Credibility calculation method, electronic equipment and storage medium

Abstract

The invention provides a credibility calculation method, an electronic device and a storage medium, and is applied to a vehicle edge gateway, the vehicle edge gateway is in communication connection with a network terminal, and the method comprises the following steps: obtaining a historical credibility value, a first credibility value, a second credibility value and a third credibility value, and calculating a fourth credibility value based on the historical credibility value, the first credibility value, the second credibility value and the third credibility value, the fourth credibility value being used for representing the credibility value of the credibility measurement performed by the vehicle edge gateway on the network terminal this time. According to the method provided by the invention, the problem that the real credibility of the network terminal equipment cannot be accurately reflected under the condition that the vehicle edge gateway is hostile attacked can be solved.

Description

Technical Field

[0001] The present application relates to the field of communications, and in particular to a credibility calculation method, an electronic device, and a storage medium. Background Art

[0002] In the existing technology, trusted measurement technology, as the core technology of trusted computing, is used to measure the degree of compliance between the expected description of the computing platform and the actual behavior of the platform, and is a representative technology of active security. Traditional trusted measurement technology is mainly based on the technical characteristics of the device, such as hardware configuration, software version, etc., but this technology is easily simulated or forged by attackers and cannot accurately reflect the true trustworthiness of the device. Due to the complex and changeable environment faced by vehicle IoT terminal devices, the devices themselves are also subject to resource constraints such as size, weight, power consumption, computing power, and storage capacity. As a result, traditional security measures such as data backup, log auditing, and access control can no longer meet the security needs of terminal devices and their networks.

[0003] In view of this, the trust evaluation-based vehicle IoT trust measurement technology proposed in this invention starts from the historical behavior of the device, the trust value of the entity, etc., and obtains the trustworthiness of the device by comprehensively analyzing the trust measurement indicators of the device. By building a security-enhanced vehicle IoT terminal, the calculation process is measurable and controllable without interference, so that the calculation results are always consistent with expectations. Summary of the invention

[0004] The present application provides a credibility calculation method, an electronic device and a storage medium, which are helpful to solve the problem that the vehicle edge gateway cannot accurately reflect the true credibility of the network terminal device when it is attacked maliciously.

[0005] In a first aspect, the present application provides a credibility calculation method, comprising:

[0006] Obtain a historical credibility value, a first credibility value, a second credibility value, and a third credibility value, wherein the historical credibility value is used to characterize the historical credibility value of the vehicle edge gateway performing credibility measurement on the network terminal, the first credibility value is used to characterize the credibility value of the network terminal, the second credibility value is used to characterize the credibility value of the friend node of the vehicle edge gateway performing credibility measurement on the network terminal, and the third credibility value is used to characterize the credibility value of the vehicle edge gateway performing credibility measurement on the network terminal within the same trust domain; based on the historical credibility value, the first credibility value, the second credibility value, and the third credibility value, calculate a fourth credibility value, and the fourth credibility value is used to characterize the credibility value of the vehicle edge gateway performing credibility measurement on the network terminal this time.

[0007] In one possible implementation, the first credibility value includes a first network-end credibility value and a first evaluation credibility value, the first network-end credibility value is used to characterize the credibility value of the network terminal itself, and the first evaluation credibility value is used to characterize the credibility value of the credibility measurement of the network terminal by multiple vehicle edge gateways.

[0008] In one possible implementation, according to T A (B)1=H×T_old A (B)+I×T_Config(B)+J×T_Friend A (B)+K×T_Vicinage A (B) Calculating the fourth credibility value, where T A (B) 1 is the fourth credibility value, T_old A (B) is the historical credibility value, T_Config(B) is the first network credibility value, T_Friend A (B) is the second credibility value, T_Vicinage A (B) is the third credibility value.

[0009] In one possible implementation, according to the formula Confirming the second credibility value, wherein, is the credibility value measured by the i-th friend node of the vehicle edge gateway to the network terminal, λ i is the corresponding weight value of the i-th friend node.

