Data security protection method and device, equipment, storage medium and program product

Abstract

The invention relates to a data security protection method and device, equipment, a storage medium and a program product. The method comprises the steps that to-be-processed data are acquired, and the to-be-processed data comprise vehicle charging and discharging working condition data, electric vehicle state information, charging pile state information and power grid state information; encrypting the vehicle charging and discharging working condition data; performing standardization processing on the electric vehicle state information, the charging pile state information and the power grid state information based on a preset data exchange format to obtain correction data; and setting an access permission for the correction data based on a minimum permission principle, and verifying the current access based on the access permission and identity verification under the condition that the correction data is accessed. By adopting the method, the data security in the vehicle network interaction can be protected.

Description

Technical Field

[0001] The present application relates to the field of information technology, and in particular to a data security protection method, device, equipment, storage medium and program product. Background Art

[0002] Vehicle-grid interaction refers to the interaction of energy and information between new energy vehicles and the power grid through charging and discharging devices. It aims to achieve two-way energy flow between electric vehicles and the power grid, that is, electric vehicles can not only charge when the power grid load is low, but also discharge to the power grid when the power grid load is peak, thereby assisting the power grid in peak load regulation. New energy vehicles are connected to the power grid through charging and discharging devices to achieve two-way flow of electric energy. However, there is a large amount of data transmission in this process, which is prone to data leakage. Summary of the invention

[0003] Based on this, it is necessary to provide a data security protection method, device, computer equipment, computer-readable storage medium and computer program product that can protect data security during vehicle-network interaction in response to the above-mentioned technical problems.

[0004] In a first aspect, the present application provides a data security protection method, comprising:

[0005] Acquiring data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0006] Encrypting the vehicle charging and discharging condition data;

[0007] Standardize the electric vehicle status information, charging pile status information and power grid status information based on a preset data exchange format to obtain corrected data;

[0008] Access permissions are set for the revised data based on the principle of least privilege, and when the revised data is accessed, current access is verified based on the access permissions and identity verification.

[0009] In one embodiment, encrypting the vehicle charging and discharging condition data includes:

[0010] Encrypting the data to be processed based on a symmetric encryption algorithm and an asymmetric encryption algorithm to obtain encrypted data;

[0011] Implementing identity authentication of the encrypted data based on digital certificates and key exchange;

[0012] An integrity basis for the encrypted data is generated based on a hash function and a digital signature.

[0013] In one embodiment, obtaining the data to be processed includes:

[0014] Obtain communication bus data of the target vehicle;

[0015] The vehicle charging and discharging operating condition data is acquired based on the communication bus data.

[0016] In one embodiment, the preset data exchange format includes information type, length and encoding method, and the standardized processing of electric vehicle status information, charging pile status information and power grid status information based on the preset data exchange format includes:

[0017] The electric vehicle status information, the charging pile status information and the power grid status information are standardized based on the preset data exchange format so that the data formats of the electric vehicle status information, the charging pile status information and the power grid status information are the same as the preset data exchange format.

[0018] In one embodiment, the method further comprises:

[0019] Monitoring safety data in the correction data, wherein the safety data includes current, voltage and temperature parameters;

[0020] If there is an abnormality in the safety data, the charging and discharging process of the target vehicle is stopped and an alarm message is issued.

[0021] In one embodiment, after verifying the current access based on the access rights and identity verification, the following steps are performed:

[0022] If the current access verification passes, sending the revised data to the interactive terminal;

[0023] The charging and discharging status information and the cost information of the target vehicle are generated based on the correction data, and the charging and discharging status information and the cost information are presented on a display module of the interactive terminal.

[0024] In a second aspect, the present application also provides a data security protection device, including:

[0025] An acquisition module, used to acquire data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0026] An encryption module, used for encrypting the vehicle charging and discharging condition data;

[0027] A standardization module, used to standardize the electric vehicle status information, the charging pile status information and the power grid status information based on a preset data exchange format to obtain corrected data;

[0028] The verification module is used to set access rights for the revised data based on the principle of least privilege, and verify the current access based on the access rights and identity verification when the revised data is accessed.

