Cross-platform secure space Internet of Vehicles evidence obtaining method and device based on block chain

Abstract

The invention relates to a cross-platform secure space Internet of Vehicles evidence obtaining method and device based on a block chain, and belongs to the field of data interaction of Internet of Vehicles. The method comprises the steps that a user registers in an authority and submits registration transaction information and evidence information to the authority, the authority generates corresponding encryption keys for the registration transaction information and the evidence information, and hash values of the registration transaction information and the evidence information are stored on a block chain through an intelligent contract; the authority constructs an access view for the registration information and the evidence information, and strictly controls and records the access authority; the smart contract operates on the cross-platform security space; and the cross-platform security space provides a secure environment for storage data in the block chain by adopting memory isolation and a'conversion gate 'mechanism. According to the method and the device, an access control technology mechanism is designed on the basis of a block chain technology and a cross-platform security space technology, and a safe and reliable method is provided for vehicle digital forensics.

Description

Technical Field

[0001] The present invention belongs to the field of data interaction of Internet of Vehicles, and specifically relates to a cross-platform secure space Internet of Vehicles evidence collection method and device based on blockchain. Background Art

[0002] With the booming development of 5G and Internet of Vehicles technology, the autonomous driving of vehicles has also entered a period of rapid development. Vehicles not only have driving functions, but are also equipped with a large number of advanced equipment such as sensors, event data recorders, and electronic control units to collect and record vehicle operating status, driver behavior, and external environment information. These data play a vital role in traffic accident analysis, liability determination, and insurance claims. Especially in vehicle collision accidents, forensic data can provide key evidence such as driving speed, braking action, steering wheel operation, and airbag deployment time, providing a scientific basis for case analysis in litigation. In the event of a traffic accident, investigators can extract and analyze forensic information from the vehicle's software or electronic modules to provide key evidence for court proceedings. This process significantly improves the efficiency of case investigations. However, this convenience also increases the risk of malicious attackers tampering with evidence in the vehicle's electronic equipment.

[0003] Figure 1The process of vehicle digital forensics in the prior art is presented, and the collection, storage and application process of vehicle accident data in litigation are demonstrated, which is divided into the accident scene processing stage and the trial process stage. In the accident scene processing stage, the vehicle accident data is collected by investigators to the data center, which has the functions of receiving, storing and supporting data retrieval. Subsequently, the stored data is used in the trial process stage to provide evidence support for the court. During the trial, the court analyzes the evidence submitted in the lawsuit, makes a corresponding trial, and makes the trial results public. First, in the data collection stage, vehicle sensors collect data regularly. After the accident, there is a risk that relevant personnel tamper with or delete driving data to evade responsibility. Secondly, even if the data is transmitted to the data center, there is still a possibility that the relevant data will be deleted or manipulated. Finally, in the evidence retrieval stage, accident investigators may also delete or manipulate the data. Solving these security issues is crucial for vehicle digital forensics. Therefore, it is crucial to protect information in the vehicle digital forensics system. In order to deal with these security risks, various blockchain-based algorithms and models have been proposed to protect data in vehicle digital forensics. Although the multi-party consensus feature of blockchain can enhance the security and integrity of forensic data, these methods often ignore the risk of attacks on the operating environment of the blockchain system. Existing technologies gradually introduce blockchain technology and encryption technology to improve the credibility and security of evidence data. However, traditional blockchain applications in vehicle digital forensics scenarios ignore the security of the blockchain operating environment. Attackers may affect blockchain calculations through operating system kernel vulnerabilities; and data access cannot dynamically manage permissions or track access records.

[0004] It can be seen that the existing technology has the following shortcomings and deficiencies: (1) The host operating system may be hacked by attackers, which may cause the relevant data to be tampered with. (2) In the scenario of multi-department collaboration, there is a lack of sophisticated access control and data encryption solutions, which brings serious risks of data leakage or tampering. (3) There is a lack of traceability of user access records. Summary of the invention

[0005] In order to solve the above technical problems, the present invention adopts the following technical solutions:

[0006] A cross-platform secure space Internet of Vehicles evidence collection method based on blockchain, comprising the following steps:

[0007] Step 1: User registration; the user sends a registration request and registration information, the authority receives the registration request and registration information from the user, and stores the registration information on the blockchain through a smart contract;

[0008] Step 2: Evidence upload: The registered user transmits the evidence data to the authority. After receiving the evidence data, the authority symmetrically encrypts the evidence data and stores it in the data storage center. At the same time, the hash value of the evidence data is recorded on the blockchain through a smart contract.

