Scene library data authorization management system for intelligent automobile traffic regulation compliance test verification

Abstract

The application discloses a scene library data authorization management system for intelligent automobile traffic regulation compliance test verification, comprising a traffic regulation compliance test application scene library platform, a terminal device, a scene library management module arranged on the terminal device and a scene library application client; the traffic regulation compliance test application scene library platform is used for responding to an access request of the terminal device, authenticating the terminal device, and sending encrypted scene library data to the terminal device that passes the authentication; the scene library management module is used for receiving and storing the encrypted scene library data, and is also used for responding to an access request of the scene library application client, authenticating the scene library application client, decrypting the encrypted scene library data, and calling the decrypted scene library data by the scene library application client that passes the authentication; and the scene library application client is used for reading the scene library data and performing simulation operation on the scene library data. The application can effectively prevent illegal access of non-authorized devices to the scene library data, and improves access security.

Description

Technical Field

[0001] This application relates to scenario library data management technology, and in particular to a scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification. Background Technology

[0002] With the rapid development of technology and industry, road testing, demonstration operations, and industrial applications of intelligent connected vehicles, such as autonomous driving, are constantly advancing. In particular, in the field of intelligent connected vehicle traffic regulation compliance testing and verification, scenario database data has strong regulatory requirements or high commercial value, and can only be provided by specific authorized institutions. Due to security and confidentiality requirements, scenario database data access services cannot be provided externally in the form of public cloud services; data access can only be performed through authorized terminals on internal LANs or locally.

[0003] However, existing technical solutions mainly focus on protecting the operational data generated inside the vehicle. No effective solution has yet been proposed for how to effectively protect the external scene library data used by autonomous vehicles or algorithms. Summary of the Invention

[0004] In view of this, this application provides a scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification, in order to solve the problem that the existing technology lacks a technical solution to effectively protect external scenario library data, and can effectively prevent unauthorized devices from illegally accessing scenario library data.

[0005] This application provides a scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification. The system includes: a traffic regulation compliance testing application scenario library platform, a terminal device, a scenario library management module set on the terminal device, and a scenario library application client; the traffic regulation compliance testing application scenario library platform includes at least a terminal registration unit and a terminal authentication unit.

[0006] The traffic regulations compliance test application scenario library platform is used to respond to the access request of the terminal device, authenticate the terminal device, send encrypted scenario library data to the authenticated terminal device, and also to store the encrypted scenario library data.

[0007] A terminal registration unit is configured to obtain the motherboard serial number and hard drive serial number of the terminal device, generate an identification code for the terminal device based on the motherboard serial number and hard drive serial number using a first algorithm, associate the identification code with the terminal device, generate a device whitelist based on the identification code of the terminal device, and generate a digital certificate for each terminal device.

[0008] A terminal authentication unit is configured to respond to a first access request from the terminal device, wherein the first access request contains at least the motherboard serial number and hard disk serial number of the terminal device; calculate the identification code of the terminal device based on the motherboard serial number and hard disk serial number in the first access request using a first algorithm; and determine that the terminal device is in the device whitelist or the digital certificate matches, and that the source address in the first access request belongs to an address in a set local area network, thereby confirming that the scene library terminal authentication is successful.

[0009] The scene library management module is used to receive and store encrypted scene library data, and is also used to respond to the access request of the scene library application client, authenticate the scene library application client, and decrypt the encrypted scene library data for the authenticated scene library application client to call.

[0010] The scene library application client is used to read scene library data and perform simulation calculations on the scene library data.

[0011] In one possible implementation, the traffic regulation compliance test application scenario library platform also includes:

[0012] The first data processing unit is used to respond to the first data request from the authenticated terminal device, retrieve scene library data from the local file safe, encrypt the scene library data, and send it to the terminal device.

[0013] In one possible implementation, the traffic regulation compliance test application scenario library platform includes:

[0014] The terminal registration unit is used to generate an identification code for the terminal device using the motherboard serial number and hard drive serial number as factors; generate a device whitelist based on the identification code; and generate a digital certificate for each terminal device.

