Novel intelligent connected automobile symmetric encryption method

Abstract

The invention discloses a novel intelligent networked automobile symmetric encryption method, and belongs to the technical field of automobile data security encryption. In the method, a multi-operator key generation technology is adopted, a plurality of key operators are subjected to combined operation, and a communication key finally used for encryption and decryption is generated, so that the complexity and security of the key are effectively improved; and an attacker is difficult to crack. Besides, a dynamic generation and updating mechanism of the secret key can dynamically generate a new secret key according to information such as the driving mileage, the real-time time and the sensor data of the vehicle, and the secret key is updated when a specific event is triggered, so that the situation that the fixed secret key is cracked by an attacker after being used for a long time is effectively prevented. And meanwhile, a hardware security module or an encryption storage technology is adopted, so that secure storage of the secret key in the vehicle is ensured, illegal reading or tampering is prevented, and a solid foundation is provided for communication security of the intelligent networked vehicle.

Description

Technical Field

[0001] The present invention belongs to the technical field of automobile data security encryption, and specifically relates to a novel symmetric encryption method for intelligent networked automobiles. Background Art

[0002] With the rapid development of science and technology, intelligent connected vehicles are gradually becoming an important part of modern transportation. Intelligent connected vehicles achieve efficient interaction between vehicles and the external environment by integrating advanced sensor technology, communication technology and artificial intelligence algorithms. These vehicles can not only perceive the surrounding road conditions, vehicles and pedestrian information, but also communicate with other vehicles, infrastructure and cloud servers in real time, providing drivers with a safer, more convenient and comfortable travel experience.

[0003] However, the extensive communication of intelligent connected vehicles also brings a series of security challenges. Since vehicles need to frequently exchange data with external entities, such as sending vehicle status information and receiving navigation instructions, these communication processes are vulnerable to threats such as hacker attacks, data tampering and privacy leakage if there is not enough security protection. Especially in vehicle-to-vehicle (V2V), vehicle-to-infrastructure (V2I) and vehicle-to-cloud (V2C) communications, a large amount of sensitive information is transmitted in the network, which puts extremely high demands on communication security.

[0004] Symmetric encryption algorithms play an important role in the communication security of intelligent connected vehicles. This encryption method has the advantages of fast encryption and decryption speed and high efficiency, and is very suitable for processing large amounts of real-time data communications in intelligent connected vehicles. In addition, symmetric encryption algorithms are relatively simple and easy to implement in vehicle systems, and can provide effective data encryption protection without significantly increasing the system burden.

[0005] Although symmetric encryption algorithms have many advantages, they also face some technical challenges when applied to intelligent connected vehicles. For example, key management and distribution is a key issue, and how to ensure that keys are securely stored and transmitted between different components inside the vehicle and between the vehicle and external communication entities is a challenge that needs to be solved urgently. Summary of the invention

[0006] The purpose of the present invention is to provide a novel symmetric encryption method for intelligent connected vehicles in order to solve the above-mentioned problems.

[0007] The technical solution adopted by the present invention is as follows: a new type of symmetric encryption method for intelligent networked vehicles, comprising the following steps:

[0008] S1: Generate and distribute keys, including:

[0009] Multi-operator key generation: When the vehicle is offline, the first key operator is configured for each controller, and the second key operator is used to distribute the operator. The communication key of the vehicle is determined by the first key operator and the second key operator.

[0010] Dynamic key generation and update: Dynamically generate keys or regularly update keys using dynamic parameters or events of the vehicle;

[0011] Secure key storage: Use hardware security modules or other secure storage chips to encrypt and store keys to prevent illegal reading or tampering;

[0012] S2: Encryption algorithm selection and optimization: select appropriate algorithms according to application scenarios and security requirements, optimize algorithm implementation codes, and use hardware acceleration technology to improve the algorithm's running speed in the vehicle system;

[0013] S3: Set up real-time security, use algorithm optimization, pipeline technology, and cache technology to reduce data processing delays and optimize communication protocols; use encryption mode to reduce the impact of encryption on communication delays;

[0014] S4: Collaborate with other security technologies to securely exchange symmetric keys using asymmetric encryption algorithms, and then use symmetric keys to encrypt data for transmission. While encrypting data, it also encrypts and verifies the identity information of both parties in the communication.

