Vehicle data safety management method and system, electronic equipment and storage medium

Abstract

The invention relates to a vehicle data safety management method and system, electronic equipment and a storage medium, and the management method comprises the steps: classifying vehicle data, adding position information, marking access data when the access data is received, the data flow condition of the vehicle data is obtained according to the data flow direction of the access data and the position information of the vehicle data, so that a user can transparently see the current situation of use of the data in the vehicle, and then compliance analysis is performed by combining the access data and different types of vehicle data to determine whether a violation event occurs or not. By monitoring the purpose and the flow direction of the access data and the vehicle data, other illegal collection behaviors of third parties are supervised. The legitimate rights and interests of the user data are effectively guaranteed, the vehicle data are finally stored in the storage space of the vehicle, only violation events are output, and the data security is improved.

Description

Technical Field

[0001] The present disclosure belongs to the field of data security technology, and in particular, relates to a vehicle data security management method, system, electronic device and storage medium. Background Art

[0002] Currently, users' perception of data is that companies disclose it to users through privacy policies, without a visual concept. Moreover, the management methods for data security in connected vehicles are relatively simple. For example, vehicle data is completely open, which means that users or criminals can use it unlimitedly, causing great impact on user privacy and even national security. Summary of the invention

[0003] To solve the above problems, the present disclosure provides a vehicle data security management method, system, electronic device and storage medium. The data flow of vehicle data is obtained according to the data flow direction of access data and the location information of vehicle data, so that users can transparently view the current status of data use in the vehicle. By monitoring the purpose and flow direction of access data and vehicle data, the vehicle data is finally stored in the storage space of the vehicle, and only illegal events are output to the outside, thereby improving data security.

[0004] In order to solve the above technical problems, the first aspect of the present invention provides a vehicle data security management method, the method comprising:

[0005] Respectively acquiring vehicle data at different locations on the vehicle, classifying the vehicle data according to data usage and adding location information;

[0006] When receiving access data, the access data is identified based on a pre-trained marking model, and the access type, access frequency, and access address of the access data are marked according to the identification result;

[0007] Classify and analyze the access type, access frequency and access address of each access data, and determine the data flow of key data in the vehicle data according to the location information;

[0008] Performing compliance analysis on the vehicle data in combination with the classification results of the access data and the vehicle data to determine whether a violation event occurs;

[0009] The vehicle data is stored in a storage space of the vehicle, and the violation event is output externally.

[0010] According to a preferred embodiment of the present invention, the step of respectively acquiring vehicle data at different positions on the vehicle includes:

[0011] The vehicle is provided with a main control node and branch nodes respectively arranged at the different positions;

[0012] The main control node and the branch node are both used to obtain the vehicle data;

[0013] According to a preferred embodiment of the present invention, storing the vehicle data in a storage space of the vehicle includes:

[0014] The main control node receives the vehicle data of each branch node and stores each vehicle data in a structured manner.

[0015] According to a preferred embodiment of the present invention, before classifying the vehicle data according to data usage and adding location information, the management method further includes:

[0016] Determine whether the vehicle data is ciphertext data, and when the vehicle data is ciphertext data, decrypt the vehicle data, classify it, and add location information.

[0017] According to a preferred embodiment of the present invention, the management method further comprises: generating a data compliance model based on preset data compliance requirements and preset data normal range;

[0018] The step of performing compliance analysis on the vehicle data in combination with the classification results of the access data and the vehicle data to determine whether a violation has occurred includes: detecting the access data and the vehicle data corresponding to different classification results according to the data compliance model to determine whether the vehicle data or the access data violates compliance rules; when the vehicle data or the access data violates compliance rules, determining that a violation has occurred and issuing an early warning.

[0019] According to a preferred embodiment of the present invention, the management method further comprises:

[0020] According to the interface requirements of the preset monitoring platform, warning information is generated based on the violation event and the vehicle data corresponding to the violation event and reported to the preset monitoring platform.

[0021] According to a preferred embodiment of the present invention, the training method of the labeling model includes:

[0022] Acquire multiple groups of historical access data, classify the historical access data according to data usage, and obtain access category, access frequency and access address of each group of the historical access data;

[0023] The labeling model is constructed and trained based on the historical access data and the access category, access frequency and access address of the historical access data.