[0029] In a third aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0030] Acquiring data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0031] Encrypting the vehicle charging and discharging condition data;

[0032] Standardize the electric vehicle status information, charging pile status information and power grid status information based on a preset data exchange format to obtain corrected data;

[0033] Access permissions are set for the revised data based on the principle of least privilege, and when the revised data is accessed, current access is verified based on the access permissions and identity verification.

[0034] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0035] Acquiring data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0036] Encrypting the vehicle charging and discharging condition data;

[0037] Standardize the electric vehicle status information, charging pile status information and power grid status information based on a preset data exchange format to obtain corrected data;

[0038] Access permissions are set for the revised data based on the principle of least privilege, and when the revised data is accessed, current access is verified based on the access permissions and identity verification.

[0039] In a fifth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0040] Acquiring data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0041] Encrypting the vehicle charging and discharging condition data;

[0042] Standardize the electric vehicle status information, charging pile status information and power grid status information based on a preset data exchange format to obtain corrected data;

[0043] Access permissions are set for the revised data based on the principle of least privilege, and when the revised data is accessed, current access is verified based on the access permissions and identity verification.

[0044] The above-mentioned data security protection method, device, computer equipment, computer-readable storage medium and computer program product realize comprehensive monitoring of vehicle charging and discharging conditions by collecting multi-source data, ensuring that the collected vehicle condition data is of high accuracy and timeliness; at the same time, combined with security measures such as encryption algorithms, it effectively solves the problem that data in the existing system is susceptible to tampering or theft during transmission, and significantly improves the data security of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0046] Figure 1 A schematic diagram of a data security protection method in one embodiment;

[0047] Figure 2 is a schematic diagram of a vehicle data collection method in one embodiment;

[0048] Figure 3 A schematic diagram of a module of an electric vehicle operation data acquisition and analysis system in a specific embodiment;

[0049] Figure 4 It is a schematic diagram of the architecture of a charging pile system in a specific embodiment;

[0050] Figure 5 A structural block diagram of a data security protection device in an embodiment;

[0051] Figure 6 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0052] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0053] In one embodiment, Figure 1 As shown, a data security protection method is provided. This embodiment takes the method applied to a terminal as an example. It can be understood that the method can also be applied to a server, and can also be applied to a system including a terminal and a server, and is implemented through the interaction between the terminal and the server. In this embodiment, the method includes the following steps:

[0054] Step 101, obtaining data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0055] Step 102, encrypting the vehicle charging and discharging condition data;

[0056] Step 103, standardizing the electric vehicle status information, the charging pile status information and the power grid status information based on a preset data exchange format to obtain corrected data;

[0057] Step 104, setting access rights for the revised data based on the principle of least privilege, and verifying the current access based on the access rights and identity verification when the revised data is accessed.

[0058] New energy vehicles (mainly electric vehicles) are connected to the power grid through charging and discharging devices to achieve a two-way flow of electric energy. When the load on the power grid is low, electric vehicles can charge and store electric energy; when the load on the power grid is high, electric vehicles can feed the stored electric energy back to the power grid to help relieve the pressure on the power grid; however, the existing data collection of electric vehicle operation is low in security and is prone to data leakage.

[0059] The data to be processed includes data from vehicles, charging piles and power grids. The data to be processed can be obtained by connecting to vehicles or batteries through various connectors. By collecting and recording vehicle CAN bus data, data on vehicle charging and discharging conditions can be collected. The vehicle can be connected through the vehicle OBD interface to read the relevant data of the electric vehicle status information. Figure 2 The collected data is transmitted to a computing terminal or cloud platform for further analysis by offline copying or remote transmission. Data encryption can be encrypted using a variety of encryption algorithms. At the same time, the data format is unified into a standardized format to obtain corrected data.

[0060] In order to protect data security to a greater extent, this embodiment adopts a zero-trust architecture. Specifically, the core of the zero-trust architecture is to use identity as the basis for access control, perform strict identity authentication on users, devices, and applications, and set minimum permissions to ensure business security.

