Block chain-based vehicle-machine dynamic access system, method and device, and storage medium

Abstract

The invention relates to a block chain-based vehicle-machine dynamic access system, method and device, and a storage medium. According to the invention, the block chain is combined with an intelligent contract mechanism, automatic registration, access and authority control of the vehicle-mounted terminal are realized, and the reliability and safety of the whole vehicle-mounted terminal network are guaranteed. The block chain-based vehicle-machine dynamic access system comprises a control layer, an execution layer, a controlled layer and an analysis layer. Wherein the control layer mainly comprises a vehicle machine identity contract, a dynamic access control contract and a reliability evaluation module. And the control layer is used for realizing registration, verification and access authority control of the vehicle-mounted terminal. And the execution layer executes the functions of networking, data acquisition and control and the like of the vehicle machine according to the instruction issued by the control layer. And the controlled layer is a hardware in-vehicle machine accessed to the whole network. And the analysis layer performs state analysis according to the state data uploaded by the vehicle machine. According to the method, the defects of single-point failure, potential safety hazards, communication delay, insufficient flexibility and the like in the prior art can be overcome, and the overall performance of the vehicle access control system is improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of intelligent networked vehicles, and specifically relates to a vehicle-machine dynamic access method based on blockchain. Background Art

[0002] With the development of intelligent connected vehicles, car computers have become an indispensable part of vehicles, providing functions such as navigation, entertainment, communication and vehicle control. Existing car computer access control methods mostly adopt a centralized architecture mode, and the car computer performs a series of operations such as identity authentication, resource allocation and data exchange through a central server. The centralized architecture has been widely used because it can centrally manage and monitor the status of all vehicles and ensure the consistency and security of the system. However, the centralized control method has the following limitations:

[0003] 1. Single point of failure: If the central server fails, the entire system may be paralyzed, causing the vehicle to be unable to access the network normally;

[0004] 2. Security risks: Centralized storage and transmission of data are at risk of being stolen and tampered with, increasing the risk of data leakage and illegal use;

[0005] 3. Communication delay: As the number of vehicles increases, the processing capacity of the central server may become a bottleneck, especially in high concurrency situations, the response time of vehicle access will be greatly extended;

[0006] 4. Lack of flexibility: The allocation and change of permissions must be done through a central server, which makes it impossible to achieve rapid response and dynamic adjustment. Summary of the invention

[0007] The purpose of the present invention is to provide a decentralized vehicle-machine dynamic access system based on blockchain, and also to provide a decentralized vehicle-machine dynamic access method, device and storage medium based on blockchain, so as to solve the problems of single point failure, safety hazards, communication delay and lack of flexibility in the prior art, and improve the overall performance of the vehicle-machine access control system.

[0008] The objective of the present invention is achieved through the following technical solutions:

[0009] A blockchain-based vehicle-machine dynamic access system, including a control layer, an execution layer, a controlled layer, and an analysis layer;

[0010] The control layer includes a vehicle computer identity contract, a dynamic access control contract and a reliability assessment module, which are used to realize vehicle computer registration, verification and access permission control, and issue instructions to the execution layer; the execution layer executes vehicle computer networking, data collection and control functions according to the instructions issued by the control layer; the controlled layer is a hardware vehicle computer connected to the entire network, and uploads the vehicle computer data to the analysis layer; the analysis layer includes a gateway and a big data platform, which can perform status analysis based on the status data uploaded by the vehicle computer, and send the vehicle computer status analysis to the reliability assessment module of the control layer.

[0011] Furthermore, the vehicle computer identity contract is a smart contract based on blockchain to realize the registration, identity authentication and permission control functions of the vehicle computer; among them, vehicle computer registration is that the edge node accesses the blockchain network through the local blockchain node to realize the call of the vehicle computer identity contract, and registers the digital identity information of the vehicle computer and the corresponding permissions in the blockchain; vehicle computer identity authentication is that the edge node accesses the blockchain network through the local blockchain node to realize the call of the vehicle computer identity authentication contract. After the verification is passed, the initial permissions are assigned to the vehicle, and the permission information is stored in the smart contract in encrypted form, and the static permissions are sent to the vehicle end.

[0012] Furthermore, the dynamic access control contract dynamically adjusts the permission control strategy of the vehicle computer based on the statistical results of the reliability evaluation module; the adjustment results are transmitted to relevant nodes through encrypted communication and the information in the smart contract is updated.

[0013] Furthermore, the reliability assessment module analyzes the vehicle computer's activity log, comprehensively considers the vehicle status, network environment and user needs, realizes vehicle computer behavior analysis, and pushes the analysis results to the dynamic access control contract.

