed values ​​within the same window. The detection result of the target controller can indicate either the presence or absence of side information leakage.

[0072] Specifically, the method for determining the set of assumed values ​​corresponding to the same window information in the target-side information set based on the attribute information of each group of target frequency information in the target-side information set and the relevant parameters of any two groups of target frequency information in the same window can be as follows: calculate the assumed value between any two groups of target frequency information in the same window based on the attribute information of each group of target frequency information in the target-side information set and the correlation coefficient between any two groups of target frequency information in the same window, and generate the set of assumed values ​​corresponding to the same window information based on the assumed value between any two groups of target frequency information in the same window.

[0073] Specifically, the method to determine the smallest assumed value in the set of assumed values ​​corresponding to the same window information as the target assumed value of the same window information can be: select the smallest assumed value in the set of assumed values ​​corresponding to the same window as the target assumed value of the same window information.

[0074] Specifically, the method for determining the detection result of the target controller based on the target assumption value of the same window information can be as follows: if the target assumption value of the same window information in the target side information set is less than or equal to the preset significance level value in the multivariate detection, then the detection result of the target controller is determined to be that there is side information leakage; if the target assumption value of the same window information in the target side information set is greater than the preset significance level value in the multivariate detection, then the detection result of the target controller is determined to be that there is no side information leakage.

[0075] Optionally, based on the attribute information of each group of target frequency information in the target-side information set and the relevant parameters of any two groups of target frequency information in the same window, a set of assumed values ​​corresponding to the information in the same window of the target-side information set is determined, including:

[0076] Based on the attribute information of each group of target frequency information in the target side information set and the relevant parameters of any two groups of target frequency information in the same window, determine the statistical quantity of any two groups of target frequency information in the same window;

[0077] The assumed value between any two sets of target frequency information in the same window is determined based on the statistics of any two sets of target frequency information in the same window, the attribute information of each set of target frequency information in the target side information set, and the relevant parameters of any two sets of target frequency information in the same window.

[0078] Generate a target-side information set based on the assumed values ​​between any two sets of target frequency information in the same window, and a set of assumed values ​​corresponding to the information in the same window.

[0079] Among them, the statistical measure of any two sets of target frequency information in the same window is the statistical measure of multivariate detection of any two sets of target frequency information in the same window.

[0080] Specifically, the method for determining the statistics of any two groups of target frequency information in the same window based on the attribute information of each group of target frequency information in the target-side information set and the relevant parameters of any two groups of target frequency information in the same window can be as follows: calculate the estimated covariance matrix based on the attribute information of each group of target frequency information in the target-side information set and the relevant parameters of any two groups of target frequency information in the same window, and calculate the statistics of any two groups of target frequency information in the same window based on the estimated covariance matrix, the attribute information of each group of target frequency information in the target-side information set, and the relevant parameters of any two groups of target frequency information in the same window.

[0081] Specifically, the method for determining the assumed value between any two sets of target frequency information in the same window based on the statistics of any two sets of target frequency information in the same window, the attribute information of each set of target frequency information in the target side information set, and the relevant parameters of any two sets of target frequency information in the same window can be as follows: calculate the assumed value between any two sets of target frequency information in the same window based on the statistics of any two sets of target frequency information in the same window, the attribute information of each set of target frequency information in the target side information set, and the relevant parameters of any two sets of target frequency information in the same window.

[0082] Specifically, the method for generating the target-side information set and the set of assumed values ​​corresponding to the information in the same window based on the assumed values ​​between any two sets of target frequency information in the same window can be as follows: integrate the assumed values ​​between any two sets of target frequency information in the same window into the set of assumed values ​​corresponding to the information in the same window.

[0083] For example, it could involve performing multivariate detection on the frequency information in the target-side information set based on the frequency information leakage output information. The multivariate detection method could be Hotelling's T... 2 -Test, if the null hypothesis is "H0: No side information leakage exists", and the alternative hypothesis is "H alt If there is "side information leakage", then:

[0084] H0:M=NvsH alt M = V + N;

[0085] Where V represents the side information leakage signal and N represents the noise signal.