[0061] In the above data security protection method, comprehensive monitoring of the vehicle's charging and discharging conditions is achieved by collecting multi-source data, ensuring that the collected vehicle condition data is highly accurate and timely; at the same time, combined with security measures such as encryption algorithms, it effectively solves the problem that data in the existing system is susceptible to tampering or theft during transmission, significantly improving the data security of the system.

[0062] In an exemplary embodiment, encrypting vehicle charging and discharging condition data includes:

[0063] The data to be processed is encrypted based on symmetric encryption algorithms and asymmetric encryption algorithms to obtain encrypted data; the identity authentication of the encrypted data is achieved based on digital certificates and key exchange; and the integrity basis of the encrypted data is generated based on hash functions and digital signatures.

[0064] Specifically, the data to be processed is symmetrically encrypted using AES (Advanced Encryption Standard) to protect the security of data during transmission. When two-way authentication is required, RSA (asymmetric encryption algorithm) is used to generate and exchange keys. The sender and receiver are authenticated by combining digital certificates and key exchange protocols to ensure the legitimacy of the data. The unique check value of the data is generated through the hash function, and the digital signature technology is used to verify the data integrity to prevent data tampering or loss.

[0065] This embodiment prevents unauthorized access and operation through access control, and can fully ensure the security and reliability of the communication process.

[0066] In an exemplary embodiment, acquiring the data to be processed includes: acquiring communication bus data of the target vehicle; and acquiring vehicle charging and discharging condition data based on the communication bus data.

[0067] Specifically, the vehicle charging and discharging conditions are collected by collecting and recording vehicle CAN bus data, including key information such as battery power, charging and discharging current, vehicle mileage, vehicle speed, motor power, etc. The collected data is recorded in real time and transmitted to the control module. In addition, before the data is transmitted to the main control module, preliminary data filtering and cleaning operations are performed. This process includes removing noise data, identifying and processing abnormal data, and synchronizing the timing of different data sources to ensure the consistency and accuracy of the collected data.

[0068] In an exemplary embodiment, the preset data exchange format includes information type, length and encoding method, and the electric vehicle status information, the charging pile status information and the power grid status information are standardized based on the preset data exchange format, including:

[0069] The electric vehicle status information, the charging pile status information and the power grid status information are standardized based on the preset data exchange format, so that the data format of the electric vehicle status information, the charging pile status information and the power grid status information is the same as the preset data exchange format.

[0070] Specifically, the type, length and encoding method of electric vehicle status information, charging pile status information and power grid status information are uniformly defined based on the preset data exchange format to ensure the high efficiency of data exchange; among them, the communication frequency design takes into account real-time and reliability, usually set to 1 to 10 times per second, and adopts a duplex communication mode to achieve synchronous data transmission and reception.

[0071] This embodiment standardizes the data and uniformly defines the information type, length and encoding method for the electric vehicle status, charging pile status and power grid status to ensure the interoperability and compatibility of data between different systems. This standardization process enables data to be efficiently decoded, interpreted and applied during the analysis and processing stages.

[0072] In an exemplary embodiment, the method further comprises:

[0073] The safety data in the correction data is monitored, wherein the safety data includes current, voltage and temperature parameters; if there is an abnormality in the safety data, the charging and discharging process of the target vehicle is stopped and an alarm message is issued.

[0074] Specifically, by optimizing the charging strategy, the charging efficiency is improved and the grid load is reduced according to the battery status, grid load and the working status of the charging pile; at the same time, the current, voltage and temperature parameters are monitored in real time to ensure safety, and timely processing is carried out when a fault occurs, such as stopping charging and alarming.

[0075] In an exemplary embodiment, after the current access is verified based on the access rights and identity verification, the following steps are included:

[0076] If the current access verification is passed, the revised data is sent to the interactive terminal; the charging and discharging status information and cost information of the target vehicle are generated based on the revised data, and the charging and discharging status information and cost information are presented on the display module of the interactive terminal.

[0077] The user interface provides charging status, cost display and remote control functions; this application can optimize the discharge strategy, balance the grid load, and monitor the safety of the discharge process in real time to ensure timely and effective fault handling and prevent over-discharge and overheating.