[0015] S5: Make settings to improve anti-attack capabilities, prevent side-channel attacks, and study symmetric encryption algorithms that are resistant to quantum computing;

[0016] S6: Perform data block encryption: divide a large amount of data into smaller data blocks and encrypt them separately;

[0017] Perform data preprocessing and encryption fusion: preprocess the data before encrypting it to reduce data redundancy;

[0018] S7: Integrate communication protocols with encryption, design communication protocols specifically for intelligent connected vehicles, and tightly integrate symmetric encryption algorithms into the protocol;

[0019] Combine symmetric encryption algorithms with identity authentication technology to achieve data encryption and identity authentication during the communication process, ensuring that the data source is reliable;

[0020] S8: Perform vehicle communication security encryption processing;

[0021] S9: Perform security encryption processing on the vehicle system;

[0022] S10: Perform data storage security encryption processing: Vehicle local data storage encryption: Encrypt important data stored locally in the vehicle; Encrypt data in external storage devices;

[0023] S11: Perform identity authentication and authorization, encrypt and transmit and verify the user's identity information to prevent the identity information from being stolen or misused; encrypt and transmit and verify the identity information of the vehicle and service provider to ensure the security and legality of the interaction.

[0024] In a preferred embodiment, in step S1, during the multi-operator key generation process:

[0025] The first key operator is generated by the vehicle manufacturer or the security certification center when the vehicle is offline and is stored in the vehicle's hardware security module;

[0026] The second key operator is produced by a time-based method: a timestamp is generated using the real-time clock inside the vehicle and used as part of the second key operator;

[0027] The communication key is generated by combining the first key operator and the second key operator through an exclusive OR operation algorithm;

[0028] During the dynamic key generation and update process, the key update frequency is adjusted according to security requirements and resource constraints, and is updated every 24 hours or every time the vehicle is started; the new key is generated in the same way as the initial key generation; the key Diffie-Hellman protocol is used to ensure the security of key updates;

[0029] The key is encrypted and stored, encrypted using the AES algorithm and decrypted using an independent key; a redundant backup mechanism is used to store the key in multiple locations, and consistency checks are performed regularly to prevent key loss; a fault-tolerant mechanism is used, using error correction code technology to ensure that the key can be recovered even if part of the storage device is damaged.

[0030] In a preferred embodiment, in step S2, the algorithm optimization specifically includes: optimizing the algorithm implementation code, using bit operations and shift operations instead of multiplication and division operations; using loop unrolling and loop optimization techniques; using assembly language or embedded assembly code to implement key algorithms; using hardware acceleration technology, using a dedicated encryption chip or FPGA accelerator.

[0031] In a preferred embodiment, in step S3, the stream encryption mode uses a pseudo-random number generator algorithm for encryption, specifically including:

[0032] Initialize the PRNG using an initial key and initialization vector as a seed;

[0033] PRNG generates a pseudo-random key stream according to a specific algorithm;

[0034] Perform bit-by-bit XOR operation on the plaintext data stream and the pseudo-random key stream to generate a ciphertext data stream.

[0035] In a preferred embodiment, in step S4, the combination with asymmetric encryption specifically includes:

[0036] Generate a key exchange key using the asymmetric encryption RSA algorithm, and use the key exchange key to encrypt the symmetric key;

[0037] Use digital signature technology to sign data packets to ensure data integrity and authenticity;

[0038] Collaboration with identity authentication technology includes:

[0039] Use digital certificate technology to authenticate vehicles and service providers;

[0040] Use mutual authentication to ensure both parties in the communication are authenticated.

[0041] In a preferred embodiment, in step S5, preventing side channel attacks specifically includes:

[0042] Use masking technology to mix the calculation results of the encryption algorithm with random numbers to prevent attackers from obtaining key information by analyzing power consumption and electromagnetic radiation physical characteristics;

[0043] Use randomization technology to randomize the input data of the encryption algorithm to prevent attackers from obtaining key information by analyzing data patterns;

[0044] Physically protect the hardware security module to prevent attackers from obtaining key information through physical means;

[0045] Defending against the threat of quantum computing includes:

[0046] Research on symmetric encryption algorithms that are resistant to quantum computing and encryption algorithms based on lattice cryptography;

[0047] Develop new encryption technologies in combination with symmetric encryption algorithms and use quantum key distribution technology to transmit symmetric keys.

