Data partition processing method, device and equipment and computer readable medium

Abstract

The invention provides a data partition processing method and device, equipment and a computer readable medium, and the method comprises the steps: obtaining a data processing instruction carrying a data area address, determining whether a permission value corresponding to the data processing instruction exists according to the data area address, and if yes, obtaining the permission value according to the data area address and the data processing instruction. Obtaining a state machine value, a comparison authority value and a state machine value obtained based on identity verification to obtain a comparison result, and if the comparison result meets an access authority control condition, representing that the user has an access authority for performing data processing on the data area; and executing the data processing instruction according to the data processing condition corresponding to the data security level of the data area. Therefore, the data is subjected to partitioned storage, and the data processing of the data in the data areas with different data security levels has corresponding permission settings and data processing conditions, so that the security of the data is improved, and finally, the security of the electronic control unit is improved.

Description

Technical Field

[0001] The present invention relates to the field of vehicles, and in particular to a data partition processing method, device, equipment and computer-readable medium. Background Art

[0002] One of the most important components in current vehicles is the electronic control unit (ECU), which can control the operation of other components in the vehicle and can also perform data processing, such as writing data.

[0003] When data is processed in an electronic control unit, it is just ordinary processing. However, with the continuous increase in information security risks, electronic control units can be easily accessed maliciously, resulting in malicious processing of data, such as malicious deletion or malicious tampering. Summary of the invention

[0004] In view of this, the purpose of the present application is to provide a data partition processing method, device, equipment and computer-readable medium, by partitioning the data for storage, and processing the data in different data areas with corresponding permission settings and data processing conditions, thereby improving the security of the data and ultimately improving the security of the electronic control unit.

[0005] The present application provides a data partition processing method, which is applied to an electronic control unit, and the method comprises:

[0006] Acquire a data processing instruction carrying an address of a data area, wherein the data processing instruction at least includes a read instruction, a write instruction, and an erase instruction, and the data area is obtained according to the data security level;

[0007] Determine whether there is a permission value corresponding to the data processing instruction according to the data area address, and if so, obtain the permission value according to the data area address and the data processing instruction;

[0008] Obtaining a state machine value obtained based on identity authentication, comparing the permission value with the state machine value, and obtaining a comparison result;

[0009] If the comparison result satisfies the access permission control condition, the data processing instruction is executed according to the data processing condition corresponding to the data security level of the data area.

[0010] Optionally, the data area includes a high-sensitivity data area, the data security level includes a high security level, and the data processing conditions corresponding to the high security level include encryption and decryption processing conditions;

[0011] If the comparison result satisfies the access permission control condition, executing the data processing instruction according to the data processing condition corresponding to the data security level of the data area includes:

[0012] If the comparison result satisfies the access permission control condition, the read instruction, the write instruction and the erase instruction are executed according to the encryption and decryption processing conditions corresponding to the high security level of the high-sensitive data area.

[0013] Optionally, the encryption and decryption processing conditions include encryption conditions;

[0014] If the comparison result satisfies the access permission control condition, executing the read instruction, the write instruction and the erase instruction according to the encryption and decryption processing condition corresponding to the high security level of the high-sensitive data area includes:

[0015] If the comparison result meets the access permission control condition and the data processing instruction is a write instruction, the write instruction is executed according to the encryption condition corresponding to the high security level of the high-sensitive data area, so that the target data corresponding to the write instruction is encrypted using the encryption condition and stored in the high-sensitive data area.

[0016] Optionally, the encryption condition includes a derived encryption key;

[0017] The method further comprises:

[0018] Obtaining an initial key of the electronic control unit and a unique code of the electronic control unit;

[0019] Perform hash operation on the target data corresponding to the write instruction using a hash algorithm to obtain a hash value;

[0020] Combining the unique code and the hash value to obtain initial data for deriving a key;

[0021] Using the initial key to symmetrically encrypt the initial data of the derived key to obtain the derived encryption key;

[0022] The executing the write instruction according to the encryption condition corresponding to the high security level of the high-sensitive data area, so as to encrypt the target data corresponding to the write instruction using the encryption condition and store it in the high-sensitive data area comprises:

[0023] Symmetrically encrypt the target data corresponding to the write instruction according to the derived encryption key corresponding to the high security level of the high-sensitive data area to obtain ciphertext data;

[0024] The ciphertext data is stored in the high-sensitivity data area.

[0025] Optionally, the access permission control condition is that the permission value is less than the state machine value;

[0026] The method further comprises:

[0027] If the comparison result is that the permission value is greater than or equal to the state machine value, the data processing instruction is not executed.