[0010] In one possible implementation, according to the formula Confirming the third credibility value, wherein, is the credibility value measured by the i-th vehicle edge gateway to the network terminal in the same trust domain, α i is the corresponding weight value of the i-th vehicle edge gateway.

[0011] In one possible implementation, according to the formula Determine the first network terminal credibility value, wherein T_Config(B) is the credibility of the network terminal itself, Integrity(BIOS) is the integrity of the network terminal BIOS, Integrity(OS loader) is the integrity of the network terminal OS loader, Integrity(OS) is the integrity of the network terminal OS, Integrity(KEY) is the integrity of the key app of the network terminal, and integrity(app i) is the integrity of the common app of the network terminal.

[0012] In one possible implementation, according to the formula Determine the first evaluation credibility value, wherein, is the credibility value of the evaluation of the current behavior of the network terminal by the i-th vehicle edge gateway that has accessed the network terminal, β i is the corresponding weight value of the i-th vehicle edge gateway.

[0013] In a second aspect, an embodiment of the present invention provides a credibility calculation device, including:

[0014] An acquisition module, the acquisition module is used to acquire a historical credibility value, a first credibility value, a second credibility value and a third credibility value, the historical credibility value is used to characterize the historical credibility value of the vehicle edge gateway performing credibility measurement on the network terminal, the first credibility value is used to characterize the credibility value of the network terminal, the second credibility value is used to characterize the credibility value of the friend node of the vehicle edge gateway performing credibility measurement on the network terminal, and the third credibility value is used to characterize the credibility value of the vehicle edge gateway performing credibility measurement on the network terminal within the same trust domain;

[0015] A calculation module, the calculation module is used to calculate a fourth credibility value based on the historical credibility value, the first credibility value, the second credibility value and the third credibility value, and the fourth credibility value is used to characterize the credibility value of the vehicle edge gateway performing credibility measurement on the network terminal this time.

[0016] In one possible implementation, the first credibility value includes a first network-end credibility value and a first evaluation credibility value, the first network-end credibility value is used to characterize the credibility value of the network terminal itself, and the first evaluation credibility value is used to characterize the credibility value of the credibility measurement of the network terminal by multiple vehicle edge gateways.

[0017] In one possible implementation, the calculation module is further configured to calculate the A (B)1=H×T_old A (B)+I×T_Config(B)+J×T_Friend A (B)+K×T_Vicinage A (B) Calculating the fourth credibility value, where T A (B) 1 is the fourth credibility value, T_old A (B) is the historical credibility value, T_Config(B) is the first network credibility value, T_FriendA (B) is the second credibility value, T_Vicinage A (B) is the third credibility value.

[0018] In one possible implementation, the computing device further includes a confirmation module, which is configured to: Confirming the second credibility value, wherein, is the credibility value measured by the i-th friend node of the vehicle edge gateway to the network terminal, λ i is the corresponding weight value of the i-th friend node.

[0019] In one possible implementation, the confirmation module is used to Confirming the third credibility value, wherein, is the credibility value measured by the i-th vehicle edge gateway to the network terminal in the same trust domain, α i is the corresponding weight value of the i-th vehicle edge gateway.

[0020] In one possible implementation, the computing device further includes a determining module, wherein the determining module is configured to determine the Determine the first network terminal credibility value, wherein T_Config(B) is the credibility of the network terminal itself, Integrity(BIOS) is the integrity of the network terminal BIOS, Integrity(OSloader) is the integrity of the network terminal OS loader, Integrity(OS) is the integrity of the network terminal OS, Integrity(KEY) is the integrity of the key app of the network terminal, and integrity(app i ) is the integrity of the common app of the network terminal.

[0021] In one possible implementation, the determining module is further configured to: Determine the first evaluation credibility value, wherein, is the credibility value of the evaluation of the current behavior of the network terminal by the i-th vehicle edge gateway that has accessed the network terminal, β i is the corresponding weight value of the i-th vehicle edge gateway.

