Vehicle-mounted data safety processing device and method and automobile data safety dynamic processing system

Abstract

The invention relates to a vehicle-mounted data safety processing device and method and a vehicle data safety dynamic processing system. According to the vehicle-mounted data safety processing device, a data collection part is used for collecting data inside and / or outside a vehicle; the data classification part is used for classifying the data on the basis of the service and application use requests, and classification categories at least comprise data stored locally and data sent to the outside of the vehicle; a security level identification unit for identifying a data security level of the data according to the type of the data; and a data security processing unit that performs security processing on the data on the basis of the classification of the classified data and the identification result of the data security level. According to the vehicle-mounted data security processing method, data classification and security level identification are carried out on the data used by the service and application requests, and data security processing is carried out according to the identified security level and the classification of the classified data, so that vehicle-mounted computing resources can be saved.

Description

Technical Field

[0001] The present invention relates to the technical field of automobile data protection, and in particular to an on-board data security processing device and method for providing data security protection while minimizing on-board resources, and an automobile data security dynamic processing system. Background Art

[0002] At present, panoramic imaging, remote monitoring such as remote smart parking, etc. have become the main selling points of many new smart cars, but the data security issues brought about by them have also begun to be taken seriously. In this regard, the "Several Provisions on Automobile Data Security Management" jointly issued by the Cyberspace Administration of China and other departments on October 1, 2021 stipulates that if personal information outside the vehicle is collected without the consent of the individual and provided to the outside of the vehicle, it should be anonymized. In other words, if personal information needs to be provided outside the vehicle, it needs to be anonymized, but if it is only provided inside the vehicle, it does not need to be anonymized.

[0003] In automobile data protection, in addition to protecting personal privacy, important location information and address environment information must also be protected to prevent important data from being illegally used, thereby endangering public interests or personal legitimate rights and interests, as well as national security. However, no specific method has been given for protecting the data collected by automobiles.

[0004] Therefore, how to protect in-vehicle data more safely and effectively becomes a problem. Summary of the invention

[0005] The present invention is accomplished in view of the above problems, and its object is to provide a system for providing data security protection while minimizing vehicle-mounted computing resources.

[0006] An embodiment of the present application involves an on-vehicle data security processing device including: a data collection unit, for collecting data inside and / or outside the vehicle; a data classification unit, for classifying the data based on service and application usage requests, wherein the classification categories include at least locally stored data and data sent to the outside of the vehicle; a security level identification unit, for identifying the data security level of the data according to the type of the data; and a data security processing unit, for securely processing the data based on the category of the classified data and the identification result of the data security level.

[0007] Therefore, the vehicle-mounted data security processing device of the present application can save vehicle-mounted computing resources because it classifies the data requested by services and applications, identifies the security level, and performs data security processing according to the identified security level and the type of classified data. In addition, because the data is processed securely in real time when it is sent outside the vehicle and when it is stored locally, the security of the data can be improved.

[0008] In the vehicle-mounted data security processing device of the present application, when the data classification unit cannot identify the category of the data, the vehicle-mounted data security processing device can also close the use request of the service and application.

[0009] Thus, while ensuring the safe use of on-board data, resources for data security processing will not be wasted.

[0010] In the vehicle-mounted data security processing device of the present application, the security level identification unit can also identify the data security level of the data according to the specification and / or policy. Thus, when the specification and / or policy changes, the identification of the data security level can change with the change of the specification and / or policy.

[0011] In the vehicle-mounted data security processing device of the present application, the security level identification unit can also determine whether the data contains personal information, and identify the data security level of the data according to whether the data contains personal information.

[0012] Thus, by securely processing only data containing personal information, on-board computing resources can be saved.

[0013] In the vehicle-mounted data security processing device of the present application, when the data contains personal information, the data security processing unit may determine whether the personal information has been approved for use from the individual, and identify the security level of the data based on whether the approval for use has been obtained.

[0014] In the vehicle-mounted data security processing device of the present application, the data security processing unit does not perform anonymization processing on the personal information that has been approved for use.

