Data protection method, device and equipment for vehicle-mounted terminal and storage medium

Abstract

The invention discloses a data protection method and device for a vehicle-mounted terminal, equipment and a storage medium, and relates to the technical field of data security. The method comprises the steps that when a data protection instruction of a user is received, the data protection instruction is analyzed, and the instruction type of the data protection instruction is determined; selecting a target protection function from the candidate protection functions according to the data protection instruction and the instruction type; the candidate protection functions comprise a file scanning function, an integrity measurement function, a port access control function, an intrusion prevention function and a data protection function; and performing data protection on the vehicle-mounted terminal according to the instruction type and the target protection function, and feeding back a data protection condition in real time. According to the technical scheme, data protection is carried out through various protection functions set by the vehicle-mounted terminal, intrusion risk disposal is added in a targeted mode on the basis of an original vehicle-mounted terminal, and the safety and reliability of the vehicle-mounted terminal can be improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of data security technology, in particular to the field of vehicle-mounted information protection technology, and specifically to a data protection method, device, equipment and storage medium for a vehicle-mounted terminal. Background Art

[0002] With the rapid development of the automobile industry and Internet technology, the degree of automobile networking is becoming increasingly higher, which has led to the emergence of the Internet of Vehicles.

[0003] The Internet of Vehicles is connected to the Internet through mobile networks, and the security situation of mobile Internet is not optimistic. Many hackers can easily exploit the vulnerabilities of mobile terminals and related applications and use the network channels to cause abnormalities in the vehicle information service terminals. Generally speaking, due to their own functional requirements, APP (Application) or mobile terminals usually communicate with some control systems of the vehicle to obtain relevant control permissions and related information. Therefore, once the vulnerabilities of the APP are captured by hackers, they can use these vulnerabilities to steal information or control the vehicle through the APP or other mobile smart terminals. Summary of the invention

[0004] The present application provides a data protection method, device, equipment and storage medium for a vehicle-mounted terminal to improve the security and reliability of the vehicle-mounted terminal.

[0005] According to one aspect of the present application, a data protection method for a vehicle terminal is provided, the method comprising:

[0006] When receiving a data protection instruction from a user, parsing the data protection instruction to determine the instruction type of the data protection instruction;

[0007] According to the data protection instruction and the instruction type, a target protection function is selected from candidate protection functions; the candidate protection functions include a file scanning function, an integrity measurement function, a port access control function, an intrusion prevention function and a data protection function;

[0008] According to the instruction type and the target protection function, data protection is performed on the vehicle terminal, and the data protection status is fed back in real time.

[0009] According to another aspect of the present application, a data protection device for a vehicle-mounted terminal is provided, the device comprising:

[0010] A type determination module, configured to parse the data protection instruction upon receiving the data protection instruction from the user, and determine the instruction type of the data protection instruction;

[0011] A function selection module, configured to select a target protection function from candidate protection functions according to the data protection instruction and the instruction type; the candidate protection functions include a file scanning function, an integrity measurement function, a port access control function, an intrusion prevention function, and a data protection function;

[0012] The data protection module is used to perform data protection on the vehicle terminal according to the instruction type and the target protection function, and to provide real-time feedback on the data protection status.

[0013] According to another aspect of the present application, an electronic device is provided, the electronic device comprising:

[0014] one or more processors;

[0015] A memory for storing one or more programs;

[0016] When the one or more programs are executed by the one or more processors, the one or more processors implement any one of the vehicle-mounted terminal data protection methods provided in the embodiments of the present application.

[0017] According to another aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored. When the program is executed by a processor, the data protection method for any vehicle-mounted terminal provided in the embodiments of the present application is implemented.