[0022] In a third aspect, the present application provides an electronic device, comprising: a processor and a memory, wherein the memory is used to store a computer program; the processor is used to run the computer program to implement the method for calculating the credibility as described in the first aspect.

[0023] In a fourth aspect, the present application provides a computer-readable storage medium, in which a computer program is stored. When the computer-readable storage medium is executed on a computer, the computer implements the method for calculating the credibility as described in the first aspect.

[0024] The present application provides a method for calculating credibility, which is applied to a vehicle edge gateway, wherein the vehicle edge gateway is in communication connection with a network terminal, and the method includes: obtaining a historical credibility value, a first credibility value, a second credibility value, and a third credibility value, and calculating a fourth credibility value based on the historical credibility value, the first credibility value, the second credibility value, and the third credibility value, wherein the fourth credibility value is used to characterize the credibility value of the vehicle edge gateway for the network terminal in this credibility measurement. The method provided by the present application helps to solve the problem that the vehicle edge gateway cannot accurately reflect the true credibility of the network terminal device when it is attacked maliciously. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 A flow chart of a method for calculating credibility provided in an embodiment of the present application;

[0026] Figure 2 A schematic diagram of the structure of a credibility calculation device provided in an embodiment of the present application;

[0027] Figure 3 This is a schematic diagram of the structure of an embodiment of the electronic device of the present application. DETAILED DESCRIPTION

[0028] In the embodiments of the present application, unless otherwise specified, the character " / " indicates that the objects before and after the association are in an or relationship. For example, A / B can represent A or B. "And / or" describes the association relationship of the associated objects, indicating that three relationships can exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone.

[0029] It should be pointed out that the words "first", "second", etc. involved in the embodiments of the present application are only used to distinguish the description purpose, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated, nor can they be understood as indicating or implying order.

[0030] In the embodiments of the present application, "at least one" refers to one or more, and "plurality" refers to two or more. In addition, "at least one of the following" or similar expressions refers to any combination of these items, which may include any combination of single items or plural items. For example, at least one of A, B, or C may represent: A, B, C, A and B, A and C, B and C, or A, B and C. Among them, each of A, B, and C may be an element itself, or a set containing one or more elements.

[0031] In the embodiments of the present application, "exemplary", "in some embodiments", "in another embodiment", etc. are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" in the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of the word "exemplary" is intended to present concepts in a concrete way.

[0032] In the embodiments of the present application, "of", "corresponding", and "corresponding" can sometimes be used interchangeably. It should be noted that when the distinction between them is not emphasized, the meanings to be expressed are consistent. In the embodiments of the present application, communication and transmission can sometimes be used interchangeably. It should be noted that when the distinction between them is not emphasized, the meanings to be expressed are consistent. For example, transmission can include sending and / or receiving, which can be a noun or a verb.

[0033] The equal to involved in the embodiments of the present application can be used in conjunction with greater than, and is applicable to the technical solution adopted when greater than, and can also be used in conjunction with less than, and is applicable to the technical solution adopted when less than. It should be noted that when equal to is used in conjunction with greater than, it cannot be used in conjunction with less than; when equal to is used in conjunction with less than, it cannot be used in conjunction with greater than.

[0034] Due to the complex and ever-changing environment faced by vehicle IoT terminal devices, the devices themselves are also subject to resource constraints such as size, weight, power consumption, computing power, and storage capacity. As a result, traditional security measures such as data backup, log auditing, and access control can no longer meet the security needs of terminal devices and their networks.

[0035] Based on the above problems, an embodiment of the present application proposes a method for calculating credibility, which is applied to a vehicle edge gateway device.

[0036] Now combined Figure 1 The method for calculating the credibility provided in the embodiment of the present application is described.

[0037] like Figure 1 The figure is a flow chart of an embodiment of a method for calculating the credibility provided by the present application, which specifically includes the following steps:

[0038] Step S110, obtaining a historical credibility value, a first credibility value, a second credibility value, and a third credibility value.

