Vehicle cloud access management method and device

Abstract

The embodiment of the invention relates to a vehicle cloud access management method and device, and the method comprises the steps: creating a firewall / gateway configuration record for a firewall / vehicle cloud gateway, and recording the maximum bandwidth allocated by each business end for a network connection vehicle as the bandwidth of a service single vehicle; the firewall / gateway configuration record is refreshed based on the real-time state of the firewall, and the gateway configuration record is refreshed based on the real-time state of the vehicle cloud gateway; when partition management is carried out according to the electronic fence, creating a district configuration record for each district, and refreshing the district configuration records by querying an electronic fence management system; when a bicycle cloud access management request is received, whether partition management is carried out according to an electronic fence mode is confirmed, and if not, processing is carried out according to the bicycle cloud access management request, the corresponding gateway configuration record and the service bicycle bandwidth; and if yes, processing according to the bicycle cloud access management request, the corresponding gateway / district configuration record and the service bicycle bandwidth. According to the invention, the access control capability of the vehicle cloud gateway can be improved, and the network congestion risk is reduced.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a vehicle-to-cloud access management method and device. Background Art

[0002] As a dynamic business system, the Internet of Vehicles has many differences from the static business system of the traditional Internet of Things. One of the obvious differences is that the Internet of Vehicles business system will encounter the problem of a sharp increase in access volume during peak hours / hotspot sections, such as peak travel hours during commuting / holidays, and hot driving sections in urban main roads / hotspot scenic spots. The total number of access devices in traditional static business systems is fixed, and the data transmission period and total transmission volume can be planned and restricted. Therefore, in general, after adopting the conventional load balancing strategy, no further management will be performed on the access to the business gateway layer. However, when this traditional processing method is used in the Internet of Vehicles business system, it is easy to cause serious network congestion problems on the back-end business server when the access volume surges during peak hours / hotspot sections. Summary of the invention

[0003] The purpose of the present invention is to provide a vehicle-cloud access management method, device, electronic device and computer-readable storage medium in response to the defects of the prior art. The present invention creates a corresponding first firewall / gateway configuration record for the firewall / vehicle-cloud gateway of the Internet of Vehicles; and configures the corresponding first service single-vehicle bandwidth for each business service end; and refreshes all first firewall / gateway configuration records based on the real-time status of the firewall, and refreshes all first gateway configuration records based on the real-time resource utilization status of the vehicle-cloud gateway; and when the overall management scope of the Internet of Vehicles is partitioned by electronic fences, creates a first area configuration record for each fence area and refreshes all first area configuration records by querying the electronic fence management system of the Internet of Vehicles; and when any vehicle-cloud gateway receives a vehicle-cloud access request (connection request, service application request) from any connected vehicle, it confirms whether the overall management scope of the Internet of Vehicles is partitioned by electronic fences. If there is no electronic fence, it will be refreshed. The electronic fence performs the first vehicle-cloud access management according to the vehicle-cloud access request and the corresponding first gateway configuration record and the first service single-vehicle bandwidth, obtains the corresponding first management feedback and sends it back to the current vehicle-cloud gateway. If it is confirmed that there is an electronic fence, the second vehicle-cloud access management is performed according to the vehicle-cloud access request and the corresponding first gateway configuration record, the first area configuration record and the first service single-vehicle bandwidth, obtains the corresponding second management feedback and sends it back to the current vehicle-cloud gateway; the vehicle-cloud gateway can process the vehicle-cloud access request according to the management status given in the management feedback (reject connection, allow connection, reject service, allow service), and can also disconnect one or more connected vehicles that are currently in a connected state according to the vehicle disconnection sequence given in the management feedback when the management status is reject connection. The present invention can dynamically adjust the total number of accessible car-cloud gateways when the number of network accesses, network access traffic, and the resource (CPU, memory) usage status of the car-cloud gateway change, and can select the gateway access operation (reject connection, allow connection, reject service, allow service) based on real-time adjustment parameters when the car-cloud gateway receives a car-cloud access request from any connected car, and can actively recommend shutting down low-traffic connections on the car-cloud gateway when the number of accesses exceeds the standard. Through the present invention, further management can be performed on the access to the car-cloud gateway layer, and the access control capability of the car-cloud gateway can be improved when the access volume surges during peak hours / hotspot sections, thereby achieving the purpose of reducing the access pressure on the service service end and reducing the risk of network congestion.

[0004] To achieve the above-mentioned purpose, a first aspect of an embodiment of the present invention provides a vehicle-to-cloud access management method, the method comprising:

[0005] The first management end creates access management configuration information for the firewall of the Internet of Vehicles and records it as the corresponding first firewall configuration record; and counts the total number of vehicle-cloud gateways of the Internet of Vehicles to obtain the corresponding total number of first gateways N; and creates access management configuration information for each vehicle-cloud gateway based on the first firewall configuration record and the total number of the first gateways N and records it as the corresponding first gateway configuration record; and records the maximum service access bandwidth allocated by each service service end of the Internet of Vehicles to any connected vehicle as the corresponding first service single vehicle bandwidth; and regularly refreshes the first firewall configuration record and all the first gateway configuration records based on the real-time access status of the firewall; and regularly refreshes all the first gateway configuration records based on the real-time resource utilization status of all the vehicle-cloud gateways;

[0006] When the overall management scope of the Internet of Vehicles is partitioned by electronic fences, the first management terminal records the high-precision map of the overall management scope of the Internet of Vehicles as the corresponding first map; and records the circular area covered by each electronic fence on the first map as the corresponding first fence area; and counts the total number of the first fence areas to obtain the corresponding first area total number S; and creates access management configuration information for each of the first fence areas based on the first area total number S and records it as the corresponding first area configuration record; and regularly refreshes all the first area configuration records by querying the electronic fence management system of the Internet of Vehicles;

[0007] When the first management end receives the first vehicle-cloud access management request sent by any of the vehicle-cloud gateways, it confirms whether the overall management scope of the vehicle network is partitioned according to the electronic fence; if it is confirmed to be no, the first vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record and the first service single-vehicle bandwidth, and the corresponding first management feedback is sent back to the current vehicle-cloud gateway; if it is confirmed to be yes, the second vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record, the first area configuration record and the first service single-vehicle bandwidth, and the corresponding second management feedback is sent back to the current vehicle-cloud gateway.

[0008] Preferably, the Internet of Vehicles comprises at least a plurality of the networked vehicles, a mobile communication network, the firewall, a switching network, a plurality of the vehicle-cloud gateways and a plurality of business service terminals; the mobile communication network is connected to each of the networked vehicles and the firewall respectively; the switching network is connected to the firewall and each of the vehicle-cloud gateways respectively; each of the vehicle-cloud gateways is connected to each of the business service terminals; the business service terminal is a service / microservice interface, server, system or platform;

[0009] The firewall provides multiple data query interfaces, two of which are respectively a first bandwidth usage query interface and a first access total query interface; each of the vehicle-to-cloud gateways provides multiple data query interfaces, three of which are respectively a first resource usage query interface, a second access total query interface, and a first traffic distribution query interface;

[0010] The first bandwidth usage query interface is used to calculate the ratio of the real-time bandwidth usage of the current firewall to the rated total bandwidth to obtain the corresponding first bandwidth usage and return it when the current interface is called; the first access total number query interface is used to return the real-time total number of connected vehicles accessed by the current firewall as the corresponding first real-time total number of accesses when the current interface is called;

[0011] The first resource utilization query interface is used to return the CPU utilization and memory utilization of the current vehicle-to-cloud gateway as the corresponding first real-time CPU utilization and first real-time memory utilization when the current interface is called; the second access total query interface is used to return the real-time total number of connected vehicles connected to the current vehicle-to-cloud gateway as the corresponding second real-time total number of accesses when the current interface is called; the first traffic distribution query interface is used to collect statistics on the traffic distribution information of all connected vehicles connected to the current vehicle-to-cloud gateway when the current interface is called to obtain the corresponding first traffic distribution table and return it; the first traffic distribution table includes multiple first traffic distribution records; the first traffic distribution record corresponds to the last connected vehicle connected to the current vehicle-to-cloud gateway; the first traffic distribution record includes a first connected vehicle identifier and a first average traffic; the first connected vehicle identifier is the unique identifier of the current connected vehicle; the first average traffic is the average traffic of the current connected vehicle in the most recent first time period; the first time period is a preset time length;

[0012] When the overall management scope of the Internet of Vehicles is partitioned by electronic fences, at least one of all the business service terminals of the Internet of Vehicles is the electronic fence management system;

[0013] The electronic fence management system provides multiple business query interfaces, one of which is a full-area access status query interface;

[0014] The full-area access status query interface is used to count the total number of real-time connected vehicles accessing all the first fence areas when the current interface is called to obtain the corresponding full-area access status feedback table and return it; the full-area access status feedback table includes multiple first area feedback records; the first area feedback records correspond to the first fence areas one by one; the first area feedback records include the first feedback area identifier and the total number of real-time accesses in the first area; the first feedback area identifier is the unique identifier of the current fence area, and the total number of real-time accesses in the first area is the total number of real-time connected vehicles accessing the current fence area.

[0015] Preferably, the first firewall configuration record includes a first total bandwidth B, a first ratio threshold z, a first access threshold M, and a second access threshold C; wherein the first total bandwidth B is the rated total bandwidth of the current firewall and is a fixed value; the first ratio threshold z is a fixed ratio threshold, 0<z<1; the first access threshold M and the second access threshold C are two adjustable integer values, 0<C≤M, and the initially set first access threshold M and the second access threshold C satisfy C=f int (M×z), f in () is the floor rounding function;

[0016] The first gateway configuration record includes a first gateway identifier, a first CPU utilization, a first memory utilization, and a first weight parameter w i and the third access threshold c i ; The first gateway identifier is the unique device identifier of the current car-to-cloud gateway and is a fixed value; the first CPU utilization and the first memory utilization are two percentage values ​​that can be adjusted dynamically, 0%≤first CPU utilization≤100%, 0%≤first CPU utilization≤100%, the first CPU utilization and the first memory utilization are initially set to 50% by default; the first weight parameter w i is a comprehensive weight parameter set based on the first CPU utilization and the first memory utilization, 0≤w i ≤2, the first weight parameter w is initially set i is 1; the third access threshold c i is an adjustable integer value, 1≤gateway index i≤N; the third access threshold c of each first gateway configuration record i The corresponding relationship with the second access threshold C of the first firewall configuration record is:

[0017] All the first fence areas are circular areas with a radius fixed to a preset area radius R; the first area configuration record includes a first area identifier, a first center point coordinate, a first maximum access threshold and a first real-time access volume d j , 1≤area index j≤S; the first area identifier is the unique identifier of the current fence area, which is a fixed value; the first center point coordinate is the center point coordinate of the current fence area, which is a fixed coordinate; the first maximum access threshold is the maximum vehicle network number threshold of the current fence area, which is a fixed integer value; the first real-time access quantity d j The number of trial connected vehicles in the current fence area, which is an adjustable integer value;

[0018] The first vehicle-cloud access management request includes a first access gateway identifier, a first vehicle identifier, a first vehicle coordinate, a first access request type and a first application service identifier; the first access gateway identifier is the unique identifier of the current vehicle-cloud gateway; the first vehicle identifier is the unique identifier of the current connected vehicle that sends an access or service application request to the current vehicle-cloud gateway; the first vehicle coordinates are the real-time coordinates of the current connected vehicle; the first access request type includes a connection request and a service application request; when the first access request type is a connection request, the first application service identifier is empty; when the first access request type is a service application request, the first application service identifier is the corresponding business service identifier; the business service identifier corresponds to one of the business service terminals.

