Vehicle positioning coordinate encryption method and device based on clock intervention
By deploying the clock system and Beidou clock proofreading on the intranet of the cloud platform, generating an encryption key and encrypting the vehicle positioning coordinate data in combination with the asynchronous FIFO mode, the problem that traditional technology is difficult to meet the needs of real-time transmission and confidentiality is solved, and the secure transmission of data is achieved.
Patent Information
- Application Number
- CN202411898122.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-20
- Publication Date
- 2025-04-29
AI Technical Summary
In vehicle positioning management, traditional encryption technology is difficult to meet the need for real-time transmission of coordinate information, and at the same time, it is necessary to strictly keep the vehicle positioning information from being acquired by air attacks.
By deploying a clock system on the cloud platform intranet and proofreading it with the Beidou clock, a true random sequence is generated to form a cubic function characteristic curve, and an encryption key is generated. The vehicle positioning coordinate data is offset and encrypted in combination with asynchronous FIFO mode and encryption key, and a verification key is set to complete encryption.
It realizes encryption of vehicle positioning coordinate data during transmission, prevents air-interface attacks and information leakage, and ensures data confidentiality and security.
Smart Images
Figure CN119906993A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of encryption of vehicle positioning data, and in particular to a vehicle positioning coordinate encryption method, device, electronic device and computer-readable storage medium based on clock intervention. Background Art
[0002] In the process of integration of certain industries (such as military-civilian integration), confidentiality is always the most important basic requirement. According to relevant regulations, the security of information network systems must be strictly guaranteed, and the use of intelligent electronic devices must also be effectively managed and controlled. Therefore, it is necessary to establish a strict confidentiality defense line through information technology. In response to the needs of data security, relevant standards clearly require that data exchange between internal and external networks must be physically isolated, and strict requirements are imposed on the data encryption process. In the construction of informatization, IoT communications often face the problem of data transmission difficulties between private networks and the Internet. However, some application scenarios, such as vehicle positioning management, require real-time transmission of coordinate information, and traditional methods are difficult to meet this requirement. Therefore, it is necessary to realize coordinate information transmission through mobile IoT, but the corresponding coordinate information needs to be strictly confidential to prevent it from being obtained by air interface attacks.
[0003] Therefore, it is urgent to propose an encryption technology that meets the above specifications. Summary of the invention
[0004] The present application shows a vehicle positioning coordinate encryption method, device, electronic device and computer-readable storage medium based on clock intervention.
[0005] In a first aspect, the present application shows a vehicle positioning coordinate encryption method based on clock intervention, the method comprising:
[0006] Deploy a clock system on the intranet of the cloud platform and calibrate it with the Beidou clock;
[0007] According to the time difference between the clock system deployed in the intranet and the Beidou clock, a true random number sequence is generated to form a cubic function characteristic curve and generate an encryption key;
[0008] Through the asynchronous FIFO mode, the vehicle positioning coordinate data in the air interface is offset encrypted in combination with the encryption key to generate offset encrypted vehicle positioning coordinate data;
[0009] A verification key is set for verifying user information and combined with the offset encrypted vehicle positioning coordinate data to complete vehicle positioning coordinate encryption.
[0010] Furthermore, it also includes: collecting Beidou clock data as first characteristic data, and collecting deployed data as second characteristic data.
[0011] Furthermore, the clock system is deployed through the intranet and the calibration with the Beidou clock includes:
[0012] Check the data size, interval size, error with the first characteristic data, coefficient interval and coefficient change trend;
[0013] Filter low-frequency data and signal scenarios;
[0014] Compare the pros and cons of current coefficients with historical coefficients;
[0015] If all the operations in the above proofreading are passed, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data and the second characteristic data; otherwise, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data, thereby achieving clock verification by correcting the coefficients.
[0016] Furthermore, the read and write logic of the asynchronous FIFO mode includes:
[0017] When the write pointer points to the time synchronization key, the amount of time the dual-port memory on the IoT side is read;
[0018] Add a redundant bit to the highest bit of the write pointer;
[0019] Define the random code pointer as log2N:0, and each log2N bit is used as a random check bit;
[0020] When the FIFO is completely filled for the first time, the write pointer has the value N.
