A privacy protection dual authentication method and system for Internet of Vehicles

Abstract

The present invention provides a privacy protection dual authentication method and system applied to the Internet of Vehicles, wherein the method includes: S1, when a single vehicle is connected to the Internet of Vehicles, a first privacy protection range and a second privacy protection range are divided based on the future communication needs of the single vehicle; S2, when a privacy request sent by the Internet of Vehicles to the single vehicle enters the first privacy protection range, a first authentication is performed on the privacy request; privacy requests that do not fall into the first privacy protection range are ignored; S3, after the first authentication is passed, if the privacy request changes and triggers entry into the second privacy protection range, a second authentication is performed on the changed privacy request; privacy requests that do not fall into the second privacy protection range and privacy requests that fall directly into the second privacy protection range without change are ignored. The present invention realizes the construction of a multi-level privacy protection mechanism for complex and dynamically changing communication scenarios in the Internet of Vehicles environment, and provides comprehensive and effective protection for single vehicle privacy protection.

Description

Technical Field

[0001] The present invention relates to the field of vehicle networking communication technology, and in particular to a privacy protection dual authentication method and system applied to vehicle networking. Background Art

[0002] With the rapid development of intelligent transportation and Internet of Vehicles technologies, the frequency and scale of data exchange in the Internet of Vehicles are increasing, and communications between vehicles and between vehicles and infrastructure are becoming more frequent and complex.

[0003] The Internet of Vehicles can not only significantly improve the efficiency and safety of traffic management, but also provide drivers with more personalized services, such as real-time navigation, vehicle condition monitoring, and intelligent traffic prediction. However, the issue of privacy protection is becoming increasingly prominent, especially when data is exchanged between the vehicle system and the external network. How to ensure that the privacy information of vehicle users is not leaked has become a key issue that needs to be solved urgently.

[0004] Traditional privacy protection methods mostly focus on processing a single privacy request. However, in the Internet of Vehicles environment, privacy requests are usually affected by a variety of factors and change, including: the vehicle's real-time location, driving status, and interaction with other network entities (such as other vehicles, transportation infrastructure, cloud services, etc.). The variability and complexity of these factors make it difficult for traditional privacy protection methods to provide comprehensive and effective protection. Therefore, the existing technology lacks a multi-level privacy protection mechanism for complex and dynamically changing communication scenarios in the Internet of Vehicles environment.

[0005] In view of this, a solution is urgently needed. Summary of the invention

[0006] One of the purposes of the present invention is to provide a privacy protection dual authentication method applied to the Internet of Vehicles. Based on the future communication needs of a single vehicle, a first privacy protection scope and a second privacy protection scope are divided. When a privacy request sent by the Internet of Vehicles to a single vehicle enters the first privacy protection scope, a first authentication is performed on the privacy request. After the first authentication is passed, if the privacy request changes and triggers entering the second privacy protection scope, a second authentication is performed on the changed privacy request, thereby realizing the construction of a multi-level privacy protection mechanism for complex and dynamically changing communication scenarios in the Internet of Vehicles environment, and providing comprehensive and effective protection for the privacy protection of single vehicles.

[0007] An embodiment of the present invention provides a privacy protection dual authentication method applied to an Internet of Vehicles, including:

[0008] When a bicycle is connected to the Internet of Vehicles, a first privacy protection scope and a second privacy protection scope are divided based on the future communication needs of the bicycle; the first privacy protection scope is the scope of privacy requests reasonably generated due to future communication needs; the second privacy protection scope is the scope of privacy requests that fall within the first privacy protection scope after being affected by factors;

[0009] When the privacy request sent by the Internet of Vehicles to the bicycle enters the first privacy protection scope, the privacy request is first authenticated; the privacy request that does not fall within the first privacy protection scope is ignored;

[0010] After the first authentication is passed, if the privacy request changes and triggers entering the second privacy protection scope, a second authentication is performed on the changed privacy request; the changed privacy request that does not fall into the second privacy protection scope and the privacy request that falls into the second privacy protection scope without change are ignored.

[0011] Optionally, dividing the first privacy protection range and the second privacy protection range based on future communication requirements of the bicycle includes:

[0012] Trajectory representation of future communication requirements is performed to obtain the requirement trajectory;

[0013] Determine multiple demand stage circles from the demand trajectory; wherein the center of each demand stage circle falls on the demand trajectory, and each demand stage circle encloses multiple demand items at a minimum; and the position distance between two demand items in the same demand stage circle does not exceed the position distance threshold;

[0014] Extract features of each demand stage circle, the positional relationship of each demand stage circle relative to the starting point of the demand trajectory, and the demand correlation relationship between two demand stage circles to obtain multiple feature values;

[0015] Represent each eigenvalue as a vector to obtain an eigenvector;

[0016] Determine the scope determination knowledge corresponding to the feature vector from the scope determination knowledge base; wherein, in the scope determination knowledge base, the similarity between the standard feature vector of the scope determination knowledge and the feature vector is the largest and exceeds a threshold value of the similarity;

[0017] Based on the scope determination knowledge, a first privacy protection scope and a second privacy protection scope are divided.

