Automobile AI model configuration parameter safety device, method and system

Abstract

The invention relates to an automobile AI model configuration parameter safety device, method and system, and the method comprises the steps: carrying out the two times of encryption of automobile AI model configuration parameters before the parameters are stored in a Flash module through setting a PUF unit and a Crypto assembly; and for the second time, the Crypto component carries out encryption processing by utilizing a physical unclonable key generated by the PUF unit to obtain the automobile AI model configuration parameters in a ciphertext form, and then the automobile AI model configuration parameters are stored in the Flash module. The physical unclonable key is derived after the PUF unit generates a unique PufKey data seed based on the circuit process deviation characteristic of the vehicle-mounted intelligent chip, a built-in exclusive secure storage unit for storing the PufKey data seed is not needed, the cost is low, the security level is greatly improved, the information security level of the vehicle-mounted intelligent chip is greatly improved, and the security level of the vehicle-mounted intelligent chip is greatly improved. And the operation efficiency is higher than that of the traditional technology.

Description

Technical Field

[0001] The present invention belongs to the field of automobile information security technology and relates to an automobile AI model configuration parameter security device, method and system. Background Art

[0002] With the development of automotive electronic technology, intelligence has become an important label for modern cars, and the demand for computing power in intelligent driving has driven the development of in-vehicle smart chips, making in-vehicle smart chips the computing cornerstone of the smart car era. At present, the industry often achieves the efficiency of AI (artificial intelligence) computing by adding neural network units, and how to ensure the security of important data assets such as automotive AI model configuration parameters is also particularly important.

[0003] Although it is possible to store keys through built-in dedicated security storage units and use cryptographic engines to encrypt and store important data assets such as automotive AI model configuration parameters, this requires the in-vehicle smart chip to have a built-in dedicated security storage unit and be equipped with isolation measures with sufficient security strength. However, for in-vehicle smart chips that do not have a separate information security subsystem, it is difficult to effectively ensure the security of important data assets such as automotive AI model configuration parameters. The information security subsystem is not only complex and costly in design, but also generally has low functional utilization. Summary of the invention

[0004] In response to the problems existing in the above-mentioned traditional methods, the present invention proposes an automobile AI model configuration parameter security device, an automobile AI model configuration parameter security processing method and an on-board intelligent chip system, which can greatly improve the information security level of the on-board intelligent chip and improve the computing efficiency without the need for a built-in complex information security subsystem.

[0005] In order to achieve the above objectives, the embodiments of the present invention adopt the following technical solutions:

[0006] On the one hand, a vehicle AI model configuration parameter security device is provided, comprising a Flash module, a PUF unit and an encryption and decryption component, wherein the encryption and decryption component comprises a PufKey derivation module and an encryption and decryption module; the Flash module, the PUF unit and the encryption and decryption component are connected via bus communication;

[0007] The PUF unit is used to generate a unique PufKey data seed based on the circuit process deviation characteristics of the on-board smart chip. The PufKey derivation module uses the PufKey data seed to derive a physical unclonable key. The encryption and decryption module is used to use the system key of the on-board smart chip to encrypt the input automotive AI model configuration parameters into a first encryption parameter, and then use the physical unclonable key to encrypt the first encryption parameter into a second encryption parameter. The Flash module is used to store the second encryption parameter.

[0008] In one embodiment, the PufKey derivation module uses the PufKey data seed to derive a physical unclonable key of a specific length through a key derivation function KDF.

[0009] In one embodiment, the encryption algorithm used by the encryption / decryption module includes an SM4 algorithm, a TDES algorithm, or an AES algorithm.

[0010] In one embodiment, the Flash module also stores a check value field corresponding to the automobile AI model configuration parameters; the check value field is used to ensure the integrity of the automobile AI model configuration parameters.

[0011] On the other hand, a method for safely processing the configuration parameters of an automobile AI model is also provided, which is applied to any of the above-mentioned automobile AI model configuration parameter safety devices, and the method for safely processing the configuration parameters of an automobile AI model comprises the steps of:

[0012] Obtain the input car AI model configuration parameters and the system key of the on-board smart chip;

[0013] Encrypting the vehicle AI model configuration parameter into a first encryption parameter using the system key;

[0014] Get the unique PufKey data seed of the vehicle-mounted smart chip and derive the physical unclonable key;

[0015] The first encryption parameter is encrypted into a second encryption parameter using a physical unclonable key and then stored in the Flash module.

[0016] In one embodiment, the above-mentioned automobile AI model configuration parameter security processing method further includes the steps of:

[0017] Performing hash cryptographic algorithm calculation on the automobile AI model configuration parameters to obtain a check value field corresponding to the automobile AI model configuration parameters;

[0018] The checksum field is stored in the Flash module.

