Time hidden channel type covert communication method and related device for Internet of Vehicles

Abstract

The invention discloses a time hidden channel type covert communication method for the Internet of Vehicles and a related device, and relates to the technical field of covert communication, and the method comprises the steps: selecting the first i bits of secret information of secret information to be transmitted in a hidden manner as first secret information to be embedded, the method comprises the steps of determining a WebSocket fragmented data packet corresponding to first to-be-embedded secret information on the basis of a preset corresponding relation between the number of WebSocket fragmented data packets and the secret information, selecting the first j-bit secret information of the to-be-transmitted secret information as second to-be-embedded secret information, and selecting the first j-bit secret information of the to-be-transmitted secret information as the second to-be-embedded secret information on the basis of a preset corresponding relation between the number of WebSocket non-fragmented data packets and the secret information. And determining a WebSocket non-fragmented data packet corresponding to the second secret information to be embedded until the secret information to be transmitted in a hidden manner is completely embedded. According to the application, covert communication can be carried out based on the WebSocket protocol in an Internet of Vehicles environment.

Description

Technical Field

[0001] The present application relates to the field of covert communication technology, and in particular to a time covert channel covert communication method and related devices for Internet of Vehicles. Background Art

[0002] The WebSocket protocol is a communication protocol that allows two-way interactive communication between clients and servers through TCP (Transmission Control Protocol). It has good applicability for untrusted networks with limited resources and supports persistent connections. It is an application layer protocol and has become one of the commonly used communication protocols in the Internet of Vehicles. The WebSocket protocol maintains an open connection after the initial handshake, which enables it to support real-time and interactive data exchange. This feature is particularly important for the Internet of Vehicles with high real-time requirements. It is widely used in the fields of vehicle tracking, alarm push, driving status monitoring, traffic information update, etc.

[0003] The WebSocket protocol transmits a large amount of data information in the open Internet of Vehicles environment, providing sufficient carriers for the covert transmission of secret information. The transport layer protocol used by the WebSocket protocol is the connection-oriented TCP with a reliable transmission mechanism, which indirectly provides a guarantee for the transmission of secret information. In addition, the WebSocket protocol supports persistent connections, which saves network request time and bandwidth, and will increase the transmission rate of secret information. Summary of the invention

[0004] The purpose of this application is to provide a time-covert channel covert communication method and related devices for the Internet of Vehicles, which can perform covert communication based on the WebSocket protocol in the Internet of Vehicles environment.

[0005] To achieve the above objectives, this application provides the following solutions:

[0006] In a first aspect, the present application provides a time covert channel covert communication method for an Internet of Vehicles, the time covert channel covert communication method for an Internet of Vehicles comprising:

[0007] Obtain secret information to be transmitted covertly;

[0008] Selecting the first i bits of the secret information to be transmitted covertly as the first secret information to be embedded, determining the WebSocket fragmented data packet corresponding to the first secret information to be embedded based on the first secret information to be embedded and the correspondence between the number of fragments of the preset WebSocket fragmented data packet and the secret information, and sending the WebSocket fragmented data packet; wherein i is a positive integer;

[0009] Determine whether the number of bits of the secret information to be concealedly transmitted in the current iteration is 0, and obtain a first determination result;

[0010] If the first judgment result is no, the first secret information to be embedded is removed from the secret information to be concealedly transmitted in the current iteration, the secret information to be concealedly transmitted in the next iteration is obtained, and it is determined whether the WebSocket fragmented data packet has been sent N times in succession; wherein N is a positive integer;

[0011] If not, return to the step of "selecting the first i bits of the secret information to be concealed and transmitted as the first secret information to be embedded";

[0012] If so, the first j bits of the secret information to be concealed and transmitted are selected as the second secret information to be embedded, and based on the corresponding relationship between the second secret information to be embedded and the preset number of WebSocket non-fragmented data packets and the secret information, the WebSocket non-fragmented data packet corresponding to the second secret information to be embedded is determined, and the WebSocket non-fragmented data packet is sent; wherein j is a positive integer;

[0013] Determine whether the number of bits of the secret information to be concealedly transmitted in the current iteration is 0, and obtain a second determination result;

[0014] If the second judgment result is no, the second secret information to be embedded is removed from the secret information to be concealedly transmitted in the current iteration, the secret information to be concealedly transmitted in the next iteration is obtained, and the step of "selecting the first i bits of the secret information to be concealedly transmitted as the first secret information to be embedded" is returned.

