Communication security protection method, readable storage medium and intelligent device

Abstract

This application relates to the field of intelligent vehicle technology, specifically providing a communication security protection method, a readable storage medium, and an intelligent device, aiming to solve the problems of effectively ensuring privacy protection, data security, and real-time performance in in-vehicle communication security. To this end, this application responds to a service request from an electronic control unit (ECU) requesting a public key infrastructure (PKI) service, obtains communication security credentials from the PKI service, and uses these credentials to achieve secure communication between different ECUs of the intelligent device. Since the PKI service of this application is deployed in the trusted execution environment (TEX) of the intelligent device, it ensures the security of the intelligent device itself, the security of user privacy data, and effectively reduces the risks of user data exposure, network attacks, and remote tampering, while also significantly improving the real-time performance of obtaining communication security credentials.

Description

Technical Field

[0001] The present application relates to the field of smart car technology, and specifically provides a communication security protection method, a readable storage medium and a smart device. Background Art

[0002] With the development of intelligent connected vehicles, vehicles are constantly developing in the direction of intelligence and networking. The in-vehicle network has also evolved from the early point-to-point simple network topology to today's complex network topology. For example, the current mainstream hybrid in-vehicle network architecture based on domain controllers is to adapt to more complex and efficient in-vehicle communication requirements. The complexity of the in-vehicle communication network architecture not only puts higher requirements on the performance and functions of in-vehicle communications, but also increases security risks, such as information leakage and illegal tampering. Whether it is the leakage of personal information or the tampering of the vehicle control system, it may cause great harm to the car owner. In addition, since vehicles usually operate in public environments, the security issues of in-vehicle communications may also pose a threat to public safety.

[0003] At present, the security protection methods for vehicle communications are mainly through encrypted communication, security authentication, etc., and most security communication mechanisms rely on the infrastructure of Public Key Infrastructure (PKI) to ensure the confidentiality, integrity and verifiability of data. At present, the main form of PKI for most smart connected cars is deployed in the cloud server connected to the car. However, cloud PKI will have the following problems:

[0004] 1. The vehicle must be connected to the Internet or require a special diagnostic instrument to establish communication with the cloud PKI. In an offline scenario where the vehicle cannot connect to the Internet, it is impossible to apply for / revoke certificates from the cloud PKI;

[0005] 2. There are security communication issues between cloud PKI and vehicles. The communication between cloud PKI and vehicles needs to go through the Internet, which faces greater security risks.

[0006] 3. Cloud-based PKI cannot solve the growing demand for certificate issuance in vehicle-mounted secure communication scenarios. The number of scenarios for encrypted communication and security authentication on the vehicle side is increasing, and cloud-based PKI cannot achieve endpoint certificate management in all scenarios.

[0007] Accordingly, the art needs a new vehicle communication security protection solution to solve the above problems. Summary of the invention

[0008] In order to overcome the above-mentioned defects, the present application is proposed to provide a solution or at least partially solve the problem of how to effectively ensure the privacy protection, data security and real-time performance of vehicle-mounted communication security.

[0009] In a first aspect, the present application provides a communication security protection method, the method is applied to a smart device, the smart device includes a plurality of electronic control units, the method includes:

[0010] In response to a service request for a public key infrastructure service issued by the electronic control unit, obtaining a communication security credential from the public key infrastructure service; wherein a trusted application of the public key infrastructure service is deployed in a trusted execution environment of the smart device;

[0011] Secure communication between different electronic control units is achieved according to the communication security credential.

[0012] In a technical solution of the above communication security protection method, the method further includes issuing the service request according to the following steps:

[0013] Sending the service request to the public key infrastructure provider of the public key infrastructure service through the public key infrastructure agent of the electronic control unit;

[0014] The public key infrastructure provider is deployed in the rich execution environment of the smart device, and the public key infrastructure provider communicates with the trusted execution environment through the application program interface of the trusted execution environment; the application program interface is an interface opened by the trusted execution environment to the rich execution environment.