[0048] In a preferred embodiment, in step S6, the data block encryption selects a suitable block size according to the data type and size. For text data, a block size of 1KB is used; for image data, a block size of 4KB is used; and each data block is encrypted using an independent key.

[0049] In a preferred embodiment, in step S7, the encryption mechanism in the customized communication protocol includes:

[0050] Define the format of communication data, including data type, data length, and encryption method;

[0051] Define the key negotiation and exchange process to ensure key security;

[0052] Define the location and method of data encryption, encrypting at the data sender and decrypting at the data receiver;

[0053] The integration of encryption and identity authentication uses digital signature technology to sign encrypted data packets to ensure the integrity and authenticity of the data; and uses digital certificate technology to authenticate the identities of both communicating parties.

[0054] In a preferred embodiment, the step S8 specifically includes:

[0055] Vehicle-to-vehicle communication encryption uses a key exchange protocol based on a symmetric encryption algorithm to ensure the safe exchange of keys between vehicles; encrypt sensitive information such as sensor data and control instructions exchanged between vehicles;

[0056] Encryption of vehicle-infrastructure communication: Use a key exchange protocol based on a symmetric encryption algorithm to ensure secure key exchange between vehicles and infrastructure; encrypt sensitive traffic and navigation information exchanged between vehicles and infrastructure;

[0057] Vehicle-to-cloud communication encryption: Use a key exchange protocol based on an asymmetric encryption algorithm to ensure secure key exchange between the vehicle and the cloud; encrypt vehicle status data and user personal information sensitive information exchanged between the vehicle and the cloud.

[0058] In a preferred embodiment, the step S9 specifically includes:

[0059] On-board electronic control unit communication encryption encrypts the communication data between ECUs to prevent malware from attacking the vehicle system by tampering with the communication data between ECUs;

[0060] Use independent keys to encrypt communications between each ECU, preventing attackers from attacking the entire vehicle system by cracking a single key;

[0061] Security processing of in-vehicle software updates: Encrypt software update packages to ensure the integrity and security of update packages; use digital signature technology to sign software update packages to prevent update packages from being tampered with or maliciously implanted with code;

[0062] Security processing of in-vehicle infotainment system: Encrypt user data in the in-vehicle infotainment system, including user personal information and music playlists; use a secure user authentication mechanism to prevent illegal users from accessing the in-vehicle infotainment system.

[0063] In summary, due to the adoption of the above technical solution, the beneficial effects of the present invention are:

[0064] 1. In the present invention, by adopting multi-operator key generation technology, multiple key operators are combined to generate the communication key used for encryption and decryption, which effectively increases the complexity and security of the key and makes it difficult for attackers to crack it. In addition, the dynamic generation and update mechanism of the key can dynamically generate new keys based on the vehicle's mileage, real-time time, sensor data and other information, and update the key when a specific event is triggered, effectively preventing the long-term use of fixed keys from being cracked by attackers. At the same time, the use of hardware security modules or encrypted storage technology ensures the safe storage of keys inside the vehicle to prevent illegal reading or tampering, thereby providing a solid foundation for the communication security of intelligent connected vehicles.

[0065] 2. In the present invention, a lightweight design is adopted to minimize the consumption and delay of computing resources while ensuring the encryption strength, so that it can run efficiently in the vehicle system. At the same time, the application of parallel encryption technology uses a multi-core processor or a distributed computing system to divide the data into multiple blocks, and encrypts the data on multiple processor cores or computing nodes at the same time, which significantly improves the speed and efficiency of encryption and meets the real-time requirements of intelligent networked vehicles. In addition, by optimizing the communication protocol and encryption mode, and adopting pipeline technology, cache technology, etc., the impact of encryption on communication delay is further reduced, ensuring the smooth progress of real-time communication.