[0024] In order to solve the above technical problems, the second aspect of the present invention provides a vehicle data security management system, the management system comprising:

[0025] A data acquisition module, used to respectively acquire vehicle data at different positions on the vehicle;

[0026] A data classification module, used to classify the vehicle data according to data usage and add location information;

[0027] A data marking module is used to identify the access data based on a pre-trained marking model when receiving the access data, and mark the access type, access frequency and access address of the access data according to the recognition result;

[0028] A data flow analysis module, used to classify and analyze the access type, access frequency and access address of each access data, and determine the data flow of key data in the vehicle data according to the location information;

[0029] A data compliance analysis module, configured to perform compliance analysis on the vehicle data in combination with the classification results of the access data and the vehicle data to determine whether a violation event occurs;

[0030] The data processing module is used to store the vehicle data in the storage space of the vehicle and output the violation event to the outside.

[0031] In order to solve the above technical problem, the third aspect of the present invention provides an electronic device, comprising:

[0032] Processor; and

[0033] A memory storing computer executable instructions, wherein when the computer executable instructions are executed, the processor executes the method described in any one of the above embodiments.

[0034] In order to solve the above technical problems, the fourth aspect of the present invention proposes a computer storage medium, wherein the computer storage medium stores one or more programs, and when the one or more programs are executed by a processor, the method described in any one of the above embodiments is implemented.

[0035] Compared with the prior art, the present disclosure has the following advantages: after obtaining the vehicle data, the present disclosure classifies the vehicle data and adds location information. When receiving the access data, the access data is identified through the marking model, and the access type, access frequency and access address of the access data are marked. The data flow of the vehicle data is obtained according to the data flow direction of the access data and the location information of the vehicle data, so that users can transparently view the current status of the use of in-vehicle data, and then conduct compliance analysis in combination with the access data and different categories of vehicle data to determine whether there is a violation event. By monitoring the purpose and flow of the access data and vehicle data, the illegal collection behavior of other third parties is supervised. The legitimate rights and interests of user data are effectively protected, and the vehicle data is finally stored in the storage space of the vehicle, and only the violation events are output externally, thereby improving data security.

[0036] Other features and advantages of the present disclosure will be described in the following description, and partly become apparent from the description, or be understood by implementing the present disclosure. The purpose and other advantages of the present disclosure can be realized and obtained by the structures pointed out in the description, claims and drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0038] Figure 1 A schematic diagram of a vehicle data security management method according to an embodiment of the present disclosure is shown;

[0039] Figure 2 A block diagram of a vehicle data security management system according to an embodiment of the present disclosure is shown;

[0040] Figure 3 A schematic diagram of the structure of an electronic device according to an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present disclosure.

[0042] The same reference numerals in the drawings represent the same or similar elements, components or parts, and thus the repeated description of the same or similar elements, components or parts may be omitted below. It should also be understood that although the first, second, third and other attributives representing the numbers may be used herein to describe various devices, elements, components or parts, these devices, elements, components or parts should not be limited by these attributives. In other words, these attributives are only used to distinguish one from another. For example, the first device may also be called the second device, but it does not deviate from the essential technical solution of the present invention. In addition, the terms "and / or" and "and / or" refer to all combinations including any one or more of the listed items.

[0043] See also Figure 1 , Figure 1 It is a flow chart of a vehicle data security management method provided by the present invention, such as Figure 1 As shown, the method includes:

[0044] S11. Obtain vehicle data at different locations on the vehicle respectively, classify the vehicle data according to data usage and add location information.

[0045] In this embodiment, this solution obtains vehicle data at different locations on the vehicle, classifies the vehicle data based on the usage of the vehicle data, and adds corresponding location information to each vehicle data to facilitate the system to understand the status of the data.

[0046] In this embodiment, vehicle data at different locations on the vehicle can be collected by TBOX devices, gateways, intelligent driving domain controllers and other devices set on the vehicle. TBOX devices refer to intelligent vehicle-mounted terminals, also known as Telematics BOX. It is an embedded system installed on the vehicle, which is connected to the background server through wireless communication technology to realize real-time transmission and remote control of vehicle data. The intelligent driving domain controller (Automated Driving Control Unit, ADCU) is a core component developed and designed specifically for vehicle intelligent driving systems. The intelligent driving domain controller receives data from multiple sensors (such as cameras, millimeter wave radars, lidars, and cloud data transmission V2X, etc.), as well as vehicle dynamic data (such as vehicle speed, pedal signals, etc.) obtained through VCU, supports all input customized control strategies and execution decisions, and outputs for driving status feedback, thereby executing various intelligent driving functions on the vehicle. Specifically, the vehicle is provided with a main control node and branch nodes respectively set at different locations; the main control node and the branch node are both used to obtain vehicle data. The branch node is the above-mentioned TBOX device, gateway, intelligent driving domain controller and other devices.