[0015] In a technical solution of the above communication security protection method, the sending of the service request to the public key infrastructure provider through the public key infrastructure agent of the electronic control unit includes:

[0016] The public key infrastructure daemon process of the electronic control unit sends the service request to the public key infrastructure provider through the public key infrastructure agent program.

[0017] In a technical solution of the above communication security protection method, before the electronic control unit issues the service request, the method further includes:

[0018] The public key infrastructure daemon process of the electronic control unit checks whether there is an abnormality in the communication security credential of the electronic control unit;

[0019] When there is an abnormality in the communication security certificate, the service request is issued.

[0020] In a technical solution of the above communication security protection method, the step of obtaining a communication security credential from a public key infrastructure service in response to a service request for a public key infrastructure service issued by the electronic control unit includes:

[0021] In response to the service request, the communication security credential is obtained from the public key infrastructure service through the public key infrastructure provider, and the communication security credential is sent to the public key infrastructure agent.

[0022] In a technical solution of the above communication security protection method, the method further includes:

[0023] The public key infrastructure agent program and the public key infrastructure provider program establish a secure communication link through a preset communication protocol.

[0024] In a technical solution of the above communication security protection method, after obtaining the communication security certificate from the public key infrastructure service, the method further includes:

[0025] The communication security credentials are stored in a secure storage module of the electronic control unit.

[0026] In a technical solution of the above communication security protection method, the secure communication between different electronic control units is realized according to the communication security credential, including:

[0027] When a secure communication link needs to be established between the application programs in different electronic control units, obtaining the communication security credential from the secure storage module;

[0028] A secure communication link between applications of different electronic control units is established according to the communication security credential.

[0029] In a technical solution of the above communication security protection method, the communication security credential includes an identity certificate of the application and a key of the identity certificate.

[0030] In a technical solution of the above communication security protection method, the trusted execution environment includes a trusted operating system;

[0031] The obtaining of a communication security credential from a public key infrastructure service includes:

[0032] Based on the service request, the trusted application is accessed through the trusted operating system to obtain the communication security credential.

[0033] In a technical solution of the above communication security protection method, the trusted application includes a privacy data storage service and / or a security password service and / or a security credential management service and / or an identity certificate issuing authority.

[0034] In one technical solution of the above communication security protection method,

[0035] The smart device includes a main electronic control unit;

[0036] The public key infrastructure service is deployed in a trusted execution environment of the master electronic control unit.

[0037] In a second aspect, a smart device is provided, comprising a plurality of processors; and a memory communicatively connected to the plurality of processors; wherein a computer program is stored in the memory, and when the computer program is executed by the at least one processor, the communication security protection method described in any one of the technical solutions of the above-mentioned communication security protection method is implemented.

[0038] In a third aspect, a computer-readable storage medium is provided, which stores a plurality of program codes, wherein the program codes are suitable for being loaded and run by a processor to execute the communication security protection method described in any one of the technical solutions of the above-mentioned communication security protection method.

[0039] The above one or more technical solutions of the present application have at least one or more of the following beneficial effects:

[0040] In the technical solution for implementing the present application, the present application responds to the service request for applying for the public key infrastructure service issued by the electronic control unit, obtains the communication security certificate from the public key infrastructure service, and realizes the secure communication between different electronic control units of the smart device based on the communication security certificate. Through the above configuration method, since the public key infrastructure service of the present application is deployed in the trusted execution environment of the smart device, the security of the smart device itself can be ensured. At the same time, each electronic control unit can apply for the communication security certificate from the public key infrastructure service. Compared with the public key infrastructure service deployed in the cloud, its user privacy and other related data will not leave the smart device, which can ensure the security of the user's privacy data, and can also effectively reduce the risk of user data exposure, reduce the risk of network attacks and remote tampering. At the same time, deploying the public key infrastructure service locally can also avoid the failure of the issuance of the communication security certificate in the case of network delay or network unavailability, and effectively improve the real-time performance of obtaining the communication security certificate. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] The disclosure of the present application will become easier to understand with reference to the accompanying drawings. It is easy for those skilled in the art to understand that these drawings are only for illustrative purposes and are not intended to limit the scope of protection of the present application. Among them:

[0042] Figure 1 This is a flow chart of the main steps of a communication security protection method according to an embodiment of the present application;

[0043] Figure 2 It is a main interaction diagram of a communication security protection method according to an implementation method of an embodiment of the present application;

[0044] Figure 3 It is a schematic diagram of the main component architecture of deploying a public key infrastructure service in a main electronic control unit according to an implementation of an embodiment of the present invention. DETAILED DESCRIPTION

[0045] Some embodiments of the present application are described below with reference to the accompanying drawings. Those skilled in the art should understand that these embodiments are only used to explain the technical principles of the present application and are not intended to limit the protection scope of the present application.

[0046] In the description of the present application, "module" and "processor" may include hardware, software or a combination of the two. A module may include hardware circuits, various suitable sensors, communication ports, memory, and may also include software parts, such as program code, or a combination of software and hardware. The processor may be a central processing unit, a microprocessor, an image processor, a digital signal processor or any other suitable processor. The processor has data and / or signal processing functions. The processor may be implemented in software, hardware or a combination of the two. Non-temporary computer-readable storage media include any suitable medium that can store program code, such as a disk, a hard disk, an optical disk, a flash memory, a read-only memory, a random access memory, etc. The term "A and / or B" means all possible combinations of A and B, such as only A, only B or A and B. The term "at least one A or B" or "at least one of A and B" has a similar meaning to "A and / or B" and may include only A, only B or A and B. The singular terms "one" and "the" may also include plural forms.

[0047] Here we first explain some terms involved in this application.

[0048] ECU: Electronic Control Unit, which can refer to the vehicle-mounted controller. An ECU can include a processor and memory. In some ECUs, there can be multiple processors.

[0049] REE (Rich Execution Environment) refers to the environment when the operating system is running.

[0050] TEE (Trusted Execution Environment) is an independent processing environment with computing and storage functions that can provide security and integrity protection.

[0051] PKI (Public Key Infrastructure) is an architecture used to implement functions such as the generation, management, storage, distribution and revocation of keys and certificates based on the public key cryptography system.

[0052] See attached Figure 1 , Figure 1 FIG. 1 is a flow chart of the main steps of a communication security protection method according to an embodiment of the present application. Figure 1 As shown, the communication security protection method in the embodiment of the present application is applied to a smart device, and the smart device includes multiple electronic control units. The communication security protection method mainly includes the following steps S101-S102.

[0053] Step S101: In response to a service request for a public key infrastructure service issued by an electronic control unit, a communication security credential is obtained from the public key infrastructure service; wherein a trusted application of the public key infrastructure service is deployed in a trusted execution environment of the smart device.

[0054] In this embodiment, when the electronic control unit issues a service request for a public key infrastructure service, it can obtain communication security credentials from the public key infrastructure service system deployed in the trusted execution environment of the smart device. The public key infrastructure service is deployed in the trusted execution environment, and the trusted execution environment can provide strong software and operating environment security protection for the public key infrastructure service. By isolating it from other parts of the smart device at the physical and logical levels, the trusted execution environment can effectively resist various software and hardware attacks, ensure the security of the public key infrastructure service, and enhance its defense against external threats.

[0055] In one embodiment, the smart device may be a smart vehicle, a driving device, a robot, etc. The multiple electronic control units contained in the smart device may respectively implement different functions, such as vehicle safety control, vehicle motion control, smart cockpit function, automatic driving function, etc. Multiple applications (APPs) may be deployed in the electronic control unit.

[0056] In one implementation, the public key infrastructure service may include a trusted application and a public key infrastructure provider (PKI Provider). The trusted application is an application for issuing, managing, and revoking communication security credentials for the electronic control unit.

[0057] In one implementation, there is a master ECU among multiple electronic control units of a smart device, and a trusted execution environment can be deployed in the master ECU. Trusted applications can be deployed in the trusted execution environment of the master ECU, and a public key infrastructure provider can be deployed in the rich execution environment of the master ECU. The master ECU can serve as a server for the public key infrastructure service.