[0086] The attribute information of each set of target frequency information includes the amount of information leakage corresponding to each set of target frequency information, and may also include the sample mean vector and the overall mean corresponding to each set of target frequency information. The relevant parameters of any two sets of target frequency information in the same window may include the dimension of the information in the same window, the correlation coefficient of any two sets of target frequency information in the same window, etc. The correlation coefficient of any two sets of target frequency information in the same window can also be obtained based on the dimension of the information in the same window and the amount of information leakage corresponding to each set of target frequency information.

[0087] At Hotelling's T 2 -Test statistic T 2 Obtained by a degree of freedom of (n) l N A +N B The F-distribution of -2) is calculated using the following formula:

[0088]

[0089]

[0090]

[0091]

[0092] Where, n l N represents the dimension of the information in the same window. A N represents the amount of information leaked from target frequency information A. B ζ represents the amount of information leakage of target frequency information B, ζ represents the correlation coefficient between target frequency information of groups A and B in the same window, S represents the estimated covariance matrix, and I represents the information leakage of target frequency information B. t,A I represents the t-th sample vector in the target frequency information of group A. t,B L represents the t-th sample vector in the target frequency information of group B. A L represents the sample mean vector of target frequency information in group A. B S represents the sample mean vector of target frequency information in group B. -1 Let S be the inverse matrix, and T be the inverse matrix. 2 This represents the statistics for target frequency information in groups A and B within the same window. Therefore, the formula for calculating the assumed p-values ​​for target frequency information in groups A and B is:

[0093] p-value = 1 - CDF(ζT) 2 ,n l N A +N B -2);

[0094] Wherein, CDF(,n l N A +N B -2) is the cumulative distribution function of the F distribution, and p-value is the assumed value corresponding to the target frequency information of group A and group B in the same window. The assumed value is calculated based on the assumed value of any two groups of target frequency information in the same window to generate the set of assumed values ​​corresponding to the information in the same window.

[0095] Optionally, the detection result of the target controller is determined based on the target assumption value of the same window information, including:

[0096] If the target assumption value of the same window information is less than or equal to the preset significance level value, then the detection result of the target controller is determined to be a leakage of side information.

[0097] The preset significance level value is the significance level value preset when performing multivariate detection on the side information in the target frequency information. The preset significance level value can be a significance level value set according to actual needs, or it can be an empirical value for multivariate detection.

[0098] Specifically, if the target assumption value of the same window information is less than or equal to the preset significance level, the target controller's detection result is determined to indicate the existence of side information leakage as follows: if the target assumption value of the same window information in the target side information set is less than or equal to the preset significance level, then side information leakage exists, and the target controller's detection result is determined to indicate the existence of side information leakage. Similarly, if the target assumption value of the same window information in the target side information set is greater than the preset significance level, then the target controller's detection result is determined to indicate that no side information leakage exists.

[0099] For example, if the target assumption value of the same window information is mini-p, and the preset significance level value is α, then if mini-p≤α, the detection result of the target controller is determined to be that there is side information leakage.

[0100] The statistical measures of any two target frequency information sets within the same window are determined based on the attribute information of each target frequency information set in the target side information set and the relevant parameters of any two target frequency information sets within the same window. The assumed value between any two target frequency information sets within the same window is determined based on the statistical measures, the attribute information of each target frequency information set in the target side information set, and the relevant parameters of any two target frequency information sets within the same window. A set of assumed values ​​corresponding to the same window information in the target side information set is generated based on the assumed values ​​between any two target frequency information sets within the same window. The smallest assumed value in the set of assumed values ​​corresponding to the same window information is determined as the target assumed value for the same window information. If the target assumed value for the same window information is less than or equal to a preset significance level, the detection result of the target controller is determined to indicate the existence of side information leakage. This method enables multivariate detection of any two target frequency information sets within the same window, taking into account the correlation between different sets of target frequency information within the same window information, thereby improving the accuracy of side information leakage detection.