[0047] In this embodiment, the data usage of vehicle data includes: automobile regulatory data, data provided by vehicle manufacturers, and personal sensitive data. Different data will be used for different purposes, and different data will have different impacts on users. For example, automobile regulatory data is used to monitor various real-time data of automobiles, such as vehicle exhaust emissions, including emission types, concentrations, and emissions. Emission data helps to evaluate the environmental performance of vehicles and provide a basis for formulating emission standards; road test data, mileage, accident rates, etc. of autonomous driving vehicles. These data help to understand the safety and reliability of autonomous driving technology and provide a basis for the promotion of autonomous driving technology. The data provided by vehicle manufacturers can be data displayed on the vehicle dashboard, various types of vehicle status data displayed on the vehicle's central control screen, and data on vehicle driving status control. Personal sensitive data includes vehicle user names, monitoring data, cockpit data, and other data.

[0048] In this embodiment, it is determined whether the vehicle data is ciphertext data. If the vehicle data is ciphertext data, the vehicle data is decrypted and processed. When the branch node probe runs in the controller, the data at the entrance and exit will be monitored, and the current access data will be automatically recorded when it is plaintext. The access data will be classified according to the preset data classification library, such as supervision, vehicle-to-cloud communication service, and personal sensitive data. When the data passed is ciphertext data, the encryption and decryption interface in the controller needs to be called for parsing, and the data will be collected and classified after being parsed into plaintext.

[0049] In this embodiment, by adding location information to the vehicle data, the vehicle data can be traced back to determine the data flow of the vehicle data, allowing users to transparently view the current status of data usage and data flow in the vehicle.

[0050] S12. When access data is received, the access data is identified based on a pre-trained labeling model, and the access type, access frequency, and access address of the access data are labeled according to the identification result.

[0051] In this embodiment, the pre-trained labeling model can obtain multiple groups of historical access data, classify the historical access data according to the purpose of the data, and obtain the access category, access frequency and access address of each group of historical access data; construct and train the labeling model based on the historical access data and the access category, access frequency and access address of the historical access data. Specifically, for example, multiple groups of historical communication data are obtained; data structure processing is performed on each group of historical communication data to obtain the communication address, access frequency and service level of each group of historical communication data, and based on the preset classification strategy, the communication address is divided according to the access frequency to obtain the frequency level corresponding to the communication address; a preset labeling model is established based on the communication address, frequency level and access destination IP address or domain name. In this solution, historical communication data is access data, and access types include: data acquisition request, transmission data, etc.

[0052] In this embodiment, the development of each node is mainly to realize the collection of communication traffic, link the firewall function, and classify the destination addresses, which is similar to the firewall function in the network. The software module adopts a bypass deployment method to collect the communication port mirror traffic data, so as not to occupy the network bandwidth of the communication port, ensuring that the communication service is not affected.

[0053] S13. Classify and analyze the access type, access frequency and access address of each access data, and determine the data flow of key data in the vehicle data based on the location information.

[0054] In this embodiment, by classifying and analyzing the access type, access frequency and access address of the access data, the data acquisition and data transmission of each vehicle data are summarized. Specifically, the destination address of the access can be classified and analyzed, and screened into regulatory addresses, OEM cloud service addresses, and other addresses. Provide business support for later data applications. At this time, for addresses that are not in the preset range, they can be classified as suspicious addresses, which can be uploaded to the company's cloud platform for monitoring and analysis, and the vehicle-side analysis model can be continuously improved.

[0055] For example, for data transmission of sensitive information such as microphone permissions and camera permissions, the frequency and destination of access are generated. Let users understand the flow direction of the data they are concerned about. A panoramic view of data flow can also be generated. Dynamically display the actual data flow between controllers. Let users transparently view the current status of data usage in the car. According to design requirements, a refined query function can be provided to provide users with the data usage of each vehicle data.

[0056] After classifying and analyzing the data, you can clean and filter the data to generate data specific to the reporting function. Supports the generation of multiple types of reports, such as list reports, summary reports, matrix reports, etc., to meet the needs of different users and scenarios. These reports can display data in the form of tables, charts (such as bar charts, line charts, pie charts, etc.), dashboards, etc. Through charts, graphs, and dashboards, the reporting tool presents complex data in an intuitive and easy-to-understand form, helping users better understand and analyze data.