[0018] This application parses the data protection instruction upon receiving the data protection instruction from the user to determine the instruction type of the data protection instruction; selects the target protection function from the candidate protection functions according to the data protection instruction and the instruction type; the candidate protection functions include file scanning function, integrity measurement function, port access control function, intrusion prevention function and data protection function; performs data protection on the vehicle terminal according to the instruction type and the target protection function, and provides real-time feedback on the data protection status. The above technical solution performs data protection through various protection functions set on the vehicle terminal, and adds targeted intrusion risk handling on the basis of the original vehicle terminal, which helps to improve the security and reliability of the vehicle terminal. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 is a flow chart of a data protection method for a vehicle terminal provided according to the first embodiment of the present application;

[0020] Figure 2 is a flow chart of a data protection method for a vehicle terminal provided according to Embodiment 2 of the present application;

[0021] Figure 3 is a structural schematic diagram of a data protection device for a vehicle terminal provided according to Embodiment 3 of the present application;

[0022] Figure 4 It is a schematic diagram of the structure of an electronic device that implements the data protection method for a vehicle-mounted terminal of an embodiment of the present application. DETAILED DESCRIPTION

[0023] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0024] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0025] In addition, it should be noted that the collection, storage, use, processing, transmission, provision and disclosure of relevant data such as data protection instructions and instruction types involved in the technical solution of this application are in compliance with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0026] Embodiment 1

[0027] Figure 1 This is a flow chart of a data protection method for a vehicle terminal provided according to the first embodiment of the present application. This embodiment is applicable to the case where a vehicle terminal performs data protection, and can be executed by a data protection device of the vehicle terminal. The data protection device of the vehicle terminal can be implemented in the form of hardware and / or software. The data protection device of the vehicle terminal can be configured in a computer device, such as a data protection system of the vehicle terminal. Figure 1 As shown, the method includes:

[0028] S110. When receiving a data protection instruction from a user, parse the data protection instruction to determine the instruction type of the data protection instruction.

[0029] The user refers to the user who currently controls the vehicle terminal. Data protection instructions are issued by the user (usually a system administrator, user or other controller) to require the vehicle terminal to perform certain data protection operations; they may include data security-related tasks such as scanning, monitoring, interception, encryption, etc.; illustratively, data protection instructions can be triggered by the user clicking on a functional component on the screen of the vehicle terminal. Instruction type refers to the classification standard of data protection instructions, and the instruction type determines what kind of operation the instruction needs to perform.

[0030] In an optional embodiment, the data protection method of the present application can be executed by a data protection system, which may include a front-end interface layout module, a front-end interaction module, a back-end service control module and a remote interaction module; the front-end interaction module is communicated with the back-end service control module and the remote interaction module respectively; the back-end service control module and the remote interaction module are communicated with each other; accordingly, the user triggers the generation of a data protection instruction in the front-end interaction module, and the front-end interaction module sends the instruction to the back-end service control module; the data protection instruction is parsed by the back-end service control module to obtain the instruction type of the data protection instruction.

[0031] It should be noted that the front-end interaction module can use the Handler (Event Handler) mechanism to implement the message update display function; for information that needs to be displayed in the system notification bar, obtain the system notification bar permission to trigger the construction of notification bar information. When the user interacts, the data in the notification bar is extracted and processed; and it supports users to switch interfaces independently, adopts the Fragment fragmentation mechanism, and retains the data before the user switches the interface.

[0032] In another optional implementation, before receiving the data protection instruction from the user, the current vehicle data of the target vehicle and the screen data of the vehicle-mounted terminal are obtained; based on the current vehicle data and screen data, the screen interface of the vehicle-mounted terminal is determined and displayed; wherein the screen interface includes a scanning interface, a hosting interface, a function switch interface, an alarm prompt information interface, a remote help interface and a basic settings interface.

[0033] Among them, the current vehicle data refers to the relevant data used to describe the design style of the vehicle, and for example, it can be the interior color of the vehicle. Screen data refers to the physical information of the screen of the vehicle terminal, such as size, resolution, etc. The screen interface refers to the graphical interface displayed by the vehicle terminal, including different functional modules and operation interfaces, which are used to guide user operations and display important information. The scanning interface refers to one of the interfaces of the vehicle terminal, which is usually used to start and display the status and results of file scanning, virus checking or other data protection operations. The hosting interface refers to one of the interfaces of the vehicle terminal, which may be used to display and manage the hosted devices or services in the system, including connected external devices and network resources. The function switch interface refers to one of the interfaces of the vehicle terminal, which is used to control the switches of various functions of the vehicle terminal, allowing users to enable or disable certain protection functions, network connections, etc. The alarm prompt information interface refers to one of the interfaces of the vehicle terminal, which is used to display security alarms, abnormal detection or other emergency prompt information to remind users of potential threats or system problems. The remote help interface refers to one of the interfaces of the vehicle terminal, which provides users with the function of initiating remote help requests, which may involve vehicle failures, emergency situations, etc. The basic settings interface refers to one of the interfaces of the vehicle terminal, which is used to configure the basic settings of the terminal system, such as language, time, network configuration, etc.

