Intelligent management and control system based on communication security

Abstract

The invention discloses an intelligent management and control system based on communication security, which comprises a management control module, an analysis processing module and a response storage module, and is characterized in that the management control module is in network connection with the analysis processing module, and the analysis processing module is in network connection with the response storage module; the management control module is used for carrying out communication management control on the vehicle, the analysis processing module is used for carrying out optimization analysis processing on vehicle communication, and the response storage module is used for carrying out influence storage management on data information. The management control module comprises a long connection module, a vehicle end management module and a server control module, the long connection module is in network connection with the vehicle end management module, the vehicle end management module is in network connection with the server control module, and the long connection module is used for TCP long connection management of vehicle communication. And the vehicle end management module is used for carrying out vehicle end management control. The system has the characteristics of intelligent management and analysis and high safety.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to an intelligent management and control system based on communication security. Background Art

[0002] With the rapid development of the national economy, cars that were originally only available to a few people are no longer a luxury, and more and more people own cars. At present, in order to ensure the security of vehicle communication, the common practice is to introduce the TLS / SSL protocol and rely on the TLS / SSL certificate and encryption and decryption mechanism to achieve secure data transmission. The TLS / SSL protocol is rigorous and theoretically guarantees the security of communication, but in order to be universal, it has the problems of complex handshake process and large amount of calculation. For traditional servers, the amount of calculation of TLS / SSL can be ignored, but the computing resources of embedded devices themselves are very limited. If the protocol is used intact, it will have a great impact on the normal operation of smart cars. Therefore, it is necessary to design an intelligent management and analysis system based on communication security with high security. Summary of the invention

[0003] The purpose of the present invention is to provide an intelligent management and control system based on communication security to solve the problems raised in the above background technology.

[0004] In order to solve the above technical problems, the present invention provides the following technical solutions: an intelligent management and control system based on communication security, comprising: a management control module, an analysis and processing module and a response storage module, the management control module is network-connected to the analysis and processing module, the analysis and processing module is network-connected to the response storage module, the management control module is used to perform vehicle communication management and control, the analysis and processing module is used to perform optimized analysis and processing of vehicle communications, and the response storage module is used to perform impact storage management of data information.

[0005] According to the above technical solution, the management control module includes a long connection module, a vehicle-side management module and a server-side control module. The long connection module is connected to the vehicle-side management module through a network, and the vehicle-side management module is connected to the server-side control module through a network. The long connection module is used to perform TCP long connection management for vehicle communications, the vehicle-side management module is used to perform vehicle-side management control, and the server-side control module performs control and analysis on service communications.

[0006] According to the above technical solution, the analysis and processing module includes a message summary module, a security analysis module and a specification management module. The message summary module is connected to the security analysis module through a network, and the security analysis module is connected to the specification management module through a network. The message summary module is used to perform message summary control of communication transmission, the security analysis module is used to perform security analysis management of communication, and the specification management module is used to perform specification control processing of real-time communication.

[0007] According to the above technical solution, the response storage module includes a response processing module and a data storage module. The response processing module is data-connected to the data storage module. The response processing module is used to perform server response control, and the data storage module is used to perform storage control of vehicle communication data information.

[0008] According to the above technical solution, the operation method of the intelligent management and control system based on communication security includes the following steps: Step S1: When the user is driving the vehicle and the vehicle is communicating, TCP long connection control is performed on the vehicle communication; Step S2: After completing the TCP long connection control, the vehicle communication is controlled and managed between the vehicle end and the server end; Step S3: further optimizing, analyzing and controlling vehicle communication processing; Step S4: Perform client response and data information storage processing on vehicle-side communication.

[0009] According to the above technical solution, step S1 further includes the following steps: When conducting vehicle communications, a TCP long connection is used to establish a connection throughout the communication process, and then all communications are established on this connection. After the TCP connection is established, as long as the communicating parties do not actively close it and there is no network abnormality, the connection will always exist, and the underlying operating system will not actively close the connection. Even if the network topology on the communication link changes, it will not affect the connection communication.

[0010] According to the above technical solution, step S2 further includes the following steps: Step S21: Control and manage the communication on the smart car side, and complete the communication between the client and the server side by using the socket. When the send function is called, first compare the length of the data to be sent len ​​and the length of the socket buffer. If len is greater than the buffer length, an error prompt is returned. If it is less than or equal to the buffer length, check whether the data in the buffer is being sent. If so, wait for the data to be sent to be completed. Otherwise, compare the length of the data to be sent len ​​and the size of the remaining space in the buffer. If it is or less than or equal to the size of the remaining space in the buffer, copy the data to be sent to the remaining space in the buffer. Otherwise, wait for the buffer data to be sent before receiving and transmitting. Step S22: After completing the socket processing on the smart car side, the control server calls the listen function to monitor the socket. At this time, when a connection request from the client arrives, the request is processed by the server.