[0058] In one implementation, the electronic control unit may be an MPU (Micro Processor Unit) or an MCU (Micro Controller Unit).

[0059] In one embodiment, the communication security credential may include an identity certificate of an application of the electronic control unit and a key of the identity certificate, wherein the identity certificate is used for identity authentication and the key is used for verifying the authenticity and integrity of the identity certificate.

[0060] Step S102: Implement secure communication between different electronic control units according to the communication security credentials.

[0061] In this embodiment, secure communication between different electronic control units can be achieved based on the communication security credentials.

[0062] In one implementation, secure communication between applications or services of different electronic control units may be achieved based on communication security credentials.

[0063] Based on the above steps S101-S102, the embodiment of the present application responds to the service request for applying for the public key infrastructure service issued by the electronic control unit, obtains the communication security certificate from the public key infrastructure service, and realizes the secure communication between different electronic control units of the smart device based on the communication security certificate. Through the above configuration method, since the trusted application of the public key infrastructure service of the embodiment of the present application is deployed in the trusted execution environment of the smart device, the security of the smart device itself can be ensured. At the same time, each electronic control unit can apply for the public key infrastructure service from the public key infrastructure service. Compared with the public key infrastructure service deployed in the cloud, its user privacy and other related data will not leave the smart device, which can ensure the security of the user's privacy data, and can also effectively reduce the risk of user data exposure, reduce the risk of network attacks and remote tampering. At the same time, deploying the public key infrastructure service locally can also avoid the situation where the communication security certificate fails to be issued in the case of network delay or network unavailability, and effectively improve the real-time performance of obtaining the communication security certificate.

[0064] In one implementation of the embodiment of the present application, before step S101, the method further includes the following step S103:

[0065] Step S103: A service request is issued to a public key infrastructure provider of a public key infrastructure service through a public key infrastructure agent of the electronic control unit; wherein the public key infrastructure provider is deployed in a rich execution environment of the smart device, and the public key infrastructure provider communicates with the trusted execution environment through an application programming interface (API) of the trusted execution environment, and the application programming interface is an interface opened by the trusted execution environment to the rich execution environment.

[0066] In this implementation, a service request can be sent to a PKI provider through a PKI agent. The agent is a program that is responsible for a specific type of behavior when an entity needs it (e.g., a service request). The provider is a mode of transferring data and status in a component hierarchy, which mainly solves the problem of data sharing between components.

[0067] In one implementation, before the public key infrastructure agent program issues a service request, the service request is authenticated. For example, for calls in the same process space, external processes are not allowed to call the public key infrastructure agent program related interfaces; for calls in different process spaces, the inter-process access control mechanism is used for authentication.

[0068] In one implementation, step S103 may be further configured as follows:

[0069] The public key infrastructure daemon of the electronic control unit sends a service request to the public key infrastructure provider through the public key infrastructure agent.

[0070] In this embodiment, the public key infrastructure daemon of the electronic control unit will send a service request to the public key infrastructure provider through the public key infrastructure agent program. The daemon is a service process that is independent of the control terminal and periodically performs certain tasks or waits for certain events to occur.

[0071] In one implementation, before issuing a service request, the public key infrastructure daemon checks whether there is an abnormality in the communication security credentials in the electronic control unit according to a local configuration file, and if there is an abnormality, it issues a service request for applying for a public key infrastructure service.

[0072] In one implementation, the abnormal situation includes the absence of a communication security credential, the communication security credential having expired or about to expire, and other abnormal situations.

[0073] In one implementation, the communication security credentials in the electronic control unit may be checked for abnormalities when the smart device is started, or periodically after starting.

[0074] In other implementations, the dynamic link library of the electronic control unit may send a service request to the public key infrastructure provider through the public key infrastructure agent.

[0075] In one implementation, step S101 may be further configured as follows:

[0076] In response to the service request, a communication security credential is obtained from a public key infrastructure service through a public key infrastructure provider, and the communication security credential is sent to a public key infrastructure agent.

[0077] In this embodiment, the public key infrastructure provider can obtain the communication security credential from the public key infrastructure service, and send the communication security credential to the public key infrastructure agent of the electronic control unit.