[0019] On the other hand, a vehicle-mounted intelligent chip system is also provided, comprising a processor unit, a vehicle AI model calculation unit and any one of the above-mentioned vehicle AI model configuration parameter safety devices, wherein the processor unit, the vehicle AI model calculation unit and the vehicle AI model configuration parameter safety device are respectively connected via bus communication.

[0020] One of the above technical solutions has the following advantages and beneficial effects:

[0021] The above-mentioned automobile AI model configuration parameter security device, method and system encrypt the automobile AI model configuration parameters twice before storing them in the Flash module by setting the PUF unit and the Crypto component. The first time is to use the system key to encrypt the automobile AI model configuration parameters to obtain the first encrypted parameters, and the second time is to use the Crypto component to encrypt the automobile AI model configuration parameters in ciphertext form using the physical unclonable key generated by the PUF unit and then store them in the Flash module. The physical unclonable key is derived from the unique PufKey data seed generated by the PUF unit based on the circuit process deviation characteristics of the on-board smart chip. It has uniqueness and randomness, and does not require a built-in exclusive security storage unit to store the PufKey data seed. The cost is low and the confidentiality level is greatly improved, thereby greatly improving the information security level of the on-board smart chip. The device architecture is simple and easy to use, and the computing efficiency is higher than that of traditional technologies.

[0022] Compared with traditional technologies, the above solution has a simple computing process and does not require a dedicated secure storage unit, which greatly improves the information security level of the on-board smart chip system and can simultaneously meet its application requirements for high security, low cost and ease of use. The above solution can also greatly improve its computing efficiency by adopting a simple built-in hardware implementation method, and is more applicable to on-board application scenarios with high real-time requirements. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the conventional technology, the drawings required for use in the embodiments or the conventional technology descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0024] Figure 1 A schematic diagram of the module structure of a vehicle AI model configuration parameter safety device in one embodiment;

[0025] Figure 2 A schematic diagram of the module structure of a vehicle-mounted intelligent chip system in one embodiment;

[0026] Figure 3 A flowchart of a method for safely processing automotive AI model configuration parameters in one embodiment. DETAILED DESCRIPTION

[0027] In order to make the purpose, technical scheme and advantages of the present invention clearer, the present invention is further described in detail below in conjunction with the accompanying drawings and Examples. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention. Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those generally understood by those skilled in the art of the present invention. The terms used in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention.

[0028] It should be noted that the reference to "embodiment" in this article means that the specific features, structures or characteristics described in conjunction with the embodiment may be included in at least one embodiment of the present invention. The presentation of this phrase at various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It will be appreciated by those skilled in the art that the embodiments described herein may be combined with other embodiments. The term "and / or" used in the specification of the present invention and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, and includes these combinations.

[0029] The following will describe the implementation of the present invention in detail with reference to the accompanying drawings in the embodiment diagram of the present invention.

[0030] In order to effectively protect the information security of on-board smart chips, the technical solution given in this manual is designed based on PUF (physically unclonable function). There is no need to store keys in a built-in exclusive security storage unit, thereby reducing the demand for exclusive security storage units. At the same time, the use of built-in hardware implementation greatly improves computing efficiency.

[0031] In one embodiment, Figure 1 As shown, a car AI model configuration parameter security device is provided, including a Flash module, a PUF unit and an encryption and decryption component. The encryption and decryption component includes a PufKey derivation module and an encryption and decryption module. The Flash module, the PUF unit and the encryption and decryption component are connected through bus communication. The PUF unit is used to generate a unique PufKey data seed according to the circuit process deviation characteristics of the on-board smart chip. The PufKey derivation module uses the PufKey data seed to derive a physical unclonable key. The encryption and decryption module is used to use the system key of the on-board smart chip to encrypt the input car AI model configuration parameter into a first encryption parameter, and then use the physical unclonable key to encrypt the first encryption parameter into a second encryption parameter. The Flash module is used to store the second encryption parameter.

[0032] It can be understood that the automotive AI model configuration parameter security device includes a Flash module, a PUF unit and an encryption and decryption component (referred to as a Crypto component). The Crypto component includes a PufKey derivation module and an encryption and decryption module (ie, a D / E operation module).