[0039] Specifically, an embodiment of the present application proposes that the vehicle edge gateway obtains a historical credibility value, a first credibility value, a second credibility value and a third credibility value, wherein the historical credibility value is used to characterize the historical credibility value of the vehicle edge gateway for trustworthy measurement of the network terminal. The first credibility value is used to characterize the credibility value of the network terminal, wherein the first credibility value includes a first network-end credibility value and a first evaluation credibility value, the first network-end credibility value is used to characterize the credibility value of the network terminal itself, and the first evaluation credibility value is used to characterize the credibility value of multiple vehicle edge gateways for trustworthy measurement of the network terminal; the second credibility value is used to characterize the credibility value of the friend node of the vehicle edge gateway for trustworthy measurement of the network terminal; the third credibility value is used to characterize the credibility value of the vehicle edge gateway within the same trust domain for trustworthy measurement of the network terminal.

[0040] Among them, the vehicle edge gateway proposed in this application is a device located at the edge of the network. It integrates the functions of data collection, processing and transmission, and is located between the device layer such as sensors and actuators and the cloud computing platform, playing the role of a bridge. The edge gateway can achieve seamless docking and efficient processing of data, has the ability to respond to local device data requests in real time, and performs preliminary processing and analysis of data through built-in algorithms to improve the efficiency and accuracy of data processing.

[0041] Among them, the network terminal is a device that provides services under various network standards for the vehicle edge gateway device. Specifically, the network terminal can be a device in the core network (Core). Specifically, the network terminal can be responsible for maintaining the subscription data of the mobile network, managing the network elements of the mobile network, and providing session management, mobility management, policy management, security authentication and other functions for the vehicle edge gateway device. For example, when the vehicle edge gateway device is attached, the vehicle edge gateway device is provided with network access authentication; when the vehicle edge gateway device has a service request, the vehicle edge gateway is allocated network resources; when the vehicle edge gateway device moves, the vehicle edge gateway device is updated with network resources; when the vehicle edge gateway device is idle, the vehicle edge gateway device is provided with a fast recovery mechanism; when the vehicle edge gateway device is detached, the vehicle edge gateway device is released with network resources; when the vehicle edge gateway device has business data, the vehicle edge gateway device is provided with data routing functions. The network terminal proposed in the embodiments of the present application may include a vehicle Internet of Things network terminal.

[0042] Furthermore, the embodiments in this application propose that according to the formula Confirming the second credibility value, wherein, is the credibility value measured by the i-th friend node of the vehicle edge gateway to the network terminal, λ i is the corresponding weight value of the i-th friend node. The embodiments of the present application do not specifically limit the above friend nodes.

[0043] Next, the embodiment in this application proposes according to the formula Confirm the third credibility value. is the credibility value measured by the i-th vehicle edge gateway to the network terminal in the same trust domain, α i is the corresponding weight value of the i-th vehicle edge gateway. i α i =1, it can be understood that the weights of all vehicle edge gateways in the same trust domain are averaged by default. The same trust domain proposed in the embodiment of the present application refers to a specific geographical, administrative or logical boundary in the vehicle Internet of Things, in which all vehicles and related equipment follow the same trust and management policies. In such a trust domain, communication and data exchange between vehicles can be more secure and efficient because they are assumed to be trusted. In the same trust domain, vehicles can freely share sensitive information such as location data, speed, driving behavior and other information to improve road safety, optimize traffic flow or provide other value-added services.

[0044] Furthermore, the embodiments in this application propose that according to the formula Determine the first network terminal credibility value. Wherein, T_Config(B) is the credibility of the network terminal itself, Integrity(BIOS) is the integrity of the network terminal BIOS, Integrity(OS loader) is the integrity of the network terminal OS loader, Integrity(OS) is the integrity of the network terminal OS, Integrity(KEY) is the integrity of the key app of the network terminal, and integrity(app i ) is the integrity of the common app of the network terminal. Wherein, the value of integrity is 0 or 1. It can be understood that according to the above formula, Integrity(BIOS), Integrity(OS loader), Integrity(OS), Integrity(KEY) and integrity(app i ) to calculate T_Config(B), that is, if any one of the integrity devices other than ordinary apps is incomplete, it cannot be trusted. After all devices other than ordinary apps are complete, the integrity of the network terminal itself is calculated based on the proportion of ordinary apps.