[0015] The terminal authentication unit is used to respond to the first access request from the terminal device. When it is determined that the terminal device is in the device whitelist or the digital certificate matches, the terminal authentication in the scenario library is successful.

[0016] The first data processing unit is used to respond to the first data request from the authenticated terminal device, retrieve scene library data from the local file safe, encrypt the scene library data, and send it to the terminal device.

[0017] In one possible implementation, the traffic regulation compliance test application scenario library platform further includes: an authorization unit, wherein the terminal device is configured with a software encryption device;

[0018] The authorization unit is used to generate an authorization code for each terminal device, the authorization code including at least: a validity period; and to store the authorization code in a software encryption device configured in the terminal device.

[0019] In one possible implementation, the traffic regulation compliance test application scenario library platform further includes a storage unit, which is used to receive scenario library data, encrypt the scenario library data using encryption algorithms in the national cryptographic algorithm library, and store the encrypted scenario library data in a designated file security cabinet.

[0020] In one possible implementation, the scene library management module includes:

[0021] An installation unit is used to install the digital certificate on a terminal device;

[0022] The authorization and authentication unit is used to read the authorization code in the software encryption device. When it is determined that the current date is within the validity period of the authorization code, the scene library management module is triggered to enter the working state.

[0023] The authentication request unit is used to send the first access request to the traffic regulations compliance test application scenario library platform, wherein the first access request carries the identification code and digital certificate of the terminal device.

[0024] The first data request unit is used to send the first data request to the traffic regulations compliance test application scenario library platform after the platform has passed the authentication.

[0025] The data receiving unit is used to receive encrypted scene library data and store the encrypted scene library data in the file security cabinet of the terminal device.

[0026] In one possible implementation, the scene library management module further includes: a generation unit, which is used to generate a self-signed root CA certificate for the terminal device, generate a self-signed CA certificate for the scene library application client, generate a key pair for the scene library application client, and distribute the self-signed CA certificate and the key pair to the scene library application client.

[0027] In one possible implementation, the scene library management module further includes:

[0028] The user authentication unit is used to respond to a second access request from the scenario library application client. When it is determined that the self-signed CA certificate matches, it determines that the scenario library application client has been authenticated.

[0029] The second data processing unit is used to respond to the second data request from the authenticated scene library application client by decrypting the encrypted scene data to a specified temporary file directory for the scene library application client to call.

[0030] In one possible implementation, the scene library management module further includes a data management unit, which is used to periodically check the scene library data in the temporary file directory, and delete the scene library data in the temporary file directory when the scene library data has been used or has exceeded the limited lifespan.

[0031] In one possible implementation, the scene library application client includes:

[0032] The configuration unit is used to configure the key pair and self-signed CA certificate issued by the terminal device.

[0033] The user authentication request unit is used to send a second access request to the terminal device, wherein the second access request carries a self-signed CA certificate.

[0034] The second data request unit is used to send a second data request to the terminal device after the second access request is approved.

[0035] The data reading unit is used to read decrypted scene library data from the temporary file directory;

[0036] The execution unit is used to perform simulation calculations on the scene library data and store the simulation results in a specified file.

[0037] In one possible implementation, the scene library management module further includes:

[0038] The monitoring unit is used to monitor the test operation process, generate test process logs and store them. The test process logs include at least: test information, test completion status and scenario library data copying and / or tampering status.

[0039] The import unit is used to synchronously store the test calculation results into the terminal device using the running instructions.