[0009] Step 3: Evidence retrieval and building access view; investigators submit an evidence retrieval request to the authority and specify the forensic data related to a traffic accident; after receiving the evidence retrieval request, the authority first verifies the identity of the requester. After the identity verification is passed, the data retrieval operation is initiated from the blockchain and data storage center; the original forensic data is obtained through the data retrieval operation.

[0010] A cross-platform secure space Internet of Vehicles evidence collection device based on blockchain, comprising:

[0011] User registration module, where users send registration requests and registration information, and the authority receives the registration requests and registration information from users and stores the registration information on the blockchain through smart contracts;

[0012] Evidence upload module: registered users transmit evidence data to the authority. After receiving the evidence data, the authority symmetrically encrypts the evidence data and stores it in the data storage center. At the same time, the hash value of the evidence data is stored on the blockchain through a smart contract.

[0013] In the evidence retrieval and access view building module, investigators submit evidence retrieval requests to the authority and specify the forensic data related to a traffic accident. After receiving the evidence retrieval request, the authority first verifies the identity of the requester. After the identity verification is passed, the data retrieval operation is initiated from the blockchain and data storage center. The original forensic data is obtained through the data retrieval operation.

[0014] An electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, the steps of the cross-platform secure space Internet of Vehicles forensics method based on blockchain are implemented.

[0015] A non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the cross-platform secure space Internet of Vehicles forensics method based on blockchain.

[0016] A smart terminal includes a processor, an input device, an output device and a memory, wherein the processor, the input device, the output device and the memory are interconnected, the memory is used to store a computer program, the computer program includes program instructions, and the processor is configured to call the program instructions to execute the cross-platform secure space Internet of Vehicles forensics method based on blockchain.

[0017] The present invention has the following beneficial effects:

[0018] 1. The blockchain-based cross-platform secure space Internet of Vehicles evidence collection method of the present invention combines the cross-platform secure space (CPSS) with blockchain technology, and ensures the integrity and authenticity of evidence data through memory isolation and smart contract mechanisms. The cross-platform secure space (CPSS) is independent of specific hardware and supports cross-operating system and platform operations.

[0019] 2. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain of the present invention stores the hash value of the evidence information on the blockchain, and uses the access control algorithm to perform refined authority division on the evidence data. Only authorized users can access the evidence data within a specific range, and each access behavior is recorded and audited to ensure the security of privacy information.

[0020] 3. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain of the present invention utilizes blockchain and distributed storage technology to realize rapid storage and retrieval of evidence data, while providing flexible user dynamic management functions, supporting dynamic joining and exiting of users, and realizing traceability of user access records. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 Flowchart for digital forensics of prior art vehicles;

[0022] Figure 2a This is a flowchart of the evidence uploading stage;

[0023] Figure 2b This is a flowchart of the user registration phase;

[0024] Figure 2c A flowchart for the access view phase of evidence retrieval and construction;

[0025] Figure 3 Schematic diagram of the cross-platform security space of the present invention. DETAILED DESCRIPTION

[0026] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention. In addition, the technical features involved in the various embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

[0027] The method provided by the present invention is based on blockchain technology and cross-platform security space (CPSS) technology, and designs an access control technology mechanism to provide a safe and reliable method for vehicle digital forensics.

[0028] like Figure 2a , Figure 2b , Figure 2c As shown, the cross-platform secure space Internet of Vehicles evidence collection method based on blockchain of the present invention is divided into three stages: 1. User registration stage, 2. Evidence upload stage, 3. Evidence retrieval and access view construction stage; wherein, the police represent investigators or law enforcement officers. The details are as follows;

[0029] 1. User registration stage.

[0030] like Figure 2a As shown in the figure, the user sends a registration request and registration information, and the authority receives registration requests from two main types of users: vehicles and individuals. Vehicles are further divided into ordinary vehicles and accident-related vehicles, while individuals include investigators and witnesses or other accident-related persons. Each user has specific data related to road accidents. After receiving the user's registration request, the authority stores the registration information, i.e., data, on the blockchain through a smart contract.

[0031] 2. Evidence uploading stage.

[0032] like Figure 2b As shown in the figure, the registered user transmits real-time status data or manually collected forensic data to the authority. If the registered user is a vehicle, the vehicle sends real-time status information to the roadside unit (RSU) through the Internet of Vehicles technology. The roadside unit (RSU) then forwards this status data to the authority. After receiving this forensic data, the authority symmetrically encrypts the data and stores it in the data storage center. In addition, the hash value of the forensic data is stored on the blockchain through a smart contract. This process ensures the security and integrity of the evidence.