[0011] According to the above technical solution, step S3 further includes the following steps: Step S31: During the intelligent vehicle message transmission process, the sender obtains a message digest by analyzing the BKDRHash algorithm before sending the message, and appends it to the message. After receiving the message, the receiver analyzes the message digest again and compares it with the original message digest. If they are the same, the message has not been tampered with, otherwise the message has been tampered with; Step S32: Authentication of the smart car is performed in the form of a user name and password, specifically a smart car ID+MASK, wherein the smart car ID is globally unique and is assigned at the factory, and MASK is a verification code corresponding to the ID. When the smart car passes the authentication of the server, the smart car sends the ID and MASK to the server together. After the server receives the ID and MASK sent by the smart car, it queries the database to verify the corresponding authenticity; Step S33: Use WebSocket technology to manage the interaction between the smart vehicle client and the server, so that the background server can push messages to the client at any time to ensure the unity of the front and back status.

[0012] According to the above technical solution, step S4 further includes the following steps: Step S41: During vehicle communication, when the server responds to the client's WebSocket request, the client will trigger the onopen event. When the open event is triggered, the protocol handshake has been completed and the WebSocket is ready to send and receive data. If the application receives an open event, it can be determined that the WebSocket server has successfully processed the connection request and agreed to communicate with the application. When the client's onmessage event is triggered, it means that the data on the server has been received.

[0013] Step S42: The data information of the vehicle communication processing is sorted in chronological order and stored in the blockchain to effectively ensure the security of the data information.

[0014] Compared with the prior art, the beneficial effects achieved by the present invention are as follows: the present invention, by providing a management control module, an analysis and processing module and a response storage module, eliminates the overhead of frequently connecting and sending heartbeat packets when the smart car reports information to the server once every period of time, effectively improving the efficiency and stability of vehicle communications, and after the recipient receives the message, it is very convenient to distinguish between the ciphertext and the message digest, and then decrypt the ciphertext to obtain the plaintext, and finally calculate the message digest of the plaintext to check whether the message has been tampered with during the transmission process, making the verification of vehicle communication data more efficient and accurate. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings: Figure 1 It is a schematic diagram of the system module composition of the present invention. DETAILED DESCRIPTION

[0016] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0017] See also Figure 1 The present invention provides a technical solution: an intelligent management and control system based on communication security, including: a management control module, an analysis and processing module and a response storage module, the management control module is connected to the analysis and processing module through a network, the analysis and processing module is connected to the response storage module through a network, the management control module is used to perform vehicle communication management and control, the analysis and processing module is used to perform optimization analysis and processing of vehicle communications, and the response storage module is used to perform impact storage management of data information.

[0018] The management and control module includes a long connection module, a vehicle-side management module and a server-side control module. The long connection module is connected to the vehicle-side management module through a network, and the vehicle-side management module is connected to the server-side control module through a network. The long connection module is used to manage TCP long connections for vehicle communications, the vehicle-side management module is used to perform vehicle-side management and control, and the server-side control module controls and analyzes service communications.

[0019] The analysis and processing module includes a message summary module, a security analysis module and a specification management module. The message summary module and the security analysis module are connected to the network, and the security analysis module and the specification management module are connected to the network. The message summary module is used to perform message summary control of communication transmission, the security analysis module is used to perform security analysis management of communication, and the specification management module is used to perform specification control processing of real-time communication.

[0020] The response storage module includes a response processing module and a data storage module. The response processing module and the data storage module are data connected. The response processing module is used to perform server response control, and the data storage module is used to perform storage control of vehicle communication data information.

[0021] A method for operating an intelligent management and control system based on communication security comprises the following steps: Step S1: When the user is driving the vehicle and the vehicle is communicating, TCP long connection control is performed on the vehicle communication; Step S2: After completing the TCP long connection control, the vehicle communication is controlled and managed between the vehicle end and the server end; Step S3: further optimizing, analyzing and controlling vehicle communication processing; Step S4: Perform client response and data information storage processing on vehicle-side communication.