[0066] 3. In the present invention, not only the encryption efficiency and real-time performance are emphasized, but also a strong anti-attack capability is possessed. By optimizing the hardware implementation and adopting techniques such as masking and randomization, the defense capability against side channel attacks is effectively improved, preventing attackers from obtaining key information by analyzing the physical properties of the encryption system. In addition, considering the potential threat of quantum computing technology to traditional encryption algorithms, the new symmetric encryption algorithm is also actively exploring anti-quantum computing solutions to ensure future communication security. At the same time, the method also closely cooperates with other security technologies, such as combining with asymmetric encryption algorithms to securely exchange symmetric keys; combining with identity authentication technology to perform identity authentication while encrypting data to prevent illegal user access and data tampering. Through these measures, the new symmetric encryption method for intelligent connected vehicles provides all-round protection for the communication security of intelligent connected vehicles. BRIEF DESCRIPTION OF THE DRAWINGS

[0067] Figure 1 It is a schematic diagram of the process principle of the present invention. DETAILED DESCRIPTION

[0068] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0069] Reference Figure 1 ,

[0070] Example:

[0071] A novel symmetric encryption method for intelligent connected vehicles includes the following steps:

[0072] S1: Generate and distribute keys, including:

[0073] Multi-operator key generation: When the vehicle is offline, the first key operator is configured for each controller. When the operator is subsequently distributed, the operation is performed based on the second key operator. The vehicle's communication key is determined by the first key operator and the second key operator. Increase the complexity and security of the key to prevent attackers from cracking it;

[0074] Dynamic key generation and update: Use the vehicle's dynamic parameters or events (such as mileage, real-time time, sensor data, etc.) to dynamically generate keys or regularly update keys to improve key security and timeliness;

[0075] Secure key storage: Use hardware security modules (HSM) or other secure storage chips to encrypt and store keys to prevent illegal reading or tampering. Use redundant backup and fault tolerance mechanisms to prevent key loss.

[0076] S2: Encryption algorithm selection and optimization: select appropriate algorithms according to application scenarios and security requirements, optimize algorithm implementation codes, and use hardware acceleration technology (such as encryption chips) to improve the algorithm's running speed in the vehicle system;

[0077] S3: Set up real-time guarantee, adopt algorithm optimization, pipeline technology, cache technology, etc., reduce data processing delay, and optimize communication protocol;

[0078] Use efficient encryption modes (such as stream encryption mode) to reduce the impact of encryption on communication delays;

[0079] S4: Collaborative processing with other security technologies, using asymmetric encryption algorithms to securely exchange symmetric keys, and then using symmetric keys to encrypt data transmission. While encrypting data, the identity information of both parties in communication is encrypted and verified to prevent illegal user access and data tampering;

[0080] S5: Make settings to improve anti-attack capabilities, prevent side-channel attacks, and study symmetric encryption algorithms that are resistant to quantum computing to improve communication security;

[0081] S6: Perform data block encryption: Divide a large amount of data into smaller data blocks and encrypt them separately to improve encryption parallelism and efficiency, and prevent partial data blocks from being damaged and affecting overall security;

[0082] Data preprocessing and encryption fusion: preprocess the data (such as data compression, encoding conversion, data cleaning, etc.) before encryption to reduce data redundancy and improve encryption efficiency and security;

[0083] S7: Integrate communication protocols with encryption, design communication protocols specifically for intelligent connected vehicles, and tightly integrate symmetric encryption algorithms into the protocols to ensure communication data security;

[0084] Combine symmetric encryption algorithms with identity authentication technology to achieve data encryption and identity authentication during the communication process, ensuring that the data source is reliable;

[0085] S8: Car communication security encryption processing:

[0086] S9: Carry out security encryption processing of the vehicle system:

[0087] Set up vehicle electronic control unit (ECU) communication encryption: Encrypt communication data between ECUs to prevent malware from attacking vehicle systems.

[0088] Set up in-vehicle software update (OTA) security: Encrypt software update packages to ensure the integrity and security of update packages.

[0089] Set up in-vehicle infotainment system security: Encrypt user data in the in-vehicle infotainment system to protect user privacy and information security;

[0090] S10: Perform data storage security encryption processing: Vehicle local data storage encryption: Encrypt important data stored locally in the vehicle to prevent unauthorized access and leakage; encrypt data in external storage devices to ensure the security of data exchange;

[0091] S11: Perform identity authentication and authorization, encrypt and transmit the user's identity information and verify it to prevent the identity information from being stolen or used fraudulently. Encrypt and transmit the identity information of the vehicle and service provider and verify it to ensure the security and legality of the interaction.