[0021] Furthermore, the authenticity verification step of the key is also included:
[0022] When the memory address and redundant bits of the dual-port memory are equal during the read and write address, it is determined that the read pointer catches up with the write pointer, the FIFO is empty, and the vehicle positioning coordinate data is true;
[0023] When the memory addresses of the dual-port memories are equal but the redundant bits are not equal, it is determined that the FIFO is full and the vehicle positioning coordinate data is false.
[0024] Furthermore, the vehicle positioning coordinate data interaction step is also included:
[0025] Add key verification to the leading headers of the terminal message of the IoT terminal and the platform message of the cloud platform respectively;
[0026] After receiving the terminal message, the cloud platform verifies the authenticity of the verification key, and if it is true, it initiates VPDN channel communication;
[0027] After receiving the platform message, the IoT terminal verifies the authenticity of the verification key. If it is true, a VPDN channel is established and the vehicle positioning coordinate data is exchanged.
[0028] In a second aspect, the present application shows a vehicle positioning coordinate encryption device based on clock intervention, the device comprising:
[0029] The clock calibration module is used to deploy the clock system in the intranet of the cloud platform and calibrate it with the Beidou clock;
[0030] The encryption key generation module is used to generate a true random number sequence according to the time difference between the intranet deployment clock system and the Beidou clock, form a cubic function characteristic curve, and generate an encryption key;
[0031] The data encryption module is used to offset encrypt the vehicle positioning coordinate data in the air interface in combination with the encryption key through the asynchronous FIFO mode to generate the offset encrypted vehicle positioning coordinate data;
[0032] A verification key module is set up to set a verification key for verifying user information, and is combined with the offset encrypted vehicle positioning coordinate data to complete vehicle positioning coordinate encryption.
[0033] Furthermore, it also includes: a data collection module, which is used to collect the data of the Beidou clock as the first characteristic data, and collect the deployed data as the second characteristic data.
[0034] Furthermore, the clock calibration module is specifically used for:
[0035] Check the data size, interval size, error with the first characteristic data, coefficient interval and coefficient change trend;
[0036] Filter low-frequency data and signal scenarios;
[0037] Compare the pros and cons of current coefficients with historical coefficients;
[0038] If all the operations in the above proofreading are passed, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data and the second characteristic data; otherwise, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data, thereby achieving clock verification by correcting the coefficients.
[0039] Furthermore, the data encryption module is specifically used to offset encrypt the vehicle positioning coordinate data in the air interface in accordance with the following asynchronous FIFO mode read and write logic in combination with the encryption key to generate offset encrypted vehicle positioning coordinate data:
[0040] The amount of time to read the dual-port memory when the write pointer points to the time synchronization key;
[0041] Add a redundant bit to the highest bit of the write pointer;
[0042] Define the random code pointer as log2N:0, and each log2N bit is used as a random check bit;
[0043] When the FIFO is completely filled for the first time, the write pointer has the value N.
[0044] Furthermore, it also includes a key verification module for verifying the authenticity of the key;
[0045] The key verification module is specifically used for:
[0046] When the memory address and redundant bits of the dual-port memory are equal during the read and write address, it is determined that the read pointer catches up with the write pointer, the FIFO is empty, and the vehicle positioning coordinate data is true;
[0047] When the memory addresses of the dual-port memories are equal but the redundant bits are not equal, it is determined that the FIFO is full and the vehicle positioning coordinate data is false.
[0048] Furthermore, it also includes a data interaction module for interacting with vehicle positioning coordinate data;
[0049] The data interaction module is specifically used for:
[0050] Add key verification to the leading headers of the terminal message of the IoT terminal and the platform message of the cloud platform respectively;
[0051] After receiving the terminal message, the cloud platform verifies the authenticity of the verification key, and if it is true, it initiates VPDN channel communication;
[0052] After receiving the platform message, the IoT terminal verifies the authenticity of the verification key. If it is true, a VPDN channel is established and the vehicle positioning coordinate data is exchanged.
[0053] In a third aspect, the present application shows an electronic device, which includes: a processor; a memory for storing processor-executable instructions; wherein the processor is configured to execute the method described in any of the above aspects.
[0054] In a fourth aspect, the present application illustrates a non-temporary computer-readable storage medium, which, when instructions in the storage medium are executed by a processor of an electronic device, enables the electronic device to execute a method as described in any of the above aspects.