[0015] Optionally, i≤I, Where I is a positive integer, and M is the maximum length of the number of fragments of the WebSocket fragmented data packet collected in the actual application scenario;

[0016] The correspondence between the number of fragments of the WebSocket fragmented data packet and the secret information is as follows: The value range of the number of fragments m of the WebSocket fragmented data packet is [xd+2, xd+y+2], where x=2 I-i , d is the decimal number converted from the i-bit secret information, y = 2 I-i -1;

[0017] V is the maximum number of WebSocket non-fragmented packets between two WebSocket fragmented packets collected in actual application scenarios;

[0018] The correspondence between the preset number of WebSocket non-fragmented data packets and the secret information is: the number of WebSocket non-fragmented data packets J=ke+1, where k is a positive integer and e is a decimal number converted from j bits of secret information.

[0019] Optionally, before sending the WebSocket fragmented data packet for the first time, the time covert channel type covert communication method for the Internet of Vehicles further includes: continuously sending n WebSocket fragmented data packets, indicating the start of covert communication;

[0020] When the first judgment result is yes or the second judgment result is yes, the time covert channel type covert communication method for the Internet of Vehicles further includes: continuously sending n WebSocket fragmented data packets, indicating that the covert communication ends;

[0021] Among them, N is less than n.

[0022] Optionally, based on the first secret information to be embedded and a correspondence between the number of fragments of a preset WebSocket fragmented data packet and the secret information, determining the WebSocket fragmented data packet corresponding to the first secret information to be embedded specifically includes:

[0023] Determine a range of the number of fragments of the WebSocket fragmented data packet corresponding to the first secret information to be embedded based on the first secret information to be embedded and the correspondence between the preset number of fragments of the WebSocket fragmented data packet and the secret information;

[0024] Randomly select a number of fragments of a WebSocket fragmented data packet within the range of the number of fragments of the WebSocket fragmented data packet as the first number of fragments corresponding to the first secret information to be embedded;

[0025] Determine whether there is a WebSocket fragment data packet with a first number of fragments;

[0026] If yes, then selecting the WebSocket fragmented data packet having the first number of fragments as the WebSocket fragmented data packet corresponding to the first secret information to be embedded;

[0027] If not, then select the WebSocket fragmented data packet with the second number of fragments as the WebSocket fragmented data packet corresponding to the first secret information to be embedded, and set the first secret information to be embedded to empty; wherein the second number of fragments is P, P>2 I +1.

[0028] Optionally, based on the second secret information to be embedded and the correspondence between the preset number of WebSocket non-fragmented data packets and the secret information, determining the WebSocket non-fragmented data packet corresponding to the second secret information to be embedded specifically includes:

[0029] Determine the number J of WebSocket non-fragmented data packets corresponding to the second secret information to be embedded based on the second secret information to be embedded and the preset correspondence between the number of WebSocket non-fragmented data packets and the secret information;

[0030] J WebSocket non-fragmented data packets are randomly selected as the WebSocket non-fragmented data packets corresponding to the second secret information to be embedded.

[0031] Optionally, the method for determining i, j, and k includes: if a higher secret information transmission rate is required, increasing i and j and decreasing k; if the communication network environment is complex or there is a security threat, decreasing i.

[0032] Optionally, when the second judgment result is no, before returning to the step of "selecting the first i bits of secret information to be covertly transmitted as the first secret information to be embedded", the time covert channel type covert communication method for the Internet of Vehicles also includes: re-randomly determining the value of N.

[0033] In a second aspect, the present application provides a computer device, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement any of the above-mentioned time covert channel type covert communication methods for Internet of Vehicles.

[0034] In a third aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements any of the above-mentioned time covert channel type covert communication methods for Internet of Vehicles.