[0018] Optionally, the trajectories of the future communication requirements include:

[0019] Analyze future communication needs to obtain future driving trajectories, multiple demand items, and the demand probability and demand time interval of each demand item;

[0020] Traverse each requirement item in turn;

[0021] During each traversal, the local trajectory corresponding to the demand time interval of the traversed demand item is determined on the future driving trajectory;

[0022] Based on the spacing quantization table, the demand probability of the traversed demand items and the trajectory length of the local trajectory are quantized to obtain the quantized spacing; wherein, in the spacing quantization table, the demand probability and the trajectory length are negatively correlated with the quantized spacing respectively;

[0023] Set the traversed demand items at every quantized interval on the local trajectory;

[0024] After traversing each demand item, the future driving trajectory after the demand item setting on the local trajectory determined by each traversal is completed is used as the demand trajectory.

[0025] Optionally, the first authentication of the privacy request includes:

[0026] Verify the credibility of the first requester of the privacy request;

[0027] When the verification is successful, the privacy request first authentication is successful; otherwise, it is not successful;

[0028] The verifying the credibility of the first requester of the privacy request includes:

[0029] Based on the trust evaluation template, according to the trust evaluation basis of the first requester, a trust evaluation is performed on the first requester to obtain a trustworthiness;

[0030] When the credibility exceeds the credibility threshold, the credibility verification passes.

[0031] Optionally, performing a second authentication on the changed privacy request includes:

[0032] Update the non-standard request library based on the multi-modal driving profile of a single vehicle;

[0033] When the changed privacy request exists in the non-standard request library, the target history is determined from the communication action history of the second requester of the changed privacy request within the target period; otherwise, the second authentication of the changed privacy request is passed; wherein the target period includes: the preset time before and after the moment when the privacy request changes; there is a correlation between the target history and the changed privacy request;

[0034] Extract the target history and obtain multiple action scenarios;

[0035] When the risk value corresponding to each action scenario in the risk map exceeds the risk value threshold, the second authentication of the changed privacy request fails; otherwise, the second requester is requested to guarantee the changed privacy request;

[0036] When the second requester confirms the guarantee, the changed privacy request second authentication is passed.

[0037] An embodiment of the present invention provides a privacy protection dual authentication system applied to an Internet of Vehicles, including:

[0038] A division module is used to divide a first privacy protection scope and a second privacy protection scope based on the future communication needs of the bicycle when the bicycle is connected to the Internet of Vehicles; wherein the first privacy protection scope is the scope of privacy requests reasonably generated due to future communication needs; and the second privacy protection scope is the scope of privacy requests that fall within the first privacy protection scope after being affected by factors and changed;

[0039] A first authentication module is used to perform a first authentication on a privacy request sent by the Internet of Vehicles to a single vehicle when the privacy request enters a first privacy protection range; and is also used to ignore a privacy request that does not fall within the first privacy protection range;

[0040] The second authentication module is used to perform a second authentication on the changed privacy request if the privacy request changes and triggers entering the second privacy protection scope after the first authentication is passed; it is also used to ignore the changed privacy request that does not fall into the second privacy protection scope and the privacy request that directly falls into the second privacy protection scope without changing.

[0041] Optionally, the division module divides the first privacy protection range and the second privacy protection range based on future communication requirements of the bicycle, including:

[0042] Trajectory representation of future communication requirements is performed to obtain the requirement trajectory;

[0043] Determine multiple demand stage circles from the demand trajectory; wherein the center of each demand stage circle falls on the demand trajectory, and each demand stage circle encloses multiple demand items at a minimum; and the position distance between two demand items in the same demand stage circle does not exceed the position distance threshold;

[0044] Extract features of each demand stage circle, the positional relationship of each demand stage circle relative to the starting point of the demand trajectory, and the demand correlation relationship between two demand stage circles to obtain multiple feature values;

[0045] Represent each eigenvalue as a vector to obtain an eigenvector;

[0046] Determine the scope determination knowledge corresponding to the feature vector from the scope determination knowledge base; wherein, in the scope determination knowledge base, the similarity between the standard feature vector of the scope determination knowledge and the feature vector is the largest and exceeds a threshold value of the similarity;

[0047] Based on the scope determination knowledge, a first privacy protection scope and a second privacy protection scope are divided.

[0048] Optionally, the division module performs a trajectory representation of future communication requirements, including:

[0049] Analyze future communication needs to obtain future driving trajectories, multiple demand items, and the demand probability and demand time interval of each demand item;

[0050] Traverse each requirement item in turn;

[0051] During each traversal, the local trajectory corresponding to the demand time interval of the traversed demand item is determined on the future driving trajectory;

[0052] Based on the spacing quantization table, the demand probability of the traversed demand items and the trajectory length of the local trajectory are quantized to obtain the quantized spacing; wherein, in the spacing quantization table, the demand probability and the trajectory length are negatively correlated with the quantized spacing respectively;

[0053] Set the traversed demand items at every quantized interval on the local trajectory;

[0054] After traversing each demand item, the future driving trajectory after the demand item setting on the local trajectory determined by each traversal is completed is used as the demand trajectory.