[0015] Therefore, by only performing data security processing on data containing personal information that has not been approved for use, and not performing security processing on approved data, it is possible to further save on-board computing resources.

[0016] In the vehicle-mounted data security processing device of the present application, the data security level may at least include an important level, a sensitive level, a personal level and a general level.

[0017] In the vehicle-mounted data security processing device of the present application, the data identified as the importance level may include data collected in sensitive areas and authorized sensitive data exceeding a prescribed amount.

[0018] In the vehicle-mounted data security processing device of the present application, the data identified as the sensitive level may include information related to at least one of a face, a voice, a name, and a license plate.

[0019] In the vehicle-mounted data security processing device of the present application, the data identified as the personal level may include at least one of an entertainment signal, an operation control signal, and a diagnostic signal.

[0020] In the vehicle-mounted data security processing device of the present application, the data security processing unit may also perform desensitization processing on the personal-level data.

[0021] In the vehicle-mounted data security processing device of the present application, the data security processing unit may also perform anonymous processing on data that is at the sensitive level and is not approved for use.

[0022] Therefore, by performing different security processing on data of different security levels, it is possible to save on-board computing resources and improve data security.

[0023] In the vehicle-mounted data security processing device of the present application, the vehicle-mounted data security processing device can store the data after security processing in the vehicle, and also store the data before security processing in the vehicle.

[0024] Therefore, when the data is to be sent outside the vehicle again, it is not necessary to perform security processing again, and the data before security processing can also be used in the vehicle.

[0025] In the vehicle-mounted data security processing device of the present application, the vehicle-mounted data security processing device can store the data after security processing in the vehicle and delete the data before security processing.

[0026] Therefore, when the data is to be sent outside the vehicle again, it does not need to be processed securely again, and data storage space inside the vehicle can be saved.

[0027] The vehicle-mounted data security processing device of the present application further includes an evaluation unit, which evaluates the data after security processing, and when the security level of the data does not meet specific security standards, the data is subjected to secondary security processing.

[0028] Therefore, by allowing data to be transmitted outside the vehicle only in cases where it is evaluated that the security standard is met, the security of the data can be further improved.

[0029] In the vehicle-mounted data security processing device of the present application, if the data after secondary security processing still does not meet the prescribed security standards, it will not be sent outside the vehicle unless it involves national security or driving safety investigation, thereby further improving the security of the data.

[0030] In the vehicle-mounted data security processing device of the present application, the categories classified by the data classification unit may also include data that is not stored. When the data is classified as data that is not stored, the security level identification unit does not identify the security level of the data, and the security processing device does not perform security processing on the data.

[0031] This can further save on-board computing resources.

[0032] An automobile data security dynamic processing system involved in one embodiment of the present invention includes: the above-mentioned on-vehicle data security processing device; a service and application department, which issues data usage requests to the on-vehicle data security processing device; and a data specification and policy department, which issues specifications and policies for data classification and security level identification, data security processing, and evaluation to the on-vehicle data security processing device.

[0033] Therefore, even if laws, regulations, and service applications are updated, the processing strategies for data classification and security level identification can be updated by updating data specifications and policies, thereby being able to cope with changes in laws and regulations and diversification of applications.

[0034] An embodiment of the present invention involves a method for securely processing in-vehicle data, comprising: a data collection step for collecting data inside and / or outside a vehicle; a data classification step for classifying the data based on service and application usage requests, wherein the classification categories include at least locally stored data and data sent outside the vehicle; a security level identification step for identifying the data security level of the data according to the type of the data; and a data security processing step for securely processing the data based on the category of the classified data and the identification result of the data security level.

[0035] Therefore, the vehicle-mounted data security processing method of the present application can save vehicle-mounted computing resources because it identifies the security level and processes the data to be sent outside the vehicle and the data stored locally, and performs data security processing according to the identified security level and the category of the classified data. In addition, because the data is securely processed in real time when it is sent outside the vehicle and stored locally, the security of the data can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 It is a schematic diagram showing the architecture of the automobile data security dynamic processing system involved in the present invention.