[0033] 3. Evidence retrieval and access view construction phase.

[0034] like Figure 2c As shown in Figure 1, evidence retrieval involves accessing and retrieving stored evidence data from the system. Investigators need to submit an evidence retrieval request to the authority and specify data related to a traffic accident.

[0035] After receiving the request, the authority first verifies the identity of the requester. After the identity verification is passed, the authority initiates the data retrieval operation from the blockchain and the data storage center. The retrieval process includes obtaining symmetrically encrypted forensic data from the data storage center and the hash value of the corresponding forensic data from the blockchain, building an access view for the registration information or evidence information to be retrieved, encrypting the relevant information, and then returning all the data to the investigator, who can view the original forensic data after decryption. In order to ensure the integrity and consistency of the data, the investigator compares the manually calculated hash value with the original hash value stored in the blockchain.

[0036] The following are the parameters related to the vehicle digital forensics structure:

[0037] Pr i On behalf of a registered user;

[0038] Trid i The ID representing the registration transaction;

[0039] Uid i Represents the ID of the registered user;

[0040] T i [N] represents the non-private information in the registration transaction (N stands for non-private);

[0041] T i [S] represents the private information in the registration transaction (S stands for privacy);

[0042] Kp i Represents the public key of the registered user;

[0043] K i Represents the symmetric key for encrypting user private data;

[0044] T i Represents a registration transaction;

[0045] KPub i Represents the public key of the registered user;

[0046] Pu i Represents the data uploader;

[0047] Tu i Represents a transaction for uploading evidence information;

[0048] Tuid i The ID of the transaction that uploaded the evidence information;

[0049] Tu i [N] represents the non-private information in the uploaded data (N stands for non-private);

[0050] s represents a random salt value;

[0051] Ku i A symmetric key representing the person who uploaded the data;

[0052] Kvr i A symmetric key representing the registration information;

[0053] Kvu i A symmetric key representing the evidence information;

[0054] KP i Represents the private key of the registered user;

[0055] Enc stands for encryption;

[0056] Tvr i A transaction representing a view that accesses registration information;

[0057] TvU i A transaction representing an access view of evidence information.

[0058] In the following specific embodiments, in the above parameters with subscript i, subscript i represents the i-th parameter, i takes a natural number from 1 to n, when i takes 1, it represents the first parameter, when i takes n, it represents the n-th parameter, and n is the total number of parameters. i in the new parameters (new parameters not included in the above related parameters) appearing below has the same meaning.

[0059] The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain of the present invention specifically includes:

[0060] 1. User registration stage: First, register the user Pr i (e.g., vehicle user, investigator, or witness) submits a registration transaction to an authority i The registration transaction Tr i Include the ID of the registration transaction: Trid i , ID of the registered user: Uid i , Non-private information Tr in registration transaction i [N] (such as metadata such as timestamps), private information in registration transactions Tr i [S] (such as gender and age, etc.) and the registered user's public key KPub i The authority receives the registration transaction Tr i After that, the smart contract is called to generate a new Pr for each registered user. i Generate a unique symmetric key Kr to encrypt user private data i (This key is then stored with the authority.) Kr iUsed to encrypt user's private information Tr i [S], the encrypted result is Enc(Tr i [S], Kr i ). Next, register the transaction Tr i In the smart contract, it is reconstructed into a five-tuple {Trid i , Uid i ,Tr i [N],Enc(Tr i [S], Kr i ), KPub i}. Ultimately, this five-tuple will be recorded and stored on the blockchain through a smart contract as registration information.

[0061] 2. Evidence upload stage: This includes three scenarios: (1) Investigators upload video and image evidence from the accident scene; (2) Witnesses upload photos, videos, and related information from the accident scene; and (3) Vehicles regularly upload vehicle status to the roadside unit (RSU).

[0062] The core steps of the three scenarios are basically the same, the only difference is that scenario (1) and scenario (2) directly upload the evidence information to the authority, while scenario (3) requires the vehicle status information to be forwarded to the authority through the roadside unit (RSU). The implementation process of the core steps of the three scenarios is as follows:

[0063] Step 21: Data Uploader Pu i Send a transaction to the authority to upload evidence information i , upload the transaction Tu of evidence information i The ID of the transaction containing the uploaded evidence information: Tuid i , non-private information in uploaded data Tu i [N], random salt value s, and transaction Tu for uploading evidence information i The hash value Hash(Tu i +s). This information is generated by local calculation by the data uploader to ensure the originality and integrity of the data and prevent authoritative organizations from tampering with the data.