[0092] In step S1, during the process of generating the multi-operator key:

[0093] The first key operator is generated by the vehicle manufacturer or the security certification center when the vehicle rolls off the production line and is stored in the vehicle's hardware security module (HSM).

[0094] The second key operator is generated in a variety of ways, for example:

[0095] Time-based: A timestamp is generated using the vehicle's internal real-time clock and used as part of the second key operator.

[0096] Event-based: When a specific event occurs in the vehicle (for example, ignition start, GPS positioning update, etc.), the generation of a new second key operator is triggered.

[0097] Based on vehicle parameters: Using the vehicle's sensor data (e.g., vehicle speed, steering wheel angle, etc.) as input, a second key operator is generated through a hash function.

[0098] The communication key is generated by combining the first key operator and the second key operator through a specific algorithm (for example, XOR operation) to ensure the uniqueness and security of the key;

[0099] During the dynamic key generation and update process:

[0100] The key update frequency can be adjusted according to security requirements and resource limitations, for example, once every 24 hours or every time the vehicle is started.

[0101] The generation of new keys can be similar to the initial key generation, but it is necessary to ensure that there is no correlation between the new keys and the old keys.

[0102] Key update protocols, such as the Diffie-Hellman protocol, can be used to ensure the security of key updates.

[0103] During the secure storage of keys:

[0104] Use HSM or other secure storage chips to store keys and ensure that only authorized software and hardware can access these chips.

[0105] The key is stored in an encrypted form, for example, the key is encrypted using an AES algorithm and is decrypted using a separate key.

[0106] A redundant backup mechanism is used to store keys in multiple locations and to perform consistency checks regularly to prevent key loss.

[0107] Use fault tolerance mechanisms, such as error-correcting code technology, to ensure that keys can be recovered even if part of the storage device is damaged

[0108] In step S2, the algorithm optimization specifically includes:

[0109] Optimize the algorithm implementation code, for example, use bit operations and shift operations instead of multiplication and division operations to reduce the amount of calculation.

[0110] Loop unrolling and loop optimization techniques are used to improve the execution efficiency of the algorithm.

[0111] Use assembly language or inline assembly code to implement key algorithms to further improve execution efficiency.

[0112] Adopt hardware acceleration technology and use dedicated encryption chips or FPGA accelerators to improve the execution speed of the algorithm.

[0113] In step S3, the stream encryption mode uses a pseudo-random number generator algorithm for encryption, specifically including:

[0114] Initialize the PRNG using an initial key and initialization vector (IV) as a seed.

[0115] PRNG generates a pseudo-random key stream according to a specific algorithm.

[0116] Perform bit-by-bit XOR operation on the plaintext data stream and the pseudo-random key stream to generate a ciphertext data stream.

[0117] In step S4, the combination with asymmetric encryption specifically includes:

[0118] Use the asymmetric encryption RSA algorithm to generate a key exchange key, and use the key exchange key to encrypt the symmetric key.

[0119] Use digital signature technology to sign data packets to ensure data integrity and authenticity.

[0120] Collaboration with identity authentication technology includes:

[0121] Use digital certificate technology to authenticate vehicles and service providers.

[0122] Use mutual authentication to ensure both parties in the communication are authenticated.

[0123] In step S5, preventing side channel attacks specifically includes:

[0124] Masking technology is used to mix the calculation results of the encryption algorithm with random numbers to prevent attackers from obtaining key information by analyzing physical properties such as power consumption and electromagnetic radiation.

[0125] Use randomization technology to randomize the input data of the encryption algorithm to prevent attackers from obtaining key information by analyzing data patterns.

[0126] Physically protect the hardware security module to prevent attackers from obtaining key information through physical means.

[0127] Defending against the threat of quantum computing includes:

[0128] Research on symmetric encryption algorithms that are resistant to quantum computing and encryption algorithms based on lattice cryptography.

[0129] Develop new encryption techniques to be combined with symmetric encryption algorithms, for example, using quantum key distribution technology to transmit symmetric keys.

