Data transmission method and device, equipment, medium and product

Abstract

The invention discloses a data transmission method and device, equipment, a medium and a product. The method is applied to a private network device, and comprises the following steps: under the condition that selection input of a target user identifier is received, sending a data processing instruction to a vehicle-mounted terminal corresponding to the target user identifier, so that the vehicle-mounted terminal obtains authentication information in response to the data processing instruction; receiving a first authentication request sent by the vehicle-mounted terminal, wherein the first authentication request comprises authentication information; and verifying the authentication information, and sending the software data to the vehicle-mounted terminal under the condition that the authentication information meets a first preset condition. Therefore, the software data is transmitted to the vehicle-mounted terminal based on the special network equipment, only the vehicle-mounted terminal needing transmission needs to be selected, the software data can be transmitted after the verification of the vehicle-mounted terminal is passed, and the transmission efficiency is improved.

Description

Technical Field

[0001] The present application belongs to the field of communication technology, and in particular, relates to a data transmission method, device, equipment, medium and product. Background Art

[0002] With the accelerated integration of automobiles with technologies in the fields of energy, transportation, information and communications, electrification, networking and intelligence have become the development trend of the automobile industry. In this context, the method of software data processing in vehicles is also changing, that is, from the original manual connection processing of software data to automatic processing.

[0003] At present, for vehicles that have not yet left the factory, the car networking SIM card built into the vehicle has not been registered and activated with real name. Usually, the software data is transmitted to the vehicle terminal based on Bluetooth or wireless network, and the vehicle terminal deploys, upgrades and maintains the software data. However, the transmission of software data based on Bluetooth or wireless network is limited to the coverage of small areas, and manual intervention is still required to transmit the software data to the vehicle terminal of the vehicle, and the transmission efficiency is low. Summary of the invention

[0004] The embodiments of the present application provide a data transmission method, apparatus, device, medium and product. When a dedicated network device receives a selection input of a target user identifier among preset user identifiers, the dedicated network device sends a data processing instruction to a vehicle-mounted terminal corresponding to the target user identifier. If the authentication information sent by the vehicle-mounted terminal passes the verification, the dedicated network device sends the software data to the vehicle-mounted terminal. The software data is transmitted to the vehicle-mounted terminal based on the dedicated network device. It is only necessary to select the vehicle-mounted terminal to be transmitted. After the vehicle-mounted terminal passes the verification, the software data can be transmitted, thereby improving the transmission efficiency.

[0005] In a first aspect, an embodiment of the present application provides a data transmission method, which is applied to a dedicated network device, where the dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier, and the method includes:

[0006] When receiving a selection input of a target user identifier, sending a data processing instruction to the vehicle terminal corresponding to the target user identifier, so that the vehicle terminal responds to the data processing instruction and obtains authentication information, and the preset user identifiers include the target user identifier;

[0007] Receiving a first authentication request sent by the vehicle-mounted terminal, the first authentication request including authentication information;

[0008] In response to the first authentication request, the authentication information is verified, and when the authentication information meets the first preset condition, the software data is sent to the vehicle terminal.

[0009] In a possible implementation, the dedicated network device includes a dedicated access and mobility management function AMF module, a dedicated base station, a dedicated user plane network function UPF module and a server; upon receiving a selection input of a target user identifier, sending a data processing instruction to a vehicle terminal corresponding to the target user identifier, including:

[0010] When the server receives the selection input of the target user identifier, the dedicated AMF module and the dedicated base station are used to send a data processing instruction to the vehicle terminal corresponding to the target user identifier;

[0011] Receiving a first authentication request sent by the vehicle terminal, including:

[0012] Using the server, receiving a first authentication request sent by the vehicle terminal using the dedicated base station and the dedicated UPF module;

[0013] In response to the first authentication request, verifying the authentication information, and sending the software data to the vehicle terminal when the authentication information meets the first preset condition, including:

[0014] In response to the first authentication request, the authentication information is verified using the server, and when the authentication information meets the first preset condition, the software data is sent to the vehicle terminal using a dedicated UPF module and a dedicated base station.

[0015] In one possible embodiment, the authentication information includes authentication token information; when receiving a selection input of a target user identifier, before sending a data processing instruction to a vehicle terminal corresponding to the target user identifier, the method further includes:

[0016] Receiving a second authentication request sent by the vehicle-mounted terminal;

[0017] In response to the second authentication request, verifying the identity information in the second authentication request;

[0018] When the identity information satisfies the second preset condition, generating authentication token information according to the authentication token generation rule;

[0019] Send authentication token information to the vehicle terminal.

[0020] In a possible implementation, when a selection input of a target user identifier is received, before sending a data processing instruction to the vehicle-mounted terminal corresponding to the target user identifier, the method further includes:

[0021] Receive a registration request sent by the vehicle terminal, where the registration request includes at least a registration type, capability information of the vehicle terminal, and slice parameters;

[0022] When detecting that the registration request includes a subscription permanent identifier SUPI, obtaining authentication data corresponding to the SUPI;

[0023] Generate an authentication token and a random number corresponding to the authentication data according to a first preset generation rule;

[0024] Generate an authentication token and a first key corresponding to the random number according to a second preset generation rule;

[0025] Sending the authentication token and the random number to the vehicle terminal, so that the vehicle terminal generates a second key corresponding to the authentication token and the random number according to a second preset generation rule;

[0026] Receiving a second key sent by the vehicle-mounted terminal;

[0027] Comparing the first key and the second key, and if the first key and the second key are consistent, obtaining an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter;

[0028] Connect the vehicle terminal and dedicated network equipment according to the access strategy.

[0029] In one possible implementation, the dedicated network device includes a dedicated base station and a dedicated AMF module;

[0030] Receive the registration request sent by the vehicle terminal, including:

[0031] Using a dedicated base station and dedicated AMF module, receiving a registration request sent by the vehicle terminal;

[0032] Send an authentication token and random number to the vehicle terminal, including:

[0033] Using a dedicated AMF module and a dedicated base station, an authentication token and a random number are sent to the vehicle terminal;

[0034] Receiving a second key sent by the vehicle-mounted terminal includes:

[0035] Using a dedicated base station and a dedicated AMF module to receive a second key sent by the vehicle terminal;

[0036] Connect vehicle terminals and dedicated network devices according to access strategies, including:

[0037] Use the dedicated AMF module to connect the vehicle terminal and dedicated network equipment according to the access strategy.

[0038] In a possible implementation, the dedicated network device further includes a dedicated unified data management function UDM module;

[0039] Generating an authentication token and a random number corresponding to the authentication data according to a first preset generation rule includes:

[0040] Using a dedicated UDM module, generating an authentication token and a random number corresponding to the authentication data according to a first preset generation rule;

[0041] Compare the first key and the second key. If the first key and the second key are consistent, obtain the access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameter, including:

[0042] Use the dedicated AMF module to compare the first key and the second key. If the first key and the second key are consistent, obtain the access policy corresponding to the SUPI, registration type, capability information of the vehicle terminal and slice parameters from the dedicated UDM module.

[0043] In a possible implementation, the dedicated network device further includes a dedicated authentication service function AUSF module;

[0044] When it is detected that the registration request includes a SUPI, obtaining authentication data corresponding to the SUPI includes:

[0045] When the dedicated AMF module is used to detect that the registration request includes the SUPI, the dedicated AUSF module and the dedicated UDM module are used to obtain the authentication data corresponding to the SUPI;

[0046] Generating the authentication token and the first key corresponding to the random number according to the second preset generation rule includes:

[0047] Utilize the dedicated AUSF module to generate the authentication token and the first key corresponding to the random number according to the second preset generation rule.

[0048] In one possible implementation, the dedicated network device further includes a dedicated unified data warehouse UDR module;

[0049] When the dedicated AMF module is used to detect that the registration request includes the SUPI, the dedicated AUSF module and the dedicated UDM module are used to obtain authentication data corresponding to the SUPI, including:

[0050] When the dedicated AMF module is used to detect that the registration request includes SUPI, the dedicated AUSF module and the dedicated UDM module are used to obtain the authentication data corresponding to the SUPI from the dedicated UDR module.

[0051] In a possible implementation embodiment, when the first key and the second key are consistent, after obtaining the access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameter, the method further includes:

[0052] Generate a target user ID corresponding to the SUPI;

[0053] Sending a target user ID to the vehicle terminal;

[0054] Connect vehicle terminals and dedicated network devices according to access strategies, including:

[0055] When the response information sent by the vehicle-mounted terminal is received, the vehicle-mounted terminal and the dedicated network device are connected according to the access strategy.

[0056] In one possible implementation, the dedicated network device includes a dedicated base station and a dedicated AMF module;

[0057] Generate the target user ID corresponding to the SUPI, including:

[0058] Generate the target user ID corresponding to SUPI using the dedicated AMF module;

[0059] Send the target user ID to the vehicle terminal, including:

[0060] Using a dedicated base station, send the target user ID to the vehicle terminal;

[0061] When receiving the response information sent by the vehicle terminal, the vehicle terminal and the dedicated network device are connected according to the access strategy, including:

[0062] When the response information sent by the vehicle-mounted terminal is received by using the dedicated AMF module, the vehicle-mounted terminal and the dedicated network device are connected according to the access strategy by using the dedicated AMF module.

[0063] In a possible implementation, the registration request includes a target user identifier of the vehicle terminal; before generating an authentication token and a random number corresponding to the authentication data according to the first preset generation rule, the method further includes:

[0064] If no SUPI is detected in the registration request, sending identity request information to the vehicle terminal;

[0065] Receiving identity response information sent by the vehicle terminal, the identity response information includes SUPI;

[0066] Get the authentication data corresponding to SUPI.

[0067] In one possible implementation, the dedicated network device includes a dedicated base station and a dedicated AMF module;

[0068] In the case where no SUPI is detected in the registration request, identity request information is sent to the vehicle terminal, including:

[0069] In the case that the dedicated AMF module does not detect that the registration request includes the SUPI, the dedicated base station is used to send the identity request information to the vehicle terminal;

[0070] Receive the identity response information sent by the vehicle terminal, including:

[0071] Use a dedicated base station and a dedicated AMF module to receive the identity response information sent by the vehicle terminal.