[0037] Figure 2 It is a schematic diagram showing the structure of the vehicle-mounted data security processing device 100 involved in the present invention.

[0038] Figure 3It is a schematic diagram showing the structure of the data specification and policy unit and the data specification and policy update process.

[0039] Figure 4 This is a flowchart showing the processing flow of Example 1. DETAILED DESCRIPTION

[0040]

Automotive data security dynamic processing system 1

[0041] The following describes the architecture of the automobile data security dynamic processing system 1 .

[0042] Figure 1 It is a schematic diagram showing the architecture of the automobile data security dynamic processing system involved in the present invention.

[0043] like Figure 1 As shown, the automobile data security dynamic processing system 1 of the present invention includes an on-board data security processing device 100 , a service and application unit 200 , and a data specification and strategy unit 300 .

[0044] Here, the vehicle-mounted data security processing device 100 and the service and application unit 200 are installed on the vehicle computer, and the data specification and policy unit 300 can be installed in the cloud.

[0045] Figure 2 Schematic diagram showing the structure of the vehicle-mounted data security processing device 100 involved in the present invention. Figure 2 As shown, the vehicle-mounted data security processing device 100 comprises a data collection unit 110 , a data classification unit 120 , and a data security processing control strategy unit 40 . The data security control strategy unit 40 may include a security level identification unit 130 and a data security processing unit 140 .

[0046] The data collection unit 110 collects data signals on the vehicle. The data collection unit 110 collects data from various sensors on the vehicle body, data stored in the memory, various application software and other services on the vehicle, and data generated by the application unit 200, including signals outside the vehicle and signals inside the vehicle. The signals outside the vehicle may also include video signals outside the vehicle and sound signals outside the vehicle. The signals inside the vehicle may also include video signals, sound signals inside the vehicle, and entertainment signals, control signals, and diagnostic signals of the vehicle.

[0047] The data classification unit 120 classifies the data collected by the data collection unit 110 based on the use request of the in-vehicle service and application unit 200 for the various data, and the classification categories include at least locally stored data and data sent outside the vehicle, but the two categories are allowed to be classified into the same data at the same time. However, it is not limited to this, and the data can also be classified into locally stored data, data sent outside the vehicle, and data not stored (cached), etc.

[0048] In addition, data classification can be changed in real time based on the application's call for data.

[0049] For example, since the video data of the dashcam is only stored locally, before being transmitted externally, the data can be classified as "local storage". If a user is instructed to view the video through a mobile phone (cloud), the application of the viewing function will modify the classification of the data in real time to two categories: "local storage" and "sent to outside the vehicle".

[0050] The data classification categories may also include "other data", "data not stored", and other categories to cope with the changes in newly added applications and the update of regulatory requirements. For example, when the data classification unit 120 cannot identify the classification of the data required by the service and application unit 200, it can be classified as "other data", and the service and application unit 200's request for data use is closed. After the data classification strategy is subsequently updated, it will be classified again into categories such as "local storage", "sent outside the vehicle", "data not stored", etc. However, the data categories are not limited to this, and may also include other categories such as "modify data". The specific categories may also change according to the usage scenario of the data.

[0051] The security level identification unit 130 identifies the data security level according to the data type for the data identified as being stored locally and the data being transmitted outside the vehicle. In addition, for the data identified as not being stored, the security level identification unit 130 may not identify its security level.

[0052] Here, the types of data may include body control signals, entertainment signals, diagnostic signals, external visual signals, internal video signals, external sound signals, internal sound signals, etc. The security level identification unit 130 identifies the security level of the data accordingly according to the type of such data. The security level can be divided into important level, sensitive level, personal level, and general level, etc., but is not limited thereto. The identification strategy of the security level can be predetermined or issued by the data specification and strategy unit 300.