[0014] A blockchain-based vehicle-machine dynamic access method comprises the following steps:

[0015] A. Initialization operation

[0016] A1. Network deployment: Deploy decentralized network nodes in vehicles to form a widely covered vehicle-machine access control network;

[0017] A2. Certificate distribution: Each vehicle that needs to access the blockchain network has a built-in digital certificate information encrypted by a pre-paid secret key when it leaves the factory;

[0018] B. Vehicle registration:

[0019] B1. When the vehicle computer is connected to the network, it accesses the local blockchain node through the edge node and initiates a vehicle computer identity information registration request. This request contains the digital identity information of the vehicle computer and the certificate assigned at the factory;

[0020] B2. After receiving the registration request from the edge node, the corresponding blockchain node broadcasts the request to other blockchain nodes in the blockchain network. Each blockchain node calls the digital identity contract and elects the master node to verify permissions and generate identity information blocks through a consensus mechanism.

[0021] B3. After the master node is elected, the master node's vehicle digital identity contract first verifies whether the vehicle's digital identity information is legal, and then verifies whether it has the authority to access the Internet of Things. If it does not have the authority, the registration will be directly rejected; if it has the Internet access authority, the vehicle's authority to use the Internet of Things service will be further verified. After verifying the authority, the master node generates a data block of the vehicle's identity and corresponding authority within a period of time;

[0022] B4. The master node broadcasts the generated identity and corresponding authority data blocks to other blockchain nodes;

[0023] B5. Other blockchain nodes call the vehicle digital identity contract to perform format verification and permission checks on the data blocks generated by the master node, and automatically broadcast the inspection results;

[0024] B6. Each node will receive the inspection results broadcast by other nodes. After each node counts the number of nodes that recognize this data block and reaches a certain proportion, the identity and corresponding authority blocks of this batch of vehicle computers will be saved in the local blockchain account book;

[0025] C. Vehicle verification and authorization:

[0026] C1. When the vehicle computer makes a connection request after registration, it needs to access the local blockchain node through the edge node. The blockchain node will request to synchronize with other blockchain nodes in the blockchain network.

[0027] C2. Each node calls the vehicle computer digital identity contract to verify the legitimacy of the vehicle computer's digital identity information in the request; after verifying the legitimacy of the vehicle computer's identity, each node calls the dynamic access control contract to check whether the dynamic access control policy corresponding to the vehicle computer exists in the dynamic access control contract. If there is a dynamic policy, it is returned to the local node that initiated the request. After the dynamic access control contract of the local node verifies that the policies returned by a certain proportion of nodes are consistent, the local blockchain node sends the dynamic policy to the edge node. The edge node preferentially executes the dynamic access control policy. If a certain proportion of nodes feedback that there is no dynamic policy, execute step C3;

[0028] C3. After the local node calls the dynamic access control contract without returning any result, it continues to call the digital identity contract to read the vehicle computer identity and permission data information in the blockchain ledger, and then returns the verification token and vehicle computer permission information;

[0029] C4, the edge node holds a token and communicates with the IoT gateway. After receiving the request, the IoT gateway verifies the token. After passing the verification, it is allowed to store the collected vehicle data in the IoT big data platform and use the corresponding IoT services.

[0030] D. Reliability analysis module: It reads the vehicle log data of the IoT big data platform to analyze the vehicle behavior;

[0031] E. Dynamically adjust control permissions: Each blockchain node obtains the analysis results of the reliability analysis module through the dynamic access control contract, and dynamically adjusts the vehicle computer access control permissions. Specifically: by obtaining the analysis results of the reliability analysis module, according to the permission control rules, dynamically adjust the vehicle computer permissions, and then issue the policy to the corresponding edge node, and the edge node performs vehicle computer operations according to the permission policy; give priority to executing the dynamic permission policy of the dynamic access control contract, and then, execute the static permission policy recorded in the ledger. When there is a conflict between the two permission policies, the dynamic permission policy shall prevail.

[0032] Furthermore, in step A1, each node forms a blockchain network through the p2p protocol, maintains the network status and data consistency through the consensus mechanism, and each node is equal and will run the vehicle identity contract and dynamic access control contract.

[0033] Furthermore, the behavior analysis of the vehicle computer in step D mainly includes vehicle computer connection abnormality analysis, vehicle computer collection abnormality analysis and vehicle computer data abnormality analysis;

[0034] D1. Analysis of abnormal vehicle-machine connection: Analyze whether the vehicle-machine has abnormal or malicious connection behavior. If the vehicle-machine is identified to have frequent connection attempts within a period of time, it is determined that the vehicle-machine has abnormal connection behavior;

[0035] D2. Vehicle collection anomaly analysis: Analyze whether there are any abnormalities in vehicle collection. Collection anomaly means that the vehicle collection frequency exceeds the threshold. The analysis rules for vehicle collection anomaly are: initial credit score is 100, vehicle collection frequency f, frequency threshold k, vehicle credit score s, and last credit score s ′ , the cumulative number of abnormalities n, then The threshold k can be set to 5 times / s, and the vehicle computer credit score is calculated according to the above formula. If the credit score is less than 60, the output is 1 collection abnormality, and then the initial credit value is reset to 100;