[0028] Optionally, the method further comprises:

[0029] Determine the data security level based on the security attributes of the data;

[0030] A plurality of data areas in the electronic control unit are obtained according to the data security level division;

[0031] Configuring a data area address for each data area, wherein the data area address carries an attribute field corresponding to the data processing instruction;

[0032] The obtaining the permission value according to the data area address and the data processing instruction comprises:

[0033] Extracting the attribute field included in the data area address according to the data processing instruction;

[0034] The authority value is obtained according to the attribute field.

[0035] Optionally, the method further comprises:

[0036] If it is determined according to the data area address that the data area does not have the permission value corresponding to the data processing instruction, the data processing instruction is directly executed on the data area.

[0037] The present application provides a data partition processing device, the device comprising:

[0038] A first acquisition unit is used to acquire a data processing instruction carrying an address of a data area, wherein the data processing instruction at least includes a read instruction, a write instruction and an erase instruction, and the data area is obtained according to the data security level;

[0039] A second acquisition unit, configured to determine whether there is a permission value corresponding to the data processing instruction according to the data area address, and if so, to acquire the permission value according to the data area address and the data processing instruction;

[0040] A third acquisition unit is used to obtain a state machine value obtained based on identity authentication, compare the authority value with the state machine value, and obtain a comparison result;

[0041] The execution unit is used to execute the data processing instruction according to the data processing condition corresponding to the data security level of the data area if the comparison result meets the access permission control condition.

[0042] The present application provides a data partition processing device, the device comprising: a processor and a memory;

[0043] The memory is used to store instructions;

[0044] The processor is used to execute the instructions in the memory and perform any of the methods described above.

[0045] The present application provides a computer-readable medium, characterized in that it includes instructions, which, when executed on a computer, enable the computer to execute the method described above.

[0046] The present application provides a data partition processing method, which is applied to an electronic control unit. The method includes: obtaining a data processing instruction carrying a data area address, the data processing instruction at least includes a read instruction, a write instruction and an erase instruction, the data area is obtained according to the data security level, determining whether there is a permission value corresponding to the data processing instruction according to the data area address, and if there is, obtaining the permission value according to the data area address and the data processing instruction, that is, the data in the electronic control unit is partitioned and stored according to the data security level, and the data security is improved by setting the permission value of data processing corresponding to different data areas. Obtain a state machine value obtained based on identity authentication, compare the permission value and the state machine value, and obtain a comparison result. If the comparison result meets the access permission control condition, it means that the user has the access permission to process the data area, and the data processing instruction can be executed according to the data processing condition corresponding to the data security level of the data area. That is to say, the state machine value obtained by identity authentication and the permission value can be compared to further improve the security of processing data in data areas with different data security levels. It can be seen that by partitioning the data, the data in data areas with different data security levels have corresponding permission settings and data processing conditions, thereby improving the security of the data and ultimately improving the security of the electronic control unit. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The above and other features, advantages and aspects of the embodiments of the present application will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. Throughout the accompanying drawings, the same or similar reference numerals represent the same or similar elements. It should be understood that the drawings are schematic and the originals and elements are not necessarily drawn to scale.

[0048] Figure 1 A schematic diagram of a data partition processing method provided in an embodiment of the present application is shown;

[0049] Figure 2 A schematic diagram of a data zone security mechanism architecture provided by an embodiment of the present application is shown;

[0050] Figure 3 A schematic diagram of the structure of a data partition processing device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0051] The embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be construed as being limited to the embodiments described herein. Instead, these embodiments are provided to provide a more thorough and complete understanding of the present application. It should be understood that the drawings and embodiments of the present application are only for exemplary purposes and are not intended to limit the scope of protection of the present application.

[0052] The term "including" and its variations used herein are open inclusions, i.e., "including but not limited to". The term "based on" means "based at least in part on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". The relevant definitions of other terms will be given in the following description.

[0053] It should be noted that the concepts such as "first" and "second" mentioned in this application are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0054] It should be noted that the modifications of "one" and "plurality" mentioned in the present application are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0055] Currently, most of the data stored in the ECU is not processed by data classification and partitioning. Some manufacturers simply divide the data and perform simple identity authentication for reading data. However, with the development of automobile technology, the amount and types of data are increasing. The previous data processing can no longer meet the current development of automobile technology and the requirements of the automobile industry for data security.

[0056] In the current environment where information security risks are increasing, the current data area has no protection method and is easily accessed maliciously, causing information and privacy leakage or data tampering leading to dangerous operations, which can lead to property losses in serious cases.