[0055] Optionally, the first authentication module performs a first authentication on the privacy request, including:

[0056] Verify the credibility of the first requester of the privacy request;

[0057] When the verification is successful, the privacy request first authentication is successful; otherwise, it is not successful;

[0058] The verifying the credibility of the first requester of the privacy request includes:

[0059] Based on the trust evaluation template, according to the trust evaluation basis of the first requester, a trust evaluation is performed on the first requester to obtain a trustworthiness;

[0060] When the credibility exceeds the credibility threshold, the credibility verification passes.

[0061] Optionally, the second authentication module performs a second authentication on the changed privacy request, including:

[0062] Update the non-standard request library based on the multi-modal driving profile of a single vehicle;

[0063] When the changed privacy request exists in the non-standard request library, the target history is determined from the communication action history of the second requester of the changed privacy request within the target period; otherwise, the second authentication of the changed privacy request is passed; wherein the target period includes: the preset time before and after the moment when the privacy request changes; there is a correlation between the target history and the changed privacy request;

[0064] Extract the target history and obtain multiple action scenarios;

[0065] When the risk value corresponding to each action scenario in the risk map exceeds the risk value threshold, the second authentication of the changed privacy request fails; otherwise, the second requester is requested to guarantee the changed privacy request;

[0066] When the second requester confirms the guarantee, the changed privacy request second authentication is passed.

[0067] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description and the accompanying drawings.

[0068] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0069] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0070] Figure 1 It is a flowchart of a privacy protection dual authentication method applied to the Internet of Vehicles in an embodiment of the present invention;

[0071] Figure 2 Schematic diagram of a privacy protection dual authentication system applied to the Internet of Vehicles in an embodiment of the present invention. DETAILED DESCRIPTION

[0072] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0073] The embodiment of the present invention provides a privacy protection dual authentication method applied to the Internet of Vehicles, such as Figure 1 As shown, including:

[0074] S1. When a bicycle is connected to the Internet of Vehicles, a first privacy protection scope and a second privacy protection scope are divided based on the future communication needs of the bicycle; the first privacy protection scope is the scope of privacy requests reasonably generated due to future communication needs; the second privacy protection scope is the scope of privacy requests that fall within the first privacy protection scope after being affected by factors;

[0075] In S1, a bicycle refers to a single vehicle; the future communication demand is the demand for a bicycle to communicate with the Internet of Vehicles within a certain period of time in the future (such as 10 minutes); the first privacy protection scope is the scope of privacy requests reasonably generated by future communication needs, for example: if the future communication demand is to recommend surrounding attractions for a bicycle, then the first privacy protection scope is to request the real-time location of the bicycle, etc.; the second privacy protection scope is the scope of privacy requests that fall under the first privacy protection after being affected by factors, for example: if the bicycle user has not accepted preliminary surrounding attraction recommendations for the bicycle many times, and needs to be recommended in-depth surrounding attractions based on the bicycle user's situation, then the second privacy protection scope is the age, hobbies, and historical travel locations of the requesting bicycle user, etc.;

[0076] S2. When the privacy request sent by the Internet of Vehicles to the bicycle enters the first privacy protection scope, the privacy request is first authenticated; and the privacy request that does not fall within the first privacy protection scope is ignored;

[0077] In S2, when a bicycle communicates with the Internet of Vehicles, the Internet of Vehicles will send a privacy request to the bicycle; when the privacy request enters the first privacy protection range, the privacy request is first authenticated; the privacy request that does not fall within the first privacy protection range is ignored; after the first authentication is passed, the bicycle will respond to the privacy request;

[0078] S3. After the first authentication is passed, if the privacy request changes and triggers entering the second privacy protection scope, a second authentication is performed on the changed privacy request; the changed privacy request that does not fall into the second privacy protection scope and the privacy request that directly falls into the second privacy protection scope without change are ignored.

[0079] In S3, after the first authentication of the privacy request, if the privacy request changes and triggers entering the second privacy protection scope, the changed privacy request will be authenticated again; the changed privacy request that does not fall within the second privacy protection scope and the privacy request that falls into the second privacy protection scope without changing will be ignored; after the second authentication is passed, the bicycle will respond to the changed privacy request.

[0080] This application is based on the future communication needs of a bicycle and divides the first privacy protection scope into a second privacy protection scope. When a privacy request sent by the Internet of Vehicles to a bicycle enters the first privacy protection scope, a first authentication is performed on the privacy request. After the first authentication is passed, if the privacy request changes and triggers entry into the second privacy protection scope, a second authentication is performed on the changed privacy request. This implements the construction of a multi-level privacy protection mechanism for complex and dynamically changing communication scenarios in the Internet of Vehicles environment, and provides comprehensive and effective protection for bicycle privacy protection.

