Channel security management method and device

Abstract

The embodiment of the invention relates to the technical field of information security, and discloses a channel security management method and device, and the method comprises the steps: distributing a corresponding signature algorithm for target data transmitted by a target channel according to a security evaluation result of a target platform when a data transmission signal sent by the target platform is received; using the distributed signature algorithm to sign the target data; wherein the target channel is a data transmission channel between the target platform and a vehicle end; the target data is sent by the target platform. By applying the technical scheme of the invention, the safety management capability of the channel can be improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of information security technology, and specifically to a channel security management method, apparatus, device, and computer-readable storage medium. Background Art

[0002] At present, there are more and more applications from different suppliers in the IVI system of the vehicle cockpit. The OEM manages the supplier of each application in the IVI system of the vehicle cockpit and the security of the OTA channel of each application. For example, any OTA channel directly accessed by the OEM to the IVI system of the vehicle cockpit needs to be registered. If the OTA platform and server of the supplier of the application are registered, the OEM will sign the apk that transmits the application and send the signature back to the supplier of the application. The application is OTA (Over-the-Air) in the supplier's server to download the application to the IVI system of the vehicle cockpit.

[0003] In the existing OTA channel management technology, OEMs usually use a fixed signature algorithm to sign the data transmitted in the OTA channel of the supplier's OTA platform. When the security level of the supplier's OTA platform is low and the possibility of the system cloud side being hacked is high, if the fixed signature algorithm is still used to sign the data transmitted in the OTA channel, it is easy to cause data leakage and tampering in the OTA link, and the security of the managed OTA channel is not high. Summary of the invention

[0004] In view of the above problems, the embodiments of the present application provide a channel security management method, apparatus, device and computer-readable storage medium for improving the security management capabilities of the channel.

[0005] According to one aspect of an embodiment of the present application, a channel security management method is provided, which is applied to a management end, and the method includes:

[0006] When receiving a data transmission signal sent by a target platform, assigning a corresponding signature algorithm to the target data transmitted by the target channel according to the security assessment result of the target platform;

[0007] Signing the target data using the assigned signature algorithm;

[0008] Among them, the target channel is a data transmission channel between the target platform and the vehicle end; the target data is sent by the target platform.

[0009] Specifically, the management end assigns appropriate signature algorithms to the target data transmitted through the channels between suppliers with different security performance and the vehicle end according to the security assessment results of the target platform. The management end can formulate different response strategies for the security risks of the suppliers themselves and improve the security management capabilities of the channels. At the same time, the signature algorithm can be used to identify the channel between the supplier and the vehicle end. Users can locate the corresponding supplier through the signature information of the application, reducing the difficulty of tracing the data of the entire vehicle.

[0010] In an optional manner, before allocating a corresponding signature algorithm to target data transmitted by a target channel according to a security assessment result of the target platform, the method further includes:

[0011] Obtaining configuration information of the target platform;

[0012] A security assessment is performed on the target platform according to the configuration information to obtain a security assessment result.

[0013] Specifically, the management end performs a security assessment on the target platform based on the configuration information of the target platform, and can formulate different response strategies for the security risks existing in the configurations of different suppliers, thereby improving the security management capabilities of the channel between the target platform and the vehicle end.

[0014] In an optional manner, performing a security assessment on the target platform to obtain a security assessment result includes:

[0015] Analyze the configuration information according to preset indicators to obtain analysis results of the security project;

[0016] The security items include one or more combinations of the following: server security performance items, data encryption security items, access control security items, and third-party service security performance items;

[0017] According to the analysis results of the security project, the security assessment results of the target platform are obtained.

[0018] Specifically, the management side comprehensively considers several security projects to analyze the configuration information, assess the security level of the target platform, distinguish the security of suppliers with different configurations, and identify the security risks of different suppliers in configuration. In addition, the management side obtains the analysis results of the third-party service security performance project by analyzing the configuration information, which can realize a comprehensive assessment of the security status of the entire supply chain, so as to select targeted signature algorithms and improve the security management capabilities of the channel between the target platform and the vehicle end.

[0019] In an optional manner, according to the security assessment result of the target platform, a corresponding signature algorithm is assigned to the target data transmitted by the target channel, including:

[0020] According to the security level of the security assessment result, determining a signature algorithm corresponding to the security level as a signature algorithm corresponding to the installation package of the target data;

[0021] Each security level corresponds to one or more signature algorithms.

[0022] Specifically, the management side has formulated a relatively large range of signature algorithms. Based on the supplier's security assessment results, the management side has different restrictions on the range of selectable algorithms at different security levels. For example, for application suppliers with weaker security capabilities, the management side restricts them to a more complex range of signature algorithms to address the security risks of suppliers, make up for the lack of supplier security capabilities, and improve the security management capabilities of the channel between the target platform and the vehicle side.

[0023] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0024] The target data with the signature is sent to the target platform, so that the target platform sends the target data with the signature to the vehicle end through the target channel.

[0025] Specifically, the management end signs the target data using the selected signature algorithm, sends the signed target data to the target platform, and the target platform sends the signed target data to the vehicle end through the target channel. The signature algorithm can be used to identify the channel between the supplier and the vehicle end, and the user can locate the corresponding supplier through the signature information of the application, reducing the difficulty of tracing the vehicle data.

[0026] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0027] If an abnormal signature behavior of the first application is detected, the signature information of the data of the first application is obtained; and according to the signature information of the data of the first application, the first platform corresponding to the data of the first application is determined;

[0028] The abnormal signing behavior includes: the number of signatures on the data of the first application exceeds a preset number within a preset time, or there is unauthorized access to the data of the first application.