[0072] In a possible implementation embodiment, the registration request includes an initial user identifier of the vehicle terminal; when the first key and the second key are consistent, after obtaining the access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter, the method further includes:

[0073] Generate a target user ID corresponding to the SUPI;

[0074] Sending a target user identifier to the vehicle-mounted terminal so that the vehicle-mounted terminal updates the initial user identifier to the target user identifier;

[0075] Connect vehicle terminals and dedicated network devices according to access strategies, including:

[0076] When the response information sent by the vehicle-mounted terminal is received, the vehicle-mounted terminal and the dedicated network device are connected according to the access strategy.

[0077] In a second aspect, an embodiment of the present application provides a data transmission method, which is applied to a vehicle-mounted terminal, including:

[0078] receiving a data processing instruction sent by the dedicated network device, the data processing instruction being sent by the dedicated network device upon receiving a selection input of a target user identifier, the dedicated network device only providing services to a preset vehicle terminal corresponding to a preset user identifier, the preset user identifier including the target user identifier;

[0079] Responsive to the data processing instruction, obtaining authentication information;

[0080] Sending a first authentication request to the dedicated network device, the first authentication request including authentication information, which is used to instruct the dedicated network device to verify the authentication information, and sending the software data to the vehicle terminal when the authentication information meets the first preset condition;

[0081] Receive software data sent by dedicated network devices.

[0082] In one possible implementation, the data processing instructions are sent by a dedicated network device using a dedicated AMF module and a dedicated base station; the software data is sent by a dedicated network device using a dedicated UPF module and a dedicated base station;

[0083] Sending a first authentication request to a dedicated network device includes:

[0084] A first authentication request is sent to a server of the dedicated network device using a dedicated base station and a dedicated UPF module of the dedicated network device, so that the dedicated network device responds to the first authentication request and uses the server to verify the authentication information. When the authentication information meets a first preset condition, the dedicated UPF module and the dedicated base station are used to send software data to the vehicle-mounted terminal.

[0085] In a possible implementation, the authentication information includes authentication token information; before receiving the data processing instruction sent by the dedicated network device, the method further includes:

[0086] Obtain identity information;

[0087] Sending a second authentication request to the dedicated network device, the second authentication request including identity information, for instructing the dedicated network device to verify the identity information in the second authentication request, and generating authentication token information according to the authentication token generation rule when the identity information meets the second preset condition;

[0088] Receive authentication token information sent by a dedicated network device.

[0089] In one possible implementation, before receiving the data processing instruction sent by the dedicated network device, the method further includes:

[0090] Sending a registration request to the dedicated network device, the registration request including at least a registration type, capability information of the vehicle terminal and a slice parameter, for instructing the dedicated network device to obtain authentication data corresponding to the SUPI when detecting that the registration request includes the SUPI, generating an authentication token and a random number corresponding to the authentication data according to a first preset generation rule, and generating a first key corresponding to the authentication token and the random number according to a second preset generation rule;

[0091] Receiving an authentication token and a random number sent by a dedicated network device;

[0092] Generate an authentication token and a second key corresponding to the random number according to a second preset generation rule;

[0093] A second key is sent to the dedicated network device so that the dedicated network device compares the first key and the second key. When the first key and the second key are consistent, an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameters is obtained, and the vehicle terminal and the dedicated network device are connected according to the access policy.

[0094] In one possible implementation, the authentication token and the random number are generated by a dedicated network device using a dedicated UDM module, and are sent using a dedicated AUSF module, a dedicated AMF module, and a dedicated base station;

[0095] Send a registration request to the dedicated network device, including:

[0096] Using a dedicated base station of the dedicated network device, sending a registration request to a dedicated AMF module of the dedicated network device, so that when the dedicated network device detects that the registration request includes the SUPI using the dedicated AMF module, using the dedicated AUSF module and the dedicated UDM module to obtain authentication data corresponding to the SUPI, using the dedicated UDM module to generate an authentication token and a random number corresponding to the authentication data according to a first preset generation rule, and using the dedicated AUSF module to generate a first key corresponding to the authentication token and the random number according to a second preset generation rule;

[0097] Sending a second key to a dedicated network device includes:

[0098] A dedicated base station of the dedicated network device is used to send a second key to a dedicated AMF module of the dedicated network device, so that the dedicated network device uses the dedicated AMF module to compare the first key and the second key. When the first key and the second key are consistent, an access policy corresponding to the SUPI, registration type, capability information of the vehicle terminal and slice parameters is obtained from the dedicated UDM module.

[0099] In one possible implementation, after sending the second key to the dedicated network device, the method further includes:

[0100] Receiving a target user identification sent by a dedicated network device;

[0101] The response information is sent to the dedicated network device, so that the dedicated network device can connect the vehicle terminal and the dedicated network device according to the access strategy when receiving the response information sent by the vehicle terminal.

[0102] In a possible implementation, the target user identification is sent by the dedicated network device using a dedicated base station; sending response information to the dedicated network device includes:

[0103] A dedicated base station of the dedicated network device is used to send response information to the dedicated AMF module of the dedicated network device, so that the dedicated network device uses the dedicated AMF module to connect the vehicle terminal and the dedicated network device according to the access strategy.

[0104] In a possible embodiment, the vehicle terminal includes a target user identifier, and the registration request includes the target user identifier; when receiving the authentication token and the random number sent by the dedicated network device, before generating the second key corresponding to the authentication token and the random number according to the second preset generation rule, the method also includes:

[0105] receiving identity request information sent by a dedicated network device;

[0106] Sending identity response information to the dedicated network device, where the identity response information includes the SUPI, so that the dedicated network device can obtain authentication data corresponding to the SUPI.

[0107] In a possible implementation, the identity request information is sent by the dedicated network device using a dedicated base station; sending the identity response information to the dedicated network device includes:

[0108] Utilize the dedicated base station of the dedicated network device to send identity response information to the dedicated AMF module of the dedicated network device.

[0109] In a possible implementation, the vehicle terminal includes an initial user identifier, and the registration request includes the initial user identifier; after sending the second key to the dedicated network device, the method further includes:

[0110] Receiving a target user identification sent by a dedicated network device;

[0111] Updating the initial user ID in the vehicle terminal to the target user ID;

[0112] The response information is sent to the dedicated network device, so that the dedicated network device can connect the vehicle terminal and the dedicated network device according to the access strategy when receiving the response information sent by the vehicle terminal.

[0113] In a third aspect, an embodiment of the present application provides a data transmission device, which is applied to a dedicated network device, and the dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier, and the method includes:

[0114] A sending module, configured to send a data processing instruction to the vehicle terminal corresponding to the target user identifier when receiving a selection input of the target user identifier, so that the vehicle terminal responds to the data processing instruction and obtains authentication information, and the preset user identifier includes the target user identifier;

[0115] A receiving module, configured to receive a first authentication request sent by the vehicle-mounted terminal, wherein the first authentication request includes authentication information;

[0116] The verification module is used to verify the authentication information in response to the first authentication request, and send the software data to the vehicle terminal when the authentication information meets the first preset condition.

[0117] In a fourth aspect, an embodiment of the present application provides a data transmission device, which is applied to a vehicle-mounted terminal, including:

[0118] A receiving module, used to receive a data processing instruction sent by a dedicated network device, the data processing instruction is sent by the dedicated network device when receiving a selection input of a target user identifier, the dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier, and the preset user identifier includes a target user identifier;

[0119] An acquisition module, used for acquiring authentication information in response to a data processing instruction;

[0120] A sending module, used to send a first authentication request to the dedicated network device, the first authentication request including authentication information, used to instruct the dedicated network device to verify the authentication information, and send the software data to the vehicle terminal when the authentication information meets the first preset condition;

[0121] The receiving module is also used to receive software data sent by the dedicated network device.

[0122] In a fifth aspect, an embodiment of the present application provides an electronic device, the device comprising:

[0123] a processor and a memory storing computer program instructions;

[0124] The processor implements any of the above data transmission methods when executing computer program instructions.

[0125] In a sixth aspect, an embodiment of the present application provides a computer storage medium, on which computer program instructions are stored. When the computer program instructions are executed by a processor, any of the above-mentioned data transmission methods is implemented.

[0126] In a seventh aspect, an embodiment of the present application provides a computer program product, characterized in that when the instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to execute any one of the above-mentioned data transmission methods.

[0127] The data transmission method, device, equipment, medium and product of the embodiment of the present application are applied to a dedicated network device, and the dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier. The method includes: when receiving a selection input of a target user identifier, sending a data processing instruction to the vehicle terminal corresponding to the target user identifier, so that the vehicle terminal responds to the data processing instruction and obtains authentication information, and the preset user identifier includes the target user identifier; receiving a first authentication request sent by the vehicle terminal, and the first authentication request includes authentication information; responding to the first authentication request, verifying the authentication information, and sending software data to the vehicle terminal when the authentication information meets the first preset condition. In this way, when the dedicated network device receives a selection input of the target user identifier in the preset user identifier, the dedicated network device sends a data processing instruction to the vehicle terminal corresponding to the target user identifier. If the authentication information sent by the vehicle terminal passes the verification, the dedicated network device sends the software data to the vehicle terminal. Based on the transmission of software data from the dedicated network device to the vehicle terminal, it is only necessary to select the vehicle terminal to be transmitted. After the vehicle terminal passes the verification, the software data can be transmitted, thereby improving the transmission efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0128] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0129] Figure 1 It is a flowchart of a data transmission method provided by an embodiment of the present application;

[0130] Figure 2 is a flowchart of a data transmission method provided by another embodiment of the present application;

[0131] Figure 3 is a flowchart of a data transmission method provided by another embodiment of the present application;

[0132] Figure 4 is a flowchart of a data transmission method provided in yet another embodiment of the present application;

[0133] Figure 5 is a flowchart of a data transmission method provided in yet another embodiment of the present application;

[0134] Figure 6 is a flowchart of a data transmission method provided in yet another embodiment of the present application;

[0135] Figure 7 is an architecture diagram of a dedicated network device provided in yet another embodiment of the present application;

[0136] Figure 8 is a structural diagram of a data transmission device applied to a dedicated network device provided by another embodiment of the present application;

[0137] Fig. 9 is a structural schematic diagram of a data transmission device applied to a vehicle-mounted terminal provided by yet another embodiment of the present application;

[0138] Fig.10 It is a structural diagram of an electronic device provided in yet another embodiment of the present application. DETAILED DESCRIPTION

[0139] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0140] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0141] With the accelerated integration of automobiles with technologies in the fields of energy, transportation, information and communications, electrification, networking and intelligence have become the development trend of the automobile industry. In this context, the method of software data processing in vehicles is also changing, that is, from the original manual connection processing of software data to automatic processing.