[0022] Step S1 further comprises the following steps: When communicating with vehicles, TCP long connection is used to establish a connection in the entire communication process, and then all communications are established on this connection. After the TCP connection is established, as long as the communicating parties do not actively close it and there is no network abnormality, this connection will always exist, and the underlying operating system will not actively close the connection. Even if the network topology on the communication link changes, it will not affect the connection communication. Since a complete TCP session includes three handshakes to establish a connection and four handshakes to disconnect, using traditional TCP communication, in order to send a simple piece of data, the additional operations required are more than the data sent. In extreme cases, the effective utilization rate is only 1 / 8, resulting in a huge waste of resources. At the same time, when the smart car continuously initiates and disconnects, the power loss and traffic consumption of the smart car are huge. Therefore, through this step, when the smart car reports information to the server once every period of time, the overhead of sending heartbeat packets due to frequent connections is saved, effectively improving the efficiency and stability of vehicle communication.

[0023] Step S2 further comprises the following steps: Step S21: Control and manage the communication on the smart car side, and complete the communication between the client and the server side by using the socket. When the send function is called, first compare the length of the data to be sent len ​​and the length of the socket buffer. If len is greater than the buffer length, an error prompt is returned. If it is less than or equal to the buffer length, check whether the data in the buffer is being sent. If so, wait for the data to be sent to be completed. Otherwise, compare the length of the data to be sent len ​​and the size of the remaining space in the buffer. If it is or less than or equal to the size of the remaining space in the buffer, copy the data to be sent to the remaining space in the buffer. Otherwise, wait for the buffer data to be sent before receiving and transmitting. Step S22: After completing the socket processing on the smart car side, the control server calls the listen function to listen to the socket. At this time, when a connection request from the client arrives, the request is processed by the server. In this step, the listen function has 2 parameters. The first parameter sockfd is the socket description word to be listened to, and the second parameter backlog is to notify the kernel that when the number of simultaneous connection requests exceeds the set threshold, the server cannot quickly complete the corresponding request, and the maximum queue effectively maintained in the process space ensures the stability and efficiency of the communication processing on the smart car side.

[0024] Step S3 further comprises the following steps: Step S31: During the intelligent vehicle message transmission process, the sender obtains a message digest by analyzing the BKDRHash algorithm before sending, and appends it to the message. After receiving the message, the receiver analyzes the message digest again and compares it with the original message digest. If they are the same, the message has not been tampered with, otherwise the message has been tampered with. In this step, the BKDRHash message digest value is fixed to 32 bits (binary representation), and the operation speed is fast, so that different messages can calculate the same digest value. For example, the plain text A = 00112233445566778899aabbccddeeff, the message Abstract C = b6630ca6, ciphertext B = 69c4e0d86a7b0430d8cdb78070b4c55a, then the message sent to the receiver is BC = 69c4e0d86a7b0430d8cdb78070b4c55ab6630ca6. Because the message digest length is fixed, the receiver can easily distinguish the ciphertext and the message digest after receiving the message, and then decrypt the ciphertext to get the plaintext, and finally calculate the message digest of the plaintext to check whether the message has been tampered with during the transmission process. Through this processing, the verification of vehicle communication data is more efficient and accurate; Step S32: Authentication of the smart car is performed in the form of a user name and password, specifically, the smart car ID+MASK, wherein the smart car ID is globally unique and is assigned at the factory, and the MASK is a verification code corresponding to the ID. When the smart car passes the authentication of the server, the ID and MASK are sent to the server together. After the server receives the ID and MASK sent by the smart car, it can query the database to verify the corresponding authenticity; in this step, when verifying the identity of the smart car, the server public key is not used for encryption, but the AES symmetric algorithm is used for encryption, because the ID and MASK of the smart car and the public key of the server are fixed. Once the hacker steals the ID and MASK encrypted with the server public key, he can pretend to be a smart car to communicate with the server. However, this security risk does not exist when the AES symmetric encryption algorithm is used, because the key of AES is dynamically and randomly generated and has 1024 bits; Step S33: Use WebSocket technology to manage the interaction between the smart vehicle client and the server, so that the background server can push messages to the client at any time to ensure the unity of the front and back status.

[0025] Step S4 further comprises the following steps: Step S41: During vehicle communication, when the server responds to the client's WebSocket request, the client will trigger the onopen event. When the open event is triggered, the protocol handshake has been completed and the WebSocket is ready to send and receive data. If the application receives an open event, it can be determined that the WebSocket server has successfully processed the connection request and agreed to communicate with the application. When the client's onmessage event is triggered, it means that the data on the server has been received.

[0026] Step S42: The data information of the vehicle communication processing is sorted in chronological order and stored in the blockchain to effectively ensure the security of the data information.

[0027] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0028] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. An intelligent management and control system based on communication security, comprising: A management control module, an analysis and processing module and a response storage module, characterized in that: the management control module is connected to the analysis and processing module through a network, the analysis and processing module is connected to the response storage module through a network, the management control module is used to perform vehicle communication management and control, the analysis and processing module is used to perform optimized analysis and processing of vehicle communications, and the response storage module is used to perform impact storage management of data information.