[0130] In step S6, the data block encryption selects a suitable block size according to the data type and size. For example, for text data, a block size of 1KB can be used; for image data, a block size of 4KB can be used. Each data block is encrypted using an independent key to prevent partial data blocks from being damaged and affecting overall security.

[0131] In step S7, the encryption mechanism in the customized communication protocol includes:

[0132] Define the format of communication data, including data type, data length, encryption method, etc.

[0133] Define the key negotiation and exchange process to ensure key security.

[0134] Define where and how data is encrypted, for example, encryption at the sender and decryption at the receiver.

[0135] Integration of encryption and identity authentication uses digital signature technology to sign encrypted data packets to ensure the integrity and authenticity of the data. Digital certificate technology is used to authenticate the identities of both parties in communication.

[0136] The step S8 specifically includes:

[0137] Vehicle-to-vehicle (V2V) communication encryption uses a key exchange protocol based on a symmetric encryption algorithm to ensure that keys can be exchanged securely between vehicles. Sensitive information such as sensor data and control commands exchanged between vehicles is encrypted.

[0138] Vehicle-to-Infrastructure (V2I) communication encryption: Use a key exchange protocol based on a symmetric encryption algorithm to ensure that keys can be securely exchanged between vehicles and infrastructure. Encrypt sensitive information such as traffic information and navigation information exchanged between vehicles and infrastructure.

[0139] Vehicle-to-Cloud (V2C) communication encryption: Use a key exchange protocol based on an asymmetric encryption algorithm to ensure that keys can be securely exchanged between the vehicle and the cloud. Encrypt sensitive information such as vehicle status data and user personal information exchanged between the vehicle and the cloud.

[0140] The step S9 specifically includes:

[0141] On-board electronic control unit (ECU) communication encryption encrypts the communication data between ECUs to prevent malware from attacking the vehicle system by tampering with the communication data between ECUs.

[0142] The communication between each ECU is encrypted using independent keys, preventing attackers from attacking the entire vehicle system by cracking one key.

[0143] In-vehicle software update security processing: Encrypt the software update package to ensure the integrity and security of the update package. Use digital signature technology to sign the software update package to prevent the update package from being tampered with or maliciously implanted code.

[0144] In-vehicle infotainment system security processing: Encrypt user data in the in-vehicle infotainment system, such as user personal information, music playlists, etc. Use a secure user authentication mechanism to prevent unauthorized users from accessing the in-vehicle infotainment system.

[0145] In the present invention, by adopting multi-operator key generation technology, multiple key operators are combined to generate the communication key used for encryption and decryption, which effectively increases the complexity and security of the key and makes it difficult for attackers to crack it. In addition, the dynamic generation and update mechanism of the key can dynamically generate new keys based on the vehicle's mileage, real-time time, sensor data and other information, and update the key when a specific event is triggered, effectively preventing the long-term use of fixed keys from being cracked by attackers. At the same time, the use of hardware security modules or encrypted storage technology ensures the safe storage of keys inside the vehicle to prevent illegal reading or tampering, thereby providing a solid foundation for the communication security of intelligent connected vehicles.

[0146] In the present invention, a lightweight design is adopted to minimize the consumption and delay of computing resources while ensuring the encryption strength, so that it can run efficiently in the vehicle system. At the same time, the application of parallel encryption technology uses a multi-core processor or a distributed computing system to divide the data into multiple blocks, and encrypts the data on multiple processor cores or computing nodes at the same time, which significantly improves the speed and efficiency of encryption and meets the real-time requirements of intelligent networked vehicles. In addition, by optimizing the communication protocol and encryption mode, and adopting pipeline technology, cache technology, etc., the impact of encryption on communication delay is further reduced, ensuring the smooth progress of real-time communication.

[0147] In the present invention, not only the encryption efficiency and real-time performance are emphasized, but also a strong anti-attack capability is possessed. By optimizing the hardware implementation and adopting techniques such as masking and randomization, the defense capability against side channel attacks is effectively improved, preventing attackers from obtaining key information by analyzing the physical properties of the encryption system. In addition, considering the potential threat of quantum computing technology to traditional encryption algorithms, the new symmetric encryption algorithm is also actively exploring anti-quantum computing solutions to ensure future communication security. At the same time, the method also closely cooperates with other security technologies, such as combining with asymmetric encryption algorithms to securely exchange symmetric keys; combining with identity authentication technology to perform identity authentication while encrypting data to prevent illegal user access and data tampering. Through these measures, the new symmetric encryption method for intelligent connected vehicles provides all-round protection for the communication security of intelligent connected vehicles.

