Transnational Internet of Vehicles data transmission method and device, medium and equipment

Abstract

The invention relates to a transnational Internet of Vehicles data transmission method and device, a medium and equipment, and the method comprises the steps: receiving a connection request of a transmitting end CPE through a central platform, carrying out the safety authentication of the CPE, and generating configuration information for the transmitting end CPE after the safety authentication is passed, and the configuration information comprises a first access POP point and a second access POP point. And the sending end CPE establishes connection with the first access POP point according to the configuration information, accesses the backbone network, transmits data of the sending end to the second access POP point through the backbone network, and finally sends the data to the receiving end. A plurality of access POP points deployed in a plurality of countries are fully utilized to construct a powerful backbone network. The data transmission path is optimally configured from the first access POP point to the second access POP point, so that the data transmission efficiency is improved, the Internet of Vehicles data can be transmitted across networks of multiple countries more quickly, and the real-time requirement is met.

Description

Technical Field

[0001] The present application relates to the field of network transmission, and in particular to a method, device, medium and equipment for cross-border vehicle network data transmission. Background Art

[0002] In traditional technologies, cross-border Internet of Vehicles systems have many pain points and demands at the network level.

[0003] Due to the different bandwidth quality of transnational networks, transnational Internet of Vehicles systems involve multiple countries and regions in different regions. The network environment and network equipment between these regions may be different, which involves diverse network infrastructure, including different operators and communication technologies, and data packets need to pass through multiple routers and switches to reach the destination. This will cause data packet delays and increased packet loss during transmission, thereby affecting the quality and efficiency of data transmission. In addition, there may be differences in network equipment, bandwidth, and transmission protocols in different regions, which will make bandwidth utilization in transnational communications even lower.

[0004] There are many devices in the multinational Internet of Vehicles system, including on-board devices, roadside devices, data centers, etc. These devices need to be connected to each other and to the Internet. This requires considering how to manage and maintain this diversity in a complex network topology, as well as how to ensure the reliability, stability and security of the devices.

[0005] The Internet of Vehicles system involves a large amount of data traffic, which needs to be transmitted and managed in a complex network topology, ensuring fast data transmission and effective management.

[0006] In addition, since cross-border Internet of Vehicles systems need to transmit data through the public Internet, there is a risk of hacker attacks and data leaks.

[0007] To sum up, in cross-border Internet of Vehicles systems, it is not only difficult to ensure the quality of network transmission, but also there are many security issues and loopholes in the network layer. That is, it is necessary to optimize network quality and improve bandwidth utilization, and to take a series of security measures to ensure the security and stability of the system. Summary of the invention

[0008] In order to overcome the problems existing in the related technologies, the present application provides a method, device, medium and equipment for cross-border vehicle network data transmission.

[0009] According to a first aspect of the present application, a method for transmitting data in a cross-border vehicle network is provided. The method for transmitting data in a cross-border vehicle network is applied to a central platform and includes:

[0010] Receive a connection request sent by a sending end CPE, where the connection request includes the identity information of the sending end and the information of the receiving end;

[0011] Perform security authentication on the identity information of the sender;

[0012] After the authentication is passed, configuration information is generated for the sending end CPE, which includes a first access POP point and a second access POP point. The first access POP point is the POP point closest to the sending end or with the best connectivity, and the second access POP point is the POP point closest to the receiving end or with the best connectivity.

[0013] The configuration information is sent to the sending CPE so that the sending CPE is connected to the first access POP point according to the configuration information, and sends data to the second access POP point through the backbone network pre-established by the manufacturer. The backbone network is the SD-WAN core network used to connect multiple regions, areas or operators. The bottom layer consists of multiple POP points deployed in multiple countries and dedicated lines connecting the POPs.

[0014] In some embodiments of the present application, based on the above solution, the method for multinational vehicle network data transmission further includes:

[0015] Generate the identity authentication information of the sender, and send the identity authentication information to the POP point of the backbone network, so that the POP point can authenticate the identity of the sender when receiving the access request sent by the sender CPE.

[0016] In some embodiments of the present application, based on the aforementioned scheme, the cross-border Internet of Vehicles data transmission method also includes: obtaining traffic information of each POP point, formulating a traffic control strategy based on the traffic information, and sending the traffic control strategy to each POP point.

[0017] In some embodiments of the present application, based on the above solution, the traffic information of the POP point includes the traffic information of the sending end CPE, and the cross-border Internet of Vehicles data transmission method further includes:

[0018] According to the traffic information of the CPE at the sending end, the access behavior of the sending end is determined, and the access behavior is monitored and audited.

[0019] The cross-border Internet of Vehicles data transmission method is applied to the POP points in the backbone network, including:

[0020] Obtain the identity authentication information of the sender sent by the central platform;

[0021] Receive an access request sent by a sending end CPE, where the access request includes the identity information of the sending end and information of a second access POP point, where the second access POP point is a POP point that is closest to the receiving end or has the best connectivity;

[0022] Use the identity authentication information of the sender to authenticate the identity information of the sender CPE;

[0023] After the identity information is authenticated, an encrypted tunnel is established with the sending CPE, data traffic sent by the sending CPE is received through the encrypted tunnel, and the data traffic is forwarded to the second POP point.

[0024] In some embodiments of the present application, based on the above solution, the method for multinational vehicle network data transmission further includes:

[0025] Upload the traffic information of this POP point to the central platform;

[0026] Receive the flow control strategy issued by the central platform, where the flow control strategy is formulated by the central platform based on the flow information of each POP point.

[0027] In some embodiments of the present application, based on the above solution, before receiving the data traffic sent by the transmitting end CPE, the method for transmitting data of a cross-border Internet of Vehicles further includes:

[0028] According to the access requirements and traffic control policy of the CPE at the sending end, an access control policy is generated and sent to the CPE at the sending end, so that the CPE at the sending end controls the access behavior of the sending end according to the access control policy.

[0029] The cross-border Internet of Vehicles data transmission method is applied to the sending end CPE, including:

[0030] Send a connection request to the central platform, the connection request includes identity information and receiving end information;

[0031] The configuration information returned by the receiving center platform includes a first access POP point and a second access POP point, wherein the first access POP point is a POP point that is closest to the sending end or has the best connectivity, and the second access POP point is a POP point that is closest to the receiving end or has the best connectivity;

[0032] Establish an encrypted tunnel with the first access POP point;

[0033] The data traffic is sent to the first access POP point through an encrypted tunnel, so that the data traffic is transmitted to the second access POP point via the backbone network and sent to the receiving end.

[0034] In some embodiments of the present application, based on the above solution, establishing an encrypted tunnel with the first access POP point includes:

[0035] Sending an access request to the first access POP point, where the access request includes identity information;

[0036] After the identity information is authenticated, an encrypted tunnel is established with the first access POP point.