[0101] Optionally, after performing multivariate detection on the frequency information in the target-side information set based on the attribute information of each group of target frequency information in the target-side information set and the relevant parameters of any two groups of target frequency information in the same window, and determining the detection result of the target controller, the method further includes:

[0102] If the target controller detects that there is side information leakage, the false alarm rate of the target controller is determined based on the attribute information of each group of target frequency information in the same window in the target side information set, the relevant parameters of any two groups of target frequency information in the same window, and the preset significance level value.

[0103] Specifically, if the target controller detects that there is side information leakage, the method for determining the false alarm rate of the target controller based on the attribute information of each group of target frequency information in the same window in the target side information set, the relevant parameters of any two groups of target frequency information in the same window, and the preset significance level value can be as follows: If there is side information leakage in the target controller, the false alarm rate is calculated based on the attribute information of each group of target frequency information in the same window in the target side information set, the relevant parameters of any two groups of target frequency information in the same window, and the preset significance level value.

[0104] For example, it could be, if H alt When the assumption is true, the statistic follows a non-central F-distribution with a non-centrality parameter δ. The formula for calculating the false negative rate, based on the attribute information of target frequency information in groups A and B within the same window of the target information set, the relevant parameters of target frequency information in groups A and B within the same window, and the preset significance level α, is as follows:

[0105]

[0106]

[0107] β i =NCFCDF(th,n l N A +N B -2,δ);

[0108] Where th represents the correlation underreporting coefficient of target frequency information in groups A and B, and δ represents the non-central parameter of the non-central F-distribution. This represents the overall mean vector of target frequency information for group A. Let Σ represent the overall mean vector of target frequency information in group B, and let Σ represent the covariance matrix of the overall target frequency information in groups A and B. -1 Let β be the inverse matrix of Σ. i Indicates the false negative rate, NCFCDF(,n) l N A +N B -2,δ) represents the cumulative distribution function of the non-central F distribution.

[0109] If the target controller detects side information leakage, the false alarm rate of the target controller is determined based on the attribute information of each group of target frequency information in the same window of the target side information set, the relevant parameters of any two groups of target frequency information in the same window, and the preset significance level value. This solves the problem of high false alarm rate in existing side information leakage detection methods and can reduce the false alarm rate of side information leakage detection.

[0110] The technical solution of this embodiment obtains an initial side information set during the secure access service process of the target controller; performs time-frequency transformation on the side information in the initial side information set to obtain a target side information set, wherein the target side information set includes at least one window information, each window information including at least two sets of target frequency information; performs multivariate detection on the frequency information in the target side information set based on the attribute information of each set of target frequency information in the target side information set and the relevant parameters of any two sets of target frequency information in the same window, and determines the detection result of the target controller. This solves the problem of low efficiency and low accuracy of side information leakage detection caused by easily ignoring the correlation between side information when detecting side information leakage in automotive controllers, and can improve the efficiency and accuracy of side information leakage detection.

[0111] Example 2

[0112] Figure 2This is a schematic diagram of a detection device according to Embodiment 2 of the present invention. This embodiment is applicable to the detection of information leakage on the vehicle controller side. The device can be implemented using software and / or hardware, and can be integrated into any device that provides detection functionality, such as... Figure 2 As shown, the detection device specifically includes: an acquisition module 210, a obtaining module 220, and a determining module 230.

[0113] The acquisition module 210 is used to acquire the initial side information set during the process of the target controller performing secure access services;

[0114] The module 220 is used to perform time-frequency transformation on the side information in the initial side information set to obtain the target side information set, wherein the target side information set includes: at least one window information, and each window information includes at least two sets of target frequency information;

[0115] The determination module 230 is used to perform multivariate detection on the frequency information in the target side information set based on the attribute information of each group of target frequency information in the target side information set and the relevant parameters of any two groups of target frequency information in the same window, and to determine the detection result of the target controller.