[0029] Specifically, the management end saves the signature information of all application data. When abnormal signature behavior of an application is detected, the supplier can be located and the problem can be troubleshooted through the saved signature information, which reduces the difficulty of tracing the abnormal data while improving the security management capabilities of the channel.

[0030] According to another aspect of an embodiment of the present application, a channel security management method is provided, which is applied to a target platform, and the method includes:

[0031] When receiving a transmission request for target data, the data transmission signal and the target data are sent to the management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method described in the present invention, and signs the target data using the assigned signature algorithm;

[0032] Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

[0033] Specifically, when the target platform receives a transmission request for target data, it sends a data transmission signal and target data to the management end, so that the management end can assign a signature algorithm that is appropriate to the target data transmitted through the channel between suppliers with different security performance and the vehicle end according to the security assessment results of the target platform. The management end signs the target data using the assigned signature algorithm. The management end can formulate different response strategies for the security risks of the supplier itself and improve the security management capabilities of the channel. At the same time, the signature algorithm can be used to identify the channel between the supplier and the vehicle end. Users can locate the corresponding supplier through the signature information of the application, reducing the difficulty of tracing the data of the entire vehicle.

[0034] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0035] The signed target data is sent to the vehicle end through the target channel, so that the vehicle end performs signature verification on the signed target data according to the corresponding decryption algorithm;

[0036] Among them, the corresponding decryption algorithm is obtained by the vehicle side through corresponding configuration according to the signature algorithm of the management side.

[0037] Specifically, the target platform will send the signed installation package of the target application to the vehicle side through the target channel to complete the signature verification and installation of the installation package on the vehicle side, and provide security protection for the transmission data of the management side, the target platform and the vehicle side, thereby improving the security management capabilities of the entire supply chain.

[0038] According to another aspect of an embodiment of the present application, a channel security management device is provided, which is applied to a management end, and the channel security management device includes: a signature algorithm distribution module and a signature module;

[0039] A signature algorithm assignment module is used to assign a corresponding signature algorithm to the target data transmitted by the target channel according to the security assessment result of the target platform when receiving the data transmission signal sent by the target platform; the target channel is the data transmission channel between the target platform and the vehicle end;

[0040] The signature module is used to sign the target data using the assigned signature algorithm; the target data is sent by the target platform.

[0041] Specifically, the signature algorithm allocation module of the management device allocates appropriate signature algorithms to the target data transmitted through the channel between suppliers with different security performance and the vehicle end according to the security assessment results of the target platform. The signature algorithm allocation module can formulate different response strategies for the security risks of the supplier itself and improve the security management capabilities of the channel. The signature module uses the allocated signature algorithm to sign the target data. The signature algorithm can be used to identify the channel between the supplier and the vehicle end. Users can locate the corresponding supplier through the signature information of the application, reducing the difficulty of tracing the data of the entire vehicle.

[0042] According to another aspect of an embodiment of the present application, a channel security management device is provided, which is applied to a target platform, and the channel security management device includes: a signature request module;

[0043] A signature request module, configured to, when receiving a transmission request for target data, send a data transmission signal and the target data to a management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method according to any one of claims 1 to 6, and signs the target data using the assigned signature algorithm;

[0044] Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

[0045] Specifically, when the target platform receives a transmission request for target data, the signature request module sends a data transmission signal and target data to the management end, so that the management end can assign a signature algorithm that is appropriate to the target data transmitted through the channel between suppliers with different security performance and the vehicle end according to the security assessment results of the target platform. The management end signs the target data using the assigned signature algorithm. The management end can formulate different response strategies for the security risks of the supplier itself and improve the security management capabilities of the channel. At the same time, the signature algorithm can be used to identify the channel between the supplier and the vehicle end. Users can locate the corresponding supplier through the signature information of the application, reducing the difficulty of tracing the data of the entire vehicle.

[0046] According to another aspect of an embodiment of the present application, a channel security management device is provided, comprising: a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface communicate with each other through the communication bus;

[0047] The memory is used to store at least one executable instruction, and the executable instruction enables the processor to execute the operation of the channel security management method as described in the content of the present invention, or execute the operation of the channel security management method as described in the content of the present invention.

[0048] According to another aspect of an embodiment of the present application, a computer-readable storage medium is provided, in which at least one executable instruction is stored, and the executable instruction enables a channel security management device / apparatus to perform the operations of the channel security management method as described in the content of the present invention, or to perform the operations of the channel security management method as described in the content of the present invention.

[0049] The embodiment of the present application performs security assessments on different target platforms through the management end. At the same time, it can analyze the security of third-party services, realize a comprehensive assessment of the security status of the entire supply chain, formulate different response strategies for the security risks in the configuration of different suppliers and different third-party services, and improve the security management capabilities of the channel between the target platform and the vehicle end.

[0050] In the embodiment of the present application, the management end allocates a signature algorithm suitable for the target data transmitted through the channel between the supplier and the vehicle end with different security performance. The signature algorithm can be used to identify the channel between the supplier and the vehicle end. When an abnormal situation such as data leakage occurs in the application, the user can locate the corresponding target platform through the signature information of the application, so that the target platform can troubleshoot itself, thereby determining the abnormal processing steps in the target platform and tracing the abnormal situation.