[0037] In some embodiments of the present application, based on the above solution, the method for multinational vehicle network data transmission further includes:

[0038] Receive the access control policy sent by the first access POP point, and control the access behavior of the sender according to the access control policy.

[0039] According to another aspect of the present application, a cross-border vehicle network data transmission device is provided.

[0040] The cross-border Internet of Vehicles data transmission device is applied to the central platform, including:

[0041] A connection request receiving module, used to receive a connection request sent by a sending end CPE, the connection request including the identity information of the sending end and the information of the receiving end;

[0042] A first authentication module, used for performing security authentication on the identity information of the sender;

[0043] A configuration module, used to generate configuration information for the sending end CPE after the authentication is passed, the configuration information includes a first access POP point and a second access POP point, the first access POP point is the POP point closest to the sending end or with the best connectivity, and the second access POP point is the POP point closest to the receiving end or with the best connectivity;

[0044] The configuration information sending module is used to send the configuration information to the sending CPE, so that the sending CPE is connected to the first access POP point according to the configuration information, and sends data to the second access POP point through the backbone network pre-established by the manufacturer. The backbone network is the SD-WAN core network used to connect multiple regions, areas or operators. The bottom layer consists of multiple POP points deployed in multiple countries and dedicated lines connecting the POPs.

[0045] In some embodiments of the present application, based on the above solution, the transnational vehicle network data transmission device further includes:

[0046] The authentication information management module is used to generate the identity authentication information of the sender and send the identity authentication information to the POP point of the backbone network so that the POP point can authenticate the identity of the sender when receiving the access request sent by the sender CPE.

[0047] In some embodiments of the present application, based on the above solution, the transnational vehicle network data transmission device further includes:

[0048] The traffic management module is used to obtain the traffic information of each POP point, formulate a traffic control strategy based on the traffic information, and send the traffic control strategy to each POP point.

[0049] The cross-border Internet of Vehicles data transmission device is applied to the POP points in the backbone network, including:

[0050] The identity information receiving module is used to obtain the identity authentication information of the sender sent by the central platform;

[0051] An access request receiving module is used to receive an access request sent by a sending end CPE, the access request including the identity information of the sending end and the information of a second access POP point, the second access POP point being a POP point that is closest to the receiving end or has the best connectivity;

[0052] A second authentication module, configured to authenticate the identity information of the sending end CPE using the identity authentication information of the sending end;

[0053] The data access module is used to establish an encrypted tunnel with the sending end CPE after the identity information is authenticated, receive the data traffic sent by the sending end CPE through the encrypted tunnel, and forward the data traffic to the second POP point.

[0054] In some embodiments of the present application, based on the above solution, the transnational vehicle network data transmission device further includes:

[0055] Traffic upload module, used to upload the traffic information of this POP point to the central platform;

[0056] The flow control strategy receiving module is used to receive the flow control strategy issued by the central platform. The flow control strategy is formulated by the central platform based on the flow information of each POP point.

[0057] In some embodiments of the present application, based on the above solution, the transnational vehicle network data transmission device further includes:

[0058] The access control policy generation module is used to generate an access control policy according to the access requirements of the sending end CPE and the traffic control policy before receiving the data traffic sent by the sending end CPE, and send it to the sending end CPE so that the sending end CPE controls the access behavior of the sending end according to the access control policy.

[0059] The cross-border Internet of Vehicles data transmission device is applied to the sending end CPE, including:

[0060] A connection request sending module is used to send a connection request to the central platform, and the connection request includes identity information and information of the receiving end;

[0061] A configuration information receiving module is used to receive configuration information returned by the central platform, wherein the configuration information includes a first access POP point and a second access POP point, wherein the first access POP point is a POP point that is closest to the sending end or has the best connectivity, and the second access POP point is a POP point that is closest to the receiving end or has the best connectivity;

[0062] An access module, used to establish an encrypted tunnel with the first access POP point;

[0063] The data sending module is used to send data traffic to the first access POP point through an encrypted tunnel, so that the data traffic is transmitted to the second access POP point via the backbone network and sent to the receiving end.

[0064] In some embodiments of the present application, based on the above solution, the transnational vehicle network data transmission device further includes:

[0065] The access control policy receiving module is used to receive the access control policy sent by the first access POP point, and control the access behavior of the sending end according to the access control policy.

[0066] According to another aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed, the steps of the cross-border vehicle network data transmission method are implemented.

[0067] According to another aspect of the present application, a computer device is provided, including a processor, a memory, and a computer program stored in the memory, and when the processor executes the computer program, the steps of the cross-border vehicle network data transmission method are implemented.

[0068] This application receives the connection request of the sender CPE through the central platform, performs security authentication on the CPE, and generates configuration information for the sender CPE after the security authentication is passed. The configuration information includes the first POP point closest to the sender and the second POP point closest to the receiver. The sender CPE establishes a connection with the first POP point according to the configuration information, accesses the SD-WAN backbone network pre-deployed globally, and transmits the data of the sender to the receiver via the backbone network. By using the POP points of SD-WAN distributed globally, a powerful backbone network across countries and operators is built. By configuring CPE on vehicle equipment, data transmission of the Internet of Vehicles across countries and operators can be realized. Combined with SD-WAN technology and 4 / 5G technology, the interconnection of multiple networks and multiple devices across countries can be realized, ensuring the high reliability and stability of data transmission; at the same time, before the CPE accesses the backbone network, the CPE is securely authenticated, further improving the security of the Internet of Vehicles system. This network system not only makes full use of the POP points deployed in multiple countries, but also optimizes the data transmission path, provides reliable data transmission, and ensures that data can be transmitted across international borders at the fastest speed. By optimizing the data transmission path from the first access POP point to the second access POP point, the efficiency of data transmission is improved, allowing the Internet of Vehicles data to be transmitted across networks in multiple countries more quickly, meeting real-time requirements.

[0069] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0070] The drawings constituting a part of the present application are used to provide a further understanding of the present application. The illustrative embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0071] Figure 1 The figure is a schematic diagram of a transnational vehicle networking system according to an exemplary embodiment.

[0072] Figure 2 The present invention is a flowchart of a method for transmitting data in a cross-border vehicle network according to an exemplary embodiment.

[0073] Figure 3 The present invention is a flowchart of a method for transmitting data in a cross-border vehicle network according to an exemplary embodiment.

[0074] Figure 4 The present invention is a flowchart of a method for transmitting data in a cross-border vehicle network according to an exemplary embodiment.

[0075] Figure 5 It is a block diagram of a cross-border vehicle network data transmission device according to an exemplary embodiment.

[0076] Figure 6 It is a block diagram of a cross-border vehicle network data transmission device according to an exemplary embodiment.

[0077] Figure 7 It is a block diagram of a cross-border vehicle network data transmission device according to an exemplary embodiment.

[0078] Figure 8 It is a block diagram of a cross-border vehicle network data transmission device according to an exemplary embodiment.