[0019] Preferably, the periodically refreshing the first firewall configuration record and all the first gateway configuration records based on the real-time access status of the firewall specifically includes:

[0020] Step 41, regularly calling the first bandwidth usage query interface and the first access total number query interface of the firewall according to a preset first time frequency to obtain the corresponding first bandwidth usage and the first real-time access total number;

[0021] Step 42: Calculate the first single-vehicle bandwidth corresponding to the first total bandwidth B, the first bandwidth usage rate and the first total number of real-time accesses recorded in the first firewall configuration record = B × first bandwidth usage rate / first total number of real-time accesses; and calculate the first maximum total number corresponding to the first single-vehicle bandwidth and the first total bandwidth B = f int (B / first bicycle bandwidth); and reset the first access threshold M recorded in the first firewall configuration to the corresponding first maximum total;

[0022] Step 43, identifying whether the first real-time access total exceeds the second access threshold C of the first firewall configuration record; if so, resetting the second access threshold C of the first firewall configuration record to the corresponding first maximum total; if not, resetting the second access threshold C of the first firewall configuration record to C=f int (first maximum total × z);

[0023] Step 44: according to the third access threshold c i The corresponding relationship between the second access threshold C and the third access threshold C recorded by each first gateway configuration is based on the latest second access threshold C i Perform a reset.

[0024] Preferably, the periodically refreshing all the first gateway configuration records based on the real-time resource utilization status of all the vehicle-to-cloud gateways specifically includes:

[0025] Step 51: regularly calling the first resource usage query interface of each of the vehicle-to-cloud gateways at a preset second time frequency to obtain the corresponding first real-time CPU utilization and the first real-time memory utilization;

[0026] Step 52, perform a round of traversal on all the first gateway configuration records; and in this round of traversal, use the first gateway configuration record currently traversed as the corresponding current gateway configuration record; and use the first real-time CPU utilization and the first real-time memory utilization of the vehicle-to-cloud gateway corresponding to the current gateway configuration record as the corresponding CPU utilization u CPU and memory utilization u RAM ; and based on the CPU utilization u CPU and the memory utilization u RAM Calculate the corresponding latest weight w now ; and based on the CPU utilization u CPU , the memory utilization u RAM and the latest weight w now The first CPU utilization, the first memory utilization and the first weight parameter w corresponding to the current gateway configuration record i Perform a reset;

[0027] Among them, the latest weight w now The calculation method is:

[0028] w now =max(0,min((w CPU +w RAM ),2)),

[0029]

[0030]

[0031] w CPU 、w RAM For the corresponding CPU weight sub-item and memory weight sub-item;

[0032] Step 53: After the current round of traversal of all the first gateway configuration records is completed, the third access threshold C of each first gateway configuration record is set based on the second access threshold C of the first firewall configuration record. i Perform a reset.

[0033] Preferably, the periodically refreshing all the first area configuration records by querying the electronic fence management system of the Internet of Vehicles specifically includes:

[0034] The full-area access status query interface of the electronic fence management system is periodically called at a preset third time frequency to obtain the latest full-area access status feedback table; and all the first-area feedback records of the full-area access status feedback table are traversed in one round; and in this round of traversal, the first-area feedback record currently traversed is used as the corresponding current feedback record; and the first feedback area identifier and the total number of real-time accesses of the first area of ​​the current feedback record are used as the corresponding current area identifier and the total number of current accesses; and the first area configuration record that matches the first area identifier with the current area identifier is used as the corresponding current matching record; and the first real-time access quantity d of the current matching record is used as the corresponding current matching record. j Reset to the corresponding current total number of accesses.

[0035] Preferably, performing first vehicle-to-cloud access management according to the first vehicle-to-cloud access management request and the corresponding first gateway configuration record and the first service vehicle bandwidth to obtain corresponding first management feedback and send it back to the current vehicle-to-cloud gateway specifically includes:

[0036] Step 71: extracting the corresponding first access gateway identifier, the first vehicle identifier, the first access request type and the first application service identifier from the first vehicle-to-cloud access management request;

[0037] Step 72: taking the first gateway configuration record that matches the first gateway identifier and the first access gateway identifier as the corresponding current gateway configuration record; and setting the third access threshold c of the current gateway configuration record to ias the corresponding current access threshold; and use the car-to-cloud gateway corresponding to the current gateway configuration record as the corresponding current gateway; and call the second total access query interface and the first traffic distribution query interface of the current gateway to obtain the corresponding second real-time total access and the first traffic distribution table;

[0038] Step 73, identifying whether the second real-time access total number exceeds the current access threshold; if so, proceeding to step 74; if not, proceeding to step 75;

[0039] Step 74, setting the corresponding first management state to connection rejection, and setting the corresponding first explanation text to the preset connection excess explanation text; and recording the first flow distribution record in the first flow distribution table where the first average flow is lower than the preset first flow threshold as the corresponding first record; and recording the first access vehicle identifier of each first record as a vehicle identifier for suggesting disconnection as the first disconnected vehicle identifier, and sorting all the obtained first disconnected vehicle identifiers in descending order according to the corresponding first average flow to form a corresponding first disconnected vehicle sequence; and the first management state, the first explanation text and the first disconnected vehicle sequence form the corresponding first management feedback; and go to step 77;

[0040] The first management state includes denying connection, allowing connection, denying service, and allowing service;

[0041] Step 75, identifying the first access request type; if the first access request type is a connection request, setting the corresponding first management state to allow connection, and using the first management state as the corresponding first management feedback, and going to step 77; if the first access request type is a service application request, going to step 76;

[0042] Step 76, taking the first average flow of the first flow distribution record in which the first access vehicle identifier in the first flow distribution table matches the first vehicle identifier as the current vehicle flow; and performing corresponding flow-bandwidth conversion based on the current vehicle flow to obtain the corresponding current vehicle bandwidth; and taking the first service vehicle bandwidth allocated by the business service end corresponding to the first application service identifier to any connected vehicle as the corresponding current service vehicle bandwidth; and recording the sum of the current vehicle bandwidth and the current service vehicle bandwidth as the corresponding current bandwidth sum; and identifying whether the current bandwidth sum exceeds the preset vehicle maximum bandwidth threshold; if exceeded, setting the corresponding first management state to deny service, and setting the corresponding first description text to the preset vehicle bandwidth excess description text, and the first management state and the first description text constitute the corresponding first management feedback; if not exceeded, setting the corresponding first management state to allow service, and taking the first management state as the corresponding first management feedback;

[0043] Step 77: send the first management feedback obtained this time back to the current vehicle cloud gateway.

[0044] Preferably, performing second vehicle-to-cloud access management according to the first vehicle-to-cloud access management request and the corresponding first gateway configuration record, the first area configuration record, and the first service single vehicle bandwidth to obtain corresponding second management feedback and send it back to the current vehicle-to-cloud gateway specifically includes:

[0045] Step 81: extracting the corresponding first access gateway identifier, the first vehicle identifier, the first vehicle coordinates, the first access request type and the first application service identifier from the first vehicle-to-cloud access management request;

[0046] Step 82: taking the first gateway configuration record that matches the first gateway identifier with the first access gateway identifier as the corresponding current gateway configuration record; and setting the third access threshold c of the current gateway configuration record to i as the corresponding current access threshold; and use the car-to-cloud gateway corresponding to the current gateway configuration record as the corresponding current gateway; and call the second total access query interface and the first traffic distribution query interface of the current gateway to obtain the corresponding second real-time total access and the first traffic distribution table;

[0047] Step 83, identifying whether the second real-time access total number exceeds the current access threshold; if it exceeds, go to step 84; if not, go to step 85;

[0048] Step 84, setting the corresponding second management state to connection rejection, and setting the corresponding second explanation text to the preset connection excess explanation text; and recording the first traffic distribution record in the first traffic distribution table where the first average traffic is lower than the preset first traffic threshold as the corresponding second record; and using the first access vehicle identifier of each second record as a vehicle identifier that is recommended to disconnect the connection and recording it as the second disconnected vehicle identifier, and sorting all the obtained second disconnected vehicle identifiers in descending order according to the corresponding first average traffic to form a corresponding second disconnected vehicle sequence; and the second management state, the second explanation text and the second disconnected vehicle sequence form the corresponding second management feedback; and go to step 89;

[0049] The second management state includes denying connection, allowing connection, denying service, and allowing service;

[0050] Step 85, identifying the first access request type; if the first access request type is a connection request, setting the corresponding second management state to allow connection, and using the second management state as the corresponding second management feedback, and going to step 89; if the first access request type is a service application request, going to step 86;

[0051] Step 86, take the first average flow of the first flow distribution record that matches the first access vehicle identifier with the first vehicle identifier in the first flow distribution table as the current vehicle flow; and perform corresponding flow-bandwidth conversion based on the current vehicle flow to obtain the corresponding current vehicle bandwidth; and take the first service vehicle bandwidth allocated by the business service end corresponding to the first application service identifier to any connected vehicle as the corresponding current service vehicle bandwidth; and record the sum of the current vehicle bandwidth and the current service vehicle bandwidth as the corresponding current bandwidth sum; and identify whether the current bandwidth sum exceeds the preset vehicle maximum bandwidth threshold ; If exceeded, the corresponding second management state is set to denial of service, and the corresponding second description text is set to the preset bicycle bandwidth excess description text, and the second management state and the second description text constitute the corresponding second management feedback, and go to step 89; If not exceeded, the first area configuration record whose straight-line distance between the first center point coordinates and the first vehicle coordinates is less than or equal to the area radius R is recorded as the corresponding matching area record, and the total number of the matching area records is identified. If the total number of the matching area records is 1, go to step 87, and if the total number of the matching area records is greater than 1, go to step 88;