[0081] In one embodiment, in S1, based on the future communication requirements of the bicycle, the first privacy protection range and the second privacy protection range are divided, including:

[0082] S11, trajectories are expressed for future communication needs to obtain demand trajectories;

[0083] In S11, when performing trajectory representation, the future communication demand is represented in the form of a trajectory to obtain a demand trajectory;

[0084] S12, determining a plurality of demand stage circles from the demand trajectory; wherein the center of each demand stage circle falls on the demand trajectory, and each demand stage circle encloses a plurality of demand items at a minimum; and the position distance between two demand items in the same demand stage circle does not exceed the position distance threshold;

[0085] In S12, multiple demand items are set next to the demand trajectory; the distance between two demand items is the interval between the positions of the two demand items; the threshold of the distance between the positions can be, for example, 3 meters; a demand stage circle represents the communication demand of a single vehicle in a stage of future Internet of Vehicles communication;

[0086] S13, extracting features from each demand stage circle, the positional relationship of each demand stage circle relative to the starting point of the demand trajectory, and the demand association relationship between any two demand stage circles to obtain multiple feature values;

[0087] In S13, the positional relationship of the demand stage circle relative to the starting point of the demand trajectory refers to the relative distance between the location area of ​​the demand stage circle and the starting point of the demand trajectory, etc. The farther the relative distance is, the farther the stage of the future vehicle network communication represented by the demand stage circle will occur; the demand association relationship between two demand stage circles refers to the association relationship between the demand items within each of the two demand stage circles: such as the same demand items, the same demand item types, etc.; thus, the multiple characteristic values ​​include: the type and number of demand items in each demand stage circle, the relative distance between the location area of ​​each demand stage circle and the starting point of the demand trajectory is ranked from near to far, and demand stage circles with the same demand items, etc.;

[0088] S14, performing vector representation on each eigenvalue to obtain a eigenvector;

[0089] In S14, when performing vector representation, each eigenvalue is represented in the form of a vector to obtain a eigenvector; the eigenvector represents a current division situation where a first privacy protection range and a second privacy protection range need to be divided;

[0090] S15, determining the scope determination knowledge corresponding to the feature vector from the scope determination knowledge base; wherein, in the scope determination knowledge base, the similarity between the standard feature vector of the scope determination knowledge and the feature vector is the largest and exceeds a threshold value of the similarity;

[0091] In S15, there is scope determination knowledge corresponding to different feature vectors in the scope determination knowledge base, and the scope determination knowledge indicates how to divide the first privacy protection scope and the second privacy protection scope under the division situation represented by the feature vector; a standard feature vector is set in advance for the scope determination knowledge, and the standard feature vector is represented by multiple feature values ​​representing the applicable division situation of the scope determination knowledge, for example: the multiple feature values ​​constructed into the standard feature vector are: the relative distance between the location area of ​​each demand stage circle and the starting point of the demand trajectory is ranked from near to far as A demand stage circle → B demand stage circle, the demand items in the A demand stage circle are the surrounding scenic spot recommendation and the interaction with traffic congestion, and the demand items in the B demand stage circle are the surrounding scenic spot recommendation, which means that the bicycle will need to be subject to preliminary surrounding scenic spot recommendation and traffic congestion in the future. Congestion interaction, followed by in-depth recommendations of surrounding attractions, and traffic congestion interaction needs to be conducted based on the user's age, preferences, etc. (such as playing songs that match their listening preferences for them to relax in traffic congestion). After being expressed as a standard feature vector, the corresponding scope determination knowledge indicates that the real-time location of the requesting bicycle, the age of the requesting bicycle user, and the preferences of the requesting bicycle user are used as the first privacy protection scope, and the historical play locations of the requesting bicycle user are used as the second privacy protection scope; the similarity threshold can be, for example, 85%; ensuring that in the scope determination knowledge base, the similarity between the standard feature vector of the scope determination knowledge and the feature vector is the largest and exceeds the similarity threshold, so that the scope determination knowledge is sufficiently applicable to the current division situation and is the most applicable to the current division situation among all the knowledge in the scope determination knowledge base;

[0092] S16: Divide the first privacy protection scope and the second privacy protection scope based on the scope determination knowledge.

[0093] In S16 , the first privacy protection scope and the second privacy protection scope are finally divided based on the indication of the scope determination knowledge.

[0094] The embodiment of the present invention introduces a demand trajectory when dividing the first privacy protection range and the second privacy protection range based on the future communication needs of a bicycle, determines multiple demand stage circles from the demand trajectory, determines characteristic values ​​based on the demand stage circles and expresses them as characteristic vectors, determines the best range determination knowledge from a range determination knowledge base based on the characteristic vectors, and divides the first privacy protection range and the second privacy protection range based on the range determination knowledge, thereby greatly improving the accuracy, efficiency and comprehensiveness of the division of the first privacy protection range and the second privacy protection range.

