Data processing method, device, equipment, system and storage medium

Abstract

The invention relates to the field of data security, in particular to a data processing method and device, equipment and a storage medium. The method comprises the following steps: acquiring data generated by a component; performing signature operation on the data through a preset first private key to generate a digital signature; and generating a digital certificate according to a first public key corresponding to the first private key, and generating an anti-counterfeiting data set according to the digital certificate, the digital signature and the data. The preset first private key is used for carrying out signature operation on the data, the reliability of the data in digital signature is improved, the digital certificate is generated through the first public key corresponding to the first private key, the reliability of a digital signature tool is improved, and therefore the reliability and integrity of the data are improved; and convenience is brought to large-scale commercial application of data.

Description

Technical Field

[0001] The present application relates to the field of data security, and in particular to data processing methods, devices, equipment, systems and storage media. Background Art

[0002] With the continuous development and popularization of automobile intelligence and networking, there are more and more intelligent electronic control units in automobiles. The commercial value of Internet of Vehicles data built on the basis of intelligent automobile terminals will be highlighted. Although the Internet of Vehicles data application market has important commercial value and huge business opportunities, the premise is to ensure that the uploaded data is safe and valid as much as possible.

[0003] In order to improve the security and effectiveness of the uploaded data, cryptographic technology is usually used, including digital signatures, encryption and decryption, MAC verification, Hash verification, etc. to encrypt and protect the data. However, if the attacker replaces or counterfeits the car ECU (Electronic Control Unit) components through proximal attacks to forge or tamper with the data, it is not conducive to improving the authenticity and integrity of the car data. Summary of the invention

[0004] In view of this, the embodiments of the present application provide a data processing method, device, equipment, system and storage medium to solve the problem in the prior art that when processing automobile data in an encrypted manner, automobile data is easily replaced or counterfeited, which is not conducive to improving the authenticity and integrity of the automobile data.

[0005] The first aspect of an embodiment of the present application provides a data processing method, which includes: obtaining data generated by a component; performing a signing operation on the data using a preset first private key to generate a digital signature; generating a digital certificate based on a first public key corresponding to the first private key, and generating an anti-counterfeiting data group based on the digital certificate, the digital signature and the data.

[0006] The data is signed by a preset first private key to generate a digital signature, and a digital certificate is generated based on the first public key corresponding to the first private key. Only by decrypting the digital certificate with the public key determined by the root certificate or certificate chain of the certificate server can the first public key authenticated by the certificate server be obtained. The data information obtained by verifying the digital signature with the authenticated first public key is compared with the data in the anti-counterfeiting data group, which can effectively verify the reliability and integrity of the data in the anti-counterfeiting data group, which is conducive to facilitating the large-scale commercial application of automobile data.

[0007] In combination with the first aspect, in a first possible implementation of the first aspect, a signature operation is performed on the data through a preset first private key to generate a digital signature, including: accessing the first private key in the hardware security module through an encryption and decryption engine inside the hardware security module, performing a signature operation on the data through the first private key, and generating the digital signature.

[0008] Since the first private key of the hardware security module is stored in the hardware security module, any external access is prohibited from the hardware. The first private key can only be accessed by the hardware encryption and decryption engine inside the hardware security module. Therefore, when the first private key in the hardware security module is used to sign the data, even if the attacker uses a proximal attack, the first private key in the hardware security module of the car cannot be counterfeited, which is conducive to improving the reliability of the data in the digital signature.

[0009] In combination with the first aspect, in a second possible implementation of the first aspect, before performing a signing operation on the data using a preset first private key to generate a digital signature, the method also includes: obtaining a component ID and / or an electronic control unit ID; and adding the component ID and / or the electronic control unit ID to the data.

[0010] Before generating a digital signature, add the component ID and / or electronic control unit ID to the signed data so that the component ID and / or electronic control unit are bound to the data, thereby effectively binding the data to the source. The data source information, i.e., the component ID and / or electronic control unit ID, can be used to trace whether the data is reliable, thereby further reducing the risk of data counterfeiting and improving the reliability of the data.

[0011] In combination with the second possible implementation manner of the first aspect, in a third possible implementation manner of the first aspect, the electronic control unit ID includes a bare chip ID of the electronic control unit.

[0012] Since the die ID is a unique identification number for each chip, the die IDs in chips produced by different chip manufacturers contain different information. The different information includes different die IDs in chips produced by different chip manufacturers, and different definitions of each data bit in the die ID. Therefore, the die ID can be effectively used to uniquely identify different chips, and different control chips can be identified based on the die ID, thereby reducing the possibility of counterfeiting data through the same electronic control unit identification.

[0013] In combination with any one of the first aspect to the third possible implementation method of the first aspect, in a fourth possible implementation method of the first aspect, a signature operation is performed on the data through a preset first private key to generate a digital signature, including: a signature operation is performed on the data of a preset length through the preset first private key to generate the digital signature; or a signature operation is performed on the data of a preset size through the preset first private key to generate the digital signature.

[0014] Considering that the bandwidth of the electronic control unit in the internal control domain of data processing equipment such as automobiles and the communication outside the domain is small, the communication transmission efficiency is low, and the length of asymmetric keys and signatures is long (the amount of data is large), therefore, when signing the collected data, digital signature protection can be performed according to the time period or data size, such as signing the data every 15 minutes, 30 minutes or 1 hour, or signing the data according to the size of the data packet. Compared with the real-time signature transmission method, it improves data security and reliability while helping to improve data transmission efficiency.