[0036] D3. Car data anomaly analysis: Analyze whether the collected car data has data anomalies. Data anomalies include the presence of special illegal characters, excessive single data volume, frequent missing of important data, etc. The analysis rules are as follows: the initial credit score is 100, the car credit score is s, and the last credit score is s ′ , the number of special illegal characters a, the special character impact factor γ 1 , the number of times a single piece of data is too large k, the impact factor of a single piece of data being too large γ 2 , the number of missing data s, the impact factor of missing important data γ 3 , then s=s ′ -(a×γ 1 +k×γ 2 +s×γ 3 ) where γ 1 , γ 2 , γ 3 It can be adjusted according to the specific situation, such as 1.5, 1.5, 2.0 respectively. The credit score of the vehicle computer is calculated according to the above formula. If the credit score is less than 60, the output is 1 data abnormality, and then the initial credit value is reset to 100.

[0037] Furthermore, in step E, the limit control rules are as follows, starting from the first time the device is connected to the Internet of Things:

[0038] E1. When the device connection is abnormal, the following strategy is adopted: wait for a period of time before allowing the device to reconnect; the time interval is related to the cumulative number of connection abnormalities, and the relationship is as follows: time interval t, t is in seconds, and the cumulative number is n. When n>100, it is prohibited from connecting to the Internet, and you can choose to contact on-site personnel for repair or replacement;

[0039]

[0040] E2. When the device collects data abnormally, if the number of abnormal collections is >150, the device will be added to the blacklist and will not be allowed to connect to the Internet or use the corresponding services. You can choose to contact on-site personnel for repair or replacement.

[0041] E3. When the device data is abnormal, if the number of data abnormalities is >1000, the device will be added to the blacklist and will not be allowed to connect to the Internet or use the corresponding services. You can choose to contact on-site personnel for repair or replacement.

[0042] A computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, a dynamic vehicle-machine access method based on blockchain is implemented.

[0043] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements a blockchain-based vehicle-machine dynamic access method.

[0044] Compared with the prior art, the present invention has the following beneficial effects:

[0045] This method can overcome the defects of the prior art such as single point failure, safety hazards, communication delay and lack of flexibility, and improve the overall performance of the vehicle access control system. Specifically, it has the following advantages:

[0046] 1. Avoid single point failure: Based on blockchain technology, edge computing nodes are deployed or blockchain nodes are deployed in the vehicle computer, and p2p interactions are carried out between nodes to build a decentralized trust system. The vehicle computer identity information and permission information are stored in the blockchain ledger, and each node saves a copy to solve the single point failure problem faced by the centralized architecture;

[0047] 2. Improve security: identity and permission information is stored in the blockchain and cannot be tampered with by anyone;

[0048] 3. Improve response speed: adopt distributed processing mechanism to reduce the burden on the central server and improve system response speed and concurrent processing capabilities;

[0049] 4. Enhanced flexibility: Realize dynamic adjustment of access rights, adjust access rights in real time according to vehicle status, network environment and user needs, and improve the adaptability and scalability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0051] Figure 1 The present invention implements the logic diagram of the vehicle machine dynamic access method based on blockchain;

[0052] Figure 2 Schematic diagram of the structure of computer equipment. DETAILED DESCRIPTION

[0053] The present invention will be further described below in conjunction with embodiments:

[0054] Example 1

[0055] The present invention adopts blockchain combined with smart contract mechanism to realize automatic registration, access and permission control of vehicle computers, ensuring the reliability and security of the entire vehicle computer network. The specific implementation logic is as follows: Figure 1 The blockchain-based vehicle-machine dynamic access system of the present invention includes a control layer, an execution layer, a controlled layer and an analysis layer.

[0056] The control layer is used to implement vehicle registration, verification and access control, and issue instructions to the execution layer. The execution layer executes the vehicle networking, data collection and control functions according to the instructions issued by the control layer. The controlled layer is a hardware vehicle connected to the entire network, and uploads the vehicle data to the analysis layer. The analysis layer includes a gateway and a big data platform, which can perform status analysis based on the status data uploaded by the vehicle, and send the vehicle status analysis to the reliability assessment module of the control layer. Among them, the control layer is the main innovation of the present invention, which mainly includes a vehicle identity contract, a dynamic access control contract and a reliability assessment module.

