Intelligent vehicle data information trusted verification method and device based on trusted computing

Abstract

The embodiment of the present invention relates to a trusted verification method and device for intelligent vehicle data information based on trusted computing, which is applied to the vehicle side, and the method includes: generating a first original data set based on first data and second data; performing data processing on the first original data set to obtain a first processed data set; generating a first record data set based on the first original data set and the first processed data set; storing the first record data set; wherein the first data includes the initial data of the vehicle status record; the second data includes the vehicle location information, which is sent to the vehicle side by the synchronization base station; the data processing includes at least one of hash processing and encryption processing. The technical solution provided by the embodiment of the present invention improves the efficiency and security of vehicle driving information data management by processing the vehicle location information sent by the synchronization base station and other vehicle data information and storing them, and prevents vehicle data from being leaked or unauthorizedly accessed and tampered with.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of secure computing technology, and in particular to a method and device for credible verification of intelligent vehicle data information based on trusted computing. Background Art

[0002] The existing vehicle driving information recording method records the original vehicle driving information data through a database. When a vehicle breaks down or an accident occurs, it is necessary to rely on database recovery to handle the recovery of the driving information record data after the vehicle breaks down or an accident. This processing method usually has the following problems: data corruption or loss may occur during the data recovery process, resulting in the inability to completely restore all driving records. In addition, without sufficient security measures, the data is easily accessed, modified or even tampered with by unauthorized personnel, which brings greater data security risks. Summary of the invention

[0003] Based on the above situation of the prior art, the purpose of the embodiments of the present invention is to provide a method and device for trusted verification of intelligent vehicle data information based on trusted computing, which improves the security of vehicle driving information data management by processing and storing the vehicle driving information.

[0004] To achieve the above object, according to one aspect of the present invention, a method for credible verification of intelligent vehicle data information based on trusted computing is provided, which is applied to a vehicle side, and the method includes:

[0005] generating a first original data set based on the first data and the second data;

[0006] Performing data processing on the first original data set to obtain a first processed data set;

[0007] Generate a first record data set based on the first original data set and the first processed data set;

[0008] storing the first record data set;

[0009] Among them, the first data includes initial data of vehicle status record; the second data includes vehicle location information, and the vehicle location information is sent by the synchronization base station to the vehicle end; the data processing includes at least one of hash processing and encryption processing.

[0010] Further, generating a first original data set based on the first data and the second data includes: combining the first data, the second data and the first public key to generate the first original data set;

[0011] Performing data processing on the first original data set to obtain a first processed data set includes: performing hash processing on the first original data set to obtain a first hash value, and performing encryption processing on the first hash value using a first public key to obtain a first processed data set;

[0012] Generating a first record data set based on the first original data set and the first processed data set includes: combining the first original data set and the first processed data set to generate the first record data set;

[0013] Among them, the first public key is generated by the trusted execution environment of the host computer supervision server and distributed to the vehicle end.

[0014] Furthermore, the method further comprises:

[0015] Performing hash processing on the third data to obtain a second hash value; the third data includes a previous first record data set;

[0016] The second hash value is inserted into the first record data set.

[0017] Furthermore, the method further comprises:

[0018] Sending a first recorded data hash value to a synchronization base station based on a predetermined period, wherein the first recorded data hash value is obtained by performing hash processing on a first recorded data set, so as to store the first recorded data hash value through the synchronization base station; wherein the synchronization base station is used to perform hashing according to the first recorded data hash value and local identification information of the synchronization base station to obtain a stored recorded hash value, and feed it back to the vehicle end;

[0019] Receive and store the storage record hash value fed back by the synchronization base station.

[0020] Furthermore, the method further comprises:

[0021] Acquire a first original data set and a first processed data set in the first record data set;

[0022] Performing data verification based on the acquired first original data set and the first processed data set;

[0023] The data verification is performed by the verification end based on the following steps:

[0024] Obtain a first private key from the upper computer supervision server, and decrypt the first processed data set using the first private key to obtain a first hash value;

[0025] Performing hash processing on the first original data set to obtain a first verification hash value;

[0026] Verifying the first Hash value using a first verification Hash value;

[0027] Among them, the first public key and the first private key are an asymmetric key pair, and the asymmetric key pair is generated by the host computer supervising the trusted execution environment of the server.

[0028] Furthermore, the method further comprises:

[0029] Obtaining a second hash value in the first record data set;

[0030] Obtaining a previous first record data set corresponding to the first record data set;

[0031] The data verification is performed by the verification end based on the following steps:

[0032] Performing hash processing on the previous first record data set to obtain a second verification hash value;

[0033] The second Hash value is verified using a second verification Hash value.

[0034] Furthermore, the method further comprises:

[0035] Generate an asymmetric key pair and a first symmetric key in a trusted execution environment on the vehicle side, wherein the asymmetric key pair includes a first public key and a first private key;

[0036] Slice the first symmetric key in the vehicle-side trusted execution environment to generate three slicing keys; any two of the three slicing keys can synthesize the first symmetric key;

[0037] The first public key is sent to the upper computer supervision server, and two of the three shard keys are sent to the vehicle manufacturer and the upper computer supervision server respectively.