[0034] It should be noted that the interface design layout can be implemented through the front-end interface layout module of the data protection system.

[0035] For example, the appropriate resolution of the in-vehicle information service terminal screen is selected through the front-end interface layout to ensure the clarity of the interface; there should be an appropriate distance between the various controls on the screen and it should not be too crowded; to facilitate switching between interfaces, the title bar should be always at the top and the menu bar should be always at the bottom; the App designs 6 interfaces to implement corresponding functions respectively; if there are multiple editing areas on one interface, the design should take the user experience into consideration.

[0036] Specifically, in order to realize the scanning function of the in-vehicle information service terminal and reflect the risk level of the in-vehicle information service terminal, a scanning interface is designed; in order to realize the intelligent management of the in-vehicle information service terminal and provide the car owner with a hosting mode, a hosting interface is designed; the functions are controllable, and in order to ensure that the on and off status of the corresponding functions can be controlled, a function switch interface is designed; when risks are encountered during the scanning process or the in-vehicle information service terminal is attacked, the corresponding detailed information should be displayed on the interface in a timely manner, so an alarm prompt information interface is designed; when the car owner cannot solve the existing problem of the vehicle alone, in order to help the car owner solve the difficult problem, a remote help function is provided and a corresponding interface is designed; a basic setting interface is designed for the general setting of the in-vehicle information service terminal function.

[0037] It is understandable that through clear interface division, users can clearly understand the safety status of their vehicles, and can independently make relevant settings for vehicle risk detection, thereby improving user experience.

[0038] S120. Select a target protection function from candidate protection functions according to the data protection instruction and instruction type; the candidate protection functions include a file scanning function, an integrity measurement function, a port access control function, an intrusion prevention function, and a data protection function.

[0039] Among them, the candidate protection function refers to a set of preset and executable data protection functions for the system to choose; the candidate function includes a variety of data protection means, and the system selects the appropriate function to execute according to the instruction. The target protection function refers to the specific protection measures selected from the candidate protection functions; each protection function targets different security issues, such as file security, port control, intrusion detection, etc. The file scanning function refers to a protection function used to scan the file system of the vehicle terminal to check whether there are malware, viruses, vulnerabilities or other security threats. For example, the system (such as Android system) files of the vehicle information service terminal are fully scanned to process illegal files. The integrity measurement function refers to a protection function used to verify the integrity of data or files to ensure that the data has not been tampered with or damaged during storage and transmission; it is often used to detect whether the file has been illegally modified or destroyed; for example, the application file is checked before the third-party application is installed to confirm that it may threaten the vehicle information service system and intercept it. The port access control function refers to a protection function used to manage the communication port between the vehicle terminal and the external network or device; it prevents unauthorized access or attack by controlling the opening and closing of the port; for example, unauthorized illegal network access is intercepted. Intrusion prevention function refers to a protection function that aims to detect and prevent malicious intrusions into vehicle-mounted terminals. It usually identifies and intercepts attacks by monitoring system behavior, analyzing abnormal traffic, etc. For example, the content contained in the web pages visited by users is detected, and if the defense rules are triggered, they are intercepted. Data protection function refers to a protection function that focuses on protecting the confidentiality, integrity and availability of data. It may include encryption, backup, access control and other measures to prevent data loss, leakage or illegal access. For example, sensitive data in the system can be encrypted and protected from being seen, such as users' personal privacy data.

[0040] Specifically, the background service control module selects a target protection function from candidate protection functions according to the data protection instruction and instruction type.

[0041] Optionally, the instruction type includes an enable instruction and an execution instruction; accordingly, if the instruction type is an execution instruction, the target protection function includes a file scanning function and a data protection function; if the instruction type is an enable instruction, the target protection function includes an integrity measurement function, a port access control function and an intrusion prevention function.

[0042] Among them, the start instruction refers to the protection measures used to enable or activate certain protection functions or systems; the purpose of the start instruction is to start a protection mechanism to put the system in a higher security protection state. The execution instruction refers to the specific execution of a certain operation, such as file scanning, data protection, etc.; the execution instruction does not directly start the protection function, but the execution of the instruction operation, such as scanning files for malware or protecting data from being leaked.