[0078] In an exemplary embodiment, access rights are set for the revised data based on the principle of least privilege, and when the revised data is accessed, current access is verified based on the access rights and identity authentication, including:

[0079] Through the continuous trust assessment model, the access subject is dynamically monitored and evaluated, and the access rights are adjusted in real time to ensure secure access; the identity security infrastructure manages identities and permissions, supports dynamic trust assessment and secure access control modules to form a control plane, provides decision-making basis for trusted access agents, and ensures the security of the access process; the asset security level model and the equipment and user trust level model further refine security measures to meet security needs at different levels. Among them, the access subject can include users, devices, applications, etc.

[0080] In summary, this application not only makes significant progress in the accuracy and security of data collection, but also improves the compatibility and stability of the system through unified data definition and standardized processing, and enhances the security and reliability of the system through real-time monitoring and security protection mechanisms.

[0081] To explain the data security protection method in detail, the following is a most detailed example:

[0082] This specific application example provides a data security protection method, which is applied to the electric vehicle operation data collection and analysis system for vehicle-network interaction. Figure 3 The system includes: a data acquisition module 301, a data encryption module 302, a main control module 303, a data definition module 304, a data analysis module 305, a monitoring module 306, a security protection module 307, and a display module 308.

[0083] The data acquisition module 301 is connected to the main control module 303 and is used to collect data on the vehicle charging and discharging conditions by collecting and recording the vehicle CAN bus data;

[0084] The data encryption module 302 is connected to the main control module 303 and is used to encrypt data using AES and RSA encryption algorithms, perform identity authentication in combination with digital certificates and key exchange, and ensure data integrity using hash functions and digital signatures;

[0085] The main control module 303 is connected with the data acquisition module 301, the data encryption module 302, the data definition module 304, the data analysis module 305, the monitoring module 306, the security protection module 307, and the display module 308, and is used to control the normal operation of each module;

[0086] The data definition module 304 is connected to the main control module 303 and is used to uniformly define the type, length and encoding method of the electric vehicle status, charging pile status and power grid status information through a data exchange format;

[0087] The data analysis module 305 is connected to the main control module 303 and is used to analyze the collected data;

[0088] The monitoring module 306 is connected to the main control module 303 and is used to monitor the current, voltage and temperature parameters in real time to ensure safety and handle the faults in time, including stopping charging and giving an alarm;

[0089] The security protection module 307 is connected to the main control module 303 and is used to perform strict identity authentication on users, devices and applications, and set minimum permissions to ensure business security;

[0090] The display module 308 is connected to the main control module 303 and is used to provide charging status, cost display and remote control functions through a user interface.

[0091] In a specific embodiment, the core of this embodiment is to collect, encrypt, analyze and safely monitor the charging and discharging status of the electric vehicle. The data acquisition module 301 collects parameters such as current, voltage, power, etc. in real time by connecting to the CAN bus of the electric vehicle, and transmits them to the main control module 303. Subsequently, the data encryption module 302 uses the AES encryption algorithm to encrypt these data, and ensures the security of the data transmission process through digital certificate verification and key exchange mechanism. The monitoring module 306 also monitors the charging process of the electric vehicle in real time to ensure that the current, voltage and temperature parameters are within a safe range. If an abnormal situation is monitored (such as excessive temperature or abnormal current fluctuations), the monitoring module 306 will immediately trigger the stop charging function and issue an alarm to notify the user or platform. This embodiment effectively improves the safety and data confidentiality of the charging and discharging process of the electric vehicle, ensuring the safety of users and equipment.

[0092] In a specific embodiment, this embodiment focuses on the interactive management of electric vehicles and charging piles. Through the data definition module 304, the system uniformly defines the information type and coding method of the electric vehicle status, charging pile status and power grid status, standardizes the interfaces of different charging piles and electric vehicles, and ensures data compatibility. The data acquisition module 301 and the data analysis module 305 work together to perform detailed analysis on the charging process, charging efficiency, power output of the charging pile and other data of the electric vehicle. The data analysis module 305 evaluates the charging efficiency and battery health of the electric vehicle through algorithm processing, and provides optimization suggestions to users, such as selecting a more efficient charging pile or adjusting the charging time. The monitoring module 306 continuously monitors the charging process for safety, and automatically stops the charging operation and issues a warning when the charging pile or vehicle is abnormal. This embodiment effectively improves the management efficiency and user experience of the vehicle-grid interactive system, while ensuring the safety of the charging process.