2. According to claim 1, the intelligent management and control system based on communication security is characterized in that: The management and control module includes a long connection module, a vehicle-side management module and a server-side control module. The long connection module is connected to the vehicle-side management module through a network. The vehicle-side management module is connected to the server-side control module through a network. The long connection module is used to perform TCP long connection management for vehicle communications. The vehicle-side management module is used to perform vehicle-side management and control. The server-side control module controls and analyzes service communications.

3. According to claim 1, the intelligent management and control system based on communication security is characterized in that: The analysis and processing module includes a message summary module, a security analysis module and a specification management module. The message summary module is connected to the security analysis module through a network, and the security analysis module is connected to the specification management module through a network. The message summary module is used to perform message summary control of communication transmission, the security analysis module is used to perform security analysis management of communication, and the specification management module is used to perform specification control processing of real-time communication.

4. According to claim 1, the intelligent management and control system based on communication security is characterized in that: The response storage module includes a response processing module and a data storage module. The response processing module is data-connected with the data storage module. The response processing module is used to perform server response control, and the data storage module is used to perform storage control of vehicle communication data information.

5. According to claim 1, the intelligent management and control system based on communication security is characterized in that: The operation method of the intelligent management and control system based on communication security comprises the following steps: Step S1: When the user is driving the vehicle and the vehicle is communicating, TCP long connection control is performed on the vehicle communication; Step S2: After completing the TCP long connection control, the vehicle communication is controlled and managed between the vehicle end and the server end; Step S3: further optimizing, analyzing and controlling vehicle communication processing; Step S4: Perform client response and data information storage processing on vehicle-side communication.

6. According to claim 5, the intelligent management and control system based on communication security is characterized in that: The step S1 further comprises the following steps: When conducting vehicle communications, a TCP long connection is used to establish a connection throughout the communication process, and then all communications are established on this connection. After the TCP connection is established, as long as the communicating parties do not actively close it and there is no network abnormality, the connection will always exist, and the underlying operating system will not actively close the connection. Even if the network topology on the communication link changes, it will not affect the connection communication.

7. According to claim 5, the intelligent management and control system based on communication security is characterized in that: The step S2 further comprises the following steps: Step S21: Control and manage the communication on the smart car side, and complete the communication between the client and the server side by using the socket. When the send function is called, first compare the length of the data to be sent len ​​and the length of the socket buffer. If len is greater than the buffer length, an error prompt is returned. If it is less than or equal to the buffer length, check whether the data in the buffer is being sent. If so, wait for the data to be sent to be completed. Otherwise, compare the length of the data to be sent len ​​and the size of the remaining space in the buffer. If it is or less than or equal to the size of the remaining space in the buffer, copy the data to be sent to the remaining space in the buffer. Otherwise, wait for the buffer data to be sent before receiving and transmitting. Step S22: After completing the socket processing on the smart car side, the control server calls the listen function to monitor the socket. At this time, when a connection request from the client arrives, the request is processed by the server.

8. According to claim 5, the intelligent management and control system based on communication security is characterized in that: The step S3 further comprises the following steps: Step S31: During the intelligent vehicle message transmission process, the sender obtains a message digest by analyzing the BKDRHash algorithm before sending the message, and appends it to the message. After receiving the message, the receiver analyzes the message digest again and compares it with the original message digest. If they are the same, the message has not been tampered with, otherwise the message has been tampered with; Step S32: Authentication of the smart car is performed in the form of a user name and password, specifically a smart car ID+MASK, wherein the smart car ID is globally unique and is assigned at the factory, and MASK is a verification code corresponding to the ID. When the smart car passes the authentication of the server, the smart car sends the ID and MASK to the server together. After the server receives the ID and MASK sent by the smart car, it queries the database to verify the corresponding authenticity; Step S33: Use WebSocket technology to manage the interaction between the smart vehicle client and the server, so that the background server can push messages to the client at any time to ensure the unity of the front and back status.

9. According to claim 5, the intelligent management and control system based on communication security is characterized in that: The step S4 further comprises the following steps: Step S41: During vehicle communication, when the server responds to the client's WebSocket request, the client triggers an onopen event. When the open event is triggered, the protocol handshake has been completed and the WebSocket is ready to send and receive data. If the application receives an open event, it can be determined that the WebSocket server successfully processed the connection request and agreed to communicate with the application. When the client's onmessage event is triggered, it indicates that the data on the server has been received. Step S42: The data information of the vehicle communication processing is sorted in chronological order and stored in the blockchain to effectively ensure the security of the data information.

Images