Vehicle end data security storage system

Abstract

The invention provides a vehicle-end data security storage system, and relates to the technical field of data storage, the system comprises a receiving module, an identification module, an encryption module and a storage module, the system receives vehicle-end data uploaded by an intelligent network connection vehicle through the receiving module, identifies a production scene of the vehicle-end data through the identification module, and stores the vehicle-end data in the storage module; the encryption module encrypts the vehicle-end data by adopting a corresponding encryption strategy according to the production scene of the vehicle-end data, and finally stores the encrypted vehicle-end data through the storage module, so that the system can encrypt the vehicle-end data by adopting different encryption strategies according to the production scene of the vehicle-end data. The difficulty of cracking the encrypted vehicle end data is improved, and the storage security of the vehicle end data is effectively guaranteed.

Description

Technical Field

[0001] The present invention relates to the technical field of data storage, and in particular to a vehicle-side data security storage system. Background Art

[0002] Intelligent Connected Vehicle (ICV) refers to the organic combination of Internet of Vehicles and smart cars, and is a new generation of cars that can eventually replace human operation. At present, intelligent connected vehicles are often equipped with a variety of sensor devices to collect information about the surrounding environment, such as cameras, ultrasonic sensors, millimeter-wave radars, lidars, positioning devices, etc. installed in different positions on the vehicle body. An intelligent connected vehicle can generate a large amount of vehicle-side data during driving. These vehicle-side data are not only crucial to the operation of the vehicle itself, but also can be used to analyze a large amount of information by collecting a large amount of vehicle-side data produced by intelligent connected vehicles. This information is important for improving driving safety, optimizing vehicle performance, and supporting the development of autonomous driving technology. At the same time, with the requirements of data compliance and the strengthening of operational supervision, the secure storage of vehicle-side data is becoming more and more important. At present, the storage of vehicle-side data still adopts the traditional encrypted storage method, and its security is not improved by combining the production scenario of vehicle-side data. Summary of the invention

[0003] In view of this, an object of the present invention is to provide a vehicle-side data security storage system to solve the above-mentioned problems existing in the prior art.

[0004] In order to achieve the above-mentioned object of the invention, the present invention provides a vehicle-side data security storage system, the system comprising:

[0005] A receiving module is used to receive vehicle-side data uploaded by the intelligent connected vehicle;

[0006] An identification module, used to identify the production scenario of the vehicle-side data received by the receiving module;

[0007] The encryption module is used to encrypt the vehicle-side data using the corresponding encryption strategy according to the production scenario of the vehicle-side data;

[0008] The storage module is used to store encrypted vehicle-side data.

[0009] Furthermore, the production scenarios of the vehicle-side data include real driving scenarios and vehicle testing scenarios.

[0010] Furthermore, when the production scenario of the vehicle-side data is a real driving scenario, the encryption strategy for encrypting the vehicle-side data is:

[0011] Determine the target time period based on the driving start and end times of the intelligent connected vehicle in the real driving scenario that produces the vehicle-side data to be encrypted;

[0012] Divide the target time period into multiple sub-time periods, and select at least one target sub-time period that meets the preset rules among the sub-time periods;

[0013] Determine other intelligent connected vehicles that enter the detection range of the intelligent connected vehicles producing vehicle-side data to be encrypted during the target sub-time period;

[0014] The vehicle-side data to be encrypted is encrypted based on the vehicle-side data generated by other determined intelligent connected vehicles.

[0015] Furthermore, in a real driving scenario, the intelligent networked vehicle periodically sends a handshake request signal to other intelligent networked vehicles that enter its detection range, and after receiving the handshake request signal, the other intelligent networked vehicles send a handshake response signal to the intelligent networked vehicle that sent the handshake request signal.

[0016] The step of selecting at least one sub-time period that meets a preset rule from among the sub-time periods is as follows:

[0017] For each sub-time period, analyzing whether the intelligent networked vehicle that produces the vehicle-side data to be encrypted receives a handshake response signal in the sub-time period;

[0018] Determine all sub-time periods during which the intelligent networked vehicle that produces vehicle-side data to be encrypted receives a handshake response signal, and use the determined sub-time periods as target sub-time periods that comply with preset rules.