[0015] In combination with any one of the first aspect to the fourth possible implementation manner of the first aspect, in a fifth possible implementation manner of the first aspect, a digital certificate is generated according to the first public key corresponding to the first private key, including: generating public key data according to the first public key of one or more hardware security modules of the automobile; sending the public key data to a certificate server so that the certificate server generates a digital certificate according to the public key data; and receiving the digital certificate sent by the certificate server.

[0016] Public key data is generated based on one or more first public keys in the hardware security module and sent to the certificate server. The certificate server can generate a digital certificate based on the public key data and return it to the electronic control unit. After the public key data is encrypted by the private key of the certificate server to generate a digital certificate, the first public key in the hardware security module of the electronic control unit can be obtained by decrypting the public key determined by the root certificate or certificate chain of the certificate server, or the first public key in the anti-counterfeiting data group can be verified, thereby improving the reliability of the first public key used for signature verification.

[0017] In combination with the fifth possible implementation manner of the first aspect, in a sixth possible implementation manner of the first aspect, public key data is generated based on the first public keys of multiple hardware security modules of the automobile, including: connecting the first public keys of the multiple hardware security modules of the automobile in sequence in a predetermined order to generate a public key sequence, and using the public key sequence as the public key data.

[0018] In the same car, multiple domain controllers are included, each domain controller includes an electronic control unit, and the electronic control unit may include one or more sub-layer electronic control units, and the hardware security module corresponding to the electronic control unit includes a first public key and a first private key for asymmetric encryption. Therefore, the same car usually includes multiple hardware security modules, and accordingly, the same car usually includes multiple first public keys. In order to improve the verification efficiency of multiple first public keys, the first public keys can be sorted and connected in a predetermined order, for example, they can be sorted according to the ID number of the electronic control unit to which the first public key belongs, etc., to obtain a public key sequence, which can be used as public key data to generate a digital certificate. The public key sequence can be obtained by decrypting the digital certificate, which is convenient for comparing the validity of the first public key in the data processing device such as the car. In order to improve the comparison efficiency, the identification information of each first public key can be included in the public key sequence. After decrypting the digital certificate, the reliability of the first public key can be quickly verified according to the identification information of the first public key.

[0019] In combination with the fifth possible implementation manner of the first aspect, in the seventh possible implementation manner of the first aspect, public key data is generated according to the first public keys of multiple hardware security modules of the automobile, including: connecting the first public keys of the multiple hardware security modules of the automobile in sequence according to a predetermined order to generate a public key sequence; performing a summary operation on the public key sequence, and generating public key data according to the summary information of the public key sequence.

[0020] After multiple first public keys are sequentially connected in a predetermined order to generate a public key sequence, a signature operation is further performed on the public key sequence, public key data is generated according to the signature data of the public key sequence, and a digital certificate is generated according to the public key data. When verifying the validity of the first public key, the first public keys in the data processing device (such as a car) that needs to be verified can be first sorted in a predetermined order to generate a public key sequence, and the summary information of the public key sequence can be calculated, and then the digital certificate can be decrypted to obtain the summary information in the certificate, and the summary information in the certificate and the summary information that needs to be verified are compared to determine the reliability of the public key sequence that needs to be verified. By generating summary information through a public key sequence, the amount of public key data transmission can be reduced and the efficiency of digital certificate generation can be improved.

[0021] In combination with any one of the first aspect to the seventh possible implementation manner of the first aspect, in the eighth possible implementation manner of the first aspect, public key data is generated according to the first public keys of multiple hardware security modules of the automobile, including: generating multiple public key data according to the first public keys of multiple hardware security modules of the automobile.

[0022] In the case where the number of electronic control units in the car may increase or decrease, the first public key in the hardware security module corresponding to each electronic control unit in the car can be used as public key data to generate multiple digital certificates accordingly. When the first public key needs to be verified, the corresponding digital certificate can be found according to the identifier of the first public key, and the digital certificate can be decrypted to obtain the corresponding first public key for verification.

[0023] In combination with the first aspect to the seventh possible implementation method of the first aspect, in the eighth possible implementation method of the first aspect, after generating an anti-counterfeiting data group based on the digital certificate, the digital signature and the data, the method also includes: determining a second public key corresponding to the digital certificate through a root certificate or a certificate chain, decrypting the digital certificate according to the second public key, and determining a first public key for verifying the digital signature; verifying the digital signature through the first public key, and determining the authenticity of the data in the anti-counterfeiting data group based on the verification result and the data in the anti-counterfeiting data group.

[0024] When verifying the anti-counterfeiting data group, you can first request the data certificate provider to obtain the second public key. Since the second public key is obtained from a third-party certificate authority, the second public key is authentic and reliable. The digital signature is verified by the second public key to obtain data information, and the data information is compared with the data in the anti-counterfeiting data group. For example, the summary information of the data in the anti-counterfeiting data group is calculated, and the calculated summary information is compared with the summary information obtained by the signature verification to determine whether the two are the same, so as to judge whether the data is authentic and reliable.

[0025] In combination with the first aspect to the eighth possible implementation manner of the first aspect, in a ninth possible implementation manner of the first aspect, after generating an anti-counterfeiting data group based on the digital certificate, the digital signature and the data, the method further includes: sending the anti-counterfeiting data group to a data server for storage, the data server being connected to an application server, and the application server being used to provide a secure access interface for the anti-counterfeiting data group.