[0142] Automatic processing includes deployment, upgrading, maintenance, etc. based on Over The Air (OTA), Bluetooth or wireless networks. Taking OTA upgrading as an example, OTA upgrading is a technology for remote software upgrading via wireless networks. This technology allows device manufacturers or service providers to send software data remotely via the network, without the user personally connecting the device to a computer or other device, to achieve software deployment, updating and upgrading. In the automotive field, OTA upgrading can be used to deploy, update and upgrade various systems of vehicle terminals, such as human-computer interaction systems, autonomous driving systems, power systems and battery systems. Through OTA technology, automakers can quickly repair system defects, improve performance, add new features, and optimize product experience. The OTA upgrade process includes online detection of the current software version of the vehicle, matching the latest software version, downloading the new code to the local, and performing installation and verification procedures. Compared with traditional recall and on-site upgrade methods, OTA upgrading has obvious advantages. It not only saves time and cost, but also improves efficiency and convenience.

[0143] However, OTA can only automatically realize software processing after the vehicle is sold and the vehicle networking SIM card built into the vehicle is registered with real name and activated. Therefore, it can be seen that OTA software processing is currently only supported after the vehicle is sold.

[0144] At present, for vehicles that have not yet left the factory, the car networking SIM card built into the vehicle has not been registered and activated with real name. Usually, the software data is transmitted to the vehicle terminal based on Bluetooth or wireless network, and the vehicle terminal deploys, upgrades and maintains the software data. However, the transmission of software data based on Bluetooth or wireless network is limited to the coverage of small areas, and manual intervention is still required to transmit the software data to the vehicle terminal of the vehicle, and the transmission efficiency is low.

[0145] In order to solve the problems of the prior art, the embodiments of the present application provide a data transmission method, device, equipment, medium and product. The data transmission method provided by the embodiments of the present application, when a dedicated network device receives a selection input of a target user identifier in a preset user identifier, the dedicated network device sends a data processing instruction to a vehicle terminal corresponding to the target user identifier, and if the authentication information sent by the vehicle terminal passes the verification, the dedicated network device sends software data to the vehicle terminal. The software data is transmitted to the vehicle terminal based on the dedicated network device, and only the vehicle terminal to be transmitted needs to be selected. After the vehicle terminal passes the verification, the software data can be transmitted, thereby improving the transmission efficiency.

[0146] Among them, dedicated network equipment is used to provide access to the network, which can be understood as providing a dedicated network (such as a 5G network) for the vehicle terminals, and these vehicle terminals obtain software data through this network. Compared with public networks, the main difference of dedicated network equipment is its closedness and security. Public networks are open to the public and have relatively low security, while dedicated network equipment provides higher security and privacy protection. In addition, dedicated network equipment usually requires encryption measures to protect data transmitted over the public Internet. Dedicated network equipment is a network designed for specific users or organizations with a high degree of security and control, suitable for application scenarios that require strict data protection and privacy.

[0147] The following is an introduction to the data transmission method provided in the embodiments of the present application. Figure 1 A schematic flow chart of a data transmission method provided in one embodiment of the present application is shown.

[0148] like Figure 1 As shown, the data transmission method provided in the embodiment of the present application includes the following steps.

[0149] S110. When receiving a selection input of a target user identifier, the dedicated network device sends a data processing instruction to the vehicle-mounted terminal corresponding to the target user identifier.

[0150] Here, the dedicated network device only provides services for the preset vehicle terminal corresponding to the preset user identifier, and the preset user identifier includes the target user identifier. The selection input can be an input for the user to select the target user identifier from multiple preset user identifiers. The preset user identifier includes a 5G globally unique temporary identifier (5G-Globally Unique Temporary, 5G-GUTI). 5G-GUTI is a temporary identifier used to uniquely identify user equipment in the 5G system. Its main purpose is to provide a clear identifier in the 5G network that does not disclose the user's permanent identity, thereby improving the security and privacy of communications. The target user identifier includes at least one user identifier.

[0151] In some embodiments, the data processing instructions include deployment, upgrade and maintenance instructions for software data, etc.

[0152] In some embodiments, before the dedicated network device sends a data processing instruction to the vehicle terminal corresponding to the target user identifier, the dedicated network device compiles the software code into an executable software package, ensures that the software package has the correct version number and meets the hardware and operating system requirements of the vehicle. The software package is signed and encrypted to ensure the integrity and security of the software, and the software package is protected using digital signature and encryption technology to prevent unauthorized modification or tampering. Here, the software package includes software data.

[0153] S120. In response to the data processing instruction, the vehicle-mounted terminal obtains authentication information.

[0154] Specifically, the authentication information is a credential for authentication, which may be a user name (or vehicle identification) and a password, or an authentication token information. It is understandable that the user name (or vehicle identification) and the password are used as identity information.

[0155] In some embodiments, the vehicle identification includes the vehicle frame number, and the password is a password preset in the vehicle. The authentication token information may be pre-set. For example, the authentication token information is distributed by a dedicated network device to the vehicle terminal.

[0156] S130. The vehicle-mounted terminal sends a first authentication request to the dedicated network device, where the first authentication request includes authentication information.

[0157] In some embodiments, the vehicle-mounted terminal and the dedicated network device establish a communication connection in advance.

[0158] S140. The dedicated network device verifies the authentication information in response to the first authentication request, and sends the software data to the vehicle-mounted terminal when the authentication information meets the first preset condition.

[0159] Here, the first preset condition is set in advance. The first preset condition can verify the authentication information, including the verification of the identity information and the authentication token information.

[0160] In some embodiments, when the authentication information does not meet the first preset condition, the dedicated network device sends a prompt message to the vehicle terminal to notify the user to retry authentication or provide correct credentials.

[0161] In some embodiments, when the vehicle terminal receives the software data, it decrypts the software data according to the decryption rules agreed in advance with the dedicated network device, and installs the software corresponding to the decrypted software data. The vehicle terminal completes the software installation and restarts the vehicle system. After confirming success, the dedicated network device and the vehicle system synchronize and record the update status and log. Here, the vehicle terminal can directly install the software after obtaining the decrypted software data; it can also start installing the software after the user confirms.

[0162] In some embodiments, the software data includes a version number.

[0163] In this way, when the dedicated network device receives the selection input of the target user identifier in the preset user identifier, the dedicated network device sends a data processing instruction to the vehicle-mounted terminal corresponding to the target user identifier. If the authentication information sent by the vehicle-mounted terminal passes the verification, the dedicated network device sends the software data to the vehicle-mounted terminal. Based on the transmission of software data to the vehicle-mounted terminal based on the dedicated network device, it is only necessary to select the vehicle-mounted terminal to be transmitted. After the vehicle-mounted terminal passes the verification, the software data can be transmitted, which improves the transmission efficiency.

[0164] Based on this, in some embodiments, the dedicated network device includes a dedicated access and mobility management function (Accessand Mobility management Function, AMF) module, a dedicated base station, a dedicated user plane network function (UserPlane Function, UPF) module and a server;

[0165] The above S110 may specifically include: when the dedicated network device receives the selection input of the target user identifier by using the server, the dedicated AMF module and the dedicated base station send a data processing instruction to the vehicle terminal corresponding to the target user identifier;

[0166] The above S130 may specifically include: the vehicle terminal uses a dedicated base station and a dedicated UPF module of the dedicated network device to send a first authentication request to a server of the dedicated network device;

[0167] The above S140 may specifically include: the dedicated network device responds to the first authentication request, uses the server to verify the authentication information, and when the authentication information meets the first preset condition, uses the dedicated UPF module and the dedicated base station to send the software data to the vehicle terminal.

[0168] Here, the server includes a vehicle software processing server. The server is deployed in a dedicated network device. The dedicated base station is a dedicated wireless base station.

[0169] In some embodiments, the dedicated network device uses a server to issue data processing instructions, pages a dedicated AMF module, and uses the dedicated AMF module and a dedicated base station to send data processing instructions to the vehicle terminal corresponding to the target user identifier.

[0170] In this way, the server is deployed in a dedicated network device, and communication between the server and the vehicle-mounted terminal can be achieved through a dedicated AMF module, a dedicated UPF module and a dedicated base station, and software data can be securely transmitted, thereby improving transmission efficiency and security.

[0171] Based on this, in some embodiments, the authentication information includes authentication token information; Figure 2 As shown, before the above S110, the method may further include:

[0172] S101, the vehicle terminal obtains identity information;

[0173] S102, the vehicle terminal sends a second authentication request to the dedicated network device, where the second authentication request includes identity information;

[0174] S103, the dedicated network device responds to the second authentication request, verifies the identity information in the second authentication request, and generates authentication token information according to the authentication token generation rule when the identity information meets the second preset condition;

[0175] S104. The dedicated network device sends authentication token information to the vehicle-mounted terminal.

[0176] Here, the identity information includes the vehicle identification and password, and the vehicle identification includes the vehicle frame number. The second preset condition is set in advance.

[0177] In some embodiments, after receiving the second authentication request, the dedicated network device verifies the vehicle identification and password. The dedicated network device generates an authentication token for the user who has passed the verification, that is, the user whose identity information meets the second preset condition. The authentication token can be an encrypted string of characters, which may include identity information and authority information. The authentication token can be used as a credential for identity authentication in the authentication request, without the need to re-enter the user name and password each time.

[0178] In some embodiments, when the identity information meets the second preset condition, the dedicated network device sends a successful verification response message to the vehicle terminal, and the response message includes the authentication token information. When the identity information does not meet the second preset condition, the dedicated network device sends a prompt message to the vehicle terminal to notify the user to retry authentication or provide correct credentials.

[0179] It should be noted that the second preset condition may verify the identity information, and the first preset condition may include the second preset condition.

[0180] Specifically, the dedicated network device uses the server to verify the identity information in the second authentication request. When the identity information meets the second preset condition, the dedicated network device uses the server to generate authentication token information according to the authentication token generation rule. The vehicle-mounted terminal can carry the authentication token information as a credential for identity authentication in subsequent authentication requests. Each time a request is made, the authentication token information needs to be included in the request header or request parameters. After receiving the authentication request, the server will verify the validity of the authentication token information and decide whether to authorize the authentication request based on the information in the authentication token information. The verification may include timeliness and the vehicle's frame number, etc., which are not specifically limited here.

[0181] In this way, the authentication token information sent by the dedicated network device can be carried in the authentication request sent by the vehicle terminal, and there is no need to carry the vehicle identification and password every time, thus avoiding the leakage of the vehicle identification and password and improving security.