[0038] Further, generating a first original data set based on the first data and the second data includes: combining the first data and the second data to generate the first original data set;

[0039] Processing the first original data set to obtain a first processed data set includes: encrypting the first original data set in a vehicle-side trusted execution environment using a first symmetric key to obtain first encrypted data; performing hash processing on the first original data set to obtain a first hash value; signing the first hash value using a first private key to obtain first signature data; and combining the first encrypted data, the first hash value, and the first signature data to generate a first processed data set;

[0040] Generating a first record data set based on the first original data set and the first processed data set includes: using the first processed data set as the first record data set;

[0041] The first record data set is the first first record data set of the vehicle end.

[0042] Further, generating a first original data set based on the first data and the second data includes: combining the first data and the second data to generate the first original data set;

[0043] Processing the first original data set to obtain a first processed data set includes: in a vehicle-side trusted execution environment, encrypting the first original data set using a first symmetric key to obtain first encrypted data; performing hash processing on the first original data set to obtain a first hash value; signing the first hash value and the first hash value in the previous first record data set using a first private key to obtain first signature data; or signing the first hash value and the hash value of the previous first record data set using a first private key to obtain first signature data; generating a first processed data set based on the first original data set, the first hash value, and the first signature data;

[0044] Generating a first record data set based on the first original data set and the first processed data set includes: using the first processed data set as the first record data set;

[0045] The first record data set is the Nth first record data set of the vehicle end, where N is a natural number and N≥2.

[0046] Furthermore, the method further comprises:

[0047] The first record data set is sent to the vehicle factory and the upper computer supervision server.

[0048] Furthermore, the method further comprises:

[0049] Obtaining a first hash value, first encrypted data, and first signature data in the first record data set;

[0050] Decrypting the first encrypted data using a first symmetric key in a trusted execution environment on the vehicle or in a processing area designated by an upper-level supervisory server to obtain a first original data set, wherein the processing area designated by the upper-level supervisory server generates a first symmetric key based on any two of the three shard keys;

[0051] Performing data verification based on the first original data set, the first hash value and the first signature data;

[0052] The data verification is performed by the verification end based on the following steps:

[0053] Performing hash processing on the first original data set to obtain a verification hash value;

[0054] Verifying the first Hash value using a verification Hash value;

[0055] The data verification is also performed by the host computer supervision server based on the following steps:

[0056] The first signature data is verified using a first public key and a first hash value.

[0057] Furthermore, the method further comprises:

[0058] In the vehicle-side trusted execution environment, encrypting the first symmetric key with the first public key to generate a first encrypted symmetric key, and writing the first encrypted symmetric key into a storage space on the vehicle side;

[0059] When the vehicle-side trusted execution environment requests to use the first encrypted symmetric key, the first encrypted symmetric key is imported from the vehicle-side storage space to the vehicle-side trusted execution environment, and the first encrypted symmetric key is decrypted using the first private key in the vehicle-side trusted execution environment to obtain the first symmetric key.

[0060] Furthermore, the method further comprises:

[0061] Obtaining the first Hash value, the first encrypted data, the first signature data in the first record data set and the first Hash value in the previous first record data set; or,

[0062] Obtaining a first hash value, first encrypted data, first signature data, and a hash value of a previous first record data set in the first record data set;

[0063] Decrypting the first encrypted data using a first symmetric key in a trusted execution environment on the vehicle or in a processing area designated by a host computer supervision server to obtain a first original data set, wherein the processing area designated by the host computer supervision server generates a first symmetric key based on any two of the three shard keys;

[0064] Performing data verification based on the first original data set, the first Hash value, the first signature data, and the first Hash value in the previous first record data set, or based on the first original data set, the first Hash value, the first signature data, and the Hash value of the previous first record data set;

[0065] The data verification is performed by the verification end based on the following steps:

[0066] Performing hash processing on the first original data set to obtain a verification hash value;

[0067] Verifying the first Hash value using a verification Hash value;

[0068] The data verification is also performed by the host computer supervision server based on the following steps:

[0069] The first signature data is verified using the first public key, the first hash value, and the first hash value in the previous first record data set, or the first public key, the first hash value, and the hash value of the previous first record data set.

[0070] According to a second aspect of the present invention, there is provided a trusted verification device for intelligent vehicle data information based on trusted computing, which is applied to a vehicle side, and the device comprises:

[0071] An original data set generating module, configured to generate a first original data set based on the first data and the second data;

[0072] a processed data set generating module, configured to perform data processing on the first original data set to obtain a first processed data set;

[0073] A record data set generation module, used to generate a first record data set based on the first original data set and the first processed data set;

[0074] A data storage module, used for storing the first record data set;

[0075] Among them, the first data includes initial data of vehicle status record; the second data includes vehicle location information, and the vehicle location information is sent by the synchronization base station to the vehicle end; the data processing includes at least one of hash processing and encryption processing.