[0026] The generated anti-counterfeiting data group is sent to the data server for storage, which makes it easy for visitors to directly access the required data from the data server, including data that can be directly shared if the security is lower than the preset security threshold. For data with high security higher than the security threshold, the data server can be connected to the application server, and the access interface provided by the application server can be used to provide visitors with data access services with security higher than the preset security threshold. Since the data stored in the data server has high reliability and better integrity, it is conducive to building a more reliable data platform, which brings convenience to the large-scale commercial application of automobile data.

[0027] A second aspect of an embodiment of the present application provides a data processing system, which includes a data processing device, a data server, an application server and a certificate server, wherein: the data processing device includes an electronic control unit, and the electronic control unit is used to execute the method described in any one of the first aspects; the data server is used to store the anti-counterfeiting data group generated by the electronic control unit of the data processing device; the application server is used to provide a secure access interface for accessing data in the data server; and the certificate server is used to generate a digital certificate based on the first public key of the hardware security module of the electronic control unit.

[0028] The third aspect of an embodiment of the present application provides a data processing device, which includes: a data acquisition unit, used to acquire data generated by a component; a digital signature unit, used to perform a signature operation on the data using a preset first private key to generate a digital signature; an anti-counterfeiting data group generation unit, used to generate a digital certificate based on a first public key corresponding to the first private key, and generate an anti-counterfeiting data group based on the digital certificate, the digital signature and the data.

[0029] A fourth aspect of an embodiment of the present application provides a car, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the method described in any one of the first aspects when executing the computer program.

[0030] A fifth aspect of an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method described in any one of the first aspects are implemented.

[0031] It can be understood that the beneficial effects of the second to fifth aspects mentioned above can be found in the relevant description of the first aspect mentioned above, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0033] Figure 1 It is a schematic diagram of an implementation scenario of a data processing method provided in an embodiment of the present application;

[0034] Figure 2 It is a schematic diagram of an implementation flow of a data processing method provided in an embodiment of the present application;

[0035] Figure 3 is a schematic diagram of the structure of a single electronic control unit provided in an embodiment of the present application;

[0036] Figure 4 This is a schematic diagram of an implementation process for generating a digital certificate provided by an embodiment of the present application;

[0037] Figure 5 A schematic diagram of generating an anti-counterfeiting data group provided in an embodiment of the present application;

[0038] Figure 6 A schematic diagram of the structure of a car cloud service platform provided in an embodiment of the present application;

[0039] Figure 7 is a schematic diagram of a data processing device provided in an embodiment of the present application;

[0040] Figure 8 It is a schematic diagram of a car provided in an embodiment of the present application. DETAILED DESCRIPTION

[0041] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0042] In order to illustrate the technical solution described in this application, a specific embodiment is provided below for illustration.

[0043] With the development and popularization of automobile intelligence and networking, more and more intelligent electronic control units are included in automobiles. The commercial value of Internet of Vehicles data built on the basis of intelligent automobile terminals will be highlighted. Although the Internet of Vehicles data application market has important commercial value and huge business opportunities, the premise is to ensure that the uploaded data is safe and valid as much as possible.

[0044] In order to improve the security and effectiveness of the uploaded car data, cryptographic techniques are usually used to encrypt and protect the data, including digital signatures, encryption and decryption, MAC verification, Hash verification, etc. However, if the attacker uses a proximal attack, such as forging or tampering with the car data by replacement or impersonation, it will not be conducive to improving the authenticity and integrity of the collected data.

[0045] Based on this, the present application embodiment proposes a data processing method, such as Figure 1The diagram shows the implementation scenario of the method. In the implementation scenario of the data processing method, a data processing device 1, a certificate server 2 and a data server 3 are included, wherein the data processing device 1 includes a plurality of electronic control units 11 (ECU in English, Electronic Control Unit in English), and each electronic control unit 11 is connected to one or more components 12 for collecting data generated by the components. The components may include data acquisition components such as sensors, including temperature sensors, speed sensors, etc. The data processing device 1 may be a device that needs to process data, such as a car, a charging station, a battery swap station, etc.

[0046] The electronic control unit 11 includes a processor (abbreviated as CPU in English, and the full name is Central Processing Unit in English) 111, and the processor 111 is usually provided with a hardware security module 1111 (abbreviated as HSM in English, and the full name is Hardware Security Module in English). The hardware security module 1111 generates an asymmetric key pair (including a first public key and a first private key) for signing data when the device is initialized, and the first private key in the asymmetric key pair is stored in the hardware security module. External devices are prohibited from accessing the hardware, and only the hardware security module 1111 is allowed to access it by the hardware encryption and decryption engine, thereby effectively improving the security of the first private key.

[0047] The electronic control unit 11 can sign the data collected by the components of the data processing device through the preset first private key to generate a digital signature. For the first public key corresponding to the first private key that generates the digital signature, a certification request can be sent to the certificate server to obtain a digital certificate including the first public key. Thus, an anti-counterfeiting data group including a digital certificate, a digital signature and data is obtained.

[0048] The certificate server 2 is used to authenticate the first public key in the electronic control unit 11 to ensure the validity of the first public key used to verify the digital signature.

[0049] The data server 3 can receive the anti-counterfeiting data group sent by the electronic control unit 11 in the data processing device 1. When the visitor requests to view the data, the digital certificate can be verified according to the root certificate / certificate chain of the certificate server 2 to enhance the authenticity and legitimacy of the digital certificate. On the basis that the digital certificate is authentic and legal, the digital signature is verified by the first public key in the digital certificate to verify the integrity and reliability of the data.