[0057] Among them, the vehicle identity contract is a blockchain-based smart contract that implements vehicle registration, identity authentication, and permission control. Among them, vehicle registration is the edge node accessing the blockchain network through the local blockchain node to implement the vehicle identity contract call, and register the digital identity information and corresponding permissions of the vehicle to the blockchain. Vehicle identity authentication is the edge node accessing the blockchain network through the local blockchain node to implement the vehicle identity authentication contract call. After the verification is passed, the initial permissions are assigned to the vehicle, and the permission information is stored in the smart contract in an encrypted form, and the static permissions are sent to the vehicle end.

[0058] The dynamic access control contract dynamically adjusts the vehicle computer's permission control strategy based on the statistical results of the reliability assessment module. The adjustment results are transmitted to the relevant nodes through encrypted communication and the information in the smart contract is updated.

[0059] The reliability assessment module analyzes the activity log of the vehicle computer and comprehensively considers multiple factors such as vehicle status (such as speed, location, power, etc.), network environment (such as signal strength, bandwidth occupancy, etc.) and user needs (such as service type, priority, etc.). It realizes the behavior analysis of the vehicle computer and pushes the analysis results to the dynamic access control contract.

[0060] The above system design enables blockchain-based vehicle dynamic access to have the following advantages:

[0061] Avoid single point failure: After a certain number of vehicle computers, including edge nodes and blockchain nodes, are damaged, the system can still perform identity authentication and authorization normally. The vehicle computer identity and corresponding permissions are distributedly stored, and each node will save a ledger. All nodes are equal and run the vehicle computer digital identity contract and dynamic access control contract. Therefore, as long as more than 50% of the nodes are not damaged, normal identity authentication and authorization can be performed.

[0062] Anti-tampering: The blockchain ledger cannot be changed at any node. If it is changed, it will be discovered by other nodes, making the change invalid.

[0063] Automatic execution: The registration, permission verification, identity verification, and dynamic adjustment of permissions of the vehicle are all carried out automatically, and are confirmed by distributed multiple nodes, rather than centralized management. Each node runs the vehicle digital identity contract and dynamic access control contract. These two smart contracts automatically perform registration, verification, and other tasks, and through the distributed confirmation mechanism of the contract, the distributed confirmation of various decisions is carried out, realizing distributed trusted autonomy, rather than centralized management.

[0064] Dynamic adjustment of permissions: Regularly count abnormal status of the vehicle computer to dynamically adjust the permissions of the vehicle computer. The reliability analysis module will regularly / real-time count the logs of the vehicle computer, identify abnormal situations, and provide them to the dynamic access control contract for dynamic permission adjustment.

[0065] Example 2

[0066] The present invention provides a blockchain-based vehicle-machine dynamic access method, comprising the following steps:

[0067] 1. Initialization operation

[0068] 11. Network deployment: Decentralized network nodes are deployed in automobile manufacturers, service providers and user vehicles. Each node forms a blockchain network through the p2p protocol, maintains the network status and data consistency through the consensus mechanism, and forms a widely covered vehicle access control network. Each node is equal and will run the vehicle identity contract and dynamic access control contract.

[0069] 12. Certificate distribution: Each car machine that needs to access the blockchain network needs a digital identity information to prove its identity and immutability. The digital certificate information can be built-in at the factory and encrypted with a pre-paid secret key.

[0070] 2. Vehicle registration:

[0071] 21. When the vehicle is connected to the network, it accesses the local blockchain node through the edge node and initiates a vehicle identity registration request. This request contains the digital identity information of the vehicle and the certificate assigned at the factory.

[0072] 22. After receiving the registration request from the edge node, the corresponding blockchain node broadcasts the request to other blockchain nodes in the blockchain network. Each blockchain node calls the digital identity contract and elects the master node for authority verification and generation of identity information blocks through the consensus mechanism. The master node is dynamically elected through the consensus mechanism each time, instead of being uniformly managed by the central management server as in centralized management.

[0073] 23. After the master node is elected, the digital identity contract of the master node first verifies whether the digital identity information of the car is legal. Then, verify whether it has the permission to access the Internet of Things. If not, directly refuse to register; if it has the permission to connect to the Internet, further verify the permission of the car to use the Internet of Things service, that is, which specific services can be used, such as the vehicle's voice service, navigation service, remote control service, etc. After verifying the permission, the master node generates a data block of the identity of the car and the corresponding permissions within a period of time. The method for the master node digital identity contract to verify permissions is that each blockchain node will maintain a permission rule comparison table to automatically match the car identity with the permission rules.

[0074] 24. The master node broadcasts the generated identity and corresponding authority data blocks to other blockchain nodes.

[0075] 25. Other blockchain nodes call the vehicle digital identity contract, perform format verification and permission checks on the data blocks generated by the master node, and automatically broadcast the inspection results.