[0079] Fig. 9 It is a block diagram of a cross-border vehicle network data transmission device according to an exemplary embodiment.

[0080] Fig.10 It is a block diagram of a cross-border vehicle network data transmission device according to an exemplary embodiment.

[0081] Fig.11 It is a block diagram of a cross-border vehicle network data transmission device according to an exemplary embodiment.

[0082] Fig.12 It is a block diagram of a cross-border vehicle network data transmission device according to an exemplary embodiment.

[0083] Fig.13 The invention is a block diagram of a computer device according to an exemplary embodiment. DETAILED DESCRIPTION

[0084] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present application. It should be noted that, in the absence of conflict, the embodiments in the present application and the features in the embodiments can be combined with each other arbitrarily.

[0085] Due to the different bandwidth quality of transnational networks, transnational Internet of Vehicles systems involve multiple countries and regions in different regions. The network environment and network equipment between these regions may be different, which involves diverse network infrastructure, including different operators and communication technologies, and data packets need to pass through multiple routers and switches to reach the destination. This will cause data packet delays and increased packet loss during transmission, thereby affecting the quality and efficiency of data transmission. In addition, there may be differences in network equipment, bandwidth, and transmission protocols in different regions, which will make bandwidth utilization in transnational communications even lower.

[0086] There are many devices in the multinational Internet of Vehicles system, including on-board devices, roadside devices, data centers, etc. These devices need to be connected to each other and to the Internet. This requires considering how to manage and maintain this diversity in a complex network topology, as well as how to ensure the reliability, stability and security of the devices.

[0087] Cross-border Internet of Vehicles systems involve a large amount of data traffic, which needs to be transmitted and managed in a complex network topology, ensuring fast data transmission and effective management.

[0088] In addition, since cross-border Internet of Vehicles systems need to transmit data through the public Internet, there is a risk of hacker attacks and data leakage. For example, cross-border Internet of Vehicles systems need to transmit sensitive vehicle and driver information, including location data, etc. Therefore, data privacy and security issues are a key pain point.

[0089] In cross-border Internet of Vehicles systems, it is not only difficult to ensure the quality of network transmission, but also there are many security issues and loopholes in the network layer. That is, it is necessary to optimize network quality and improve bandwidth utilization, and to take a series of security measures to ensure the security and stability of the system.

[0090] The present application provides a cross-border vehicle networking system. Figure 1 FIG. 1 is a schematic diagram of a cross-border vehicle networking system according to an exemplary embodiment. Figure 1 The cross-border Internet of Vehicles system consists of a central platform, a backbone network, and numerous terminal devices.

[0091] The terminal device can be a transportation equipment such as a vehicle, a train, or a ship. This application is explained using a vehicle terminal as an example. The vehicle terminal includes an on-board sensor and a transmitting CPE. The on-board sensor is used to collect vehicle data, and after preprocessing or filtering and subpackaging, the data to be sent is sent to the transmitting CPE. The transmitting CPE can independently receive data collected by the sensors in the vehicle, and can also receive data collected by sensors of other vehicles in the same group. That is, each vehicle can be equipped with an independent CPE device, or a fleet of multiple vehicles can share the same CPE device to improve resource utilization efficiency.

[0092] Backbone network, which can be an SD-WAN backbone network. In specific implementation, regional SD-WAN networks located in different countries and regions can be integrated. Each regional SD-WAN network includes multiple POP nodes. Operators can connect the POP nodes of SD-WAN networks in different countries and regions through dedicated lines, thereby establishing a cross-border SD-WAN backbone network and providing high-speed connection networks for vehicle terminals around the world.

[0093] The central platform includes CPE equipment, network controller, and Internet of Vehicles platform. The network controller is used to conduct network visualization monitoring of the entire backbone network, define policies and route control, security control and protection based on the monitoring results, and generate configuration files for CPE equipment. It is also used to authenticate and authorize vehicle terminals to ensure the security of the system.

[0094] The Internet of Vehicles platform is used for vehicle management, behavior analysis, traffic management, remote commands, etc.

[0095] The CPE of the terminal device and the CPE of the central platform are used to connect to the backbone network and receive or send data through the backbone network. CPE devices can also be used to implement QoS strategies, intelligent routing, terminal security protection and other functions to ensure the efficiency and security of data transmission.

[0096] This application provides a method for transmitting data in a cross-border Internet of Vehicles. In order to achieve the security and effective management of cross-border Internet of Vehicles data, it is first necessary to establish an Internet of Vehicles system, including:

[0097] Build 5G / 4G network infrastructure, including 5G / 4G base stations and 5G / 4G network core equipment. 5G / 4G networks can provide high-speed, low-latency, and high-bandwidth network connections, which can combine 5G / 4G networks with existing IoT to provide faster network connections and more device interconnection capabilities. Vehicle terminals are connected to the cloud platform through 5G / 4G networks to achieve information exchange between vehicles and between vehicles and the cloud platform.

[0098] Install vehicle terminal equipment, including 5G / 4G modules, vehicle-mounted sensors, controllers, etc., to realize vehicle data collection and exchange.

[0099] Deploy IoT devices, including environmental sensors, smart devices (such as smart cameras), etc., to connect vehicles with the surrounding environment.

[0100] Establish a cloud platform (central platform) to transmit the data collected by vehicle terminal devices and IoT devices to the cloud platform for data storage, data analysis and management.

[0101] Based on the Internet of Vehicles system, data collected by vehicle terminal devices and IoT devices can be connected to the cloud platform through 5G or 4G networks and backbone networks, enabling information exchange between vehicles, between vehicles and other devices, and between vehicles and cloud platforms. The cloud platform uses data analysis algorithms to process and analyze vehicle data in real time to improve vehicle safety and intelligence.

[0102] Figure 2 The flowchart of a method for transmitting data in a cross-border vehicle network is shown according to an exemplary embodiment. The method for transmitting data in a cross-border vehicle network is applied to a central platform and includes:

[0103] Step S21: receiving a connection request sent by a sending end CPE, wherein the connection request includes identity information of the sending end and information of the receiving end.

[0104] The sender CPE is used to collect information collected by vehicle terminal devices, connect to the 5G network or 4G network through the local base station, and then transmit the data to the central platform through the Internet of Things. The sender CPE is a network access device that can be flexibly installed in each vehicle to ensure real-time data transmission. A sender CPE can be installed in each vehicle to send various information of the current vehicle to the central platform; or one of the multiple vehicles in the same group can be selected to install the sender CPE, which is used to receive information from multiple vehicles, connect to the network, and aggregate and send the information of multiple vehicles to the central platform.

[0105] Before connecting to the central platform, the CPE at the sending end needs to send a connection request to the central platform. The connection request includes the identity information of the sending end and the information of the receiving end. The identity information of the sending end is used to identify the identity of the sending end. The receiving end is the destination of the data to be sent, so that the central platform can intelligently determine the data transmission link based on the current location of the vehicle and the location of the receiving end.