[0057] Based on this, the present application provides a data partition processing method, which is applied to an electronic control unit. The method includes: obtaining a data processing instruction carrying a data area address, the data processing instruction includes at least a read instruction, a write instruction and an erase instruction, the data area is obtained according to the data security level, and whether the data processing instruction has a permission value corresponding to the data processing instruction is determined according to the data area address. If it has, the permission value is obtained according to the data area address and the data processing instruction. That is to say, the data in the electronic control unit is partitioned and stored according to the data security level, and the data security is improved by setting the permission value of data processing corresponding to different data areas. The state machine value obtained based on identity authentication is obtained, and the permission value and the state machine value are compared to obtain a comparison result. If the comparison result meets the access permission control condition, it means that the user has the access permission to process the data area, and the data processing instruction can be executed according to the data processing condition corresponding to the data security level of the data area. That is to say, the state machine value obtained by identity authentication and the permission value can be compared to further improve the security of processing data in data areas with different data security levels. It can be seen that by partitioning the data, the data in data areas with different data security levels have corresponding permission settings and data processing conditions, thereby improving the security of the data and ultimately improving the security of the electronic control unit.

[0058] In order to better understand the technical solution and technical effects of the present application, specific embodiments will be described in detail below with reference to the accompanying drawings.

[0059] See also Figure 1 , which is a flow chart of a data partition processing method provided in an embodiment of the present application.

[0060] The data partition processing method provided in the embodiment of the present application is applied to an electronic control unit. The data partition processing method provided in the embodiment of the present application comprises the following steps:

[0061] S101, obtaining a data processing instruction carrying a data area address, the data processing instruction at least includes a read instruction, a write instruction and an erase instruction, and the data area is obtained according to the data security level.

[0062] In the embodiment of the present application, considering that a variety of data is stored in the electronic control unit, and in order to improve the security of the data in the electronic control unit, different data can be partitioned for storage and partitioned processing. The various data include data with different data security levels, and data with different data security levels can be partitioned for storage, that is, the data in the electronic control unit can be divided according to the data security level, and data with different data security levels are stored in different data areas, that is, the data areas are divided according to the data security level, so as to facilitate the subsequent setting of corresponding access rights for different data areas, thereby improving the security of data in different data areas.

[0063] Specifically, the data security level may include a high security level, a medium security level, and a low security level. Then, according to the data security level, three data areas may be obtained, namely, a high-sensitivity data area, a low-sensitivity data area, and a general data area. Among them, the high-sensitivity data area corresponds to a high security level, the low-sensitivity data area corresponds to a medium security level, and the general data area corresponds to a low security level. The size of each data area can be spatially divided according to the ECU program and the purpose of the ECU. Data areas with different data security levels can store data with different security attributes.

[0064] As an example, the highly sensitive data area can be used to store private data or sensitive data. Private data or sensitive data at least includes: identity data, service privacy data, vehicle basic data such as license plate, perception decision data, vehicle operation data, vehicle external environment data, location information data and V2X data (real-time road traffic signals and monitoring data).

[0065] The low-sensitivity data area can be used to store important but less sensitive data, such as vehicle data information. The data that can be stored in the low-sensitivity data area includes at least: basic vehicle data (except license plate), application service data, and V2X data of vehicle-road collaboration data.

[0066] The general data area can be used to store the user's general data that does not involve identity information, vehicle information, etc. The general data mainly includes entertainment data and application data (except identity information).

[0067] In the embodiment of the present application, data in different data areas can be processed using data processing instructions, wherein the data processing instructions include read instructions, write instructions, and erase instructions. That is, data in a data area can be read using a read instruction, data in a data area can be written using a write instruction, and data in a data area can be deleted using an erase instruction.

[0068] When a data area is processed using a data processing instruction, it is necessary to determine which data area is being processed, and the data area can be specifically distinguished according to the data area address. That is, the data area address can be carried in the data processing instruction so as to determine the specific data area for data processing.

[0069] From the above description, it can be seen that different data have different security attributes. If it is important and highly sensitive data, such as identity data, it has a higher security attribute. If it is unimportant and less sensitive data, such as entertainment data, it has a lower security attribute. The data security level corresponding to the data can be determined according to the security attribute of the data, and then multiple data areas in the electronic control unit can be obtained according to the data security level. In other words, the number of data areas is determined according to the data security level, and then determined according to the security attribute of the data.

[0070] In an embodiment of the present application, after obtaining multiple data areas according to the data security level, considering that each data area stores data of different data security levels, each data area also has a different data security level, that is, each data area also has different security attributes, and the security attributes of different data areas can be identified by configuring the data area address of each data area. Specifically, the data area address includes an attribute field corresponding to the data processing instruction, and the attribute field corresponding to the data processing instruction is used to indicate the access rights of the data processing instruction to perform data processing on different data areas. In other words, an attribute field can be set in the data area address of each data area to identify the security attributes of the data area when performing data processing. Since the data processing instruction includes a read instruction, a write instruction, and an erase instruction, an attribute field can be used to identify the security attributes of the data area when reading data, writing data, and deleting data.