[0050] Figure 2 The present invention provides a data processing method for implementing a flow chart of the present invention. The execution subject of the method may be a data processing device. The method is described in detail as follows:

[0051] In S201, data generated by a component is obtained.

[0052] The component may be a component in a data processing device. The data processing device may include devices such as automobiles, charging stations, and battery swap stations that need to collect Internet of Vehicles data. The electronic and electrical architecture (EEA in English, the full name of which is Electrical / Electronic Architecture in English) inside data processing devices such as automobiles usually includes multiple domain control systems. For example, automobiles usually include domain control systems such as advanced driver assistance domain control systems (ADCS in English, the full name of which is ADAS Main Control System in English), body domain control systems (BDCS in English, the full name of which is Body Domain Control System in English), and cockpit domain control systems (CDCS in English, the full name of which is Cockpit Domain Control System in English). Each domain control system usually includes an electronic control unit (ECU in English, the full name of which is Electronic Control Unit in English) of a domain, and multiple sub-layer electronic control units located under the electronic control unit of the domain. Figure 3 It is a schematic diagram of the structure of a single electronic control unit. Figure 3 As shown, the electronic control unit 11 includes a processor 111. The electronic control unit 11 manages and controls various components 12 of the automobile, including devices such as sensors of the automobile, through the processor 111. Through the sensors and other components, the electronic control unit 11 can obtain various state data of the operation of the automobile. The state data may include, for example, battery temperature, cabin temperature, driving speed, etc.

[0053] A hardware security module 1111 is usually provided in the processor 111, and a first private key 40 can be stored in the hardware security module 1111, which can be used to sign and protect the collected data. The first public key 41 corresponding to the first private key in the hardware security module 1111 can be sent to the car cloud service platform together with the data to verify the digital signature of the data. The identification information of the electronic control unit 11 can be identified by the bare chip ID 42 of the processor.

[0054] In S202, a signature operation is performed on the data using a preset first private key to generate a digital signature.

[0055] Since the components or sensors under the ECU are usually non-intelligent electronic components without CPU, the status data during the operation of the car is usually monitored and collected by the ECU. In order to improve the authenticity and integrity of the data generated during the operation of the car from the source, cryptographic protection can be used on the ECU to protect the collected data to prevent the data from being forged or tampered with.

[0056] After the electronic control unit of the automobile collects data from various components, the data can be signed and protected using the first private key in the hardware security module (HSM in English) corresponding to the processor in the electronic control unit, or an encrypted key pair (including a first private key and a first public key) can be set in the electronic control unit to sign and protect the data using the encrypted first private key.

[0057] Wherein, the processor in each electronic control unit is provided with a hardware security module. When the device is initialized, a first public key and a first private key of an asymmetric key for signing data are generated in the hardware security module. Wherein, an asymmetric key refers to a public key and a private key used for encryption or decryption, which are different keys, and are used for encryption and decryption calculations between systems with unequal trust levels. Wherein, the private key is usually only used by a trusted person to encrypt data to obtain a digital signature; the public key is usually used by the public to verify the digital signature to obtain the data before encryption. The first private key is stored in the hardware security module, and any external access is prohibited from the hardware. The first private key is only allowed to be accessed by the encryption and decryption engine inside the hardware security module to sign and protect the data collected by the controller. For example, the controller can use the first private key in the hardware security module, and the encryption and decryption engine in the hardware security module to sign the collected data, including calculating the summary information of the collected data, and performing signature calculation on the summary information to obtain the digital signature of the data.

[0058] In order to better identify and distinguish the data generated by various components in the vehicle, in the embodiment of the present application, before the data is signed, the electronic control unit ID and / or component ID can also be collected, and the electronic control unit ID and / or component ID can be added to the data. For example, the electronic control unit ID and / or component ID can be added to the head of the data, or the electronic control unit ID and / or component ID can be added to the tail of the data, or the electronic control unit ID and / or component ID can be added to any position in the middle of the data. Adding the electronic control unit ID and / or component ID to the data can effectively bind the component identification or electronic control unit identification to the data, and by signing the data and generating a digital certificate for the first public key of the signature, the component identification or electronic control unit identification of the data can be effectively prevented from being modified, which is conducive to improving the accuracy and reliability of determining the source of the data.

[0059] The electronic control unit ID may include the die ID of the processor. Since the die ID is a unique identification number for each chip, the die IDs of chips produced by different chip manufacturers contain different information, including different die IDs in chips produced by chip manufacturers and different definitions of each data bit in the die ID. Therefore, the die ID can effectively uniquely identify different chips, and different control chips can be effectively identified according to the die ID, thereby reducing the possibility of counterfeiting data through the same die ID.

[0060] A digital signature can be obtained by signing the data with the first private key in the hardware security module. The digital signature, data and electronic control unit ID, or the digital signature, data, electronic control unit ID and component ID, or the digital signature, data and component ID can be stored locally in the electronic control unit, or the digital signature, identification information (electronic control unit ID and / or component ID) and the first public key of the hardware security module can be sent to an external car cloud platform server (a cloud platform service for collecting and sharing car data), such as being sent to a data server in the car cloud platform server for storage.