[0076] 26. Each node will receive the inspection results broadcast by other nodes. After the number of nodes that recognize this data block reaches a certain proportion, each node will save the identity and corresponding permission blocks of this batch of vehicle computers in the local blockchain account book. The result is that each node saves a ledger that records the identity and permission data of the vehicle computer, and it cannot be tampered with.

[0077] 3. Vehicle verification and authorization:

[0078] 31. When the car computer makes a network connection request after registration, it needs to access the local blockchain node through the edge node, and the blockchain node will request to synchronize other blockchain nodes in the blockchain network.

[0079] 32. Each node calls the vehicle computer digital identity contract to verify the legitimacy of the vehicle computer's digital identity information in the request. After verifying the legitimacy of the vehicle computer's identity, each node calls the dynamic access control contract to check whether the dynamic access control policy corresponding to the vehicle computer exists in the dynamic access control contract. If there is a dynamic policy, it is returned to the local node that initiated the request. After the dynamic access control contract of the local node verifies that the policies returned by a certain proportion of nodes are consistent, the local blockchain node sends the dynamic policy to the edge node. The edge node prioritizes the execution of the dynamic access control policy. If a certain proportion of nodes report that there is no dynamic policy, step 33 is executed.

[0080] 33. After the local node calls the dynamic access control contract without returning any result, it continues to call the digital identity contract to read the vehicle computer identity and permission data information in the blockchain ledger, and then returns the verification token and vehicle computer permission information. Because the information recorded in the blockchain ledger cannot be tampered with, the dynamic access control contract cannot change the permission ledger information generated during "vehicle computer registration", so step 32 needs to be executed first.

[0081] 34. The edge node holds the token and communicates with the IoT gateway. After receiving the request, the IoT gateway verifies the token. After passing the verification, it is allowed to store the collected vehicle data in the IoT big data platform and use the corresponding IoT services.

[0082] 4. Reliability analysis module: By reading the vehicle log data of the IoT big data platform, the vehicle behavior analysis is realized. The vehicle behavior analysis mainly includes: vehicle connection abnormality analysis, vehicle collection abnormality analysis and vehicle data abnormality analysis.

[0083] 41. Vehicle computer connection abnormality analysis: Analyze whether the vehicle computer has abnormal or malicious connection behavior. If the vehicle computer is identified to frequently attempt to connect within a period of time, it is judged that the vehicle computer has abnormal connection behavior. For example, it is stipulated that the vehicle computer is allowed to repeatedly connect 10 times within 5 seconds. If the vehicle computer repeatedly connects more than 10 times within 5 seconds, the output is 1 connection abnormality.

[0084] 42. Vehicle computer collection anomaly analysis: Analyze whether there are any abnormalities in vehicle computer collection. Collection anomaly means that the vehicle computer collection frequency exceeds the threshold. The analysis rules for vehicle computer collection anomaly are: initial credit score is 100, vehicle computer collection frequency f, frequency threshold k, vehicle computer credit score s, and last credit score s ′ , the cumulative number of abnormalities n, then The threshold k can be set to 5 times / s, and the vehicle computer credit score is calculated according to the above formula. If the credit score is less than 60, the output is 1 collection abnormality, and then the initial credit value is reset to 100.

[0085] 43. Car data anomaly analysis: Analyze the collected car data to see if there are any data anomalies. Data anomalies include the presence of special illegal characters, excessive single data volume, frequent missing of important data, etc. The analysis rules are as follows: the initial credit score is 100, the car credit score is s, and the last credit score is s ′ , the number of special illegal characters a, the special character impact factor γ 1 , the number of times a single data item is too large k, the impact factor of a single data item being too large γ 2 , the number of missing data s, the impact factor of missing important data γ 3 , then s=s ′ -(a×γ1 +k×γ 2 +s×γ 3 ) where γ 1 , γ 2 , γ 3 It can be adjusted according to the specific situation, such as 1.5, 1.5, 2.0 respectively. The credit score of the vehicle computer is calculated according to the above formula. If the credit score is less than 60, the output is 1 data abnormality, and then the initial credit value is reset to 100.

[0086] 5. Dynamically adjust control permissions: Each blockchain node obtains the analysis results of the reliability analysis module through the dynamic access control contract, and dynamically adjusts the vehicle computer access control permissions. The workflow is: by obtaining the analysis results of the reliability analysis module, dynamically adjust the vehicle computer permissions according to the permission control rules, and then issue the policy to the corresponding edge node, and the edge node performs vehicle computer operations according to the permission policy. Because the vehicle computer permission information recorded in the blockchain ledger in the vehicle computer digital identity contract cannot be changed, the strategy adopted is to give priority to the dynamic permission policy of the dynamic access control contract, and then execute the static permission policy recorded in the ledger. When there is a conflict between the two permission policies, the dynamic permission policy shall prevail. In case of conflict, the dynamic permission policy shall prevail. The permission control rules are as follows, and statistics are counted from the first time the device is connected to the Internet of Things:

[0087] 51. When the device connection is abnormal, the following strategy is adopted: wait for a period of time before allowing the device to reconnect. The time interval is related to the cumulative number of connection abnormalities, and the relationship is as follows: time interval t, t is in seconds, and the cumulative number is n. When n>100, it is prohibited to connect to the Internet, and you can choose to contact on-site personnel for repair or replacement.