[0043] S130. Perform data protection on the vehicle terminal according to the instruction type and the target protection function, and provide real-time feedback on the data protection status.

[0044] Among them, real-time feedback on data protection status means that during the data protection operation, the system promptly reports the status and effect of the protection process to the user or manager; for example, the system may display in real time whether the protection operation is successful, what threats or anomalies are found, etc.; optionally, the data protection status may include data protection progress and data protection results.

[0045] For example, take the instruction type as execution instruction and the target protection function as file scanning function as an example; the user triggers the scanning function through the front-end interaction module, notifies the background service control module to perform a full scan of the file system to discover illegal files, illegal applications, etc. and deal with them; the front end reflects the scanning progress in the form of a dashboard. If the background service gives a threat factor, it will issue an alarm prompt and give a risk value after the scan is completed.

[0046] Exemplarily, taking the target protection function as the data protection function as an example; notifying the background service control module to use the international standard algorithm library to securely encrypt and store the data that the application needs to encrypt and store, using a one-time encryption method. This encryption method is simple, fast, safe and reliable, and can be encrypted in parallel; for reading encrypted and stored data, select the same algorithm mode for reverse decryption to read the data content.

[0047] The embodiment of the present application parses the data protection instruction upon receiving the data protection instruction from the user to determine the instruction type of the data protection instruction; selects a target protection function from candidate protection functions according to the data protection instruction and the instruction type; the candidate protection functions include file scanning function, integrity measurement function, port access control function, intrusion prevention function and data protection function; performs data protection on the vehicle terminal according to the instruction type and the target protection function, and provides real-time feedback on the data protection status. The above technical solution performs data protection through various protection functions set on the vehicle terminal, and adds targeted intrusion risk handling on the basis of the original vehicle terminal, which helps to improve the security and reliability of the vehicle terminal.

[0048] Embodiment 2

[0049] Figure 2 This is a flow chart of a data protection method for a vehicle-mounted terminal provided in accordance with the second embodiment of the present application. Based on the technical solutions of the above embodiments, this embodiment refines "performing data protection on the vehicle-mounted terminal according to the instruction type and the target protection function" into "if the instruction type is an enable instruction, then the target protection function is turned on, and when the triggering conditions of the target protection function are identified, the target protection function is executed to perform data protection on the vehicle-mounted terminal; if the instruction type is an execution instruction, then the target protection function is executed to perform data protection on the vehicle-mounted terminal". It should be noted that for the parts not described in detail in the embodiments of the present application, please refer to the relevant statements of other embodiments. Figure 2 As shown, the method includes:

[0050] S210. When receiving a data protection instruction from a user, parse the data protection instruction to determine the instruction type of the data protection instruction.

[0051] S220. Select a target protection function from candidate protection functions according to the data protection instruction and instruction type; the candidate protection functions include a file scanning function, an integrity measurement function, a port access control function, an intrusion prevention function, and a data protection function.

[0052] S230: If the instruction type is an on instruction, the target protection function is turned on, and when the triggering condition of the target protection function is identified, the target protection function is executed to perform data protection on the vehicle terminal.

[0053] Among them, the triggering conditions are artificially preset through a large number of experiments or experience values.

[0054] Optionally, if the target protection function is an integrity measurement function, then when the triggering condition of the target protection function is identified, the execution of the target protection function may be, when it is identified that the user has made changes to the target application of the vehicle terminal, performing an integrity check on the configuration file of the changed application; if the integrity check fails, making a secondary change to the changed application, generating application alarm information, and feeding back the application alarm information to the user.

[0055] Among them, the changed application refers to the application configuration file that has been modified. The configuration file is a file that stores the operating parameters, settings and other important information of the application. The integrity check refers to the process of verifying the target file or system status, with the purpose of confirming whether the file or system has been tampered with; by comparing the current status of the file with the previously recorded standard status (such as hash value, digital signature, etc.), the system can determine whether the file is intact and whether it has been modified without authorization. Application alarm information refers to the warning information sent by the system to the user or administrator after detecting an abnormality or security issue.