[0076] According to a third aspect of the present invention, there is provided a trusted verification system for intelligent vehicle data information based on trusted computing, comprising a vehicle end, at least one synchronization base station, a database and a host computer supervision server; the vehicle end, the synchronization base station and the host computer supervision server are communicatively connected;

[0077] The vehicle end is used to generate a first record data set, and the vehicle end includes the vehicle driving information recording device as described in the second aspect of the present invention;

[0078] The database is used to store a first record data set;

[0079] The synchronization base station is used to send vehicle position information to the vehicle end;

[0080] The host computer supervision server is used to perform data verification under abnormal circumstances;

[0081] The database is located on the vehicle side or is an independent physical device.

[0082] Furthermore, the system further comprises a verification terminal, which is communicatively connected with the vehicle terminal and the upper computer supervision server;

[0083] The verification end is used to perform data verification based on the first record data set under abnormal circumstances.

[0084] In summary, an embodiment of the present invention provides a method and device for trusted verification of intelligent vehicle data information based on trusted computing, which is applied to the vehicle side, and the method includes: generating a first original data set based on first data and second data; performing data processing on the first original data set to obtain a first processed data set; generating a first record data set based on the first original data set and the first processed data set; storing the first record data set; wherein the first data includes the initial data of the vehicle status record; the second data includes the vehicle location information, which is sent by the synchronization base station to the vehicle side; the data processing includes at least one of hash processing and encryption processing. The technical solution provided by the embodiment of the present invention improves the security of vehicle driving information data management by processing the vehicle location information sent by the synchronization base station and other vehicle data information and storing them, and prevents vehicle data from being leaked or unauthorizedly accessed and tampered with. BRIEF DESCRIPTION OF THE DRAWINGS

[0085] Figure 1 It is a block diagram of a trusted verification system for intelligent vehicle data information based on trusted computing provided by an embodiment of the present invention;

[0086] Figure 2 It is a flow chart of a method for trusted verification of intelligent vehicle data information based on trusted computing provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0087] In order to make the purpose, technical scheme and advantages of the present invention clearer, the present invention is further described in detail below in conjunction with specific embodiments and with reference to the accompanying drawings. It should be understood that these descriptions are only exemplary and are not intended to limit the scope of the present invention. In addition, in the following description, the description of well-known structures and technologies is omitted to avoid unnecessary confusion of the concept of the present invention.

[0088] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in one or more embodiments of the present invention should be understood by people with ordinary skills in the field to which the present invention belongs. The words "first", "second" and similar words used in one or more embodiments of the present invention do not indicate any order, quantity or importance, but are only used to distinguish different components. "Include" or "comprise" and similar words mean that the elements or objects appearing before the word include the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect.

[0089] The embodiment of the present invention provides a trusted verification method for intelligent vehicle data information based on trusted computing, which is applied to the vehicle side. The trusted verification method for intelligent vehicle data information based on trusted computing provided by the embodiment of the present invention can be implemented by constructing a vehicle driving information recording system. Figure 1 FIG. 4 shows a block diagram of a vehicle driving information recording system provided by an embodiment of the present invention. Figure 1 As shown, the vehicle driving information recording system includes a vehicle end, at least one synchronization base station, a database, a verification end and a host computer supervision server, wherein the vehicle end, the synchronization base station and the host computer supervision server are communicatively connected; the verification end is communicatively connected with the vehicle end and the host computer supervision server.

[0090] The vehicle side is used to generate a first record data set. The vehicle side can generate the first record data set based on the trusted verification method for intelligent vehicle data information based on trusted computing provided by an embodiment of the present invention. The first record data set includes raw data related to the vehicle side and the vehicle position, and the raw data is processed by, for example, hash processing and encryption processing. The vehicle side may include a vehicle driving information recording device, which is used to implement the trusted verification method for intelligent vehicle data information based on trusted computing provided by an embodiment of the present invention.

[0091] A database is used to store the first record data set. According to some optional embodiments, the database may be located at the vehicle end or as an independent physical device.

[0092] The synchronization base station is used to send vehicle location information to the vehicle end.

[0093] The upper computer supervision server is used to perform data verification under abnormal circumstances (such as vehicle failure or accident, etc.), or a processing area can be designated to perform data verification within the processing area.

[0094] The verification end is used to perform data verification based on the first record data set in an abnormal situation. The verification end can be a third party independent of the vehicle end and the car factory end.

[0095] Figure 2 FIG. 4 is a flowchart of a method for credible verification of intelligent vehicle data information based on trusted computing provided by an embodiment of the present invention. Figure 2 As shown, the intelligent vehicle data information trust verification method based on trusted computing includes the following steps:

[0096] S202. Generate a first original data set based on the first data and the second data. The first data includes initial data of vehicle status record, which can be collected by the vehicle system located at the vehicle end. The initial data of vehicle status record refers to data collected by the vehicle and not processed, including data such as vehicle speed, direction, angle, throttle, brake, temperature, etc.; the second data includes vehicle location information, which is sent by the synchronization base station to the vehicle end, and the vehicle location information includes local identification information corresponding to the synchronization base station. This scheme stores the vehicle data and the data synchronized by the base station together, and the data synchronized by the base station can be used to determine whether the vehicle information corresponds. For example, when the vehicle is within the coverage of a base station, the vehicle receives the vehicle location transmitted by the base station and stores it together with the information related to the vehicle and the area, which will generate a corresponding relationship between the vehicle information and the base station synchronization information. In addition, the data transmission record of the base station can be used to determine whether the vehicle data is stored.