[0095] In one embodiment, in S11, the future communication demand is represented in a trajectory manner, including:

[0096] S111, analyzing future communication demands to obtain future driving trajectories, multiple demand items, and demand probabilities and demand time intervals of each demand item;

[0097] In S111, the future driving trajectory is the future driving trajectory of the bicycle, which can be obtained based on the onboard navigation software of the bicycle, etc.; the demand item is a single communication demand, the demand probability of the demand item is the probability of the demand item being generated in the future, and the demand time interval is the event interval in which the future demand item is maintained. The demand item and the corresponding demand probability and demand time interval can be predicted and generated based on the future driving trajectory. For example, if the future driving trajectory will pass through a certain tourist attraction, and the broadcast recommendation equipment of the tourist attraction is operating normally, then the demand item is a recommendation of surrounding attractions, the corresponding demand probability is 100%, and the corresponding demand time interval is the time interval in which the future driving trajectory passes through the tourist attraction;

[0098] S112, traverse each requirement item in turn;

[0099] S113, during each traversal, determining a local trajectory corresponding to a demand time interval of the traversed demand item on the future driving trajectory;

[0100] In S113, when the future driving trajectory is formed, each position point on it has an estimated transit time, and the local trajectory corresponding to the required time interval is a local trajectory segment formed by the position points with estimated transit times within the required time interval;

[0101] S114, based on the spacing quantization table, quantize the demand probability of the traversed demand item and the trajectory length of the local trajectory to obtain a quantized spacing; wherein, in the spacing quantization table, the demand probability and the trajectory length are each negatively correlated with the quantized spacing;

[0102] In S114, the interval quantization table has quantization intervals corresponding to different combinations of demand probabilities and trajectory lengths. The greater the demand probability, the greater the degree to which the demand item needs to be included in the demand stage circle to more accurately represent the division situation. The smaller the quantization interval is, the greater the trajectory length is. If it is to be ensured that the demand item needs to be included in the demand stage circle, the smaller the quantization interval is.

[0103] S115, setting the traversed demand items at every quantized interval on the local trajectory;

[0104] S116. After traversing each demand item, the future driving trajectory after setting the demand item on the local trajectory determined by each traversal is used as the demand trajectory.

[0105] When the embodiment of the present invention performs trajectory representation of future communication demands, each demand item is traversed in turn. During each traversal, the local trajectory corresponding to the demand time interval of the traversed demand item is determined on the future driving trajectory. Based on the spacing quantization table, the demand probability of the traversed demand item and the trajectory length of the local trajectory are quantized to obtain the quantized spacing. The traversed demand item is set at every quantized spacing on the local trajectory, which greatly improves the accuracy of the trajectory representation of future communication demands, enables the demand stage circle determined therefrom to more accurately represent the division situation, and improves the applicability of the system.

[0106] In one embodiment, in S2, performing a first authentication on the privacy request includes:

[0107] S21. Verify the credibility of the first requester of the privacy request;

[0108] In S21, the first requester may be other vehicles, traffic infrastructure, cloud services, etc. When performing the first authentication, the privacy request does not change, and the trustworthiness of the requester only needs to be verified;

[0109] S22. When the verification is successful, the privacy request first authentication is successful; otherwise, it is not successful;

[0110] Wherein, the step S21, verifying the credibility of the first requester of the privacy request, includes:

[0111] S211, based on the trust evaluation template and according to the trust evaluation basis of the first requesting party, performing a trust evaluation on the first requesting party to obtain a trustworthiness;

[0112] In S211, the trust evaluation basis of the first requester includes: identity information, historical privacy requests, reputation records, public opinion evaluation, etc. of the first requester; the trust evaluation template has trustworthiness corresponding to different trust evaluation basis; thus, the trust evaluation of the first requester can be performed based on the trust evaluation template and the trust evaluation basis of the first requester;

[0113] S212: When the credibility exceeds the credibility threshold, the credibility verification is passed.

[0114] In S212 , the threshold of the credibility may be 8; when the credibility exceeds the threshold of the credibility, the credibility verification is passed.

[0115] When the embodiment of the present invention performs the first authentication on the privacy request, the credibility of the first requester of the privacy request is verified. When the verification passes, the first authentication of the privacy request passes, thereby improving the rationality of the first authentication.

[0116] In one embodiment, in S3, performing a second authentication on the changed privacy request includes:

[0117] S31. Update the non-standard request library based on the multi-modal driving profile of a single vehicle;

[0118] In S31, the multimodal driving profile includes: the record of the bicycle's historical Internet of Vehicles communications, the type of the bicycle's current trip destination, the number of passengers on the bicycle, etc.; there are a large number of non-standard privacy requests in the non-standard request library, that is, privacy requests that are obviously inconsistent with the current bicycle usage situation reflected by the multimodal driving profile, for example: the multimodal driving profile shows that the type of the bicycle's current trip destination is a hospital, then the non-standard privacy requests in the non-standard request library include in-depth recommendations of surrounding attractions, etc.; thus, the non-standard request library can be updated based on the bicycle's multimodal driving profile;

[0119] S32. When the changed privacy request exists in the non-standard request library, determine the target history from the communication action history of the second requester of the changed privacy request within the target period; otherwise, the second authentication of the changed privacy request passes; wherein the target period includes: the preset time before and after the moment when the privacy request changes; there is a correlation between the target history and the changed privacy request;