[0052] Step 87: record the first maximum access threshold and the first real-time access quantity d of the unique matching area. jas the corresponding current access threshold and current access volume; and identifying whether the current access volume exceeds the current access threshold; if it exceeds, setting the corresponding second management state to deny service, and setting the corresponding second description text to the preset description text of excess networked vehicles in the associated area, and the second management state and the second description text constitute the corresponding second management feedback, and go to step 89; if it does not exceed, setting the corresponding second management state to allow service, and setting the corresponding second description text to the first area identifier of the current matching area record, and the second management state and the second description text constitute the corresponding second management feedback, and go to step 89;

[0053] Step 88: Count the total number of the matching area records to obtain the total number of corresponding areas G; and record the first area identifier of each matching area record as the corresponding matching area identifier id q , 1≤matching area index q≤G; and initialize the adaptation area identifier to be empty; and sort the G matching area records in descending order according to the first maximum access threshold to form a corresponding first record sequence; and traverse each matching area record in the sequence one by one in the traversal order from the first to the last matching area record in the first record sequence; and in this round of traversal, the matching area record currently traversed is used as the current record; and the first maximum access threshold and the first real-time access amount d of the current record are added. j as the corresponding current access threshold and current access volume; and identify whether the current access volume exceeds the current access threshold, if not, immediately terminate this round of traversal and set the adaptation area identifier to the first area identifier corresponding to the current record, if exceeded, turn to the next matching area record and continue traversing until the traversal of the last matching area record is completed; and when this round of traversal is terminated or ended, identify whether the adaptation area identifier is empty; if the adaptation area identifier is empty, set the corresponding second management state to deny service, and set the corresponding second description text to the description text of the excess number of networked vehicles in the associated area, and the second management state and the second description text constitute the corresponding second management feedback; if the adaptation area identifier is not empty, set the corresponding second management state to allow service, and set the corresponding second description text to the corresponding adaptation area identifier, and the second management state and the second description text constitute the corresponding second management feedback;

[0054] Step 89: Send the second management feedback obtained this time back to the current vehicle cloud gateway.

[0055] A second aspect of an embodiment of the present invention provides a device for implementing the vehicle-cloud access management method described in the first aspect, the device comprising: a general configuration setting and updating module, an electronic fence configuration setting and updating module, and a vehicle-cloud access management module;

[0056] The general configuration setting and updating module is used to create access management configuration information for the firewall of the Internet of Vehicles and record it as the corresponding first firewall configuration record; and count the total number of vehicle-cloud gateways of the Internet of Vehicles to obtain the corresponding total number of first gateways N; and create access management configuration information for each vehicle-cloud gateway based on the first firewall configuration record and the total number of the first gateways N and record it as the corresponding first gateway configuration record; and record the maximum service access bandwidth allocated by each service service end of the Internet of Vehicles to any connected vehicle as the corresponding first service single vehicle bandwidth; and regularly refresh the first firewall configuration record and all the first gateway configuration records based on the real-time access status of the firewall; and regularly refresh all the first gateway configuration records based on the real-time resource utilization status of all the vehicle-cloud gateways;

[0057] The electronic fence configuration setting and updating module is used for recording the high-precision map of the overall management scope of the Internet of Vehicles as the corresponding first map when the overall management scope of the Internet of Vehicles is partitioned according to the electronic fence; and recording the circular area covered by each of the electronic fences on the first map as the corresponding first fence area; and counting the total number of the first fence areas to obtain the corresponding first area total number S; and creating access management configuration information for each of the first fence areas based on the first area total number S and recording it as the corresponding first area configuration record; and regularly refreshing all the first area configuration records by querying the electronic fence management system of the Internet of Vehicles;

[0058] The vehicle-cloud access management module is used to confirm whether the overall management scope of the vehicle network is partitioned according to the electronic fence when receiving the first vehicle-cloud access management request sent by any of the vehicle-cloud gateways; if it is confirmed to be negative, the first vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record and the first service single-vehicle bandwidth, and the corresponding first management feedback is sent back to the current vehicle-cloud gateway; if it is confirmed to be positive, the second vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record, the first area configuration record and the first service single-vehicle bandwidth, and the corresponding second management feedback is sent back to the current vehicle-cloud gateway.

[0059] A third aspect of an embodiment of the present invention provides an electronic device, including: a memory, a processor, and a transceiver;

[0060] The processor is used to be coupled to the memory, read and execute instructions in the memory, so as to implement the method steps described in the first aspect above;

[0061] The transceiver is coupled to the processor, and the processor controls the transceiver to send and receive messages.

[0062] A fourth aspect of an embodiment of the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions. When the computer instructions are executed by a computer, the computer executes the instructions of the method described in the first aspect above.

[0063] The embodiments of the present invention provide a vehicle-cloud access management method, device, electronic device and computer-readable storage medium. It can be seen from the above invention content that the embodiments of the present invention create a corresponding first firewall / gateway configuration record for the firewall / vehicle-cloud gateway of the Internet of Vehicles; and configure the corresponding first service single-vehicle bandwidth for each business service end; and refresh all first firewall / gateway configuration records based on the real-time status of the firewall, and refresh all first gateway configuration records based on the real-time resource utilization status of the vehicle-cloud gateway; and when the overall management scope of the Internet of Vehicles is partitioned by electronic fences, create a first area configuration record for each fence area and refresh all first area configuration records by querying the electronic fence management system of the Internet of Vehicles; and when any vehicle-cloud gateway receives a vehicle-cloud access request (connection request, service application request) from any connected vehicle, confirm whether the overall management scope of the Internet of Vehicles is partitioned by electronic fences. If there is no electronic fence, the first vehicle-cloud access management is performed according to the current vehicle-cloud access request and the corresponding first gateway configuration record and the first service single vehicle bandwidth, and the corresponding first management feedback is sent back to the current vehicle-cloud gateway. If it is confirmed that there is an electronic fence, the second vehicle-cloud access management is performed according to the current vehicle-cloud access request and the corresponding first gateway configuration record, the first area configuration record and the first service single vehicle bandwidth, and the corresponding second management feedback is sent back to the current vehicle-cloud gateway; the vehicle-cloud gateway can process the current vehicle-cloud access request according to the management status given in the management feedback (reject connection, allow connection, reject service, allow service), and can also disconnect one or more connected vehicles that are currently in a connected state according to the vehicle disconnection sequence given in the management feedback when the management status is reject connection. The embodiment of the present invention can dynamically adjust the total number of accessible vehicle-cloud gateways when the number of network accesses, network access traffic, and the resource (CPU, memory) usage status of the vehicle-cloud gateway change, and can select the gateway access operation (reject connection, allow connection, reject service, allow service) based on real-time allocation parameters when the vehicle-cloud gateway receives a vehicle-cloud access request from any connected vehicle, and can proactively recommend shutting down low-traffic connections on the vehicle-cloud gateway when the number of accesses exceeds the limit. Through the embodiment of the present invention, further management can be performed on the access to the vehicle-cloud gateway layer, and the access control capability of the vehicle-cloud gateway is improved when the access volume surges during peak hours / hotspot sections, thereby achieving the purpose of reducing the access pressure on the service service end and reducing the risk of network congestion. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] Figure 1 A schematic diagram of a vehicle-to-cloud access management method provided in Embodiment 1 of the present invention;

[0065] Figure 2 A schematic diagram of the general network structure of the Internet of Vehicles and vehicle-to-cloud access management objects provided in the first embodiment of the present invention;

[0066] Figure 3 A module structure diagram of a vehicle-to-cloud access management device provided in Embodiment 2 of the present invention;

[0067] Figure 4 A schematic diagram of the structure of an electronic device provided in Embodiment 3 of the present invention. DETAILED DESCRIPTION

[0068] In order to make the purpose, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0069] A vehicle-to-cloud access management method is provided in a first embodiment of the present invention, such as Figure 1 A schematic diagram of a vehicle-to-cloud access management method provided in Embodiment 1 of the present invention includes the following main steps:

[0070] Step 1, the first management end creates access management configuration information for the firewall of the Internet of Vehicles and records it as the corresponding first firewall configuration record; and counts the total number of vehicle-cloud gateways of the Internet of Vehicles to obtain the corresponding total number of first gateways N; and based on the first firewall configuration record and the total number of first gateways N, creates access management configuration information for each vehicle-cloud gateway and records it as the corresponding first gateway configuration record; and records the maximum business access bandwidth allocated by each business service end of the Internet of Vehicles to any connected vehicle as the corresponding first service single vehicle bandwidth; and regularly refreshes the first firewall configuration record and all first gateway configuration records based on the real-time access status of the firewall; and regularly refreshes all first gateway configuration records based on the real-time resource utilization status of all vehicle-cloud gateways.

[0071] Here, the first management end of the embodiment of the present invention is a logical server end, which can be specifically a built-in service module on each vehicle cloud gateway, or it can be an independent module, device, setting, terminal, server, server, system or platform that is respectively connected to the firewall and all vehicle cloud gateways, and can be flexibly customized according to actual application requirements.

[0072] like Figure 2As shown in the schematic diagram of the vehicle network structure and vehicle-to-cloud access management object provided in the first embodiment of the present invention, the vehicle network of the embodiment of the present invention includes at least multiple networked vehicles, mobile communication networks, firewalls, switching networks, multiple vehicle-to-cloud gateways and multiple business service terminals; the mobile communication network is connected to each networked vehicle and firewall respectively; the switching network is connected to the firewall and each vehicle-to-cloud gateway respectively; each vehicle-to-cloud gateway is connected to each business service terminal; the business service terminal is a service / microservice interface, server, system or platform. The vehicle-to-cloud access management object to be managed by the embodiment of the present invention is all vehicle-to-cloud gateways in the vehicle network.