[0097] According to certain optional embodiments, the first original data set is generated based on the first data and the second data, which can be: the first data, the second data and the first public key are combined to generate the first original data set. The combination method can be any optional method, for example, the first data, the second data and the first public key are arranged in order to form a whole, which is the first original data set. Among them, the first public key can be generated and distributed to the vehicle end through the trusted execution environment of the host computer supervision server. The host computer supervision server generates a pair of asymmetric key pairs for each vehicle in the trusted execution environment space, and the asymmetric key pair includes a first public key and a first private key. The host computer supervision server distributes the first public key to the corresponding vehicle end through the trusted execution environment, and retains the first private key to the host computer supervision server, so that the asymmetric key pair can be used to perform data encryption processing and corresponding data verification.

[0098] S204: Process the first original data set to obtain a first processed data set. The data processing in this step includes at least one of hash processing and encryption processing.

[0099] According to some optional embodiments, data processing is performed on the first original data set to obtain the first processed data set, which may be: performing hash processing on the first original data set to obtain a first hash value, and encrypting the first hash value using a first public key to obtain the first processed data set. The hash processing may use, for example, a SHA-256 or SHA-3 algorithm, and the obtained first hash value is encrypted using the first public key.

[0100] S206. Generate a first record data set based on the first original data set and the first processed data set. The first original data set and the first processed data set may be combined to generate the first record data set. The combination may be in any optional manner, such as arranging the first original data set and the first processed data set in sequence to form a whole, which is the first record data set. The vehicle end may generate the first record data set according to a predetermined time interval, and store the generated first record data set in sequence. The time interval may be set according to actual needs.

[0101] According to certain optional embodiments, the first record data set may also include related records of the previous first record data set: the third data is hashed to obtain a second hash value; the third data includes the previous first record data set; the second hash value is inserted into the first record data set. In this step, if the current first record data set is not the first first record data set of the vehicle end, the related records of the previous first record data set are written into the current first record data set, which can further improve the reliability of the first record data set. When performing data verification later, the continuity of the data can be determined by whether the current first record data set contains related records of the previous first record data set, thereby reducing the probability of data tampering.

[0102] S208. Store the first recorded data set. The first recorded data set may be stored in a database located at the vehicle end, or in a physically independent database. When the above method of the embodiment of the present invention is used to synchronize, process and store data, no matter the first original data set or the first public key is tampered with, a correct data verification result cannot be obtained during data recovery.

[0103] According to some optional embodiments, the method further comprises the steps of:

[0104] S210. Send the first recorded data hash value to the synchronization base station based on a predetermined period. The first recorded data hash value is obtained by hashing the first recorded data set, so as to store the first recorded data hash value through the synchronization base station; the synchronization base station is used to perform hashing based on the first recorded data hash value and the local identification information of the synchronization base station to obtain the stored recorded hash value, and feed it back to the vehicle end. This step enables the synchronization base station to store the first recorded data set of part of the vehicle end, realizes the information synchronization between the synchronization base station and the vehicle end, and the information synchronization can prevent the vehicle end from tampering with the driving information without permission, and ensures the data coordination of all parties. This scheme synchronizes the first recorded data hash value to the base station, and after the base station receives the hash value, it feeds back the corresponding unique hash value to the vehicle end. The hash value of the base station can be used later to determine that the vehicle has encrypted and stored the vehicle data. If one party claims that the data is lost, the responsibility tracing process can be performed.

[0105] S212, receiving and storing the stored record hash value fed back by the synchronization base station. When the vehicle receives the stored record hash value fed back by the synchronization base station, it means that this part of data has been stored in the synchronization base station, so this part of data can be used for data recovery or data verification as needed.

[0106] According to some optional embodiments, the intelligent vehicle data information trust verification method based on trusted computing also includes the step of data verification:

[0107] S402: Acquire a first original data set and a first processed data set in a first record data set, and perform data verification based on the acquired first original data set and the first processed data set.

[0108] S404: Data verification can be performed by a verification end, which is, for example, a third party independent of the vehicle end and the vehicle manufacturer end. Data verification includes the following steps:

[0109] S4041. The verification end obtains a first private key from the upper computer supervision server, and decrypts the first processed data set using the first private key to obtain a first hash value.

[0110] S4042. Perform hash processing on the first original data set to obtain a first verification hash value.

[0111] S4043. Verify the first Hash value using the first verification Hash value.