[0120] In S32, when the changed privacy request exists in the non-standard request library, further authentication is required; when it does not exist, the second authentication is passed; the preset time can be 100 seconds; the communication action history is the history of the second requester communicating with any vehicle in the Internet of Vehicles; the association between the target history and the changed privacy request means that there is a content association relationship between the target history and the changed privacy request, for example: the changed privacy request is a deep surrounding scenic spot recommendation, then the target history is the historical record of deep recommendation of the same surrounding scenic spots for other vehicles;

[0121] S33, extracting situations from the target history to obtain multiple action situations;

[0122] In S33, an action scenario is extracted from the target history. For example, if the target history reflects that the second requester has made in-depth recommendations for the same surrounding scenic spot to multiple vehicles, the action scenario is a local broadcast recommendation of the scenic spot. For another example, if the target history reflects that the maximum position interval between the vehicles recommended by the second requester is 50 kilometers, the action scenario is an erroneous recommendation of the scenic spot.

[0123] S34. When the risk value corresponding to each action scenario in the risk map exceeds the risk value threshold, the second authentication of the changed privacy request fails; otherwise, the second requesting party is requested to guarantee the changed privacy request;

[0124] In S34, the risk map contains risk values ​​corresponding to different action scenarios, and the risk value represents the risk level of the changed privacy request when all action scenarios exist at the same time; for example, the existing action scenarios are scenic spot local broadcast recommendation and scenic spot error recommendation, and the risk value is 4; the threshold of the risk value can be 3; when the risk value exceeds the threshold of the risk value, the second authentication fails; otherwise, the second requester is requested to guarantee the changed privacy request;

[0125] S35. When the second requesting party confirms the guarantee, the second authentication of the changed privacy request is passed.

[0126] In S35, when the second requester confirms the guarantee, the risk level of the changed privacy request is relatively low, and the second authentication of the changed privacy request is passed.

[0127] When the embodiment of the present invention performs a second authentication on the changed privacy request, the non-standard request library is updated. When the changed privacy request exists in the non-standard request library, further authentication is performed. When it does not exist, the second authentication passes. When further authentication is performed, the target history is determined, the action scenarios are extracted, and the risk values ​​corresponding to the combined action scenarios are determined based on the risk map. When the risk value exceeds the threshold, the second authentication fails. Otherwise, the second requesting party is requested to provide a guarantee. When the second requesting party confirms the guarantee, the second authentication of the changed privacy request passes. A layered authentication mechanism is set to perform the second authentication, which is suitable for multi-dimensional authentication of changed privacy requests, and greatly improves the authentication efficiency and authentication accuracy.

[0128] The embodiment of the present invention provides a privacy protection dual authentication system applied to the Internet of Vehicles, such as Figure 2 As shown, including:

[0129] Division module 1 is used to divide the first privacy protection scope and the second privacy protection scope based on the future communication needs of the bicycle when the bicycle is connected to the Internet of Vehicles; wherein the first privacy protection scope is the scope of privacy requests reasonably generated due to future communication needs; the second privacy protection scope is the scope of privacy requests that fall within the first privacy protection scope after being affected by factors;

[0130] The first authentication module 2 is used to perform a first authentication on the privacy request sent by the Internet of Vehicles to the bicycle when the privacy request enters the first privacy protection scope; and is also used to ignore the privacy request that does not fall within the first privacy protection scope;

[0131] The second authentication module 3 is used to perform a second authentication on the changed privacy request if the privacy request changes and triggers entering the second privacy protection scope after the first authentication is passed; it is also used to ignore the changed privacy request that does not fall into the second privacy protection scope and the privacy request that directly falls into the second privacy protection scope without changing.

[0132] The division module divides the first privacy protection range and the second privacy protection range based on the future communication requirements of the bicycle, including:

[0133] Trajectory representation of future communication requirements is performed to obtain the requirement trajectory;

[0134] Determine multiple demand stage circles from the demand trajectory; wherein the center of each demand stage circle falls on the demand trajectory, and each demand stage circle encloses multiple demand items at a minimum; and the position distance between two demand items in the same demand stage circle does not exceed the position distance threshold;

[0135] Extract features of each demand stage circle, the positional relationship of each demand stage circle relative to the starting point of the demand trajectory, and the demand correlation relationship between two demand stage circles to obtain multiple feature values;

[0136] Represent each eigenvalue as a vector to obtain an eigenvector;

[0137] Determine the scope determination knowledge corresponding to the feature vector from the scope determination knowledge base; wherein, in the scope determination knowledge base, the similarity between the standard feature vector of the scope determination knowledge and the feature vector is the largest and exceeds a threshold value of the similarity;

[0138] Based on the scope determination knowledge, a first privacy protection scope and a second privacy protection scope are divided.