[0019] Furthermore, the vehicle-side data to be encrypted is encrypted based on the vehicle-side data generated by other determined intelligent connected vehicles, specifically including:

[0020] The vehicle-side data generated by the intelligent connected vehicle that generates the vehicle-side data is divided into n sub-data packets, where n is the number of other determined intelligent connected vehicles, and a mapping relationship between the sub-data packets and the other determined intelligent connected vehicles is randomly established;

[0021] For each determined other intelligent networked vehicle, further determine the vehicle-side data generated by the vehicle-side data in the target sub-time period, and obtain a corresponding data summary based on the vehicle-side data generated by the other intelligent networked vehicles in the target sub-time period;

[0022] The target sub-time period, the unique identification information of other intelligent connected vehicles, and the data summary are input into the key derivation function to generate an encryption key;

[0023] Encrypting sub-data packets mapped by other intelligent network-connected vehicles by using an encryption key to obtain encrypted sub-data packets;

[0024] All encrypted sub-data packets are integrated into encrypted vehicle-side data.

[0025] Furthermore, based on the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, before obtaining the corresponding data summary, the following operations are performed:

[0026] Calculate the sensitivity of vehicle-side data generated by other intelligent connected vehicles in the target sub-time period;

[0027] Obtain the vehicle-side data privacy protection requirements of other intelligent connected vehicles and set a privacy budget based on the vehicle-side data privacy protection requirements;

[0028] Based on the sensitivity and privacy budget, random noise is generated using Laplace distribution, and the random noise is added to the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, which is expressed as:

[0029]

[0030] Among them, NR represents the vehicle-side data after noise addition, TR represents the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, s represents the sensitivity of the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, pb represents the privacy budget, and Laplace() represents the random noise generated based on the Laplace distribution.

[0031] Furthermore, when the production scenario of the vehicle-side data is a vehicle testing scenario, the encryption strategy for encrypting the vehicle-side data is:

[0032] Based on the unique identification information of the intelligent connected vehicle that produces the vehicle-side data to be encrypted and the production time of the vehicle-side data to be encrypted, a corresponding vehicle test task order is obtained from the task order system;

[0033] Analyze the vehicle test task list to obtain analysis results, wherein the analysis results include tester information, test item information, and test time information;

[0034] Performing a hash operation on the analysis result to obtain an operation result, and inputting the operation result into a key derivation function to obtain an encryption key;

[0035] The vehicle-side data to be encrypted is encrypted by using an encryption key to obtain encrypted vehicle-side data.

[0036] Compared with the prior art, the present invention has the following beneficial effects:

[0037] The present invention provides a vehicle-side data security storage system, which receives vehicle-side data uploaded by an intelligent connected vehicle through a receiving module, identifies the production scenario of the vehicle-side data through an identification module, and encrypts the vehicle-side data using a corresponding encryption strategy according to the production scenario of the vehicle-side data through an encryption module. Finally, the encrypted vehicle-side data is stored through a storage module, so that the system can encrypt the vehicle-side data using different encryption strategies according to the production scenario of the vehicle-side data, thereby increasing the difficulty of cracking the encrypted vehicle-side data and effectively ensuring the storage security of the vehicle-side data. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only preferred embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0039] Figure 1 It is a schematic diagram of the overall structure of a vehicle-side data security storage system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0040] The principles and features of the present invention are described below in conjunction with the accompanying drawings. The enumerated embodiments are only used to explain the present invention and are not used to limit the scope of the present invention.

[0041] Reference Figure 1 This embodiment provides a vehicle-side data security storage system, the system comprising:

[0042] The receiving module is used to receive vehicle-side data uploaded by the intelligent connected vehicle.

[0043] The identification module is used to identify the production scenario of the vehicle-side data received by the receiving module.

[0044] In this embodiment, the production scenarios of vehicle-side data include real driving scenarios and vehicle testing scenarios.

[0045] The encryption module is used to encrypt the vehicle-side data using corresponding encryption strategies according to the production scenario of the vehicle-side data.

[0046] The storage module is used to store encrypted vehicle-side data.

[0047] The system provided in this embodiment receives the vehicle-side data uploaded by each intelligent connected vehicle through a receiving module, and identifies the production scenario of the received vehicle-side data through an identification module. The encryption module encrypts the vehicle-side data using corresponding encryption strategies according to different production scenarios of the vehicle-side data, thereby increasing the difficulty of cracking the encrypted vehicle-side data and ensuring the storage security of the vehicle-side data.