[0071] As an example, a 16-byte attribute field can be stored at the starting address of each data area to identify the security attribute of the data area, that is, the security attribute of each data area is defined in the data header. The access rights of each data area to determine whether the data processing instruction can be performed are determined based on the data area address.

[0072] The 16-byte attribute field can be represented using Table 1.

[0073] Table 1

[0074] Starting address length meaning Byte0 4 The starting address of the data area Byte4 4 End address of the data area Byte8 2 The permission value of the read instruction, the default value is 0 Byte10 2 The permission value of the write instruction, the default value is 0 Byte12 2 The permission value of the erase command, the default value is 0 Byte14, Byte15 2 Reserved data, default is 0

[0075] That is to say, the electronic control unit partitions and stores the data according to the data security level, and determines the access rights for data processing corresponding to different data areas by setting the attribute fields in the data area address, thereby improving data security.

[0076] In actual applications, since the data security level of ordinary data is low, the security attributes of the ordinary data area storing ordinary data are also low, and access rights do not need to be set, and direct access is sufficient. Therefore, even if the data area address configured for the ordinary data area includes an attribute field corresponding to the data access instruction, the access right corresponding to the attribute field is direct access.

[0077] It should be noted that the information (including but not limited to vehicle information, identity information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0078] S102, determining whether there is a permission value corresponding to the data processing instruction according to the data area address, and if so, obtaining the permission value according to the data area address and the data processing instruction.

[0079] In the embodiment of the present application, considering that different data areas store data with different data security levels, each data area has different access rights for data processing, and the attribute field corresponding to the data processing instruction can be set by the data area address to identify the access rights for data processing. Therefore, it can be determined whether the data area address has the permission value corresponding to the data processing instruction to determine whether the data area has the access right to process the data.

[0080] Specifically, the attribute field included in the data area address is extracted according to the data processing instruction, and the permission value is obtained according to the attribute field.

[0081] As an example, if the data processing instruction is a read instruction and the data area is a low-sensitivity data area, the attribute field corresponding to the read instruction of the low-sensitivity data area can be extracted according to the read instruction as Byte8, and the permission value obtained according to Byte8 is 0.

[0082] As another example, if the data processing instruction is a write instruction and the data area is a high-sensitivity data area, the attribute field corresponding to the write instruction of the high-sensitivity data area can be extracted according to the write instruction as Byte10, and the permission value obtained according to Byte10 is 0.

[0083] In actual applications, if it is determined based on the data area address that it does not have the permission value corresponding to the data processing instruction, the data processing instruction is directly executed on the data area. In other words, although the data area address has an attribute field corresponding to the data processing instruction, the attribute field does not have a corresponding permission value, which means that the data security level of the data area is low, and there is no need to perform access permission control, and data processing can be performed directly. For example, the data in the ordinary data area does not involve privacy data and sensitive data, so its data security level is not high, and no security measures are taken. Data processing can be performed directly when necessary. Therefore, even if the data area address of the ordinary area includes the attribute field corresponding to the data processing instruction, the attribute field does not have a permission value. The data security levels of the high-sensitivity data area and the low-sensitivity data area are both high, and security measures need to be taken to control access control to data processing in the data area by setting the permission value of the attribute field corresponding to each data area address.

[0084] S103, obtaining a state machine value obtained based on identity authentication, comparing the authority value and the state machine value, and obtaining a comparison result.

[0085] In the embodiment of the present application, after setting the permission value of the access control corresponding to the data processing instruction of each data area, it is also necessary to verify the identity of the user to determine whether the identity of the user meets the permission requirements for data processing. Therefore, the state machine value obtained based on the identity authentication can be obtained, and the permission value and the state machine value can be compared to obtain a comparison result, which can be used to reflect whether the user has the access right to process the data in the data area.

[0086] Specifically, an identity authentication instruction can be obtained according to the data processing instruction, and the identity authentication instruction is used to perform identity authentication, obtain the verification result of the identity authentication, and modify the state machine value according to the verification result. In other words, the state machine value is modified and jumped according to the verification result of the identity authentication. For example, when the verification result is verification passed, the state machine value can be modified to 1 according to the verification result.

[0087] In an embodiment of the present application, the comparison result may be that the authority value is greater than or equal to the state machine value or the authority value is less than the state machine value.

[0088] In actual applications, there are many ways to perform identity authentication, which can adapt to various vehicle identity authentication requirements. With the identity authentication and access control system, access control can be implemented in a simple permission manner to prevent unauthorized access.

[0089] S104: If the comparison result satisfies the access permission control condition, the data processing instruction is executed according to the data processing condition corresponding to the data security level of the data area.