[0112] According to some optional embodiments, the data verification step further includes:

[0113] S602, obtaining a second hash value in the first record data set, and obtaining a previous first record data set corresponding to the first record data set;

[0114] S604: Data verification can be performed by the verification end, including the following steps:

[0115] S6041, performing hash processing on the previous first record data set to obtain a second verification hash value;

[0116] S6042. Verify the second Hash value using the second verification Hash value.

[0117] According to another embodiment of the present invention, the method may also generate a key and distribute the key through the following steps:

[0118] An asymmetric key pair and a first symmetric key are generated in a trusted execution environment on the vehicle side, and the asymmetric key pair includes a first public key and a first private key; the first symmetric key is sharded in the trusted execution environment on the vehicle side to generate three sharded keys; the first public key is sent to the host computer supervision server, the first private key is retained on the vehicle side, and two of the three sharded keys are sent to the vehicle manufacturer side and the host computer supervision server respectively. Among them, any two of the above three sharded keys can synthesize the first symmetric key. The sharding process can be processed, for example, by using a threshold secret sharing method. By processing the first symmetric key into multiple sharded keys and storing them in different locations, when the distribution key at any location, such as the vehicle side, is damaged, the sharded keys stored in the other two locations can still be used to synthesize the first symmetric key, and at the same time, data leakage caused by the leakage of the sharded key at a certain location can be prevented.

[0119] According to some optional embodiments, in the above step S202, generating the first original data set based on the first data and the second data may also be: combining the first data and the second data to generate the first original data set. The combination method may be any optional method, such as arranging the first data and the second data in order to form a whole, which is the first original data set.

[0120] According to certain optional embodiments, in the above step S204, the first original data set is processed to obtain the first processed data set, and it can also be: in the trusted execution environment of the vehicle end, the first original data set is encrypted using the first symmetric key to obtain the first encrypted data; the first original data set is hashed to obtain the first hash value; the first hash value is signed using the first private key to obtain the first signature data; the first encrypted data, the first hash value and the first signature data are combined to generate the first processed data set. In the above step S206, the first recorded data set is generated based on the first original data set and the first processed data set, and it can also be: the first processed data set is used as the first recorded data set; wherein the first recorded data set is the first first recorded data set of the vehicle end. In this embodiment, for the case where the first record data set is the first first record data set of the vehicle end, the first hash value is directly signed using the first private key to obtain the first signature data, and the first record data set is further generated; if the first record data set is not the first first record data set of the vehicle end, the first hash value corresponding to the current first record data set and the first hash value corresponding to the previous first record data set or the hash value of the previous first record data set can be signed as a whole, see the following embodiment for details.

[0121] According to some optional embodiments, in the above step S204, the first original data set is processed to obtain the first processed data set, and it can also be: in the vehicle-side trusted execution environment, the first original data set is encrypted using the first symmetric key to obtain the first encrypted data; the first original data set is hashed to obtain the first hash value; the first hash value and the first hash value in the previous first record data set are signed using the first private key to obtain the first signature data; or, the first hash value and the hash value of the previous first record data set are signed using the first private key to obtain the first signature data; the first processed data set is generated based on the first original data set, the first hash value and the first signature data. In the above step S206, the first record data set is generated based on the first original data set and the first processed data set, and it can also be: the first processed data set is used as the first record data set. Wherein, the first record data set is the Nth first record data set of the vehicle, N is a natural number and N≥2.

[0122] According to some optional embodiments, the step of data verification includes:

[0123] S802, obtaining a first hash value, first encrypted data, and first signature data in a first record data set;

[0124] S804, decrypt the first encrypted data using the first symmetric key in the trusted execution environment on the vehicle side or the processing area designated by the upper supervisory server to obtain a first original data set, and generate a first symmetric key based on any two of the three shard keys in the processing area designated by the upper supervisory server. If the device on the vehicle side is not damaged, the trusted execution environment on the vehicle side can be used to obtain the encrypted data and decrypt it. If the trusted execution environment on the vehicle side is damaged and the first symmetric key on the vehicle side is damaged, any two of the three shard keys pre-stored in different locations can be used to generate the first symmetric key.

[0125] S804: Perform data verification based on the first original data set, the first hash value and the first signature data. The data verification is performed by the verification end based on the following steps:

[0126] S8041. Perform hash processing on the first original data set to obtain a verification hash value;

[0127] S8042. Verify the first Hash value using a verification Hash value;

[0128] Data verification can also be performed through the host computer supervision server based on the following steps:

[0129] S8043. Verify the first signature data using the first public key and the first hash value.

[0130] Among them, the first symmetric key can also be encrypted with the first public key in the vehicle-side trusted execution environment to generate a first encrypted symmetric key, and written to the storage space of the vehicle-side; when the vehicle-side trusted execution environment requests to use the first encrypted symmetric key, the first encrypted symmetric key is imported from the storage space of the vehicle-side to the vehicle-side trusted execution environment, and the first encrypted symmetric key is decrypted with the first private key in the vehicle-side trusted execution environment to obtain the first symmetric key. The first encrypted symmetric key can only be decrypted to obtain the first symmetric key in the vehicle-side trusted execution environment.