[0055] The technical solution provided by this application may have the following beneficial effects:
[0056] The present application uses an asynchronous FIFO mode and an encryption key to offset-encrypt the vehicle positioning coordinate data in the air interface, and sets a verification key for verifying user information, and combines it with the offset-encrypted vehicle positioning coordinate data to encrypt the vehicle positioning coordinates. This can prevent the vehicle positioning information from being hijacked or attacked by the air interface or the coordinate information from being leaked during transmission. BRIEF DESCRIPTION OF THE DRAWINGS
[0057] Figure 1 is a flowchart of the steps of the application method;
[0058] Figure 2 It is an implementation process diagram of the present application method;
[0059] Figure 3 It is a circuit information interaction process diagram of the present application;
[0060] Figure 4 It is the circuit reading and writing logic diagram of this application;
[0061] Figure 5 is the circuit schematic diagram of this application;
[0062] Figure 6 It is a structural block diagram of a vehicle positioning coordinate encryption device based on clock intervention of the present application;
[0063] Figure 7 is a block diagram of an electronic device of the present application;
[0064] Figure 8 is a block diagram of a computer-readable storage medium of the present application;
[0065] Fig. 9 It is a physical schematic diagram of the vehicle-mounted positioning terminal of the present application;
[0066] Fig.10 This is a structural block diagram of a vehicle positioning coordinate encryption device based on clock intervention in the present application. DETAILED DESCRIPTION
[0067] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0068] The following are the definitions of terms used in this application:
[0069] Clock: Beidou clock.
[0070] Intervention: Positioning coordinates for offset.
[0071] Air interface attack: Using technical means such as route hijacking and DNS spoofing to manipulate network traffic, build false network paths, and implement man-in-the-middle attacks, which can not only steal sensitive information.
[0072] FIFO (First In, First Out) mode: It is a common queue management strategy, which means "first in, first out", that is, the element that enters the queue first will be processed or removed first.
[0073] VPDN (Virtual Private Dial-up Network): A technology that enables remote connection and secure communication through a public network (such as the Internet).
[0074] Traditional encryption technologies include symmetric encryption, asymmetric encryption, optical encryption, and biological encryption. None of the above technologies can meet the two-way encryption requirements of modern military communications that are completely physically isolated. The factors that affect encryption are mainly the strength of the secret key, the transmission path, and the decryption method.
[0075] This technology imitates the vehicle positioning system data of a unit with confidentiality requirements as the research object, relies on the AIOT smart Internet of Things platform based on the CTWingOS base, and develops dual-clock verification internal and external network interaction software and hardware tools. This application can solve the above problems, use the Beidou clock and communication clock for calibration, use the time difference between the Beidou clock and the communication clock to establish virtual space-time information, establish a one-way hash function to randomly string bits, and achieve true randomness. At the same time, use the difficulty of mathematical inversion to generate a strong key to encrypt the real positioning coordinates, create a new data transmission mode, and realize the secure two-way interconnection of military and local information.
[0076] The characteristic curve of the cubic function is formed by using the true random number sequence generated by the time difference of the two clocks to generate a secret key. The key is formed into a true random number through the difference between the Beidou and communication clocks, which meets the requirements of confidentiality of positioning coordinates. The vehicle positioning coordinates are encrypted during the transmission process. All coordinate data obtained from the external network cannot restore the real coordinate position. Only after entering the military network and correcting it through another clock can the real coordinates be obtained, thus meeting the needs of the military-civilian integration industry to achieve official vehicle management.
[0077] Reference Figure 1 , shows a flowchart of a method for encrypting vehicle positioning coordinates based on clock intervention of the present application, which can be applied to electronic devices, wherein the method can specifically include the following steps:
[0078] Step 101, deploying a clock system in the intranet of the cloud platform and calibrating it with the Beidou clock;
[0079] like Figure 5 As shown in the figure, the clock system is deployed through the intranet and the calibration with the Beidou clock includes:
[0080] The data of Beidou clock is collected as the first characteristic data, and the deployed data is collected as the second characteristic data.
[0081] Check the data size, interval size, error with the first characteristic data, coefficient interval and coefficient change trend;
[0082] Filter low-frequency data and signal scenarios;
[0083] Compare the pros and cons of current coefficients with historical coefficients;
[0084] If all the operations in the above proofreading are passed, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data and the second characteristic data; otherwise, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data, thereby achieving clock verification by correcting the coefficients.