[0139] The partitioning module performs a trajectory representation of future communication requirements, including:

[0140] Analyze future communication needs to obtain future driving trajectories, multiple demand items, and the demand probability and demand time interval of each demand item;

[0141] Traverse each requirement item in turn;

[0142] During each traversal, the local trajectory corresponding to the demand time interval of the traversed demand item is determined on the future driving trajectory;

[0143] Based on the spacing quantization table, the demand probability of the traversed demand items and the trajectory length of the local trajectory are quantized to obtain the quantized spacing; wherein, in the spacing quantization table, the demand probability and the trajectory length are negatively correlated with the quantized spacing respectively;

[0144] Set the traversed demand items at every quantized interval on the local trajectory;

[0145] After traversing each demand item, the future driving trajectory after the demand item setting on the local trajectory determined by each traversal is completed is used as the demand trajectory.

[0146] The first authentication module performs a first authentication on the privacy request, including:

[0147] Verify the credibility of the first requester of the privacy request;

[0148] When the verification is successful, the privacy request first authentication is successful; otherwise, it is not successful;

[0149] The verifying the credibility of the first requester of the privacy request includes:

[0150] Based on the trust evaluation template, according to the trust evaluation basis of the first requester, a trust evaluation is performed on the first requester to obtain a trustworthiness;

[0151] When the credibility exceeds the credibility threshold, the credibility verification passes.

[0152] The second authentication module performs a second authentication on the changed privacy request, including:

[0153] Update the non-standard request library based on the multi-modal driving profile of a single vehicle;

[0154] When the changed privacy request exists in the non-standard request library, the target history is determined from the communication action history of the second requester of the changed privacy request within the target period; otherwise, the second authentication of the changed privacy request is passed; wherein the target period includes: the preset time before and after the moment when the privacy request changes; there is a correlation between the target history and the changed privacy request;

[0155] Extract the target history and obtain multiple action scenarios;

[0156] When the risk value corresponding to each action scenario in the risk map exceeds the risk value threshold, the second authentication of the changed privacy request fails; otherwise, the second requester is requested to guarantee the changed privacy request;

[0157] When the second requester confirms the guarantee, the changed privacy request second authentication is passed.

[0158] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A privacy protection dual authentication method applied to Internet of Vehicles, characterized in that: include: When a bicycle is connected to the Internet of Vehicles, a first privacy protection scope and a second privacy protection scope are divided based on the future communication needs of the bicycle; the first privacy protection scope is the scope of privacy requests reasonably generated due to future communication needs; the second privacy protection scope is the scope of privacy requests that fall within the first privacy protection scope after being affected by factors; When the privacy request sent by the Internet of Vehicles to the bicycle enters the first privacy protection scope, the privacy request is first authenticated; the privacy request that does not fall within the first privacy protection scope is ignored; After the first authentication is passed, if the privacy request changes and triggers entering the second privacy protection scope, the second authentication is performed on the changed privacy request; the changed privacy request that does not fall into the second privacy protection scope and the privacy request that directly falls into the second privacy protection scope without change are ignored; The first privacy protection scope and the second privacy protection scope are divided based on the future communication needs of the bicycle, including: Trajectory representation of future communication requirements is performed to obtain the requirement trajectory; Determine multiple demand stage circles from the demand trajectory; wherein the center of each demand stage circle falls on the demand trajectory, and each demand stage circle encloses multiple demand items at a minimum; and the position distance between two demand items in the same demand stage circle does not exceed the position distance threshold; Extract features of each demand stage circle, the positional relationship of each demand stage circle relative to the starting point of the demand trajectory, and the demand correlation relationship between two demand stage circles to obtain multiple feature values; Represent each eigenvalue as a vector to obtain an eigenvector; Determine the scope determination knowledge corresponding to the feature vector from the scope determination knowledge base; wherein, in the scope determination knowledge base, the similarity between the standard feature vector of the scope determination knowledge and the feature vector is the largest and exceeds a threshold value of the similarity; Based on the scope determination knowledge, a first privacy protection scope and a second privacy protection scope are divided.

2. The privacy protection dual authentication method applied to the Internet of Vehicles as claimed in claim 1, characterized in that: The trajectory representation of future communication requirements includes: Analyze future communication needs to obtain future driving trajectories, multiple demand items, and the demand probability and demand time interval of each demand item; Traverse each requirement item in turn; During each traversal, the local trajectory corresponding to the demand time interval of the traversed demand item is determined on the future driving trajectory; Based on the spacing quantization table, the demand probability of the traversed demand items and the trajectory length of the local trajectory are quantized to obtain the quantized spacing; wherein, in the spacing quantization table, the demand probability and the trajectory length are negatively correlated with the quantized spacing respectively; Set the traversed demand items at every quantized interval on the local trajectory; After traversing each demand item, the future driving trajectory after the demand item setting on the local trajectory determined by each traversal is completed is used as the demand trajectory.

3. The privacy protection dual authentication method applied to the Internet of Vehicles as claimed in claim 1, characterized in that: The first authentication of the privacy request includes: Verify the credibility of the first requester of the privacy request; When the verification is successful, the privacy request first authentication is successful; otherwise, it is not successful; The verifying the credibility of the first requester of the privacy request includes: Based on the trust evaluation template, according to the trust evaluation basis of the first requester, a trust evaluation is performed on the first requester to obtain a trustworthiness; When the credibility exceeds the credibility threshold, the credibility verification passes.