[0090] In an embodiment of the present application, after obtaining the comparison result of the permission value and the state machine value, it can be determined whether the comparison result meets the access permission control condition. If the comparison result meets the access permission control condition, it means that the user has the access permission to perform data processing on the data area, then the data processing instruction is executed according to the data processing condition corresponding to the data security level of the data area.

[0091] The access permission control condition can be determined according to the actual situation. As a possible implementation method, the access permission control condition is that the permission value is less than the state machine value. Therefore, if the comparison result is that the permission value is less than the state machine value, it means that the user has the access permission to process data in the data area, and the data processing instruction is executed according to the data processing condition corresponding to the data security level of the data area.

[0092] As an example, if the data processing instruction is a read instruction, and the data area is a low-sensitivity data area, the attribute field corresponding to the read instruction of the low-sensitivity data area extracted according to the read instruction is Byte8, and the permission value obtained according to Byte8 is 0. The state machine value obtained based on identity authentication is 1, and 1 is greater than 0, so the read instruction is executed according to the data processing condition corresponding to the data security level of the low-sensitivity data area.

[0093] The access permission control condition is that the permission value is less than the state machine value. If the comparison result is that the permission value is greater than or equal to the state machine value, it means that the user does not have the access permission to process data in the data area, and the data processing instruction will not be executed.

[0094] In actual applications, the access permission control condition can also be that the permission value is greater than the state machine value. In this case, the state machine value when the verification result is passed can be modified to 0, and the permission value can be set to a value greater than 0. When the comparison result is that the state machine value is less than the permission value, it means that the comparison result meets the access permission control condition.

[0095] In the embodiment of the present application, after determining that the comparison result satisfies the access right control condition, the data processing instruction can be executed according to the data processing condition corresponding to the data security level of the data area. Considering that data with a higher data security level requires more security measures, even if it is determined that the user has the access right to process the data in the data area, in order to further increase the security of the data, the data can be processed using the data processing condition corresponding to the data security level of the data area.

[0096] As a possible implementation method, the data area is a high-sensitivity data area, the data security level is a high security level, and the data processing conditions corresponding to the high security level include encryption and decryption processing conditions. If the comparison result meets the access permission control condition, the read instruction, write instruction and erase instruction are executed according to the encryption and decryption processing conditions corresponding to the high security level of the high-sensitivity data area. In other words, since most of the data stored in the high-sensitivity data area is important data such as privacy data and sensitive data, in addition to user identity authentication and access permission control, the data also needs to be encrypted and decrypted.

[0097] Specifically, the encryption and decryption processing conditions include encryption conditions. If the comparison result satisfies the access permission control condition and the data processing instruction is a write instruction, the write instruction is executed according to the encryption condition corresponding to the high security level of the high-sensitive data area, so that the target data corresponding to the write instruction is encrypted using the encryption condition and then stored in the high-sensitive data area. When writing data in the high-sensitive data area according to the encryption condition, the target data corresponding to the write instruction can be symmetrically encrypted according to the derived encryption key included in the encryption condition to obtain ciphertext data, and then the ciphertext data is stored in the high-sensitive data area.

[0098] That is to say, the data is encrypted when writing data to the high-sensitive data area, that is, the high-sensitive data area stores ciphertext data. For another example, when reading data from the high-sensitive data area, the stored ciphertext data can be decrypted. In order to further increase the data security of the high-sensitive data area, it is also possible to read the data after identity authentication meets the access permission control conditions when reading the data, and the read ciphertext data is not decrypted, that is, the ciphertext data is transmitted to the user, and the user is required to decrypt the ciphertext data by himself, so as to perform a secondary identity authentication on the user, thereby further improving data security.

[0099] As an example, the derived encryption key is Keyp, and the electronic control unit can use Keyp to encrypt the target data M using a symmetric algorithm (ECB) to obtain the ciphertext data C, where the encryption process is recorded as C=SymECB(M, Keyp), where the symmetric algorithm is not limited, and the commonly used Advanced Encryption Standard (AES) algorithm can be selected, or a national encryption algorithm such as SM1 or SM4 can be used.

[0100] Taking into account the security issues of encrypting the target data and storing it in a highly sensitive data area, in order to prevent the ciphertext data from being easily decrypted, a derived encryption key is used to encrypt the ciphertext data. The derived encryption key is obtained using the following steps. First, the initial key of the electronic control unit and the unique code of the electronic control unit can be obtained, and the target data corresponding to the write instruction can be hashed using the hash (HASH) algorithm to obtain a hash value. The initial data of the derived key is obtained by combining the unique code and the hash value, and the initial data of the derived key is symmetrically encrypted using the initial key to obtain a derived encryption key. In other words, when encrypting the target data, since the encryption key is a temporarily derived derived encryption key and the key is not transmitted to the outside world, the probability of the ciphertext data being cracked is reduced, further improving the security of the ciphertext data.