[0035] In a fourth aspect, the present application provides a computer program product, including a computer program, which, when executed by a processor, implements any of the above-mentioned time covert channel type covert communication methods for the Internet of Vehicles.

[0036] According to the specific embodiments provided in this application, this application has the following technical effects:

[0037] The present application provides a time covert channel type covert communication method and related device for the Internet of Vehicles, which selects the first i bits of secret information to be transmitted covertly as the first secret information to be embedded, determines the WebSocket fragmented data packet corresponding to the first secret information to be embedded based on the first secret information to be embedded and the corresponding relationship between the preset number of fragments of the WebSocket fragmented data packet and the secret information, and sends the WebSocket fragmented data packet, selects the first j bits of secret information to be transmitted covertly as the second secret information to be embedded, determines the WebSocket non-fragmented data packet corresponding to the second secret information to be embedded based on the corresponding relationship between the second secret information to be embedded and the preset number of WebSocket non-fragmented data packets and the secret information, and sends the WebSocket non-fragmented data packet until the secret information to be transmitted covertly is embedded. The present application constructs a time covert channel by two methods, namely the number of fragments of the WebSocket fragmented data packet and the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets, to embed secret information. The method does not perform physical embedding, has strong concealment, has strong anti-detection, and can perform covert communication based on the WebSocket protocol in the Internet of Vehicles environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0039] Figure 1 This is an application environment diagram of a time covert channel covert communication method for Internet of Vehicles provided in Example 1 of the present application.

[0040] Figure 2 A flowchart of a time covert channel covert communication method for Internet of Vehicles provided in Example 1 of the present application.

[0041] Figure 3 A schematic diagram of the structure of a computer device provided in Example 2 of the present application. DETAILED DESCRIPTION

[0042] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0043] Example 1

[0044] The time covert channel covert communication method for the Internet of Vehicles provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Among them, the terminal communicates with the server through the network. The data storage system can store data that the server needs to process. The data storage system can be set up separately, integrated on the server, or placed on the cloud or other servers. The terminal can send a covert communication request to be processed to the server. After the server receives the covert communication request to be processed, the server obtains the secret information to be transmitted covertly for the covert communication request to be processed; selects the first i bits of the secret information to be transmitted covertly as the first secret information to be embedded, and based on the first secret information to be embedded and the corresponding relationship between the number of fragments of the preset WebSocket fragmented data packet and the secret information, determines the WebSocket fragmented data packet corresponding to the first secret information to be embedded, and sends the WebSocket fragmented data packet; determines whether the number of bits of the secret information to be transmitted covertly in the current iteration is 0, and obtains a first judgment result; if the first judgment result is no, removes the first secret information to be embedded in the secret information to be transmitted covertly in the current iteration, obtains the secret information to be transmitted covertly in the next iteration, and determines whether the WebSocket fragmented data packet has been sent N times in a row. If not, return to the step of "selecting the first i bits of the secret information to be transmitted covertly as the first secret information to be embedded"; if yes, select the first j bits of the secret information to be transmitted covertly as the second secret information to be embedded, determine the WebSocket non-fragmented data packet corresponding to the second secret information to be embedded based on the second secret information to be embedded and the correspondence between the preset number of WebSocket non-fragmented data packets and the secret information, and send the WebSocket non-fragmented data packet; determine whether the number of bits of the secret information to be transmitted covertly in the current iteration is 0, and obtain the second judgment result; if the second judgment result is no, remove the second secret information to be embedded from the secret information to be transmitted covertly in the current iteration, obtain the secret information to be transmitted covertly in the next iteration, and return to the step of "selecting the first i bits of the secret information to be transmitted covertly as the first secret information to be embedded". The server can feedback the covert communication end flag obtained for the covert communication request to the terminal.

[0045] In addition, in some embodiments, the time covert channel type covert communication method for the Internet of Vehicles can also be implemented independently by a server or a terminal. For example, the terminal can directly process the covert communication request to be processed, or the server can obtain the covert communication request to be processed from the data storage system and process the covert communication request to be processed.