[0106] Step S22, perform security authentication on the identity information of the sender. Before using the Internet of Vehicles system, the vehicle owner (user) needs to register with the central platform. The registration information can be the vehicle information or the vehicle owner's information. The central platform generates the identity authentication information of the sender based on the registration information. The identity authentication information can correspond to the registration information one by one, or multiple identity authentication information can be generated for the same registration information to be provided to multiple sender CPEs for use. The central platform saves the identity authentication information generated for the user and sends the identity authentication information to the user. The user enters the identity authentication information into the sender CPE as the identity information of the sender CPE. The central platform obtains the identity information of the sender in the connection request and queries the locally stored information. If the locally stored information is consistent with the identity information of the sender, the sender CPE is considered to be a legitimate device and passes the security authentication. Unregistered users cannot obtain the identity information of the sender and cannot pass the security authentication of the central platform. Ensure that only legitimate devices can access the Internet of Vehicles system to improve the security of the system.

[0107] Step S23, after the authentication is passed, configuration information is generated for the sending end CPE, the configuration information includes a first access POP point and a second access POP point, the first access POP point is the POP point closest to the sending end or with the best connectivity, and the second access POP point is the POP point closest to the receiving end or with the best connectivity.

[0108] Subsequently, the central platform sends configuration information to the sending end CPE, so that the sending end CPE connects to the first access POP point according to the configuration information, and sends data to the second access POP point via the backbone network pre-established by the manufacturer.

[0109] Step S24, sending configuration information to the sending CPE, so that the sending CPE is connected to the first access POP point according to the configuration information, and sends data to the second access POP point through the backbone network pre-established by the manufacturer. The backbone network is an SD-WAN core network connecting multiple regions, areas or operators. The bottom layer is composed of multiple POP points deployed in multiple countries and dedicated lines connecting POPs.

[0110] Such an SD-WAN network has the characteristics of large bandwidth capacity, low latency, low jitter, low packet loss, high reliability, and high security. POP points and dedicated lines can be high-quality node bandwidth and line resources purchased from local operators.

[0111] Manufacturers purchase or rent bandwidth resources and dedicated lines from POPs in different countries, regions, and operators to build a cross-border and cross-operator backbone network to achieve interconnection of multiple networks around the world. The sending end CPE connects to the nearest or best-connected first access POP point based on the configuration information. The first access POP point sends data to the second access POP point that is closest to the receiving end or has the best connectivity through the backbone network, and then the second access POP point sends the data to the receiving end. The network controller of the central platform can select the optimal network link in real time based on application requirements and formulate configuration information to ensure the reliability of network connection and maximize bandwidth utilization. This innovative network architecture not only realizes rapid data transmission, but also significantly improves the network quality across regions and operators, meeting the high requirements of modern Internet of Vehicles for real-time and reliability. Moreover, as technology develops and needs change, the system can expand functions and services by adding new POP points or adjusting network configuration to adapt to future technological advances and market needs.

[0112] In an exemplary embodiment, the method for transmitting data in a cross-border vehicle network further includes:

[0113] Generate the identity authentication information of the sender, and send the identity authentication information to the POP point of the backbone network, so that the POP point can authenticate the identity of the sender when receiving the access request sent by the sender CPE.

[0114] After the network controller of the central platform performs security authentication on the identity information of the sender, it sends configuration information to the sender CPE, indicates the information of the first POP point and the second POP point to the sender CPE, so that the sender CPE is connected to the first POP point, and a data transmission link is established between the first POP point and the second POP point. In order to improve the security of user data and the backbone network, the central platform can receive the user's registration information, generate the sender's identity authentication information, and then send the sender's identity authentication information to all POP points in the backbone network. The user's sender CPE can use the sender's identity information to connect to the nearest first POP point according to the configuration information at any place, and use the Internet of Vehicles system to transmit data. After generating the configuration information for the sender CPE, the central platform can also only send the sender's identity authentication information to the first POP point and the second POP point specified in the configuration information, so as to avoid all POP points of the backbone network storing the sender's identity information and causing a waste of storage resources.

[0115] When the POP receives an access request from the CPE on the sending end, it first authenticates the identity of the sending end. Only the authenticated CPE on the sending end can establish a connection with the POP and send data.

[0116] In an exemplary embodiment, the cross-border Internet of Vehicles data transmission method also includes: obtaining traffic information of each POP point, formulating a traffic control strategy based on the traffic information, and sending the traffic control strategy to each POP point.

[0117] The central platform can obtain traffic information of each POP point. According to the scale of the system, each POP point can report traffic information to the central platform in real time or regularly. Based on the traffic information of each POP point, the central platform can formulate the best transmission link including the first access POP point and the second access POP point for the sending end CPE and generate configuration information. It can also formulate traffic control strategies for each POP point according to traffic characteristics and send them to each POP point. Traffic control strategies can include: quality and bandwidth guarantee, application priority, fault switching, etc., to ensure the stability and reliability of network connection, while ensuring the priority transmission of important data.

[0118] In an exemplary embodiment, the traffic information of the POP point includes the traffic information of the sending end CPE, and the cross-border Internet of Vehicles data transmission method further includes:

[0119] According to the traffic information of the CPE at the sending end, the access behavior of the sending end is determined, and the access behavior is monitored and audited.

[0120] When reporting traffic information, each POP point can report the total traffic information of the POP point and the traffic of each sender CPE to the central platform. Based on the traffic information of each sender CPE, the central platform uses security policies and threat intelligence analysis technology to determine the access behavior of the sender, monitor and audit the access behavior, detect and defend against malicious behavior in the network, and further improve the security of the cross-border Internet of Vehicles system.

[0121] Figure 3 The flowchart of a method for transmitting data in a cross-border vehicle network is shown according to an exemplary embodiment. The method for transmitting data in a cross-border vehicle network is applied to a POP point in a backbone network, and includes:

[0122] Step S31, obtaining the identity authentication information of the sender sent by the central platform;

[0123] Step S32, receiving an access request sent by the sending end CPE, the access request including the identity information of the sending end and information of the second access POP point, the second access POP point being the POP point closest to the receiving end;

[0124] Step S33, using the identity authentication information of the sender to authenticate the identity information of the sender CPE;

[0125] Step S34, after the identity information is authenticated, an encrypted tunnel is established with the sending end CPE, data traffic sent by the sending end CPE is received through the encrypted tunnel, and the data traffic is forwarded to the second POP point.

[0126] The POP points in the backbone network can be various nodes in different countries, regions, and across operators. Different POP points are connected through dedicated lines or ordinary networks and are uniformly controlled and managed by the central platform.

[0127] The POP point in the backbone network obtains the identity authentication information of the sender sent by the central platform and stores it in the local node. When receiving the access request from the sender CPE, the sender's identity is authenticated to prevent illegal devices from accessing the Internet of Vehicles system and improve the security of the entire system.