[0061] The communication method between the electronic control units of the various domain control systems inside the car and the outside of the domain is usually CAN (the full name in Chinese is Controller Area Network, and the full name in English is Controller Area Network) bus communication, which has a small communication bandwidth and low communication transmission efficiency. In addition, the data volume of the digital signature of the asymmetric key is large, for example, it is usually 2*2048bit. In order to improve the transmission efficiency of the digital signature, when signing the collected data, a signature operation can be performed on the data collected for a preset time to reduce the number of digital signatures transmitted, thereby improving the reliability of data transmission while improving the efficiency of data transmission. For example, the preset time can be 15 minutes, 30 minutes, 1 hour, 6 hours, etc., and the time for a signature calculation of the data of different components can be set according to the size of the data collected by the components and the speed of the data.

[0062] In a possible implementation, the data that needs to be signed can also be determined based on the amount of data. For example, multiple data packets can be obtained by dividing the data packet according to its size, or multiple data segments can be obtained according to other data division rules, and a signature operation can be performed on each of the divided data packets or data segments, thereby reducing the amount of digital signatures and improving data transmission efficiency.

[0063] When generating a digital signature based on data, data embedded with an electronic control unit ID, or data embedded with an electronic control unit ID and a first public key, the summary information of the data, data embedded with an electronic control unit ID, or data embedded with an electronic control unit ID and a first public key can be calculated first, and then the summary information is signed to obtain a digital signature of the summary information as the digital signature of the data. When verifying the integrity and reliability of the data based on the digital signature, the digital signature can be verified based on the first public key of the hardware security module to obtain the summary information in the digital signature, and the summary information of the data can be compared with the summary information in the digital signature. If they are consistent, the data is considered to be complete and reliable.

[0064] In S203, a digital certificate is generated according to the first public key corresponding to the first private key, and an anti-counterfeiting data group is generated according to the digital certificate, the digital signature and the data.

[0065] In the embodiment of the present application, when the anti-counterfeiting data group is generated based on the digital certificate, digital signature and data, the digital certificate can be included in each anti-counterfeiting data group, so as to facilitate the verification of the first public key based on the digital certificate in the anti-counterfeiting data group, and then verify the digital signature, or directly determine the first public key used for verification.

[0066] Alternatively, when the first private key in the data processing device is changed, the digital certificate may be included in the anti-counterfeiting data group. When the first private key is not changed, the first public key in the current anti-counterfeiting data group may be verified according to the digital certificate included in the most recent anti-counterfeiting data group of the current anti-counterfeiting data group, and then the digital signature may be verified, or the first public key used for the verification may be directly determined.

[0067] Generating an anti-counterfeiting data set according to digital certificates, digital signatures and data can be understood as the anti-counterfeiting data set including digital certificates, digital signatures and data. However, the anti-counterfeiting data set is not limited to only including digital certificates, digital signatures and data, but can also include data such as the first public key.

[0068] In the embodiment of the present application, when the first public key of the hardware security module in the electronic control unit, or the encrypted first private key is sent to the car cloud platform server along with the data and the digital signature, in order to prevent the first public key, the data and the digital signature from being tampered with at the same time, the first public key of the hardware security module in the electronic control unit can be sent to the certificate server, such as a PKI (Chinese full name for Public Key Infrastructure, English full name for Public Key Infrastructure) server, and the legitimacy of the first public key is verified through the root certificate of CA (Chinese full name for Digital Certificate Authority, English full name for Certificate Authority). The process of generating a digital certificate can be as follows: Figure 4 As shown, including:

[0069] In S401 , public key data is generated according to a first public key of one or more hardware security modules of the vehicle.

[0070] The public key data is data used to generate a digital certificate. The public key data may include first public key information of a hardware security module of an electronic control unit. The first public key information may include a complete first public key, or may also include summary information of the first public key.

[0071] When generating public key data, the public key data may be generated based on a single first public key, or may include more than two first public keys to generate public key data. For example, the public key data may be generated based on the first public keys in the hardware security modules of multiple electronic control units in the same domain control system, or may be generated based on the first public keys in the hardware security modules of multiple electronic control units in the same vehicle.

[0072] When generating public key data according to the first public keys of multiple hardware security modules, it may include generating public key data from a single first public key. That is, multiple public key data are generated accordingly according to the first public keys of multiple hardware security modules. The multiple public key data generated may include the complete data of a single first public key, or may include summary information of a single first public key, or may include summary information of a single first public key and identification information such as the ID of the electronic control unit where the first public key is located.

[0073] When generating public key data based on more than two first public keys, the two or more first public keys can be sequentially connected in a predetermined order to obtain a public key sequence, and the public key sequence is used as the public key data. In order to facilitate the distinction between different public keys in the public key sequence, a public key identifier can also be added to the public key sequence, for example, the electronic control unit ID where the public key is located can be added as the public key identifier.

[0074] When generating public key data based on more than two first public keys, the more than two first public keys can be sequentially connected in a predetermined order to obtain a public key sequence, and then the summary information of the public key sequence is calculated as the public key data of the more than two first public keys.

[0075] In a possible implementation, the first public key used to generate the public key data may also include a first public key of a hardware security module of a processor in the domain control system.

[0076] The predetermined sequence may include an sequence determined according to an identifier of an electronic control unit where the hardware security module is located.

[0077] In S402, the public key data is sent to a certificate server, so that the certificate server generates a digital certificate according to the public key data.

[0078] After determining the public key data needed to generate the certificate, the public key data is sent to a certificate server, such as a PKI-CA server, and the public key data is stored in a digital certificate. The certificate server can encrypt and protect the second public key used in the digital certificate through a root certificate or a certificate chain.