[0064] Step 22: The authority receives Tu i After that, the smart contract is called to generate the symmetric key Ku of the data uploader. i , and use Ku i Tu i Encryption processing is performed to obtain encrypted data Enc(Tu i , Ku i ). The smart contract then combines the encrypted data with the relevant identification information into a new transaction Tud i={Tuid i , Uid i ,Enc(Tu i , Ku i )}. The authority will Tud i Sent to the distributed data storage center for storage.

[0065] Step 23: The authority will upload the transaction map of the evidence information i Refactored into a new five-tuple transaction Tuf i ={Tuid i , Uid i , Tu i [N],s,Hash(Tu i +s)}, the quintuple Tuf i It is then stored on the blockchain through a smart contract. During the entire evidence upload process, the salt value and hash value are generated and calculated locally by the data uploader, ensuring that the authority cannot tamper with or forge the data content, further improving the security and credibility of the system. i , Tud i and Tuf i All use a unified ID, which is the ID of the transaction that uploaded the evidence information: Tuid i , achieving unique identification and traceability of data, facilitating subsequent data retrieval and verification.

[0066] 3. Evidence retrieval and access view construction stage.

[0067] Evidence retrieval includes registration information retrieval and evidence information retrieval. Construct access views to encrypt the information again to ensure refined authority division for evidence data access, so that only authorized personnel can access evidence data within a specific scope. The specific process is as follows:

[0068] 3.1. Registration information retrieval and construction access view.

[0069] There are two situations: (1) the user can access his or her own registration information; (2) the investigator wants to access the registration information of other users.

[0070] In case (1), the specific steps are as follows:

[0071] After verifying the user’s identity, the authority can retrieve the user’s registration transaction Tr from the blockchain. i , and provide it to the user, and at the same time encrypt the symmetric key Kr of the user's private data i Sent to the user, who then uses Kr i To Tr i Decrypt the private data in .

[0072] In case (2), the specific steps are as follows:

[0073] Step 31: The authority builds an access view for the user's registration information through a smart contract. Specifically, the authority calls the smart contract to generate a symmetric key Kvr i , used to encrypt Trid i 、Uid i and Kr i Next, the smart contract generates an encrypted list in the format of Enc[(Trid i , Uid i , Kr i ), Kvr i ]. Among them, Trid i Indicates the ID of the registration transaction involved in the case, Uid i Represents the ID of the registered user, Kr i It is the symmetric key for encrypting user private data (sent from the local to the smart contract by the authority), Kvr i is the symmetric key for the registration information. This encrypted list is recorded as a transaction Tvr i ={Tvrid i ,Enc[(Trid i , Uid i , Kr i ), Kvr i ]}, where Tvrid i For trading Tvr i and stored on the blockchain.

[0074] Step 32: To grant access to the investigator, the authority needs to retrieve the investigator’s registration information on the blockchain (this process involves calling a smart contract) to obtain the investigator’s public key KPub i The authority then uses the investigator’s public key to access Kvr using a smart contract. i Encrypt Enc(Kvr i , KPub i ) and form the transaction Tvra i ={Tvraid i ,Enc(Kvr i , KPub i )}, where Tvraid i For trading Tvra i ID, which will then trade Tvra i Write to the blockchain.

[0075] The authority will Tvrid i and Tvraid iFeedback to investigators, who use Tvrid i and Tvraid i Retrieve Tvr on the blockchain i and Tvra i . Then, use your own private key KPri i (Public and private keys are set in pairs, public key KPub i The encrypted information can be obtained using the private key KPri i Decryption) Decrypt Tvra i , thereby obtaining Kvr i Next, investigators used Kvr i Decrypt Tvr i , get Kr i and Tr i Trid i , then retrieve the transaction Tr on the blockchain i , and use the obtained Kr i For user privacy information Tr i [S] is decrypted to obtain all registration information of users involved in the case.

[0076] 3.2. Evidence information retrieval and access view construction. The specific steps are as follows:

[0077] Step 41: After receiving the court's investigation order, the investigator obtains the role permissions related to the case, and then uses the investigation order to generate a data request and submit the request to the authority.

[0078] Step 42: The authority calls the smart contract to generate a symmetric key Kvu for the evidence information i , used to grant transaction Tu for uploading evidence information i Then, the smart contract uses Kvu i Tuid i and Uid i and its corresponding symmetric key Ku i Encrypted as Enc[(Tuid i , Uid i ), Ku i ), Kvu i ] and record these encrypted information as transaction Tvu i ={Tvuid i ,Enc[(Tuid i , Uid i , Ku i ), Kvu i ]}, where Tvuid i For TV iID, then trade Tvu i Write to the blockchain.