[0053] Therefore, since all data does not need to be processed for data classification, security level, security processing, etc., only the data to be sent outside the vehicle and the data stored locally are processed for security, and the data not stored is not processed for security, which can save vehicle computing resources. In addition, since security processing is completed in real time when it is needed to be sent outside the vehicle, the security of the data can be improved.

[0054] In addition, the security level identification unit 130 may further identify the data security level of the data according to the specifications and / or policies issued by the data specification and policy unit 300 .

[0055] For example, visual data from outside the vehicle can be further judged whether the data contains information about people and cars. If it contains information about people or license plates, the data is identified as sensitive data. It can also be judged whether the data contains important data collected in sensitive areas such as military area data. If it contains such important data, the data can be identified as important-level data. It can also be judged whether the data contains operation control information of other vehicles. If it does, the data can be identified as personal-level data. Other general visual data can be regarded as general-level data.

[0056] As an example, if the data is visual data from inside a vehicle, it can be determined whether the data contains facial information. If it contains facial information, the data can be identified as sensitive level data.

[0057] For example, if the data is audio data from inside a car, it is determined whether the audio data contains information about a person, and whether it includes human voice can be determined by voice recognition. The human voice here can be a voice with speech characteristics, not a sneeze or cough sound without voice characteristics. If it does not include human voice, it can be identified as general-level data. If it includes human voice, it can be further determined whether the voice is recognizable text information, and whether the information contains a person's name, etc. If so, it is identified as sensitive-level data.

[0058] For example, if the data is entertainment signals, control signals, diagnostic signals, etc. from the vehicle, it can be identified as personal-level data. However, personal-level data is not limited to this, and personal-level data can also include other data.

[0059] The above identification strategy is only an example. The strategy for security level identification performed by the security level identification unit 130 may be predetermined or issued to the security level identification unit 130 by the data specification and strategy unit 300 .

[0060] The data security processing unit 140 performs security processing on the data according to the type of the data and the security level identified by the security level identification unit 130. As an example, the security processing may include service termination processing, anonymization processing, desensitization processing, and the like.

[0061] As an example, the data security processing unit 140 performs corresponding security processing on the data identified as important by the security level identification unit 130 based on the categories classified by the data classification unit 120. For example, it can perform security processing to terminate the service, terminate the service and the application unit 200 from using the data, or it can only record the data type and generate a data report.

[0062] For data identified as sensitive, desensitization processing is performed accordingly, for example, mosaicing information such as faces and license plates. For data identified as personal, desensitization processing can be performed, for example, encryption of operation control information, etc. The security processing performed by the security processing unit 140 is not only related to the security level of the data, but also to the category of the data. For data of the same security level, if the category is different, the security processing performed can also be different.

[0063] The data security processing unit 140 may not perform data security processing on the data classified as non-storage data by the data classification unit 120 .

[0064] Since it is not necessary to perform data security processing on all data, corresponding data security processing is only performed when the data contains sensitive information such as personal information. When personal information such as facial information is not included, it is processed as general level data, thereby saving on-board computing resources. In addition, since data security processing corresponding to the security level is performed on each data instead of performing the same data security processing on all data, it is possible to further save on-board computing resources and increase data security. In addition, since the security processing is performed by further considering the category of data, the security processing performed on data sent outside the vehicle is different from the security processing performed on data stored locally, thereby further saving on-board computing resources.

[0065] For example, for data that contains information related to faces, license plates, etc. and is identified as sensitive, the facial information of the person can be further identified and checked to see whether the face is approved for use. If the data is not approved for use, it is identified as sensitive data or personal data, and anonymized or desensitized. If the data is approved for use, it can be used within the scope of the approved use, and the facial information will not be anonymized. For data that is not approved for use, the face must be anonymized.

[0066] Since there is no need to perform data anonymization and security processing on all data containing personal sensitive information such as faces and license plates, only data that has not been approved for use will be subject to corresponding data security processing, which can further save on-board computing resources.

[0067] In addition, in the vehicle-mounted data security processing device 100, when the facial data approved for use exceeds a specified threshold, all data containing people inside and outside the vehicle can also be additionally identified as data of an important level.