[0085] A preferred example is Figure 5 As shown in the figure, the clock system is deployed through the intranet and the calibration with the Beidou clock includes:
[0086] Collect a certain segment of Beidou clock (external) data as the first characteristic data;
[0087] Collect a certain segment of data of the clock system deployed in the intranet as the second characteristic data;
[0088] Before use, the validity of the first characteristic data and the second characteristic data of the two clocks is verified, and the verification content includes:
[0089] Data size verification;
[0090] Low frequency data filtering;
[0091] Interval size check;
[0092] Signal scene filtering;
[0093] Error checking with the first characteristic data;
[0094] Verification of the coefficient interval;
[0095] Coefficient change trend verification;
[0096] Comparison of advantages and disadvantages with historical coefficients.
[0097] If all operations in the validity check are passed, the coefficients of the clock system deployed in the intranet are checked using the first characteristic data and the second characteristic data;
[0098] If the validity check fails, the coefficients of the clock system deployed in the intranet are checked only by the first characteristic data.
[0099] Finally, by correcting the coefficients of the clock system deployed in the intranet, clock verification is completed, thereby improving the accuracy and success rate of satellite positioning or satellite search of electronic devices.
[0100] Step 102, generating a true random number sequence according to the time difference between the intranet deployed clock system and the Beidou clock, forming a cubic function characteristic curve, and generating an encryption key;
[0101] The dependent variables x / y / z of the cubic function are the Beidou clock, the communication clock, and the standard clock, respectively. The cubic function can be customized according to different users. For example, a cubic function f(x, y, z) = x can be set for user f. 3 +2xyz 2 -y 3Z .
[0102] Specifically, the vehicle positioning coordinate data is encrypted during transmission, and all vehicle positioning coordinate data obtained from the external network cannot restore the real coordinate position. Only after entering the intranet of the cloud platform and being calibrated by another clock can the real coordinates be obtained.
[0103] Step 103, as Figure 2 As shown, the vehicle positioning coordinate data in the air interface is offset encrypted by combining the encryption key through the asynchronous FIFO mode (multiple methods such as addition, subtraction, and or can be used, depending on the user's choice), generating offset encrypted vehicle positioning coordinate data;
[0104] A preferred example is Figure 1 As shown, a clock system is deployed in the intranet and calibrated with the Beidou clock. By adding clock intervention in the air interface, the positioning coordinate data of the air interface is offset in asynchronous FIFO mode (the offset method can be selected by addition, subtraction, and, or other methods, and the specific method is selected according to different user needs), and an offset coordinate data is generated. The coordinate data will be transmitted on the public network, and a Key will be synchronously generated for verification. The Key can effectively prevent problems such as false terminals, false servers or air interface hijacking, because only legitimate devices can access the system through clock verification, thereby ensuring the security of the system.
[0105] 2) In the above offset coordinate data, the offset and Key are both random numbers that change with the clock. Specifically, in order to achieve virtual space-time true random verification of the Beidou clock and the communication clock, a one-way hash function or other encryption algorithm can be selected.
[0106] Step 104, setting a verification key for verifying user information, and combining it with the offset encrypted vehicle positioning coordinate data to complete vehicle positioning coordinate encryption.
[0107] The verification key can effectively ensure that any false terminal or false server, air interface hijacking cannot access the system due to clock verification, thus ensuring system security.
[0108] Preferably, the method further includes a key authenticity verification step:
[0109] When the memory address and redundant bits of the dual-port memory are equal during the read and write address, it is determined that the read pointer catches up with the write pointer, the FIFO is empty, and the vehicle positioning coordinate data is true;
[0110] When the memory addresses of the dual-port memories are equal but the redundant bits are not equal, it is determined that the FIFO is full and the vehicle positioning coordinate data is false.
[0111] A preferred example further includes circuit read and write logic, specifically:
[0112] When the write pointer points to the time synchronization Key, the time amount in the dual-port memory is first read. At the same time, a redundant bit is added to the highest bit of the pointer, and the random code pointer is defined as log2N:0, where each log2N bit is used as a random check bit.
[0113] 1. When the FIFO is completely filled for the first time, the value of the write pointer is N, not all zeros, so the key can be judged by reading and writing the pointer.
[0114] 2. If the memory address and redundant bits of the read and write addresses are equal, it means that the read pointer catches up with the write pointer. At this time, it can be considered that the FIFO is empty and the vehicle positioning coordinate data is true;
[0115] 3. If the memory addresses are equal but the redundant bits are not equal, it can be considered that the FIFO is full and the vehicle positioning coordinate data is false.