[0073] It should be noted that the firewall of the Internet of Vehicles in the embodiment of the present invention provides multiple data query interfaces, two of which are the first bandwidth usage query interface and the first access total query interface. Each vehicle cloud gateway of the Internet of Vehicles in the embodiment of the present invention provides multiple data query interfaces, three of which are the first resource usage query interface, the second access total query interface, and the first traffic distribution query interface. Among them: 1) The first bandwidth usage query interface is used to calculate the ratio of the real-time bandwidth usage of the current firewall to the rated total bandwidth when the current interface is called to obtain the corresponding first bandwidth usage and return it. 2) The first access total query interface is used to return the real-time total number of connected vehicles of the current firewall as the corresponding first real-time total number of access when the current interface is called. 3) The first resource usage query interface is used to return the CPU utilization and memory utilization of the current vehicle cloud gateway as the corresponding first real-time CPU utilization and first real-time memory utilization when the current interface is called. 4) The second access total query interface is used to return the real-time total number of connected vehicles of the current vehicle cloud gateway as the corresponding second real-time total number of access when the current interface is called. 5) The first traffic distribution query interface is used to collect statistics on the traffic distribution information of all connected vehicles of the current vehicle-cloud gateway when the current interface is called to obtain the corresponding first traffic distribution table and return it; wherein, the first traffic distribution table includes multiple first traffic distribution records; the first traffic distribution record corresponds to a connected vehicle on the current vehicle-cloud gateway; the first traffic distribution record includes a first connected vehicle identifier and a first average traffic flow; the first connected vehicle identifier is the unique identifier of the current connected vehicle; the first average traffic flow is the average traffic flow of the current connected vehicle in the most recent first time period; the first time period is a pre-set time length.

[0074] It should also be noted that in the actual management process of the Internet of Vehicles, if the current network coverage area is too large, it is generally necessary to set up an electronic fence for refined management. In this case, there will also be an electronic fence management system in the overall business system of the Internet of Vehicles, that is, when the overall management scope of the Internet of Vehicles is divided into zones according to the electronic fence, at least one of all the business service terminals of the Internet of Vehicles is an electronic fence management system. The electronic fence management system provides multiple business query interfaces, one of which is a full-area access status query interface. The full-area access status query interface is used to count the total number of real-time connected vehicle accesses in all first fence areas when the current interface is called to obtain the corresponding full-area access status feedback table and return it; wherein, the full-area access status feedback table includes multiple first area feedback records; the first area feedback record corresponds to the first fence area one by one; the first area feedback record includes the first feedback area identifier and the total number of real-time accesses in the first area; the first feedback area identifier is the unique identifier of the current fence area, and the total number of real-time accesses in the first area is the total number of real-time connected vehicle accesses in the current fence area.

[0075] It should also be noted that the first firewall configuration record created for the firewall in the embodiment of the present invention includes a first total bandwidth B, a first ratio threshold z, a first access threshold M, and a second access threshold C; wherein the first total bandwidth B is the rated total bandwidth of the current firewall and is a fixed value; the first ratio threshold z is a fixed ratio threshold, 0<z<1; the first access threshold M and the second access threshold C are two adjustable integer values, 0<C≤M, and the initially set first access threshold M and second access threshold C satisfy C=f int (M×z), f in () is the floor rounding function.

[0076] It should also be noted that the first gateway configuration record created for the vehicle-to-cloud gateway in the embodiment of the present invention includes a first gateway identifier, a first CPU utilization rate, a first memory utilization rate, a first weight parameter w i and the third access threshold c i ; Among them, the first gateway identifier is the unique device identifier of the current car-to-cloud gateway and is a fixed value; the first CPU utilization and the first memory utilization are two percentage values ​​that can be adjusted dynamically, 0%≤first CPU utilization≤100%, 0%≤first CPU utilization≤100%, and the initial settings of the first CPU utilization and the first memory utilization are both set to 50% by default; the first weight parameter w i is a comprehensive weight parameter set based on the first CPU utilization and the first memory utilization, 0≤w i ≤2, the first weight parameter w is initially set i is 1; the third access threshold c iis an adjustable integer value, 1≤gateway index i≤N; the third access threshold c of each first gateway configuration record i The corresponding relationship with the second access threshold C of the first firewall configuration record is:

[0077] It should also be noted that in the current step 1, the first firewall configuration record and all first gateway configuration records are regularly refreshed based on the real-time access status of the firewall, specifically including:

[0078] Step A1, regularly calling the first bandwidth usage query interface and the first access total number query interface of the firewall according to a preset first time frequency to obtain the corresponding first bandwidth usage and the first real-time access total number;

[0079] Here, the first time frequency is a preset time frequency parameter, which can be customized based on application requirements;

[0080] Step A2, based on the first total bandwidth B, the first bandwidth usage rate and the first total number of real-time access records of the first firewall configuration, calculate the corresponding first single-vehicle bandwidth = B × first bandwidth usage rate / first total number of real-time accesses; and based on the first single-vehicle bandwidth and the first total bandwidth B, calculate the corresponding first maximum total = f int (B / first bicycle bandwidth); and reset the first access threshold M of the first firewall configuration record to the corresponding first maximum total;

[0081] Step A3, identifying whether the first real-time access total exceeds the second access threshold C of the first firewall configuration record; if so, resetting the second access threshold C of the first firewall configuration record to the corresponding first maximum total; if not, resetting the second access threshold C of the first firewall configuration record to C=f int (first maximum total × z);

[0082] Step A4: according to the third access threshold c i The corresponding relationship with the second access threshold C, based on the latest second access threshold C, the third access threshold c recorded by each first gateway configuration i Perform a reset.

[0083] It should also be noted that in the current step 1, all first gateway configuration records are regularly refreshed based on the real-time resource utilization status of all vehicle-to-cloud gateways, specifically including:

[0084] Step B1, regularly calling the first resource usage query interface of each vehicle-to-cloud gateway according to a preset second time frequency to obtain the corresponding first real-time CPU utilization and first real-time memory utilization;

[0085] Here, the second time frequency is a preset time frequency parameter, which can be customized based on application requirements;

[0086] Step B2, perform a round of traversal on all first gateway configuration records; and in this round of traversal, use the currently traversed first gateway configuration record as the corresponding current gateway configuration record; and use the first real-time CPU utilization and the first real-time memory utilization of the car-to-cloud gateway corresponding to the current gateway configuration record as the corresponding CPU utilization u CPU and memory utilization u RAM ; and based on CPU utilization u CPU and memory utilization u RAM Calculate the corresponding latest weight w now ; and based on CPU utilization u CPU , memory utilization u RAM and the latest weight w now The first CPU utilization, the first memory utilization and the first weight parameter w corresponding to the current gateway configuration record i Perform a reset;

[0087] Here, the latest weight w now The calculation method is:

[0088] w now =max(0,min((w CPU +w RAM ),2)),

[0089]

[0090]

[0091] Among them, w CPU 、w RAM For the corresponding CPU weight sub-item and memory weight sub-item;

[0092] Step B3: after the current round of traversal of all first gateway configuration records is completed, the third access threshold C of each first gateway configuration record is set based on the second access threshold C of the first firewall configuration record. i Perform a reset.

[0093] Step 2: When the overall management scope of the Internet of Vehicles is partitioned by electronic fences, the first management terminal records the high-precision map of the overall management scope of the Internet of Vehicles as the corresponding first map; and records the circular area covered by each electronic fence on the first map as the corresponding first fence area; and counts the total number of the first fence areas to obtain the corresponding total number of first areas S; and creates access management configuration information for each first fence area based on the total number of first areas S and records it as the corresponding first area configuration record; and regularly refreshes all first area configuration records by querying the electronic fence management system of the Internet of Vehicles;

[0094] Specifically, step 21, when the overall management scope of the Internet of Vehicles is partitioned according to electronic fences, the first management terminal records the high-precision map of the overall management scope of the Internet of Vehicles as the corresponding first map;

[0095] Step 22, and record the circular area covered by each electronic fence on the first map as the corresponding first fence area;

[0096] Step 23, counting the total number of the first fence areas to obtain the corresponding total number S of the first areas;

[0097] Step 24, creating access management configuration information for each first fence area based on the total number of first areas S and recording it as a corresponding first area configuration record;

[0098] Here, in the embodiment of the present invention, all first fence areas created for the ground coverage area of ​​all electronic fences, that is, all first fence areas are circular areas with a radius fixed to a preset area radius R, where R is a preset distance value, such as 500 meters; each first area configuration record includes a first area identifier, a first center point coordinate, a first maximum access threshold, and a first real-time access amount d j , 1≤area index j≤S; the first area identifier is the unique identifier of the current fence area, which is a fixed value; the first center point coordinate is the center point coordinate of the current fence area, which is a fixed coordinate; the first maximum access threshold is the maximum vehicle network number threshold of the current fence area, which is a fixed integer value; the first real-time access quantity d j The number of trial connected vehicles in the current fence area, which is an adjustable integer value;

[0099] Step 25, regularly refreshing all first area configuration records by querying the electronic fence management system of the Internet of Vehicles;

[0100] Specifically, it includes: regularly calling the full-area access status query interface of the electronic fence management system according to a preset third time frequency to obtain the latest full-area access status feedback table; and performing a round of traversal of all first-area feedback records in the full-area access status feedback table; and in this round of traversal, taking the first-area feedback record currently traversed as the corresponding current feedback record; and taking the first feedback area identifier and the total number of real-time accesses of the first area of ​​the current feedback record as the corresponding current area identifier and the total number of current accesses; and taking the first area configuration record that matches the first area identifier with the current area identifier as the corresponding current matching record; and taking the first real-time access quantity d of the current matching record as the corresponding current matching record. j Here, the third time frequency is a preset time frequency parameter, which can be customized based on application requirements.

[0101] Step 3, when the first management end receives the first vehicle-cloud access management request sent by any vehicle-cloud gateway, it confirms whether the overall management scope of the vehicle network is partitioned according to the electronic fence; if it is confirmed to be no, the first vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record and the first service single vehicle bandwidth, and the corresponding first management feedback is sent back to the current vehicle-cloud gateway; if it is confirmed to be yes, the second vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record, the first area configuration record and the first service single vehicle bandwidth, and the corresponding second management feedback is sent back to the current vehicle-cloud gateway;

[0102] Specifically, the first management terminal confirms whether the overall management scope of the Internet of Vehicles is partitioned according to the electronic fence when receiving the first vehicle-to-cloud access management request sent by any vehicle-to-cloud gateway.