[0078] In one implementation, the trusted execution environment may open an application program interface, also referred to as a native interface, to the rich execution environment, through which the public key infrastructure provider may obtain communication security credentials from the public key infrastructure service.

[0079] In one implementation, the public key infrastructure agent program and the public key infrastructure provider program may establish a secure communication link through a preset communication protocol.

[0080] In one implementation, the communication protocol may be an Ethernet communication protocol.

[0081] In one implementation, after the communication security credentials are acquired, the communication security credentials may be stored in a secure storage module of the electronic control unit. For example, the communication security credentials may be stored in the secure storage module through a public key infrastructure daemon of the electronic control unit.

[0082] In one implementation, the key management module of the electronic control unit may perform access control and security protection for applications and services of the electronic control unit based on the communication security credentials stored in the secure storage module.

[0083] In one implementation, step S102 may further include the following steps S1021 and S1022:

[0084] Step S1021: When a secure communication link needs to be established between application programs in different electronic control units, a communication security credential is obtained from the secure storage module.

[0085] Step S1022: Establishing a secure communication link between applications of different electronic control units according to the communication security credential.

[0086] In this embodiment, when a secure communication link needs to be established between applications in different electronic control units, communication security credentials can be obtained from the security storage model of the electronic control unit, and a secure communication link between the applications of the different electronic control units can be established based on the obtained communication security credentials.

[0087] In one implementation of the embodiment of the present application, the trusted execution environment includes a trusted operating system (TrustedOS), which can access the public key infrastructure trusted application in the public key infrastructure service through the trusted operating system based on a service request, thereby obtaining communication security credentials.

[0088] In one implementation, trusted applications of public key infrastructure services may include privacy data storage services (PS), secure cryptographic services (SC), secure credential management services (CM, Credential Management), and identity certificate authorities (CA, Certification Authority). Among them, the privacy data storage service is used to implement a general security storage service, which can store sensitive data including privacy data and configuration parameters, and provide integrity and confidentiality protection. The secure cryptographic service is used to provide secure application cryptography related operations, including encryption and decryption, signing, and signature verification. The secure credential management service is used to provide secure storage and management of keys and identity certificates, and related operations such as key replacement and key rotation. The identity certificate authority is used to provide on-board PKI related services, including certificate request, identity authentication, certificate issuance, certificate verification, certificate revocation and other functions.

[0089] In one embodiment, please refer to the attached Figure 2 , Figure 2 FIG. 1 is a schematic diagram of the main interactions of a communication security protection method according to an implementation of an embodiment of the present application. Figure 2 As shown in the figure, the communication security protection method is applied to the vehicle side, which includes multiple ECUs (ECU1, ECU2, ..., ECUn) and a main ECU, where multiple ECUs constitute the client (Client) for receiving PKI services, and the main ECU is used as the server (Server) to provide PKI services. Multiple applications (APP1, App2...) are deployed on the ECU. The specific process of the communication security protection method is:

[0090] The on-board PKI (Public Key Infrastructure) daemon requests the on-board PKI service according to the local configuration; the on-board PKI agent establishes secure communication with the on-board PKI Provider and requests the corresponding service; the on-board PKI provider (PKIProvider) applies for the relevant trusted application (on-board PKI trusted application) in TEE through REE to obtain the relevant identity certificate and key; the obtained relevant certificates and keys are stored in the secure storage; and a secure communication link between ECUs is established based on the relevant certificates and keys.

[0091] Combine the following Figure 3 Explain the architecture of the main ECU. Figure 3 FIG. 1 is a schematic diagram of the main components of the architecture for deploying a public key infrastructure service in a main electronic control unit according to an implementation of an embodiment of the present invention. Figure 3 As shown in the figure, the vehicle PKI provider accesses the TEE driver through the local interface in REE, and accesses the trusted application in the trusted operating system in TEE through the TEE driver, where the TEE driver is deployed in the REE operating system core module (REE OS Kernel). The trusted operating system accesses the secure file system (Secure FS) in TEE through the underlying interface inside TEE. Secure FS includes vehicle privacy data storage (VPS: Vehicle Privacy Storage), vehicle security password module (VSC: Vehicle SecureCrypto), vehicle credential management module (VCM: Vehicle Credential Management) and vehicle certificate authority (VCA: Vehicle Certification Authority). The TEE trusted execution environment provides strong security protection for the software and operating environment of the vehicle PKI system. By isolating from other parts of the device at the physical and logical levels, TEE can effectively resist various software and hardware attacks, ensure the security of the vehicle PKI, and enhance its defense against external threats.