[0116] Optionally, the obtaining module is specifically used for:

[0117] Perform time-frequency transformation on each piece of side information in the initial side information set to obtain a first side information set, wherein the first side information set includes: the first frequency information corresponding to each piece of side information in the initial side information set;

[0118] Obtain the signal-to-noise ratio of the first frequency information corresponding to each side information in the first side information set;

[0119] Delete the first frequency information with a signal-to-noise ratio less than the target threshold from the first side information set to obtain the target side information set.

[0120] Optionally, the obtaining module is specifically used for:

[0121] The frequency information leakage output information is determined based on the intermediate value parameter and the multivariate Gaussian distributed noise signal.

[0122] The second side information set is obtained by performing time-frequency transformation on the side information of the initial side information set according to the preset window function;

[0123] The target window function and the target window function length are determined based on the frequency information leakage output information and the second-side information set.

[0124] The first side information set is obtained by performing time-frequency transformation on the side information of the initial side information set based on the target window function and the target window function length.

[0125] Optionally, the determining module is specifically used for:

[0126] Based on the attribute information of each set of target frequency information in the target side information set and the relevant parameters of any two sets of target frequency information in the same window, determine the set of assumed values ​​corresponding to the information in the same window of the target side information set;

[0127] The smallest assumed value in the set of assumed values ​​corresponding to the same window information is determined as the target assumed value of the same window information;

[0128] The detection result of the target controller is determined based on the target assumption value of the same window information.

[0129] Optionally, the determining module is specifically used for:

[0130] Based on the attribute information of each group of target frequency information in the target side information set and the relevant parameters of any two groups of target frequency information in the same window, determine the statistical quantity of any two groups of target frequency information in the same window;

[0131] The assumed value between any two sets of target frequency information in the same window is determined based on the statistics of any two sets of target frequency information in the same window, the attribute information of each set of target frequency information in the target side information set, and the relevant parameters of any two sets of target frequency information in the same window.

[0132] Generate a target-side information set based on the assumed values ​​between any two sets of target frequency information in the same window, and a set of assumed values ​​corresponding to the information in the same window.

[0133] Optionally, the determining module is specifically used for:

[0134] If the target assumption value of the same window information is less than or equal to the preset significance level value, then the detection result of the target controller is determined to be a leakage of side information.

[0135] Optional, also includes:

[0136] The false negative rate determination module is used to determine the false negative rate of the target controller if the detection result of the target controller indicates that there is side information leakage. This is based on the attribute information of each group of target frequency information in the same window of the target side information set, the relevant parameters of any two groups of target frequency information in the same window, and the preset significance level value.

[0137] The above-described products can perform the methods provided in each embodiment of the present invention, and have the corresponding functional modules and beneficial effects for performing the methods.

[0138] Example 3

[0139] Figure 3This is a schematic diagram of an electronic device according to Embodiment 3 of the present invention. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (such as helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0140] like Figure 3 As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 can also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0141] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0142] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as detection methods.

[0143] In some embodiments, the detection method may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the detection method described above may be performed. Alternatively, in other embodiments, processor 11 may be configured to perform the detection method by any other suitable means (e.g., by means of firmware).

[0144] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0145] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0146] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0147] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0148] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0149] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0150] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0151] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A detection method, characterized in that, include: Obtain the initial set of information during the process of the target controller providing secure access services; The side information in the initial side information set is subjected to time-frequency transformation to obtain the target side information set, wherein the target side information set includes: at least one window information, and each window information includes at least two sets of target frequency information; Based on the attribute information of each set of target frequency information in the target-side information set and the relevant parameters of any two sets of target frequency information in the same window, multivariate detection is performed on the frequency information in the target-side information set to determine the detection result of the target controller; Specifically, based on the attribute information of each set of target frequency information in the target-side information set and the relevant parameters of any two sets of target frequency information in the same window, multivariate detection is performed on the frequency information in the target-side information set to determine the detection result of the target controller, including: Based on the attribute information of each set of target frequency information in the target side information set and the relevant parameters of any two sets of target frequency information in the same window, determine the set of assumed values ​​corresponding to the information in the same window of the target side information set; The smallest assumed value in the set of assumed values ​​corresponding to the same window information is determined as the target assumed value of the same window information; The detection result of the target controller is determined based on the target assumption value of the same window information; The attribute information of each group of target frequency information includes the number of information leaks, the sample mean vector, and the overall mean corresponding to each group of target frequency information.