[0079] Depending on the data included in the public key data, the data included in the generated digital certificate will also be different. The public key data included in the digital certificate may include the vehicle's domain controller public key, electronic control unit public key, and certification authority digital signature. The public key data in the digital certificate includes, for example, the domain controller public key or the electronic control unit public key used to verify the reliability of the first public key in the anti-counterfeiting data group, the certification authority digital signature used to ensure the validity of the digital certificate, and the integrity of the data in the digital certificate.

[0080] In S403, the digital certificate sent by the certificate server is received.

[0081] After the digital certificate server performs certificate calculations based on the public key data and generates a digital certificate including the public key data, it can return the digital certificate including the public key data to the vehicle so that the first public key provided by the anti-counterfeiting data group can be verified based on the public key data in the digital certificate, or the digital signature can be directly verified using the public key data in the digital certificate.

[0082] In a possible implementation, when the digital certificate includes a first public key and an electronic control unit ID corresponding to the first public key, the second public key used for decryption can be determined based on the root certificate or the certificate chain, and the first public key and the identifier of the first public key are obtained by verifying the digital certificate with the second public key. According to the verified first public key and the identifier of the first public key, the first public key used for verifying the digital signature is determined. The first summary information can be obtained by verifying the digital signature with the first public key. The second summary information of the data to be verified in the anti-counterfeiting data group is compared with the first summary information to determine whether the data in the anti-counterfeiting data group is safe and reliable. For example, when the second summary information of the data in the anti-counterfeiting data group matches the first summary information in the digital signature, it means that the data is safe and reliable, otherwise, it means that the data may be tampered with.

[0083] In a possible implementation, when the public key data included in the digital certificate is summary information of the first public key of the hardware security module, the generated anti-counterfeiting data group may include the first public key, digital certificate, digital signature and data of the hardware security module.

[0084] The second public key is determined by the root certificate or certificate chain of the certificate server, and the digital certificate is verified by the second public key. When the digital certificate is legal, the first summary information of the first public key of the hardware security module is obtained, and the first public key in the anti-counterfeiting data group is subjected to summary calculation, including MD5 summary information calculation, or Hash value summary calculation, etc., to obtain the second summary information of the first public key corresponding to the identification (including component ID and / or electronic control unit ID) in the anti-counterfeiting data group, and the first summary information and the second summary information are compared to determine whether the two match. If they match, it indicates that the first public key in the anti-counterfeiting data group is a reliable public key, which can be used to perform signature verification operations on digital signatures. According to the data obtained by the signature verification operation, or the summary information of the data, it is further determined whether the data is safe and reliable.

[0085] When the public key data in the digital certificate includes a public key sequence consisting of multiple first public keys, the second public key can be determined based on the root certificate or certificate chain of the digital certificate server, the digital certificate is verified by the second public key to obtain the public key sequence, and the digital signature is verified based on the first public key in the public key sequence. Alternatively, the first public key in the public key sequence can be compared with the first public key included in the anti-counterfeiting data group to determine the reliability of the first public key in the anti-counterfeiting data group.

[0086] When the public key data in a digital certificate includes summary information of a public key sequence composed of multiple first public keys, the second public key can be determined based on the root certificate or certificate chain of the digital certificate server, the digital certificate can be verified based on the second public key to obtain the first summary information of the public key sequence, and a public key sequence can be constructed in a predetermined order based on the multiple first public keys included in the anti-counterfeiting data group. The second summary information of the public key sequence is calculated and compared with the first summary information obtained by signature verification to determine whether the first public key in the anti-counterfeiting data group is safe and reliable.

[0087] The data is signed by the first private key in the hardware security module to obtain a digital signature, and the public key in the hardware security module is encrypted into a digital certificate by the certificate server. An anti-counterfeiting data group can be generated based on the digital signature, digital certificate and data for uploading to the car cloud service platform, such as uploading to the data server in the car cloud service platform.

[0088] In order to accurately identify the source of the data, the component ID and / or the electronic control unit ID may be added to the anti-counterfeiting data group. Alternatively, the component ID and / or the electronic control unit ID may be added to the digitally signed data, and the component ID and / or the electronic control unit ID corresponding to the data may be obtained by verifying the signature.

[0089] like Figure 5 FIG. 1 is a schematic diagram of generating an anti-counterfeiting data set provided by an embodiment of the present application. Figure 5 As shown, a first electronic control unit ECU1 and a second electronic control unit ECU2 are connected under a domain controller (electronic control unit of a domain control system), a hardware security module HSM of a processor in the first electronic control unit ECU1 is provided with a private key 1 and a public key 1, and a component 1 is connected to the first electronic control unit ECU1. A hardware security module HSM of a processor in the second electronic control unit ECU2 is provided with a private key 2 and a public key 2, and a component 2 is connected to the second electronic control unit ECU2. A hardware security module HSM of a processor in a domain controller is provided with a private key 3 and a public key 3, and a component 3 is connected.

[0090] The domain controller initiates a certificate acquisition request to the certificate server and sends the public key data to the certificate server (which can be a single public key, a public key sequence, or a summary of the public key sequence). Figure 5 The certificate server receives the public key data and generates a digital certificate, which includes the domain controller public key, ECU1 public key, ECU2 public key and the digital signature of the certification body.

