Data transmission system based on Internet of Vehicles

Abstract

The embodiment of the invention provides a data transmission system based on the Internet of Vehicles, and belongs to the field of expressways. The system comprises a vehicle-mounted module, at least one roadside module connected to the Internet, a cloud module and a security authentication module, wherein the vehicle-mounted module is used for collecting state information of a vehicle; the roadside module is used for collecting real-time information of road conditions, traffic flow and environment; the security authentication module verifies and manages the identities of the vehicle-mounted module, the road side module and the physical user, and if authentication is passed, the data is encrypted by adopting a Hash algorithm and then transmitted; and the cloud module analyzes the uploaded data according to a preset rule and provides personalized services. The data transmission system based on the Internet of Vehicles realizes real-time data transmission and interaction between the vehicle and the road infrastructure and between the vehicle and the cloud platform through cooperative work of all the modules, and adopts an identity verification mechanism and an encryption technology to ensure the security and confidentiality of the data in the transmission process.

Description

Technical Field

[0001] The present invention relates to the technical field of highways, and in particular to a data transmission system based on an Internet of Vehicles. Background Art

[0002] Developing smart transportation and making it easier for people to travel and for goods to flow is an important part of the strategy of building a strong transportation country. Expressways are the main arteries of land transportation, and the construction of smart expressways is the forerunner of building a smart transportation system. The Internet of Vehicles for expressways deeply integrates the expressway industry with new technologies such as the Internet and big data, empowering the development of expressways with data resources, which is conducive to further improving the traffic efficiency of expressways and reflecting the main position of expressways in transportation.

[0003] With the rapid development of Internet of Things technology and the intelligent transformation of the automotive industry, Internet of Vehicles technology has become an important means to improve traffic efficiency and ensure driving safety. However, in the highway scenario, the network space layout is wider and the vehicles move faster, which makes the Internet of Vehicles more vulnerable to related network attacks and endangers system security. Therefore, ensuring the security of the Internet of Vehicles is a key and necessary part of its industrial layout. Summary of the invention

[0004] The purpose of the embodiments of the present invention is to provide a data transmission system based on the Internet of Vehicles, which is used to completely or at least partially solve the technical problems existing in the above-mentioned prior art.

[0005] In order to achieve the above-mentioned object, an embodiment of the present invention provides a data transmission system based on the Internet of Vehicles, comprising: an on-board module, at least one roadside module connected to the Internet, a cloud module, and a security authentication module;

[0006] The vehicle-mounted module is used to collect vehicle status information, transmit the status information to the cloud module in real time or periodically, and receive and execute instructions sent by the cloud module;

[0007] The at least one roadside module connected to the Internet is used to collect real-time information on road conditions, traffic flow, and traffic environment, and upload the road conditions, traffic flow, and traffic environment to the cloud module;

[0008] The security authentication module is used to verify and manage the identities of the vehicle-mounted module, the roadside module and the physical user. If the authentication is passed, the data is encrypted using a hash algorithm before transmission;

[0009] The cloud module is used to analyze the data uploaded by the vehicle-mounted module and the roadside module according to preset rules, and provide personalized services to physical users.

[0010] Optionally, the vehicle-mounted module includes a device identity recognition unit and a device feature recognition unit, which are used to verify the identity information and feature information of the vehicle-mounted module in real time according to preset verification rules during vehicle use to prevent illegal tampering and impersonation.

[0011] Optionally, the security authentication module verifies and manages the identities of the vehicle-mounted module, the roadside module, and the physical user according to preset verification rules, including but not limited to:

[0012] In the initialization and configuration phase, preset verification rules are loaded, and interfaces and security channels for interaction with the vehicle module, roadside module, and physical users are configured;

[0013] During the identity registration and certificate issuance phase, digital certificates or key pairs are issued to physical users, on-board modules, and roadside modules;

[0014] In the identity authentication request and processing stage, it receives and processes identity authentication requests from the vehicle module, roadside module and physical user, and performs identity authentication by verifying the digital signature, checking the identity and checking the validity of the digital certificate;

[0015] During the access permission granting phase, the corresponding access permissions are granted to the authenticated requester.