[0056] Exemplarily, after the front-end user triggers events such as application installation and uninstallation, the front-end transmits relevant information of the application to the back-end service, which performs an integrity check and matches the integrity check configuration file. If the application summary value does not match or does not exist, an exception will be present, and the application deletion will be processed accordingly, triggering the front-end to generate an alarm message. If the summary value exists when the application is uninstalled, it is determined that the original application has been maliciously uninstalled, triggering the front-end to generate an alarm message.

[0057] Optionally, if the target protection function is a port access control function, then when the triggering condition of the target protection function is identified, the execution of the target protection function may be, when it is identified that the target port of the vehicle-mounted terminal is accessed externally, checking the port type of the target port; when the port type of the target port is to prohibit external access, intercepting external access, generating port alarm information, and feeding back the port alarm information to the user.

[0058] Among them, the target port refers to a specific communication port in a vehicle terminal or other computer system, which is used to receive and send data. The port type refers to the configuration characteristics of the network port, which usually defines whether the port allows external access. Port alarm information refers to the warning or log information generated by the system after detecting the triggering conditions of the port access control function and executing the protection action; this information usually records the intrusion attempts, blocked access requests, accessed ports and other related content, and feeds this information back to the user or security administrator for further analysis and processing of security incidents.

[0059] Exemplarily, when it is identified that the target port of the vehicle-mounted terminal is accessed externally, the port access control profile is matched, restrictions are imposed on the network ports locally open to external access terminals, and the denied access is judged to be risky, triggering the front end to generate an alarm message and intercept the access.

[0060] Optionally, if the target protection function is an intrusion prevention function, then when the triggering condition of the target protection function is identified, the execution of the target protection function may be, when it is identified that the user uses the browser of the vehicle terminal to access the target web page, intercepting the network access request sent outward by the vehicle terminal; matching the data packet of the target web page with a pre-configured intrusion prevention profile, and if the match fails, rejecting the network access request, generating a web page alarm information, and feeding back the web page alarm information to the user.

[0061] Among them, a network access request refers to a request sent by the vehicle terminal when trying to establish a connection with an external network (such as the Internet); in the context of browsing the web, this request is an HTTP (Hypertext Transfer Protocol) request sent by the vehicle terminal to the target web page. An intrusion prevention profile is a set of rules and policy files configured by a security administrator or automated tool to define which types of network activities are considered normal and which behaviors are considered malicious or suspicious; these rules are used to guide how the intrusion prevention function detects and responds to potential attacks; in this scenario, the intrusion prevention profile will contain validation rules for the target web page data packet to help determine whether there is malicious content. A data packet is a unit of information transmitted in network communications; each time the vehicle terminal accesses a web page, it sends a data packet through the network, carrying relevant information about the request; the intrusion prevention system checks these data packets to ensure that they do not have malicious content or abnormal behavior. Matching refers to comparing the data transmitted in the network with pre-set rules or profiles to determine whether the data meets security requirements. Web page alarm information refers to the alarm information generated by the system when it identifies abnormal web page access (such as malicious web pages, offensive data packets, etc.); this information usually contains details such as the attack type, attack target, blocked access behavior, etc., with the purpose of feedbacking potential security threats to administrators or users.

[0062] For example, when a user uses a browser to access a web page, the network access request sent by the vehicle-mounted terminal is intercepted, the intrusion prevention profile is matched, and the web page content is detected in real time. When the attack information is matched, the data packet is discarded to deny access, and the front end is triggered to generate an alarm message; when there is no problem in the data packet, access is allowed.

[0063] S240: If the instruction type is an execution instruction, the target protection function is executed to perform data protection on the vehicle terminal.

[0064] In an optional implementation, when the data protection situation is an alarm message, the data protection result is sent to the cloud platform so that the cloud platform analyzes the data protection result and obtains a target processing method; when a remote help instruction from the user is identified, the remote help instruction is sent to the cloud platform so that the cloud platform feeds back the target processing method to the user.