[0079] Step 43: The authority retrieves the public key KPub of the investigator who wants to obtain evidence information from the blockchain. i , and use the investigator's public key to symmetric key Kvu i Encryption is performed and access view is constructed. This process is constructed as transaction Tvua i ={Tvuaid i ,Enc(Kvu i , KPub i )}, where Tvuaid i For trading Tvua i ID, then trade Tvua i Write to the blockchain. i and TVuaid i The investigators then retrieved the transaction Tvu on the blockchain. i and Tvua i ID: Tvuid i and TVuaid i , get the transaction Tvu i and Tvua i The investigator then used his private key KPri i (Public and private keys are set in pairs, public key KPub i The encrypted information can be obtained using the private key KPri i Decryption) Decrypt Tvua i , thus obtaining Kvu i ; Then, the investigators used Kvu i Decrypt Tvu i , obtain the symmetric key Ku i and transaction i The ID of the registration transaction: Tuid i . i , Tud i , Tuf i The transaction ID is the same as that of i Then go to the blockchain to retrieve the transaction Tuf i , and then get the five-tuple transaction Tuf i ={Tuid i , Uid i , Tu i [N],s,Hash(Tu i +s)}. At the same time, the authority searches the distributed storage system and provides the investigators with encrypted evidence information Enc{Tui , Ku i}. After receiving the download link, the investigators downloaded the data and used the symmetric key Ku i Decrypt the data. Finally, the investigators calculated the five-tuple transaction Tuf i Hash value in Hash(Tu i +s) and compare it with the hash value originally generated in step 21 to verify the integrity and authenticity of the data.

[0080] Because the roles or responsibilities of investigators may change over time, a revocable access control mechanism is incorporated into the design of the evidence information access rights system. Once the investigator changes, the court will notify the authority to terminate the previous investigator's access to the blockchain and distributed storage system. Although the investigator will retain access to locally downloaded and stored information, they will not be able to access or download any additional data. This design ensures strict management of access to evidence information, thereby preventing investigators who have lost their authority from accessing sensitive information without authorization.

[0081] In the present invention, the smart contract is executed in the cross-platform security space (CPSS), which deprives the host operating system (HostOS) of the management authority over the physical memory and transfers the authority to an independent security space (CPSS Space). The specific implementation steps are as follows:

[0082] Step 51 The Cross-Platform Security Space (CPSS) uses two sets of page tables to create an isolated space. During the initialization process, the Cross-Platform Security Space (CPSS) creates a dedicated page table that excludes the memory area of ​​the secure space (CPSS Space) to ensure that the host operating system (HostOS) cannot access the memory range used by the Cross-Platform Security Space (CPSS). At the same time, the Cross-Platform Security Space (CPSS) also deletes the execution permissions of all kernel codes (especially loadable kernel module codes) to prevent kernel vulnerabilities from being exploited.

[0083] Step 52: The Cross-Platform Security Space (CPSS) deprives the kernel page table and IOMMU (input / output memory management unit, a memory management unit that controls DMA access addresses) of access privileges to implement a secure execution environment. The Cross-Platform Security Space (CPSS) uses hooks to direct read cr3(), write cr3(data), pgd write(), pmd write(), pud write(), and pte write() (the code of kernel operation commands in the operating system) in the kernel page table to the secure space (CPSS Space), and uses hooks to deprive the mapping permission of IOMMU (input / output memory management unit, a memory management unit that controls DMA access addresses). The switch gate (SwitchGate) is used as the only connection point to ensure the secure switching between the normal space (Normal Space) and the secure space (CPSS Space).

[0084] Step 53: The Cross-Platform Security Space (CPSS) removes write permissions for the entire kernel page table, preventing the host operating system (HostOS) from modifying the dedicated kernel page table. Secondly, all page table management functions and macros are replaced with hooks to ensure that modifications to the dedicated kernel page table in the Normal Space are redirected to the secure space (CPSSSpace). Finally, the host operating system (HostOS) is prohibited from executing specific control register related functions to prevent the CPU (central processing unit) from using unverified page tables.

[0085] Step 54: The Cross-Platform Secure Space (CPSS) prevents attackers from disabling the write protection mechanism or using unverified page tables by intercepting access operations to the control registers (CR0, CR3, CR4), ensuring that the isolation of the secure space (CPSS Space) is not compromised.