[0128] When the POP point in the backbone network receives the access request sent by the sender CPE, the access request includes the identity information of the sender and the information of the second access POP point. The second access point is the POP point closest to the receiving end or with the best connectivity. The POP point that receives the access request sent by the sender CPE and the second access POP point are both specified in the configuration information generated by the central platform for the sender CPE to ensure efficient data transmission.

[0129] The POP point in the backbone network uses the identity information of the sender to authenticate the identity information of the sender CPE. The identity of the sender CPE can be determined to be legitimate by comparing the identity information carried in the access request with the identity authentication information of the sender sent by the central platform. If the vehicle or device is not registered in the Internet of Vehicles and has not obtained the authorization of the Internet of Vehicles system, the POP point in the backbone network cannot obtain the identity authentication information of the sender from the central platform. Even if the sender CPE is connected to the POP point, it cannot pass the authentication of the POP point and cannot send or obtain data to the Internet of Vehicles system.

[0130] After the identity information is authenticated, the POP point in the backbone network establishes an encrypted tunnel with the sending CPE, receives the data traffic sent by the sending CPE through the encrypted tunnel, and forwards the data traffic to the second POP point. By establishing an encrypted tunnel, data encryption and transmission optimization can be achieved. For example, WAN optimization technology can be used to compress and accelerate the data of a cross-border Internet of Vehicles system, reduce data transmission delays and packet loss, and improve the speed and efficiency of data transmission.

[0131] In the process of forwarding data traffic to the second POP point, SD-WAN technology can be used to optimize data traffic routing according to the business needs and network conditions of the sending CPE, securely transmit encrypted and compressed data, and improve data security and transmission rate.

[0132] In an exemplary embodiment, the method for transmitting data in a cross-border vehicle network further includes:

[0133] Upload the traffic information of this POP point to the central platform;

[0134] Receive the flow control strategy issued by the central platform, where the flow control strategy is formulated by the central platform based on the flow information of each POP point.

[0135] In addition to forwarding the data traffic of the authenticated sending CPE, the POP point in the backbone network can also upload the traffic information of this POP point to the central platform regularly or in real time, so that the central platform can understand the traffic situation of each POP point in the backbone network at any time, and then select the best route according to the traffic situation of each POP point, including selecting the first POP point, the second POP point, and the link path between the first POP point and the second POP point, so as to provide the best sending path for the sending CPE. At the same time, the central platform can also formulate traffic control strategies based on the traffic information of each POP point. The traffic control strategy can be monitoring and auditing of access traffic, quality and bandwidth guarantee, application priority, fault switching, etc. After receiving the traffic control strategy issued by the central platform, the POP point in the backbone network controls the traffic of this node according to the traffic control strategy. The central platform can formulate a unified traffic control strategy based on the traffic information of each POP point, or it can formulate different traffic control strategies based on the traffic conditions of different POP points, so as to enable each POP point to control the traffic within a reasonable range, achieve link load balancing, and prevent excessive traffic at certain POP points, causing network congestion and affecting data transmission efficiency.

[0136] In an exemplary embodiment, before receiving the data traffic sent by the sending end CPE, the POP point in the backbone network further includes:

[0137] According to the access requirements and traffic control policy of the CPE at the sending end, an access control policy is generated and sent to the CPE at the sending end, so that the CPE at the sending end controls the access behavior of the sending end according to the access control policy.

[0138] After the POP point in the backbone network passes the security authentication of the sender CPE, it can generate an access control policy based on the sender's access requirements and traffic control policy, and send it to the sender CPE. The sender CPE needs to access the Internet of Vehicles system according to the access control policy, for example, compress the data, use the data compression algorithm, reduce the bandwidth consumption of data transmission, and thus improve the data transmission efficiency.

[0139] Figure 4 FIG. 1 is a flow chart showing a method for transmitting data in a cross-border vehicle network according to an exemplary embodiment. Figure 4,The transnational vehicle network data transmission method is applied to the transmitting end CPE, including:

[0140] Step S41, sending a connection request to the network controller of the central platform, the connection request including identity information and information of the receiving end, so as to perform identity authentication and link configuration;

[0141] Step S42, receiving configuration information returned by the central platform, the configuration information includes a first access POP point and a second access POP point, the first access POP point is the POP point closest to the sending end or with the best connectivity, and the second access POP point is the POP point closest to the receiving end or with the best connectivity;

[0142] Step S43, establishing an encrypted tunnel with the first access POP point;

[0143] Step S44, sending the data traffic to the first access POP point through the encrypted tunnel, so that the data traffic is transmitted to the second access POP point through the backbone network and sent to the receiving end.

[0144] Before any terminal device needs to send data to other devices or the central platform, it needs to send a connection request to the central platform through the sending CPE, for example, to the network controller of the central platform, and include the identity information and the receiving end information in the connection request. The identity information is used by the network controller of the central platform to authenticate the sending CPE. The receiving end information is used by the network controller of the central platform to determine the access POP point and the transmission link according to the location of the receiving end and the sending end after verifying the legitimacy of the sending CPE identity, and to generate configuration information accordingly.

[0145] After the sending CPE receives the configuration information returned by the central platform, it can determine the first access POP point closest to the sending CPE or with the best connectivity, and the second access POP point closest to the receiving end or with the best connectivity based on the configuration information. The sending CPE establishes an encrypted tunnel with the first access POP point and sends data traffic through the encrypted tunnel. The encrypted data traffic is transmitted to the second access POP point via the backbone network, which improves the data transmission speed and security.

[0146] In an exemplary embodiment, establishing an encrypted tunnel between the transmitting end CPE and the first access POP point includes:

[0147] Sending an access request to the first access POP point, where the access request includes identity information;

[0148] After the identity information is authenticated, an encrypted tunnel is established with the first access POP point.

[0149] After the sender determines the nearest or best-connected access POP point based on the configuration information, it sends an access request to the access POP point, requesting access to the backbone network and transmitting data traffic. The access request includes the identity information of the sender CPE, and the access POP point authenticates the identity of the sender CPE again to prevent unregistered sender CPE or illegal devices from accessing the backbone network, thereby improving the security of the network system. After the identity of the sender CPE is authenticated, the sender CPE establishes an encrypted tunnel with the access POP point, and subsequent data traffic will be encrypted and sent to ensure the secure transmission of subsequent data traffic.

[0150] In an exemplary embodiment, the method for transmitting data in a cross-border vehicle network further includes:

[0151] Receive the access control policy sent by the first access POP point, and control the access behavior of the sender according to the access control policy.

[0152] The access point POP generates access control policies based on the access requirements and traffic control policies of the sender CPE and sends them to the sender CPE. The sender CPE controls the access behavior of the sender based on the access control policies. For example, when bandwidth resources are tight, the sender CPE can be required to compress certain resource data and specify the compression algorithm to save bandwidth resources and improve the transmission efficiency of the backbone network.