[0033] When using the automotive smart chip, the automotive AI model configuration parameters (denoted as Mp) can be input through the device interface. The configuration parameters Mp are encrypted using the system key (denoted as SysKey) to obtain the first encryption parameter Cp1=Enc(SysKey; Mp), wherein Enc() represents the existing encryption operation in this field; before the first encryption parameter Cp1 is stored in the Flash module of the automotive smart chip, the Crypto component uses the unique PufKey data seed (denoted as PufSeed) obtained by the PUF unit to derive the physical unclonable key (denoted as PufKey) for encryption, and obtains the second encryption parameter Cp2=Enc(PufKey; Dec(SysKey; Cp1)), so that the automotive AI model configuration parameters (i.e., the second encryption parameter Cp2) are stored in the Flash module in ciphertext form, wherein Dec() represents the existing decryption operation in this field.

[0034] When the automobile AI model calculation unit needs to load and use the automobile AI model configuration parameters, the automobile AI model configuration parameters Dec (PufKey; Cp2) are first restored from the second encryption parameter Cp2 and configured into the corresponding register of the automobile smart chip. The processor unit of the automobile smart chip schedules the automobile AI model calculation unit to start the calculation operation, and the automobile AI model processing data (recorded as Token) input from the chip interface executes the existing AI calculation. After the AI ​​calculation is completed, the automobile AI model calculation results are output from the chip interface.

[0035] The above-mentioned automobile AI model configuration parameter security device encrypts the automobile AI model configuration parameters twice before storing them in the Flash module by setting the PUF unit and the Crypto component. The first time is to use the system key to encrypt the automobile AI model configuration parameters to obtain the first encrypted parameters, and the second time is to use the Crypto component to encrypt the physical unclonable key generated by the PUF unit to obtain the automobile AI model configuration parameters in ciphertext form and then store them in the Flash module. Among them, the physical unclonable key is derived from the unique PufKey data seed generated by the PUF unit based on the circuit process deviation characteristics of the on-board smart chip. It has uniqueness and randomness, and does not require a built-in exclusive security storage unit to store the PufKey data seed. The cost is low and the confidentiality level is greatly improved, thereby greatly improving the information security level of the on-board smart chip. The device architecture is simple and easy to use, and the computing efficiency is higher than traditional technology.

[0036] Compared with traditional technologies, the above solution has a simple computing process and does not require a dedicated secure storage unit, which greatly improves the information security level of the on-board intelligent chip system and can simultaneously meet its application requirements for high security, low cost and ease of use; the above solution adopts a simple built-in hardware implementation method, which can simultaneously meet the confidentiality and integrity requirements of important data assets such as automotive AI model configuration parameters, and can also greatly improve its computing efficiency, and is more applicable to on-board application scenarios with high real-time requirements.

[0037] It should be noted that the PUF unit can generate a unique PufKey data seed based on the circuit process deviation characteristics of the on-board smart chip, so that the PufKey derivation module can derive a physically unclonable key based on this; the PUF unit can be implemented using the existing PufKey data seed generation method, such as using the delay difference caused by the circuit process deviation, and then using the conventional encoding and decoding algorithm to obtain a specific value, which can be used as the unique PufKey data seed. The special properties of the PUF unit can effectively ensure that the PufKey data seeds of different on-board smart chips are different, and are automatically generated when the on-board smart chip is powered on (using the existing PUF technology), and there is no need to build in a dedicated secure storage unit to store the PufKey data seed.

[0038] In one embodiment, the PufKey derivation module uses the PufKey data seed to derive a physical unclonable key of a specific length through a key derivation function KDF.

[0039] It can be understood that the derivation of the physical unclonable key PufKey can be achieved by constructing a key derivation function (such as KDF(PufSeed)) to obtain a key byte PufKey of a specific length to match the calculation requirements of the D / E operation module. The key derivation function KDF uses multiple salting and iterations to increase the security of key generation, that is, KDF(PufSeed) = Iter(Salt(PufSeed)), wherein Iter represents iterative calculation, and Salt represents the randomly generated salt value used in the hash calculation process. The value of the specific length of the key byte PufKey is related to the algorithm type supported by the D / E operation module. For example, according to the supported algorithm type, the value can be but is not limited to 128Bytes, 192Bytes or 256Bytes.

[0040] In one embodiment, the encryption algorithm used by the encryption / decryption module includes an SM4 algorithm, a TDES algorithm, or an AES algorithm.

[0041] It can be understood that the implementation form of the D / E operation module can be implemented by existing hardware circuits in this field, or by existing software algorithm libraries in this field. For example, in the algorithm category of D / E operation, national secret algorithms (such as SM4) or international algorithms (such as TDES / AES) can be used, and these algorithms implement protection measures against electrical attacks, which can provide additional protection capabilities for the security of the automotive AI model configuration parameters of the on-board smart chip.