[0040] The system proposed in this application can effectively prevent unauthorized devices from illegally accessing scene library data, thereby improving the security of scene library data. Attached Figure Description

[0041] To more clearly illustrate the technical solutions in the specific embodiments of this application or the prior art, the drawings used in the description of the specific embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0042] Figure 1 A framework diagram of the scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification provided in this application embodiment;

[0043] Figure 2 A functional structure diagram of the scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification provided in this application embodiment;

[0044] Figure 3 Hardware connection diagram of the scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification provided in this application embodiment;

[0045] Figure 4 Functional structure diagram of the traffic regulation compliance test application scenario library platform provided in the embodiments of this application;

[0046] Figure 5 A functional structure diagram of the scene library management module provided in the embodiments of this application;

[0047] Figure 6 This is a functional structure diagram of the scenario library application client provided in the embodiments of this application. Detailed Implementation

[0048] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. The components of the embodiments of this application described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0049] Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0050] First, a brief introduction to the design concept of the embodiments of this application will be given.

[0051] To address the lack of effective technical solutions for protecting external scene library data in existing technologies, this application provides a scene library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification. This system enables encrypted storage of protected scene library data on authorized devices and uses a dongle to encrypt and authorize the scene library management software, ensuring that only authorized scene library management services can access the encrypted data on the authorized devices. Simultaneously, it ensures that data imported to the terminal is encrypted using a specified encryption algorithm and stored in an encrypted folder. Authorized users can only upgrade the data management service through the scene library management software interface or the SSH (Secure Shell) encrypted channel. External authorized applications, after service authentication, can only access the encrypted scene library data through the scene library management software on the terminal.

[0052] like Figure 1 As shown, the intelligent vehicle traffic regulation compliance test verification scenario library data authorization management system provided in this embodiment includes: a traffic regulation compliance test application scenario library platform, a scenario library management terminal, a software dongle, and scenario library applications; the scenario library management terminal includes terminal equipment and scenario library management software.

[0053] The traffic regulation compliance test application scenario library platform is a server-side component. It is primarily responsible for managing all scenario library management terminals, generating a unique authorization certificate for each terminal, and managing all scenario library resources. It allows for on-demand downloading of scenarios to designated scenario library management terminals. The authorization management process of the traffic regulation compliance test application scenario library platform is as follows:

[0054] (1) Using the motherboard serial number and hard drive serial number of the terminal device as factors, a unique identification number for the terminal device is generated and added to the terminal ledger; specifically, the motherboard serial number and hard drive serial number of the terminal device are obtained, and an identification code for the terminal device is generated based on the motherboard serial number and hard drive serial number using a first algorithm, and the identification code is associated with the terminal device. In this embodiment, the first algorithm includes a hash algorithm. The first algorithm can be any other calculation method, as long as the first algorithm itself is private and sufficiently complex, it can ensure the confidentiality of the identification code of the terminal device and improve the authentication security of the technical solution of this application. The first algorithm can also be the interleaving of the bits of the motherboard serial number and the hard drive serial number, for example, inserting the bits of the motherboard serial number into the bits of the hard drive serial number according to a certain rule, such as interleaving.

[0055] (2) Generate a unique license digital certificate for each terminal device and form a device whitelist;

[0056] (3) When the scenario library management terminal attempts to establish a remote connection with the traffic regulations compliance test application scenario library platform, it will refuse to connect to devices that are not on the whitelist or whose license digital certificates do not match.

[0057] (4) Use the encryption algorithms in the national cryptographic algorithm library to encrypt the scene library data and save it to the designated file safe;

[0058] (5) When the authorized scenario library management terminal requests data from the traffic regulations compliance test application scenario library platform, the data is encrypted during transmission and then sent back to the scenario library management terminal.

[0059] A dongle is used to encrypt and authorize scene library management software, ensuring that only authorized scene library management services can access encrypted data on the device.

[0060] The scene library management software is a peripheral application, primarily responsible for scene library storage management and simulation process data import and storage. This includes scene library management terminal authorization and authentication, scene library management software authorization and authentication, scene library file storage management, scene library file encryption / decryption, and scene library file access authorization. The scene library management software's authorization management process is as follows:

[0061] (1) Use the software tools that come with the software dongle to generate a unique authorization code for the scene library management software. The authorization code generation factors include information such as (product ID, software ID, validity period);

[0062] (2) Deploy the processed scene library management software to the scene library management terminal and import the license certificate;

[0063] (3) During the startup process of the scene library management software, the authorization information in the software dongle will be read automatically, and the authorization validity period of the scene library management software will be determined; at the same time, the identification code of the terminal device will be read and the authorization verification will be performed with the imported License digital certificate information.