[0051] The above description is only an overview of the technical solution of the embodiment of the present application. In order to more clearly understand the technical means of the embodiment of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the embodiment of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] The accompanying drawings are only used to illustrate the embodiments and are not to be considered as limiting the present application. In addition, the same reference symbols are used to represent the same components throughout the accompanying drawings. In the accompanying drawings:

[0053] Figure 1 A schematic diagram showing a flow chart of a first embodiment of a channel security management method provided by the present application;

[0054] Figure 2A schematic diagram showing a flow chart of a second embodiment of the channel security management method provided by the present application;

[0055] Figure 3 A schematic diagram showing the interaction between the management end, the target platform and the vehicle end in one embodiment of the channel safety management method of the present invention;

[0056] Figure 4 A schematic diagram showing the interaction between the management end, the target platform and the vehicle end in another embodiment of the channel safety management method of the present invention;

[0057] Figure 5 A schematic diagram showing the structure of a first embodiment of a channel safety management device provided by the present application is shown;

[0058] Figure 6 A schematic diagram showing the structure of a second embodiment of a channel safety management device provided by the present application is shown;

[0059] Figure 7 A schematic structural diagram of an embodiment of a channel security management device provided in the present application is shown. DETAILED DESCRIPTION

[0060] The exemplary embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present application are shown in the drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments set forth herein.

[0061] Figure 1 The flowchart of the first embodiment of the channel security management method of the present application is shown, and the method is executed by the management end. Preferably, the method is executed by the management end of the host factory. The host factory manages the supplier of each application in the vehicle end and the OTA channel security of each application. Figure 1 As shown, the method comprises the following steps:

[0062] Step 110: when receiving a data transmission signal sent by a target platform, assigning a corresponding signature algorithm to the target data transmitted by the target channel according to the security assessment result of the target platform;

[0063] Among them, the target channel is a data transmission channel between the target platform and the vehicle end; the target data is sent by the target platform.

[0064] Preferably, the target platform is the supplier's OTA platform, and the installation package of the target application is OTA-ed based on the supplier's own server, and the installation package of the target application is transmitted through the OTA channel between the OTA platform and the vehicle side to download the target application to the vehicle side.

[0065] In an optional method, when the user needs to download the installation package of the target application to the vehicle, the target platform adds an OTA channel with the vehicle to transmit the installation package of the target application. At the same time, the target platform sends the data transmission signal corresponding to the installation package of the target application to the management end.

[0066] In an optional manner, when the target application needs to be updated, that is, when the target platform needs to download a new installation package of the target application to the vehicle end, the target platform sends a data transmission signal corresponding to the installation package of the target application to the management end.

[0067] In an optional manner, before allocating a corresponding signature algorithm to target data transmitted by a target channel according to a security assessment result of the target platform, the method further includes:

[0068] Obtaining configuration information of the target platform;

[0069] A security assessment is performed on the target platform according to the configuration information to obtain a security assessment result.

[0070] Preferably, a security assessment is performed on the OTA channel of the target platform according to the configuration information to obtain a security assessment result.

[0071] Preferably, when the target platform establishes communication with the management end, the configuration information is submitted to the management end, and the configuration information is updated regularly to ensure that the management end obtains the latest configuration information and conducts an accurate security assessment of the OTA channel of the target platform. The management end formulates different response strategies for the security risks existing in the configuration of different suppliers to improve the security management capabilities of the channel between the target platform and the vehicle end.

[0072] In an optional manner, the target platform is equipped with software or services of a third-party service provider. The configuration information provided by the target platform to the management end includes: configuration information of the third-party service provider, such as host security information and loading policy information of the third-party service provider. The management end can conduct a comprehensive assessment of the security status of the third-party service provider through the configuration information of the third-party service provider, and realize a comprehensive assessment of the security status of the entire supply chain.

[0073] In an optional manner, performing a security assessment on the target platform to obtain a security assessment result includes:

[0074] Analyze the configuration information according to preset indicators to obtain analysis results of the security project;

[0075] The security items include one or more combinations of the following: server security performance items, data encryption security items, access control security items, and third-party service security performance items;

[0076] According to the analysis results of the security project, the security assessment results of the target platform are obtained.

[0077] In an optional manner, the management end adds or adjusts evaluation indicators for the application supplier's OTA platform according to its own special needs and security policies, such as specific encryption algorithm requirements and data backup policies.

[0078] In an optional way, the management side integrates the evaluation indicators with other security systems. For example, the management side signature system is integrated with the management side's existing network security monitoring system, intrusion detection system and other systems to form a more comprehensive security protection system.

[0079] In an optional manner, the configuration information of the third-party service provider is analyzed to obtain the analysis results of the third-party service security performance project. By analyzing the configuration information to obtain the analysis results of the third-party service security performance project, the management end can achieve a comprehensive assessment of the security status of the entire supply chain.

[0080] Preferably, the configuration information is analyzed according to preset standards and indicators to obtain the analysis results of the security project. According to the analysis results of the security project, the target platform is scored and the security level of the target platform is classified as one of high, medium and low. The management end distinguishes the security of suppliers with different configurations and identifies the security risks of different suppliers in configuration.

[0081] In an optional manner, according to the security assessment result of the target platform, a corresponding signature algorithm is assigned to the target data transmitted by the target channel, including:

[0082] According to the security level of the security assessment result, determining a signature algorithm corresponding to the security level as a corresponding signature algorithm for the target data;

[0083] Each security level corresponds to one or more signature algorithms.

[0084] In an optional manner, before allocating a corresponding signature algorithm to the installation package of the target application transmitted by the target channel, the method further includes:

[0085] Performing a security analysis on the configuration information of the preset signature algorithm to obtain an evaluation result of the preset signature algorithm;

[0086] According to the evaluation result of the preset signature algorithm, at least one signature algorithm is allocated to each security level of the target platform.