[0086] like Figure 3 As shown, Figure 3The schematic diagram of the cross-platform security space of the present invention. Malicious code exploits kernel vulnerabilities or DMA (direct memory access) vulnerabilities to tamper with or leak memory data, threatening the security and integrity of evidence data. DMA service refers to the creation, access and deletion of IOMMU (input / output memory management unit, a memory management unit that controls DMA access addresses). The cross-platform security space (CPSS) uses hooks to direct the code and DMA services in the kernel page table to the secure space (CPSS Space). To this end, the cross-platform security space (CPSS) creates a secure space (CPSSSpace) and introduces a "conversion gate" mechanism to achieve a secure conversion between the normal space and the secure space (CPSS Space). In the host operating system (HostOS), the cross-platform security space (CPSS) deprives the service device (system control register, direct memory access, kernel page table hook) of control over the host operating system's normal space. The verification service in the security space (CPSS Space) monitors the host operating system (HostOS) in real time, mainly including: detecting control registers (CR0, CR3, CR4) to prevent illegal memory operations, whether to create DMA (direct memory access), and setting the host kernel page table checker to check the integrity of the kernel page table to prevent malicious modifications. Through these mechanisms, the cross-platform security space (CPSS) ensures the security of forensic data during storage, transmission and calculation, and prevents the impact on blockchain nodes after the host operating system is compromised. In the present invention, the cross-platform security space (CPSS) is combined with blockchain technology to provide strong security protection for the vehicle digital forensics system by protecting the integrity and immutability of memory data in real time, ensuring the credibility and traceability of evidence information in complex environments.

[0087] The cross-platform security space of the present invention adopts a "conversion gate" mechanism, which includes an entry gate, an exit gate, and a shared buffer. The "conversion gate" mechanism includes a process and memory access protection for realizing secure conversion between the normal space and the secure space. As the only interface connecting the two spaces, the "conversion gate" controls the conversion process through the entry gate and the exit gate to ensure the security of the kernel state, memory access rights, and the execution environment.

[0088] The entry gate is responsible for the execution process of data processing work from the normal space to the cross-platform secure space, which mainly includes six steps: (1) Save the current host kernel state to ensure the integrity of kernel information; (2) Clear interrupts to prevent data forwarding work from being interfered with by malicious code during the conversion process; (3) Write data to the CR3 register and point the page table to the cross-platform secure space; (4) Refresh the translation lookaside buffer (TLB) to ensure that the new page table takes effect; (5) Clear interrupts again to ensure the atomicity of the conversion from normal space to secure space; (6) Data processing work jumps to the secure space to execute tasks.

[0089] The shared buffer serves as a data exchange area between the two spaces, storing common data and code to achieve secure information sharing while avoiding memory information leakage or unauthorized access.

[0090] The exit gate is responsible for the process of returning from the secure space to the normal space, including: (1) refreshing the translation lookaside buffer (TLB) and clearing the previous page table cache; (2) restoring the CR3 register and redirecting the page table to the normal space; (3) setting up interrupts and resuming interrupt processing; (4) restoring the previously saved kernel state to ensure the execution environment of the normal space; (5) jumping back to the normal space to continue executing the task.

[0091] Memory access permissions are strictly separated in two spaces: in the normal space, the core code and core data provide execution permissions to the operating system, while in the cross-platform security space, the cross-platform security space code and cross-platform security space data are mapped as read-only or read-write for code and data operations in the secure space. The "conversion gate" always remains read-only to ensure that it cannot be tampered with by the normal space. In the cross-platform security space, except for the cross-platform security space code and cross-platform security space data required for the execution of security tasks, the memory mapping of the normal space is canceled to prevent illegal access or data leakage.

[0092] The method provided by the present invention is based on blockchain technology and cross-platform security space (CPSS) technology, and designs an access control technology mechanism to provide a safe and reliable method for vehicle digital forensics.

[0093] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. The solutions in the embodiments of the present invention may be implemented in various computer languages, for example, object-oriented programming language Java and interpreted scripting language JavaScript, etc.

[0094] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0095] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0096] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0097] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0098] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A cross-platform secure space Internet of Vehicles evidence collection method based on blockchain, characterized in that: The steps include: Step 1: User registration; the user sends a registration request and registration information, the authority receives the registration request and registration information from the user, and stores the registration information on the blockchain through a smart contract; Step 2: Upload evidence; The registered user transmits the forensic data to the authority. After receiving the forensic data, the authority symmetrically encrypts the forensic data and stores it in the data storage center. At the same time, the hash value of the forensic data is stored on the blockchain through a smart contract. Step 3: Evidence retrieval and building access views; Investigators submit an evidence retrieval request to an authority and specify forensic data related to a traffic accident. After receiving the evidence retrieval request, the authority first verifies the identity of the requester. After the identity verification is passed, the authority initiates the data retrieval operation from the blockchain and data storage center. The original forensic data is obtained through the data retrieval operation.

2. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to claim 1 is characterized in that: In step 1, the users include vehicles and individuals, the vehicles include ordinary vehicles and accident-related vehicles, the individuals include investigators, witnesses or other accident-related persons, and the users have specific forensic data related to the road accident.

3. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to claim 1 is characterized in that: In step 2, when the registered user is a vehicle, the vehicle sends the evidence data to the roadside unit through the Internet of Vehicles technology, and the roadside unit forwards the evidence data to the authority.

4. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to claim 1 is characterized in that: The forensic data includes real-time status data or manually collected forensic data.

5. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to claim 1 is characterized in that: In step 3, the retrieval process includes obtaining symmetrically encrypted forensic data from the data storage center and obtaining the hash value of the corresponding forensic data from the blockchain, constructing an access view for the registration information or evidence data to be retrieved, and then returning all the data to the investigator, who decrypts and views the original forensic data.

6. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to claim 1 is characterized in that: The step 1 specifically includes: registering user Pr i Submit the registration transaction Tr to the authority i , the registration transaction Tr i Include the ID of the registration transaction: Trid i , ID of the registered user: Uid i , Non-private information Tr in registration transaction i [N], Private information Tr in registration transaction i [S] and the registered user's public key KPub i ; The authority receives the registration transaction Tr i After that, the smart contract is called to generate a new Pr for each registered user. i Generate a unique symmetric key Kr to encrypt user private data i , the symmetric key Kr i Then stored in an authority; the symmetric key Kr i Used to encrypt user's private information Tr i [S], the encrypted result is Enc(Tr i [S], Kr i );Next, register transaction Tr i In the smart contract, it is reconstructed into a five-tuple {Trid i , Uid i ,Tr i [N],Enc(Tr i [S], Kr i ), KPub i }, the five-tuple is recorded as registration information through a smart contract and stored on the blockchain, where the parameter subscript i represents the i-th parameter, i is a natural number from 1 to n, and n is the total number of parameters.

7. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to claim 6 is characterized in that: The step 2 comprises: Step 21: Data Uploader Pu i Send a transaction to the authority to upload evidence information i , the transaction Tu of uploading evidence information i The ID of the transaction containing the uploaded evidence information: Tuid i , non-private information in uploaded data Tu i [N], random salt value s, and transaction Tu for uploading evidence information i The hash value Hash(Tu i +s); Step 22: The authority receives Tu i After that, the smart contract is called to generate the symmetric key Ku of the data uploader. i , and use Ku i Tu i Encryption processing is performed to obtain encrypted data Enc(Tu i , Ku i ); Subsequently, the smart contract combines the encrypted data with relevant identification information into a transaction Tud i ={Tuid i , Uid i ,Enc(Tu i , Ku i )}; the authority will Tud the transaction i Send to distributed data storage center; Step 23: The authority will upload the transaction map of the evidence information i Refactored into a five-tuple transaction Tuf i ={Tuid i , Uid i , Tu i [N],s,Hash(Tu i +s)}, the five-tuple transaction Tuf i It is then stored on the blockchain through a smart contract; i , Tud i and Tuf i Use a unified ID: Tuid i .

8. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to claim 7 is characterized in that: The step 3 includes: retrieving registration information and building access view, retrieving evidence information and building access view.

9. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to claim 8 is characterized in that: The registration information retrieval and access view construction include: case 1, the user accesses his own registration information; case 2, the investigator accesses the registration information of other users; Case 1 includes: After verifying the user's identity, the authority retrieves the user's registration transaction Tr from the blockchain i , and provide it to the user, and at the same time encrypt the symmetric key Kr of the user's private data i Sent to the user, who then uses Kr i To Tr i Decrypt the private data in the Case 2 includes: Step 31 The authority constructs an access view for the user's registration information through a smart contract, specifically: The authority calls the smart contract to generate a symmetric key Kvr for the registration information i , used to encrypt Trid i 、Uid i and Kr i ; The smart contract generates an encrypted list in the format of Enc[(Trid i , Uid i , Kr i ), Kvr i ], the encrypted list is recorded as transaction Tvr i ={Tvrid i ,Enc[(Trid i , Uid i , Kr i ), Kvr i ]}, where Tvrid i For trading Tvr i ID, and then trade Tvr i Write to blockchain; Step 32: The authority obtains the investigator’s public key KPub i , calling the smart contract using the investigator’s public key KPub i About Kvr i Encrypt Enc(Kvr i , KPub i ) and form the transaction Tvra i ={Tvraid i ,Enc(Kvr i , KPub i )}, where Tvraid i For trading Tvra i ID, which will then trade Tvra i Write to blockchain; The authority will Tvrid i and Tvraid i Feedback to investigators, who use Tvrid i and Tvraid i Retrieve Tvr on the blockchain i and Tvra i , and then use your own private key KPri i Decrypting Tvra i , get Kvr i ; and using Kvr i Decrypt Tvr i , get Kr i and Trid i , then retrieve the transaction Tr on the blockchain i , and use the obtained Kr i For user privacy information Tr i [S] decrypts and obtains all registration information of users involved in the case.

10. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to claim 8 is characterized in that: The evidence information retrieval and access view construction include: Step 41: After obtaining authorization, the investigator submits the request for evidence information to the authority; Step 42: The authority calls the smart contract to generate a symmetric key Kvu for the evidence information i , Kvu i Transaction Tu used to grant access to uploaded evidence information i Access rights; smart contracts use Kvu i Tuid i and Uid i and its corresponding symmetric key Ku i Encrypted as Enc[(Tuid i , Uid i , Ku i ), Kvu i ] and record these encrypted information as transaction Tvu i ={Tvuid i ,Enc[(Tuid i , Uid i , Ku i ), Kvu i ]}, where Tvuid i For TV i ID, then trade Tvu i Write to blockchain; Step 43: The authority retrieves the public key KPub of the investigator who wants to obtain evidence information from the blockchain. i , and use the investigator's public key to symmetric key Kvu i Encryption is performed and access view is constructed; this process is constructed as transaction Tvua i ={Tvuaid i ,Enc(Kvu i , KPub i )}, where Tvuaid i For trading Tvua i ID, which will then be traded to Tvuaid i Write to blockchain, Tvuid i and TVuaid i This is then fed back to investigators; investigators retrieve Tvuid on the blockchain i and TVuaid i , get the transaction Tvu i and Tvua i , and then use your own private key KPri i Decrypting Tvua i , get Kvu i ; Investigators used Kvu i Decrypt Tvu i , obtain the symmetric key Ku i and transaction i The ID of the registration transaction: Tuid i ; Due to Tu i , Tud i , Tuf i The transaction ID is the same as that of i Then go to the blockchain to retrieve the transaction Tuf i , get the five-tuple transaction Tuf i ={Tuid i , Uid i , Tu i [N],s,Hash(Tu i +s)}; At the same time, the authority searches the distributed storage system and provides the investigators with encrypted evidence information Enc(Tu i , Ku i )}; After receiving the download link, the investigator downloads the data and uses the obtained symmetric key Ku i Decrypt the data; finally, the investigators calculated the five-tuple transaction Tuf i Hash value in Hash(Tu i +s) and compare it with the hash value originally generated in step 21 to verify the integrity and authenticity of the data.

11. The cross-platform secure space Internet of Vehicles evidence collection method based on blockchain according to any one of claims 1 to 10, characterized in that: The smart contract is executed in a cross-platform security space, which deprives the host operating system of management rights over physical memory and transfers the rights to an independent security space.

12. A cross-platform secure space Internet of Vehicles evidence collection device based on blockchain, characterized in that: include: User registration module, where users send registration requests and registration information, and the authority receives the registration requests and registration information from users and stores the registration information on the blockchain through smart contracts; Evidence upload module: registered users transmit evidence data to the authority. After receiving the evidence data, the authority symmetrically encrypts the evidence data and stores it in the data storage center. At the same time, the hash value of the evidence data is stored on the blockchain through a smart contract. In the evidence retrieval and access view building module, investigators submit evidence retrieval requests to the authority and specify the forensic data related to a traffic accident. After receiving the evidence retrieval request, the authority first verifies the identity of the requester. After the identity verification is passed, the data retrieval operation is initiated from the blockchain and data storage center. The original forensic data is obtained through the data retrieval operation.

13. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the cross-platform secure space Internet of Vehicles forensics method based on blockchain as described in any one of claims 1 to 11 are implemented.

14. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the cross-platform secure space Internet of Vehicles forensics method based on blockchain as described in any one of claims 1 to 11 are implemented.

15. An intelligent terminal, comprising a processor, an input device, an output device and a memory, wherein the processor, the input device, the output device and the memory are interconnected, the memory is used to store a computer program, the computer program comprises program instructions, and is characterized in that: The processor is configured to call the program instructions to execute the blockchain-based cross-platform secure space Internet of Vehicles forensics method as described in any one of claims 1-11.

Images