[0065] Among them, the cloud platform refers to a service platform based on cloud computing technology, providing computing, storage, data analysis, network and other services; in this scenario, the cloud platform is responsible for receiving alarm information from the data protection system, conducting in-depth analysis, and providing feedback on the processing method based on the analysis results; the cloud platform can perform large-scale data processing and machine learning analysis, provide decision support, and help formulate security response measures. The target processing method refers to the response measures taken by the cloud platform or security system based on the analysis results after receiving the alarm information; it can be a protective action automatically taken by the system, such as isolating threats, blocking attack sources, repairing vulnerabilities, etc., or it can be a suggestion for administrators or users, such as repair measures or emergency response operations; in this scenario, the target processing method is determined by the cloud platform analysis, and the purpose is to deal with the detected security threats or problems. Remote help instructions refer to requests sent by users or system administrators to the cloud platform when facing security issues, seeking help or further guidance from the cloud platform.

[0066] Exemplarily, the interaction with the cloud platform can be realized through a remote interaction module; the remote interaction module uses a secure link to interact with the cloud platform, reports the alarm results fed back by the background service control module to the cloud platform, and receives processing instructions issued by the cloud platform for statistical analysis of big data and potential risks. At the same time, the user triggers the remote assistance function through the front-end interaction module, and the remote interaction module transmits the service request to the cloud platform, and the cloud platform assigns after-sales customer service to assist the user in handling the problem.

[0067] The embodiment of the present application parses the data protection instruction upon receiving the data protection instruction from the user to determine the instruction type of the data protection instruction; selects the target protection function from the candidate protection functions according to the data protection instruction and the instruction type; the candidate protection functions include the file scanning function, the integrity measurement function, the port access control function, the intrusion prevention function and the data protection function; if the instruction type is an enable instruction, the target protection function is enabled, and when the triggering condition of the target protection function is identified, the target protection function is executed to perform data protection on the vehicle terminal; if the instruction type is an execution instruction, the target protection function is executed to perform data protection on the vehicle terminal. The above technical scheme performs data protection through various protection functions set on the vehicle terminal, and adds targeted intrusion risk handling on the basis of the original vehicle terminal, which helps to improve the security and reliability of the vehicle terminal.

[0068] Embodiment 3

[0069] Figure 3 This is a structural diagram of a data protection device for a vehicle terminal provided in accordance with the third embodiment of the present application, which can be applied to the case where a vehicle terminal performs data protection. The data protection device for the vehicle terminal can be implemented in the form of hardware and / or software, and the data protection device for the vehicle terminal can be configured in a computer device, such as a vehicle terminal. Figure 3 As shown, the device comprises:

[0070] The type determination module 310 is used to parse the data protection instruction and determine the instruction type of the data protection instruction when receiving the data protection instruction from the user;

[0071] A function selection module 320, configured to select a target protection function from candidate protection functions according to the data protection instruction and instruction type; the candidate protection functions include a file scanning function, an integrity measurement function, a port access control function, an intrusion prevention function, and a data protection function;

[0072] The data protection module 330 is used to perform data protection on the vehicle terminal according to the instruction type and the target protection function, and to provide real-time feedback on the data protection status.

[0073] The embodiment of the present application parses the data protection instruction upon receiving the data protection instruction from the user to determine the instruction type of the data protection instruction; selects a target protection function from candidate protection functions according to the data protection instruction and the instruction type; the candidate protection functions include file scanning function, integrity measurement function, port access control function, intrusion prevention function and data protection function; performs data protection on the vehicle terminal according to the instruction type and the target protection function, and provides real-time feedback on the data protection status. The above technical solution performs data protection through various protection functions set on the vehicle terminal, and adds targeted intrusion risk handling on the basis of the original vehicle terminal, which helps to improve the security and reliability of the vehicle terminal.

[0074] Optionally, the instruction type includes an opening instruction and an execution instruction; accordingly, the function selection module 320 is specifically used to:

[0075] If the instruction type is an execution instruction, the target protection functions include a file scanning function and a data protection function;

[0076] If the command type is an open command, the target protection functions include integrity measurement function, port access control function and intrusion prevention function.

[0077] Optionally, the data protection module 330 includes:

[0078] A first data protection unit is used to enable a target protection function if the instruction type is an enable instruction, and to execute the target protection function when a triggering condition of the target protection function is identified, so as to perform data protection on the vehicle terminal;

[0079] The second data protection unit is used to execute the target protection function if the instruction type is an execution instruction, so as to perform data protection on the vehicle terminal.