[0057] In this embodiment, based on the processed data, more sophisticated data services can be provided, such as data drilling: the report tool supports data drilling function, allowing users to drill down from summary data to detailed data, so as to have a deeper understanding of the reasons and rules behind the data. Report linkage: through the report linkage function, users can establish associations between multiple reports to achieve cross-report analysis and display of data. Decision suggestions: based on the results of data analysis, the report tool can provide users with decision suggestions or reference opinions to help users make more informed decisions.

[0058] S14. Perform compliance analysis on the vehicle data based on the classification results of the access data and the vehicle data to determine whether any violation occurs.

[0059] In this embodiment, the data early warning capability is the ability to make predictions and warnings in advance for possible data anomalies, risks or crises, etc. Especially in the big data environment, various data anomalies may indicate potential problems or risks. Timely warnings and taking corresponding measures can effectively reduce losses and ensure the smooth operation of the business.

[0060] In this embodiment, a data compliance model can be pre-built, and a data compliance model can be generated based on preset data compliance requirements and preset data normal ranges; specifically, data compliance requirements can be incorporated into the model, such as requirements for anonymization of off-board information, default non-collection of cockpit data, default in-vehicle processing requirements, and significant notification requirements, and integrated into the data compliance model. Combine the collected data with the IP address of the destination address of the transmission, and the data compliance function developed and designed by the OEM. Generate a data compliance model. Perform compliance analysis on vehicle data through the data compliance model to determine whether a violation has occurred. According to the data compliance model, access data and vehicle data corresponding to different classification results are detected to determine whether the vehicle data or access data violates the compliance rules. When the vehicle data or access data violates the compliance rules, a violation is determined and an early warning reminder is issued.

[0061] In this embodiment, warning rules can also be set. When vehicle data or access data violates the warning rules, it is determined that a violation has occurred. For example, it is defined under what circumstances a warning will be triggered. Warning rules are formulated based on business experience, including the normal range of data, abnormal thresholds, warning cycles, etc. When the data triggers the warning rules, the system needs to issue a warning notification to the owner in a timely manner. There are various ways to send warning notifications, including the owner's APP and the host pop-up message push method.

[0062] S15. The vehicle data is stored in the storage space of the vehicle, and the violation events are output externally.

[0063] In this embodiment, the vehicle data is stored in the vehicle's storage space, and only the violation events that have occurred are output to the outside. In order to fully protect the user's data security rights and interests, it is required to upload only the violation events that have occurred, and not upload the data of the specific violation events.

[0064] In this embodiment, to store data, it is necessary to divide an independent storage area on the host, so that the master node can receive the vehicle data of each branch node and store each vehicle data in a structured manner. Implementing structured storage on the vehicle side can effectively manage data access, performance scalability and security. It can effectively determine data fields, arrange them, and determine the relationship between data tables. It can minimize data duplication, thereby reducing storage pressure and improving data access efficiency. When performing structured storage, duplicate data is stored only once, and the address of the data is mapped to different data tables.

[0065] In this embodiment, considering the problem of storage space, the data storage time can be set, for example, the expired data is cleared in a rolling manner every 30 days.

[0066] In this embodiment, when outputting violation events to the outside, warning information can be generated based on the violation events and the vehicle data corresponding to the violation events according to the interface requirements of the preset monitoring platform and reported to the preset monitoring platform.

[0067] Specifically, when developing the master node module, the reporting interface protocol can be standardized and the supervision interface can be unified, which can lay the foundation for the national data security platform. When a violation is detected, the reporting function is activated and the synchronization status is sent to the data center of the regulatory department.

[0068] Specifically, the preset monitoring platform can be a national data security supervision platform or an enterprise data security supervision platform. The monitoring field requirements of the national monitoring platform need to include the company name, vehicle model name, event type, and violation records. Each company develops templates in accordance with regulatory requirements, releases them to each car company for execution, specifies implementation standards, and sets up a large monitoring screen. The OEM also has requirements for the monitoring fields, requiring the reporting of the internal and external codes and names of the vehicle, the vehicle VIN, the type of data security incident, and violation records. Two-way monitoring is carried out through the national monitoring platform and the enterprise supervision platform. Ensure vehicle-side data security.