[0088]

[0089] 52. When the device collects data abnormally, if the number of collection abnormalities is >150, the device will be added to the blacklist and will not be allowed to connect to the Internet or use the corresponding services. You can choose to contact on-site personnel for repair or replacement.

[0090] 53. When the device data is abnormal, if the number of data abnormalities is >1000, the device will be added to the blacklist and will not be allowed to connect to the Internet or use the corresponding services. You can choose to contact on-site personnel for repair or replacement.

[0091] The present invention constructs a decentralized network architecture, designs the deployment of network nodes, the selection and implementation of consensus mechanisms, the storage, query, update and synchronization of permission information, and dynamic access control algorithms. Through the decentralized architecture design, single point failures are avoided to ensure the high availability and security of the system; by storing the identity and permission information of the vehicle on the blockchain, the authenticity and non-tamperability of the data are ensured; by deploying identity and control smart contracts on the block chain, the registration, access and control of the vehicle are automated; through the reliability analysis module, the abnormal conditions of each IoT vehicle are statistically evaluated, and the vehicle permissions are dynamically adjusted.

[0092] Example 3

[0093] Figure 2 This is a schematic diagram of the structure of a computer device in Example 3 of the present invention. Figure 2 A block diagram of an exemplary computer device 12 suitable for use in implementing embodiments of the present invention is shown. Figure 2 The computer device 12 shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0094] like Figure 2 As shown, the computer device 12 is in the form of a general-purpose computing device. The components of the computer device 12 may include, but are not limited to: one or more processors or processing units 16, a system memory 28, and a bus 18 that connects various system components (including the system memory 28 and the processing unit 16).

[0095] Bus 18 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor or a local bus using any of a variety of bus architectures. By way of example, these architectures include, but are not limited to, an Industry Standard Architecture (ISA) bus, a Micro Channel Architecture (MAC) bus, an Enhanced ISA bus, a Video Electronics Standards Association (VESA) local bus, and a Peripheral Component Interconnect (PCI) bus.

[0096] The computer device 12 typically includes a variety of computer system readable media. These media can be any available media that can be accessed by the computer device 12, including volatile and non-volatile media, removable and non-removable media.

[0097] The system memory 28 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) 30 and / or cache memory 32. The computer device 12 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the storage system 34 may be used to read and write non-removable, non-volatile magnetic media ( Figure 2 Not shown, usually referred to as a "hard drive"). Although Figure 2 Not shown in the figure, a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk"), and an optical disk drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, a DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to the bus 18 via one or more data medium interfaces. The memory 28 may include at least one program product having a set (e.g., at least one) of program modules that are configured to perform the functions of the various embodiments of the present invention.

[0098] A program / utility 40 having a set (at least one) of program modules 42 may be stored, for example, in the memory 28. Such program modules 42 include, but are not limited to, an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment. The program modules 42 generally perform the functions and / or methods of the embodiments described herein.

[0099] The computer device 12 may also communicate with one or more external devices 14 (e.g., keyboard, pointing device, display 24, etc.), may also communicate with one or more devices that enable a user to interact with the computer device 12, and / or communicate with any device that enables the computer device 12 to communicate with one or more other computing devices (e.g., network card, modem, etc.). Such communication may be performed through an input / output (I / O) interface 22. In addition, the computer device 12 in this embodiment, the display 24 does not exist as an independent individual, but is embedded in the mirror surface, and when the display surface of the display 24 is not displayed, the display surface of the display 24 and the mirror surface are visually integrated. In addition, the computer device 12 may also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN) and / or public network, such as the Internet) through a network adapter 20. As shown in the figure, the network adapter 20 communicates with other modules of the computer device 12 through a bus 18. It should be understood that although not shown in the figures, other hardware and / or software modules may be used in conjunction with the computer device 12, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0100] The processing unit 16 executes various functional applications and data processing by running the programs stored in the system memory 28, such as implementing a decentralized vehicle-machine dynamic access method based on blockchain provided in an embodiment of the present invention.

[0101] Example 4

[0102] Embodiment 4 of the present invention provides a computer-readable storage medium having a computer program stored thereon. When the program is executed by a processor, a decentralized vehicle-machine dynamic access method based on blockchain is implemented as provided in all the embodiments of the invention of this application.

[0103] Any combination of one or more computer-readable media may be used. A computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination thereof. More specific examples (a non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this document, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in conjunction with an instruction execution system, device, or device.