[0045] Furthermore, the embodiments in this application propose that according to the formula Determine a first evaluation credibility value. is the credibility value of the evaluation of the current behavior of the network terminal by the i-th vehicle edge gateway that has accessed the network terminal, β i is the corresponding weight value of the i-th vehicle edge gateway, and the default is the weight average of all vehicle edge gateways that have been connected to the network terminal.

[0046] S120, calculating a fourth credibility value based on the historical credibility value, the first credibility value, the second credibility value, and the third credibility value.

[0047] Specifically, an embodiment of the present application proposes to calculate a fourth credibility value based on the historical credibility value, the first credibility value, the second credibility value, and the third credibility value. Optionally, an embodiment of the present application proposes to calculate a fourth credibility value based on the historical credibility value, the first credibility value, the second credibility value, and the third credibility value as follows:

[0048] T A (B)1=H×T_old A (B)+I×T_Config(B)+J×T_Friend A (B)+K×T_Vicinage A (B)

[0049] Among them, T A (B) 1 is the fourth credibility value, T_old A (B) is the historical credibility value, T_Config(B) is the credibility value of the first network end, T_Friend A (B) is the second credibility value, T_Vicinage A (B) is the third credibility value, H is the weight factor of the historical credibility value, I is the weight factor of the first network end credibility value, J is the weight factor of the second credibility value, and K is the weight factor of the third credibility value, wherein H>I>J>K, and H+I+J+K=1. Optionally, an embodiment of the present application proposes that the H value is set to 0.5, the I value is set to 0.35, the J value is set to 0.1, and the K value is set to 0.05.

[0050] Optionally, after the fourth credibility value is calculated, an embodiment of the present application proposes to calculate the credibility value according to the formula T A (B) = M × T A (B)1+(1-M)×T_Manager A(B) Updating the fourth credibility value, wherein T_Manager A (B) is the first evaluation credibility value, M is the weight factor of the fourth credibility value, and the value of M can be set according to the specific situation of the vehicle system. The embodiment of the present application proposes to set M to 0.7 by default.

[0051] Furthermore, an embodiment of the present application proposes that the credibility value of the vehicle edge gateway for the trust measurement of the network terminal will decay over time. It is understandable that after each update of the fourth credibility value, the fourth credibility value will gradually decrease over time, and the specific calculation formula is as follows:

[0052]

[0053] in, is an exponential time decay function, whose value decays over time. The decay rate is controlled by the time decay factor ζ, and the embodiment of this application uses 0.05 by default. A (B) t is the fourth credibility value at time t. This value decreases with the passage of time until it decays to 0.

[0054] Furthermore, an embodiment of the present application proposes that after the fourth credibility value is updated, the fourth credibility value is weighted by the historical fourth credibility value stored in the local management system. Optionally, the embodiment of the present application proposes that the calculation formula for weighted calculation of the fourth credibility value by the historical credibility value stored in the local management system is as follows:

[0055] T A (B) new =λ1×T A (B) old +λ2×T A (B)

[0056] Among them, T A (B) is the updated fourth credibility value, T A (B) old is the fourth historical credibility value, indicating that the vehicle Internet of Things terminal i uses the local management system to evaluate the current behavior of the vehicle Internet of Things terminal j. λ1 and λ2 are weight factors, and λ1>0.5, λ1+λ2=1. An embodiment of the present application proposes to set λ1 and λ2 to λ1=0.7 and λ2=0.3 by default.