[0101] As an example, the initial key preset before the electronic control unit leaves the factory is Key and the unique code of the electronic control unit is SN. The target data M corresponding to the write instruction is hashed using the HASH algorithm to obtain a hash value of H1. The last 8 bytes of SN and the first 8 bytes of H1 are selected to obtain the initial data of the derived key as M1=SN(last 8 bytes)+H1(first 8 bytes). M1 is symmetrically encrypted using Key to obtain a derived encryption key of Keyp. The operation process is recorded as Keyp=SymECB(M1, Key).

[0102] In practical applications, data processing conditions can also be used to process data in low-sensitivity data areas with medium security levels. However, considering that low-sensitivity data areas with medium security levels have already used identity authentication to meet access permission control conditions as a security measure, if data processing conditions are also set for data areas with medium security levels, it will lead to a decrease in data processing efficiency. Therefore, considering the balance between data processing efficiency and security, low-sensitivity data areas can only use identity authentication to meet access permission control conditions as a security measure for data processing, and no additional data processing conditions may be used.

[0103] refer to Figure 2As shown, a schematic diagram of a data area security mechanism architecture provided by an embodiment of the present application is provided. Data security levels are divided according to data sources, characteristics and security attributes, and data areas are divided into ordinary data areas, low-sensitivity data areas and high-sensitivity data areas according to data security levels. Different data areas adopt different security mechanisms. According to the security requirements of the data, the ordinary data area is directly read without security protection. The low-sensitivity data area performs identity authentication and access permission control to ensure that the access to the data area is a legitimate visitor. The high-sensitivity data area adopts identity authentication and access permission control while also taking data encryption measures to ensure that the stored data is ciphertext data, and even if it is illegally obtained, the plaintext cannot be obtained, thereby ensuring the security of the data. Data classification and data storage areas are divided into different areas, and the security mechanisms of different data areas are different. This mechanism is safe and flexible, and can fully meet the automotive industry's security requirements and performance requirements for data, which can not only meet the security of sensitive data, but also meet the transmission performance requirements of entertainment data.

[0104] It can be seen from this that by grading data according to data security levels and storing data in partitions, and storing data in different data areas according to their security levels, both data security and data usability are guaranteed, taking into account both security and performance, and achieving a balance between security and usability.

[0105] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the method and computer program product according to various embodiments of the present application. In this regard, each box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the box can also occur in a sequence different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of the boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0106] In some embodiments, the server can communicate using any currently known or future developed network protocol such as HTTP (HyperText Transfer Protocol), and can be interconnected with any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), an internet (e.g., the Internet), and a peer-to-peer network (e.g., an ad hoc peer-to-peer network), as well as any currently known or future developed network.

[0107] Although operations are depicted in a particular order, this should not be understood as requiring that the operations be performed in the particular order shown or in a sequential order.Multitasking and parallel processing may be advantageous under certain circumstances.

[0108] It should be understood that the various steps described in the method implementation of the present application can be performed in different orders and / or performed in parallel. In addition, the method implementation may include additional steps and / or omit the steps shown. The scope of the present application is not limited in this respect.

[0109] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including, but not limited to, object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0110] Based on a data partition processing method provided in the above embodiment, an embodiment of the present application further provides a data partition processing device, and its working principle is described in detail below in conjunction with the accompanying drawings.

[0111] See also Figure 3 , which is a structural schematic diagram of a data partition processing device provided in an embodiment of the present application.

[0112] The data partition processing device 300 provided in this embodiment includes:

[0113] A first acquisition unit 310 is used to acquire a data processing instruction carrying an address of a data area, wherein the data processing instruction at least includes a read instruction, a write instruction and an erase instruction, and the data area is obtained according to the data security level;

[0114] A second acquisition unit 320, configured to determine whether there is a permission value corresponding to the data processing instruction according to the data area address, and if so, to acquire the permission value according to the data area address and the data processing instruction;

[0115] A third acquisition unit 330 is used to obtain a state machine value obtained based on identity authentication, compare the permission value with the state machine value, and obtain a comparison result;

[0116] The execution unit 340 is configured to execute a data processing instruction according to a data processing condition corresponding to the data security level of the data area if the comparison result satisfies the access permission control condition.

[0117] In some embodiments, the data area includes a high-sensitivity data area, the data security level includes a high security level, and the data processing conditions corresponding to the high security level include encryption and decryption processing conditions;

[0118] The execution unit 340 is used to:

[0119] If the comparison result satisfies the access permission control condition, the read instruction, the write instruction and the erase instruction are executed according to the encryption and decryption processing conditions corresponding to the high security level of the high-sensitive data area.