[0048] As an optional embodiment, when the production scenario of the vehicle-side data is a real driving scenario, the encryption strategy for encrypting the vehicle-side data is:

[0049] S101, based on the driving start time point and driving stop time point of the intelligent networked vehicle that generates the vehicle-side data to be encrypted in a real driving scenario, determine a target time period. In other words, the target time period is the time period between the driving start time point and the driving stop time point.

[0050] S102: Divide the target time period into a plurality of sub-time periods, and select at least one target sub-time period that meets a preset rule from among the sub-time periods.

[0051] S103: Determine other intelligent connected vehicles within the detection range of the intelligent connected vehicles that enter the target sub-time period to produce vehicle-side data to be encrypted.

[0052] S104. Encrypt the vehicle-side data to be encrypted based on the determined vehicle-side data produced by other intelligent connected vehicles.

[0053] This optional embodiment, when vehicle-side data is generated by an intelligent connected vehicle in a real driving scenario, determines the driving time period of the intelligent connected vehicle in the real driving scenario, screens out other intelligent connected vehicles that enter the detection range of the intelligent connected vehicles that produce the vehicle-side data to be encrypted during the driving time period, and further encrypts the vehicle-side data to be encrypted based on the vehicle-side data generated by these other intelligent connected vehicles, thereby encrypting the encrypted vehicle-side data by utilizing the randomness of the surrounding environment of the intelligent connected vehicle in the real driving scenario, thereby increasing the difficulty of cracking the encrypted vehicle-side data.

[0054] As another optional embodiment, in a real driving scenario, the smart connected vehicle periodically sends a handshake request signal to other smart connected vehicles that enter its detection range. After receiving the handshake request signal, the other smart connected vehicles send a handshake response signal to the smart connected vehicle that sent the handshake request signal.

[0055] In step S102, at least one target sub-time period that meets a preset rule is screened out from the sub-time periods, which specifically includes the following operations:

[0056] S201. For each sub-time period, analyze whether the intelligent connected vehicle that produces the vehicle-side data to be encrypted receives a handshake response signal in the sub-time period.

[0057] S202, determining all sub-time periods during which the intelligent networked vehicle that produces vehicle-side data to be encrypted receives a handshake response signal, and using the determined sub-time periods as target sub-time periods that comply with preset rules.

[0058] In this optional embodiment, it is determined whether there are other intelligent connected vehicles entering the detection range of the intelligent connected vehicle that produces the vehicle-side data to be encrypted during the target sub-time period, and it can also be judged based on whether the intelligent connected vehicle that produces the vehicle-side data to be encrypted receives a handshake response signal from other intelligent connected vehicles.

[0059] As another optional embodiment, encrypting the vehicle-side data to be encrypted based on the determined vehicle-side data generated by other intelligent connected vehicles specifically includes:

[0060] S301. Divide the vehicle-side data produced by the intelligent connected vehicle that produces the vehicle-side data into n sub-data packets, where n is the number of other determined intelligent connected vehicles, and randomly establish a mapping relationship between the sub-data packets and the other determined intelligent connected vehicles.

[0061] In this optional embodiment, if the number of other intelligent network-connected vehicles determined is 1, the segmentation of the vehicle-side data is skipped and the next step is directly executed. The processing of the sub-data packets in the subsequent steps is transformed into directly processing the vehicle-side data to be encrypted.

[0062] In this optional embodiment, if the determined number of other intelligent connected vehicles is 0, the process is terminated and other encryption strategies are used to encrypt the vehicle-side data to be encrypted.

[0063] In this optional embodiment, the mapping relationship between the sub-data packet and other intelligent connected vehicles is 1:1.

[0064] S302. For each determined other intelligent networked vehicle, further determine the vehicle-side data generated by the vehicle-side data in the target sub-time period, and obtain a corresponding data summary based on the vehicle-side data generated by the other intelligent networked vehicles in the target sub-time period.

[0065] In this optional embodiment, each intelligent connected vehicle may generate multiple different types of vehicle-side data at the same time. The specific type of vehicle-side data based on which the corresponding data summary is obtained can be randomly selected from the different types of generated vehicle-side data, or a fixed type of vehicle-side data can be selected. The present invention does not make specific limitations on this.

[0066] S303: Input the target sub-time period, unique identification information of other intelligent connected vehicles, and data summary into a key derivation function to generate an encryption key.

[0067] In this optional embodiment, the key derivation function may be PBKDF2, Scrypt or Argon2, or other types of key derivation functions, which is not specifically limited in the present invention.