[0148] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the term "comprise" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0149] The above description enables those skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A novel symmetric encryption method for intelligent connected vehicles, characterized in that: The steps include: S1: Generate and distribute keys, including: Multi-operator key generation: When the vehicle is offline, the first key operator is configured for each controller, and the second key operator is used to distribute the operator. The communication key of the vehicle is determined by the first key operator and the second key operator. Dynamic key generation and update: Dynamically generate keys or regularly update keys using dynamic parameters or events of the vehicle; Secure key storage: Use hardware security modules or other secure storage chips to encrypt and store keys to prevent illegal reading or tampering; S2: Encryption algorithm selection and optimization: select appropriate algorithms according to application scenarios and security requirements, optimize algorithm implementation codes, and use hardware acceleration technology to improve the algorithm's running speed in the vehicle system; S3: Set up real-time security, use algorithm optimization, pipeline technology, and cache technology to reduce data processing delays and optimize communication protocols; use encryption mode to reduce the impact of encryption on communication delays; S4: Collaborate with other security technologies to securely exchange symmetric keys using asymmetric encryption algorithms, and then use symmetric keys to encrypt data for transmission. While encrypting data, it also encrypts and verifies the identity information of both parties in the communication. S5: Make settings to improve anti-attack capabilities, prevent side-channel attacks, and study symmetric encryption algorithms that are resistant to quantum computing; S6: Perform data block encryption: divide a large amount of data into smaller data blocks and encrypt them separately; Perform data preprocessing and encryption fusion: preprocess the data before encrypting it to reduce data redundancy; S7: Integrate communication protocols with encryption, design communication protocols specifically for intelligent connected vehicles, and tightly integrate symmetric encryption algorithms into the protocol; Combine symmetric encryption algorithms with identity authentication technology to achieve data encryption and identity authentication during the communication process, ensuring that the data source is reliable; S8: Perform vehicle communication security encryption processing; S9: Perform security encryption processing on the vehicle system; S10: Perform data storage security encryption processing: Vehicle local data storage encryption: Encrypt important data stored locally in the vehicle; Encrypt data in external storage devices; S11: Perform identity authentication and authorization, encrypt and transmit and verify the user's identity information to prevent the identity information from being stolen or misused; encrypt and transmit and verify the identity information of the vehicle and service provider to ensure the security and legality of the interaction.

2. A novel symmetric encryption method for intelligent connected vehicles as claimed in claim 1, characterized in that: In step S1, during the process of generating the multi-operator key: The first key operator is generated by the vehicle manufacturer or the security certification center when the vehicle is offline and is stored in the vehicle's hardware security module; The second key operator is produced by a time-based method: a timestamp is generated using the real-time clock inside the vehicle and used as part of the second key operator; The communication key is generated by combining the first key operator and the second key operator through an exclusive OR operation algorithm; During the dynamic key generation and update process, the key update frequency is adjusted according to security requirements and resource constraints, and is updated every 24 hours or every time the vehicle is started; the new key is generated in the same way as the initial key generation; the key Diffie-Hellman protocol is used to ensure the security of key updates; The key is encrypted and stored, encrypted using the AES algorithm, and decrypted using a separate key; Use a redundant backup mechanism to store keys in multiple locations and perform regular consistency checks to prevent key loss; A fault-tolerant mechanism is adopted, using error-correcting code technology to ensure that the key can be recovered even if part of the storage device is damaged.

3. A novel symmetric encryption method for intelligent networked vehicles as claimed in claim 1, characterized in that: In step S2, the algorithm optimization specifically includes: optimizing the algorithm implementation code, using bit operations and shift operations instead of multiplication and division operations; using loop unrolling and loop optimization techniques; using assembly language or embedded assembly code to implement key algorithms; using hardware acceleration technology, using a dedicated encryption chip or FPGA accelerator.