[0182] In some embodiments, the vehicle terminal can access the dedicated network device after completing the registration of the dedicated network device. When the vehicle terminal connects to the dedicated network device, it needs to be verified first. After the verification is passed, the vehicle terminal and the dedicated network device are connected to transmit software data and realize the deployment, upgrade, maintenance and other operations of the vehicle software.

[0183] Based on this, in some embodiments, such as Figure 3 As shown, before the above S110, the method may further include:

[0184] S210. The vehicle terminal sends a registration request to the dedicated network device, where the registration request includes at least a registration type, capability information of the vehicle terminal, and slice parameters;

[0185] S220: When the dedicated network device detects that the registration request includes a subscription permanent identifier (SUPI), the dedicated network device obtains authentication data corresponding to the SUPI;

[0186] S230, the dedicated network device generates an authentication token and a random number corresponding to the authentication data according to a first preset generation rule;

[0187] S240, the dedicated network device generates an authentication token and a first key corresponding to the random number according to a second preset generation rule;

[0188] S250, the dedicated network device sends an authentication token and a random number to the vehicle terminal;

[0189] S260, the vehicle terminal generates an authentication token and a second key corresponding to the random number according to a second preset generation rule;

[0190] S270, the vehicle terminal sends a second key to the dedicated network device;

[0191] S280. The dedicated network device compares the first key and the second key. If the first key and the second key are consistent, the dedicated network device obtains an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameters, and connects the vehicle terminal and the dedicated network device according to the access policy.

[0192] Here, the registration request also includes a user identifier or a SUPI. The user identifier may be an initial user identifier or a target user identifier.

[0193] In some embodiments, when the registration request includes a SUPI but does not include a user identifier, the dedicated network device can detect the SUPI in the registration request. When the dedicated network device detects that the registration request includes a SUPI, it obtains the authentication data corresponding to the SUPI, generates an authentication token (AUTN) and a random number RAND (RAND usually refers to a function used to generate pseudo-random numbers in programming) corresponding to the authentication data according to a first preset generation rule, and generates a first key corresponding to the authentication token and the random number according to a second preset generation rule. The first preset generation rule and the second preset generation rule are set in advance and are not specifically limited here. The first key is used to verify the vehicle-mounted terminal.

[0194] Next, the dedicated network device sends the authentication token and the random number to the vehicle terminal, and the vehicle terminal generates the second key corresponding to the authentication token and the random number according to the second preset generation rule. It can be understood that the vehicle terminal includes the second preset generation rule. If the vehicle terminal does not include the second preset generation rule, the second key cannot be generated, the vehicle terminal cannot pass the verification, and the vehicle terminal and the dedicated network device cannot be connected. After the vehicle terminal generates the second key corresponding to the authentication token and the random number according to the second preset generation rule, it sends the second key to the dedicated network device. The dedicated network device compares the first key and the second key. When the first key and the second key are consistent, the access policy corresponding to the SUPI, registration type, capability information and slice parameters of the vehicle terminal is obtained, and the vehicle terminal and the dedicated network device are connected according to the access policy.

[0195] It should be noted that AUTN is a type of authentication data used in a mobile communication network, which is generated by the network and sent to a user device for the user device to authenticate the network.

[0196] In some embodiments, the access policy needs to meet the preset rules, and the customized access policy of the vehicle terminal is preset based on the preset rules, that is, the access policy is set in advance and corresponds to the SUPI, registration type, capability information of the vehicle terminal and slice parameters. The preset rules are shown in Table 1. The access policy includes access information and subscription information.

[0197] Table 1

[0198]

[0199]

[0200] It should be noted that the preset rules in Table 1 are only exemplary, and the preset rules that the access policy needs to satisfy are not limited to those shown in Table 1.

[0201] In this way, by connecting the vehicle-mounted terminal with the dedicated network device, the transmission of software data is realized and the transmission efficiency is improved.

[0202] Based on this, in some embodiments, the dedicated network device includes a dedicated base station and a dedicated AMF module;

[0203] The above S210 may specifically include:

[0204] The vehicle terminal uses a dedicated base station to send a registration request to the dedicated AMF module of the dedicated network device;

[0205] The above S250 may specifically include:

[0206] The dedicated network device uses a dedicated AMF module and a dedicated base station to send an authentication token and a random number to the vehicle terminal;

[0207] The above S270 may specifically include:

[0208] The vehicle terminal uses a dedicated base station and a dedicated AMF module to send a second key to a dedicated network device;

[0209] In the above S280, connecting the vehicle terminal and the dedicated network device according to the access strategy includes:

[0210] The dedicated network device uses a dedicated AMF module to connect the vehicle terminal and the dedicated network device according to the access strategy.

[0211] In this way, through a dedicated base station and a dedicated AMF module, the interaction between the dedicated network equipment and the vehicle-mounted terminal can be realized, and then the dedicated network equipment and the vehicle-mounted terminal can be connected, the transmission of software data is realized, and the transmission efficiency is improved.

[0212] Based on this, in some embodiments, the dedicated network device further includes a dedicated unified data management function (Unified Data Management, UDM) module;

[0213] The above S230 may specifically include:

[0214] The dedicated network device generates an authentication token and a random number corresponding to the authentication data according to a first preset generation rule using a dedicated UDM module;

[0215] In the above S280, the dedicated network device compares the first key and the second key, and when the first key and the second key are consistent, obtains an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter, including:

[0216] The dedicated network device uses a dedicated AMF module to compare the first key and the second key. When the first key and the second key are consistent, it obtains the access policy corresponding to the SUPI, registration type, capability information of the vehicle terminal and slice parameters from the dedicated UDM module.

[0217] In some embodiments, before the above S210, the dedicated network device enters vehicle user information and access policies into the dedicated UDM module through the Operations Administration and Maintenance (OAM) system for each 5G signaling process. OAM refers to operations, administration and maintenance in network management. It is a set of network management functions that provide information and specific details to manage a system or network, such as performance information, network fault indication, and data diagnostic functions.

[0218] In this way, the dedicated UDM module can be used to store authentication data and access policies, provide data for the authentication and connection of the vehicle terminal, and then connect the dedicated network equipment and the vehicle terminal, realize the transmission of software data, and improve the transmission efficiency.

[0219] Based on this, in some embodiments, the dedicated network device further includes a dedicated authentication service function (Authentication Server Function, AUSF) module;

[0220] The above S220 may specifically include:

[0221] When the dedicated network device detects that the registration request includes SUPI using the dedicated AUSF module and the dedicated UDM module, the dedicated network device obtains the authentication data corresponding to the SUPI;

[0222] The above S240 may specifically include:

[0223] Utilize the dedicated AUSF module to generate the authentication token and the first key corresponding to the random number according to the second preset generation rule.

[0224] Specifically, when the dedicated network device detects that the registration request includes SUPI using the dedicated AMF module, the dedicated network device uses the dedicated AMF module to initiate a user authentication request to the dedicated AUSF module. The dedicated AUSF module processes the authentication request, obtains the SUPI in the authentication request, and sends an identity authentication information data request to the dedicated UDM module. The dedicated UDM module processes the identity authentication information data request of the dedicated AUSF module and obtains the SUPI in the identity authentication information data request. The dedicated UDM module is used to obtain the authentication data corresponding to the SUPI. The dedicated network device uses the dedicated UDM module to generate an authentication token and a random number corresponding to the authentication data according to a first preset generation rule, sends the authentication token and the random number to the dedicated AUSF module, and uses the dedicated AUSF module to generate a first key corresponding to the authentication token and the random number according to a second preset generation rule, and sends the first key to the dedicated AMF module. When the dedicated network device receives the second key sent by the vehicle terminal using the dedicated base station and the dedicated AMF module, the dedicated network device uses the dedicated AMF module to compare the first key and the second key. When the first key and the second key are consistent, the dedicated UDM module obtains the access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter. The dedicated network device uses a dedicated AMF module to connect the vehicle terminal and the dedicated network device according to the access strategy.

[0225] After using the dedicated AUSF module to generate the first key corresponding to the authentication token and the random number according to the second preset generation rule, and sending the first key to the dedicated AMF module, the dedicated network device uses the dedicated AMF module and the dedicated base station to send an authentication request to the vehicle terminal, and the authentication request includes the authentication token and the random number. The vehicle terminal generates the second key corresponding to the authentication token and the random number according to the second preset generation rule.

[0226] In this way, the vehicle-mounted terminal can be verified through the dedicated AUSF module, and then the dedicated network equipment and the vehicle-mounted terminal can be connected, realizing the transmission of software data and improving transmission efficiency.

[0227] Based on this, in some embodiments, the dedicated network device further includes a dedicated unified data repository (UDR) module;

[0228] When the dedicated AMF module is used to detect that the registration request includes the SUPI, the dedicated AUSF module and the dedicated UDM module are used to obtain authentication data corresponding to the SUPI, including:

[0229] When the dedicated AMF module is used to detect that the registration request includes SUPI, the dedicated AUSF module and the dedicated UDM module are used to obtain the authentication data corresponding to the SUPI from the dedicated UDR module.

[0230] In some embodiments, the dedicated UDR module saves the authentication data corresponding to the SUPI in advance.

[0231] In this way, the dedicated UDR module is used to store the authentication data corresponding to SUPI, and the dedicated AUSF module can be used to verify the vehicle-mounted terminal based on the authentication data, thereby connecting the dedicated network device and the vehicle-mounted terminal, realizing the transmission of software data and improving transmission efficiency.

[0232] Based on this, in some embodiments, such as Figure 4 As shown, in S280, when the first key and the second key are consistent, after obtaining the access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameter, the method may further include:

[0233] S281, the dedicated network device generates a target user identifier corresponding to the SUPI;

[0234] S282, the dedicated network device sends the target user identification to the vehicle terminal;

[0235] In S280, the vehicle terminal and the dedicated network device are connected according to the access strategy, which may specifically include:

[0236] S283. When receiving the response information sent by the vehicle-mounted terminal, the dedicated network device connects the vehicle-mounted terminal and the dedicated network device according to the access strategy.

[0237] In some embodiments, when the first key and the second key are consistent, after obtaining the access policy corresponding to the SUPI, registration type, capability information of the vehicle terminal and slice parameters, the dedicated network device assigns a target user identifier to the vehicle terminal, and the vehicle terminal sends a response message to the dedicated network device. When the dedicated network device receives the response message sent by the vehicle terminal, it connects the vehicle terminal and the dedicated network device according to the access policy.