[0120] In some embodiments, the encryption and decryption processing conditions include encryption conditions;

[0121] The execution unit 340 is used to:

[0122] If the comparison result meets the access permission control condition and the data processing instruction is a write instruction, the write instruction is executed according to the encryption condition corresponding to the high security level of the high-sensitive data area, so that the target data corresponding to the write instruction is encrypted using the encryption condition and stored in the high-sensitive data area.

[0123] In some embodiments, the encryption conditions include deriving an encryption key;

[0124] The device also includes a key generating unit, the key generating unit is used to:

[0125] Obtaining an initial key of the electronic control unit and a unique code of the electronic control unit;

[0126] Perform hash operation on the target data corresponding to the write instruction using a hash algorithm to obtain a hash value;

[0127] Combining the unique code and the hash value to obtain initial data for deriving a key;

[0128] Using the initial key to symmetrically encrypt the initial data of the derived key to obtain the derived encryption key;

[0129] The execution unit 340 is used to:

[0130] Symmetrically encrypt the target data corresponding to the write instruction according to the derived encryption key corresponding to the high security level of the high-sensitive data area to obtain ciphertext data;

[0131] The ciphertext data is stored in the high-sensitivity data area.

[0132] In some embodiments, the access permission control condition is that the permission value is less than the state machine value;

[0133] The device also includes a termination unit, the termination unit is used to:

[0134] If the comparison result is that the permission value is greater than or equal to the state machine value, the data processing instruction is not executed.

[0135] In some embodiments, the apparatus further comprises a configuration unit, the configuration unit being configured to:

[0136] Determine the data security level based on the security attributes of the data;

[0137] A plurality of data areas in the electronic control unit are obtained according to the data security level division;

[0138] Configuring a data area address for each data area, wherein the data area address carries an attribute field corresponding to the data processing instruction;

[0139] The second acquiring unit 320 is configured to:

[0140] Extracting the attribute field included in the data area address according to the data processing instruction;

[0141] The authority value is obtained according to the attribute field.

[0142] In some embodiments, the apparatus further comprises a determining unit, the determining unit being configured to:

[0143] If it is determined according to the data area address that the data area does not have the permission value corresponding to the data processing instruction, the data processing instruction is directly executed on the data area.

[0144] The units involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of a unit does not, in some cases, constitute a limitation on the unit itself.

[0145] The names of the messages or information exchanged between multiple units in the embodiments of the present application are only used for illustrative purposes and are not used to limit the scope of these messages or information.

[0146] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0147] Based on the data partition processing method provided in the above embodiment, the embodiment of the present application further provides a data partition processing device, the data partition processing device comprising:

[0148] The processor and the memory may be one or more processors. In some embodiments of the present application, the processor and the memory may be connected via a bus or other means.

[0149] The memory may include a read-only memory and a random access memory, and provides instructions and data to the processor. A portion of the memory may also include an NVRAM. The memory stores an operating system and operating instructions, executable modules or data structures, or a subset thereof, or an extended set thereof, wherein the operating instructions may include various operating instructions for implementing various operations. The operating system may include various system programs for implementing various basic services and processing hardware-based tasks.

[0150] The processor controls the operation of the terminal device and may also be referred to as a CPU.

[0151] The method disclosed in the above embodiment of the present application can be applied to a processor or implemented by a processor. The processor can be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or an instruction in the form of software. The above processor can be a general-purpose processor, DSP, ASIC, FPGA or other programmable logic device, discrete gate or transistor logic device, discrete hardware component. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiment of the present application can be directly embodied as a hardware decoding processor to perform, or the hardware and software modules in the decoding processor can be combined to perform. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0152] The embodiment of the present application also provides a computer-readable medium for storing program code, where the program code is used to execute any one of the methods of the aforementioned embodiments.

[0153] In the context of the present application, a computer-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. A computer-readable medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. A more specific example of a computer-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0154] It should be noted that the computer-readable medium mentioned above in the present application may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present application, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The computer readable signal medium may also be any computer readable medium other than a computer readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0155] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.

[0156] The embodiment of the present application further provides a computer program product. When the computer program product is run on a terminal device, the terminal device executes any one of the implementation methods of the aforementioned embodiments.

[0157] In particular, according to an embodiment of the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present application includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network via a communication device, or installed from a storage device, or installed from a ROM. When the computer program is executed by a processing device, the above-mentioned functions defined in the method of the embodiment of the present application are executed.

[0158] Although the subject matter has been described in language specific to structural features and / or methodological logical actions, it should be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or actions described above. On the contrary, the specific features and actions described above are merely example forms of implementing the claims.

[0159] Although several specific implementation details are included in the above discussion, these should not be interpreted as limiting the scope of the present application. Certain features described in the context of a separate embodiment can also be implemented in a single embodiment in combination. On the contrary, the various features described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable sub-combination.