[0116] The offset in the offset vehicle positioning coordinate data in step 103 and the verification key in step 104 are both random numbers that change with the clock. A one-way hash function or other encryption algorithm can be selected to implement virtual space-time true random verification of the Beidou clock and the intranet-deployed clock system.
[0117] like Figure 3 As shown, it also includes the vehicle positioning coordinate data interaction steps:
[0118] When the IoT terminal is started, the corresponding parameters are set as required through the quick coding tool; specifically, when using the quick coding tool, the module's uplink address is modified by connecting the coding and grounding pins of the communication module.
[0119] Add key verification to the leading headers of the terminal message of the IoT terminal and the platform message of the cloud platform respectively;
[0120] After receiving the terminal message, the cloud platform verifies the authenticity of the verification key, and if it is true, it initiates VPDN channel communication;
[0121] After receiving the platform message, the IoT terminal verifies the authenticity of the verification key. If it is true, a VPDN channel is established and the vehicle positioning coordinate data is exchanged.
[0122] A preferred example is Figure 2 As shown in the figure, the message header between the IoT terminal and the platform adds Key verification. The specific process is as follows:
[0123] 1. After the IoT terminal is started, set the corresponding parameters according to the requirements through the quick coding tool;
[0124] 2. After the platform receives the message from the IoT terminal, it first verifies whether the Key is true. If the Key is true, the platform will initiate a VPDN channel;
[0125] 3. After receiving the platform message, the IoT terminal verifies whether the Key is true. If the Key is true, the IoT terminal will establish a channel and exchange data.
[0126] like Figure 4 As shown, the read and write logic of the asynchronous FIFO mode includes:
[0127] The amount of time to read the dual-port memory when the write pointer points to the time synchronization key;
[0128] Add a redundant bit to the highest bit of the write pointer;
[0129] Define the random code pointer as log2N:0, and each log2N bit is used as a random check bit;
[0130] When the FIFO is completely filled for the first time, the write pointer has the value N.
[0131] The method of the present application uses an asynchronous FIFO mode and an encryption key to offset and encrypt the vehicle positioning coordinate data in the air interface, and sets a verification key for verifying user information, and combines it with the offset encrypted vehicle positioning coordinate data. The technical solution for encrypting the vehicle positioning coordinates can be encrypted during the transmission of the vehicle positioning coordinates. All vehicle coordinate data obtained from the external network cannot restore the real coordinate position. Only after entering the corresponding intranet and correcting it through another clock can the real vehicle coordinate data be obtained, thereby preventing the vehicle positioning information from being hijacked or attacked by the air interface or the coordinate information from being leaked during the transmission process. The specific objects are as follows: Fig. 9 shown.
[0132] It should be noted that, for the method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the order of the actions described, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions involved are not necessarily required by the present application.
[0133] like Figure 6 , shows a structural block diagram of a vehicle positioning coordinate encryption device based on clock intervention of the present application, the device comprising:
[0134] The clock calibration module is used to deploy the clock system in the intranet of the cloud platform and calibrate it with the Beidou clock;
[0135] Specifically, it also includes: a data acquisition module, which is used to collect Beidou clock data as the first characteristic data and collect deployed data as the second characteristic data.
[0136] The clock calibration module is specifically used for:
[0137] Check the data size, interval size, error with the first characteristic data, coefficient interval and coefficient change trend;
[0138] Filter low-frequency data and signal scenarios; specifically, determine whether it is low-frequency data based on the data length, determine the signal scenario based on the change of continuous coordinate data, and shield low-frequency data and long-term parking scenario signals.
[0139] Compare the current coefficient with the historical coefficient; the historical coefficient refers to the important coefficient assigned to different scenarios or different data segments, and the low coefficient is automatically shielded to reduce the complexity of information processing;
[0140] If all the operations in the above proofreading are passed, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data and the second characteristic data; otherwise, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data, thereby achieving clock verification by correcting the coefficients.