[0046] The terminals may be, but are not limited to, various desktop computers, laptops, smart phones, tablet computers, IoT devices and portable wearable devices. IoT devices may be smart speakers, smart TVs, smart air conditioners, smart car-mounted devices, etc. Portable wearable devices may be smart watches, smart bracelets, head-mounted devices, etc. The server may be implemented as an independent server or a server cluster consisting of multiple servers, or a cloud server.

[0047] In an exemplary embodiment, Figure 2 As shown, a time covert channel covert communication method for vehicle networking is provided. The method is executed by a computer device, and can be executed by a computer device such as a terminal or a server alone, or can be executed by a terminal and a server together. In the embodiment of the present application, the method is applied to Figure 1 The following steps are used to illustrate the server in the example.

[0048] Step S1, obtaining secret information to be transmitted covertly.

[0049] Step S2, select the first i bits of secret information to be transmitted covertly as the first secret information to be embedded, determine the WebSocket fragmented data packet corresponding to the first secret information to be embedded based on the correspondence between the first secret information to be embedded and the preset number of fragments of the WebSocket fragmented data packet and the secret information, and send the WebSocket fragmented data packet; wherein i is a positive integer.

[0050] Step S3, determining whether the number of bits of the secret information to be concealedly transmitted in the current iteration is 0, and obtaining a first determination result.

[0051] Step S4, if the first judgment result is no, then remove the first secret information to be embedded in the secret information to be coveredly transmitted in the current iteration, obtain the secret information to be coveredly transmitted in the next iteration, and judge whether the WebSocket fragmented data packet has been sent N times in succession; where N is a positive integer.

[0052] Step S5: If not, return to the step of "selecting the first i bits of the secret information to be concealed and transmitted as the first secret information to be embedded".

[0053] Step S6, if yes, select the first j bits of the secret information to be concealed and transmitted as the second secret information to be embedded, determine the WebSocket non-fragmented data packet corresponding to the second secret information to be embedded, and send the WebSocket non-fragmented data packet based on the corresponding relationship between the second secret information to be embedded and the preset number of WebSocket non-fragmented data packets and the secret information, where j is a positive integer.

[0054] Step S7, determining whether the number of bits of the secret information to be concealedly transmitted in the current iteration is 0, and obtaining a second determination result.

[0055] Step S8, if the second judgment result is no, then remove the second secret information to be embedded in the secret information to be concealedly transmitted in the current iteration, obtain the secret information to be concealedly transmitted in the next iteration, and return to the step of "selecting the first i bits of the secret information to be concealedly transmitted as the first secret information to be embedded".

[0056] By implementing the above-mentioned steps S1 to S8, this embodiment constructs a time covert channel by two methods, namely, the number of fragments of a WebSocket fragmented data packet and the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets, to embed secret information. This method does not perform physical embedding, has strong concealment, has strong anti-detection ability, and can realize covert communication based on the WebSocket protocol in the Internet of Vehicles environment.

[0057] The present embodiment provides a method for constructing a time covert channel for the Internet of Vehicles, specifically, a method for constructing a time covert channel based on the WebSocket protocol for the Internet of Vehicles environment, which respectively constructs a time covert channel by two methods: the number of fragments of a WebSocket fragmented data packet and the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets to embed secret information, so as to form a time covert channel type covert communication method for the Internet of Vehicles with the help of the constructed time covert channel. The method does not perform physical embedding, has strong concealment, and has strong anti-detection ability. Moreover, it can flexibly adapt to the secret information transmission requirements of different application scenarios through parameter adjustment, so as to achieve a balance between the anti-detection ability of the covert channel and the secret information transmission rate.