[0064] (4) After the scene library management software is authorized and certified, import the scene library files for external scene library applications to call, and encrypt and store them in the designated file safe.

[0065] (5) Generate a self-signed root CA (Certificate Authority) certificate for the scene library management terminal, and generate a self-signed CA certificate for the scene library application client.

[0066] (6) Add a key pair for each scene library application user. When the scene library application client connects to the scene library management software, it must carry the key information and be authorized and authenticated by the scene library management software.

[0067] (7) After the scene library application security authorization authentication is passed, the scene library files can be read from the scene library management terminal through the SDK (Software Development Kit);

[0068] (8) The scene library management software decrypts the encrypted scene data file to the specified temporary file directory for use by the scene library application;

[0069] (9) After the scenario library management software establishes a connection with the scenario library application, it imports and stores the original simulation process data from the scenario library application to the scenario library management terminal.

[0070] (10) The background service of the scene library management software periodically checks whether the scene library files in the temporary file directory have been used (opened and closed) or have exceeded their limited lifespan, so as to achieve the effect of "use and destroy". If the file has been used, it will be deleted directly; otherwise, the file will be retained.

[0071] The scene library application is a client-side application, primarily used by scene library application developers to develop applications based on their own business logic. It enables authorized access to scene library files while adhering to unified standards. The authorization management process for the scene library application is as follows:

[0072] (1) Add the key pair generated by the scene library management software for the current application to the scene library application configuration;

[0073] (2) Add the self-signed CA certificate generated by the scene library management software for the current application to the terminal device;

[0074] (3) After the scene library application establishes a connection with the scene library management software, when accessing the scene library files on the scene library management terminal device, the scene library management software will decrypt the encrypted files to the specified temporary file directory;

[0075] (4) The scene library application automatically reads the decrypted scene library file from the temporary file directory according to the configured file path.

[0076] This application comprehensively applies software and hardware technologies to achieve data security from multiple dimensions, including hardware, software, services, and data. It enables the protected scene library files to be stored in encrypted form on authorized devices, thereby improving the security of scene library data.

[0077] After introducing the application scenarios and design concepts of the embodiments of this application, the technical solutions provided by the embodiments of this application will be described below.

[0078] like Figure 2As shown, this application embodiment provides a scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification. The scenario library data authorization management system includes: a traffic regulation compliance testing application scenario library platform 100, a terminal device 200, a scenario library management module 300 set on the terminal device 200, and a scenario library application client 400.

[0079] The traffic regulations compliance test application scenario library platform 100 is used to respond to access requests from terminal devices, authenticate terminal devices, send encrypted scenario library data to authenticated terminal devices, and store encrypted scenario library data.

[0080] The scene library management module 300 is used to receive and store encrypted scene library data, and is also used to respond to access requests from scene library application clients, authenticate scene library application clients, and decrypt the encrypted scene library data for use by authenticated scene library application clients.

[0081] The scene library application client 400 is used to read scene library data and perform simulation calculations on it. As an example, image data is used as the scene library data for illustration. The simulation calculation utilizes deep learning networks such as Fast-RCNN to extract features from the image to identify semantic data or objects in the image, such as traffic signs and traffic lights. Candidate boxes that may contain traffic signs are generated in the image using a candidate box generation algorithm such as Selective Search. A region proposal network is used to filter the candidate boxes and determine the regions containing traffic signs. A deep learning network is used to classify the candidate boxes to determine whether they contain traffic signs and to locate the traffic signs precisely.

[0082] The scene library data authorization management system provided in this application embodiment can realize encrypted storage of scene library data, anti-tampering and anti-copying of scene library data, and authorization management of specific devices and specific services, thereby preventing unauthorized devices from illegally accessing scene library data and improving the security of scene library data.