[0016] Optionally, the security authentication module uses a hash algorithm to encrypt data, including:

[0017] Fill the input data message so that the length of its data meets the preset conditions and obtain the target data;

[0018] Set the initial hash value;

[0019] The target data is divided into multiple data message blocks, and a compression function is applied to each data message block, and the hash value is updated. After all data message blocks are processed, the target hash value is output.

[0020] Optionally, the security authentication module is further used to:

[0021] Generate a corresponding hash value list based on the output target hash value;

[0022] A private key is generated based on the hash value list, the data message block length and a preset timestamp, and the private key is sent to the cloud module, so that the cloud module decrypts and parses the data uploaded by the vehicle module and the roadside module according to the private key.

[0023] Optionally, the cloud module is used to analyze the data uploaded by the vehicle-mounted module and the roadside module according to preset rules, including:

[0024] Extract key features from vehicle status information, and issue a warning message when speed, acceleration, fuel consumption rate, and engine temperature exceed their respective corresponding thresholds; wherein the key features include but are not limited to speed, acceleration, fuel consumption rate, and engine temperature;

[0025] Extract road surface type, slope, curvature and construction information from road condition data;

[0026] Calculate the number of vehicles passing through a road section within a period of time, the average speed, and the standard deviation of speed to determine the degree of traffic congestion;

[0027] Use descriptive statistics to analyze the distribution of vehicle status and traffic flow data;

[0028] Conduct trend, seasonality, and cyclical analysis on time series data to predict future changes;

[0029] Using GIS technology, vehicle locations, road conditions, and traffic flow information are visualized on maps to analyze spatial distribution patterns.

[0030] Optionally, the cloud module is used to analyze the data uploaded by the vehicle-mounted module and the roadside module according to preset rules, and provide personalized services to physical users, including:

[0031] The cloud module receives the traffic information uploaded by the roadside module in real time, and recommends driving routes for users based on the destination and current location set by the physical user;

[0032] Predict failures based on vehicle health and notify users in advance, as well as provide safe driving suggestions based on driving habits.

[0033] Optionally, the security authentication module is used to verify and manage the identities of the on-board module, the roadside module and the physical user. If the authentication is passed, the data is encrypted using a hash algorithm and then encapsulated into a preset communication protocol for data transmission.

[0034] Through the above technical solution, the data transmission system based on the Internet of Vehicles realizes real-time data transmission and interaction between vehicles, road infrastructure and cloud platforms through the collaborative work of on-board modules, roadside modules, cloud modules and security authentication modules. In addition, an identity authentication mechanism is used to verify and manage the identities of on-board modules, roadside modules and physical users. Authenticated devices or users participate in the data transmission process, which effectively prevents illegal access and data tampering. Encryption technology is used to encrypt the transmitted data to ensure the security and confidentiality of the data during transmission.

[0035] Other features and advantages of the embodiments of the present invention will be described in detail in the subsequent detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] The accompanying drawings are used to provide a further understanding of the embodiments of the present invention and constitute a part of the specification. Together with the following specific implementations, they are used to explain the embodiments of the present invention, but do not constitute a limitation on the embodiments of the present invention. In the accompanying drawings:

[0037] Figure 1 It is a structural schematic diagram of a data transmission system based on the Internet of Vehicles provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0038] The specific implementation of the embodiment of the present invention is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the embodiment of the present invention, and is not used to limit the embodiment of the present invention.

[0039] See also Figure 1 , which is a schematic diagram of a data transmission system based on the Internet of Vehicles provided by an embodiment of the present invention, comprising: an on-board module, at least one roadside module connected to the Internet, a cloud module, and a security authentication module;

[0040] The vehicle-mounted module is used to collect vehicle status information, transmit the status information to the cloud module in real time or periodically, and receive and execute instructions sent by the cloud module;

[0041] The at least one roadside module connected to the Internet is used to collect real-time information on road conditions, traffic flow, and traffic environment, and upload the road conditions, traffic flow, and traffic environment to the cloud module;

[0042] The security authentication module is used to verify and manage the identities of the vehicle-mounted module, the roadside module and the physical user. If the authentication is passed, the data is encrypted using a hash algorithm before transmission;

[0043] The cloud module is used to analyze the data uploaded by the vehicle-mounted module and the roadside module according to preset rules, and provide personalized services to physical users.