4. The privacy protection dual authentication method applied to the Internet of Vehicles as claimed in claim 1, characterized in that: The second authentication of the changed privacy request includes: Update the non-standard request library based on the multi-modal driving profile of a single vehicle; When the changed privacy request exists in the non-standard request library, the target history is determined from the communication action history of the second requester of the changed privacy request within the target period; otherwise, the second authentication of the changed privacy request is passed; wherein the target period includes: the preset time before and after the moment when the privacy request changes; there is a correlation between the target history and the changed privacy request; Extract the target history and obtain multiple action scenarios; When the risk value corresponding to each action scenario in the risk map exceeds the risk value threshold, the second authentication of the changed privacy request fails; otherwise, the second requester is requested to guarantee the changed privacy request; When the second requester confirms the guarantee, the changed privacy request second authentication is passed.

5. A privacy protection dual authentication system applied to the Internet of Vehicles, characterized in that: include: A division module is used to divide a first privacy protection scope and a second privacy protection scope based on the future communication needs of the bicycle when the bicycle is connected to the Internet of Vehicles; wherein the first privacy protection scope is the scope of privacy requests reasonably generated due to future communication needs; and the second privacy protection scope is the scope of privacy requests that fall within the first privacy protection scope after being affected by factors and changed; A first authentication module is used to perform a first authentication on a privacy request sent by the Internet of Vehicles to a single vehicle when the privacy request enters a first privacy protection range; and is also used to ignore a privacy request that does not fall within the first privacy protection range; A second authentication module is used to perform a second authentication on the changed privacy request if the privacy request changes and triggers entering the second privacy protection scope after the first authentication is passed; and is also used to ignore the changed privacy request that does not fall into the second privacy protection scope and the privacy request that directly falls into the second privacy protection scope without change; The division module divides the first privacy protection range and the second privacy protection range based on the future communication requirements of the bicycle, including: Trajectory representation of future communication requirements is performed to obtain the requirement trajectory; Determine multiple demand stage circles from the demand trajectory; wherein the center of each demand stage circle falls on the demand trajectory, and each demand stage circle encloses multiple demand items at a minimum; and the position distance between two demand items in the same demand stage circle does not exceed the position distance threshold; Extract features of each demand stage circle, the positional relationship of each demand stage circle relative to the starting point of the demand trajectory, and the demand correlation relationship between two demand stage circles to obtain multiple feature values; Represent each eigenvalue as a vector to obtain an eigenvector; Determine the scope determination knowledge corresponding to the feature vector from the scope determination knowledge base; wherein, in the scope determination knowledge base, the similarity between the standard feature vector of the scope determination knowledge and the feature vector is the largest and exceeds a threshold value of the similarity; Based on the scope determination knowledge, a first privacy protection scope and a second privacy protection scope are divided.

6. The privacy protection dual authentication system for Internet of Vehicles as claimed in claim 5, characterized in that: The partitioning module performs a trajectory representation of future communication requirements, including: Analyze future communication needs to obtain future driving trajectories, multiple demand items, and the demand probability and demand time interval of each demand item; Traverse each requirement item in turn; During each traversal, the local trajectory corresponding to the demand time interval of the traversed demand item is determined on the future driving trajectory; Based on the spacing quantization table, the demand probability of the traversed demand items and the trajectory length of the local trajectory are quantized to obtain the quantized spacing; wherein, in the spacing quantization table, the demand probability and the trajectory length are negatively correlated with the quantized spacing respectively; Set the traversed demand items at every quantized interval on the local trajectory; After traversing each demand item, the future driving trajectory after the demand item setting on the local trajectory determined by each traversal is completed is used as the demand trajectory.

7. The privacy protection dual authentication system for Internet of Vehicles as claimed in claim 5, characterized in that: The first authentication module performs a first authentication on the privacy request, including: Verify the credibility of the first requester of the privacy request; When the verification is successful, the privacy request first authentication is successful; otherwise, it is not successful; The verifying the credibility of the first requester of the privacy request includes: Based on the trust evaluation template, according to the trust evaluation basis of the first requester, a trust evaluation is performed on the first requester to obtain a trustworthiness; When the credibility exceeds the credibility threshold, the credibility verification passes.

8. The privacy protection dual authentication system for Internet of Vehicles as claimed in claim 5, characterized in that: The second authentication module performs a second authentication on the changed privacy request, including: Update the non-standard request library based on the multi-modal driving profile of a single vehicle; When the changed privacy request exists in the non-standard request library, the target history is determined from the communication action history of the second requester of the changed privacy request within the target period; otherwise, the second authentication of the changed privacy request is passed; wherein the target period includes: the preset time before and after the moment when the privacy request changes; there is a correlation between the target history and the changed privacy request; Extract the target history and obtain multiple action scenarios; When the risk value corresponding to each action scenario in the risk map exceeds the risk value threshold, the second authentication of the changed privacy request fails; otherwise, the second requester is requested to guarantee the changed privacy request; When the second requester confirms the guarantee, the changed privacy request second authentication is passed.

Images