[0057] The method for calculating the credibility proposed in the embodiment of the present application starts from the historical credibility and the credibility of the network terminal, and obtains the credibility of the network terminal by comprehensively analyzing the trust measurement indicators of the network terminal. This makes the credibility calculation process measurable and controllable, and is not interfered with. The calculation results are consistent with expectations. This improves the security and stability of the vehicle Internet of Things system.

[0058] Figure 2 This is a schematic diagram of the structure of an embodiment of the device of the present application, such as Figure 2 As shown, the above-mentioned credibility calculation device 20 may include:

[0059] An acquisition module 21, wherein the acquisition module 21 is used to acquire a historical credibility value, a first credibility value, a second credibility value, and a third credibility value, wherein the historical credibility value is used to characterize the historical credibility value of the vehicle edge gateway performing credibility measurement on the network terminal, the first credibility value is used to characterize the credibility value of the network terminal, the second credibility value is used to characterize the credibility value of the friend node of the vehicle edge gateway performing credibility measurement on the network terminal, and the third credibility value is used to characterize the credibility value of the vehicle edge gateway performing credibility measurement on the network terminal within the same trust domain;

[0060] The calculation module 22 is used to calculate a fourth credibility value based on the historical credibility value, the first credibility value, the second credibility value and the third credibility value, and the fourth credibility value is used to characterize the credibility value of the vehicle edge gateway performing credibility measurement on the network terminal this time.

[0061] In one possible implementation, the first credibility value includes a first network-end credibility value and a first evaluation credibility value, the first network-end credibility value is used to characterize the credibility value of the network terminal itself, and the first evaluation credibility value is used to characterize the credibility value of the credibility measurement of the network terminal by multiple vehicle edge gateways.

[0062] In one possible implementation, the calculation module 22 is further configured to calculate the A (B)1=H×T_old A (B)+I×T_Config(B)+J×T_Friend A (B)+K×T_Vicinage A (B) Calculating the fourth credibility value, where T A (B) 1 is the fourth credibility value, T_old A (B) is the historical credibility value, T_Config(B) is the first network credibility value, T_Friend A(B) is the second credibility value, T_Vicinage A (B) is the third credibility value.

[0063] In one possible implementation, the computing device 20 further includes a confirmation module 23, which is configured to: Confirming the second credibility value, wherein, is the credibility value measured by the i-th friend node of the vehicle edge gateway to the network terminal, λ i is the corresponding weight value of the i-th friend node.

[0064] In one possible implementation, the confirmation module 23 is used to determine the Confirming the third credibility value, wherein, is the credibility value measured by the i-th vehicle edge gateway to the network terminal in the same trust domain, α i is the corresponding weight value of the i-th vehicle edge gateway.

[0065] In one possible implementation, the computing device 20 further includes a determining module 24, wherein the determining module 24 is configured to determine the following formula: Determine the first network terminal credibility value, wherein T_Config(B) is the credibility of the network terminal itself, Integrity(BIOS) is the integrity of the network terminal BIOS, Integrity(OS loader) is the integrity of the network terminal OS loader, Integrity(OS) is the integrity of the network terminal OS, Integrity(KEY) is the integrity of the key app of the network terminal, and integrity(app i ) is the integrity of the common app of the network terminal.

[0066] In one possible implementation, the determining module 24 is further configured to: Determine the first evaluation credibility value, wherein, is the credibility value of the evaluation of the current behavior of the network terminal by the i-th vehicle edge gateway that has accessed the network terminal, β i is the corresponding weight value of the i-th vehicle edge gateway.

[0067] The credibility calculation device provided in the embodiment of the present invention can execute the credibility calculation method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method. The similarities can be referred to the above description of the credibility calculation method provided in the embodiment of the present invention, which will not be repeated here.

[0068] Combine the following Figure 3 The exemplary electronic device provided in the embodiments of the present application is further introduced. Figure 3 A schematic structural diagram of an electronic device 300 is shown.