[0044] In some embodiments, the vehicle-mounted module includes a device identity recognition unit and a device feature recognition unit, which are used to verify the identity information and feature information of the vehicle-mounted module in real time according to preset verification rules during vehicle use to prevent illegal tampering and impersonation.

[0045] Specifically, the preset verification rules are first defined, including identity information verification rules: Each vehicle module is assigned a unique serial number or device identifier when it leaves the factory. The verification rules include checking whether the serial number or device ID exists in the database of the vehicle manufacturer or service provider and the status is valid. Feature information verification rules: Feature information may include hardware fingerprints, software versions, encryption algorithm keys, etc. The verification rules include checking whether these feature information are consistent with the information recorded in the database, and checking whether there are abnormal changes. Then the real-time verification process is carried out: When the vehicle is started, the vehicle system first sends a request to the vehicle ECU (electronic control unit) or cloud server to verify the identity information and feature information of the vehicle module. Identity information verification: The vehicle module sends its serial number to the cloud server, and the server verifies the validity of the serial number. Feature information verification: At the same time, the vehicle module uploads its hardware fingerprint and software version information, and the server verifies whether this information is consistent with the records in the database. Continuous monitoring during operation During the driving of the vehicle, the vehicle system performs self-checks regularly (such as every 10 minutes) and triggers more detailed verification randomly or according to preset conditions. Real-time feature monitoring: By monitoring hardware parameters (such as CPU usage, temperature) and software behavior (such as abnormal process startup), possible illegal tampering attempts can be discovered in a timely manner. If encrypted communication is used, dynamically generated keys can be used for encryption verification between the vehicle module and the server to ensure communication security. If the identity information is found to be inconsistent or the feature information has abnormal changes, the vehicle system immediately enters the safe mode, restricts some or all functions, and sends an alert to the owner or service provider.

[0046] In some embodiments, the security authentication module verifies and manages the identities of the vehicle-mounted module, the roadside module, and the physical user according to preset verification rules, including but not limited to:

[0047] In the initialization and configuration phase, preset verification rules are loaded, and interfaces and security channels for interaction with the vehicle module, roadside module, and physical users are configured;

[0048] During the identity registration and certificate issuance phase, digital certificates or key pairs are issued to physical users, on-board modules, and roadside modules;

[0049] In the identity authentication request and processing stage, it receives and processes identity authentication requests from the vehicle module, roadside module and physical user, and performs identity authentication by verifying the digital signature, checking the identity and checking the validity of the digital certificate;

[0050] During the access permission granting phase, the corresponding access permissions are granted to the authenticated requester.

[0051] In some implementations, the security authentication module uses a hash algorithm to encrypt data, including:

[0052] Fill the input data message so that the length of its data meets the preset conditions and obtain the target data;

[0053] Set the initial hash value;

[0054] The target data is divided into multiple data message blocks, and a compression function is applied to each data message block, and the hash value is updated. After all data message blocks are processed, the target hash value is output.

[0055] Specifically, check the data length: first check the length of the input data message, and calculate the number of bytes that need to be filled according to the requirements of the hash algorithm, where the filling method includes adding "1" followed by a sufficient number of "0" at the end of the data until the required length is reached, or using a filling mode that adds special characters. Set a starting point for the hash calculation process and divide the target data into blocks according to the block size specified by the hash algorithm. If the last block is less than the specified size, ensure that its length is correct by padding. For each data block, perform the following operations: merge the current hash value (initial value or result of the previous iteration) with the current data block. Input the merged data into the compression function, and use the output of the compression function as the new hash value for processing the next data block. When all data blocks are processed by the compression function, the final hash value is the target hash value and this hash value is output as encrypted data for subsequent security operations such as data verification and signature.