[0092] It should be pointed out that although the various steps in the above embodiments are described in a specific order, those skilled in the art can understand that in order to achieve the effect of the present application, different steps do not have to be performed in such an order. They can be performed simultaneously (in parallel) or in other orders. These changes are within the scope of protection of the present application.

[0093] It is understood by those skilled in the art that all or part of the processes in the method for implementing the above-mentioned embodiment of the present application can also be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a computer-readable storage medium. When the computer program is executed by the processor, the steps of each of the above-mentioned method embodiments can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable storage medium may include: any entity or device, medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory, random access memory, electric carrier signal, telecommunication signal and software distribution medium that can carry the computer program code. It should be noted that the content contained in the computer-readable storage medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable storage media do not include electric carrier signals and telecommunication signals.

[0094] Furthermore, the present application also provides an intelligent device. In an intelligent device embodiment according to the present application, the intelligent device may include multiple processors and memories, the memory may be configured to store a program for executing the communication security protection method of the above method embodiment, and the processor may be configured to execute the program in the memory, which includes but is not limited to the program for executing the communication security protection method of the above method embodiment. For ease of explanation, only the parts related to the embodiments of the present application are shown. For specific technical details not disclosed, please refer to the method part of the embodiments of the present application.

[0095] In an embodiment of the present application, the smart device may be a device formed by multiple electronic control units. In some possible implementations, the smart device may include multiple memories and multiple processors. The program for executing the communication security protection method of the above method embodiment can be divided into multiple subprograms, each of which can be loaded and run by a processor to execute different steps of the communication security protection method of the above method embodiment. Specifically, each subprogram can be stored in different memories, and each processor can be configured to execute programs in one or more memories to jointly implement the communication security protection method of the above method embodiment, that is, each processor executes different steps of the communication security protection method of the above method embodiment, to jointly implement the communication security protection method of the above method embodiment.

[0096] The above-mentioned multiple processors may be processors deployed on the same system on chip (SoC), or may be processors of different systems on chips deployed on the same smart device, or may be processors deployed on the same smart device using other existing or future technologies.

[0097] Furthermore, the present application also provides a computer-readable storage medium. In a computer-readable storage medium embodiment according to the present application, the computer-readable storage medium can be configured to store a program for executing the communication security protection method of the above-mentioned method embodiment, and the program can be loaded and run by the processor to implement the above-mentioned communication security protection method. For ease of explanation, only the parts related to the embodiment of the present application are shown. For specific technical details not disclosed, please refer to the method part of the embodiment of the present application. The computer-readable storage medium can be a memory device formed by various electronic devices. Optionally, the computer-readable storage medium in the embodiment of the present application is a non-temporary computer-readable storage medium.

[0098] Further, it should be understood that since the setting of each module is only for illustrating the functional units of the device of the present application, the physical devices corresponding to these modules may be the processor itself, or a part of the software in the processor, a part of the hardware, or a part of the combination of software and hardware. Therefore, the number of each module in the figure is only schematic.

[0099] It is understood by those skilled in the art that each module in the device can be adaptively split or merged. Such splitting or merging of specific modules will not cause the technical solution to deviate from the principle of the present application, and therefore, the technical solutions after splitting or merging will fall within the protection scope of the present application.

[0100] The relevant user personal information that may be involved in the various embodiments of this application is strictly in accordance with the requirements of laws and regulations, following the principles of legality, legitimacy and necessity, based on the reasonable purposes of business scenarios, to process the personal information that users actively provide during the use of products / services or generated due to the use of products / services, as well as the personal information obtained with the user's authorization.