[0141] The encryption key generation module is used to generate a true random number sequence according to the time difference between the intranet deployment clock system and the Beidou clock, form a cubic function characteristic curve, and generate an encryption key;
[0142] The data encryption module is used to offset encrypt the vehicle positioning coordinate data in the air interface in combination with the encryption key through the asynchronous FIFO mode to generate the offset encrypted vehicle positioning coordinate data;
[0143] Specifically, the data encryption module is specifically used to offset encrypt the vehicle positioning coordinate data in the air interface in combination with the encryption key according to the following asynchronous FIFO mode read and write logic to generate the offset encrypted vehicle positioning coordinate data:
[0144] The amount of time to read the dual-port memory when the write pointer points to the time synchronization key;
[0145] Add a redundant bit to the highest bit of the write pointer;
[0146] Define the random code pointer as log2N:0, and each log2N bit is used as a random check bit;
[0147] When the FIFO is completely filled for the first time, the write pointer has the value N.
[0148] A verification key module is set up to set a verification key for verifying user information, and is combined with the offset encrypted vehicle positioning coordinate data to complete vehicle positioning coordinate encryption.
[0149] like Fig.10 As shown, specifically, it also includes a key verification module for verifying the authenticity of the key;
[0150] The key verification module is specifically used for:
[0151] When the memory address and redundant bits of the dual-port memory are equal during the read and write address, it is determined that the read pointer catches up with the write pointer, the FIFO is empty, and the vehicle positioning coordinate data is true;
[0152] When the memory addresses of the dual-port memories are equal but the redundant bits are not equal, it is determined that the FIFO is full and the vehicle positioning coordinate data is false.
[0153] Specifically, it also includes a data interaction module for interacting with vehicle positioning coordinate data;
[0154] The data interaction module is specifically used for:
[0155] Add key verification to the leading headers of the terminal message of the IoT terminal and the platform message of the cloud platform respectively;
[0156] After receiving the terminal message, the cloud platform verifies the authenticity of the verification key, and if it is true, it initiates VPDN channel communication;
[0157] After receiving the platform message, the IoT terminal verifies the authenticity of the verification key. If it is true, a VPDN channel is established and the vehicle positioning coordinate data is exchanged.
[0158] The device of the present application encrypts the vehicle positioning coordinate data by setting up an encryption key generation module and a data encryption module. During the vehicle positioning coordinate transmission process, all vehicle coordinate data obtained from the external network cannot restore the real coordinate position. Only after entering the corresponding internal network and correcting it through another clock can the real vehicle coordinate data be obtained, thereby preventing the vehicle positioning information from being hijacked or attacked by the air interface or the coordinate information from being leaked during the transmission process.
[0159] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.
[0160] Optionally, an embodiment of the present application further provides an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be described here.
[0161] The embodiment of the present application also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, each process of the above method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it is not repeated here. The computer-readable storage medium is, for example, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.
[0162] FIG7 is a block diagram of an electronic device 800 shown in the present application. For example, the electronic device 800 may be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc.
[0163] Reference Figure 7 , the electronic device 800 may include one or more of the following components: a processing component 802 , a memory 804 , a power component 806 , a multimedia component 808 , an audio component 810 , an input / output (I / O) interface 812 , a sensor component 814 , and a communication component 816 .
[0164] The processing component 802 generally controls the overall operation of the electronic device 800, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 802 may include one or more processors 820 to execute instructions to complete all or part of the steps of the above method. In addition, the processing component 802 may include one or more modules to facilitate the interaction between the processing component 802 and other components. For example, the processing component 802 may include a multimedia module to facilitate the interaction between the multimedia component 808 and the processing component 802.
[0165] The memory 804 is configured to store various types of data to support operations on the device 800. Examples of such data include instructions for any application or method operating on the electronic device 800, contact data, phone book data, messages, images, videos, etc. The memory 804 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.
[0166] The power supply component 806 provides power to the various components of the electronic device 800. The power supply component 806 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to the electronic device 800.
[0167] The multimedia component 808 includes a screen that provides an output interface between the electronic device 800 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of the touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 808 includes a front camera and / or a rear camera. When the device 800 is in an operating mode, such as a shooting mode or a video mode, the front camera and / or the rear camera may receive external multimedia data. Each front camera and the rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.
[0168] The audio component 810 is configured to output and / or input audio signals. For example, the audio component 810 includes a microphone (MIC), and when the electronic device 800 is in an operating mode, such as a call mode, a recording mode, and a voice recognition mode, the microphone is configured to receive an external audio signal. The received audio signal can be further stored in the memory 804 or sent via the communication component 816. In some embodiments, the audio component 810 also includes a speaker for outputting audio signals.