[0056] In some embodiments, the compression function used by the MD5 hash algorithm is as follows: First, the original message is padded to ensure that its length (in bits) plus 64 bits (i.e., 8 bytes) is divisible by 512 bits (i.e., 64 bytes). The first padded bit is 1 and the remaining bits are 0. Then, a 64-bit length value is appended to the end of the padded message, which represents the length (in bits) of the original message. The MD5 algorithm uses four 32-bit link variables (commonly referred to as A, B, C, and D), which are initialized to specific integer values. The padded and length-appended message is divided into multiple 512-bit blocks (if the last block is less than 512 bits, it is still processed as a block). For each block, the following operations are performed: Initialize four working variables: These variables are copies of A, B, C, and D, and are used for processing the current block. Four rounds of loops: Each round consists of a series of operations, including nonlinear functions (such as F, G, H, I, which are different in each of the four rounds), bit operations (such as AND, OR, XOR, NOT, circular left shift), addition, and interactions with message blocks and constants (called "magic numbers"). Each round updates the values ​​of the four working variables. Update link variables: After completing four rounds of loops, the current values ​​of the four working variables are added to the original link variables (A, B, C, D) to update the values ​​of the link variables. Output hash value: After processing all message blocks, the values ​​in the link variables A, B, C, and D are the final MD5 hash values. These values ​​are usually converted to hexadecimal numbers and represented as 32-character strings.

[0057] In some embodiments, the security authentication module is further used to:

[0058] Generate a corresponding hash value list based on the output target hash value;

[0059] A private key is generated based on the hash value list, the data message block length and a preset timestamp, and the private key is sent to the cloud module, so that the cloud module decrypts and parses the data uploaded by the vehicle module and the roadside module according to the private key.

[0060] In some implementations, the cloud module is used to analyze the data uploaded by the vehicle-mounted module and the roadside module according to preset rules, including:

[0061] Extract key features from vehicle status information, and issue a warning message when speed, acceleration, fuel consumption rate, and engine temperature exceed their respective corresponding thresholds; wherein the key features include but are not limited to speed, acceleration, fuel consumption rate, and engine temperature;

[0062] Extract road surface type, slope, curvature and construction information from road condition data;

[0063] Calculate the number of vehicles passing through a road section within a period of time, the average speed, and the standard deviation of speed to determine the degree of traffic congestion;

[0064] Use descriptive statistics to analyze the distribution of vehicle status and traffic flow data;

[0065] Conduct trend, seasonality, and cyclical analysis on time series data to predict future changes;

[0066] Using GIS technology, vehicle locations, road conditions, and traffic flow information are visualized on maps to analyze spatial distribution patterns.

[0067] In some embodiments, the cloud module is used to analyze the data uploaded by the vehicle-mounted module and the roadside module according to preset rules, and provide personalized services to physical users, including:

[0068] The cloud module receives the traffic information uploaded by the roadside module in real time, and recommends driving routes for users based on the destination and current location set by the physical user;

[0069] Predict failures based on vehicle health and notify users in advance, as well as provide safe driving suggestions based on driving habits.

[0070] In some embodiments, the security authentication module is used to verify and manage the identities of the vehicle-mounted module, the roadside module, and the physical user. If the authentication is passed, the data is encrypted using a hash algorithm and then encapsulated into a preset communication protocol for data transmission.

[0071] Through the above technical solution, the data transmission system based on the Internet of Vehicles realizes real-time data transmission and interaction between vehicles, road infrastructure and cloud platforms through the collaborative work of on-board modules, roadside modules, cloud modules and security authentication modules. In addition, an identity authentication mechanism is used to verify and manage the identities of on-board modules, roadside modules and physical users. Authenticated devices or users participate in the data transmission process, which effectively prevents illegal access and data tampering. Encryption technology is used to encrypt the transmitted data to ensure the security and confidentiality of the data during transmission.