[0103] Here, the first vehicle-cloud access management request of the embodiment of the present invention is sent by a vehicle-cloud gateway to the first management terminal. If the first management terminal is inside each vehicle-cloud gateway, then the sending channel is an internal data channel; if the first management terminal is outside each vehicle-cloud gateway, then the sending channel is an external network data channel;

[0104] The first vehicle-cloud access management request of the embodiment of the present invention includes a first access gateway identifier, a first vehicle identifier, a first vehicle coordinate, a first access request type and a first application service identifier; the first access gateway identifier is a unique identifier of the current vehicle-cloud gateway; the first vehicle identifier is a unique identifier of the current networked vehicle that sends an access or service application request to the current vehicle-cloud gateway; the first vehicle coordinate is the real-time coordinate of the current networked vehicle; the first access request type includes a connection request and a service application request; when the first access request type is a connection request, the first application service identifier is empty; when the first access request type is a service application request, the first application service identifier is a corresponding business service identifier; the business service identifier corresponds to a business service end;

[0105] Step 32: If the confirmation is negative, the first vehicle-to-cloud access management is performed according to the first vehicle-to-cloud access management request and the corresponding first gateway configuration record and the first service vehicle bandwidth to obtain the corresponding first management feedback and send it back to the current vehicle-to-cloud gateway;

[0106] Specifically comprising: step 321, extracting the corresponding first access gateway identifier, first vehicle identifier, first access request type and first application service identifier from the first vehicle-to-cloud access management request;

[0107] Step 322: The first gateway configuration record matching the first gateway identifier and the first access gateway identifier is used as the corresponding current gateway configuration record; and the third access threshold c of the current gateway configuration record is set to i as the corresponding current access threshold; and use the car-cloud gateway corresponding to the current gateway configuration record as the corresponding current gateway; and call the second access total query interface and the first traffic distribution query interface of the current gateway to obtain the corresponding second real-time access total and the first traffic distribution table;

[0108] Step 323, identifying whether the second real-time access total number exceeds the current access threshold; if it exceeds, go to step 324; if it does not exceed, go to step 325;

[0109] Step 324, setting the corresponding first management state to connection rejection, and setting the corresponding first explanation text to the preset connection excess explanation text; and recording the first flow distribution record in the first flow distribution table whose first average flow is lower than the preset first flow threshold as the corresponding first record; and recording the first access vehicle identifier of each first record as a vehicle identifier that is recommended to disconnect the connection as the first disconnected vehicle identifier, and sorting all the obtained first disconnected vehicle identifiers in descending order according to the corresponding first average flow to form a corresponding first disconnected vehicle sequence; and the first management state, the first explanation text and the first disconnected vehicle sequence form a corresponding first management feedback; and go to step 327;

[0110] Here, the first management state of the embodiment of the present invention includes connection rejection, connection permission, service rejection, and service permission; the first flow threshold of the embodiment of the present invention is a preset flow threshold parameter; the connection excess description text of the embodiment of the present invention is a preset character string text for connection excess description;

[0111] From the current step, it can be seen that the embodiment of the present invention not only recommends that the vehicle-to-cloud gateway reject access, but also actively recommends shutting down low-traffic connections on the vehicle-to-cloud gateway, i.e., first disconnecting the vehicle sequence;

[0112] Step 325, identifying the first access request type; if the first access request type is a connection request, setting the corresponding first management state to allow connection, and using the first management state as the corresponding first management feedback, and going to step 327; if the first access request type is a service application request, going to step 326;

[0113] Step 326, taking the first average flow of the first flow distribution record that matches the first access vehicle identifier and the first vehicle identifier in the first flow distribution table as the current vehicle flow; and performing the corresponding flow-bandwidth conversion based on the current vehicle flow to obtain the corresponding current vehicle bandwidth; and taking the first service vehicle bandwidth allocated by the business service end corresponding to the first application service identifier to any connected vehicle as the corresponding current service vehicle bandwidth; and recording the sum of the current vehicle bandwidth and the current service vehicle bandwidth as the corresponding current bandwidth sum; and identifying whether the current bandwidth sum exceeds the preset vehicle maximum bandwidth threshold; if exceeded, setting the corresponding first management state to deny service, and setting the corresponding first description text to the preset vehicle bandwidth excess description text, and the corresponding first management feedback composed of the first management state and the first description text; if not exceeded, setting the corresponding first management state to allow service, and using the first management state as the corresponding first management feedback;

[0114] Here, the single-vehicle maximum bandwidth threshold in the embodiment of the present invention is a preset threshold parameter; the single-vehicle bandwidth excess description text in the embodiment of the present invention is a preset character string text used to indicate that the total service bandwidth used by the current vehicle has exceeded the limit;

[0115] From the current steps, it can be seen that when the total number of accesses has not exceeded, the embodiment of the present invention will further identify whether the bandwidth in use of the current networked vehicle and the sum of the bandwidth of the additional bandwidth that may be brought by the current application service in the future (in use bandwidth + additional bandwidth) exceed the limit, and limit it based on a set threshold, that is, the maximum bandwidth threshold of a single vehicle; the advantage of this is to prevent a single vehicle from occupying too much bandwidth, thereby preventing the number of accesses from being effectively increased;

[0116] Step 327, sending the first management feedback obtained this time back to the current vehicle cloud gateway;

[0117] Step 33: If the confirmation is yes, then perform the second vehicle-cloud access management according to the first vehicle-cloud access management request and the corresponding first gateway configuration record, first area configuration record and first service bicycle bandwidth to obtain the corresponding second management feedback and send it back to the current vehicle-cloud gateway;

[0118] Specifically comprising: step 331, extracting the corresponding first access gateway identifier, first vehicle identifier, first vehicle coordinates, first access request type and first application service identifier from the first vehicle-to-cloud access management request;

[0119] Step 332: The first gateway configuration record matching the first gateway identifier and the first access gateway identifier is used as the corresponding current gateway configuration record; and the third access threshold c of the current gateway configuration record is set to i as the corresponding current access threshold; and use the car-cloud gateway corresponding to the current gateway configuration record as the corresponding current gateway; and call the second access total query interface and the first traffic distribution query interface of the current gateway to obtain the corresponding second real-time access total and the first traffic distribution table;

[0120] Here, the current step 332 is similar to the aforementioned step 322;

[0121] Step 333, identifying whether the second real-time access total number exceeds the current access threshold; if it exceeds, go to step 334; if it does not exceed, go to step 335;

[0122] Step 334, setting the corresponding second management state to connection rejection, and setting the corresponding second explanation text to the preset connection excess explanation text; and recording the first flow distribution record in the first flow distribution table whose first average flow is lower than the preset first flow threshold as the corresponding second record; and recording the first access vehicle identifier of each second record as a vehicle identifier that is recommended to disconnect the connection as the second disconnected vehicle identifier, and sorting all the obtained second disconnected vehicle identifiers in descending order according to the corresponding first average flow to form a corresponding second disconnected vehicle sequence; and the second management state, the second explanation text and the second disconnected vehicle sequence form the corresponding second management feedback; and go to step 339;

[0123] The second management state includes denying connection, allowing connection, denying service, and allowing service;

[0124] Here, the current step 334 is similar to the aforementioned step 324;

[0125] Step 335, identifying the first access request type; if the first access request type is a connection request, setting the corresponding second management state to allow connection, and using the second management state as the corresponding second management feedback, and going to step 339; if the first access request type is a service application request, going to step 336;

[0126] Step 336: The first average flow of the first flow distribution record matching the first access vehicle identifier and the first vehicle identifier in the first flow distribution table is taken as the current vehicle flow; and the corresponding flow-bandwidth conversion is performed based on the current vehicle flow to obtain the corresponding current vehicle bandwidth; and the first service vehicle bandwidth allocated by the business service end corresponding to the first application service identifier to any connected vehicle is taken as the corresponding current service vehicle bandwidth; and the sum of the current vehicle bandwidth and the current service vehicle bandwidth is recorded as the corresponding current bandwidth sum; and whether the current bandwidth sum exceeds the preset single-vehicle maximum bandwidth threshold is identified; If it exceeds, the corresponding second management state is set to denial of service, and the corresponding second description text is set to the preset bicycle bandwidth excess description text, and the second management state and the second description text form the corresponding second management feedback, and go to step 339; if it does not exceed, the first area configuration record whose straight-line distance between the first center point coordinates and the first vehicle coordinates is less than or equal to the area radius R is recorded as the corresponding matching area record, and the total number of matching area records is identified. If the total number of matching area records is 1, go to step 337, and if the total number of matching area records is greater than 1, go to step 338;

[0127] Here, the current step 336 is similar to the aforementioned step 326 in that, when the total number of accesses has not exceeded, the embodiment of the present invention will further identify whether the bandwidth in use of the current networked vehicle and the sum of the newly added bandwidth that may be brought by the current application service in the future (the bandwidth in use + the newly added bandwidth) exceed the limit, and limit it based on a set threshold, that is, the maximum bandwidth threshold of a single vehicle; the advantage of this is to prevent a single vehicle from occupying too much bandwidth, thereby causing the number of accesses to be unable to be effectively increased; the difference from the aforementioned step 326 is that when it is confirmed that the total bandwidth is not exceeded, it is necessary to further go to step 337 / 338 to make a judgment related to the electronic fence area;

[0128] Step 337: record the first maximum access threshold and the first real-time access volume d of the unique matching area. jas the corresponding current access threshold and current access volume; and identify whether the current access volume exceeds the current access threshold; if exceeded, set the corresponding second management state to deny service, and set the corresponding second description text to the preset description text of excess networked vehicles in the associated area, and the second management state and the second description text constitute the corresponding second management feedback, and go to step 339; if not exceeded, set the corresponding second management state to allow service, and set the corresponding second description text to the first area identifier of the current matching area record, and the second management state and the second description text constitute the corresponding second management feedback, and go to step 339;

[0129] Here, the description text of the excess number of networked vehicles in the associated area of ​​the embodiment of the present invention is a pre-set character string text used to indicate that the total number of networked vehicles in the electronic fence area where the current networked vehicle is located has exceeded the standard; when the total number of networked vehicles in the electronic fence area where the current networked vehicle is located has not exceeded the standard, the embodiment of the present invention will also inform the current vehicle-to-cloud gateway of the area identifier of the electronic fence area where the current networked vehicle is located through the second description text in the second management feedback; after obtaining the area identifier, the vehicle-to-cloud gateway will transmit it to the electronic fence management system to add 1 to the total number of real-time accesses to the electronic fence area corresponding to the area identifier, that is, the first fence area;

[0130] Step 338: Count the total number of matching area records to obtain the corresponding total number of areas G; and record the first area identifier of each matching area record as the corresponding matching area identifier id q , 1≤matching area index q≤G; initialize the adaptation area identifier to be empty; sort the G matching area records in descending order according to the first maximum access threshold to form a corresponding first record sequence; and traverse each matching area record in the sequence one by one in the traversal order from the first to the last matching area record in the first record sequence; and in this round of traversal, take the currently traversed matching area record as the current record; and set the first maximum access threshold and the first real-time access quantity d of the current record. jas the corresponding current access threshold and current access volume; and identify whether the current access volume exceeds the current access threshold. If not, terminate this round of traversal immediately and set the adaptation area identifier to the first area identifier corresponding to the current record. If exceeded, go to the next matching area record and continue traversing until the traversal of the last matching area record is completed; and when this round of traversal is terminated or ended, identify whether the adaptation area identifier is empty; if the adaptation area identifier is empty, set the corresponding second management state to deny service, and set the corresponding second description text to the description text of the excess number of networked vehicles in the associated area, and the second management state and the second description text constitute the corresponding second management feedback; if the adaptation area identifier is not empty, set the corresponding second management state to allow service, and set the corresponding second description text to the corresponding adaptation area identifier, and the second management state and the second description text constitute the corresponding second management feedback;