[0093] See also Figure 4 , Figure 4 A V2G charging pile system architecture based on V2G interaction protocol and information security encryption is shown.

[0094] In order to meet different application scenarios under charging and discharging conditions, the development plan of high-stability vehicle-mounted edge computing terminals includes three types of equipment: vehicle-side data acquisition equipment, charging-side data acquisition equipment, and mobile detection equipment.

[0095] The vehicle-side data acquisition device design can select a variety of connectors to connect to the vehicle or battery, and collect data on the vehicle's charging and discharging conditions by collecting and recording the vehicle's CAN bus data. The method is to connect the vehicle through the vehicle's OBD interface and read the relevant data. The data can be transferred to the computing terminal or cloud platform for further analysis by offline copying or remote transmission.

[0096] The design of V2G charging pile communication protocol covers multiple levels and technical points to ensure efficient and safe communication between electric vehicles and charging piles. The communication protocol framework design includes physical layer, data link layer, network layer, transport layer, session layer, presentation layer and application layer. Each layer is responsible for different communication functions. The physical layer defines the physical interface and transmission mode. The data link layer is responsible for the assembly and error detection of data frames. The network layer ensures the routing and forwarding of data packets. The transport layer provides end-to-end communication services. The session layer manages communication sessions. The presentation layer performs data encoding and decoding. The application layer defines the communication protocol between applications.

[0097] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0098] Based on the same inventive concept, the embodiment of the present application also provides a data security protection device for implementing the data security protection method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more data security protection device embodiments provided below can refer to the limitations on the data security protection method above, and will not be repeated here.

[0099] In an exemplary embodiment, Figure 5 As shown, a data security protection device 500 is provided, comprising: an acquisition module 501, an encryption module 502, a standardization module 503 and a verification module 504, wherein:

[0100] The acquisition module 501 is used to acquire the data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0101] An encryption module 502 is used to encrypt vehicle charging and discharging condition data;

[0102] The standardization module 503 is used to perform standardization processing on the electric vehicle status information, the charging pile status information and the power grid status information based on a preset data exchange format to obtain corrected data;

[0103] The verification module 504 is used to set access rights for the revised data based on the principle of least privilege, and verify the current access based on the access rights and identity verification when the revised data is accessed.

[0104] The encryption module 502 is further used for:

[0105] The data to be processed is encrypted based on symmetric encryption algorithms and asymmetric encryption algorithms to obtain encrypted data; the identity authentication of the encrypted data is achieved based on digital certificates and key exchange; and the integrity basis of the encrypted data is generated based on hash functions and digital signatures.

[0106] The acquisition module 501 is further used for:

[0107] Acquire the communication bus data of the target vehicle; and acquire the vehicle charging and discharging condition data based on the communication bus data.

[0108] The standardization module 503 is further used for:

[0109] The preset data exchange format includes information type, length and encoding method, and the electric vehicle status information, charging pile status information and power grid status information are standardized based on the preset data exchange format, including: based on the preset data exchange format, the electric vehicle status information, the charging pile status information and the power grid status information are standardized to make the data format of the electric vehicle status information, the charging pile status information and the power grid status information the same as the preset data exchange format.

[0110] The verification module 504 is further used for:

[0111] If the current access verification is passed, the revised data is sent to the interactive terminal; the charging and discharging status information and cost information of the target vehicle are generated based on the revised data, and the charging and discharging status information and cost information are presented on the display module of the interactive terminal.

[0112] The data security protection device 500 further includes:

[0113] Alarm module for:

[0114] The safety data in the correction data is monitored, wherein the safety data includes current, voltage and temperature parameters; if there is an abnormality in the safety data, the charging and discharging process of the target vehicle is stopped and an alarm message is issued.