[0104] Computer-readable signal media may include a data signal propagated in baseband or as part of a carrier wave, which carries a computer-readable program code. Such propagated data signals may take a variety of forms, including, but not limited to, electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0105] Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0106] Computer program code for performing the operations of the present invention may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0107] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A blockchain-based vehicle dynamic access system, characterized by: It includes control layer, execution layer, controlled layer and analysis layer; The control layer includes a vehicle computer identity contract, a dynamic access control contract and a reliability assessment module, which are used to realize vehicle computer registration, verification and access permission control, and issue instructions to the execution layer; the execution layer executes vehicle computer networking, data collection and control functions according to the instructions issued by the control layer; the controlled layer is a hardware vehicle computer connected to the entire network, and uploads the vehicle computer data to the analysis layer; the analysis layer includes a gateway and a big data platform, which can perform status analysis based on the status data uploaded by the vehicle computer, and send the vehicle computer status analysis to the reliability assessment module of the control layer.

2. According to the blockchain-based vehicle-machine dynamic access system of claim 1, it is characterized by: The vehicle computer identity contract is a smart contract based on blockchain to realize the registration, identity authentication and permission control functions of the vehicle computer; among them, vehicle computer registration is that the edge node accesses the blockchain network through the local blockchain node to realize the call of the vehicle computer identity contract, and registers the digital identity information of the vehicle computer and the corresponding permissions in the blockchain; vehicle computer identity authentication is that the edge node accesses the blockchain network through the local blockchain node to realize the call of the vehicle computer identity authentication contract. After the verification is passed, the initial permissions are assigned to the vehicle, and the permission information is stored in the smart contract in encrypted form, and the static permissions are sent to the vehicle end.

3. According to the blockchain-based vehicle dynamic access system of claim 1, it is characterized by: The dynamic access control contract dynamically adjusts the permission control strategy of the vehicle computer based on the statistical results of the reliability evaluation module; the adjustment results are transmitted to the relevant nodes through encrypted communication and the information in the smart contract is updated.

4. According to the blockchain-based vehicle dynamic access system of claim 1, it is characterized by: The reliability assessment module analyzes the vehicle computer's activity log, comprehensively considers the vehicle status, network environment and user needs, realizes vehicle computer behavior analysis, and pushes the analysis results to the dynamic access control contract.

5. A blockchain-based vehicle-machine dynamic access method, characterized in that: The following steps are involved: A. Initialization operation A1. Network deployment: Deploy decentralized network nodes in vehicles to form a widely covered vehicle-machine access control network; A2. Certificate distribution: Each vehicle that needs to access the blockchain network has a built-in digital certificate information encrypted by a pre-paid secret key when it leaves the factory; B. Vehicle registration: B1. When the vehicle computer is connected to the network, it accesses the local blockchain node through the edge node and initiates a vehicle computer identity information registration request. This request contains the digital identity information of the vehicle computer and the certificate assigned at the factory; B2. After receiving the registration request from the edge node, the corresponding blockchain node broadcasts the request to other blockchain nodes in the blockchain network. Each blockchain node calls the digital identity contract and elects the master node to verify permissions and generate identity information blocks through a consensus mechanism. B3. After the master node is elected, the master node's vehicle digital identity contract first verifies whether the vehicle's digital identity information is legal, and then verifies whether it has the authority to access the Internet of Things. If it does not have the authority, the registration will be directly rejected; if it has the Internet access authority, the vehicle's authority to use the Internet of Things service will be further verified. After verifying the authority, the master node generates a data block of the vehicle's identity and corresponding authority within a period of time; B4. The master node broadcasts the generated identity and corresponding authority data blocks to other blockchain nodes; B5. Other blockchain nodes call the vehicle digital identity contract to perform format verification and permission checks on the data blocks generated by the master node, and automatically broadcast the inspection results; B6. Each node will receive the inspection results broadcast by other nodes. After each node counts the number of nodes that recognize this data block and reaches a certain proportion, the identity and corresponding authority blocks of this batch of vehicle computers will be saved in the local blockchain account book; C. Vehicle verification and authorization: C1. When the vehicle computer makes a connection request after registration, it needs to access the local blockchain node through the edge node. The blockchain node will request to synchronize with other blockchain nodes in the blockchain network. C2. Each node calls the vehicle computer digital identity contract to verify the legitimacy of the vehicle computer's digital identity information in the request; after verifying the legitimacy of the vehicle computer's identity, each node calls the dynamic access control contract to check whether the dynamic access control policy corresponding to the vehicle computer exists in the dynamic access control contract. If there is a dynamic policy, it is returned to the local node that initiated the request. After the dynamic access control contract of the local node verifies that the policies returned by a certain proportion of nodes are consistent, the local blockchain node sends the dynamic policy to the edge node. The edge node preferentially executes the dynamic access control policy. If a certain proportion of nodes feedback that there is no dynamic policy, execute step C3; C3. After the local node calls the dynamic access control contract without returning any result, it continues to call the digital identity contract to read the vehicle computer identity and permission data information in the blockchain ledger, and then returns the verification token and vehicle computer permission information; C4, the edge node holds a token and communicates with the IoT gateway. After receiving the request, the IoT gateway verifies the token. After passing the verification, it is allowed to store the collected vehicle data in the IoT big data platform and use the corresponding IoT services. D. Reliability analysis module: It reads the vehicle log data of the IoT big data platform to analyze the vehicle behavior; E. Dynamically adjust control permissions: Each blockchain node obtains the analysis results of the reliability analysis module through the dynamic access control contract, and dynamically adjusts the vehicle computer access control permissions. Specifically: by obtaining the analysis results of the reliability analysis module, according to the permission control rules, dynamically adjust the vehicle computer permissions, and then issue the policy to the corresponding edge node, and the edge node performs vehicle computer operations according to the permission policy; give priority to executing the dynamic permission policy of the dynamic access control contract, and then, execute the static permission policy recorded in the ledger. When there is a conflict between the two permission policies, the dynamic permission policy shall prevail.