[0238] In this way, a target user identity is allocated to the vehicle-mounted terminal, and data is transmitted through the target user identity instead of the SUPI, thereby improving the security of the vehicle-mounted terminal.

[0239] Based on this, in some embodiments, the dedicated network device includes a dedicated base station and a dedicated AMF module;

[0240] The above S281 may specifically include:

[0241] The dedicated network device uses the dedicated AMF module to generate the target user identifier corresponding to the SUPI;

[0242] The above S282 may specifically include:

[0243] The dedicated network device uses a dedicated base station to send the target user identification to the vehicle terminal;

[0244] The above S283 may specifically include:

[0245] When the dedicated network device receives the response information sent by the vehicle-mounted terminal by using the dedicated AMF module, the dedicated network device uses the dedicated AMF module to connect the vehicle-mounted terminal and the dedicated network device according to the access strategy.

[0246] In this way, a target user identity is allocated to the vehicle terminal through a dedicated base station and a dedicated AMF module, and data is transmitted through the target user identity instead of SUPI, thereby improving the security of the vehicle terminal.

[0247] Based on this, in some embodiments, the vehicle terminal includes a target user identifier, and the registration request includes the target user identifier of the vehicle terminal; Figure 5 As shown, corresponding to the above S220, before the above S230, the method may further include:

[0248] S221, when the dedicated network device does not detect that the registration request includes SUPI, the dedicated network device sends identity request information to the vehicle terminal;

[0249] S222, the dedicated network device receives the identity response information sent by the vehicle terminal, where the identity response information includes the SUPI;

[0250] S223: The dedicated network device obtains authentication data corresponding to the SUPI.

[0251] Here, the target user identifier may also be pre-set, and the vehicle-mounted terminal includes the target user identifier. The vehicle-mounted terminal carries the target user identifier in the registration request and sends it to the dedicated network device for transmitting software data.

[0252] It should be noted that SUPI can also be encrypted, that is, SUCI. SUCI (Subscription Concealed Identifier) ​​is an identifier used to protect user privacy in 5G networks. It contains a hidden SUPI (Subscription Permanent Identifier) ​​to protect the user's permanent identity information when it is transmitted between the user device and the network.

[0253] In this way, SUPI is used for authentication to ensure the security of software data. If the authentication is successful, the dedicated network device and the vehicle terminal are connected; after the connection, the target user identification is used to transmit data to ensure the security of the vehicle terminal.

[0254] Based on this, in some embodiments, the dedicated network device includes a dedicated base station and a dedicated AMF module;

[0255] The above S221 may specifically include:

[0256] In the case that the dedicated AMF module does not detect that the registration request includes the SUPI, the dedicated base station is used to send the identity request information to the vehicle terminal;

[0257] The above S222 may specifically include:

[0258] Use a dedicated base station and a dedicated AMF module to receive the identity response information sent by the vehicle terminal.

[0259] In this way, SUPI is obtained using a dedicated base station and a dedicated AMF module, and SUPI is used for authentication to ensure the security of software data. If the authentication is successful, the dedicated network device and the vehicle terminal are connected; after the connection, the target user identifier is used to transmit data to ensure the security of the vehicle terminal.

[0260] Based on this, in some embodiments, the vehicle terminal includes an initial user identifier, and the registration request includes the initial user identifier of the vehicle terminal; Figure 6 As shown, in S280, when the first key and the second key are consistent, after obtaining the access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameter, the method may further include:

[0261] S290, the dedicated network device generates a target user identifier corresponding to the SUPI;

[0262] S291, the dedicated network device sends the target user identification to the vehicle terminal;

[0263] S292, the vehicle terminal updates the initial user identifier to the target user identifier;

[0264] In S280, the vehicle terminal and the dedicated network device are connected according to the access strategy, which may specifically include:

[0265] S293. When receiving the response information sent by the vehicle-mounted terminal, the dedicated network device connects the vehicle-mounted terminal and the dedicated network device according to the access strategy.

[0266] In some embodiments, after the vehicle terminal passes the verification, the dedicated network device generates a target user identifier corresponding to the SUPI, and the vehicle terminal updates the initial user identifier to the target user identifier. The newly allocated target user identifier can be used to replace the original initial user identifier of the vehicle terminal.

[0267] In this way, the security of the vehicle-mounted terminal and software data is improved by updating the user identification of the vehicle-mounted terminal when connecting.

[0268] Since real-name authentication is required for Internet of Vehicles card access, it is difficult to implement real-name authentication on the operator network for tens of thousands of vehicles that have not yet left the factory. To solve this problem, a dedicated mobile communication network with both the wireless network and the core network deployed on the user side is used. Figure 7 As shown, the architecture of the dedicated network device includes a dedicated base station 310, a dedicated AMF module 320, a dedicated AUSF module 330, a dedicated UDM module 340, a dedicated UPF module 350 and a dedicated UDR module 360, and a server 370, wherein the dedicated AMF module 320, the dedicated AUSF module 330, the dedicated UDM module 340, the dedicated UPF module 350 and the dedicated UDR module 360 ​​are deployed through a software defined network (SDN), and the dedicated base station 310 provides 5G access for vehicle terminals. The dedicated UPF module 350 is configured with an intranet entrance, through which the vehicle terminal can access the server. User identification, access policy and authentication data are stored in the dedicated UDM module 340 and the dedicated UDR module 360. When the vehicle terminal accesses, authentication is performed through the dedicated AUSF module 330.

[0269] For the 5G private network registration of non-factory Internet of Vehicles users, the customized design is as follows: user registration is achieved through the interaction of the non-factory Internet of Vehicles users' on-board terminals, dedicated base stations, dedicated AMF modules, dedicated AUSF modules, dedicated UDM modules, dedicated UPF modules and dedicated UDR modules, so that the on-board terminals can access dedicated network equipment for software processing.

[0270] Among them, the server is a back-end server for vehicle software deployment, upgrading, maintenance and other processing. The vehicle can connect to the server through a dedicated network device to realize automated software processing. The dedicated UDM module is the user data management module. The dedicated UDM module is responsible for managing and storing user-related data and providing authentication, authorization and user configuration functions for the private network. The dedicated AUSF module provides authentication service functions. The dedicated AUSF module is used to receive the request for identity authentication of the vehicle terminal from the dedicated AMF module. It requests authentication data from the dedicated UDM module, generates an authentication token and a random number, and then forwards the authentication token and random number issued by the dedicated UDM module to the dedicated AUSF module and the dedicated AMF module for authentication processing. The dedicated AMF module provides control plane network functions to transmit relevant signaling between terminals, base stations and other core network elements. The dedicated UPF module provides user plane network functions to transmit business traffic between vehicle terminals and servers, such as authentication information, software data, etc.

[0271] In the embodiments provided in this application, in order to better support software upgrades and development, based on the principle of "network follows the industry and network is built on demand", a 5G private network mode is introduced, and multiple 5G private network capabilities such as edge computing, super uplink, and network services are released to help users quickly build customized private network equipment that is safe, reliable, stable, and visible, meet users' various needs for communication networks, and realize different operating scenarios. In the private network equipment, the vehicle is registered with a "real name system" based on the vehicle's identification, such as the frame number, and the private network can be used normally in the private network equipment to connect to the server for deployment, upgrading, maintenance, etc., to realize the automated software processing function.

[0272] In the embodiments provided in the present application, the following technical problems are solved: first, providing customized dedicated network equipment for vehicle software processing; second, realizing the use of dedicated network equipment based on activating the vehicle terminal through dedicated network equipment registration, authentication and other processes; third, realizing automated software processing through the deployment, upgrading and maintenance of vehicle software based on dedicated network equipment, which can greatly improve the software processing efficiency.

[0273] Since the authentication of the vehicle terminal is performed in a dedicated network device, and the vehicle terminal of the dedicated network device does not access the external network and does not affect the public network, the vehicle's authentication information can be pre-configured in the dedicated network device. When the vehicle terminal accesses the network, the registration and authentication processes can be implemented normally. By presetting the target user ID in the vehicle and registering in the dedicated 5G private network, the vehicle can use dedicated network equipment, which greatly improves the efficiency of vehicle software deployment, upgrades, and maintenance, and reduces labor costs.

[0274] Based on the data transmission method provided in the above embodiment, the present application also provides a specific implementation of a data transmission device. Please refer to the following embodiment.

[0275] See also Figure 8 The data transmission device 400 provided in the embodiment of the present application is applied to a dedicated network device, and the dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier. The method includes:

[0276] The sending module 410 is used to send a data processing instruction to the vehicle terminal corresponding to the target user identifier when receiving the selection input of the target user identifier, so that the vehicle terminal responds to the data processing instruction and obtains the authentication information, and the preset user identifier includes the target user identifier;

[0277] The receiving module 420 is used to receive a first authentication request sent by the vehicle-mounted terminal, where the first authentication request includes authentication information;

[0278] The verification module 430 is used to verify the authentication information in response to the first authentication request, and send the software data to the vehicle terminal when the authentication information meets the first preset condition.

[0279] Based on this, in some embodiments, the dedicated network device includes a dedicated access and mobility management function AMF module, a dedicated base station, a dedicated user plane network function UPF module and a server;

[0280] The sending module 410 may be specifically used for:

[0281] When the server receives the selection input of the target user identifier, the dedicated AMF module and the dedicated base station are used to send a data processing instruction to the vehicle terminal corresponding to the target user identifier;

[0282] The receiving module 420 may be specifically used for:

[0283] Using the server, receiving a first authentication request sent by the vehicle terminal using the dedicated base station and the dedicated UPF module;

[0284] The verification module 430 can be specifically used for:

[0285] In response to the first authentication request, the authentication information is verified using the server, and when the authentication information meets the first preset condition, the software data is sent to the vehicle terminal using a dedicated UPF module and a dedicated base station.

[0286] Based on this, in some embodiments, the authentication information includes authentication token information; the apparatus 400 may further include:

[0287] The receiving module 420 is further configured to receive a second authentication request sent by the vehicle terminal before sending a data processing instruction to the vehicle terminal corresponding to the target user identifier when a selection input of the target user identifier is received;

[0288] The verification module 420 is further configured to verify the identity information in the second authentication request in response to the second authentication request;

[0289] A generating module, configured to generate authentication token information according to an authentication token generating rule when the identity information satisfies a second preset condition;

[0290] The sending module 410 is also used to send the authentication token information to the vehicle-mounted terminal.