[0083] like Figure 3 As shown, the traffic regulation compliance test application scenario library platform 100 serves as the server, providing scenario library data services to multiple terminal devices 200. One terminal device 200 and multiple scenario library application clients 400 are located within a local area network (enterprise LAN), and one terminal device can provide scenario library data services to multiple scenario library application clients.

[0084] In some embodiments, such as Figure 4 As shown, the traffic regulation compliance test application scenario library platform 100 includes:

[0085] Terminal registration unit 101 is used to obtain the motherboard serial number and hard disk serial number of the terminal device, generate an identification code of the terminal device based on the motherboard serial number and hard disk serial number using a first algorithm, associate the identification code with the terminal device, generate a device whitelist based on the identification code of the terminal device, and generate a digital certificate for each terminal device.

[0086] Terminal authentication unit 102 is configured to respond to a first access request from a terminal device, wherein the first access request includes at least the motherboard serial number and hard disk serial number of the terminal device; calculate the identification code of the terminal device based on the motherboard serial number and hard disk serial number in the first access request using a first algorithm; and determine that the terminal device is in the device whitelist or the digital certificate matches, and that the source address in the first access request belongs to an address in a set local area network, thereby confirming that the scene library terminal authentication is successful.

[0087] The first data processing unit 103 is used to respond to the first data request from the authenticated terminal device, retrieve scene library data from the local file safe, encrypt the scene library data and send it to the terminal device.

[0088] In this embodiment, the traffic regulation compliance test application scenario library platform authenticates terminal devices through device whitelists and digital certificates, which can effectively prevent unauthorized devices from obtaining scenario library data.

[0089] In some embodiments, the traffic regulation compliance test application scenario library platform further includes: an authorization unit 104, wherein the terminal device 100 is configured with a software encryption device;

[0090] The authorization unit 104 is used to generate an authorization code for each terminal device, the authorization code including at least: a validity period; and to store the authorization code in a software encryption device configured in the terminal device.

[0091] Preferably, the software encryption device uses a software dongle for authentication of the terminal device and the scene library management module.

[0092] In some embodiments, the traffic regulation compliance test application scenario library platform 100 further includes: a storage unit 105, used to receive external scenario library data, encrypt the scenario library data using encryption algorithms in the national cryptographic algorithm library, and store the encrypted scenario library data in a designated file security cabinet.

[0093] In some embodiments, such as Figure 5 As shown, the scene library management module 300 includes:

[0094] Installation unit 301 is used to install the digital certificate on the terminal device;

[0095] The authorization and authentication unit 302 is used to read the authorization code in the software encryption device. When it is determined that the current date is within the validity period of the authorization code, the scene library management module is triggered to enter the working state.

[0096] The authentication request unit 303 is used to send the first access request to the traffic regulations compliance test application scenario library platform, wherein the first access request carries the identification code and digital certificate of the terminal device.

[0097] The first data request unit 304 is used to send the first data request to the traffic regulations compliance test application scenario library platform after the authentication is passed.

[0098] The data receiving unit 305 is used to receive encrypted scene library data and store the encrypted scene library data in the file security cabinet of the terminal device.

[0099] In some embodiments, the scene library management module further includes: a generation unit 306, used to generate a self-signed root CA certificate for the terminal device, generate a self-signed CA certificate for the scene library application client, generate a key pair for the scene library application client, and distribute the self-signed CA certificate and the key pair to the scene library application client.

[0100] In some embodiments, the scene library management module 300 further includes:

[0101] User authentication unit 307 is used to respond to a second access request from the scene library application client. When it is determined that the self-signed CA certificate matches, it determines that the scene library application client has been authenticated.

[0102] The second data processing unit 308 is used to respond to the second data request from the authenticated scene library application client by decrypting the encrypted scene data to a specified temporary file directory for the scene library application client to call.

[0103] In some embodiments, the scene library management module further includes a data management unit 309, which is used to periodically check the scene library data in the temporary file directory and delete the scene library data in the temporary file directory when the scene library data has been used or has exceeded the limited lifespan.