[0131] According to some optional embodiments, the step of data verification includes:

[0132] S1002, obtaining a first hash value, first encrypted data, first signature data, and a first hash value in a previous first record data set; or,

[0133] Obtaining a first hash value, first encrypted data, first signature data, and a hash value of a previous first record data set in the first record data set;

[0134] S1004: Decrypt the first encrypted data using the first symmetric key in the vehicle-side trusted execution environment or the processing area specified by the host computer supervision server to obtain a first original data set. The processing area specified by the host computer supervision server generates a first symmetric key based on any two of the three shard keys.

[0135] S1006: Perform data verification based on the first original data set, the first hash value, the first signature data, and the first hash value in the previous first record data set, or based on the first original data set, the first hash value, the first signature data, and the hash value of the previous first record data set; the data verification is performed by the verification end based on the following steps:

[0136] S10061. Perform hash processing on the first original data set to obtain a verification hash value;

[0137] S10062. Verify the first Hash value using the verification Hash value;

[0138] The data verification is also performed by the host computer supervision server based on the following steps:

[0139] S10063. Verify the first signature data using the first public key, the first hash value, and the first hash value in the previous first record data set, or the first public key, the first hash value, and the hash value of the previous first record data set. This solution can add the hash value of the previous first record data set to the first record data set, and then use the previous first record data set to hash, and verify whether the hashed hash value is consistent with the hash value stored in this first record data set to verify the continuity of the data and avoid partial data being deleted. This first record data set can only store the first hash value in the previous first record data set, or it can hash the previous first record data set as a whole and add it to this first record data set. The data verification process can be verified in a manner corresponding to the data storage process.

[0140] In the above embodiment, when a vehicle breaks down or has an accident, if the vehicle-side vehicle-machine system is not damaged and the trusted execution environment functions intactly, the data stored on the vehicle side can be obtained, and the relevant data can be verified in the trusted execution environment on the vehicle side through decryption processing, hash verification, etc. The data can be verified to be complete or tampered with by hashing the first original data set, and the first public key and the first hash value can be used to verify whether the first signature data has been tampered with. When a vehicle breaks down or has an accident, if the vehicle-side vehicle-machine system is damaged or the trusted execution environment functions invalid, the relevant data can be decrypted, hashed, etc. in the processing area specified by the upper-level supervisory server, and the first symmetric key can be generated using the sharded key stored in other locations to verify the data. Thus, a closed loop of data verification is achieved in the above manner.

[0141] According to some optional embodiments, the method further includes the step of sending the first record data set to the vehicle factory end and the host computer supervision server. The first record data set is backed up at the vehicle end, the vehicle factory end and the host computer supervision server, further improving the security of data storage. The first record data set stored in the above locations can be decrypted and data verified by the method provided by the embodiment of the present invention, so that when the data of any party is damaged, the backup at other locations can be used to achieve data recovery.

[0142] The embodiment of the present invention further provides a trusted verification device for intelligent vehicle data information based on trusted computing, which is applied to a vehicle side, and the device includes:

[0143] An original data set generating module, configured to generate a first original data set based on the first data and the second data;

[0144] A processed data set generating module, used for performing data processing on the first original data set to obtain a first processed data set;

[0145] A record data set generation module, used to generate a first record data set based on the first original data set and the first processed data set;

[0146] A data storage module, used for storing a first record data set;

[0147] Among them, the first data includes the initial data of the vehicle status record; the second data includes the vehicle location information, and the vehicle location information is sent by the synchronization base station to the vehicle end; the data processing includes at least one of hash processing and encryption processing.

[0148] The specific process of each module in the intelligent vehicle data information trusted verification device based on trusted computing provided by the above embodiment of the present invention to realize its function is the same as the steps of the intelligent vehicle data information trusted verification method based on trusted computing provided by the above embodiment of the present invention. Therefore, its repeated description will be omitted here.

[0149] In addition to the above methods and apparatus, an embodiment of the present invention may also be a computer program product, including computer program instructions, which, when executed by a processor, enable the processor to execute the steps in the method of any of the above embodiments.

[0150] The computer program product may be written in any combination of one or more programming languages ​​to write program code for performing the operations of the embodiments of the present invention, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0151] In addition, the embodiments of the present invention may also be a computer-readable storage medium having computer program instructions stored thereon. When the computer program instructions are executed by a processor, the processor executes the steps in the methods of the various embodiments of the present invention.

[0152] Computer readable storage media can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can include, for example, but is not limited to, a system, device or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0153] It should be understood that the processor in the embodiment of the present invention may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0154] In summary, an embodiment of the present invention relates to a trusted verification method and device for intelligent vehicle data information based on trusted computing, which is applied to the vehicle side, and the method includes: generating a first original data set based on first data and second data; performing data processing on the first original data set to obtain a first processed data set; generating a first record data set based on the first original data set and the first processed data set; storing the first record data set; wherein the first data includes the initial data of the vehicle status record; the second data includes the vehicle location information, which is sent by the synchronization base station to the vehicle side; the data processing includes at least one of hash processing and encryption processing. The technical solution provided by the embodiment of the present invention improves the efficiency and security of vehicle driving information data management by processing the vehicle location information sent by the synchronization base station and other vehicle data information and storing them, and prevents vehicle data from being leaked or unauthorizedly accessed and tampered with.