[0160] The above description is only a preferred embodiment of the present application and an explanation of the technical principles used. Those skilled in the art should understand that the scope of disclosure involved in the present application is not limited to the technical solution formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the above disclosed concept. For example, the above features are replaced with the technical features with similar functions disclosed in this application (but not limited to) by each other to form a technical solution.

Claims

1. A data partition processing method, characterized in that: Applied to an electronic control unit, the method comprises: Acquire a data processing instruction carrying an address of a data area, wherein the data processing instruction at least includes a read instruction, a write instruction, and an erase instruction, and the data area is obtained according to the data security level; Determine whether there is a permission value corresponding to the data processing instruction according to the data area address, and if so, obtain the permission value according to the data area address and the data processing instruction; Obtaining a state machine value obtained based on identity authentication, comparing the permission value with the state machine value, and obtaining a comparison result; If the comparison result satisfies the access permission control condition, the data processing instruction is executed according to the data processing condition corresponding to the data security level of the data area.

2. The method according to claim 1, characterized in that The data area includes a high-sensitivity data area, the data security level includes a high security level, and the data processing conditions corresponding to the high security level include encryption and decryption processing conditions; If the comparison result satisfies the access permission control condition, executing the data processing instruction according to the data processing condition corresponding to the data security level of the data area includes: If the comparison result satisfies the access permission control condition, the read instruction, the write instruction and the erase instruction are executed according to the encryption and decryption processing conditions corresponding to the high security level of the high-sensitive data area.

3. The method according to claim 2, characterized in that The encryption and decryption processing conditions include encryption conditions; If the comparison result satisfies the access permission control condition, executing the read instruction, the write instruction and the erase instruction according to the encryption and decryption processing condition corresponding to the high security level of the high-sensitive data area includes: If the comparison result meets the access permission control condition and the data processing instruction is a write instruction, the write instruction is executed according to the encryption condition corresponding to the high security level of the high-sensitive data area, so that the target data corresponding to the write instruction is encrypted using the encryption condition and stored in the high-sensitive data area.

4. The method according to claim 3, characterized in that The encryption conditions include a derived encryption key; The method further comprises: Obtaining an initial key of the electronic control unit and a unique code of the electronic control unit; Perform hash operation on the target data corresponding to the write instruction using a hash algorithm to obtain a hash value; Combining the unique code and the hash value to obtain initial data for deriving a key; Using the initial key to symmetrically encrypt the initial data of the derived key to obtain the derived encryption key; The executing the write instruction according to the encryption condition corresponding to the high security level of the high-sensitive data area, so as to encrypt the target data corresponding to the write instruction using the encryption condition and store it in the high-sensitive data area comprises: Symmetrically encrypt the target data corresponding to the write instruction according to the derived encryption key corresponding to the high security level of the high-sensitive data area to obtain ciphertext data; The ciphertext data is stored in the high-sensitivity data area.

5. The method according to claim 1, characterized in that The access permission control condition is that the permission value is less than the state machine value; The method further comprises: If the comparison result is that the permission value is greater than or equal to the state machine value, the data processing instruction is not executed.

6. The method according to claim 1, characterized in that The method further comprises: Determine the data security level based on the security attributes of the data; A plurality of data areas in the electronic control unit are obtained according to the data security level division; Configuring a data area address for each data area, wherein the data area address carries an attribute field corresponding to the data processing instruction; The obtaining the permission value according to the data area address and the data processing instruction comprises: Extracting the attribute field included in the data area address according to the data processing instruction; The authority value is obtained according to the attribute field.

7. The method according to claim 1, characterized in that The method further comprises: If it is determined according to the data area address that the data area does not have the permission value corresponding to the data processing instruction, the data processing instruction is directly executed on the data area.

8. A data partition processing device, characterized in that: The device comprises: A first acquisition unit is used to acquire a data processing instruction carrying an address of a data area, wherein the data processing instruction at least includes a read instruction, a write instruction and an erase instruction, and the data area is obtained according to the data security level; A second acquisition unit, configured to determine whether there is a permission value corresponding to the data processing instruction according to the data area address, and if so, to acquire the permission value according to the data area address and the data processing instruction; A third acquisition unit is used to obtain a state machine value obtained based on identity authentication, compare the authority value with the state machine value, and obtain a comparison result; The execution unit is used to execute the data processing instruction according to the data processing condition corresponding to the data security level of the data area if the comparison result meets the access permission control condition.

9. A data partition processing device, characterized in that: The device comprises: a processor and a memory; The memory is used to store instructions; The processor is used to execute the instructions in the memory to perform the method according to any one of claims 1 to 7.

10. A computer-readable medium, characterized in that The method comprises instructions which, when executed on a computer, cause the computer to execute the method according to any one of claims 1 to 7.

Images