[0104] In this embodiment, the security of the scene library data can be further improved by promptly deleting used scene library data.

[0105] In some embodiments, the scenario library management module further includes a data storage unit 310, which is used to receive external scenario library data (issued by the non-traffic regulation compliance test application scenario library platform), encrypt it using the national cryptographic algorithm, and store it in the file security cabinet of the terminal device.

[0106] Since the scenario library data obtained directly from the traffic regulations compliance test application scenario library platform is encrypted, it can be directly stored in the file safe of the terminal device without encryption. However, for external scenario library data, it needs to be encrypted before being stored in the file safe of the terminal device.

[0107] In some embodiments, such as Figure 6 As shown, the scene library application client 400 includes:

[0108] Configuration unit 401 is used to configure the key pair and self-signed CA certificate issued by the terminal device;

[0109] User authentication request unit 402 is used to send a second access request to the terminal device, wherein the second access request carries a self-signed CA certificate.

[0110] The second data request unit 403 is used to send a second data request to the terminal device after the second access request is approved.

[0111] Data reading unit 404 is used to read decrypted scene library data from the temporary file directory;

[0112] The execution unit 405 is used to perform simulation calculations on the scene library data and store the simulation results in a specified file.

[0113] In this embodiment, by using key pairs, data transmission between the terminal device and the scene library application client can be carried out more securely.

[0114] In some embodiments, the scene library management module further includes:

[0115] The monitoring unit 406 is used to record and manage the test operation process by using high-performance streaming data transmission and blockchain technology, generate test process logs and store them. The test process logs include at least: test information, test completion status and scenario library data copying and / or tampering status.

[0116] Import unit 407 is used to synchronously store the test calculation results to the terminal device using the running instructions; that is, it adopts a high-performance streaming data transmission method to store the simulation process data of each frame to the scene library management terminal device in real time, ensuring that the data maintains low latency and high reliability during transmission, minimizing bandwidth occupation and meeting storage space requirements.

[0117] Specifically, the monitoring unit employs high-performance streaming data transmission and blockchain technology to record and manage the testing process. The import unit is based on the simulation software data structure.

[0118] The RDB_SENSOR_OBJECT_t and RDB_OBJECT_STATE_t components, along with the data transmission component (RDB component), run the command "rdbSniffer -s IP address -p communication port -c communication mode -r" on a specific communication port to record the simulation process data for each frame in real time. A high-performance streaming data transmission method is used to synchronously store the test results in the terminal device. During the data transmission process, data filtering is performed to retain RDB_SENSOR_OBJECT_t information that meets the evaluation requirements, namely the perception signals, vehicle status information, and map information for each frame.

[0119] In this embodiment, by synchronously storing the simulation results to the terminal device, the authenticity of the simulation results is ensured, thereby enabling a more accurate evaluation of the scene library data.

[0120] In the various embodiments of this application, the order of the above-mentioned processes does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0121] Those skilled in the art will recognize that the various illustrative logical blocks (ILBs) and steps described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this application.

[0122] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0123] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0124] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0125] In the above embodiments, implementation can be achieved entirely or partially through software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented entirely or partially in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid-state drive), etc.