[0042] In one embodiment, the Flash module also stores a check value field corresponding to the automobile AI model configuration parameters; the check value field is used to ensure the integrity of the automobile AI model configuration parameters.

[0043] It can be understood that in addition to the automobile AI model configuration parameters (i.e., the second encryption parameter Cp2) in ciphertext form stored in the Flash module, it can also support writing with a check value field, such as performing any type of existing hash cryptographic algorithm calculation on the automobile AI model configuration parameters to obtain a check value field corresponding to the automobile AI model configuration parameters, and storing the check value field together with the automobile AI model configuration parameters in ciphertext form in the Flash module. Accordingly, when the automobile AI model calculation unit needs to load the configuration parameters, it first performs a hash cryptographic algorithm calculation on the automobile AI model configuration parameters in ciphertext form to obtain the check value field, and then compares it with the check value field stored in the Flash module to ensure the integrity of the automobile AI model configuration parameters, which can simultaneously meet the confidentiality and integrity requirements of important data assets such as automobile AI model configuration parameters.

[0044] In one embodiment, Figure 2 As shown, a vehicle-mounted intelligent chip system is also provided, including a processor unit, a vehicle AI model calculation unit and any one of the above-mentioned vehicle AI model configuration parameter safety devices, and the processor unit, the vehicle AI model calculation unit and the vehicle AI model configuration parameter safety device are respectively connected through bus communication.

[0045] It can be understood that the vehicle-mounted intelligent chip system can specifically include a processor unit, a car AI model calculation unit, a Flash module, a PUF unit and a Crypto component. The processor unit, the car AI model calculation unit, the Flash module, the PUF unit and the Crypto component are respectively connected through bus communication.

[0046] Among them, the processor unit is used for system resource scheduling of the entire on-board smart chip and can perform general operations. The automotive AI model calculation unit is used to perform existing AI calculations on the automotive AI model processing data (Token) and output the automotive AI model calculation results. The Flash module is a general non-volatile memory that realizes the storage of important data assets such as automotive AI model configuration parameters. The PUF unit can automatically generate a unique PufKey data seed based on the circuit process deviation characteristics of the on-board smart chip. The Crypto component is used to derive the physical unclonable key PufKey based on the PufKey data seed, and use the physical unclonable key PufKey to perform encryption and decryption operations on the first encryption parameter Cp1, and obtain the second encryption parameter Cp2 and store it in the Flash module. The bus is a data transmission pipeline in the on-board smart chip system. For example, the automotive AI model configuration parameters parsed from the Flash module can be transmitted to the corresponding registers through the bus for use by the automotive AI model calculation unit.

[0047] The above-mentioned on-vehicle intelligent chip system, by applying the above-mentioned automobile AI model configuration parameter security device, compared with the traditional technology, the above-mentioned solution has a simple operation process and does not require a dedicated security storage unit, which greatly improves the information security level of the on-vehicle intelligent chip system and can simultaneously meet its application requirements for high security, low cost and ease of use; the above-mentioned solution can also greatly improve its computing efficiency by adopting a simple built-in hardware implementation method, and is more applicable to on-vehicle application scenarios with high real-time requirements.

[0048] It can be understood that for specific explanations of the on-board intelligent chip system, please refer to the corresponding limitations in the various embodiments of the automobile AI model configuration parameter safety device mentioned above, and no further details will be given here.

[0049] In one embodiment, Figure 3 As shown, a method for safely processing the configuration parameters of an automobile AI model is provided, which is applied to the above-mentioned automobile AI model configuration parameter safety device. The method for safely processing the configuration parameters of an automobile AI model may include the following processing steps S10 to S16:

[0050] S10, obtaining input automobile AI model configuration parameters and a system key of the vehicle-mounted smart chip;

[0051] S12, encrypting the vehicle AI model configuration parameter into a first encryption parameter using the system key;

[0052] S14, obtaining the unique PufKey data seed of the vehicle-mounted smart chip and deriving a physical unclonable key;

[0053] S16, using a physically unclonable key to encrypt the first encryption parameter into a second encryption parameter and then storing the second encryption parameter in a Flash module.

[0054] The above-mentioned automobile AI model configuration parameter security processing method encrypts the automobile AI model configuration parameters twice before storing them in the Flash module by setting the PUF unit and the Crypto component. The first time is to use the system key to encrypt the automobile AI model configuration parameters to obtain the first encrypted parameters, and the second time is to use the Crypto component to encrypt the automobile AI model configuration parameters in ciphertext form using the physical unclonable key generated by the PUF unit and then store them in the Flash module. Among them, the physical unclonable key is derived from the unique PufKey data seed generated by the PUF unit based on the circuit process deviation characteristics of the on-board smart chip. It has uniqueness and randomness, and there is no need to build-in a dedicated security storage unit to store the PufKey data seed. The cost is low and the confidentiality level is greatly improved, thereby greatly improving the information security level of the on-board smart chip. The device architecture is simple and easy to use, and the computing efficiency is higher than traditional technology.