[0058] After the covert communication starts, this embodiment embeds secret information by two methods: the number of fragments of a WebSocket fragmented data packet and the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets. Specifically, the embedding method of the number of fragments of a WebSocket fragmented data packet N times and the embedding method of the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets once can be alternately selected. The two embedding methods are introduced respectively below:

[0059] (1) WebSocket fragment data packet fragment number embedding method

[0060] Embed secret information according to the number of fragments m of the WebSocket fragmented data packet, embedding i bits of binary secret information each time, where i≤I, and M is the maximum length of the WebSocket fragmented data packet fragment number collected in the actual application scenario. Read the i-bit secret information and convert it into a decimal number d. Select the WebSocket fragmented data packet that meets the requirements according to the corresponding relationship between d and the number of fragments of the WebSocket fragmented data packet m. The corresponding relationship is: the value range of m is [xd+2, xd+y+2], and m is randomly selected in the above value range of m, where x=2 I-i , y = 2 I-i -1. For example: when M is 52, then I≤5, and I=5 can be set. If i=I=5, then m=d+2, that is, only one number of fragments of WebSocket fragmented data packets can be selected at this time; if i=4, then m=2d+2 or m=2d+3, that is, two numbers of fragments of WebSocket fragmented data packets can be selected at this time; if i=3, then the value range of m is [4d+2, 4d+5], that is, 4 numbers of fragments of WebSocket fragmented data packets can be selected at this time; if i=2, then the value range of m is [8d+2, 8d+9], that is, 8 numbers of fragments of WebSocket fragmented data packets can be selected at this time; if i=1, then the value range of m is [16d+2, 16d+17], that is, 16 numbers of fragments of WebSocket fragmented data packets can be selected at this time. From the corresponding relationship, we can know that when I=5, 2≤m≤33 fragments of WebSocket fragmented data packets can be selected to embed secret information. If it is impossible to select a WebSocket fragmented data packet that meets the requirements, the secret information is not embedded by the number of fragments of the WebSocket fragmented data packet, but the number of fragments P>2 is directly selected. I +1 WebSocket fragmented data packets are sent. For example, if I = 5, the WebSocket fragmented data packets with the number of fragments P> 33 are selected.

[0061] (2) How to embed the number of WebSocket non-fragmented packets between two WebSocket fragmented packets

[0062] The secret information is embedded according to the number of WebSocket non-fragmented packets between two WebSocket fragmented packets, and j bits of binary secret information are embedded each time, where, V is the maximum number of WebSocket non-fragmented packets between two WebSocket fragmented packets collected in the actual application scenario. Read the j-bit secret information and convert it into a decimal number e, and select ke+1 WebSocket non-fragmented packets to send, where k≥1. For example: if V is 19, then j≤4, and j=3 can be selected. If the 3-bit secret information read is "101" and k=2, then 11 WebSocket non-fragmented packets can be selected to send.

[0063] In this embodiment, the first i bits of the secret information to be concealed and transmitted are selected as the first secret information to be embedded, i≤I, Where I is a positive integer, and M is the maximum length of the number of fragments of the WebSocket fragmented data packet collected in the actual application scenario.

[0064] In this embodiment, the correspondence between the number of fragments of the WebSocket fragmented data packet and the secret information is as follows: the value range of the number of fragments m of the WebSocket fragmented data packet is [xd+2, xd+y+2], where x=2 I-i , d is the decimal number converted from the i-bit secret information, y = 2 I-i -1.

[0065] At this time, based on the first secret information to be embedded and the correspondence between the number of fragments of the preset WebSocket fragmented data packet and the secret information, determining the WebSocket fragmented data packet corresponding to the first secret information to be embedded specifically includes:

[0066] (1) Based on the first secret information to be embedded and the correspondence between the preset number of fragments of the WebSocket fragmented data packet and the secret information, determine the range of the number of fragments of the WebSocket fragmented data packet corresponding to the first secret information to be embedded.

[0067] (2) Randomly select a number of fragments of a WebSocket fragmented data packet within the range of the number of fragments of the WebSocket fragmented data packet as the first number of fragments corresponding to the first secret information to be embedded.

[0068] (3) Determine whether there is a WebSocket fragment data packet with the first number of fragments.

[0069] (4) If yes, then select a WebSocket fragmented data packet having the first number of fragments as the first WebSocket fragmented data packet corresponding to the secret information to be embedded.