[0091] In order to facilitate the verification of the digital signature, the first public key of the hardware security module of the electronic control unit can also be included in the anti-counterfeiting data group. After verifying the legitimacy of the first public key, the signature verification operation can be quickly performed based on the first public key in the anti-counterfeiting data group. When the digital certificate includes the first public key of the hardware security module, the digital signature can also be verified based on the first public key in the digital certificate.

[0092] In order to solve the problem of lack of trusted transaction medium between car data individuals and inability to form a large-scale data application market, the car data subject can be determined according to the generation process of the car anti-counterfeiting data group, and a car cloud service platform can be formed through multiple car data subjects. Figure 6 As shown, in the car cloud service platform, each car data subject can be used as a distributed data processing system to process data into a reliable anti-counterfeiting data group. Each car data subject is a distributed node, including a car, a data server, an application server and a certificate server. Among them, the car is used to provide the processed anti-counterfeiting data group to the data server. The data server can be used to store anti-counterfeiting data groups such as data, digital signatures, first public keys and digital certificates. The data server can provide a data sharing service interface for providing data access services. The application server can provide a SOA (Chinese full name is service-oriented programming, English full name is Service-Oriented Architecture) interface for data services through the application server, which is used to provide a service interface for data with a preset confidentiality level. Third-party applications can access data with a confidentiality level greater than the preset level through the application server through the SOA interface provided by the application service platform. For non-confidential data, the anti-counterfeiting data group can be obtained directly through the data server, including data, digital signatures corresponding to the data, digital certificates corresponding to the data, and first public keys corresponding to the data.

[0093] After a third-party application obtains data from the car data subject in the car cloud service platform, it can access the certificate server corresponding to the car data subject to verify the legitimacy of the digital certificate. After determining that the digital certificate is legal, the legitimacy of the first public key in the anti-counterfeiting data group can be verified based on the summary information of the first public key in the digital certificate. After the first public key in the anti-counterfeiting data group is legal, the digital signature is verified based on the first public key. Alternatively, when the first public key is included in the digital certificate, the digital signature can be directly verified based on the first public key in the digital certificate. Based on the verification result of the digital signature, the integrity and authenticity of the data are verified to facilitate subsequent application of the extracted data.

[0094] Since the anti-counterfeiting data group generated by each automobile data subject in the car cloud service platform clearly marks and binds the source of the data through the electronic control unit ID and / or component ID, the data source is clearly traceable and not easy to tamper with. When the electronic control unit collects data, it is signed by the first private key of the hardware security module to ensure that the data will not be tampered with from the source, and the first public key of the hardware security module is authenticated by the certificate server, which improves the reliability of the digital signature tool, thereby obtaining a more reliable and authentic anti-counterfeiting data group, which is conducive to the formation of a large-scale data application market.

[0095] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0096] Figure 7 A schematic diagram of a data processing device provided in an embodiment of the present application is shown in FIG. Figure 7 As shown, the device comprises:

[0097] The data acquisition unit 701 is used to acquire data generated by a component.

[0098] The digital signature unit 702 is used to perform a signature operation on the data using a preset first private key to generate a digital signature.

[0099] The anti-counterfeiting data group generating unit 703 is used to generate a digital certificate according to the first public key corresponding to the first private key, and generate an anti-counterfeiting data group according to the digital certificate, the digital signature and the data.

[0100] Figure 7 The data processing device shown, and Figure 2 The data processing method shown corresponds to.

[0101] In a possible implementation, the device further includes:

[0102] The identification acquisition unit is used to acquire the component ID and / or the electronic control unit ID.

[0103] An identification adding unit is used to add the component ID and / or the electronic control unit ID to the data.

[0104] In a possible implementation, the electronic control unit ID includes a die ID of the electronic control unit.

[0105] In a possible implementation, the digital signature unit includes:

[0106] The first signature subunit is used to perform a signature operation on the data of a preset time length using a preset first private key to generate the digital signature.

[0107] Alternatively, the second signature subunit is used to perform a signature operation on the data of a preset size using a preset first private key to generate the digital signature.

[0108] In a possible implementation, the anti-counterfeiting data group generating unit includes:

[0109] The public key data generating subunit is used to generate public key data according to the first public key of one or more hardware security modules of the automobile.

[0110] The public key data sending subunit is used to send the public key data to the certificate server, so that the certificate server generates a digital certificate according to the public key data.

[0111] The digital certificate receiving subunit is used to receive the digital certificate sent by the certificate server.

[0112] In a possible implementation, the public key data generation subunit is used to sequentially connect the first public keys of multiple hardware security modules of the automobile in a predetermined order to generate a public key sequence, and use the public key sequence as the public key data.

[0113] Alternatively, the public key data generation subunit is used to connect the first public keys of multiple hardware security modules of the automobile in sequence according to a predetermined order to generate a public key sequence; perform a summary operation on the public key sequence, and generate public key data according to the summary information of the public key sequence.

[0114] Alternatively, the public key data generating subunit is used to generate a plurality of public key data according to the first public keys of a plurality of hardware security modules of the automobile.

[0115] In a possible implementation, the device further includes:

[0116] The anti-counterfeiting data group sending unit is used to send the anti-counterfeiting data group to a data server for storage. The data server is connected to an application server, and the application server is used to provide a secure access interface for the anti-counterfeiting data group.

[0117] Figure 8 Schematic diagram of a data processing device provided by an embodiment of the present application. Figure 8 As shown, the data processing device 8 of this embodiment includes: a processor 80, a memory 81, and a computer program 82 stored in the memory 81 and executable on the processor 80, such as a data processing program. When the processor 80 executes the computer program 82, the steps in the above-mentioned data processing method embodiments are implemented. Alternatively, when the processor 80 executes the computer program 82, the functions of the modules / units in the above-mentioned device embodiments are implemented.