[0126] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification, characterized in that, The system includes: a traffic regulation compliance test application scenario library platform, terminal devices, a scenario library management module set on the terminal devices, and a scenario library application client; the traffic regulation compliance test application scenario library platform includes at least a terminal registration unit and a terminal authentication unit; The traffic regulations compliance test application scenario library platform is used to respond to the access request of the terminal device, authenticate the terminal device, send encrypted scenario library data to the authenticated terminal device, and also to store the encrypted scenario library data. A terminal registration unit is configured to obtain the motherboard serial number and hard drive serial number of the terminal device, generate an identification code for the terminal device based on the motherboard serial number and hard drive serial number using a first algorithm, associate the identification code with the terminal device, generate a device whitelist based on the identification code of the terminal device, and generate a digital certificate for each terminal device. A terminal authentication unit is configured to respond to a first access request from the terminal device, wherein the first access request contains at least the motherboard serial number and hard disk serial number of the terminal device; calculate the identification code of the terminal device based on the motherboard serial number and hard disk serial number in the first access request using a first algorithm; and determine that the terminal device is in the device whitelist or the digital certificate matches, and that the source address in the first access request belongs to an address in a set local area network, thereby confirming that the scene library terminal authentication is successful. The scene library management module is used to receive and store encrypted scene library data, and is also used to respond to the access request of the scene library application client, authenticate the scene library application client, and decrypt the encrypted scene library data for the authenticated scene library application client to call. The scene library application client is used to read scene library data and perform simulation calculations on the scene library data; The traffic regulations compliance test application scenario library platform also includes: The first data processing unit is used to respond to the first data request of the authenticated terminal device, retrieve scene library data from the local file safe, encrypt the scene library data and send it to the terminal device. The traffic regulations compliance test application scenario library platform also includes: an authorization unit, wherein the terminal device is configured with a software encryption device; The authorization unit is used to generate an authorization code for each terminal device, the authorization code including at least: a validity period; and to store the authorization code in a software encryption device configured in the terminal device. The scene library management module includes: An installation unit is used to install the digital certificate on the terminal device; The authorization and authentication unit is used to read the authorization code in the software encryption device. When it is determined that the current date is within the validity period of the authorization code, the scene library management module is triggered to enter the working state. The authentication request unit is used to send the first access request to the traffic regulations compliance test application scenario library platform, wherein the first access request carries the identification code and digital certificate of the terminal device. The first data request unit is used to send the first data request to the traffic regulations compliance test application scenario library platform after the platform has passed the authentication. A data receiving unit is used to receive encrypted scene library data and store the encrypted scene library data in the file security cabinet of the terminal device. The scene library management module further includes: a generation unit, which is used to generate a self-signed root CA certificate for the terminal device, generate a self-signed CA certificate for the scene library application client, generate a key pair for the scene library application client, and send the self-signed CA certificate and key pair to the scene library application client.

2. The scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification according to claim 1, characterized in that, The traffic regulation compliance test application scenario library platform also includes: a storage unit; the storage unit is used to receive scenario library data, encrypt the scenario library data using encryption algorithms in the national cryptographic algorithm library, and store the encrypted scenario library data in a designated file security cabinet.

3. The scenario database data authorization management system for intelligent vehicle traffic regulation compliance testing and verification according to claim 1, characterized in that, The scene library management module also includes: The user authentication unit is used to respond to the second access request from the scenario library application client and, when it is determined that the self-signed CA certificate matches, determine that the scenario library application client has been authenticated. The second data processing unit is used to respond to the second data request from the authenticated scene library application client by decrypting the encrypted scene data to a specified temporary file directory for the scene library application client to call.

4. The scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification according to claim 3, characterized in that, The scene library management module further includes a data management unit, which is used to periodically check the scene library data in the temporary file directory and delete the scene library data in the temporary file directory when the scene library data has been used or has exceeded the limited lifespan.

5. The scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification according to claim 3, characterized in that, The scene library application client includes: A configuration unit is used to configure the key pair and self-signed CA certificate issued by the terminal device; The user authentication request unit is used to send a second access request to the terminal device, wherein the second access request carries a self-signed CA certificate. The second data request unit is used to send a second data request to the terminal device after the second access request is approved. The data reading unit is used to read decrypted scene library data from the temporary file directory; The execution unit is used to perform test calculations on the scene library data and store the test results in a specified file.

6. The scenario library data authorization management system for intelligent vehicle traffic regulation compliance testing and verification according to claim 5, characterized in that, The scene library management module also includes: The monitoring unit is used to monitor the test operation process, generate test process logs and store them. The test process logs include at least: test information, test completion status and scenario library data copying and / or tampering status. The import unit is used to synchronously store the test calculation results into the terminal device using the running instructions.

Images