[0153] In order to better understand the cross-border vehicle network data transmission method provided by this application, a specific embodiment is used to illustrate it. Specific embodiment 1

[0155] In order to establish a transnational Internet of Vehicles system, an Internet company rented or purchased bandwidth traffic from network nodes of operators in multiple countries, connected multiple network nodes through dedicated lines, and established a cross-border and cross-operator backbone network to provide users with cross-border Internet of Vehicles data transmission. At the same time, a central platform was established to manage the transnational Internet of Vehicles system, establish and improve the 5G network infrastructure of various countries, and deploy Internet of Things devices.

[0156] In order to use the cross-border Internet of Vehicles system, the logistics company registers with the central platform, and the registration information is the vehicle information. After registration, the sender CPE is installed for each vehicle, and the registered vehicle information is input into the corresponding sender CPE as the identity information. At the same time, 5G modules, vehicle sensors, controllers, etc. can also be installed. The vehicle sensors and controllers send the collected data to the sender CPE, and the sender CPE communicates with the local 5G network through the 5G module.

[0157] During cross-border logistics transportation, the sending CPE collects signals from on-board sensors and controllers. According to pre-settings, when it needs to report to the logistics company headquarters, the sending CPE connects to the local 5G network through the 5G module and sends a connection request to the central platform. The connection request includes registered identity information and information of the receiving end (logistics company headquarters).

[0158] After the central platform receives the connection request from the sender CPE, it first verifies the identity information in the connection request. When it is determined that the identity information has been registered in the system, it determines that the sender CPE is a legitimate device, determines the location of the sender CPE based on the information of the 5G base station, and determines the location of the receiving end based on the information of the receiving end (logistics company headquarters), and then determines the POP point closest to the sender or with the best connectivity as the first access POP point, and the POP point closest to the receiving end or with the best connectivity as the second access POP point. Generate configuration information and send it to the sender CPE, so that the sender CPE connects to the first access POP point according to the configuration information, and sends data to the second access POP point via the pre-established backbone network.

[0159] At the same time, the central platform sends the authentication information of the sending end CPE to the first access POP point.

[0160] After receiving the configuration information, the sending end CPE can send an access request to the first access POP point according to the instructions of the configuration information, requesting to connect to the backbone network. The access request also carries the identity information.

[0161] The first access POP point first authenticates the identity information in the access request. If the identity information is consistent with the authentication information of the sender CPE sent by the central platform, the sender CPE device is considered legal and is allowed to access the backbone network. Otherwise, it is denied access to the backbone network. After the identity information is authenticated, an encrypted tunnel is established with the sender CPE, data traffic sent by the sender CPE is received through the encrypted tunnel, and the data traffic is forwarded to the second POP point.

[0162] In this way, each vehicle can upload its current data to the logistics company headquarters through the backbone network in a timely manner, so that the logistics company headquarters can grasp the information of each vehicle at any time.

[0163] While the cross-border Internet of Vehicles system provides services, each POP point reports traffic information to the central platform at any time. The traffic information can be the traffic information of each POP point. The central platform formulates traffic control strategies for each POP point, such as quality and bandwidth guarantee, application priority, fault switching, etc., to ensure the stability and reliability of network connection, while ensuring the priority transmission of important data. Different traffic control strategies can also be formulated according to the traffic conditions of different POP points, so that each POP point can control the traffic within a reasonable range, realize link load balancing, and prevent some POP points from having too much traffic, causing network congestion and affecting data transmission efficiency.

[0164] Traffic information can also be specific to the total traffic information of the POP point and the traffic information of each sending CPE. The central platform can use security policies and threat intelligence analysis technology to determine the access behavior of the sender, monitor and audit the access behavior, detect and defend against malicious behavior in the network, and further improve the security of the cross-border Internet of Vehicles system.

[0165] According to the above embodiments, the cross-border Internet of Vehicles data transmission method provided by this application regards each sending end CPE as an untrusted device. Each sending end CPE needs to be authenticated and authorized by the central platform when connecting to the network. At the same time, according to the configuration information of the central platform, when accessing the backbone network, the identity of the sending end CPE is verified again by the access POP point to ensure secure access to the Internet of Vehicles system and realize secure data transmission. The following key functions can also be realized:

[0166] a. Authentication and authorization: Each sending CPE needs to authenticate and authorize the central platform when connecting to the network. Only vehicles that have passed strict authentication and authorization can obtain access to the network and data, thus ensuring the security of the system.

[0167] b. Security access control: The POP points in the backbone network control the access rights to the network and data based on the identity and authorization information of the sending CPE to ensure compliance with the principle of least privilege. This means that each device can only access the resources it needs, reducing potential security risks.

[0168] c. Data encryption and secure transmission: Use encryption technology to encrypt the transmitted data to ensure that the data is not stolen or tampered with during the transmission process. This measure not only protects user privacy, but also enhances the integrity and confidentiality of the data.

[0169] d. Malicious behavior detection and defense: Use security strategies and threat intelligence analysis technology to detect and defend against malicious behaviors in the network. This active defense mechanism provides additional security protection for the Internet of Vehicles system.

[0170] Through the above functions, the Internet of Vehicles system ensures that each sending CPE connected to the backbone network is a legal device, improves the security of the cross-border Internet of Vehicles system, and ensures the stable operation of the system and the secure transmission of data.

[0171] Figure 5 is a block diagram of a device for transmitting data in a cross-border vehicle network according to an exemplary embodiment. Figure 5 The transnational Internet of Vehicles data transmission device is applied to the central platform, including: a connection request receiving module 501, a first authentication module 502, a configuration module 503, and a configuration information sending module 504.

[0172] The connection request receiving module 501 is configured to receive a connection request sent by a sending end CPE, where the connection request includes identity information of the sending end and information of the receiving end.

[0173] The first authentication module 502 is configured to perform security authentication on the identity information of the sender.

[0174] The configuration module 503 is configured to generate configuration information for the sending end CPE after authentication is passed. The configuration information includes a first access POP point and a second access POP point. The first access POP point is the POP point closest to the sending end or with the best connectivity, and the second access POP point is the POP point closest to the receiving end or with the best connectivity.

[0175] The configuration information sending module 504 is configured to send configuration information to the sending end CPE, so that the sending end CPE is connected to the first access POP point according to the configuration information, and sends data to the second access POP point through the backbone network pre-established by the manufacturer. The backbone network is the SD-WAN core network used to connect multiple regions, areas or operators. The bottom layer is composed of multiple POP points deployed in multiple countries and dedicated lines connecting the POPs.

[0176] Figure 6 is a block diagram of a device for transmitting data in a cross-border vehicle network according to an exemplary embodiment. Figure 6 The cross-border Internet of Vehicles data transmission device also includes: an authentication information management module 601.