[0155] It should be understood that the discussion of any of the above embodiments is only exemplary and is not intended to imply that the scope of the present invention (including claims) is limited to these examples; under the concept of the present invention, the technical features in the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other changes in different aspects of one or more embodiments of the present invention as described above, which are not provided in detail for the sake of simplicity. The above specific embodiments of the present invention are only used to illustrate or explain the principles of the present invention, and do not constitute a limitation on the present invention. Therefore, any modifications, equivalent substitutions, improvements, etc. made without departing from the spirit and scope of the present invention should be included in the scope of protection of the present invention. In addition, the claims attached to the present invention are intended to cover all changes and modifications that fall within the scope and boundaries of the attached claims, or the equivalent forms of such scope and boundaries.

Claims

1. A trusted verification method for intelligent vehicle data information based on trusted computing, characterized in that: Applied to the vehicle side, the method includes: generating a first original data set based on the first data and the second data; Performing data processing on the first original data set to obtain a first processed data set; Generate a first record data set based on the first original data set and the first processed data set; storing the first record data set; Sending a first recorded data hash value to a synchronization base station based on a predetermined period, wherein the first recorded data hash value is obtained by performing hash processing on a first recorded data set, so as to store the first recorded data hash value through the synchronization base station; wherein the synchronization base station is used to perform hashing according to the first recorded data hash value and local identification information of the synchronization base station to obtain a stored recorded hash value, and feed it back to the vehicle end; Receive and store the storage record hash value fed back by the synchronization base station; Among them, the first data includes initial data of vehicle status record; the second data includes vehicle location information, and the vehicle location information is sent by the synchronization base station to the vehicle end; the data processing includes at least one of hash processing and encryption processing.

2. The method according to claim 1, characterized in that Generating a first original data set based on the first data and the second data includes: combining the first data, the second data and the first public key to generate the first original data set; Processing the first original data set to obtain a first processed data set includes: performing hash processing on the first original data set to obtain a first hash value, and encrypting the first hash value using a first public key to obtain a first processed data set; Generating a first record data set based on the first original data set and the first processed data set includes: combining the first original data set and the first processed data set to generate the first record data set; Among them, the first public key is generated by the trusted execution environment of the host computer supervision server and distributed to the vehicle end.

3. The method according to claim 2, characterized in that The method further comprises: Performing hash processing on the third data to obtain a second hash value; the third data includes a previous first record data set; The second hash value is inserted into the first record data set.

4. The method according to claim 2 or 3, characterized in that: The method further comprises: Acquire a first original data set and a first processed data set in the first record data set; Performing data verification based on the acquired first original data set and the first processed data set; The data verification is performed by the verification end based on the following steps: Obtain a first private key from the upper computer supervision server, and decrypt the first processed data set using the first private key to obtain a first hash value; Performing hash processing on the first original data set to obtain a first verification hash value; Verifying the first Hash value using a first verification Hash value; Among them, the first public key and the first private key are an asymmetric key pair, and the asymmetric key pair is generated by the host computer supervising the trusted execution environment of the server.

5. The method according to claim 4, characterized in that The method further comprises: Obtaining a second hash value in the first record data set; Obtaining a previous first record data set corresponding to the first record data set; The data verification is performed by the verification end based on the following steps: Performing hash processing on the previous first record data set to obtain a second verification hash value; The second Hash value is verified using a second verification Hash value.

6. The method according to claim 1, characterized in that The method further comprises: Generate an asymmetric key pair and a first symmetric key in a trusted execution environment on the vehicle side, wherein the asymmetric key pair includes a first public key and a first private key; Slice the first symmetric key in the vehicle-side trusted execution environment to generate three slicing keys; any two of the three slicing keys can synthesize the first symmetric key; The first public key is sent to the upper computer supervision server, and two of the three shard keys are sent to the vehicle manufacturer and the upper computer supervision server respectively.

7. The method according to claim 6, characterized in that Generating a first original data set based on the first data and the second data includes: combining the first data and the second data to generate the first original data set; Processing the first original data set to obtain a first processed data set includes: encrypting the first original data set in a vehicle-side trusted execution environment using a first symmetric key to obtain first encrypted data; performing hash processing on the first original data set to obtain a first hash value; signing the first hash value using a first private key to obtain first signature data; and combining the first encrypted data, the first hash value, and the first signature data to generate a first processed data set; Generating a first record data set based on the first original data set and the first processed data set includes: using the first processed data set as the first record data set; The first record data set is the first first record data set of the vehicle end.