[0131] Here, when the total number of matching area records is greater than 1, it indicates that the current location of the connected vehicle is at an overlapping position of two or more electronic fence areas; in this case, the embodiment of the present invention stipulates that the G electronic fence areas are first sorted in descending order according to the access capacity of the electronic fence area, that is, the first maximum access threshold, and traversed one by one in the sorted order, and the first actual access number, that is, the first real-time access quantity d j The electronic fence area that has not exceeded its own access capacity upper limit, i.e., the first maximum access threshold, is used as the access area corresponding to the current networked vehicle, and the area identifier of the access area is notified to the current vehicle-to-cloud gateway through the second description text in the second management feedback. After obtaining the area identifier, the vehicle-to-cloud gateway transmits it to the electronic fence management system to add 1 to the total number of real-time accesses to the electronic fence area corresponding to the area identifier, i.e., the first fence area; however, if the actual access numbers of the G electronic fence areas all exceed their respective access capacity upper limits, then the embodiment of the present invention will set the second management state to deny service and suggest that the vehicle-to-cloud gateway abandon the current application of the current networked vehicle;

[0132] From the above steps 337 / 338, it can be seen that the embodiment of the present invention further restricts the total number of accesses based on each electronic fence area after the total number of gateway accesses is not exceeded and the bandwidth occupied by a single vehicle is not exceeded; the advantage of this is that the vehicle-cloud access control in the hotspot area can be finely managed;

[0133] Step 339: Send the second management feedback obtained this time back to the current vehicle cloud gateway.

[0134] Figure 3This is a module structure diagram of a vehicle-to-cloud access management device provided in Embodiment 2 of the present invention. The device is a terminal device or server that implements the aforementioned method embodiment, or can be a device that enables the aforementioned terminal device or server to implement the aforementioned method embodiment. For example, the device can be a device or chip system of the aforementioned terminal device or server. Figure 3 As shown, the vehicle-cloud access management device provided by the second embodiment of the present invention includes: a general configuration setting and updating module 201, an electronic fence configuration setting and updating module 202 and a vehicle-cloud access management module 203.

[0135] The general configuration setting and updating module 201 is used to create access management configuration information for the firewall of the Internet of Vehicles and record it as the corresponding first firewall configuration record; and count the total number of vehicle-cloud gateways in the Internet of Vehicles to obtain the corresponding total number of first gateways N; and based on the first firewall configuration record and the total number of first gateways N, create access management configuration information for each vehicle-cloud gateway and record it as the corresponding first gateway configuration record; and record the maximum business access bandwidth allocated by each business service end of the Internet of Vehicles to any connected vehicle as the corresponding first service single vehicle bandwidth; and regularly refresh the first firewall configuration record and all first gateway configuration records based on the real-time access status of the firewall; and regularly refresh all first gateway configuration records based on the real-time resource utilization status of all vehicle-cloud gateways.

[0136] The electronic fence configuration setting and updating module 202 is used to record the high-precision map of the overall management scope of the Internet of Vehicles as the corresponding first map when the overall management scope of the Internet of Vehicles is partitioned according to the electronic fence; and record the circular area covered by each electronic fence on the first map as the corresponding first fence area; and count the total number of the first fence areas to obtain the corresponding total number of first areas S; and create access management configuration information for each first fence area based on the total number of first areas S and record it as the corresponding first area configuration record; and regularly refresh all first area configuration records by querying the electronic fence management system of the Internet of Vehicles.

[0137] The vehicle-cloud access management module 203 is used to confirm whether the overall management scope of the vehicle network is partitioned according to the electronic fence when receiving the first vehicle-cloud access management request sent by any vehicle-cloud gateway; if it is confirmed to be no, the first vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record and the first service single-vehicle bandwidth, and the corresponding first management feedback is sent back to the current vehicle-cloud gateway; if it is confirmed to be yes, the second vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record, the first area configuration record and the first service single-vehicle bandwidth, and the corresponding second management feedback is sent back to the current vehicle-cloud gateway.

[0138] A vehicle-cloud access management device provided in an embodiment of the present invention can execute the method steps in the above method embodiment. Its implementation principle and technical effects are similar and will not be repeated here.

[0139] It should be noted that it should be understood that the division of the various modules of the above device is only a division of logical functions. In actual implementation, they can be fully or partially integrated into one physical entity, or they can be physically separated. And these modules can all be implemented in the form of software called by processing elements; they can also be all implemented in the form of hardware; some modules can also be implemented in the form of software called by processing elements, and some modules can be implemented in the form of hardware. For example, the setting and updating module of the general configuration can be a separately established processing element, or it can be integrated in a chip of the above device. In addition, it can also be stored in the memory of the above device in the form of program code, and called and executed by a processing element of the above device. The function of the above-mentioned module is determined. The implementation of other modules is similar. In addition, all or part of these modules can be integrated together, or they can be implemented independently. The processing element described here can be an integrated circuit with signal processing capabilities. In the implementation process, each step of the above method or each module above can be completed by an integrated logic circuit of hardware in the processor element or instructions in the form of software.

[0140] For example, the above modules may be one or more integrated circuits configured to implement the above methods, such as one or more application specific integrated circuits (ASIC), or one or more digital signal processors (DSP), or one or more field programmable gate arrays (FPGA). For another example, when a module above is implemented in the form of a processing element scheduling program code, the processing element may be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call program code. For another example, these modules may be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0141] In the above embodiments, all or part of the embodiments may be implemented by software, hardware, firmware or any combination thereof. When implemented by software, all or part of the embodiments may be implemented in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the above method embodiments are generated. The above computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The above-mentioned computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the above-mentioned computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center through wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, Bluetooth, microwave, etc.) methods. The above-mentioned computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that includes one or more available media integrated. The above-mentioned available medium can be a magnetic medium (such as a floppy disk, a hard disk, a tape), an optical medium (such as a DVD), or a semiconductor medium (such as a solid state disk (SSD)), etc.

[0142] Figure 4 This is a schematic diagram of the structure of an electronic device provided in Embodiment 3 of the present invention. The electronic device may be a terminal device or a server for implementing the method of the aforementioned embodiment, or may be a terminal device or a server for implementing the method of the aforementioned embodiment connected to the aforementioned terminal device or server. Figure 4 As shown, the electronic device may include: a processor 301 (such as a CPU), a memory 302, and a transceiver 303; the transceiver 303 is coupled to the processor 301, and the processor 301 controls the transceiver 303. Various instructions may be stored in the memory 302 to complete various processing functions and implement the processing steps described in the aforementioned embodiment method. Preferably, the electronic device involved in the embodiment of the present invention also includes: a power supply 304, a system bus 305 and a communication port 306. The system bus 305 is used to realize the communication connection between components. The above-mentioned communication port 306 is used for connecting and communicating between the electronic device and other peripherals.

[0143] exist Figure 4The system bus 305 mentioned in the figure can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The system bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus. The communication interface is used to realize the communication between the database access device and other devices (such as clients, read-write libraries, and read-only libraries). The memory may include random access memory (RAM), and may also include non-volatile memory (Non-Volatile Memory), such as at least one disk storage.

[0144] The above-mentioned processor can be a general-purpose processor, including a central processing unit CPU, a network processor (Network Processor, NP), a graphics processing unit (Graphics Processing Unit, GPU), etc.; it can also be a digital signal processor DSP, an application-specific integrated circuit ASIC, a field programmable gate array FPGA or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0145] It should be noted that an embodiment of the present invention further provides a computer-readable storage medium, in which instructions are stored. When the computer-readable storage medium is run on a computer, the computer executes the method and processing process provided in the above embodiments.

[0146] The embodiments of the present invention provide a vehicle-cloud access management method, device, electronic device and computer-readable storage medium. It can be seen from the above invention content that the embodiments of the present invention create a corresponding first firewall / gateway configuration record for the firewall / vehicle-cloud gateway of the Internet of Vehicles; and configure the corresponding first service single-vehicle bandwidth for each business service end; and refresh all first firewall / gateway configuration records based on the real-time status of the firewall, and refresh all first gateway configuration records based on the real-time resource utilization status of the vehicle-cloud gateway; and when the overall management scope of the Internet of Vehicles is partitioned by electronic fences, create a first area configuration record for each fence area and refresh all first area configuration records by querying the electronic fence management system of the Internet of Vehicles; and when any vehicle-cloud gateway receives a vehicle-cloud access request (connection request, service application request) from any connected vehicle, confirm whether the overall management scope of the Internet of Vehicles is partitioned by electronic fences. If there is no electronic fence, the first vehicle-cloud access management is performed according to the current vehicle-cloud access request and the corresponding first gateway configuration record and the first service single vehicle bandwidth, and the corresponding first management feedback is sent back to the current vehicle-cloud gateway. If it is confirmed that there is an electronic fence, the second vehicle-cloud access management is performed according to the current vehicle-cloud access request and the corresponding first gateway configuration record, the first area configuration record and the first service single vehicle bandwidth, and the corresponding second management feedback is sent back to the current vehicle-cloud gateway; the vehicle-cloud gateway can process the current vehicle-cloud access request according to the management status given in the management feedback (reject connection, allow connection, reject service, allow service), and can also disconnect one or more connected vehicles that are currently in a connected state according to the vehicle disconnection sequence given in the management feedback when the management status is reject connection. The embodiment of the present invention can dynamically adjust the total number of accessible vehicle-cloud gateways when the number of network accesses, network access traffic, and the resource (CPU, memory) usage status of the vehicle-cloud gateway change, and can select the gateway access operation (reject connection, allow connection, reject service, allow service) based on real-time allocation parameters when the vehicle-cloud gateway receives a vehicle-cloud access request from any connected vehicle, and can proactively recommend shutting down low-traffic connections on the vehicle-cloud gateway when the number of accesses exceeds the limit. Through the embodiment of the present invention, further management can be performed on the access to the vehicle-cloud gateway layer, and the access control capability of the vehicle-cloud gateway is improved when the access volume surges during peak hours / hotspot sections, thereby achieving the purpose of reducing the access pressure on the service service end and reducing the risk of network congestion.