[0080] Optionally, if the target protection function is an integrity measurement function, the first data protection unit is specifically used to:

[0081] When it is identified that the user has modified the target application of the vehicle terminal, the configuration file of the modified application is checked for integrity;

[0082] If the integrity check fails, a second modification is made to the changed application, and an application alarm message is generated and fed back to the user.

[0083] Optionally, if the target protection function is a port access control function, the first data protection unit is specifically used to:

[0084] In the case of identifying that the target port of the vehicle-mounted terminal is accessed externally, checking the port type of the target port;

[0085] When the port type of the target port is to prohibit external access, external access is blocked, and port alarm information is generated and fed back to the user.

[0086] Optionally, if the target protection function is an intrusion prevention function, the first data protection unit is specifically configured to:

[0087] When it is identified that the user uses the browser of the vehicle terminal to access the target web page, intercepting the network access request sent outward by the vehicle terminal;

[0088] The target web page's data packets are matched with the pre-configured intrusion prevention profile. If the match fails, the network access request is rejected and a web page alarm message is generated and fed back to the user.

[0089] Optionally, the device further includes an interface determination module, configured to:

[0090] Obtain the current vehicle data of the target vehicle and the screen data of the vehicle terminal;

[0091] According to the current vehicle data and screen data, the screen interface of the vehicle terminal is determined and displayed; wherein the screen interface includes a scanning interface, a hosting interface, a function switch interface, an alarm prompt information interface, a remote help interface and a basic setting interface.

[0092] Optionally, the device further includes a cloud interaction module, which is used to:

[0093] When the data protection situation is an alarm message, the data protection result will be sent to the cloud platform so that the cloud platform can analyze the data protection result and obtain the target processing method; when the user's remote help instruction is identified, the remote help instruction will be sent to the cloud platform so that the cloud platform can feedback the target processing method to the user.

[0094] The data protection device for the vehicle terminal provided in the embodiment of the present application can execute the data protection method for the vehicle terminal provided in any embodiment of the present application, and has the corresponding functional modules and beneficial effects for executing the data protection method of each vehicle terminal.

[0095] Embodiment 4

[0096] Figure 4It is a structural diagram of an electronic device 410 that implements the data protection method of the vehicle terminal of an embodiment of the present application. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present application described and / or required herein.

[0097] like Figure 4 As shown, the electronic device 410 includes at least one processor 411, and a memory connected to the at least one processor 411 in communication, such as a read-only memory (ROM) 412, a random access memory (RAM) 413, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 411 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 412 or the computer program loaded from the storage unit 418 to the random access memory (RAM) 413. In RAM413, various programs and data required for the operation of the electronic device 410 can also be stored. The processor 411, ROM412 and RAM413 are connected to each other via a bus 414. An input / output (I / O) interface 415 is also connected to the bus 414.

[0098] Multiple components in the electronic device 410 are connected to the I / O interface 415, including: an input unit 416, such as a keyboard, a mouse, etc.; an output unit 417, such as various types of displays, speakers, etc.; a storage unit 418, such as a disk, an optical disk, etc.; and a communication unit 419, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 419 allows the electronic device 410 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0099] The processor 411 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 411 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. The processor 411 performs the various methods and processes described above, such as the data protection method of the vehicle terminal.

[0100] In some embodiments, the data protection method of the vehicle terminal can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 418. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 410 via ROM412 and / or the communication unit 419. When the computer program is loaded into RAM413 and executed by the processor 411, one or more steps of the data protection method of the vehicle terminal described above can be performed. Alternatively, in other embodiments, the processor 411 can be configured as a data protection method for the vehicle terminal in any other appropriate manner (for example, by means of firmware).

[0101] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0102] The computer program for implementing the method of the present application can be written in any combination of one or more programming languages. These computer programs can be provided to the processor of the data protection device of a general-purpose computer, a special-purpose computer or other programmable vehicle terminal, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program can be executed entirely on the machine, partially on the machine, as a stand-alone software package, partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0103] In the context of the present application, a computer readable storage medium may be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, device or equipment. A computer readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer readable storage medium may be a machine readable signal medium. A more specific example of a machine readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0104] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0105] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0106] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0107] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this application can be executed in parallel, sequentially or in different orders, as long as the expected results of the technical solution of this application can be achieved, and this document is not limited here.