[0069] In this embodiment, after obtaining the vehicle data, this solution classifies the vehicle data and adds location information. When receiving the access data, the access data is identified through the marking model, and the access type, access frequency and access address of the access data are marked. The data flow of the vehicle data is obtained according to the data flow direction of the access data and the location information of the vehicle data, so that users can transparently view the current status of the use of in-vehicle data, and then conduct compliance analysis in combination with the access data and different categories of vehicle data to determine whether there are any violations. By monitoring the purpose and flow of the access data and vehicle data, the illegal collection behavior of other third parties is supervised. The legitimate rights and interests of user data are effectively protected, and the vehicle data is finally stored in the storage space of the vehicle, and only the violations are output to the outside, thereby improving data security.

[0070] See also Figure 2 , Figure 2 This is a block diagram of a vehicle data security management system provided by the present invention, such as Figure 2 As shown, the management system includes: branch nodes and main control nodes. The branch nodes include: data acquisition module, data classification module and data marking module; the main control node includes: data acquisition module, data classification module, data marking module, data flow analysis module, data compliance analysis module and data processing module.

[0071] In this embodiment, the data acquisition module is used to respectively acquire vehicle data at different positions on the vehicle.

[0072] In this embodiment, the data classification module is used to classify vehicle data according to data usage and add location information.

[0073] In this embodiment, the data marking module is used to identify the access data based on a pre-trained marking model when receiving the access data, and mark the access type, access frequency and access address of the access data according to the recognition result.

[0074] In this embodiment, the data flow analysis module is used to classify and analyze the access type, access frequency and access address of each access data, and determine the data flow of key data in the vehicle data according to the location information.

[0075] In this embodiment, the data compliance analysis module is used to perform compliance analysis on the vehicle data in combination with the classification results of the access data and the vehicle data to determine whether a violation event occurs.

[0076] In this embodiment, the data processing module is used to store vehicle data in the storage space of the vehicle and output violation events to the outside.

[0077] In this embodiment, the data processing module includes a data storage unit, which is used to receive the vehicle data of each branch node and store each vehicle data in a structured manner.

[0078] In this embodiment, both the branch node and the main control node include: a data decryption module, which is used to determine whether the vehicle data is ciphertext data, and decrypt the vehicle data when the vehicle data is ciphertext data.

[0079] In this embodiment, the main control node also includes: a first model training module, which is used to generate a data compliance model based on preset data compliance requirements and preset data normal range.

[0080] In this embodiment, the data compliance analysis module is specifically used to detect access data and vehicle data corresponding to different classification results according to the data compliance model to determine whether the vehicle data or access data violates the compliance rules. When the vehicle data or access data violates the compliance rules, it is determined that a violation event has occurred.

[0081] In this embodiment, the data processing module includes a data warning unit, which is used to issue warning reminders for violation events. According to the interface requirements of the preset monitoring platform, warning information is generated based on the violation events and the vehicle data corresponding to the violation events and reported to the preset monitoring platform.

[0082] In this embodiment, both the branch node and the main control node include: a second model training module, which is used to obtain multiple groups of historical access data, classify the historical access data according to data usage, and obtain the access category, access frequency and access address of each group of historical access data; based on the historical access data and the access category, access frequency and access address of the historical access data, a labeling model is constructed and trained.

[0083] like Figure 3As shown, an embodiment of the present invention provides an electronic device, including a processor 1110, a communication interface 1120, a memory 1130 and a communication bus 1140, wherein the processor 1110, the communication interface 1120, and the memory 1130 communicate with each other through the communication bus 1140;

[0084] Memory 1130, used for storing computer programs;

[0085] The processor 1110 is configured to implement any of the above determination methods when executing a program stored in the memory 1130 .

[0086] In the electronic device provided by the embodiment of the present invention, the processor 1110 obtains vehicle data at different locations on the vehicle by executing the program stored in the memory 1130, classifies the vehicle data according to the data purpose and adds location information; when receiving access data, the access data is identified based on a pre-trained marking model, and the access type, access frequency and access address of the access data are marked according to the identification result; the access type, access frequency and access address of each access data are classified and analyzed, and the data flow of key data in the vehicle data is determined according to the location information; the vehicle data is subjected to compliance analysis based on the classification results of the access data and the vehicle data to determine whether a violation event occurs; the vehicle data is stored in the storage space of the vehicle, and the violation event is output to the outside.