4. A novel symmetric encryption method for intelligent connected vehicles as claimed in claim 1, characterized in that: In step S3, the stream encryption mode uses a pseudo-random number generator algorithm for encryption, specifically including: Initialize the PRNG using an initial key and initialization vector as a seed; PRNG generates a pseudo-random key stream according to a specific algorithm; Perform bit-by-bit XOR operation on the plaintext data stream and the pseudo-random key stream to generate a ciphertext data stream.

5. A novel symmetric encryption method for intelligent networked vehicles as claimed in claim 1, characterized in that: In step S4, the combination with asymmetric encryption specifically includes: Generate a key exchange key using the asymmetric encryption RSA algorithm, and use the key exchange key to encrypt the symmetric key; Use digital signature technology to sign data packets to ensure data integrity and authenticity; Collaboration with identity authentication technology includes: Use digital certificate technology to authenticate vehicles and service providers; Use mutual authentication to ensure both parties in the communication are authenticated.

6. A novel symmetric encryption method for intelligent connected vehicles as claimed in claim 1, characterized in that: In step S5, preventing side channel attacks specifically includes: Use masking technology to mix the calculation results of the encryption algorithm with random numbers to prevent attackers from obtaining key information by analyzing power consumption and electromagnetic radiation physical characteristics; Use randomization technology to randomize the input data of the encryption algorithm to prevent attackers from obtaining key information by analyzing data patterns; Physically protect the hardware security module to prevent attackers from obtaining key information through physical means; Defending against the threat of quantum computing includes: Research on symmetric encryption algorithms that are resistant to quantum computing and encryption algorithms based on lattice cryptography; Develop new encryption technologies in combination with symmetric encryption algorithms and use quantum key distribution technology to transmit symmetric keys.

7. A novel symmetric encryption method for intelligent networked vehicles as claimed in claim 1, characterized in that: In step S6, the data block encryption selects a suitable block size according to the data type and size. For text data, a block size of 1KB is used; for image data, a block size of 4KB is used; and each data block is encrypted using an independent key.

8. A novel symmetric encryption method for intelligent networked vehicles as claimed in claim 1, characterized in that: In step S7, the encryption mechanism in the customized communication protocol includes: Define the format of communication data, including data type, data length, and encryption method; Define the key negotiation and exchange process to ensure key security; Define the location and method of data encryption, encrypting at the data sender and decrypting at the data receiver; The integration of encryption and identity authentication uses digital signature technology to sign encrypted data packets to ensure the integrity and authenticity of the data; and uses digital certificate technology to authenticate the identities of both communicating parties.

9. A novel symmetric encryption method for intelligent networked vehicles as claimed in claim 1, characterized in that: The step S8 specifically includes: Vehicle-to-vehicle communication encryption uses a key exchange protocol based on a symmetric encryption algorithm to ensure the safe exchange of keys between vehicles; encrypt sensitive information such as sensor data and control instructions exchanged between vehicles; Encryption of vehicle-infrastructure communication: Use a key exchange protocol based on a symmetric encryption algorithm to ensure secure key exchange between vehicles and infrastructure; encrypt sensitive traffic and navigation information exchanged between vehicles and infrastructure; Vehicle-to-cloud communication encryption: Use a key exchange protocol based on an asymmetric encryption algorithm to ensure secure key exchange between the vehicle and the cloud; encrypt vehicle status data and user personal information sensitive information exchanged between the vehicle and the cloud.

10. A novel symmetric encryption method for intelligent networked vehicles as claimed in claim 1, characterized in that: The step S9 specifically includes: On-board electronic control unit communication encryption encrypts the communication data between ECUs to prevent malware from attacking the vehicle system by tampering with the communication data between ECUs; Use independent keys to encrypt communications between each ECU, preventing attackers from attacking the entire vehicle system by cracking a single key; Security processing of in-vehicle software updates: Encrypt software update packages to ensure the integrity and security of update packages; use digital signature technology to sign software update packages to prevent update packages from being tampered with or maliciously implanted with code; Security processing of in-vehicle infotainment system: Encrypt user data in the in-vehicle infotainment system, including user personal information and music playlists; use a secure user authentication mechanism to prevent illegal users from accessing the in-vehicle infotainment system.

Images