[0291] Based on this, in some embodiments, the apparatus 400 may further include:

[0292] A receiving module, configured to receive a registration request sent by the vehicle terminal before sending a data processing instruction to the vehicle terminal corresponding to the target user identifier when receiving a selection input of the target user identifier, wherein the registration request includes at least a registration type, capability information of the vehicle terminal and a slice parameter;

[0293] an acquisition module, configured to acquire authentication data corresponding to the SUPI when detecting that the registration request includes the SUPI;

[0294] A generation module, used to generate an authentication token and a random number corresponding to the authentication data according to a first preset generation rule;

[0295] The generation module is further used to generate the authentication token and the first key corresponding to the random number according to the second preset generation rule;

[0296] The sending module 410 is further used to send the authentication token and the random number to the vehicle terminal, so that the vehicle terminal generates a second key corresponding to the authentication token and the random number according to a second preset generation rule;

[0297] The receiving module 420 is further used to receive the second key sent by the vehicle terminal;

[0298] The acquisition module is further used to compare the first key and the second key, and when the first key and the second key are consistent, obtain an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter;

[0299] The connection module is used to connect the vehicle terminal and the dedicated network device according to the access strategy.

[0300] Based on this, in some embodiments, the dedicated network device includes a dedicated base station and a dedicated AMF module;

[0301] The receiving module can be used for:

[0302] Using a dedicated base station and dedicated AMF module, receiving a registration request sent by the vehicle terminal;

[0303] The sending module 410 may be specifically used for:

[0304] Using a dedicated AMF module and a dedicated base station, an authentication token and a random number are sent to the vehicle terminal;

[0305] The receiving module 420 may be specifically used for:

[0306] Receive the second key sent by the vehicle terminal using the dedicated base station and the dedicated AMF module;

[0307] The connection module can be used specifically for:

[0308] Use the dedicated AMF module to connect the vehicle terminal and dedicated network equipment according to the access strategy.

[0309] Based on this, in some embodiments, the dedicated network device further includes a dedicated unified data management function UDM module;

[0310] The generation module can be used specifically for:

[0311] Using a dedicated UDM module, generating an authentication token and a random number corresponding to the authentication data according to a first preset generation rule;

[0312] The acquisition module can be used specifically for:

[0313] Use the dedicated AMF module to compare the first key and the second key. If the first key and the second key are consistent, obtain the access policy corresponding to the SUPI, registration type, capability information of the vehicle terminal and slice parameters from the dedicated UDM module.

[0314] Based on this, in some embodiments, the dedicated network device further includes a dedicated authentication service function AUSF module;

[0315] The acquisition module can be used specifically for:

[0316] When the dedicated AMF module is used to detect that the registration request includes the SUPI, the dedicated AUSF module and the dedicated UDM module are used to obtain the authentication data corresponding to the SUPI;

[0317] The generation module can be used specifically for:

[0318] Utilize the dedicated AUSF module to generate the authentication token and the first key corresponding to the random number according to the second preset generation rule.

[0319] Based on this, in some embodiments, the dedicated network device further includes a dedicated unified data warehouse UDR module;

[0320] The acquisition module can be used specifically for:

[0321] When the dedicated AMF module is used to detect that the registration request includes SUPI, the dedicated AUSF module and the dedicated UDM module are used to obtain the authentication data corresponding to the SUPI from the dedicated UDR module.

[0322] Based on this, in some embodiments, the apparatus 400 may further include:

[0323] The generating module is further configured to generate a target user identifier corresponding to the SUPI after acquiring an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameter when the first key and the second key are consistent;

[0324] The sending module 410 is also used to send the target user identification to the vehicle terminal;

[0325] The connection module can be used specifically for:

[0326] When the response information sent by the vehicle-mounted terminal is received, the vehicle-mounted terminal and the dedicated network device are connected according to the access strategy.

[0327] Based on this, in some embodiments, the dedicated network device includes a dedicated base station and a dedicated AMF module;

[0328] The generation module can be used specifically for:

[0329] Generate the target user ID corresponding to SUPI using the dedicated AMF module;

[0330] The sending module 410 may be specifically used for:

[0331] Using a dedicated base station, send the target user ID to the vehicle terminal;

[0332] The connection module can be used specifically for:

[0333] When the response information sent by the vehicle-mounted terminal is received by using the dedicated AMF module, the vehicle-mounted terminal and the dedicated network device are connected according to the access strategy by using the dedicated AMF module.

[0334] Based on this, in some embodiments, the registration request includes a target user identifier of the vehicle-mounted terminal; the apparatus 400 may further include:

[0335] The sending module 410 is further configured to send identity request information to the vehicle terminal before generating the authentication token and the random number corresponding to the authentication data according to the first preset generation rule, if no SUPI is detected in the registration request;

[0336] A receiving module, used for receiving identity response information sent by the vehicle terminal, where the identity response information includes SUPI;

[0337] The acquisition module is also used to obtain the authentication data corresponding to the SUPI.

[0338] Based on this, in some embodiments, the dedicated network device includes a dedicated base station and a dedicated AMF module;

[0339] The sending module 410 may be specifically used for:

[0340] In the case that the dedicated AMF module does not detect that the registration request includes the SUPI, the dedicated base station is used to send the identity request information to the vehicle terminal;

[0341] The receiving module can be used for:

[0342] Use a dedicated base station and a dedicated AMF module to receive the identity response information sent by the vehicle terminal.

[0343] Based on this, in some embodiments, the registration request includes the initial user identification of the vehicle-mounted terminal; the apparatus 400 may further include:

[0344] The generating module is further configured to generate a target user identifier corresponding to the SUPI after acquiring an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameter when the first key and the second key are consistent;

[0345] The sending module 410 is further used to send the target user identifier to the vehicle terminal, so that the vehicle terminal updates the initial user identifier to the target user identifier;

[0346] The connection module can be used specifically for:

[0347] When the response information sent by the vehicle-mounted terminal is received, the vehicle-mounted terminal and the dedicated network device are connected according to the access strategy.

[0348] See also Fig. 9 The data transmission device 500 provided in the embodiment of the present application is applied to a vehicle-mounted terminal, and includes:

[0349] A receiving module 510 is used to receive a data processing instruction sent by a dedicated network device. The data processing instruction is sent by the dedicated network device when receiving a selection input of a target user identifier. The dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier. The preset user identifier includes a target user identifier.

[0350] An acquisition module 520, configured to acquire authentication information in response to a data processing instruction;

[0351] The sending module 530 is used to send a first authentication request to the dedicated network device, where the first authentication request includes authentication information, which is used to instruct the dedicated network device to verify the authentication information, and send the software data to the vehicle terminal when the authentication information meets the first preset condition;

[0352] The receiving module 510 is also used to receive software data sent by the dedicated network device.

[0353] Based on this, in some embodiments, the data processing instructions are sent by a dedicated network device using a dedicated AMF module and a dedicated base station; the software data is sent by a dedicated network device using a dedicated UPF module and a dedicated base station;

[0354] The sending module 530 may be specifically used for:

[0355] A first authentication request is sent to a server of the dedicated network device using a dedicated base station and a dedicated UPF module of the dedicated network device, so that the dedicated network device responds to the first authentication request and uses the server to verify the authentication information. When the authentication information meets a first preset condition, the dedicated UPF module and the dedicated base station are used to send software data to the vehicle-mounted terminal.

[0356] Based on this, in some embodiments, the authentication information includes authentication token information; the apparatus 500 may further include:

[0357] The acquisition module 520 is further used to acquire identity information before receiving the data processing instruction sent by the dedicated network device;

[0358] The sending module 530 is further used to send a second authentication request to the dedicated network device, where the second authentication request includes identity information, and is used to instruct the dedicated network device to verify the identity information in the second authentication request, and generate authentication token information according to the authentication token generation rule when the identity information meets the second preset condition;

[0359] The receiving module 510 is further configured to receive authentication token information sent by the dedicated network device.

[0360] Based on this, in some embodiments, the apparatus 500 may further include:

[0361] The sending module 530 is further configured to send a registration request to the dedicated network device before receiving the data processing instruction sent by the dedicated network device, where the registration request includes at least a registration type, capability information of the vehicle-mounted terminal, and a slice parameter, and is configured to instruct the dedicated network device to obtain authentication data corresponding to the SUPI when detecting that the registration request includes the SUPI, generate an authentication token and a random number corresponding to the authentication data according to a first preset generation rule, and generate a first key corresponding to the authentication token and the random number according to a second preset generation rule;

[0362] The receiving module 510 is also used to receive the authentication token and random number sent by the dedicated network device;

[0363] A generation module, used to generate an authentication token and a second key corresponding to a random number according to a second preset generation rule;

[0364] The sending module 530 is also used to send a second key to the dedicated network device, so that the dedicated network device compares the first key and the second key. When the first key and the second key are consistent, an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameters is obtained, and the vehicle terminal and the dedicated network device are connected according to the access policy.

[0365] Based on this, in some embodiments, the authentication token and the random number are generated by a dedicated network device using a dedicated UDM module, and sent using a dedicated AUSF module, a dedicated AMF module, and a dedicated base station;

[0366] The sending module 530 may be specifically used for:

[0367] Using a dedicated base station of the dedicated network device, sending a registration request to a dedicated AMF module of the dedicated network device, so that when the dedicated network device detects that the registration request includes the SUPI using the dedicated AMF module, using the dedicated AUSF module and the dedicated UDM module to obtain authentication data corresponding to the SUPI, using the dedicated UDM module to generate an authentication token and a random number corresponding to the authentication data according to a first preset generation rule, and using the dedicated AUSF module to generate a first key corresponding to the authentication token and the random number according to a second preset generation rule;

[0368] The sending module 530 may be specifically used for:

[0369] A dedicated base station of the dedicated network device is used to send a second key to a dedicated AMF module of the dedicated network device, so that the dedicated network device uses the dedicated AMF module to compare the first key and the second key. When the first key and the second key are consistent, an access policy corresponding to the SUPI, registration type, capability information of the vehicle terminal and slice parameters is obtained from the dedicated UDM module.

[0370] Based on this, in some embodiments, the apparatus 500 may further include:

[0371] The receiving module 510 is further used to receive the target user identification sent by the dedicated network device;

[0372] The sending module 530 is also used to send response information to the dedicated network device after sending the second key to the dedicated network device, so that the dedicated network device can connect the vehicle terminal and the dedicated network device according to the access strategy when receiving the response information sent by the vehicle terminal.