[0068] The vehicle-mounted data security processing device 100 may further include an evaluation unit 150. After the data security processing unit 140 performs security processing on the data, the evaluation unit 150 verifies whether the data after security processing can be provided to the service and application unit 200. As an example, at this time, it is determined whether the security level of the data meets a specific security standard. If it does not meet the specific security standard, the data is further subjected to secondary security processing. Secondary security processing can be performed again by the vehicle-mounted data security processing device 100 on the data that has been subjected to data security processing, but it is not limited to this, and secondary security processing can also be performed in the cloud. When the data after secondary security processing still does not meet the prescribed security standards, it will not be sent outside the vehicle unless it involves accidents such as national security and driving safety investigations.

[0069] However, the evaluation unit 150 is not limited thereto, and the evaluation unit 150 may also be set up in the cloud.

[0070] Therefore, since large-sized components with large computational complexity and high precision such as the visual and audio recognition processing components for secondary security processing can be set in the cloud, the resources of the vehicle computer can be saved. Only small-sized components are set on the vehicle computer, such as the security level identification unit and the security processing unit involved in the first security processing, which can further save space on the vehicle computer. The secondary processing components set in the cloud can make up for the insufficient security processing caused by insufficient resources of the vehicle computer.

[0071] When the evaluation unit 150 evaluates that the data meets the safety standard, the data is allowed to be transmitted to the outside of the vehicle, so that the safety of the data can be further improved.

[0072] Furthermore, the data that has been securely processed by the vehicle-mounted data security processing device 100 can be stored in the vehicle, and the data before the security processing can also be stored in the vehicle.

[0073] Therefore, when the data is to be sent outside the vehicle again, it is not necessary to perform security processing again, and the data before security processing can also be used in the vehicle.

[0074] Therefore, the data that has been securely processed by the vehicle-mounted data security processing device 100 may be stored in the vehicle, and the data before the secure processing may be deleted.

[0075] Therefore, when the data is to be sent outside the vehicle again, it does not need to be processed securely again, and data storage space inside the vehicle can be saved.

[0076] As described above, the vehicle-mounted data security processing device 100 does not perform data security processing when not storing, so it is not necessary to process all data, which can save vehicle-mounted computing resources. In addition, since the security processing is completed when the data is to be sent outside the vehicle or stored locally, the security of the data is increased.

[0077] In addition, in the present disclosure, anonymization in data security processing is a more stringent process than desensitization, which is a process in which the processed data cannot be restored to the original data, such as mosaic, etc. In contrast, desensitization is a process in which the original data can be restored through certain processing, such as encryption, etc.

[0078] In addition, after the same data has been processed with a high security level, it can also be directly used in the use requests of the service and application departments with a relatively low security level. After being processed with a low security level, the use requests of the service and application departments with a high security level can be further processed with a high security level before they can be used. Thus, it can be ensured that part of the results of the low security level processing will not be repeatedly processed by the high security level processing, so the resources required for processing can be further saved.

[0079] [Supplementary explanation on data classification processing]

[0080] The data classification processing unit 120 performs data application classification according to the specifications and policies issued by the service and application unit 200 and the data specification and policy unit 300. The data classification unit 120 classifies data according to application requirements.

[0081] In addition, when the service and application unit 200's request for data use cannot be recognized by the data classification unit 200 and cannot be classified, the on-board data security processing device 100 closes the service and application unit 200's request for data use, thereby ensuring the security of the data and not wasting data security processing resources.

[0082] At this time, the instructions of the service and application unit 200 rejected by the data classification unit 120 can be collected by the data classification unit 120 and subsequently supplemented through software upgrades (for example, OTA, etc.), so as to correctly identify the use requests of the service and application unit 200.