[0118] Exemplarily, the computer program 82 may be divided into one or more modules / units, which are stored in the memory 81 and executed by the processor 80 to complete the present application. The one or more modules / units may be a series of computer program instruction segments capable of completing specific functions, which are used to describe the execution process of the computer program 82 in the data processing device 8.

[0119] The data processing device 8 may include, but is not limited to, a processor 80 and a memory 81. Those skilled in the art will appreciate that Figure 8 It is only an example of the data processing device 8 and does not constitute a limitation of the data processing device 8. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the data processing device may also include input and output devices, network access devices, buses, etc.

[0120] The processor 80 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0121] The memory 81 may be an internal storage unit of the data processing device 8, such as a hard disk or memory of the data processing device 8. The memory 81 may also be an external storage device of the data processing device 8, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the data processing device 8. Further, the memory 81 may also include both an internal storage unit and an external storage device of the data processing device 8. The memory 81 is used to store the computer program and other programs and data required by the data processing device. The memory 81 may also be used to temporarily store data that has been output or is to be output.

[0122] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0123] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0124] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0125] In the embodiments provided in the present application, it should be understood that the disclosed devices / terminal equipment and methods can be implemented in other ways. For example, the device / terminal equipment embodiments described above are only schematic. For example, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0126] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0127] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0128] If the integrated module / unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the process in the above-mentioned embodiment method, and can also be completed by hardware related to computer program instructions. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable media do not include electric carrier signals and telecommunication signals.

[0129] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. A data processing method, characterized in that: The method comprises: Get the data generated by the component; Performing a signature operation on the data using a preset first private key to generate a digital signature; A digital certificate is generated according to a first public key corresponding to the first private key, and an anti-counterfeiting data group is generated according to the digital certificate, the digital signature and the data.

2. The method according to claim 1, characterized in that Performing a signature operation on the data using a preset first private key to generate a digital signature includes: The first private key in the hardware security module is accessed through the encryption and decryption engine inside the hardware security module, and the data is signed by the first private key to generate the digital signature.

3. The method according to claim 1, characterized in that Before performing a signature operation on the data using a preset first private key to generate a digital signature, the method further includes: Obtaining component ID and / or electronic control unit ID; The component ID and / or the electronic control unit ID is added to the data.

4. The method according to claim 3, characterized in that The electronic control unit ID includes a die ID of the electronic control unit.

5. The method according to any one of claims 1 to 4, characterized in that: Performing a signature operation on the data using a preset first private key to generate a digital signature includes: Using a preset first private key, a signature operation is performed on the data of a preset time length to generate the digital signature; Alternatively, a signature operation is performed on the data of a preset size using a preset first private key to generate the digital signature.

6. The method according to any one of claims 1 to 5, characterized in that: Generating a digital certificate according to a first public key corresponding to the first private key includes: generating public key data according to a first public key of one or more hardware security modules; Sending the public key data to a certificate server so that the certificate server generates a digital certificate according to the public key data; Receive the digital certificate sent by the certificate server.

7. The method according to claim 6, characterized in that Generating public key data according to first public keys of multiple hardware security modules includes: The first public keys of the multiple hardware security modules are sequentially connected in a predetermined order to generate a public key sequence, and the public key sequence is used as public key data.

8. The method according to claim 6, characterized in that Generating public key data according to first public keys of multiple hardware security modules includes: Connecting the first public keys of the multiple hardware security modules in sequence according to a predetermined order to generate a public key sequence; A summary operation is performed on the public key sequence, and public key data is generated according to the summary information of the public key sequence.

9. The method according to any one of claims 1 to 8, characterized in that: After generating an anti-counterfeiting data group according to the digital certificate, the digital signature and the data, the method further comprises: Determine the second public key corresponding to the digital certificate through a root certificate or a certificate chain, decrypt the digital certificate according to the second public key, and determine the first public key used to verify the digital signature; The digital signature is verified using the first public key, and the authenticity of the data in the anti-counterfeiting data group is determined by comparing the verification result with the data in the anti-counterfeiting data group.

10. The method according to any one of claims 1 to 9, characterized in that: After generating an anti-counterfeiting data group according to the digital certificate, the digital signature and the data, the method further comprises: The anti-counterfeiting data group is sent to a data server for storage, wherein the data server is connected to an application server, and the application server is used to provide a secure access interface for the anti-counterfeiting data group.

11. A data processing system, characterized in that: The data processing system includes a data processing device, a data server, an application server and a certificate server, wherein: The data processing device comprises an electronic control unit, and the electronic control unit is used to execute the method according to any one of claims 1 to 10; The data server is used to store the anti-counterfeiting data group generated by the electronic control unit of the data processing device; The application server is used to provide a secure access interface for accessing data in the data server; The certificate server is used to generate a digital certificate according to the first public key of the electronic control unit.

12. A data processing device, characterized in that: The device comprises: A data acquisition unit, used for acquiring data generated by the component; A digital signature unit, used to perform a signature operation on the data using a preset first private key to generate a digital signature; The anti-counterfeiting data group generating unit is used to generate a digital certificate according to the first public key corresponding to the first private key, and generate an anti-counterfeiting data group according to the digital certificate, the digital signature and the data.

13. A data processing device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 10 are implemented.

14. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 10 are implemented.

Images