[0070] (5) If not, then select the WebSocket fragmented data packet with the second number of fragments as the WebSocket fragmented data packet corresponding to the first secret information to be embedded, and set the first secret information to be embedded to empty; wherein the second number of fragments is P, P>2 I +1.

[0071] If not, there is no suitable WebSocket fragmented data packet that can be used to embed the first secret information to be embedded, so the first secret information to be embedded is not embedded, but a WebSocket fragmented data packet with the second number of fragments is sent, and the first secret information to be embedded is set to empty. After removing the first secret information to be embedded from the secret information to be concealedly transmitted in the current iteration, it is equivalent to not changing the number of bits of the secret information to be concealedly transmitted in the current iteration, and the next embedding is performed.

[0072] In this embodiment, the first j bits of the secret information to be concealed and transmitted are selected as the second secret information to be embedded. V is the maximum number of WebSocket non-fragmented packets between two WebSocket fragmented packets collected in actual application scenarios.

[0073] In this embodiment, the correspondence between the preset number of WebSocket non-fragmented data packets and the secret information is: the number of WebSocket non-fragmented data packets J=ke+1, where k is a positive integer and e is a decimal number converted from j-bit secret information.

[0074] At this time, based on the second secret information to be embedded and the correspondence between the preset number of WebSocket non-fragmented data packets and the secret information, determining the WebSocket non-fragmented data packet corresponding to the second secret information to be embedded specifically includes:

[0075] (1) Based on the second secret information to be embedded and the correspondence between the preset number of WebSocket non-fragmented data packets and the secret information, determine the number J of WebSocket non-fragmented data packets corresponding to the second secret information to be embedded.

[0076] (2) Randomly select J WebSocket non-fragmented data packets as the WebSocket non-fragmented data packets corresponding to the second secret information to be embedded.

[0077] Since this embodiment wants to alternately select the method of embedding the number of fragments of WebSocket fragmented data packets N times and the method of embedding the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets once, that is, after each N-times of embedding the number of fragments of WebSocket fragmented data packets, the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets is embedded once. Therefore, after each embedding of the number of fragments of WebSocket fragmented data packets, it is necessary to determine whether the WebSocket fragmented data packets have been sent N times in succession. If so, it means that the number of fragments of WebSocket fragmented data packets has been embedded N times. At this time, the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets is embedded. If not, it means that the number of fragments of WebSocket fragmented data packets has not been embedded N times. At this time, the number of fragments of WebSocket fragmented data packets is embedded.

[0078] In this embodiment, the value of N can be changed randomly. Therefore, when the second judgment result is no, it is necessary to return to the step of "selecting the first i bits of secret information to be concealedly transmitted as the first secret information to be embedded". The time covert channel type covert communication method for the Internet of Vehicles in this embodiment also includes: re-randomly determining the value of N.

[0079] This embodiment selects n WebSocket fragmented data packets as the start and end marks of covert communication, where n≥2. At the beginning of covert communication, n WebSocket fragmented data packets are continuously sent as the start mark of covert communication, and covert communication begins until all secret information to be transmitted covertly is embedded. At this time, covert communication ends. At the end of covert communication, n WebSocket fragmented data packets are continuously sent as the end mark of covert communication. At this time, in order to avoid confusion, set N <n。

[0080] At this time, before sending the WebSocket fragmented data packet for the first time, the time covert channel type covert communication method for the Internet of Vehicles of this embodiment also includes: continuously sending n WebSocket fragmented data packets, indicating the start of covert communication; when the first judgment result is yes or the second judgment result is yes, the time covert channel type covert communication method for the Internet of Vehicles of this embodiment also includes: continuously sending n WebSocket fragmented data packets, indicating the end of covert communication.

[0081] This embodiment constructs a time covert channel to embed secret information by using two methods: the number of fragments of a WebSocket fragmented data packet and the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets. This method does not perform physical embedding and cannot be identified by network protection systems such as firewalls. It has strong concealment and strong anti-detection ability.

[0082] This embodiment can flexibly adapt to the secret information transmission requirements of different application scenarios through parameter adjustment, and achieve a balance between the anti-detection of the covert channel and the secret information transmission rate. When a higher secret information transmission rate is required, the values ​​of i and j can be appropriately increased, and the k value can be appropriately reduced. When facing a harsh network confrontation environment that requires high anti-detection, the i value can be appropriately reduced.