[0087] Preferably, the configuration information of the signature algorithm includes but is not limited to: SPK information, authentication key information and encryption key information, etc. The management end analyzes the complexity of the signature algorithm through the configuration information of the signature algorithm, and divides the complexity of the signature algorithm into three levels: low, medium and high. The higher the complexity of the signature algorithm, the higher its security. The management end assigns the signature algorithm with low complexity to the target platform with high security level, assigns the signature algorithm with medium complexity to the target platform with medium security level, and assigns the signature algorithm with high complexity to the target platform with low security level, so as to make up for the lack of supplier security capabilities and improve the management end's security management capabilities of the channel between the target platform and the vehicle end.

[0088] Preferably, after the preset signature algorithms are divided into three levels and allocated to a target platform of a security level, a corresponding signature algorithm set is obtained, and an algorithm is randomly selected from the corresponding signature algorithm set to generate a signature and issue it.

[0089] Exemplarily, the management end performs a security assessment on the OTA channels of supplier platforms A and B, and obtains a security assessment result of the OTA channel of supplier platform A as having a high security level, while a security assessment result of the OTA channel of supplier platform B as having a low security level. The management end randomly selects an algorithm from a set of signature algorithms with low complexity, such as a signature algorithm for RSA 1024-bit encryption, to generate a signature and sends it. The management end randomly selects an algorithm from a set of signature algorithms with high complexity, such as a signature algorithm for ECC 256-bit encryption, to generate a signature and sends it.

[0090] Step 120: Sign the target data using the assigned signature algorithm.

[0091] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0092] The target data with the signature is sent to the target platform, so that the target platform sends the target data with the signature to the vehicle end through the target channel.

[0093] Specifically, when the target application needs to be installed for the first time or needs to be updated, the target platform generates a corresponding installation package and sends it to the management end. The management end uses the assigned signature algorithm to sign the installation package of the target application to obtain a first installation package. The management end sends the first installation package to the target platform so that the target platform sends the first installation package to the vehicle end through the target channel. The signature algorithm can be used to identify the channel between the supplier and the vehicle end. The user can locate the corresponding supplier through the signature information of the application, reducing the difficulty of tracing the vehicle data.

[0094] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0095] If an abnormal signature behavior of the first application is detected, the signature information of the data of the first application is obtained; and according to the signature information of the data of the first application, the first platform corresponding to the data of the first application is determined;

[0096] The abnormal signing behavior includes: the number of signatures on the data of the first application exceeds a preset number within a preset time, or there is unauthorized access to the data of the first application.

[0097] Specifically, the management end records and categorizes the signatures used by the OTA channel of each target platform in detail. When there are signs of data security leakage, the management end extracts the signature information related to the data and determines the corresponding OTA channel and the corresponding supplier. After receiving the notification, the target platform will troubleshoot itself to check whether there are problems such as hacker attacks, internal personnel misoperation, or the supplier's own system vulnerabilities, so as to locate the specific processing steps for information leakage on the target platform, reduce the difficulty of tracing the abnormal data, and improve the security management capabilities of the channel.

[0098] For example, if it is found that the data of APP supplier platform C has abnormal flow or unauthorized access, the management end obtains the OTA channel signature with APP supplier platform C. The obtained OTA channel signature is compared and analyzed with the signature characteristics under normal circumstances to determine whether there is a problem with the channel signature of APP supplier platform C. The signature characteristics and complexity of OTA channels with different security levels are different. In the process of analyzing the OTA channel, the management end distinguishes the scope of possible problems based on the signature characteristics. For example, in the case of abnormal problems in a channel with a low security level but a high-complexity and strong security signature algorithm, since the signature adopted by the channel is highly complex and has strong security, it may be that the attacker used a high-intensity attack method to attack and cause data abnormalities. For the case of abnormal problems in a channel with a high security level but a relatively simple signature, it may be more necessary to find the cause from the internal management or process of the supplier platform.

[0099] Compared with the prior art, this application distributes a signature algorithm that is suitable for the data of the target application transmitted through the channel between the supplier and the vehicle end with different security performance through the management end. The signature algorithm can be used to identify the channel between the supplier and the vehicle end. When an abnormal situation such as data leakage occurs in the application, the user can locate the corresponding target platform through the signature information of the application, so that the target platform can troubleshoot itself, thereby determining the abnormal processing steps in the target platform and tracing the abnormal situation.

[0100] Figure 2 FIG. 1 is a flow chart showing a second embodiment of the channel security management method of the present application, which is executed by the target platform. Figure 2 As shown, the method comprises the following steps:

[0101] Step 210: When receiving a transmission request for target data, a data transmission signal and the target data are sent to the management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method of this embodiment, and signs the target data using the assigned signature algorithm;

[0102] Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

[0103] In an optional method, when the user needs to download the installation package of the target application to the vehicle, the target platform adds an OTA channel with the vehicle to transmit the installation package of the target application. At the same time, the target platform sends the data transmission signal corresponding to the installation package of the target application to the management end.

[0104] In an optional manner, when the target application needs to be updated, that is, when the target platform needs to download a new installation package of the target application to the vehicle end, the target platform sends a data transmission signal corresponding to the installation package of the target application to the management end.

[0105] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0106] The signed target data is sent to the vehicle end through the target channel, so that the vehicle end performs signature verification on the signed target data according to the corresponding decryption algorithm;

[0107] Among them, the corresponding decryption algorithm is obtained by the vehicle side through corresponding configuration according to the signature algorithm of the management side.