[0083] For example, when an image processing application reads the in-car camera stored locally, its operation instructions can be recognized by the data classification unit 120 as local storage, and subsequent corresponding security processing is performed. When such an application is installed, the program will call the in-car camera, and perform face replacement / image generation and other processing on the screen, form a new picture and store it in the car. However, this operation instruction cannot be recognized by the data classification unit 120, so it cannot be guaranteed that the subsequent security processing is appropriate. In this case, the data classification unit 120 will reject the application's request for data. If the application hopes to continue to use the new function, it needs to send its new instructions (such as face replacement / image generation processing, etc.) to the data specification and strategy unit 300 in the form of a report, and the data classification unit 120 (and its data security management and control strategy unit 40) is upgraded through the unified management of the data specification and strategy unit 300, such as the update of the data classification strategy, before the application can be used.

[0084]

Data standardization and policy update processing

[0085] The data specifications and policies issued by the data specifications and policies unit 300 are applied to classification rules for data classification.

[0086] The data classification processing performed by the data classification unit 120 has a preset strategy, and the classification strategy can also be modified or updated according to the published specifications and the data specification and strategy unit 300. For example, the two basic classifications of "local storage" and "sent to outside the car" are generally preset in the car. When the data classification needs to be updated, the data specification and strategy unit 300 issues instructions such as the update of the data classification to the data classification unit 120. The data specification and strategy unit 300 is usually deployed in the cloud.

[0087] In addition, when the data specifications and policies are updated due to policy reasons, the data specifications and policies unit 300 can send the data classification policy, identification method and processing logic to the vehicle-mounted data security processing device 100.

[0088] Figure 3 2 is a schematic diagram showing the structure of the data specification and policy unit 300 and the data specification and policy update process. The data specification and policy unit 300 includes a data management system 310 and a specification and policy library 320.

[0089] The data management system 310 receives data security requirements from different sources and determines whether it is necessary to update the specification and policy library 320. Specifically, it can determine which policies in the specification and policy library need to be changed and converted into new policies compatible with the current specification and policy library 320.

[0090] Data security requirements include new rules and policies caused by the update of laws and regulations, the update of the overall data policy of automobile manufacturers, and the update of data use by service applications on the car. As an example, in addition to the original application requirements of "no storage", "local storage", and "send to outside the car", there is a new request for "local data splicing and storage", such as marking the latitude and longitude, time, weather, etc. on the current video data. This application may exceed the scope defined by the current classification policy, so the data management system 310 needs to issue an instruction to update the policy to the specification and policy library 320. And send the corresponding specifications and policies to the data classification unit 120, security level identification unit 130, data security processing unit 140, evaluation unit 150, etc. of the vehicle-mounted data security processing device.

[0091] The rule and policy library 320 receives instructions from the data management system 310 and updates the specifications and policies. The data management system 310 sends the corresponding specifications and policies to the data classification unit 120, security level identification unit 130, data security processing unit 140, evaluation unit 150, etc. of the vehicle-mounted data security processing device.

[0092] For classification rules, the rule and policy library 320 adds or modifies data classification categories and policies, such as “local multi-dimensional data splicing”, on the original basis, and the data management system 310 sends it to the data classification unit 120 .

[0093] For the security level, the rule and policy library 320 adds or modifies the data security level on the original basis. For example, in addition to the original "personal data", "personal sensitive data" can also be added, and it will be sent to the security level identification unit 130. If a new security level is added, the processing method of the security level data needs to be upgraded synchronously. If no new security level is added, the processing method and strategy can also be supplemented for the current security level. For example, for video data, only faces and license plates were originally recognized for anonymization, but now road signs need to be recognized for post-processing. The data management system 310 sends such a new security processing method to the data security processing unit 140. If the standards that meet the security regulations are updated, the data management system 310 can also send secondary processing methods, special application strategies, etc. to the evaluation unit 150.

[0094] Therefore, even if laws, regulations, and service applications are updated, data classification, security level identification, and security processing strategies can be updated by updating data specifications and policies, thereby being able to cope with changes in laws and regulations and the diversity of their applications.