[0083] At this time, in this embodiment, the method for determining i, j, and k includes: if a higher secret information transmission rate is required, then i and j are increased and k is decreased; if the communication network environment is complex or there is a security threat, then i is decreased.

[0084] The present application also provides an application scenario, which applies the above-mentioned time covert channel type covert communication method for the Internet of Vehicles. Specifically, the time covert channel type covert communication method for the Internet of Vehicles provided by this embodiment can be applied in a covert communication scenario. The covert communication scenario includes a secret information embedding link and a data transmission link. The secret information embedding link is used to construct a time covert channel to embed secret information through two methods: the number of fragments of a WebSocket fragmented data packet and the number of WebSocket non-fragmented data packets between two WebSocket fragmented data packets. The data transmission link is used to send a WebSocket fragmented data packet or a WebSocket non-fragmented data packet to the outside. The time covert channel type covert communication method for the Internet of Vehicles provided by this embodiment belongs to the secret information embedding link and the data transmission link.

[0085] Example 2

[0086] In an exemplary embodiment, a computer device is provided. The computer device may be a server or a terminal. The internal structure diagram thereof may be as follows: Figure 3As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a time covert channel type covert communication method for the Internet of Vehicles is implemented.

[0087] Those skilled in the art will understand that Figure 3 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0088] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the time covert channel type covert communication method for the Internet of Vehicles in Example 1 is implemented.

[0089] Example 3

[0090] In an exemplary embodiment, a computer-readable storage medium is provided, storing a computer program, which, when executed by a processor, implements the time covert channel type covert communication method for Internet of Vehicles in Example 1.

[0091] Example 4

[0092] In an exemplary embodiment, a computer program product is provided, including a computer program, which, when executed by a processor, implements the time covert channel type covert communication method for vehicle networks in Example 1.

[0093] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0094] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0095] This article uses specific examples to illustrate the principles and implementation methods of this application. The description of the above embodiments is only used to help understand the method and core ideas of this application. At the same time, for those skilled in the art, according to the ideas of this application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as limiting this application.

Claims

1. A time covert channel covert communication method for Internet of Vehicles, characterized in that: The time covert channel covert communication method for Internet of Vehicles includes: Obtain secret information to be transmitted covertly; Selecting the first i bits of the secret information to be transmitted covertly as the first secret information to be embedded, determining the WebSocket fragmented data packet corresponding to the first secret information to be embedded based on the first secret information to be embedded and the correspondence between the number of fragments of the preset WebSocket fragmented data packet and the secret information, and sending the WebSocket fragmented data packet; wherein i is a positive integer; Determine whether the number of bits of the secret information to be concealedly transmitted in the current iteration is 0, and obtain a first determination result; If the first judgment result is no, the first secret information to be embedded is removed from the secret information to be concealedly transmitted in the current iteration, the secret information to be concealedly transmitted in the next iteration is obtained, and it is determined whether the WebSocket fragmented data packet has been sent N times in succession; wherein N is a positive integer; If not, return to the step of "selecting the first i bits of the secret information to be concealed and transmitted as the first secret information to be embedded"; If so, the first j bits of the secret information to be concealed and transmitted are selected as the second secret information to be embedded, and based on the corresponding relationship between the second secret information to be embedded and the preset number of WebSocket non-fragmented data packets and the secret information, the WebSocket non-fragmented data packet corresponding to the second secret information to be embedded is determined, and the WebSocket non-fragmented data packet is sent; wherein j is a positive integer; Determine whether the number of bits of the secret information to be concealedly transmitted in the current iteration is 0, and obtain a second determination result; If the second judgment result is no, the second secret information to be embedded is removed from the secret information to be concealedly transmitted in the current iteration, the secret information to be concealedly transmitted in the next iteration is obtained, and the step of "selecting the first i bits of the secret information to be concealedly transmitted as the first secret information to be embedded" is returned.