[0108] Preferably, before the vehicle end performs signature verification on the target data obtained by the signature according to the corresponding decryption algorithm, it also includes: the management end sends the signature algorithm information or the corresponding decryption algorithm to the vehicle end through a conventional channel. The conventional channel is a transmission channel between the management end and the vehicle end. If the vehicle end receives the signature algorithm information, the corresponding decryption algorithm is obtained.

[0109] The vehicle side saves the decryption algorithm corresponding to the signature algorithm of the management side. When the vehicle side receives the installation package sent by the target platform through the target channel, it identifies the signature algorithm of the installation package and matches the corresponding decryption algorithm, and performs signature verification on the installation package according to the corresponding decryption algorithm.

[0110] Compared with the prior art, this application sends the channel information of the target channel to the management end when the target platform receives the installation request of the target application, so that the management end can assign appropriate signature algorithms to the installation packages of the target applications transmitted through the channels between suppliers with different security performance and the vehicle end according to the security assessment results of the target platform. The management end can formulate different response strategies for the security risks of the suppliers themselves and improve the security management capabilities of the channels. At the same time, the signature algorithm can be used to identify the channel between the supplier and the vehicle end, and the user can locate the corresponding supplier through the signature information of the application, reducing the difficulty of tracing the data of the whole vehicle.

[0111] The interaction between the management end, the target platform and the vehicle end involved in executing the channel security management method in some embodiments of the present invention is specifically described:

[0112] Figure 3 FIG. 1 is a schematic diagram showing the interaction between the management end, the target platform and the vehicle end of an embodiment of the channel safety management method of the present invention. Figure 3 As shown, it includes the management end, the target platform and the vehicle end, including the interaction steps 301-308:

[0113] Step 301: When the target platform establishes communication with the management end, the target platform submits configuration information to the management end and regularly updates the configuration information to ensure that the management end obtains the latest configuration information and performs accurate security assessment on the OTA channel of the target platform.

[0114] Step 302: The target platform adds a new OTA channel with the vehicle end for transmitting the installation package of the target application.

[0115] Step 303: When the user needs to download the installation package of the target application to the vehicle end, or when the target application needs to be updated, that is, when the target platform needs to download the new installation package of the target application to the vehicle end, the target platform sends the data transmission signal corresponding to the installation package of the target application to the management end.

[0116] Step 304: When receiving the data transmission signal sent by the target platform, the management end assigns a corresponding signature algorithm to the installation package of the target application transmitted by the target channel according to the security assessment result of the target platform. The management end uses the corresponding signature algorithm of the installation package of the target application to sign the installation package of the target application to obtain a first installation package; wherein the installation package of the target application is sent by the target platform.

[0117] Step 305: Send the first installation package to the target platform.

[0118] Step 306: The target platform performs OTA on the target application through the target channel and sends the first installation package to the vehicle end.

[0119] Step 307: Establish a regular channel between the management end and the vehicle end, and the management end sends the signature algorithm information or the corresponding decryption algorithm to the vehicle end through the regular channel. If the vehicle end receives the signature algorithm information, it obtains the corresponding decryption algorithm.

[0120] Step 308: The vehicle side saves the decryption algorithm corresponding to the signature algorithm of the management side. When the vehicle side receives the first installation package sent by the target platform through the target channel, the signature algorithm of the first installation package is identified and matched with the corresponding decryption algorithm, and the signature of the first installation package is verified according to the corresponding decryption algorithm.

[0121] The management end conducts security assessments on different target platforms. At the same time, it can analyze the security of third-party services, conduct a comprehensive assessment of the security status of the entire supply chain, formulate different response strategies for security risks in the configuration of different suppliers and different third-party services, and improve the security management capabilities of the channel between the target platform and the vehicle.

[0122] Figure 4 FIG. 1 is a schematic diagram showing the interaction between the management end, the target platform and the vehicle end of another embodiment of the channel safety management method of the present invention. Figure 4 As shown, it includes the management end, the target platform and the vehicle end, including the interaction steps 401-404:

[0123] Step 401: If the vehicle side detects abnormal signature behavior of the first application, the vehicle side sends abnormal information to the management side through a regular channel to notify the management side that the first application is abnormal.

[0124] The abnormal signing behavior includes: the number of times the installation package of the first application is signed exceeds a preset number within a preset time, or there is unauthorized access to the installation package data of the first application.

[0125] Step 402: The management end obtains the signature information of the installation package of the first application; and determines the first supplier corresponding to the installation package of the first application according to the signature information of the installation package of the first application.

[0126] Step 403: The management end sends an exception troubleshooting request to the target platform corresponding to the first supplier.

[0127] Step 404: After receiving the exception troubleshooting request from the management end, the target platform performs problem troubleshooting on the first application.

[0128] The signature algorithm assigned by the management end to the installation package of the target application can be used to identify the channel between the supplier and the vehicle end. When an abnormal situation such as data leakage occurs in the application, the user can locate the corresponding target platform through the signature information of the application in the management end, so that the target platform can troubleshoot itself, thereby determining the abnormal processing steps in the target platform and tracing the source of the abnormal situation.

[0129] Figure 5 FIG. 1 is a schematic diagram showing the structure of the first embodiment of the channel security management device of the present application. Figure 5 As shown, the device 500 is applied to a management end, and includes: a signature algorithm allocation module 510 and a signature module 520.

[0130] A signature algorithm assignment module is used to assign a corresponding signature algorithm to the target data transmitted by the target channel according to the security assessment result of the target platform when receiving the data transmission signal sent by the target platform; the target channel is the data transmission channel between the target platform and the vehicle end;

[0131] The signature module 520 is used to sign the target data using the assigned signature algorithm; the target data is sent by the target platform.