[0177] The authentication information management module 601 is configured to generate identity authentication information of the sender, and send the identity authentication information to the POP point of the backbone network, so that the POP point can authenticate the identity of the sender when receiving the access request sent by the sender CPE.

[0178] Figure 7 is a block diagram of a device for transmitting data in a cross-border vehicle network according to an exemplary embodiment. Figure 7 The cross-border Internet of Vehicles data transmission device also includes: a traffic management module 701.

[0179] The traffic management module 701 is configured to obtain traffic information of each POP point, formulate a traffic control strategy according to the traffic information, and send the traffic control strategy to each POP point.

[0180] In an exemplary embodiment, the traffic management module 701 is further configured to determine the access behavior of the sending end according to the traffic information of the CPE of the sending end, and monitor and audit the access behavior.

[0181] Figure 8 is a block diagram of a device for transmitting data in a cross-border vehicle network according to an exemplary embodiment. Figure 8 The transnational Internet of Vehicles data transmission device is applied to the POP point in the backbone network, including: an identity information receiving module 801, an access request receiving module 802, a second authentication module 803, and a data access module 804.

[0182] The identity information receiving module 801 is configured to obtain the identity authentication information of the sender sent by the central platform.

[0183] The access request receiving module 802 is configured to receive an access request sent by a sending end CPE, the access request including the identity information of the sending end and information of a second access POP point, the second access POP point being a POP point that is closest to the receiving end or has the best connectivity.

[0184] The second authentication module 803 is configured to use the identity authentication information of the sender to authenticate the identity information of the CPE of the sender.

[0185] The data access module 804 is configured to establish an encrypted tunnel with the sending end CPE after the identity information is authenticated, receive the data traffic sent by the sending end CPE through the encrypted tunnel, and forward the data traffic to the second POP point.

[0186] Fig. 9 is a block diagram of a device for transmitting data in a cross-border vehicle network according to an exemplary embodiment. Fig. 9 The transnational Internet of Vehicles data transmission device also includes: a traffic uploading module 901 and a traffic control strategy receiving module 902.

[0187] The traffic uploading module 901 is configured to upload the traffic information of the POP point to the central platform.

[0188] The flow control strategy receiving module 902 is configured to receive the flow control strategy issued by the central platform. The flow control strategy is formulated by the central platform according to the flow information of each POP point.

[0189] Fig.10is a block diagram of a device for transmitting data in a cross-border vehicle network according to an exemplary embodiment. Fig.10 The cross-border Internet of Vehicles data transmission device also includes: an access control strategy generation module 1001.

[0190] The access control policy generation module 1001 is configured to generate an access control policy according to the access requirements and traffic control policy of the sending end CPE before receiving the data traffic sent by the sending end CPE, and send it to the sending end CPE so that the sending end CPE controls the access behavior of the sending end according to the access control policy.

[0191] Fig.11 is a block diagram of a device for transmitting data in a cross-border vehicle network according to an exemplary embodiment. Fig.11 The cross-border Internet of Vehicles data transmission device is applied to the sending end CPE, including: a connection request sending module 1101, a configuration information receiving module 1102, an access module 1103, and a data sending module 1104.

[0192] The connection request sending module 1101 is configured to send a connection request to the central platform, where the connection request includes identity information and information of a receiving end.

[0193] The configuration information receiving module 1102 is configured to receive configuration information returned by the central platform, and the configuration information includes a first access POP point and a second access POP point. The first access POP point is a POP point that is closest to the sending end or has the best connectivity, and the second access POP point is a POP point that is closest to the receiving end or has the best connectivity.

[0194] The access module 1103 is configured to establish an encrypted tunnel with the first access POP point.

[0195] The data sending module 1104 is configured to send data traffic to the first access POP point through an encrypted tunnel, so that the data traffic is transmitted to the second access POP point via the backbone network and sent to the receiving end.

[0196] Fig.12 is a block diagram of a device for transmitting data in a cross-border vehicle network according to an exemplary embodiment. Fig.12 The cross-border Internet of Vehicles data transmission device also includes: an access control policy receiving module 1201.

[0197] The access control policy receiving module 1201 is configured to receive the access control policy sent by the first access POP point, and control the access behavior of the sending end according to the access control policy.

[0198] Fig.131 is a block diagram of a computer device 1300 for cross-border vehicle network data transmission according to an exemplary embodiment. For example, the computer device 1300 may be provided as a server. Fig.13 The computer device 1300 includes a processor 1301, and the number of processors can be set to one or more as needed. The computer device 1300 also includes a memory 1302 for storing instructions that can be executed by the processor 1301, such as applications. The number of memories can be set to one or more as needed. The application programs stored therein can be one or more. The processor 1301 is configured to execute instructions to execute the above-mentioned cross-border vehicle network data transmission method.

[0199] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, devices (equipment), or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on a computer-usable storage medium in which a computer-usable program code is included in one or more. Computer storage media include volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules or other data), including but not limited to RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassette, magnetic tape, disk storage or other magnetic storage device, or any other medium that can be used to store desired information and can be accessed by a computer, etc. In addition, it is well known to those of ordinary skill in the art that communication media generally include computer-readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transmission mechanism, and may include any information delivery medium.

[0200] The present application is described with reference to the flowcharts and / or block diagrams of the methods, apparatuses (devices) and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0201] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 Functions specified in one or more boxes

[0202] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0203] In this application, the terms "comprises", "comprising" or any other variations thereof are intended to cover non-exclusive inclusion, so that an article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such article or device. In the absence of more restrictions, the elements defined by the sentence "comprising..." do not exclude the presence of other identical elements in the article or device comprising the elements.

[0204] Although the preferred embodiments of the present application have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0205] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the intention of the present application also includes these modifications and variations.

Claims

1. A method for transmitting data in a transnational vehicle network, characterized in that: Applied to the central platform, including: Receive a connection request sent by a sending end CPE, where the connection request includes identity information of the sending end and information of the receiving end; Performing security authentication on the identity information of the sender; After the authentication is passed, configuration information is generated for the sending end CPE, the configuration information includes a first access POP point and a second access POP point, the first access POP point is the POP point closest to the sending end or with the best connectivity, and the second access POP point is the POP point closest to the receiving end or with the best connectivity; The configuration information is sent to the sending CPE so that the sending CPE is connected to the first access POP point according to the configuration information, and sends data to the second access POP point through the backbone network pre-established by the manufacturer. The backbone network is an SD-WAN core network used to connect multiple regions, areas or operators. The bottom layer is composed of multiple POP points deployed in multiple countries and dedicated lines connecting the POPs.

2. The method for transmitting data in a transnational vehicle network as claimed in claim 1, characterized in that: Also includes: Generate the identity authentication information of the sender, and send the identity authentication information to the POP point of the backbone network, so that the POP point can authenticate the identity of the sender when receiving the access request sent by the CPE of the sender.