[0169] I / O interface 812 provides an interface between processing component 802 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include but are not limited to: home button, volume button, start button, and lock button.
[0170] The sensor assembly 814 includes one or more sensors for providing various aspects of status assessment for the electronic device 800. For example, the sensor assembly 814 can detect the open / closed state of the device 800, the relative positioning of components, such as the display and keypad of the electronic device 800, and the sensor assembly 814 can also detect the position change of the electronic device 800 or a component of the electronic device 800, the presence or absence of contact between the user and the electronic device 800, the orientation or acceleration / deceleration of the electronic device 800, and the temperature change of the electronic device 800. The sensor assembly 814 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 814 may also include an optical sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an accelerometer, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.
[0171] The communication component 816 is configured to facilitate wired or wireless communication between the electronic device 800 and other devices. The electronic device 800 can access a wireless network based on a communication standard, such as WiFi, a carrier network (such as 2G, 3G, 4G or 5G), or a combination thereof. In an exemplary embodiment, the communication component 816 receives a broadcast signal or broadcast operation information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 816 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.
[0172] In an exemplary embodiment, the electronic device 800 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above methods.
[0173] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 804 including instructions, and the instructions can be executed by a processor 820 of an electronic device 800 to perform the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.
[0174] Figure 8 19 is a block diagram of a computer-readable storage medium 1900 shown in the present application. For example, the computer-readable storage medium 1900 may be provided as a server.
[0175] Reference Figure 8 , the computer-readable storage medium 1900 includes a processing component 1922, which further includes one or more processors, and a memory resource represented by a memory 1932 for storing instructions, such as an application, that can be executed by the processing component 1922. The application stored in the memory 1932 may include one or more modules, each corresponding to a set of instructions. In addition, the processing component 1922 is configured to execute instructions to perform the above method.
[0176] The computer readable storage medium 1900 may also include a power supply component 1926 configured to perform power management of the computer readable storage medium 1900, a wired or wireless network interface 1950 configured to connect the computer readable storage medium 1900 to a network, and an input / output (I / O) interface 1958. The computer readable storage medium 1900 may operate based on an operating system stored in the memory 1932, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™ or the like.
[0177] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.
[0178] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in each embodiment of the present application.
[0179] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.
[0180] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed in the present application can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.
[0181] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.
[0182] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.
[0183] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
[0184] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
[0185] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard drives, ROM, RAM, magnetic disks, or optical disks.
[0186] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.
Claims
1. A vehicle positioning coordinate encryption method based on clock intervention, characterized in that: The method comprises: Deploy a clock system on the intranet of the cloud platform and calibrate it with the Beidou clock; According to the time difference between the clock system deployed in the intranet and the Beidou clock, a true random number sequence is generated to form a cubic function characteristic curve and generate an encryption key; Through the asynchronous FIFO mode, the vehicle positioning coordinate data in the air interface is offset encrypted in combination with the encryption key to generate offset encrypted vehicle positioning coordinate data; A verification key is set for verifying user information and combined with the offset encrypted vehicle positioning coordinate data to complete vehicle positioning coordinate encryption.
2. A vehicle positioning coordinate encryption method based on clock intervention as claimed in claim 1, characterized in that: Also includes: The data of Beidou clock is collected as the first characteristic data, and the deployed data is collected as the second characteristic data.
3. A vehicle positioning coordinate encryption method based on clock intervention as claimed in claim 2, characterized in that: Deploy the clock system through the intranet and calibrate with the Beidou clock, including: Check the data size, interval size, error with the first characteristic data, coefficient interval and coefficient change trend; Filter low-frequency data and signal scenarios; Compare the pros and cons of current coefficients with historical coefficients; If all the operations in the above proofreading are passed, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data and the second characteristic data; otherwise, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data, thereby achieving clock verification by correcting the coefficients.
4. A vehicle positioning coordinate encryption method based on clock intervention as claimed in claim 1, characterized in that: The read and write logic of asynchronous FIFO mode includes: When the write pointer points to the time synchronization key, the amount of time the dual-port memory on the IoT side is read; Add a redundant bit to the highest bit of the write pointer; Define the random code pointer as log2N:0, and each log2N bit is used as a random check bit; When the FIFO is completely filled for the first time, the write pointer has the value N.