[0055] Compared with traditional technologies, the above solution has a simple computing process and does not require a dedicated secure storage unit, which greatly improves the information security level of the on-board smart chip system and can simultaneously meet its application requirements for high security, low cost and ease of use. The above solution can also greatly improve its computing efficiency by adopting a simple built-in hardware implementation method, and is more applicable to on-board application scenarios with high real-time requirements.

[0056] In one embodiment, the above-mentioned automobile AI model configuration parameter security processing method may also include the following processing steps:

[0057] Performing hash cryptographic algorithm calculation on the automobile AI model configuration parameters to obtain a check value field corresponding to the automobile AI model configuration parameters;

[0058] The checksum field is stored in the Flash module.

[0059] It can be understood that for the specific limitations of the method for safely processing the configuration parameters of the automobile AI model, please refer to the corresponding limitations of the automobile AI model configuration parameter safety device mentioned above, and no further details will be given here.

[0060] It should be understood that although Figure 3 The steps in the method are shown in sequence as indicated by the arrows, but the steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified in this document, there is no strict order restriction for the execution of the steps, and the steps can be executed in other orders. Figure 3At least part of the steps may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequentially, but can be executed in turn or alternately with other steps or at least part of the sub-steps or stages of other steps.

[0061] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus dynamic random access memory (RambusDRAM, referred to as RDRAM) and interface dynamic random access memory (DRDRAM).

[0062] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0063] The above embodiments only express several implementation methods of the present invention, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of protection of the invention. It should be pointed out that, for those of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present invention, which all belong to the scope of protection of the present invention. Therefore, the scope of protection of the present invention shall be subject to the attached claims.

Claims

1. An automobile AI model configuration parameter safety device, characterized in that: It includes a Flash module, a PUF unit and an encryption and decryption component, wherein the encryption and decryption component includes a PufKey derivation module and an encryption and decryption module; the Flash module, the PUF unit and the encryption and decryption component are connected through bus communication; The PUF unit is used to generate a unique PufKey data seed according to the circuit process deviation characteristics of the on-board smart chip. The PufKey derivation module uses the PufKey data seed to derive a physical unclonable key. The encryption and decryption module is used to use the system key of the on-board smart chip to encrypt the input automobile AI model configuration parameters into a first encryption parameter, and then use the physical unclonable key to encrypt the first encryption parameter into a second encryption parameter. The Flash module is used to store the second encryption parameter.

2. The automotive AI model configuration parameter safety device according to claim 1, characterized in that: The PufKey derivation module uses the PufKey data seed to derive the physical unclonable key of a specific length through a key derivation function KDF.

3. The automotive AI model configuration parameter security device according to claim 1, characterized in that: The encryption algorithm adopted by the encryption / decryption module includes SM4 algorithm, TDES algorithm or AES algorithm.

4. The automotive AI model configuration parameter security device according to any one of claims 1 to 3, characterized in that: The Flash module also stores a check value field corresponding to the automobile AI model configuration parameters; the check value field is used to ensure the integrity of the automobile AI model configuration parameters.

5. A method for safely processing configuration parameters of an automobile AI model, characterized in that: The automobile AI model configuration parameter security device applied to any one of claims 1 to 4, the automobile AI model configuration parameter security processing method comprises the steps of: Obtain the input car AI model configuration parameters and the system key of the on-board smart chip; Encrypting the automobile AI model configuration parameter into a first encryption parameter using the system key; Obtain the unique PufKey data seed of the vehicle-mounted smart chip and derive a physical unclonable key; The first encryption parameter is encrypted into a second encryption parameter by using the physical unclonable key and then stored in the Flash module.

6. The method for safely processing the configuration parameters of an automobile AI model according to claim 5, characterized in that: Also includes the steps: Performing a hash cryptographic algorithm calculation on the automobile AI model configuration parameter to obtain a check value field corresponding to the automobile AI model configuration parameter; The check value field is stored in the Flash module.

7. A vehicle-mounted intelligent chip system, characterized in that: It comprises a processor unit, an automobile AI model calculation unit and the automobile AI model configuration parameter safety device according to any one of claims 1 to 4, wherein the processor unit, the automobile AI model calculation unit and the automobile AI model configuration parameter safety device are respectively connected via bus communication.

Images