[0373] Based on this, in some embodiments, the target user identification is sent by a dedicated network device using a dedicated base station; the sending module 530 can be specifically used for:

[0374] A dedicated base station of the dedicated network device is used to send response information to the dedicated AMF module of the dedicated network device, so that the dedicated network device uses the dedicated AMF module to connect the vehicle terminal and the dedicated network device according to the access strategy.

[0375] Based on this, in some embodiments, the vehicle terminal includes a target user identifier, and the registration request includes the target user identifier; the apparatus 500 may further include:

[0376] The sending module 530 is also used to, when receiving the authentication token and the random number sent by the dedicated network device, before generating the second key corresponding to the authentication token and the random number according to the second preset generation rule, send identity response information to the dedicated network device when receiving the identity request information sent by the dedicated network device, and the identity response information includes the SUPI, so that the dedicated network device can obtain the authentication data corresponding to the SUPI.

[0377] Based on this, in some embodiments, the identity request information is sent by a dedicated network device using a dedicated base station; the sending module 530 can be specifically used to:

[0378] Utilize the dedicated base station of the dedicated network device to send identity response information to the dedicated AMF module of the dedicated network device.

[0379] Based on this, in some embodiments, the vehicle terminal includes an initial user identifier, and the registration request includes the initial user identifier; the apparatus 500 may further include:

[0380] An updating module, configured to update the initial user identifier in the vehicle terminal to the target user identifier after sending the second key to the dedicated network device and receiving the target user identifier sent by the dedicated network device;

[0381] The sending module 530 is further used to send response information to the dedicated network device, so that when the dedicated network device receives the response information sent by the vehicle terminal, it connects the vehicle terminal and the dedicated network device according to the access strategy.

[0382] The various modules of the data transmission device provided in the embodiment of the present application can implement the functions of the various steps of the data transmission method provided above and achieve the corresponding technical effects, which will not be repeated here for the sake of concise description.

[0383] Based on the same inventive concept, an embodiment of the present application also provides an electronic device.

[0384] Fig.10 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application is shown.

[0385] The electronic device may include a processor 601 and a memory 602 storing computer program instructions.

[0386] Specifically, the processor 601 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0387] The memory 602 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 602 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory 602 may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory 602 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 602 is a non-volatile solid-state memory.

[0388] The memory may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage medium device, an optical storage medium device, a flash memory device, an electrical, optical or other physical / tangible memory storage device. Therefore, generally, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to one aspect of the present disclosure.

[0389] The processor 601 implements any one of the data transmission methods in the above embodiments by reading and executing the computer program instructions stored in the memory 602 .

[0390] In one example, the electronic device may further include a communication interface 603 and a bus 610. Fig.10 As shown, the processor 601, the memory 602, and the communication interface 603 are connected via a bus 610 and communicate with each other.

[0391] The communication interface 603 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0392] The bus 610 includes hardware, software or both, coupling the components of the electronic device to each other. For example, but not limitation, the bus may include an accelerated graphics port (Accelerated Graphics Port, AGP) or other graphics bus, an enhanced industry standard architecture (Extended Industry Standard Architecture, EISA) bus, a front side bus (Front Side Bus, FSB), a hypertransport (Hyper Transport, HT) interconnection, an industry standard architecture (Industry Standard Architecture, ISA) bus, an infinite bandwidth interconnection, a low pin count (Linear Predictive Coding, LPC) bus, a memory bus, a micro channel architecture (MicroChannel Architecture, MCA) bus, a peripheral component interconnect (Peripheral Component Interconnect, PCI) bus, a PCI-Express (Peripheral Component Interconnect-X, PCI-X) bus, a serial advanced technology attachment (Serial Advanced Technology Attachment, SATA) bus, a video electronics standard association local (VESA Local Bus, VLB) bus or other suitable buses or a combination of two or more of these. Where appropriate, the bus 610 may include one or more buses. Although the embodiments of the present application describe and illustrate a specific bus, the present application considers any suitable bus or interconnection. The electronic device can execute the data transmission method in the embodiments of the present invention, thereby realizing the above-mentioned data transmission method.

[0393] In addition, in combination with the data transmission method in the above embodiment, the embodiment of the present application can provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when the computer program instructions are executed by the processor, any one of the data transmission methods in the above embodiment is implemented.

[0394] The present application also provides a computer program product. When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device executes each process of implementing any one of the above-mentioned data transmission method embodiments.

[0395] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0396] The functional blocks shown in the structural block diagram described above can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), appropriate firmware, plug-in, function card, etc. When implemented in software, the elements of the present application are programs or code segments used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or communication link by a data signal carried in a carrier. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, read-only memory (Read-Only Memory, ROM), flash memory, erasable read-only memory (Erasable ReadOnly Memory, EROM), floppy disks, compact disc read-only memory (Compact Disc Read-Only Memory, CD-ROM), optical discs, hard disks, optical fiber media, radio frequency (Radio Frequency, RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0397] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0398] Aspects of the present disclosure are described above with reference to the flowchart and / or block diagram of the method, device (system) and computer program product according to the embodiment of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine so that these instructions executed by the processor of the computer or other programmable data processing device enable the implementation of the function / action specified in one or more boxes of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and / or flowchart and the combination of boxes in the block diagram and / or flowchart can also be implemented by dedicated hardware that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0399] The above are only specific implementation methods of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A data transmission method, characterized in that: Applied to a dedicated network device, the dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier, the method comprising: When receiving a selection input of a target user identifier, sending a data processing instruction to a vehicle terminal corresponding to the target user identifier, so that the vehicle terminal responds to the data processing instruction and obtains authentication information, wherein the preset user identifier includes the target user identifier; receiving a first authentication request sent by the vehicle-mounted terminal, wherein the first authentication request includes the authentication information; In response to the first authentication request, the authentication information is verified, and when the authentication information satisfies a first preset condition, software data is sent to the vehicle-mounted terminal.

2. The data transmission method according to claim 1, characterized in that: The dedicated network device includes a dedicated access and mobility management function AMF module, a dedicated base station, a dedicated user plane network function UPF module and a server; When receiving the selection input of the target user identifier, sending the data processing instruction to the vehicle terminal corresponding to the target user identifier includes: In the case where the server receives a selection input of a target user identifier, the dedicated AMF module and the dedicated base station are used to send a data processing instruction to the vehicle terminal corresponding to the target user identifier; The receiving a first authentication request sent by the vehicle-mounted terminal includes: Using the server, receiving a first authentication request sent by the vehicle terminal using the dedicated base station and the dedicated UPF module; The step of verifying the authentication information in response to the first authentication request and sending the software data to the vehicle-mounted terminal when the authentication information satisfies a first preset condition includes: In response to the first authentication request, the authentication information is verified using the server, and when the authentication information meets a first preset condition, the software data is sent to the vehicle-mounted terminal using the dedicated UPF module and the dedicated base station.

3. The data transmission method according to claim 1, characterized in that: The authentication information includes authentication token information; when a selection input of a target user identifier is received, before sending a data processing instruction to the vehicle terminal corresponding to the target user identifier, the method further includes: Receiving a second authentication request sent by the vehicle-mounted terminal; In response to the second authentication request, verifying the identity information in the second authentication request; In the case where the identity information meets the second preset condition, generating the authentication token information according to the authentication token generation rule; The authentication token information is sent to the vehicle-mounted terminal.

4. The data transmission method according to claim 1, characterized in that: In the case of receiving a selection input of a target user identifier, before sending a data processing instruction to the vehicle-mounted terminal corresponding to the target user identifier, the method further includes: Receiving a registration request sent by the vehicle-mounted terminal, where the registration request includes at least a registration type, capability information of the vehicle-mounted terminal, and a slice parameter; When detecting that the registration request includes a subscription permanent identifier SUPI, obtaining authentication data corresponding to the SUPI; Generate an authentication token and a random number corresponding to the authentication data according to a first preset generation rule; Generate the authentication token and a first key corresponding to the random number according to a second preset generation rule; Sending the authentication token and the random number to the vehicle-mounted terminal, so that the vehicle-mounted terminal generates a second key corresponding to the authentication token and the random number according to the second preset generation rule; Receiving the second key sent by the vehicle-mounted terminal; comparing the first key and the second key, and if the first key and the second key are consistent, acquiring an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter; The vehicle-mounted terminal and the dedicated network device are connected according to the access strategy.

5. The data transmission method according to claim 4, characterized in that: The dedicated network equipment includes a dedicated base station and a dedicated AMF module; The receiving a registration request sent by the vehicle-mounted terminal includes: Using the dedicated base station and the dedicated AMF module, receiving a registration request sent by the vehicle-mounted terminal; The sending the authentication token and the random number to the vehicle-mounted terminal includes: Using the dedicated AMF module and the dedicated base station, sending the authentication token and the random number to the vehicle-mounted terminal; The receiving the second key sent by the vehicle-mounted terminal includes: Receiving the second key sent by the vehicle-mounted terminal using the dedicated base station and the dedicated AMF module; The connecting the vehicle-mounted terminal and the dedicated network device according to the access strategy includes: The dedicated AMF module is used to connect the vehicle-mounted terminal and the dedicated network device according to the access strategy.

6. The data transmission method according to claim 5, characterized in that: The dedicated network device also includes a dedicated unified data management function UDM module; The step of generating an authentication token and a random number corresponding to the authentication data according to a first preset generation rule includes: Using the dedicated UDM module, generating an authentication token and a random number corresponding to the authentication data according to a first preset generation rule; The comparing the first key and the second key, and obtaining an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter when the first key and the second key are consistent, includes: Using the dedicated AMF module, compare the first key and the second key, and when the first key and the second key are consistent, obtain the access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter from the dedicated UDM module.

7. The data transmission method according to claim 6, characterized in that: The dedicated network device also includes a dedicated authentication service function AUSF module; The acquiring, when detecting that the registration request includes a SUPI, authentication data corresponding to the SUPI includes: In a case where it is detected by the dedicated AMF module that the registration request includes a SUPI, acquiring authentication data corresponding to the SUPI by using the dedicated AUSF module and the dedicated UDM module; The step of generating the authentication token and the first key corresponding to the random number according to the second preset generation rule includes: The dedicated AUSF module is used to generate the authentication token and the first key corresponding to the random number according to a second preset generation rule.

8. The data transmission method according to claim 7, characterized in that: The dedicated network device also includes a dedicated unified data warehouse UDR module; The acquiring, by using the dedicated AUSF module and the dedicated UDM module, authentication data corresponding to the SUPI when detecting that the registration request includes the SUPI by using the dedicated AMF module, comprises: In a case where it is detected by using the dedicated AMF module that the registration request includes the SUPI, the dedicated AUSF module and the dedicated UDM module are used to obtain authentication data corresponding to the SUPI from the dedicated UDR module.