5. The vehicle positioning coordinate encryption method based on clock intervention as claimed in claim 1, characterized in that: It also includes a key authenticity verification step: When the memory address and redundant bits of the dual-port memory are equal during the read and write address, it is determined that the read pointer catches up with the write pointer, the FIFO is empty, and the vehicle positioning coordinate data is true; When the memory addresses of the dual-port memories are equal but the redundant bits are not equal, it is determined that the FIFO is full and the vehicle positioning coordinate data is false.
6. A vehicle positioning coordinate encryption method based on clock intervention as claimed in claim 1, characterized in that: It also includes the vehicle positioning coordinate data interaction steps: Add key verification to the leading headers of the terminal message of the IoT terminal and the platform message of the cloud platform respectively; After receiving the terminal message, the cloud platform verifies the authenticity of the verification key, and if it is true, it initiates VPDN channel communication; After receiving the platform message, the IoT terminal verifies the authenticity of the verification key. If it is true, a VPDN channel is established and the vehicle positioning coordinate data is exchanged.
7. A vehicle positioning coordinate encryption device based on clock intervention, characterized in that: The device comprises: The clock calibration module is used to deploy the clock system in the intranet of the cloud platform and calibrate it with the Beidou clock; The encryption key generation module is used to generate a true random number sequence according to the time difference between the intranet deployment clock system and the Beidou clock, form a cubic function characteristic curve, and generate an encryption key; The data encryption module is used to offset encrypt the vehicle positioning coordinate data in the air interface in combination with the encryption key through the asynchronous FIFO mode to generate the offset encrypted vehicle positioning coordinate data; A verification key module is set up to set a verification key for verifying user information, and is combined with the offset encrypted vehicle positioning coordinate data to complete vehicle positioning coordinate encryption.
8. A vehicle positioning coordinate encryption device based on clock intervention as claimed in claim 7, characterized in that: Also includes: The data collection module is used to collect the data of the Beidou clock as the first characteristic data and collect the deployed data as the second characteristic data.
9. A vehicle positioning coordinate encryption device based on clock intervention as claimed in claim 8, characterized in that: The clock calibration module is specifically used for: Check the data size, interval size, error with the first characteristic data, coefficient interval and coefficient change trend; Filter low-frequency data and signal scenarios; Compare the pros and cons of current coefficients with historical coefficients; If all the operations in the above proofreading are passed, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data and the second characteristic data; otherwise, the coefficients of the intranet-deployed clock system are proofread using the first characteristic data, thereby achieving clock verification by correcting the coefficients.
10. The vehicle positioning coordinate encryption device based on clock intervention as claimed in claim 7, characterized in that: The data encryption module is specifically used to offset encrypt the vehicle positioning coordinate data in the air interface in combination with the encryption key according to the following asynchronous FIFO mode read and write logic to generate the offset encrypted vehicle positioning coordinate data: The amount of time to read the dual-port memory when the write pointer points to the time synchronization key; Add a redundant bit to the highest bit of the write pointer; Define the random code pointer as log2N:0, and each log2N bit is used as a random check bit; When the FIFO is completely filled for the first time, the write pointer has the value N.
11. A vehicle positioning coordinate encryption device based on clock intervention as claimed in claim 7, characterized in that: It also includes a key verification module for verifying the authenticity of the key; The key verification module is specifically used for: When the memory address and redundant bits of the dual-port memory are equal during the read and write address, it is determined that the read pointer catches up with the write pointer, the FIFO is empty, and the vehicle positioning coordinate data is true; When the memory addresses of the dual-port memories are equal but the redundant bits are not equal, it is determined that the FIFO is full and the vehicle positioning coordinate data is false.
12. The vehicle positioning coordinate encryption device based on clock intervention as claimed in claim 7, characterized in that: It also includes a data interaction module for interacting with vehicle positioning coordinate data; The data interaction module is specifically used for: Add key verification to the leading headers of the terminal message of the IoT terminal and the platform message of the cloud platform respectively; After receiving the terminal message, the cloud platform verifies the authenticity of the verification key, and if it is true, it initiates VPDN channel communication; After receiving the platform message, the IoT terminal verifies the authenticity of the verification key. If it is true, a VPDN channel is established and the vehicle positioning coordinate data is exchanged.
13. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program implements the method according to any one of claims 1 to 6 when executed by the processor.
14. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.