[0108] The above specific implementations do not constitute a limitation on the protection scope of this application. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of this application should be included in the protection scope of this application.

Claims

1. A data protection method for a vehicle terminal, characterized in that: include: When receiving a data protection instruction from a user, parsing the data protection instruction to determine the instruction type of the data protection instruction; According to the data protection instruction and the instruction type, a target protection function is selected from candidate protection functions; the candidate protection functions include a file scanning function, an integrity measurement function, a port access control function, an intrusion prevention function and a data protection function; According to the instruction type and the target protection function, data protection is performed on the vehicle terminal, and the data protection status is fed back in real time.

2. According to the method of claim 1, the instruction type includes an enable instruction and an execution instruction; accordingly, determining a target protection function from candidate protection functions according to the data protection instruction and the instruction type comprises: If the instruction type is an execution instruction, the target protection function includes the file scanning function and the data protection function; If the instruction type is an open instruction, the target protection function includes the integrity measurement function, the port access control function and the intrusion prevention function.

3. The method according to claim 2, characterized in that According to the instruction type and the target protection function, data protection is performed on the vehicle terminal, including: If the instruction type is an enable instruction, the target protection function is enabled, and when a triggering condition of the target protection function is identified, the target protection function is executed to perform data protection on the vehicle terminal; If the instruction type is an execution instruction, the target protection function is executed to perform data protection on the vehicle terminal.

4. The method according to claim 3, characterized in that If the target protection function is an integrity measurement function, then in the case where a triggering condition of the target protection function is identified, executing the target protection function includes: When it is identified that the user has modified the target application of the vehicle-mounted terminal, performing an integrity check on the configuration file of the modified application; In the case that the integrity check fails, the changed application is modified for the second time, and application alarm information is generated and fed back to the user.

5. The method according to claim 3, characterized in that: If the target protection function is the port access control function, then in the case of identifying a triggering condition of the target protection function, executing the target protection function includes: In the case of identifying that the target port of the vehicle-mounted terminal is accessed externally, checking the port type of the target port; In the case that the port type of the target port is to prohibit external access, the external access is intercepted, and port alarm information is generated, and the port alarm information is fed back to the user.

6. The method according to claim 3, characterized in that If the target protection function is the intrusion prevention function, then in the case where a triggering condition of the target protection function is identified, executing the target protection function includes: When it is identified that the user uses the browser of the vehicle-mounted terminal to access the target webpage, intercepting the network access request sent outward by the vehicle-mounted terminal; The data packet of the target web page is matched with a pre-configured intrusion prevention configuration file. If the match fails, the network access request is rejected, and web page alarm information is generated and fed back to the user.

7. The method according to claim 1, characterized in that Before receiving the data protection instruction from the user, the method further includes: Obtain the current vehicle data of the target vehicle and the screen data of the vehicle terminal; According to the current vehicle data and screen data, the screen interface of the vehicle terminal is determined and displayed; wherein the screen interface includes a scanning interface, a hosting interface, a function switch interface, an alarm prompt information interface, a remote help interface and a basic setting interface.

8. The method according to claim 1, characterized in that When the data protection situation is an alarm message, the method further includes: Sending the data protection result to the cloud platform so that the cloud platform analyzes the data protection result and obtains a target processing method; When the remote help instruction from the user is identified, the remote help instruction is sent to the cloud platform, so that the cloud platform feeds back the target processing method to the user.

9. A data protection device for a vehicle-mounted terminal, characterized in that: include: A type determination module, configured to parse the data protection instruction upon receiving the data protection instruction from the user, and determine the instruction type of the data protection instruction; A function selection module, configured to select a target protection function from candidate protection functions according to the data protection instruction and the instruction type; the candidate protection functions include a file scanning function, an integrity measurement function, a port access control function, an intrusion prevention function, and a data protection function; The data protection module is used to perform data protection on the vehicle terminal according to the instruction type and the target protection function, and to provide real-time feedback on the data protection status.

10. An electronic device, characterized in that: include: one or more processors; A memory for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the data protection method for the vehicle terminal as described in any one of claims 1-8.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the data protection method for the vehicle terminal as described in any one of claims 1 to 8 is implemented.

12. A computer program product, comprising a computer program, which, when executed by a processor, implements the data protection method for a vehicle terminal according to any one of claims 1 to 8.

Images