[0072] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0073] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0074] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0075] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0076] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0077] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0078] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0079] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0080] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. A data transmission system based on Internet of Vehicles, characterized in that: include: An on-board module, at least one roadside module connected to the Internet, a cloud module, and a security authentication module; The vehicle-mounted module is used to collect vehicle status information, transmit the status information to the cloud module in real time or periodically, and receive and execute instructions sent by the cloud module; The at least one roadside module connected to the Internet is used to collect real-time information on road conditions, traffic flow, and traffic environment, and upload the road conditions, traffic flow, and traffic environment to the cloud module; The security authentication module is used to verify and manage the identities of the vehicle-mounted module, the roadside module and the physical user. If the authentication is passed, the data is encrypted using a hash algorithm before transmission; The cloud module is used to analyze the data uploaded by the vehicle-mounted module and the roadside module according to preset rules, and provide personalized services to physical users.

2. The data transmission system based on the Internet of Vehicles according to claim 1 is characterized in that: The vehicle-mounted module includes a device identity recognition unit and a device feature recognition unit, which are used to verify the identity information and feature information of the vehicle-mounted module in real time according to preset verification rules during vehicle use to prevent illegal tampering and fraudulent use.

3. The data transmission system based on the Internet of Vehicles according to claim 1, characterized in that: The security authentication module verifies and manages the identities of the vehicle-mounted module, roadside module, and physical user according to preset verification rules, including but not limited to: In the initialization and configuration phase, preset verification rules are loaded, and interfaces and security channels for interaction with the vehicle module, roadside module, and physical users are configured; During the identity registration and certificate issuance phase, digital certificates or key pairs are issued to physical users, on-board modules, and roadside modules; In the identity authentication request and processing stage, it receives and processes identity authentication requests from the vehicle module, roadside module and physical user, and performs identity authentication by verifying the digital signature, checking the identity and checking the validity of the digital certificate; During the access permission granting phase, the corresponding access permissions are granted to the authenticated requester.

4. The data transmission system based on the Internet of Vehicles according to claim 1, characterized in that: The security authentication module uses a hash algorithm to encrypt data, including: Fill the input data message so that the length of its data meets the preset conditions and obtain the target data; Set the initial hash value; The target data is divided into multiple data message blocks, and a compression function is applied to each data message block, and the hash value is updated. After all data message blocks are processed, the target hash value is output.

5. The data transmission system based on the Internet of Vehicles according to claim 4 is characterized in that: The security authentication module is also used for: Generate a corresponding hash value list based on the output target hash value; A private key is generated based on the hash value list, the data message block length and a preset timestamp, and the private key is sent to the cloud module, so that the cloud module decrypts and parses the data uploaded by the vehicle module and the roadside module according to the private key.

6. The data transmission system based on the Internet of Vehicles according to claim 1, characterized in that: The cloud module is used to analyze the data uploaded by the vehicle-mounted module and the roadside module according to preset rules, including: Extract key features from vehicle status information, and issue a warning message when speed, acceleration, fuel consumption rate, and engine temperature exceed their respective corresponding thresholds; wherein the key features include but are not limited to speed, acceleration, fuel consumption rate, and engine temperature; Extract road surface type, slope, curvature and construction information from road condition data; Calculate the number of vehicles passing through a road section within a period of time, the average speed, and the standard deviation of speed to determine the degree of traffic congestion; Use descriptive statistics to analyze the distribution of vehicle status and traffic flow data; Conduct trend, seasonality, and cyclical analysis on time series data to predict future changes; Using GIS technology, vehicle locations, road conditions, and traffic flow information are visualized on maps to analyze spatial distribution patterns.

7. The data transmission system based on the Internet of Vehicles according to claim 6, characterized in that: The cloud module is used to analyze the data uploaded by the vehicle-mounted module and the roadside module according to preset rules, and provide personalized services to physical users, including: The cloud module receives the traffic information uploaded by the roadside module in real time, and recommends driving routes for users based on the destination and current location set by the physical user; Predict failures based on vehicle health and notify users in advance, as well as provide safe driving suggestions based on driving habits.

8. The data transmission system based on the Internet of Vehicles according to claim 1, characterized in that: The security authentication module is used to verify and manage the identities of the vehicle-mounted module, the roadside module and the physical user. If the authentication is passed, the data is encrypted using a hash algorithm and then encapsulated into a preset communication protocol for data transmission.

Images