[0132] In an optional manner, before allocating a corresponding signature algorithm to target data transmitted by a target channel according to a security assessment result of the target platform, the method further includes:

[0133] Obtaining configuration information of the target platform;

[0134] A security assessment is performed on the target platform according to the configuration information to obtain a security assessment result.

[0135] In an optional manner, performing a security assessment on the target platform to obtain a security assessment result includes:

[0136] Analyze the configuration information according to preset indicators to obtain analysis results of the security project;

[0137] The security items include one or more combinations of the following: server security performance items, data encryption security items, access control security items, and third-party service security performance items;

[0138] According to the analysis results of the security project, the security assessment results of the target platform are obtained.

[0139] In an optional manner, according to the security assessment result of the target platform, a corresponding signature algorithm is assigned to the target data transmitted by the target channel, including:

[0140] According to the security level of the security assessment result, determining a signature algorithm corresponding to the security level as a signature algorithm corresponding to the installation package of the target data;

[0141] Each security level corresponds to one or more signature algorithms.

[0142] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0143] The target data with the signature is sent to the target platform, so that the target platform sends the target data with the signature to the vehicle end through the target channel.

[0144] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0145] If an abnormal signature behavior of the first application is detected, the signature information of the data of the first application is obtained; and according to the signature information of the data of the first application, the first platform corresponding to the data of the first application is determined;

[0146] The abnormal signing behavior includes: the number of signatures on the data of the first application exceeds a preset number within a preset time, or there is unauthorized access to the data of the first application.

[0147] According to another aspect of an embodiment of the present application, a channel security management method is provided, which is applied to a target platform, and the method includes:

[0148] When receiving a transmission request for target data, the data transmission signal and the target data are sent to the management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method described in the present invention, and signs the target data using the assigned signature algorithm;

[0149] Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

[0150] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0151] The signed target data is sent to the vehicle end through the target channel, so that the vehicle end performs signature verification on the signed target data according to the corresponding decryption algorithm;

[0152] Among them, the corresponding decryption algorithm is obtained by the vehicle side through corresponding configuration according to the signature algorithm of the management side.

[0153] Compared with the existing technology, the signature algorithm allocation module of the management device allocates appropriate signature algorithms to the installation packages of target applications transmitted through the channels between suppliers with different security performance and the vehicle end according to the security assessment results of the target platform. The signature algorithm allocation module can formulate different response strategies for the security risks of the suppliers themselves, and improve the security management capabilities of the channels. At the same time, the signature algorithm can be used to identify the channel between the supplier and the vehicle end, and the user can locate the corresponding supplier through the signature information of the application, reducing the difficulty of tracing the data of the whole vehicle.

[0154] Figure 6 FIG. 1 is a schematic diagram showing the structure of the first embodiment of the channel security management device of the present application. Figure 6 As shown, the device 600 is applied to a target platform and includes: a signature request module 610.

[0155] A signature algorithm assignment module, configured to, when receiving a transmission request for target data, send a data transmission signal and the target data to a management terminal, so that the management terminal assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method of this embodiment, and signs the target data using the assigned signature algorithm;

[0156] Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

[0157] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0158] The signed target data is sent to the vehicle end through the target channel, so that the vehicle end performs signature verification on the signed target data according to the corresponding decryption algorithm;

[0159] Among them, the corresponding decryption algorithm is obtained by the vehicle side through corresponding configuration according to the signature algorithm of the management side.

[0160] Compared with the existing technology, when the target platform receives the installation request of the target application, the signature request module sends the channel information of the target channel to the management end, so that the management end can assign appropriate signature algorithms to the installation packages of the target applications transmitted through the channels between suppliers with different security performance and the vehicle end according to the security assessment results of the target platform. The management end can formulate different response strategies for the security risks of the suppliers themselves and improve the security management capabilities of the channels. At the same time, the signature algorithm can be used to identify the channel between the supplier and the vehicle end, and the user can locate the corresponding supplier through the signature information of the application, reducing the difficulty of tracing the data of the whole vehicle.

[0161] Figure 7A structural schematic diagram of an embodiment of the channel security management device of the present application is shown. The specific embodiment of the present application does not limit the specific implementation of the channel security management device.

[0162] like Figure 7 As shown, the channel security management device may include: a processor (processor) 702, a communication interface (Communications Interface) 704, a memory (memory) 706, and a communication bus 708.

[0163] The processor 702, the communication interface 704, and the memory 706 communicate with each other via the communication bus 708. The communication interface 704 is used to communicate with other devices such as a client or other server network elements. The processor 702 is used to execute the program 710, which can specifically execute the relevant steps in the above-mentioned embodiment of the channel security management method.

[0164] Specifically, the program 710 may include program code including computer executable instructions.

[0165] The processor 702 may be a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application. The one or more processors included in the channel security management device may be processors of the same type, such as one or more CPUs; or may be processors of different types, such as one or more CPUs and one or more ASICs.

[0166] The memory 706 is used to store the program 710. The memory 706 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

[0167] Program 710 can be specifically called by processor 702 to enable the channel security management device to perform the following operations:

[0168] When receiving a data transmission signal sent by a target platform, assigning a corresponding signature algorithm to the target data transmitted by the target channel according to the security assessment result of the target platform;

[0169] Signing the target data using the assigned signature algorithm;

[0170] Among them, the target channel is a data transmission channel between the target platform and the vehicle end; the target data is sent by the target platform.

[0171] In an optional manner, before allocating a corresponding signature algorithm to target data transmitted by a target channel according to a security assessment result of the target platform, the method further includes:

[0172] Obtaining configuration information of the target platform;

[0173] A security assessment is performed on the target platform according to the configuration information to obtain a security assessment result.