[0147] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0148] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A vehicle-to-cloud access management method, characterized in that: The method comprises: The first management end creates access management configuration information for the firewall of the Internet of Vehicles and records it as the corresponding first firewall configuration record; and counts the total number of vehicle-cloud gateways of the Internet of Vehicles to obtain the corresponding total number of first gateways N; and creates access management configuration information for each vehicle-cloud gateway based on the first firewall configuration record and the total number of the first gateways N and records it as the corresponding first gateway configuration record; and records the maximum service access bandwidth allocated by each service service end of the Internet of Vehicles to any connected vehicle as the corresponding first service single vehicle bandwidth; and regularly refreshes the first firewall configuration record and all the first gateway configuration records based on the real-time access status of the firewall; and regularly refreshes all the first gateway configuration records based on the real-time resource utilization status of all the vehicle-cloud gateways; When the overall management scope of the Internet of Vehicles is partitioned by electronic fences, the first management terminal records the high-precision map of the overall management scope of the Internet of Vehicles as the corresponding first map; and records the circular area covered by each electronic fence on the first map as the corresponding first fence area; and counts the total number of the first fence areas to obtain the corresponding first area total number S; and creates access management configuration information for each of the first fence areas based on the first area total number S and records it as the corresponding first area configuration record; and regularly refreshes all the first area configuration records by querying the electronic fence management system of the Internet of Vehicles; When the first management end receives the first vehicle-cloud access management request sent by any of the vehicle-cloud gateways, it confirms whether the overall management scope of the vehicle network is partitioned according to the electronic fence; if it is confirmed to be no, the first vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record and the first service single-vehicle bandwidth, and the corresponding first management feedback is sent back to the current vehicle-cloud gateway; if it is confirmed to be yes, the second vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record, the first area configuration record and the first service single-vehicle bandwidth, and the corresponding second management feedback is sent back to the current vehicle-cloud gateway.

2. The vehicle-to-cloud access management method according to claim 1, characterized in that: The Internet of Vehicles at least includes a plurality of networked vehicles, a mobile communication network, a firewall, a switching network, a plurality of vehicle-to-cloud gateways, and a plurality of business service terminals; the mobile communication network is connected to each of the networked vehicles and the firewall respectively; the switching network is connected to the firewall and each of the vehicle-to-cloud gateways respectively; each of the vehicle-to-cloud gateways is connected to each of the business service terminals; the business service terminal is a service / microservice interface, server, system, or platform; The firewall provides multiple data query interfaces, two of which are a first bandwidth usage query interface and a first access total query interface; Each of the vehicle-to-cloud gateways provides multiple data query interfaces, wherein three of the data query interfaces are a first resource usage rate query interface, a second access total number query interface, and a first traffic distribution query interface; The first bandwidth usage query interface is used to calculate the ratio of the real-time bandwidth usage of the current firewall to the rated total bandwidth to obtain the corresponding first bandwidth usage and return it when the current interface is called; the first access total number query interface is used to return the real-time total number of connected vehicles accessed by the current firewall as the corresponding first real-time total number of accesses when the current interface is called; The first resource utilization query interface is used to return the CPU utilization and memory utilization of the current vehicle-to-cloud gateway as the corresponding first real-time CPU utilization and first real-time memory utilization when the current interface is called; the second access total query interface is used to return the real-time total number of connected vehicles connected to the current vehicle-to-cloud gateway as the corresponding second real-time total number of accesses when the current interface is called; the first traffic distribution query interface is used to collect statistics on the traffic distribution information of all connected vehicles connected to the current vehicle-to-cloud gateway when the current interface is called to obtain the corresponding first traffic distribution table and return it; the first traffic distribution table includes multiple first traffic distribution records; the first traffic distribution record corresponds to the last connected connected vehicle on the current vehicle-to-cloud gateway; the first traffic distribution record includes a first connected vehicle identifier and a first average traffic; the first connected vehicle identifier is the unique identifier of the current connected vehicle; the first average traffic is the average traffic of the current connected vehicle in the most recent first time period; The first duration is a preset time length; When the overall management scope of the Internet of Vehicles is partitioned by electronic fences, at least one of all the business service terminals of the Internet of Vehicles is the electronic fence management system; The electronic fence management system provides multiple business query interfaces, one of which is a full-area access status query interface; The full-area access status query interface is used to count the total number of real-time connected vehicles connected to all the first fence areas when the current interface is called, obtain a corresponding full-area access status feedback table and return it; The full-area access status feedback table includes a plurality of first-area feedback records; the first-area feedback records correspond to the first fence areas one by one; the first-area feedback records include the first feedback area identifier and the total number of real-time accesses to the first area; The first feedback area identifier is a unique identifier of the current fence area, and the total number of real-time accesses to the first area is the total number of real-time connected vehicles accessing the current fence area.

3. The vehicle-to-cloud access management method according to claim 2, characterized in that: The first firewall configuration record includes a first total bandwidth B, a first ratio threshold z, a first access threshold M, and a second access threshold C; wherein the first total bandwidth B is the rated total bandwidth of the current firewall and is a fixed value; the first ratio threshold z is a fixed ratio threshold, 0<z<1; the first access threshold M and the second access threshold C are two adjustable integer values, 0<C≤M, and the initially set first access threshold M and the second access threshold C satisfy C=f int (M×z), f in () is the floor rounding function; The first gateway configuration record includes a first gateway identifier, a first CPU utilization, a first memory utilization, and a first weight parameter w i and the third access threshold c i ; The first gateway identifier is the unique device identifier of the current car-to-cloud gateway and is a fixed value; the first CPU utilization and the first memory utilization are two percentage values ​​that can be adjusted dynamically, 0%≤first CPU utilization≤100%, 0%≤first CPU utilization≤100%, the first CPU utilization and the first memory utilization are initially set to 50% by default; the first weight parameter w i is a comprehensive weight parameter set based on the first CPU utilization and the first memory utilization, 0≤w i ≤2, the first weight parameter w is initially set i is 1; the third access threshold c i is an adjustable integer value, 1≤gateway index i≤N; the third access threshold c of each first gateway configuration record i The corresponding relationship with the second access threshold C of the first firewall configuration record is: All the first fence areas are circular areas with a radius fixed to a preset area radius R; the first area configuration record includes a first area identifier, a first center point coordinate, a first maximum access threshold and a first real-time access volume d j , 1≤area index j≤S; the first area identifier is the unique identifier of the current fence area, which is a fixed value; the first center point coordinate is the center point coordinate of the current fence area, which is a fixed coordinate; the first maximum access threshold is the maximum vehicle network number threshold of the current fence area, which is a fixed integer value; the first real-time access quantity d j The number of trial connected vehicles in the current fence area, which is an adjustable integer value; The first vehicle-cloud access management request includes a first access gateway identifier, a first vehicle identifier, a first vehicle coordinate, a first access request type and a first application service identifier; the first access gateway identifier is the unique identifier of the current vehicle-cloud gateway; the first vehicle identifier is the unique identifier of the current connected vehicle that sends an access or service application request to the current vehicle-cloud gateway; the first vehicle coordinates are the real-time coordinates of the current connected vehicle; the first access request type includes a connection request and a service application request; when the first access request type is a connection request, the first application service identifier is empty; when the first access request type is a service application request, the first application service identifier is the corresponding business service identifier; the business service identifier corresponds to one of the business service ends.

4. The vehicle-to-cloud access management method according to claim 3, characterized in that: The periodically refreshing the first firewall configuration record and all the first gateway configuration records based on the real-time access status of the firewall specifically includes: Step 41, regularly calling the first bandwidth usage query interface and the first access total number query interface of the firewall according to a preset first time frequency to obtain the corresponding first bandwidth usage and the first real-time access total number; Step 42: Calculate the first single-vehicle bandwidth corresponding to the first total bandwidth B, the first bandwidth usage rate and the first total number of real-time accesses recorded in the first firewall configuration record = B × first bandwidth usage rate / first total number of real-time accesses; and calculate the first maximum total number corresponding to the first single-vehicle bandwidth and the first total bandwidth B = f int (B / first bicycle bandwidth); and reset the first access threshold M recorded in the first firewall configuration to the corresponding first maximum total; Step 43, identifying whether the first real-time access total exceeds the second access threshold C of the first firewall configuration record; if so, resetting the second access threshold C of the first firewall configuration record to the corresponding first maximum total; if not, resetting the second access threshold C of the first firewall configuration record to C=f int (first maximum total × z); Step 44: according to the third access threshold c i The corresponding relationship between the second access threshold C and the third access threshold C recorded by each first gateway configuration is based on the latest second access threshold C i Perform a reset.

5. The vehicle-to-cloud access management method according to claim 3, characterized in that: The periodically refreshing all the first gateway configuration records based on the real-time resource utilization status of all the vehicle-to-cloud gateways specifically includes: Step 51: regularly calling the first resource usage query interface of each of the vehicle-to-cloud gateways at a preset second time frequency to obtain the corresponding first real-time CPU utilization and the first real-time memory utilization; Step 52, perform a round of traversal on all the first gateway configuration records; and in this round of traversal, use the first gateway configuration record currently traversed as the corresponding current gateway configuration record; and use the first real-time CPU utilization and the first real-time memory utilization of the vehicle-to-cloud gateway corresponding to the current gateway configuration record as the corresponding CPU utilization u CPU and memory utilization u RAM ; and based on the CPU utilization u CPU and the memory utilization u RAM Calculate the corresponding latest weight w now ; and based on the CPU utilization u CPU , the memory utilization u RAM and the latest weight w now The first CPU utilization, the first memory utilization and the first weight parameter w corresponding to the current gateway configuration record i Perform a reset; Among them, the latest weight w now The calculation method is: w now =max(0,min((w CPU +w RAM ),2)), w CPU 、w RAM For the corresponding CPU weight sub-item and memory weight sub-item; Step 53: After the current round of traversal of all the first gateway configuration records is completed, the third access threshold C of each first gateway configuration record is set based on the second access threshold C of the first firewall configuration record. i Perform a reset.

6. The vehicle-to-cloud access management method according to claim 3, characterized in that: The periodically refreshing all the first area configuration records by querying the electronic fence management system of the Internet of Vehicles specifically includes: The full-area access status query interface of the electronic fence management system is periodically called at a preset third time frequency to obtain the latest full-area access status feedback table; and all the first-area feedback records of the full-area access status feedback table are traversed in one round; and in this round of traversal, the first-area feedback record currently traversed is used as the corresponding current feedback record; and the first feedback area identifier and the total number of real-time accesses of the first area of ​​the current feedback record are used as the corresponding current area identifier and the total number of current accesses; and the first area configuration record that matches the first area identifier with the current area identifier is used as the corresponding current matching record; and the first real-time access quantity d of the current matching record is used as the corresponding current matching record. j Reset to the corresponding current total number of accesses.