[0101] The user personal information processed by this application will vary depending on the specific product / service scenario, and shall be based on the specific scenario in which the user uses the product / service, and may involve the user's account information, device information, driving information, vehicle information or other related information. This application will treat the user's personal information and its processing with a high degree of diligence.

[0102] This application attaches great importance to the security of user personal information and has taken reasonable and feasible security protection measures that meet industry standards to protect user information and prevent personal information from being accessed, disclosed, used, modified, damaged or lost without authorization.

[0103] So far, the technical solutions of the present application have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present application is obviously not limited to these specific embodiments. Without departing from the principles of the present application, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present application.

Claims

1. A communication security protection method, characterized in that: The method is applied to a smart device, wherein the smart device includes a plurality of electronic control units, and the method includes: In response to a service request for a public key infrastructure service issued by the electronic control unit, a communication security credential is obtained from the public key infrastructure service; the communication security credential is saved in a secure storage module of the electronic control unit; the communication security credential includes an identity certificate of an application and a key of the identity certificate; wherein the trusted application of the public key infrastructure service is deployed in a trusted execution environment of the smart device; the trusted application includes a privacy data storage service and / or a secure password service and / or a secure credential management service and / or an identity certificate issuing authority; the secure credential management service is used to provide secure storage and management operations for keys and identity certificates of the smart device; the keys of the smart device do not leave the smart device; Implementing secure communication between different electronic control units of the smart device according to the communication security credentials; The method of implementing secure communication between different electronic control units of the smart device according to the communication security credential includes: When a secure communication link needs to be established between the application programs in different electronic control units, obtaining the communication security credential from the secure storage module; establishing a secure communication link between different applications of the electronic control unit according to the communication security credentials; The method further comprises issuing the service request according to the following steps: Sending the service request to the public key infrastructure provider of the public key infrastructure service through the public key infrastructure agent of the electronic control unit; The public key infrastructure provider is deployed in the rich execution environment of the smart device, and the public key infrastructure provider communicates with the trusted execution environment through the application program interface of the trusted execution environment; the application program interface is an interface opened by the trusted execution environment to the rich execution environment; The public key infrastructure agent program and the public key infrastructure provider program establish a secure communication link through a preset communication protocol.

2. The communication security protection method according to claim 1, characterized in that: The sending of the service request to the public key infrastructure provider through the public key infrastructure agent of the electronic control unit includes: The public key infrastructure daemon process of the electronic control unit sends the service request to the public key infrastructure provider through the public key infrastructure agent program.

3. The communication security protection method according to claim 2, characterized in that: Before the electronic control unit issues the service request, the method further includes: The public key infrastructure daemon process of the electronic control unit checks whether there is an abnormality in the communication security credential of the electronic control unit; When there is an abnormality in the communication security credential, the service request is issued.

4. The communication security protection method according to claim 1, characterized in that: The step of obtaining a communication security credential from a public key infrastructure service in response to a service request for a public key infrastructure service issued by the electronic control unit includes: In response to the service request, the communication security credential is obtained from the public key infrastructure service through the public key infrastructure provider, and the communication security credential is sent to the public key infrastructure agent.

5. The communication security protection method according to claim 1, characterized in that: The trusted execution environment includes a trusted operating system; The obtaining of a communication security credential from a public key infrastructure service includes: Based on the service request, the trusted application is accessed through the trusted operating system to obtain the communication security credential.

6. The communication security protection method according to any one of claims 1 to 5, characterized in that: The smart device includes a main electronic control unit; The public key infrastructure service is deployed in a trusted execution environment of the master electronic control unit.

7. A smart device, characterized in that: include: Multiple processors; and, a memory communicatively coupled to the plurality of processors; Wherein, a computer program is stored in the memory, and when the computer program is executed by at least one of the processors, the communication security protection method described in any one of claims 1 to 6 is implemented.

8. A computer-readable storage medium storing a plurality of program codes, characterized in that: The program code is suitable for being loaded and run by a processor to execute the communication security protection method according to any one of claims 1 to 6.

Images