[0174] In an optional manner, performing a security assessment on the target platform to obtain a security assessment result includes:

[0175] Analyze the configuration information according to preset indicators to obtain analysis results of the security project;

[0176] The security items include one or more combinations of the following: server security performance items, data encryption security items, access control security items, and third-party service security performance items;

[0177] According to the analysis results of the security project, the security assessment results of the target platform are obtained.

[0178] In an optional manner, according to the security assessment result of the target platform, a corresponding signature algorithm is assigned to the target data transmitted by the target channel, including:

[0179] According to the security level of the security assessment result, determining a signature algorithm corresponding to the security level as a signature algorithm corresponding to the installation package of the target data;

[0180] Each security level corresponds to one or more signature algorithms.

[0181] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0182] The target data with the signature is sent to the target platform, so that the target platform sends the target data with the signature to the vehicle end through the target channel.

[0183] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0184] If an abnormal signature behavior of the first application is detected, the signature information of the data of the first application is obtained; and according to the signature information of the data of the first application, the first platform corresponding to the data of the first application is determined;

[0185] The abnormal signing behavior includes: the number of signatures on the data of the first application exceeds a preset number within a preset time, or there is unauthorized access to the data of the first application.

[0186] According to another aspect of an embodiment of the present application, a channel security management method is provided, which is applied to a target platform, and the method includes:

[0187] When receiving a transmission request for target data, the data transmission signal and the target data are sent to the management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method described in the present invention, and signs the target data using the assigned signature algorithm;

[0188] Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

[0189] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0190] The signed target data is sent to the vehicle end through the target channel, so that the vehicle end performs signature verification on the signed target data according to the corresponding decryption algorithm;

[0191] Among them, the corresponding decryption algorithm is obtained by the vehicle side through corresponding configuration according to the signature algorithm of the management side.

[0192] In an optional manner, the program 710 is called by the processor 702 to enable the channel security management device to perform the following operations:

[0193] When receiving a transmission request for target data, the data transmission signal and the target data are sent to the management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method described in this embodiment, and signs the target data using the assigned signature algorithm;

[0194] Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

[0195] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0196] The signed target data is sent to the vehicle end through the target channel, so that the vehicle end performs signature verification on the signed target data according to the corresponding decryption algorithm;

[0197] Among them, the corresponding decryption algorithm is obtained by the vehicle side through corresponding configuration according to the signature algorithm of the management side.

[0198] An embodiment of the present application provides a computer-readable storage medium, which stores at least one executable instruction. When the executable instruction is executed on a channel security management device / apparatus, the channel security management device / apparatus executes the channel security management method in any of the above method embodiments.

[0199] The executable instructions may be specifically used to enable the channel security management device / apparatus to perform the following operations:

[0200] When receiving a data transmission signal sent by a target platform, assigning a corresponding signature algorithm to the target data transmitted by the target channel according to the security assessment result of the target platform;

[0201] Signing the target data using the assigned signature algorithm;

[0202] Among them, the target channel is a data transmission channel between the target platform and the vehicle end; the target data is sent by the target platform.

[0203] In an optional manner, before allocating a corresponding signature algorithm to target data transmitted by a target channel according to a security assessment result of the target platform, the method further includes:

[0204] Obtaining configuration information of the target platform;

[0205] A security assessment is performed on the target platform according to the configuration information to obtain a security assessment result.

[0206] In an optional manner, performing a security assessment on the target platform to obtain a security assessment result includes:

[0207] Analyze the configuration information according to preset indicators to obtain analysis results of the security project;

[0208] The security items include one or more combinations of the following: server security performance items, data encryption security items, access control security items, and third-party service security performance items;

[0209] According to the analysis results of the security project, the security assessment results of the target platform are obtained.

[0210] In an optional manner, according to the security assessment result of the target platform, a corresponding signature algorithm is assigned to the target data transmitted by the target channel, including:

[0211] According to the security level of the security assessment result, determining a signature algorithm corresponding to the security level as a signature algorithm corresponding to the installation package of the target data;

[0212] Each security level corresponds to one or more signature algorithms.

[0213] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0214] The target data with the signature is sent to the target platform, so that the target platform sends the target data with the signature to the vehicle end through the target channel.

[0215] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0216] If an abnormal signature behavior of the first application is detected, the signature information of the data of the first application is obtained; and according to the signature information of the data of the first application, the first platform corresponding to the data of the first application is determined;

[0217] The abnormal signing behavior includes: the number of signatures on the data of the first application exceeds a preset number within a preset time, or there is unauthorized access to the data of the first application.

[0218] According to another aspect of an embodiment of the present application, a channel security management method is provided, which is applied to a target platform, and the method includes:

[0219] When receiving a transmission request for target data, the data transmission signal and the target data are sent to the management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method described in the present invention, and signs the target data using the assigned signature algorithm;

[0220] Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

[0221] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0222] The target data with the signature is sent to the vehicle end through the target channel, so that the vehicle end performs signature verification on the target data with the signature according to the corresponding decryption algorithm;

[0223] Among them, the corresponding decryption algorithm is obtained by the vehicle side through corresponding configuration according to the signature algorithm of the management side.

[0224] In an optional manner, the executable instruction enables the channel security management device / apparatus to perform the following operations:

[0225] When receiving a transmission request for target data, the data transmission signal and the target data are sent to the management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method described in this embodiment, and signs the target data using the assigned signature algorithm;

[0226] Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

[0227] In an optional manner, after signing the target data using the assigned signature algorithm, the method further includes:

[0228] The target data with the signature is sent to the vehicle end through the target channel, so that the vehicle end performs signature verification on the target data with the signature according to the corresponding decryption algorithm;

[0229] Among them, the corresponding decryption algorithm is obtained by the vehicle side through corresponding configuration according to the signature algorithm of the management side.