6. According to the blockchain-based vehicle-machine dynamic access method of claim 5, it is characterized by: Step A1: Each node forms a blockchain network through the p2p protocol, maintains the network status and data consistency through the consensus mechanism, and each node is equal and will run the vehicle identity contract and dynamic access control contract.

7. According to claim 5, a blockchain-based vehicle-machine dynamic access method is characterized in that: Step D: The behavior analysis of the vehicle computer mainly includes the abnormal analysis of vehicle computer connection, abnormal analysis of vehicle computer collection and abnormal analysis of vehicle computer data; D1. Analysis of abnormal vehicle-machine connection: Analyze whether the vehicle-machine has abnormal or malicious connection behavior. If the vehicle-machine is identified to have frequent connection attempts within a period of time, it is determined that the vehicle-machine has abnormal connection behavior; D2. Vehicle collection anomaly analysis: Analyze whether there are any abnormalities in vehicle collection. Collection anomaly means that the vehicle collection frequency exceeds the threshold. The analysis rules for vehicle collection anomaly are: initial credit score is 100, vehicle collection frequency f, frequency threshold k, vehicle credit score s, and last credit score s ′ , the cumulative number of abnormalities n, then The threshold k can be set to 5 times / s, and the vehicle computer credit score is calculated according to the above formula. If the credit score is less than 60, the output is 1 collection abnormality, and then the initial credit value is reset to 100; D3. Car data anomaly analysis: Analyze whether the collected car data has data anomalies. Data anomalies include the presence of special illegal characters, excessive single data volume, frequent missing of important data, etc. The analysis rules are as follows: the initial credit score is 100, the car credit score is s, and the last credit score is s ′ , there are a number of special illegal characters, special character impact factor γ1, number of single data items too large k, single data item too large impact factor γ2, number of missing data items s, missing important data impact factor γ3, then s = s ′ -(a×γ1+k×γ2+s×γ3) γ1, γ2, and γ3 can be adjusted according to the specific situation, such as 1.5, 1.5, and 2.0 respectively. The credit score of the vehicle computer is calculated according to the above formula. If the credit score is less than 60, the output is 1 data abnormality, and then the initial credit value is reset to 100.

8. According to the blockchain-based vehicle-machine dynamic access method of claim 5, it is characterized by: In step E, the limit control rules are as follows, starting from the first time the device is connected to the Internet of Things: E1. When the device connection is abnormal, the following strategy is adopted: wait for a period of time before allowing the device to reconnect; the time interval is related to the cumulative number of connection abnormalities, and the relationship is as follows: time interval t, t is in seconds, and the cumulative number is n. When n>100, it is prohibited from connecting to the Internet, and you can choose to contact on-site personnel for repair or replacement; E2. When the device collects data abnormally, if the number of abnormal collections is >150, the device will be added to the blacklist and will not be allowed to connect to the Internet or use the corresponding services. You can choose to contact on-site personnel for repair or replacement. E3. When the device data is abnormal, if the number of data abnormalities is >1000, the device will be added to the blacklist and will not be allowed to connect to the Internet or use the corresponding services. You can choose to contact on-site personnel for repair or replacement.

9. A computer device, characterized in that: It includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, a blockchain-based vehicle-machine dynamic access method as described in claims 5-8 is implemented.

10. A computer-readable storage medium, characterized in that: A computer program is stored thereon, and when the program is executed by a processor, a dynamic vehicle-machine access method based on blockchain as described in claims 5-8 is implemented.

Images