9. The data transmission method according to claim 4, characterized in that: When the first key and the second key are consistent, after acquiring an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter, the method further includes: generating the target user identifier corresponding to the SUPI; Sending the target user identifier to the vehicle-mounted terminal; The connecting the vehicle-mounted terminal and the dedicated network device according to the access strategy includes: When the response information sent by the vehicle-mounted terminal is received, the vehicle-mounted terminal and the dedicated network device are connected according to the access strategy.

10. The data transmission method according to claim 9, characterized in that: The dedicated network equipment includes a dedicated base station and a dedicated AMF module; The generating the target user identifier corresponding to the SUPI includes: Generate a target user identifier corresponding to the SUPI using the dedicated AMF module; The sending the target user identifier to the vehicle-mounted terminal includes: Using the dedicated base station, sending the target user identifier to the vehicle-mounted terminal; The step of connecting the vehicle terminal and the dedicated network device according to the access strategy upon receiving the response information sent by the vehicle terminal includes: When the response information sent by the vehicle-mounted terminal is received by using the dedicated AMF module, the vehicle-mounted terminal and the dedicated network device are connected according to the access strategy by using the dedicated AMF module.

11. The data transmission method according to claim 4, characterized in that: The registration request includes the target user identifier of the vehicle-mounted terminal; Before generating the authentication token and the random number corresponding to the authentication data according to the first preset generation rule, the method further includes: In a case where the SUPI is not detected in the registration request, sending identity request information to the in-vehicle terminal; receiving identity response information sent by the vehicle-mounted terminal, wherein the identity response information includes the SUPI; Obtain the authentication data corresponding to the SUPI.

12. The data transmission method according to claim 11, characterized in that: The dedicated network equipment includes a dedicated base station and a dedicated AMF module; The sending identity request information to the vehicle terminal when the SUPI is not detected in the registration request includes: In a case where the dedicated AMF module does not detect that the registration request includes the SUPI, using the dedicated base station to send identity request information to the vehicle terminal; The receiving the identity response information sent by the vehicle-mounted terminal includes: The dedicated base station and the dedicated AMF module are used to receive the identity response information sent by the vehicle-mounted terminal.

13. The data transmission method according to claim 4, characterized in that: The registration request includes an initial user identifier of the vehicle terminal; when the first key and the second key are consistent, after obtaining an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal, and the slice parameter, the method further includes: generating the target user identifier corresponding to the SUPI; Sending the target user identifier to the vehicle-mounted terminal, so that the vehicle-mounted terminal updates the initial user identifier to the target user identifier; The connecting the vehicle-mounted terminal and the dedicated network device according to the access strategy includes: When the response information sent by the vehicle-mounted terminal is received, the vehicle-mounted terminal and the dedicated network device are connected according to the access strategy.

14. A data transmission method, characterized in that: Applied to vehicle terminals, including: receiving a data processing instruction sent by a dedicated network device, wherein the data processing instruction is sent by the dedicated network device when a selection input of a target user identifier is received, and the dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier, wherein the preset user identifier includes the target user identifier; Responsive to the data processing instruction, obtaining authentication information; Sending a first authentication request to the dedicated network device, wherein the first authentication request includes the authentication information, and is used to instruct the dedicated network device to verify the authentication information, and when the authentication information satisfies a first preset condition, sending software data to the vehicle-mounted terminal; The software data sent by the dedicated network device is received.

15. The data transmission method according to claim 14, characterized in that: The data processing instructions are sent by the dedicated network device using a dedicated AMF module and a dedicated base station; the software data are sent by the dedicated network device using a dedicated UPF module and the dedicated base station; The sending a first authentication request to the dedicated network device comprises: Utilizing the dedicated base station and the dedicated UPF module of the dedicated network device, a first authentication request is sent to the server of the dedicated network device, so that the dedicated network device responds to the first authentication request and utilizes the server to verify the authentication information. When the authentication information meets the first preset condition, the dedicated UPF module and the dedicated base station are utilized to send software data to the vehicle-mounted terminal.

16. The data transmission method according to claim 14, characterized in that: The authentication information includes authentication token information; Before receiving the data processing instruction sent by the dedicated network device, the method further includes: Obtain identity information; Sending a second authentication request to the dedicated network device, wherein the second authentication request includes the identity information, and is used to instruct the dedicated network device to verify the identity information in the second authentication request, and to generate the authentication token information according to the authentication token generation rule when the identity information satisfies a second preset condition; The authentication token information sent by the dedicated network device is received.

17. The data transmission method according to claim 14, characterized in that: Before receiving the data processing instruction sent by the dedicated network device, the method further includes: sending a registration request to the dedicated network device, the registration request including at least a registration type, capability information of the vehicle terminal, and a slice parameter, for instructing the dedicated network device to obtain authentication data corresponding to the SUPI when detecting that the registration request includes the SUPI, generate an authentication token and a random number corresponding to the authentication data according to a first preset generation rule, and generate a first key corresponding to the authentication token and the random number according to a second preset generation rule; Receiving the authentication token and the random number sent by the dedicated network device; Generate the authentication token and a second key corresponding to the random number according to the second preset generation rule; A second key is sent to the dedicated network device so that the dedicated network device compares the first key and the second key, and when the first key and the second key are consistent, an access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameter is obtained, and the vehicle terminal and the dedicated network device are connected according to the access policy.

18. The data transmission method according to claim 17, characterized in that: The authentication token and the random number are generated by the dedicated network device using a dedicated UDM module, and sent using a dedicated AUSF module, a dedicated AMF module and a dedicated base station; The sending a registration request to the dedicated network device comprises: Using the dedicated base station of the dedicated network device, sending a registration request to the dedicated AMF module of the dedicated network device, so that when the dedicated network device detects that the registration request includes a SUPI using the dedicated AUSF module and the dedicated UDM module, the dedicated network device obtains authentication data corresponding to the SUPI, generates an authentication token and a random number corresponding to the authentication data using the dedicated UDM module according to a first preset generation rule, and generates a first key corresponding to the authentication token and the random number using the dedicated AUSF module according to a second preset generation rule; The sending the second key to the dedicated network device comprises: Using the dedicated base station of the dedicated network device, a second key is sent to the dedicated AMF module of the dedicated network device, so that the dedicated network device uses the dedicated AMF module to compare the first key and the second key, and when the first key and the second key are consistent, obtains the access policy corresponding to the SUPI, the registration type, the capability information of the vehicle terminal and the slice parameter from the dedicated UDM module.

19. The data transmission method according to claim 17, characterized in that: After sending the second key to the dedicated network device, the method further includes: Receiving a target user identifier sent by the dedicated network device; Sending response information to the dedicated network device, so that the dedicated network device connects the vehicle-mounted terminal and the dedicated network device according to the access strategy when receiving the response information sent by the vehicle-mounted terminal.

20. The data transmission method according to claim 19, characterized in that: The target user identifier is sent by the dedicated network device using a dedicated base station; and the sending of response information to the dedicated network device includes: Utilize the dedicated base station of the dedicated network device to send response information to the dedicated AMF module of the dedicated network device, so that the dedicated network device utilizes the dedicated AMF module to connect the vehicle-mounted terminal and the dedicated network device according to the access strategy.

21. The data transmission method according to claim 17, characterized in that: The vehicle terminal includes the target user identifier, and the registration request includes the target user identifier; when receiving the authentication token and the random number sent by the dedicated network device, before generating the second key corresponding to the authentication token and the random number according to the second preset generation rule, the method further includes: Receiving identity request information sent by the dedicated network device; Sending identity response information to the dedicated network device, where the identity response information includes the SUPI, so that the dedicated network device can obtain the authentication data corresponding to the SUPI.

22. The data transmission method according to claim 21, characterized in that: The identity request information is sent by the dedicated network device using a dedicated base station; and the identity response information is sent to the dedicated network device, comprising: Utilize the dedicated base station of the dedicated network device to send identity response information to the dedicated AMF module of the dedicated network device.

23. The data transmission method according to claim 17, characterized in that: The vehicle terminal includes an initial user identifier, and the registration request includes the initial user identifier; after sending the second key to the dedicated network device, the method further includes: Receiving a target user identifier sent by the dedicated network device; Updating the initial user identifier in the vehicle-mounted terminal to the target user identifier; Sending response information to the dedicated network device, so that the dedicated network device connects the vehicle-mounted terminal and the dedicated network device according to the access strategy when receiving the response information sent by the vehicle-mounted terminal.

24. A data transmission device, characterized in that: Applied to a dedicated network device, the dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier, the device comprises: a sending module, configured to, upon receiving a selection input of a target user identifier, send a data processing instruction to a vehicle-mounted terminal corresponding to the target user identifier, so that the vehicle-mounted terminal responds to the data processing instruction and obtains authentication information, wherein the preset user identifier includes the target user identifier; A receiving module, configured to receive a first authentication request sent by the vehicle-mounted terminal, wherein the first authentication request includes the authentication information; The verification module is used to verify the authentication information in response to the first authentication request, and send software data to the vehicle-mounted terminal when the authentication information meets a first preset condition.

25. A data transmission device, characterized in that: Applied to vehicle terminals, including: A receiving module, configured to receive a data processing instruction sent by a dedicated network device, wherein the data processing instruction is sent by the dedicated network device upon receiving a selection input of a target user identifier, wherein the dedicated network device only provides services for a preset vehicle terminal corresponding to a preset user identifier, wherein the preset user identifier includes the target user identifier; an acquisition module, configured to acquire authentication information in response to the data processing instruction; a sending module, configured to send a first authentication request to the dedicated network device, wherein the first authentication request includes the authentication information, and is configured to instruct the dedicated network device to verify the authentication information, and to send software data to the vehicle-mounted terminal when the authentication information satisfies a first preset condition; The receiving module is also used to receive the software data sent by the dedicated network device.

26. An electronic device, characterized in that: The device comprises: a processor and a memory storing computer program instructions; When the processor executes the computer program instructions, the data transmission method according to any one of claims 1 to 13 or the data transmission method according to any one of claims 14 to 23 is implemented.

27. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the data transmission method according to any one of claims 1 to 13 or the data transmission method according to any one of claims 14 to 23 is implemented.

28. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to execute the data transmission method as described in any one of claims 1 to 13, or the data transmission method as described in any one of claims 14 to 23.

Images