[0230] The algorithms or displays provided herein are not inherently related to any particular computer, virtual system or other device. In addition, the embodiments of the present application are not directed to any particular programming language.

[0231] In the specification provided herein, a large number of specific details are described. However, it is understood that the embodiments of the present application can be practiced without these specific details. Similarly, in order to simplify the application and help understand one or more of the various inventive aspects, in the above description of the exemplary embodiments of the present application, the various features of the embodiments of the present application are sometimes grouped together into a single embodiment, figure, or description thereof. Wherein, the claims that follow the specific embodiment are thus clearly incorporated into the specific embodiment, wherein each claim itself is used as a separate embodiment of the application.

[0232] Those skilled in the art will appreciate that the modules in the devices in the embodiments may be adaptively changed and arranged in one or more devices different from the embodiments. The modules or units or components in the embodiments may be combined into one module or unit or component, and further may be divided into a plurality of submodules or subunits or subcomponents. Except that at least some of such features and / or processes or units are mutually exclusive.

[0233] It should be noted that the above embodiments illustrate the present application rather than limit the present application, and that those skilled in the art may design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference symbol between brackets shall not be constructed as a limitation on the claims. The word "comprising" does not exclude the presence of elements or steps not listed in the claims. The word "one" or "an" preceding an element does not exclude the presence of multiple such elements. The present application may be implemented by means of hardware including several different elements and by means of a suitably programmed computer. In a unit claim that lists several devices, several of these devices may be embodied by the same hardware item. The use of the words first, second, and third, etc. does not indicate any order. These words may be interpreted as names. The steps in the above embodiments, unless otherwise specified, should not be understood as limitations on the order of execution.

Claims

1. A channel security management method, characterized in that: Applied to the management end, the channel security management method includes: When receiving a data transmission signal sent by a target platform, assigning a corresponding signature algorithm to the target data transmitted by the target channel according to the security assessment result of the target platform; Signing the target data using the assigned signature algorithm; Among them, the target channel is a data transmission channel between the target platform and the vehicle end; the target data is sent by the target platform.

2. The channel safety management method according to claim 1, characterized in that: According to the security assessment result of the target platform, before assigning a corresponding signature algorithm to the target data transmitted by the target channel, the method further includes: Obtaining configuration information of the target platform; A security assessment is performed on the target platform according to the configuration information to obtain a security assessment result.

3. The channel safety management method according to claim 2, characterized in that: Perform a security assessment on the target platform to obtain a security assessment result, including: Analyze the configuration information according to preset indicators to obtain analysis results of the security project; The security items include one or more combinations of the following: server security performance items, data encryption security items, access control security items, and third-party service security performance items; According to the analysis results of the security project, the security assessment results of the target platform are obtained.

4. The channel safety management method according to claim 1, characterized in that: According to the security assessment result of the target platform, a corresponding signature algorithm is assigned to the target data transmitted by the target channel, including: According to the security level of the security assessment result, determining a signature algorithm corresponding to the security level as a corresponding signature algorithm for the target data; Each security level corresponds to one or more signature algorithms.

5. The channel safety management method according to claim 4, characterized in that: After signing the target data using the assigned signature algorithm, the method further includes: The target data with the signature is sent to the target platform, so that the target platform sends the target data with the signature to the vehicle end through the target channel.

6. The channel safety management method according to claim 5, characterized in that: After signing the target data using the assigned signature algorithm, the method further includes: If an abnormal signature behavior of the first application is detected, the signature information of the data of the first application is obtained; and according to the signature information of the data of the first application, the first platform corresponding to the data of the first application is determined; The abnormal signing behavior includes: the number of signatures on the data of the first application exceeds a preset number within a preset time, or there is unauthorized access to the data of the first application.

7. A channel security management method, characterized in that: Applied to the target platform, the channel security management method includes: When receiving a transmission request for target data, sending a data transmission signal and the target data to a management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method according to any one of claims 1 to 6, and signs the target data using the assigned signature algorithm; Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

8. The channel safety management method according to claim 7, characterized in that: After signing the target data using the assigned signature algorithm, the method further includes: The signed target data is sent to the vehicle end through the target channel, so that the vehicle end performs signature verification on the signed target data according to the corresponding decryption algorithm; Among them, the corresponding decryption algorithm is obtained by the vehicle side through corresponding configuration according to the signature algorithm of the management side.

9. A channel safety management device, characterized in that: Applied to the management end, the channel security management device includes: a signature algorithm distribution module and a signature module; A signature algorithm assignment module is used to assign a corresponding signature algorithm to the target data transmitted by the target channel according to the security assessment result of the target platform when receiving the data transmission signal sent by the target platform; the target channel is the data transmission channel between the target platform and the vehicle end; The signature module is used to sign the target data using the assigned signature algorithm; the target data is sent by the target platform.

10. A channel safety management device, characterized in that: Applied to the target platform, the channel security management device comprises: a signature request module; A signature request module, configured to, when receiving a transmission request for target data, send a data transmission signal and the target data to a management end, so that the management end assigns a corresponding signature algorithm to the target data transmitted by the target channel according to the channel security management method according to any one of claims 1 to 6, and signs the target data using the assigned signature algorithm; Among them, the target channel is the data transmission channel between the target platform and the vehicle end.

Images