[0087] The communication bus 1140 mentioned in the above electronic device can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus 1140 can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0088] The communication interface 1120 is used for communication between the above electronic device and other devices.

[0089] The memory 1130 may include a random access memory 1130 (RAM), or may include a non-volatile memory 1130 (non-volatile memory), such as at least one disk memory 1130. Optionally, the memory 1130 may also be at least one storage device located away from the processor 1110.

[0090] The above-mentioned processor 1110 can be a general-purpose processor 1110, including a central processing unit 1110 (CPU), a network processor 1110 (NP), etc.; it can also be a digital signal processor 1110 (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.

[0091] An embodiment of the present invention provides a computer-readable storage medium, which stores one or more programs. The one or more programs can be executed by one or more processors 1110 to implement the management method of any of the above embodiments.

[0092] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function according to the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website site, a computer, a server or a data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or a data center that includes one or more available media integrated. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk SolidStateDisk (SSD)), etc.

[0093] Although the present disclosure has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present disclosure.

Claims

1. A vehicle data security management method, characterized in that: The management method comprises: Respectively acquiring vehicle data at different locations on the vehicle, classifying the vehicle data according to data usage and adding location information; When receiving access data, the access data is identified based on a pre-trained marking model, and the access type, access frequency, and access address of the access data are marked according to the identification result; Classify and analyze the access type, access frequency and access address of each access data, and determine the data flow of key data in the vehicle data according to the location information; Performing compliance analysis on the vehicle data in combination with the classification results of the access data and the vehicle data to determine whether a violation event occurs; The vehicle data is stored in a storage space of the vehicle, and the violation event is output externally.

2. The management method according to claim 1, characterized in that: The step of respectively acquiring vehicle data at different positions on the vehicle includes: The vehicle is provided with a main control node and branch nodes respectively arranged at the different positions; The main control node and the branch node are both used to obtain the vehicle data.

3. The management method according to claim 2, characterized in that: The storing the vehicle data in a storage space of the vehicle includes: The main control node receives the vehicle data of each branch node and stores each vehicle data in a structured manner.

4. The management method according to claim 1, characterized in that: Before classifying the vehicle data according to data usage and adding location information, the management method further includes: Determine whether the vehicle data is ciphertext data, and when the vehicle data is ciphertext data, decrypt the vehicle data, classify it, and add location information.

5. The management method according to claim 1, characterized in that: The management method further includes: generating a data compliance model based on preset data compliance requirements and preset data normal ranges; The step of performing compliance analysis on the vehicle data in combination with the classification results of the access data and the vehicle data to determine whether a violation has occurred includes: detecting the access data and the vehicle data corresponding to different classification results according to the data compliance model to determine whether the vehicle data or the access data violates compliance rules; when the vehicle data or the access data violates compliance rules, determining that a violation has occurred and issuing an early warning.

6. The management method according to claim 5, characterized in that: The management method also includes: According to the interface requirements of the preset monitoring platform, warning information is generated based on the violation event and the vehicle data corresponding to the violation event and reported to the preset monitoring platform.

7. The management method according to any one of claims 1 to 6, characterized in that: The training method of the labeling model includes: Acquire multiple groups of historical access data, classify the historical access data according to data usage, and obtain access category, access frequency and access address of each group of the historical access data; The labeling model is constructed and trained based on the historical access data and the access category, access frequency and access address of the historical access data.

8. A vehicle data security management system, characterized in that: The management system comprises: A data acquisition module, used to respectively acquire vehicle data at different positions on the vehicle; A data classification module, used to classify the vehicle data according to data usage and add location information; A data marking module is used to identify the access data based on a pre-trained marking model when receiving the access data, and mark the access type, access frequency and access address of the access data according to the recognition result; A data flow analysis module, used to classify and analyze the access type, access frequency and access address of each access data, and determine the data flow of key data in the vehicle data according to the location information; A data compliance analysis module, configured to perform compliance analysis on the vehicle data in combination with the classification results of the access data and the vehicle data to determine whether a violation event occurs; The data processing module is used to store the vehicle data in the storage space of the vehicle and output the violation event to the outside.

9. An electronic device, characterized in that: include: processor; as well as A memory storing computer executable instructions which, when executed, cause the processor to perform the method according to any one of claims 1-7.

10. A computer storage medium, characterized in that: in, The computer storage medium stores one or more programs, and when the one or more programs are executed by a processor, the method of any one of claims 1 to 7 is implemented.

Images