[0095] [Processing of the service and application unit 200]

[0096] In the present invention, the data classification label can be changed in real time according to the call of the service and application unit 200 to the data. For example, the video data of the driving recorder is only retained locally, and before being sent outside the vehicle, the data label may be "local storage", and if a user instruction is received to view the video through a mobile phone (cloud), the application of the viewing function will modify the data category to "local storage" and "sent outside the vehicle" in real time.

[0097] If other data usage attributes are added to the service and application unit 200 , they are reported to the data specification and policy unit 300 .

[0098] <Example>

[0099] In this embodiment, visual data generated by an external camera DVR is taken as an example to illustrate an example of data security processing by the vehicle-mounted data security processing device 100.

[0100] Figure 4 It is a schematic diagram showing the processing of the embodiment.

[0101] exist Figure 4 In the process, first, in step S00, when the car is driving, the data collection unit 110 collects the image data outside the car. In step S10, the service and application unit 200 requests the in-vehicle data security processing device 100 to use the in-vehicle data.

[0102] As a first case, if the service and application unit 200 is a temporary projection function such as an electronic rearview mirror or a reversing image, such data does not need to be stored. Therefore, in step S20, the data classification unit 120 classifies the visual data as non-storage data. In step S310, the data security processing control strategy unit 40 determines that the security level identification is not required for the video data classified as non-storage data, and thus does not perform any data security processing.

[0103] As a second case, if the service and application unit 200 corresponds to a function such as a driving recorder that requires local storage of data, then in step S20, the data classification unit 120 classifies the visual data as local storage data, and in step S320, the security level identification unit 130 identifies the security level of the data. The specific security level identification method is the same as the method described above.

[0104] As a third case, if the service and application unit 200 is a function of taking photos outside the vehicle and transmitting them to a mobile phone, then in step S20, the data classification unit classifies the visual data as data sent outside the vehicle, and in step S330, the security level identification unit 130 identifies the security level of the data. The specific security level identification method is the same as the method described above.

[0105] Thereafter, in step S40, the data security processing unit 140 performs corresponding security processing on the data according to the category of the data and the identified security level. For example, important data is terminated or marked, and sensitive data is anonymized. In step S50, the evaluation unit 150 evaluates whether the data after data security processing can be provided to the service and application unit 200 according to the security evaluation strategy. If it meets the security requirements, in step S60, the service and application unit 200 uses the data after security processing. If it does not meet the security requirements, or the data security processing fails, in step S70, the processing flows into the secondary security processing process. The specific processing of the secondary security processing process can be performed by the data security processing control strategy unit 40 of the vehicle-mounted data security processing device 100, such as repeating the steps of steps S30 to S40. Alternatively, it can also be performed by the secondary security processing component in the cloud.

[0106] Through the data security processing of the embodiment, since the data that does not need to be stored is not subjected to data security level identification processing, data security processing, etc., it is possible to save vehicle computing resources. In addition, after the data categories are classified and the data security level is identified, the data security processing corresponding to the security level and category is performed, so that the vehicle computing resources can be further saved.

[0107] The embodiments and implementation modes disclosed in the present invention do not necessarily have to be executed separately, but may also be executed in combination.

Claims

1. A vehicle-mounted data security processing device, characterized in that: include: A data collection unit, used for collecting data inside and / or outside the vehicle; A data classification unit, based on the use request of the service and the application, classifies the data, wherein the classification categories at least include data stored locally and data sent outside the vehicle; A security level identification unit, which identifies the data security level of the data according to the type of the data; as well as The data security processing unit performs security processing on the data based on the classification result of the type of the classified data and the data security level.

2. The vehicle-mounted data security processing device according to claim 1, characterized in that: When the data classification unit cannot identify the category of the data, the vehicle-mounted data security processing device closes the use request of the service and application.

3. The vehicle-mounted data security processing device according to claim 1, characterized in that: The security level identification unit identifies the data security level of the data according to specifications and / or policies.

4. The vehicle-mounted data security processing device according to claim 3, characterized in that: The security level identification unit further determines whether the data contains personal information, and identifies the data security level of the data according to whether the data contains personal information.