2. The time covert channel covert communication method for Internet of Vehicles according to claim 1 is characterized in that: i≤I, Where I is a positive integer, and M is the maximum length of the number of fragments of the WebSocket fragmented data packet collected in the actual application scenario; The correspondence between the number of fragments of the WebSocket fragmented data packet and the secret information is as follows: The value range of the number of fragments m of the WebSocket fragmented data packet is [xd+2, xd+y+2], where x=2 I-i , d is the decimal number converted from the i-bit secret information, y = 2 I-i -1; V is the maximum number of WebSocket non-fragmented packets between two WebSocket fragmented packets collected in actual application scenarios; The correspondence between the preset number of WebSocket non-fragmented data packets and the secret information is: the number of WebSocket non-fragmented data packets J=ke+1, where k is a positive integer and e is a decimal number converted from j bits of secret information.

3. The time covert channel covert communication method for Internet of Vehicles according to claim 1 is characterized in that: Before sending the WebSocket fragmented data packet for the first time, the time covert channel type covert communication method for the Internet of Vehicles further includes: continuously sending n WebSocket fragmented data packets, indicating the start of covert communication; When the first judgment result is yes or the second judgment result is yes, the time covert channel type covert communication method for the Internet of Vehicles further includes: continuously sending n WebSocket fragmented data packets, indicating that the covert communication ends; Among them, N is less than n.

4. The time covert channel covert communication method for Internet of Vehicles according to claim 2 is characterized in that: Determining the WebSocket fragmented data packet corresponding to the first secret information to be embedded based on the first secret information to be embedded and the correspondence between the preset number of fragments of the WebSocket fragmented data packet and the secret information specifically includes: Determine a range of the number of fragments of the WebSocket fragmented data packet corresponding to the first secret information to be embedded based on the first secret information to be embedded and the correspondence between the preset number of fragments of the WebSocket fragmented data packet and the secret information; Randomly select a number of fragments of a WebSocket fragmented data packet within the range of the number of fragments of the WebSocket fragmented data packet as the first number of fragments corresponding to the first secret information to be embedded; Determine whether there is a WebSocket fragment data packet with a first number of fragments; If yes, then selecting the WebSocket fragmented data packet having the first number of fragments as the WebSocket fragmented data packet corresponding to the first secret information to be embedded; If not, then select the WebSocket fragmented data packet with the second number of fragments as the WebSocket fragmented data packet corresponding to the first secret information to be embedded, and set the first secret information to be embedded to empty; wherein the second number of fragments is P, P>2 I +1.

5. The time covert channel covert communication method for Internet of Vehicles according to claim 2 is characterized in that: Determining the WebSocket non-fragmented data packet corresponding to the second secret information to be embedded based on the second secret information to be embedded and the correspondence between the preset number of WebSocket non-fragmented data packets and the secret information specifically includes: Determine the number J of WebSocket non-fragmented data packets corresponding to the second secret information to be embedded based on the second secret information to be embedded and the preset correspondence between the number of WebSocket non-fragmented data packets and the secret information; J WebSocket non-fragmented data packets are randomly selected as the WebSocket non-fragmented data packets corresponding to the second secret information to be embedded.

6. The time covert channel covert communication method for Internet of Vehicles according to claim 2 is characterized in that: The method for determining i, j, and k includes: if a higher secret information transmission rate is required, then i and j are increased and k is decreased; if the communication network environment is complex or there is a security threat, then i is decreased.

7. The time covert channel covert communication method for Internet of Vehicles according to claim 1 is characterized in that: If the second judgment result is no, before returning to the step of "selecting the first i bits of the secret information to be concealedly transmitted as the first secret information to be embedded", the time covert channel covert communication method for the Internet of Vehicles also includes: re-randomly determining the value of N.

8. A computer device comprising: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the time covert channel type covert communication method for Internet of Vehicles as claimed in any one of claims 1 to 7.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the time covert channel covert communication method for the Internet of Vehicles described in any one of claims 1 to 7 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the time covert channel covert communication method for the Internet of Vehicles described in any one of claims 1 to 7 is implemented.

Images