2. The method according to claim 1, characterized in that, The side information in the initial side information set is subjected to time-frequency transformation to obtain the target side information set, including: Perform time-frequency transformation on each piece of side information in the initial side information set to obtain a first side information set, wherein the first side information set includes: the first frequency information corresponding to each piece of side information in the initial side information set; Obtain the signal-to-noise ratio of the first frequency information corresponding to each side information in the first side information set; Delete the first frequency information with a signal-to-noise ratio less than the target threshold from the first side information set to obtain the target side information set.

3. The method according to claim 2, characterized in that, Perform time-frequency transformation on each piece of side information in the initial side information set to obtain the first side information set, including: The frequency information leakage output information is determined based on the intermediate value parameter and the multivariate Gaussian distributed noise signal. The second side information set is obtained by performing time-frequency transformation on the side information of the initial side information set according to the preset window function; The target window function and the target window function length are determined based on the frequency information leakage output information and the second-side information set. The first side information set is obtained by performing time-frequency transformation on the side information of the initial side information set based on the target window function and the target window function length.

4. The method according to claim 1, characterized in that, Based on the attribute information of each set of target frequency information in the target-side information set and the relevant parameters of any two sets of target frequency information in the same window, determine the set of assumed values ​​corresponding to the information in the same window of the target-side information set, including: Based on the attribute information of each group of target frequency information in the target side information set and the relevant parameters of any two groups of target frequency information in the same window, determine the statistical quantity of any two groups of target frequency information in the same window; The assumed value between any two sets of target frequency information in the same window is determined based on the statistics of any two sets of target frequency information in the same window, the attribute information of each set of target frequency information in the target side information set, and the relevant parameters of any two sets of target frequency information in the same window. Generate a target-side information set based on the assumed values ​​between any two sets of target frequency information in the same window, and a set of assumed values ​​corresponding to the information in the same window.

5. The method according to claim 1, characterized in that, The detection result of the target controller is determined based on the target assumption value of the same window information, including: If the target assumption value of the same window information is less than or equal to the preset significance level value, then the detection result of the target controller is determined to be a leakage of side information.

6. The method according to claim 1, characterized in that, After performing multivariate detection on the frequency information in the target-side information set based on the attribute information of each group of target frequency information in the target-side information set and the relevant parameters of any two groups of target frequency information in the same window, and determining the detection result of the target controller, the process also includes: If the target controller detects that there is side information leakage, the false alarm rate of the target controller is determined based on the attribute information of each group of target frequency information in the same window in the target side information set, the relevant parameters of any two groups of target frequency information in the same window, and the preset significance level value.

7. A detection device, characterized in that, include: The acquisition module is used to acquire the initial set of side information during the process of the target controller providing secure access services; The module is used to perform time-frequency transformation on the side information in the initial side information set to obtain the target side information set, wherein the target side information set includes: at least one window information, and each window information includes at least two sets of target frequency information; The determination module is used to perform multivariate detection on the frequency information in the target side information set based on the attribute information of each group of target frequency information in the target side information set and the relevant parameters of any two groups of target frequency information in the same window, and to determine the detection result of the target controller. Specifically, the determining module is used for: Based on the attribute information of each set of target frequency information in the target side information set and the relevant parameters of any two sets of target frequency information in the same window, determine the set of assumed values ​​corresponding to the information in the same window of the target side information set; The smallest assumed value in the set of assumed values ​​corresponding to the same window information is determined as the target assumed value of the same window information; The detection result of the target controller is determined based on the target assumption value of the same window information; The attribute information of each group of target frequency information includes the number of information leaks, the sample mean vector, and the overall mean corresponding to each group of target frequency information.

8. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor, the computer program being executed by the at least one processor to enable the at least one processor to perform the detection method according to any one of claims 1-6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that are used to cause a processor to execute the detection method according to any one of claims 1-6.

Images