7. The vehicle-to-cloud access management method according to claim 3, characterized in that: The performing first vehicle-to-cloud access management according to the first vehicle-to-cloud access management request and the corresponding first gateway configuration record and the first service vehicle bandwidth to obtain corresponding first management feedback and send it back to the current vehicle-to-cloud gateway specifically includes: Step 71: extracting the corresponding first access gateway identifier, the first vehicle identifier, the first access request type and the first application service identifier from the first vehicle-to-cloud access management request; Step 72: taking the first gateway configuration record that matches the first gateway identifier and the first access gateway identifier as the corresponding current gateway configuration record; and setting the third access threshold c of the current gateway configuration record to i as the corresponding current access threshold; and use the car-to-cloud gateway corresponding to the current gateway configuration record as the corresponding current gateway; and call the second total access query interface and the first traffic distribution query interface of the current gateway to obtain the corresponding second real-time total access and the first traffic distribution table; Step 73, identifying whether the second real-time access total number exceeds the current access threshold; if so, proceeding to step 74; if not, proceeding to step 75; Step 74, setting the corresponding first management state to connection rejection, and setting the corresponding first explanation text to the preset connection excess explanation text; and recording the first flow distribution record in the first flow distribution table where the first average flow is lower than the preset first flow threshold as the corresponding first record; and recording the first access vehicle identifier of each first record as a vehicle identifier for suggesting disconnection as the first disconnected vehicle identifier, and sorting all the obtained first disconnected vehicle identifiers in descending order according to the corresponding first average flow to form a corresponding first disconnected vehicle sequence; and the first management state, the first explanation text and the first disconnected vehicle sequence form the corresponding first management feedback; and go to step 77; The first management state includes denying connection, allowing connection, denying service, and allowing service; Step 75, identifying the first access request type; if the first access request type is a connection request, setting the corresponding first management state to allow connection, and using the first management state as the corresponding first management feedback, and going to step 77; if the first access request type is a service application request, going to step 76; Step 76, taking the first average flow of the first flow distribution record in which the first access vehicle identifier in the first flow distribution table matches the first vehicle identifier as the current vehicle flow; and performing corresponding flow-bandwidth conversion based on the current vehicle flow to obtain the corresponding current vehicle bandwidth; and taking the first service vehicle bandwidth allocated by the business service end corresponding to the first application service identifier to any connected vehicle as the corresponding current service vehicle bandwidth; and recording the sum of the current vehicle bandwidth and the current service vehicle bandwidth as the corresponding current bandwidth sum; and identifying whether the current bandwidth sum exceeds the preset vehicle maximum bandwidth threshold; if exceeded, setting the corresponding first management state to deny service, and setting the corresponding first description text to the preset vehicle bandwidth excess description text, and the first management state and the first description text constitute the corresponding first management feedback; if not exceeded, setting the corresponding first management state to allow service, and taking the first management state as the corresponding first management feedback; Step 77: send the first management feedback obtained this time back to the current vehicle cloud gateway.

8. The vehicle-to-cloud access management method according to claim 3, characterized in that: The performing second vehicle-cloud access management according to the first vehicle-cloud access management request and the corresponding first gateway configuration record, the first area configuration record, and the first service single vehicle bandwidth to obtain corresponding second management feedback and send it back to the current vehicle-cloud gateway specifically includes: Step 81: extracting the corresponding first access gateway identifier, the first vehicle identifier, the first vehicle coordinates, the first access request type and the first application service identifier from the first vehicle-to-cloud access management request; Step 82: taking the first gateway configuration record that matches the first gateway identifier with the first access gateway identifier as the corresponding current gateway configuration record; and setting the third access threshold c of the current gateway configuration record to i as the corresponding current access threshold; and use the car-to-cloud gateway corresponding to the current gateway configuration record as the corresponding current gateway; and call the second total access query interface and the first traffic distribution query interface of the current gateway to obtain the corresponding second real-time total access and the first traffic distribution table; Step 83, identifying whether the second real-time access total number exceeds the current access threshold; if it exceeds, go to step 84; if not, go to step 85; Step 84, setting the corresponding second management state to connection rejection, and setting the corresponding second explanation text to the preset connection excess explanation text; and recording the first traffic distribution record in the first traffic distribution table where the first average traffic is lower than the preset first traffic threshold as the corresponding second record; and using the first access vehicle identifier of each second record as a vehicle identifier that is recommended to disconnect the connection and recording it as the second disconnected vehicle identifier, and sorting all the obtained second disconnected vehicle identifiers in descending order according to the corresponding first average traffic to form a corresponding second disconnected vehicle sequence; and the second management state, the second explanation text and the second disconnected vehicle sequence form the corresponding second management feedback; and go to step 89; The second management state includes denying connection, allowing connection, denying service, and allowing service; Step 85, identifying the first access request type; if the first access request type is a connection request, setting the corresponding second management state to allow connection, and using the second management state as the corresponding second management feedback, and going to step 89; if the first access request type is a service application request, going to step 86; Step 86, take the first average flow of the first flow distribution record that matches the first access vehicle identifier with the first vehicle identifier in the first flow distribution table as the current vehicle flow; and perform corresponding flow-bandwidth conversion based on the current vehicle flow to obtain the corresponding current vehicle bandwidth; and take the first service vehicle bandwidth allocated by the business service end corresponding to the first application service identifier to any connected vehicle as the corresponding current service vehicle bandwidth; and record the sum of the current vehicle bandwidth and the current service vehicle bandwidth as the corresponding current bandwidth sum; and identify whether the current bandwidth sum exceeds the preset vehicle maximum bandwidth threshold ; If exceeded, the corresponding second management state is set to denial of service, and the corresponding second description text is set to the preset bicycle bandwidth excess description text, and the second management state and the second description text constitute the corresponding second management feedback, and go to step 89; If not exceeded, the first area configuration record whose straight-line distance between the first center point coordinates and the first vehicle coordinates is less than or equal to the area radius R is recorded as the corresponding matching area record, and the total number of the matching area records is identified. If the total number of the matching area records is 1, go to step 87, and if the total number of the matching area records is greater than 1, go to step 88; Step 87: record the first maximum access threshold and the first real-time access quantity d of the unique matching area. j as the corresponding current access threshold and current access volume; and identifying whether the current access volume exceeds the current access threshold; if it exceeds, setting the corresponding second management state to deny service, and setting the corresponding second description text to the preset description text of excess networked vehicles in the associated area, and the second management state and the second description text constitute the corresponding second management feedback, and go to step 89; if it does not exceed, setting the corresponding second management state to allow service, and setting the corresponding second description text to the first area identifier of the current matching area record, and the second management state and the second description text constitute the corresponding second management feedback, and go to step 89; Step 88: Count the total number of the matching area records to obtain the total number of corresponding areas G; and record the first area identifier of each matching area record as the corresponding matching area identifier id q , 1≤matching area index q≤G; and initialize the adaptation area identifier to be empty; and sort the G matching area records in descending order according to the first maximum access threshold to form a corresponding first record sequence; and traverse each matching area record in the sequence one by one in the traversal order from the first to the last matching area record in the first record sequence; and in this round of traversal, the matching area record currently traversed is used as the current record; and the first maximum access threshold and the first real-time access amount d of the current record are added. j as the corresponding current access threshold and current access volume; and identify whether the current access volume exceeds the current access threshold, if not, immediately terminate this round of traversal and set the adaptation area identifier to the first area identifier corresponding to the current record, if exceeded, turn to the next matching area record and continue traversing until the traversal of the last matching area record is completed; and when this round of traversal is terminated or ended, identify whether the adaptation area identifier is empty; if the adaptation area identifier is empty, set the corresponding second management state to deny service, and set the corresponding second description text to the description text of the excess number of networked vehicles in the associated area, and the second management state and the second description text constitute the corresponding second management feedback; if the adaptation area identifier is not empty, set the corresponding second management state to allow service, and set the corresponding second description text to the corresponding adaptation area identifier, and the second management state and the second description text constitute the corresponding second management feedback; Step 89: Send the second management feedback obtained this time back to the current vehicle cloud gateway.

9. A device for executing the vehicle-cloud access management method according to any one of claims 1 to 8, characterized in that: The device includes: a general configuration setting and updating module, an electronic fence configuration setting and updating module and a vehicle-to-cloud access management module; The general configuration setting and updating module is used to create access management configuration information for the firewall of the Internet of Vehicles and record it as the corresponding first firewall configuration record; and count the total number of vehicle-cloud gateways of the Internet of Vehicles to obtain the corresponding total number of first gateways N; and create access management configuration information for each vehicle-cloud gateway based on the first firewall configuration record and the total number of the first gateways N and record it as the corresponding first gateway configuration record; and record the maximum service access bandwidth allocated by each service service end of the Internet of Vehicles to any connected vehicle as the corresponding first service single vehicle bandwidth; and regularly refresh the first firewall configuration record and all the first gateway configuration records based on the real-time access status of the firewall; and regularly refresh all the first gateway configuration records based on the real-time resource utilization status of all the vehicle-cloud gateways; The electronic fence configuration setting and updating module is used for recording the high-precision map of the overall management scope of the Internet of Vehicles as the corresponding first map when the overall management scope of the Internet of Vehicles is partitioned according to the electronic fence; and recording the circular area covered by each of the electronic fences on the first map as the corresponding first fence area; and counting the total number of the first fence areas to obtain the corresponding first area total number S; and creating access management configuration information for each of the first fence areas based on the first area total number S and recording it as the corresponding first area configuration record; and regularly refreshing all the first area configuration records by querying the electronic fence management system of the Internet of Vehicles; The vehicle-cloud access management module is used to confirm whether the overall management scope of the vehicle network is partitioned according to the electronic fence when receiving the first vehicle-cloud access management request sent by any of the vehicle-cloud gateways; if it is confirmed to be negative, the first vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record and the first service single-vehicle bandwidth, and the corresponding first management feedback is sent back to the current vehicle-cloud gateway; if it is confirmed to be positive, the second vehicle-cloud access management is performed according to the first vehicle-cloud access management request and the corresponding first gateway configuration record, the first area configuration record and the first service single-vehicle bandwidth, and the corresponding second management feedback is sent back to the current vehicle-cloud gateway.

10. An electronic device, characterized in that: include: memory, processors, and transceivers; The processor is used to couple with the memory, read and execute instructions in the memory, so as to implement the method according to any one of claims 1 to 8; The transceiver is coupled to the processor, and the processor controls the transceiver to send and receive messages.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and when the computer instructions are executed by a computer, the computer is enabled to execute the method according to any one of claims 1 to 8.

Images