8. The method according to claim 6, characterized in that Generating a first original data set based on the first data and the second data includes: combining the first data and the second data to generate the first original data set; Processing the first original data set to obtain a first processed data set includes: in a vehicle-side trusted execution environment, encrypting the first original data set using a first symmetric key to obtain first encrypted data; performing hash processing on the first original data set to obtain a first hash value; signing the first hash value and the first hash value in the previous first record data set using a first private key to obtain first signature data; or signing the first hash value and the hash value of the previous first record data set using a first private key to obtain first signature data; generating a first processed data set based on the first original data set, the first hash value, and the first signature data; Generating a first record data set based on the first original data set and the first processed data set includes: using the first processed data set as the first record data set; The first record data set is the Nth first record data set of the vehicle end, where N is a natural number and N≥2.

9. The method according to any one of claims 1-3, 6-8, characterized in that: The method further comprises: The first record data set is sent to the vehicle factory and the upper computer supervision server.

10. The method according to claim 7, characterized in that The method further comprises: Obtaining a first hash value, first encrypted data, and first signature data in the first record data set; Decrypting the first encrypted data using a first symmetric key in a trusted execution environment on the vehicle or in a processing area designated by an upper-level supervisory server to obtain a first original data set, wherein the processing area designated by the upper-level supervisory server generates a first symmetric key based on any two of the three shard keys; Performing data verification based on the first original data set, the first hash value and the first signature data; The data verification is performed by the verification end based on the following steps: Performing hash processing on the first original data set to obtain a verification hash value; Verifying the first Hash value using a verification Hash value; The data verification is also performed by the host computer supervision server based on the following steps: The first signature data is verified using a first public key and a first hash value.

11. The method according to claim 10, characterized in that The method further comprises: In the vehicle-side trusted execution environment, encrypting the first symmetric key with the first public key to generate a first encrypted symmetric key, and writing the first encrypted symmetric key into a storage space on the vehicle side; When the vehicle-side trusted execution environment requests to use the first encrypted symmetric key, the first encrypted symmetric key is imported from the vehicle-side storage space to the vehicle-side trusted execution environment, and the first encrypted symmetric key is decrypted using the first private key in the vehicle-side trusted execution environment to obtain the first symmetric key.

12. The method according to claim 8, characterized in that The method further comprises: Obtaining the first Hash value, the first encrypted data, the first signature data in the first record data set and the first Hash value in the previous first record data set; or, Obtaining a first hash value, first encrypted data, first signature data, and a hash value of a previous first record data set in the first record data set; Decrypting the first encrypted data using a first symmetric key in a trusted execution environment on the vehicle or in a processing area designated by a host computer supervision server to obtain a first original data set, wherein the processing area designated by the host computer supervision server generates a first symmetric key based on any two of the three shard keys; Performing data verification based on the first original data set, the first Hash value, the first signature data, and the first Hash value in the previous first record data set, or based on the first original data set, the first Hash value, the first signature data, and the Hash value of the previous first record data set; The data verification is performed by the verification end based on the following steps: Performing hash processing on the first original data set to obtain a verification hash value; Verifying the first Hash value using a verification Hash value; The data verification is also performed by the host computer supervision server based on the following steps: The first signature data is verified using the first public key, the first Hash value and the first Hash value in the previous first record data set, or the first public key, the first Hash value and the Hash value of the previous first record data set.

13. A trusted verification device for intelligent vehicle data information based on trusted computing, characterized in that: Applied to a vehicle, the device comprises: An original data set generating module, configured to generate a first original data set based on the first data and the second data; a processed data set generating module, configured to perform data processing on the first original data set to obtain a first processed data set; A record data set generation module, used to generate a first record data set based on the first original data set and the first processed data set; A data storage module, used for storing the first record data set; Wherein, the first data includes initial data of vehicle status record; the second data includes vehicle location information, and the vehicle location information is sent by the synchronization base station to the vehicle end; the data processing includes at least one of hash processing and encryption processing; The device also includes a data sending module and a data receiving module; The data sending module is used to send a first recorded data hash value to the synchronization base station based on a predetermined period, wherein the first recorded data hash value is obtained by performing hash processing on the first recorded data set, so as to store the first recorded data hash value through the synchronization base station; wherein the synchronization base station is used to perform hashing according to the first recorded data hash value and the local identification information of the synchronization base station to obtain the stored recorded hash value, and feed it back to the vehicle end; The data receiving module is used to receive and store the storage record hash value fed back by the synchronization base station.

14. A trusted verification system for intelligent vehicle data information based on trusted computing, characterized in that: It includes a vehicle end, at least one synchronization base station, a database and a host computer supervision server; the vehicle end, the synchronization base station and the host computer supervision server are connected in communication; The vehicle end is used to generate a first record data set, and the vehicle end includes the vehicle driving information recording device according to claim 13; The database is used to store a first record data set; The synchronization base station is used to send vehicle position information to the vehicle end; The host computer supervision server is used to perform data verification under abnormal circumstances; The database is located on the vehicle side or is an independent physical device.

15. The system according to claim 14, characterized in that The system also includes a verification terminal, which is communicatively connected with the vehicle terminal and the upper computer supervision server; The verification end is used to perform data verification based on the first record data set under abnormal circumstances.

Images