[0069] The electronic device 300 may include at least one processor and at least one memory connected to the processor, wherein the memory stores program instructions that can be executed by the processor, and the processor calls the program instructions to execute the method for calculating the credibility provided in the embodiment shown in the present application.

[0070] Figure 3 A block diagram of an exemplary electronic device 300 suitable for implementing the embodiments of the present application is shown. Figure 3 The electronic device 300 shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0071] like Figure 3 As shown, the electronic device 300 is in the form of a general-purpose computing device. The components of the electronic device 300 may include, but are not limited to: one or more processors 310, storage 320, a communication bus 340 connecting different system components (including the storage 320 and the processor 310), and a communication interface 330.

[0072] The communication bus 340 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, a graphics acceleration port, a processor or a local bus using any of a variety of bus structures. For example, these architectures include but are not limited to Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MAC) bus, Enhanced ISA bus, Video Electronics Standards Association (VESA) local bus and Peripheral Component Interconnection (PCI) bus.

[0073] The electronic device 300 typically includes a variety of computer system readable media. These media can be any available media that can be accessed by the electronic device, including volatile and non-volatile media, removable and non-removable media.

[0074] The memory 320 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) and / or cache memory. The electronic device may further include other removable / non-removable, volatile / non-volatile computer system storage media. Figure 3 Not shown in the figure, a disk drive for reading and writing a removable non-volatile disk (e.g., a "floppy disk"), and an optical disk drive for reading and writing a removable non-volatile optical disk (e.g., a compact disc read only memory (CD-ROM), a digital versatile disc read only memory (DVD-ROM), or other optical media) may be provided. In these cases, each drive may be connected to the communication bus 340 via one or more data medium interfaces. The memory 320 may include at least one program product having a set (e.g., at least one) of program modules that are configured to perform the functions of the various embodiments of the present application.

[0075] A program / utility having a set (at least one) of program modules may be stored in memory 320, such program modules including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment. The program modules typically perform the functions and / or methods of the embodiments described herein.

[0076] The electronic device 300 may also communicate with one or more external devices (e.g., keyboards, pointing devices, displays, etc.), one or more devices that enable a user to interact with the electronic device, and / or any device that enables the electronic device to communicate with one or more other computing devices (e.g., network cards, modems, etc.). Such communication may be performed via the communication interface 330. Furthermore, the electronic device 300 may also communicate with a network adapter ( Figure 3The network adapter may communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) via the communication bus 340. It should be understood that although Figure 3 Not shown, other hardware and / or software modules may be used in conjunction with the electronic device 300, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, disk arrays (Redundant Arrays of Independent Drives; hereinafter referred to as: RAID) systems, tape drives, and data backup storage systems.

[0077] The processor 310 executes various functional applications and data processing by running the programs stored in the memory 320, such as implementing the method provided in the embodiment of the present application.

[0078] It is understandable that the interface connection relationship between the modules illustrated in the embodiment of the present application is only a schematic illustration and does not constitute a structural limitation on the electronic device 300. In other embodiments of the present application, the electronic device 300 may also adopt different interface connection methods in the above embodiments, or a combination of multiple interface connection methods.

[0079] In the above embodiments, the processor involved may include, for example, a CPU, a DSP, a microcontroller or a digital signal processor, and may also include a GPU, an embedded neural network processor (Neural-network Process Units; hereinafter referred to as: NPU) and an image signal processor (Image Signal Processing; hereinafter referred to as: ISP). The processor may also include necessary hardware accelerators or logic processing hardware circuits, such as ASIC, or one or more integrated circuits for controlling the execution of the program of the technical solution of the present application. In addition, the processor may have the function of operating one or more software programs, and the software programs may be stored in a storage medium.

[0080] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. When the computer-readable storage medium is run on a computer, the computer executes the calculation method provided by the embodiment shown in the present application.

[0081] The embodiment of the present application also provides a computer program product, which includes a computer program. When the computer program is run on a computer, it enables the computer to execute the calculation method provided by the embodiment shown in the present application.