[0068] S304: Encrypt sub-data packets mapped by other intelligent network-connected vehicles using an encryption key to obtain encrypted sub-data packets.

[0069] S305. Integrate all encrypted sub-data packets into encrypted vehicle-side data.

[0070] In this optional embodiment, the vehicle-side data to be encrypted is divided into multiple sub-data packets and mapped with other intelligent connected vehicles. The vehicle-side data produced by other intelligent connected vehicles is used to generate a corresponding encryption key through a key derivation function, and the sub-data packet is further encrypted by an encryption key derived from the vehicle-side data of the mapped intelligent connected vehicle. Finally, the encrypted vehicle-side data is obtained by integrating all the encrypted sub-data packets, so that the encrypted vehicle-side data is encrypted by multiple different encryption keys, which further improves the difficulty of cracking the encrypted vehicle-side data and the data security.

[0071] As another optional embodiment, based on the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, before obtaining the corresponding data summary, the following operations are performed:

[0072] S401. Calculate the sensitivity of vehicle-side data generated by other intelligent connected vehicles in the target sub-time period.

[0073] In this optional embodiment, the sensitivity reflects the privacy sensitivity of the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period. The higher the privacy importance of the vehicle-side data to other intelligent connected vehicles, the higher the sensitivity value.

[0074] In this optional embodiment, different intelligent connected vehicles may have different sensitivities to the same type of vehicle-side data; and the same intelligent connected vehicle may also have different sensitivities to different types of vehicle-side data.

[0075] S402: Obtain the vehicle-side data privacy protection requirements of other intelligent connected vehicles, and set a privacy budget according to the vehicle-side data privacy protection requirements. For example, the greater the vehicle-side data privacy protection requirements, the higher the corresponding privacy budget.

[0076] S403, based on sensitivity and privacy budget, random noise is generated using Laplace distribution, and the random noise is added to the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, which is expressed as:

[0077]

[0078] Among them, NR represents the vehicle-side data after noise addition, TR represents the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, s represents the sensitivity of the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, pb represents the privacy budget, and Laplace() represents the random noise generated based on the Laplace distribution.

[0079] For other intelligent connected vehicles, if the data summary of the vehicle-side data they produce is directly exposed in the data interface for subsequent key derivation, it may also cause unnecessary data leakage. Therefore, before generating the data summary based on the vehicle-side data of other intelligent connected vehicles, this optional embodiment first implements differential privacy protection of the vehicle-side data by adding Laplace noise to the vehicle-side data, thereby achieving a balance between protecting the privacy of other intelligent connected vehicle data and maintaining data utility.

[0080] As another optional embodiment, when the production scenario of the vehicle-side data is a vehicle testing scenario, the encryption strategy for encrypting the vehicle-side data is:

[0081] S501. Based on the unique identification information of the intelligent connected vehicle that produces the vehicle-side data to be encrypted and the production time of the vehicle-side data to be encrypted, obtain the corresponding vehicle test task order from the task order system.

[0082] S502: Analyze the vehicle test task list to obtain analysis results, where the analysis results include tester information, test item information, and test time information.

[0083] In this optional embodiment, the tester information is the unique identification information of the tester who tests the intelligent connected vehicle; the test project information is the basic information of the project for testing the intelligent connected vehicle, such as the test project number, test project name, etc.; the test time information is the start time and end time of the vehicle test scenario.

[0084] S503: Perform a hash operation on the analysis result to obtain an operation result, and input the operation result into a key derivation function to obtain an encryption key.

[0085] S504. Encrypt the vehicle-side data to be encrypted using an encryption key to obtain encrypted vehicle-side data.

[0086] This optional embodiment obtains a vehicle test task list through a task list system when vehicle-side data is generated by an intelligent connected vehicle in a vehicle test scenario, analyzes the vehicle test task list to obtain an analysis result, performs a hash operation based on the analysis result, inputs the operation result into a key derivation function to obtain an encryption key, and encrypts the vehicle-side data to be encrypted through the encryption key, thereby utilizing the differential information of the vehicle test items to encrypt the vehicle-side data to be encrypted, thereby increasing the difficulty of cracking the encrypted vehicle-side data.