5. The vehicle-mounted data security processing device according to claim 4, characterized in that: When the data includes personal information, the data security processing unit determines whether the use of the personal information has been approved by the individual, and identifies the security level of the data according to whether the use has been approved.

6. The vehicle-mounted data security processing device according to claim 5, characterized in that: The data security processing department does not anonymize personal information that has been approved for use.

7. The vehicle-mounted data security processing device according to claim 1, characterized in that: The data security levels include at least an important level, a sensitive level, a personal level and a general level.

8. The vehicle-mounted data security processing device according to claim 7, characterized in that: The data identified as being of the importance level includes data collected in sensitive areas and authorized sensitive data exceeding a prescribed amount.

9. The vehicle-mounted data security processing device according to claim 7, characterized in that: The data identified as having the sensitive level includes information related to at least one of a face, a voice, a name, and a license plate.

10. The vehicle-mounted data security processing device according to claim 7, characterized in that: The data identified as the personal level includes at least one of an entertainment signal, an operation control signal, and a diagnosis signal.

11. The vehicle-mounted data security processing device according to claim 8, characterized in that: The data security processing unit performs desensitization processing on the personal-level data.

12. The vehicle-mounted data security processing device according to claim 9, characterized in that: The data security processing unit performs anonymization processing on data that is at the sensitive level and has not been approved for use.

13. The vehicle-mounted data security processing device according to claim 1, characterized in that: The vehicle-mounted data security processing device stores the data after security processing in the vehicle, and also stores the data before security processing in the vehicle.

14. The vehicle-mounted data security processing device according to claim 1, characterized in that: The vehicle-mounted data security processing device stores the data after security processing in the vehicle and deletes the data before security processing.

15. The vehicle-mounted data security processing device according to claim 1, characterized in that: The system further comprises an evaluation unit, which evaluates the data after security processing, and performs secondary security processing on the data when the security level of the data does not meet a specific security standard.

16. The vehicle-mounted data security processing device according to claim 15, characterized in that: If the data after secondary security processing still does not meet the prescribed security standards, it will not be sent outside the vehicle unless it involves national security or driving safety investigations.

17. The vehicle-mounted data security processing device according to claim 1, characterized in that: The categories classified by the data classification unit also include data that is not stored. When the data is classified as data not to be stored, the security level identification unit does not identify the security level of the data, and the data security processing unit does not perform security processing on the data.

18. A vehicle data security dynamic processing system, characterized in that: include: The vehicle-mounted data security processing device according to any one of claims 1 to 17; A service and application department sends a data use request to the vehicle-mounted data security processing device; The data specification and strategy unit sends specifications and strategies of at least one of data classification and security level identification, data security processing, and evaluation to the vehicle-mounted data security processing device.

19. The automobile data security dynamic processing system according to claim 18, characterized in that: The data specification and policy section updates specifications and policies according to updated specifications and / or services and applications.

20. The automobile data security dynamic processing system according to claim 19, characterized in that: The data specification and strategy section includes: Data management system, accepting data security requirements and updating the specifications and policies; and A specification and policy library, which receives and stores the specifications and policies updated by the data management system. The data management system sends the updated specifications and policies to the vehicle-mounted data security processing device.

21. The automobile data security dynamic processing system according to claim 18, characterized in that: The automobile data security dynamic processing system further includes an evaluation unit, which evaluates the data after security processing by the vehicle-mounted data security processing device, and when the data security level of the data does not meet specific security standards, the data is subjected to secondary security processing.

22. A method for securely processing vehicle data, comprising: A data collection step, collecting data inside and / or outside the vehicle; a data classification step, classifying the data based on the use request of the service and the application, wherein the classification categories include at least the data stored locally and the data sent outside the vehicle; A security level identification step, identifying the data security level of the data according to the type of the data; as well as The data security processing step performs security processing on the data based on the classification of the data category and the identification result of the data security level.

Images