[0082] Those of ordinary skill in the art will appreciate that the various units and algorithm steps described in the embodiments disclosed herein can be implemented in a combination of electronic hardware, computer software, and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0083] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0084] In several embodiments provided in the present application, if any function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory; hereinafter referred to as: ROM), random access memory (Random Access Memory; hereinafter referred to as: RAM), disk or optical disk, and other media that can store program codes.

[0085] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

[0086] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for calculating credibility, characterized in that: Applied to a vehicle edge gateway, the vehicle edge gateway is communicatively connected with a network terminal, and the method includes: Obtain a historical credibility value, a first credibility value, a second credibility value, and a third credibility value, wherein the historical credibility value is used to characterize the historical credibility value of the vehicle edge gateway performing credibility measurement on the network terminal, the first credibility value is used to characterize the credibility value of the network terminal, the second credibility value is used to characterize the credibility value of the friend node of the vehicle edge gateway performing credibility measurement on the network terminal, and the third credibility value is used to characterize the credibility value of the vehicle edge gateway performing credibility measurement on the network terminal within the same trust domain; Based on the historical credibility value, the first credibility value, the second credibility value and the third credibility value, a fourth credibility value is calculated, and the fourth credibility value is used to characterize the credibility value of the credibility measurement of the network terminal by the vehicle edge gateway this time.

2. The calculation method according to claim 1, characterized in that: The first credibility value includes a first network-end credibility value and a first evaluation credibility value. The first network-end credibility value is used to characterize the credibility value of the network terminal itself, and the first evaluation credibility value is used to characterize the credibility value of the credibility measurement of the network terminal by multiple vehicle edge gateways.

3. The calculation method according to claim 2, characterized in that: The method further comprises: According to the formula T A (B)1=H×T_old A (B)+I×T_Config(B)+J×T_Friend A (B)+K× T_Vicinage A (B) Calculating the fourth credibility value, where T A (B) 1 is the fourth credibility value, T_old A (B) is the historical credibility value, T_Config(B) is the first network credibility value, T_Friend A (B) is the second credibility value, T_Vicinage A (B) is the third credibility value.

4. The calculation method according to claim 3, characterized in that: The method further comprises: According to the formula T_Friend A (B)=∑ i λ i ×T_Friend Ai (B) confirming the second credibility value, wherein T_Friend Ai (B) is the credibility value of the i-th friend node of the vehicle edge gateway to the network terminal, λ i is the corresponding weight value of the i-th friend node.

5. The calculation method according to claim 3, characterized in that: The method further comprises: According to the formula T_Vicinage A (B)=∑ i α i ×T_Vicinage Ai (B) confirming the third credibility value, wherein T_Vicinage Ai (B) is the credibility value of the network terminal measured by the i-th vehicle edge gateway in the same trust domain, α i is the corresponding weight value of the i-th vehicle edge gateway.

6. The calculation method according to claim 3, characterized in that: The method further comprises: The network terminal body credibility, Integrity (BIOS) is the integrity of the network terminal BIOS, Integrity (OSloader) is the integrity of the network terminal OS loader, Integrity (OS) is the integrity of the network terminal OS, Integrity (KEY) is the integrity of the network terminal key app, integrity (app i ) is the integrity of the common app of the network terminal.

7. The calculation method according to claim 2, characterized in that: The method further comprises: According to the formula T_Manager A (B)=∑ i β i ×T_Manager Ai (B) Determining the first evaluation credibility value, wherein T_Manager Ai (B) is the credibility value of the evaluation of the current behavior of the network terminal by the i-th vehicle edge gateway that has accessed the network terminal, β i is the corresponding weight value of the i-th vehicle edge gateway.

8. An electronic device, characterized in that: include: A processor and a memory, wherein the memory is used to store a computer program; and the processor is used to run the computer program to implement the method for calculating the credibility as described in any one of claims 1 to 7.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed on a computer, the method for calculating the credibility as claimed in any one of claims 1 to 7 is implemented.

Images