[0087] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A vehicle-side data security storage system, characterized in that: The system comprises: A receiving module is used to receive vehicle-side data uploaded by the intelligent connected vehicle; An identification module, used to identify the production scenario of the vehicle-side data received by the receiving module; The encryption module is used to encrypt the vehicle-side data using the corresponding encryption strategy according to the production scenario of the vehicle-side data; The storage module is used to store encrypted vehicle-side data.

2. A vehicle-side data security storage system according to claim 1, characterized in that: The production scenarios of the vehicle-side data include real driving scenarios and vehicle testing scenarios.

3. A vehicle-side data security storage system according to claim 2, characterized in that: When the production scenario of vehicle-side data is a real driving scenario, the encryption strategy for encrypting vehicle-side data is: Determine the target time period based on the driving start and end times of the intelligent connected vehicle in the real driving scenario that produces the vehicle-side data to be encrypted; Divide the target time period into multiple sub-time periods, and select at least one target sub-time period that meets the preset rules among the sub-time periods; Determine other intelligent connected vehicles that enter the detection range of the intelligent connected vehicles producing vehicle-side data to be encrypted during the target sub-time period; The vehicle-side data to be encrypted is encrypted based on the vehicle-side data generated by other determined intelligent connected vehicles.

4. A vehicle-side data security storage system according to claim 3, characterized in that: In real driving scenarios, smart connected vehicles periodically send handshake request signals to other smart connected vehicles that enter their detection range. After receiving the handshake request signals, other smart connected vehicles send handshake response signals to the smart connected vehicles that sent the handshake request signals. The step of selecting at least one sub-time period that meets a preset rule from among the sub-time periods is as follows: For each sub-time period, analyzing whether the intelligent networked vehicle that produces the vehicle-side data to be encrypted receives a handshake response signal in the sub-time period; Determine all sub-time periods during which the intelligent networked vehicle that produces vehicle-side data to be encrypted receives a handshake response signal, and use the determined sub-time periods as target sub-time periods that comply with preset rules.

5. A vehicle-side data security storage system according to claim 3, characterized in that: The vehicle-side data to be encrypted is encrypted based on the vehicle-side data generated by other determined intelligent connected vehicles, including: The vehicle-side data generated by the intelligent connected vehicle that generates the vehicle-side data is divided into n sub-data packets, where n is the number of other determined intelligent connected vehicles, and a mapping relationship between the sub-data packets and the other determined intelligent connected vehicles is randomly established; For each determined other intelligent networked vehicle, further determine the vehicle-side data generated by the vehicle-side data in the target sub-time period, and obtain a corresponding data summary based on the vehicle-side data generated by the other intelligent networked vehicles in the target sub-time period; The target sub-time period, the unique identification information of other intelligent connected vehicles, and the data summary are input into the key derivation function to generate an encryption key; Encrypting sub-data packets mapped by other intelligent network-connected vehicles by using an encryption key to obtain encrypted sub-data packets; All encrypted sub-data packets are integrated into encrypted vehicle-side data.

6. A vehicle-side data security storage system according to claim 5, characterized in that: Based on the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, before obtaining the corresponding data summary, perform the following operations: Calculate the sensitivity of vehicle-side data generated by other intelligent connected vehicles in the target sub-time period; Obtain the vehicle-side data privacy protection requirements of other intelligent connected vehicles and set a privacy budget based on the vehicle-side data privacy protection requirements; Based on the sensitivity and privacy budget, random noise is generated using Laplace distribution, and the random noise is added to the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, which is expressed as: Among them, NR represents the vehicle-side data after noise addition, TR represents the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, s represents the sensitivity of the vehicle-side data generated by other intelligent connected vehicles in the target sub-time period, pb represents the privacy budget, and Laplace() represents the random noise generated based on the Laplace distribution.

7. A vehicle-side data security storage system according to claim 1, characterized in that: When the production scenario of vehicle-side data is a vehicle testing scenario, the encryption strategy for encrypting vehicle-side data is: Based on the unique identification information of the intelligent connected vehicle that produces the vehicle-side data to be encrypted and the production time of the vehicle-side data to be encrypted, a corresponding vehicle test task order is obtained from the task order system; Analyze the vehicle test task list to obtain analysis results, wherein the analysis results include tester information, test item information, and test time information; Performing a hash operation on the analysis result to obtain an operation result, and inputting the operation result into a key derivation function to obtain an encryption key; The vehicle-side data to be encrypted is encrypted by using an encryption key to obtain encrypted vehicle-side data.

Images