[0115] Each module in the above data security protection device can be implemented in whole or in part by software, hardware, or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module above.

[0116] In an exemplary embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as shown in FIG. Figure 6As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, near field communication (Near Field Communication, NFC) or other technologies. When the computer program is executed by the processor, a data security protection method is implemented. The display unit of the computer device is used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

[0117] Those skilled in the art will understand that Figure 6 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0118] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0119] Acquire data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0120] Encrypt vehicle charging and discharging condition data;

[0121] Standardize the electric vehicle status information, charging pile status information and power grid status information based on a preset data exchange format to obtain corrected data;

[0122] Access permissions are set for the revised data based on the principle of least privilege. When the revised data is accessed, the current access is verified based on the access permissions and identity verification.

[0123] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0124] Acquire data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0125] Encrypt vehicle charging and discharging condition data;

[0126] Standardize the electric vehicle status information, charging pile status information and power grid status information based on a preset data exchange format to obtain corrected data;

[0127] Access permissions are set for the revised data based on the principle of least privilege. When the revised data is accessed, the current access is verified based on the access permissions and identity verification.

[0128] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0129] Acquire data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information;

[0130] Encrypt vehicle charging and discharging condition data;

[0131] Standardize the electric vehicle status information, charging pile status information and power grid status information based on a preset data exchange format to obtain corrected data;

[0132] Access permissions are set for the revised data based on the principle of least privilege. When the revised data is accessed, the current access is verified based on the access permissions and identity verification.

[0133] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0134] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0135] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0136] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A data security protection method, characterized in that: The method comprises: Acquiring data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information; Encrypting the vehicle charging and discharging condition data; Standardizing the electric vehicle status information, the charging pile status information and the power grid status information based on a preset data exchange format to obtain corrected data; Access permissions are set for the revised data based on the principle of least privilege, and when the revised data is accessed, current access is verified based on the access permissions and identity verification.

2. The method according to claim 1, characterized in that The encrypting the vehicle charging and discharging condition data includes: Encrypting the data to be processed based on a symmetric encryption algorithm and an asymmetric encryption algorithm to obtain encrypted data; Implementing identity authentication of the encrypted data based on digital certificates and key exchange; An integrity basis for the encrypted data is generated based on a hash function and a digital signature.

3. The method according to claim 1, characterized in that The obtaining of the data to be processed comprises: Obtain communication bus data of the target vehicle; The vehicle charging and discharging operating condition data is acquired based on the communication bus data.

4. The method according to claim 1, characterized in that The preset data exchange format includes information type, length and encoding method, and the standardized processing of electric vehicle status information, charging pile status information and power grid status information based on the preset data exchange format includes: The electric vehicle status information, the charging pile status information and the power grid status information are standardized based on the preset data exchange format so that the data formats of the electric vehicle status information, the charging pile status information and the power grid status information are the same as the preset data exchange format.

5. The method according to claim 1, characterized in that The method further comprises: Monitoring safety data in the correction data, wherein the safety data includes current, voltage and temperature parameters; If there is an abnormality in the safety data, the charging and discharging process of the target vehicle is stopped and an alarm message is issued.

6. The method according to claim 1, characterized in that After verifying the current access based on the access authority and identity authentication, the method further comprises: If the current access verification passes, sending the revised data to the interactive terminal; The charging and discharging status information and the cost information of the target vehicle are generated based on the correction data, and the charging and discharging status information and the cost information are presented on a display module of the interactive terminal.

7. A data security protection device, characterized in that: The device comprises: An acquisition module, used to acquire data to be processed, wherein the data to be processed includes vehicle charging and discharging condition data, electric vehicle status information, charging pile status information and power grid status information; An encryption module, used for encrypting the vehicle charging and discharging condition data; A standardization module, used to standardize the electric vehicle status information, the charging pile status information and the power grid status information based on a preset data exchange format to obtain corrected data; The verification module is used to set access rights for the revised data based on the principle of least privilege, and verify the current access based on the access rights and identity verification when the revised data is accessed.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images