3. The method for transmitting data in a transnational vehicle network as claimed in claim 1, characterized in that: Also includes: Obtain the flow information of each POP point, formulate a flow control strategy based on the flow information, and send the flow control strategy to each POP point.

4. The method for transmitting data in a transnational vehicle network as claimed in claim 3, characterized in that: The flow information of the POP point includes the flow information of the sending end CPE, and the cross-border Internet of Vehicles data transmission method further includes: The access behavior of the sending end is determined according to the flow information of the CPE of the sending end, and the access behavior is monitored and audited.

5. A method for transmitting data in a transnational vehicle network, characterized in that: Applied to POP points in the backbone network, including: Obtain the identity authentication information of the sender sent by the central platform; Receiving an access request sent by a sending end CPE, the access request including identity information of the sending end and information of a second access POP point, where the second access POP point is a POP point that is closest to the receiving end or has the best connectivity; Authenticate the identity information of the CPE at the sending end using the identity authentication information of the sending end; After the identity information is authenticated, an encrypted tunnel is established with the sending end CPE, data traffic sent by the sending end CPE is received through the encrypted tunnel, and the data traffic is forwarded to the second POP point.

6. The method for transmitting data in a transnational vehicle network as claimed in claim 5, characterized in that: Also includes: Upload the traffic information of this POP point to the central platform; Receive the flow control strategy issued by the central platform, where the flow control strategy is formulated by the central platform based on the flow information of each POP point.

7. The method for transmitting data in a transnational vehicle network as claimed in claim 6, characterized in that: Before receiving the data traffic sent by the transmitting end CPE, the method further includes: According to the access requirements of the CPE at the sending end and the traffic control policy, an access control policy is generated and sent to the CPE at the sending end, so that the CPE at the sending end controls the access behavior of the sending end according to the access control policy.

8. A method for transmitting data in a cross-border vehicle network, characterized in that: Applied to the sending end CPE, including: Sending a connection request to the central platform, wherein the connection request includes identity information and information of the receiving end; Receive configuration information returned by the central platform, the configuration information including a first access POP point and a second access POP point, the first access POP point being a POP point that is closest to the sending end or has the best connectivity, and the second access POP point being a POP point that is closest to the receiving end or has the best connectivity; Establishing an encrypted tunnel with the first access POP point; The data traffic is sent to the first access POP point through the encrypted tunnel, so that the data traffic is transmitted to the second access POP point through the backbone network and sent to the receiving end.

9. The method for transmitting data in a transnational vehicle network as claimed in claim 8, characterized in that: The establishing of an encrypted tunnel with the first access POP point comprises: Sending an access request to the first access POP point, wherein the access request includes identity information; After the identity information is authenticated, an encrypted tunnel is established with the first access POP point.

10. The method for transmitting data in a transnational vehicle network as claimed in claim 8, characterized in that: Also includes: Receive the access control policy sent by the first access POP point, and control the access behavior of the sender according to the access control policy.

11. A transnational vehicle networking data transmission device, characterized in that: Applied to the central platform, including: A connection request receiving module, used to receive a connection request sent by a sending end CPE, wherein the connection request includes identity information of the sending end and information of the receiving end; A first authentication module, used to perform security authentication on the identity information of the sender; A configuration module, configured to generate configuration information for the transmitting end CPE after authentication is passed, wherein the configuration information includes a first access POP point and a second access POP point, wherein the first access POP point is the POP point closest to the transmitting end or with the best connectivity, and the second access POP point is the POP point closest to the receiving end or with the best connectivity; The configuration information sending module is used to send the configuration information to the sending end CPE, so that the sending end CPE is connected to the first access POP point according to the configuration information, and sends data to the second access POP point through the backbone network pre-established by the manufacturer. The backbone network is used to connect the SD-WAN core network of multiple regions, areas or operators, and the bottom layer is composed of multiple POP points deployed in multiple countries and dedicated lines connecting the POPs.

12. The transnational vehicle network data transmission device according to claim 11, characterized in that: Also includes: The authentication information management module is used to generate the identity authentication information of the sender, and send the identity authentication information to the POP point of the backbone network, so that the POP point can authenticate the identity of the sender when receiving the access request sent by the sender CPE.

13. The transnational vehicle network data transmission device according to claim 11, characterized in that: Also includes: The traffic management module is used to obtain the traffic information of each POP point, formulate a traffic control strategy based on the traffic information, and send the traffic control strategy to each POP point.

14. A transnational vehicle networking data transmission device, characterized in that: Applied to POP points in the backbone network, including: The identity information receiving module is used to obtain the identity authentication information of the sender sent by the central platform; An access request receiving module, used to receive an access request sent by a sending end CPE, wherein the access request includes identity information of the sending end and information of a second access POP point, wherein the second access POP point is a POP point that is closest to the receiving end or has the best connectivity; A second authentication module, configured to authenticate the identity information of the sending end CPE using the identity authentication information of the sending end; The data access module is used to establish an encrypted tunnel with the sending end CPE after the identity information is authenticated, receive the data traffic sent by the sending end CPE through the encrypted tunnel, and forward the data traffic to the second POP point.

15. The transnational vehicle network data transmission device according to claim 14, characterized in that: Also includes: Traffic upload module, used to upload the traffic information of this POP point to the central platform; The flow control strategy receiving module is used to receive the flow control strategy issued by the central platform, and the flow control strategy is formulated by the central platform according to the flow information of each POP point.

16. The transnational vehicle network data transmission device according to claim 15, characterized in that: Also includes: The access control policy generation module is used to generate an access control policy according to the access requirements of the sending end CPE and the traffic control policy before receiving the data traffic sent by the sending end CPE, and send it to the sending end CPE so that the sending end CPE controls the access behavior of the sending end according to the access control policy.

17. A transnational vehicle networking data transmission device, characterized in that: Applied to the sending end CPE, including: A connection request sending module, used to send a connection request to the central platform, wherein the connection request includes identity information and information of the receiving end; A configuration information receiving module, used to receive the configuration information returned by the central platform, wherein the configuration information includes a first access POP point and a second access POP point, wherein the first access POP point is a POP point that is closest to the sending end or has the best connectivity, and the second access POP point is a POP point that is closest to the receiving end or has the best connectivity; An access module, used to establish an encrypted tunnel with the first access POP point; A data sending module is used to send data traffic to the first access POP point through the encrypted tunnel, so that the data traffic is transmitted to the second access POP point via the backbone network and sent to the receiving end.

18. The transnational vehicle network data transmission device according to claim 17, characterized in that: Also includes: The access control policy receiving module is used to receive the access control policy sent by the first access POP point, and control the access behavior of the sending end according to the access control policy.

19. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed, the steps of the method according to any one of claims 1 to 10 are implemented.

20. A computer device comprising a processor, a memory and a computer program stored in the memory, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 10 are implemented.

Images