Method and device for clearing personal information data of intelligent connected vehicles

Abstract

This invention discloses a method and apparatus for erasing personal information data in intelligent connected vehicles. The method includes: identifying and extracting personal information from the vehicle's in-vehicle system to obtain target data to be deleted; pre-setting a number of repetitions for erasing the target data; obtaining a first hash value of the target data; obtaining a data erasing program for the in-vehicle system; executing the data erasing program on the target data according to the number of repetitions; obtaining a second hash value of the erasure area of ​​the target data; comparing the first hash value and the second hash value; if the second hash value is the same as the first hash value, returning to the step of obtaining the data erasing program for the in-vehicle system; if the second hash value is different from the first hash value, ending the current process of erasing personal information data in the intelligent connected vehicle. This invention can improve the accuracy and reliability of data erasure and can be widely applied in the field of data processing technology.

Description

Technical Field

[0001] This invention relates to the field of data processing technology, and in particular to a method and apparatus for erasing personal information data in intelligent connected vehicles. Background Technology

[0002] In vehicle systems, user data is typically stored in the Data partition. Before a user sells, exchanges, or donates the data, the vehicle system needs to be reset to ensure that the data is permanently deleted and unrecoverable. Currently, conventional data formatting methods suffer from incomplete data erasure in some cases due to variations in the number of erasure cycles and the corresponding data filling performed by different data erasure standards, thus posing security risks. Summary of the Invention

[0003] In view of this, the main objective of the embodiments of the present invention is to provide a method and apparatus for clearing personal information data of intelligent connected vehicles, in order to solve at least one of the problems of the prior art. The present invention can improve the accuracy and reliability of data clearing.

[0004] To achieve the above objectives, one aspect of the present invention provides a method for clearing personal information data in intelligent connected vehicles, the method comprising the following steps:

[0005] Identify and extract personal information from the vehicle's in-vehicle system to obtain the target data to be deleted;

[0006] The number of times the target data can be repeatedly erased and rewritten is preset;

[0007] Obtain the first hash value of the target deleted data;

[0008] Obtain the data erasure and rewrite program for the vehicle system;

[0009] The data erasure and rewrite procedure is executed on the target deleted data according to the number of repeated erasure and rewrite cycles.

[0010] Obtain the second hash value of the erased area of ​​the target deleted data;

[0011] The first hash value and the second hash value are compared. If the second hash value is the same as the first hash value, the step of obtaining the data erasure procedure of the vehicle system is returned. If the second hash value is not the same as the first hash value, the current intelligent connected vehicle personal information data clearing process is terminated.

[0012] In some embodiments, before identifying and extracting personal information from the vehicle system to obtain the target deleted data, the method further includes the following steps:

[0013] Obtain debugging privileges;

[0014] Based on the aforementioned debugging permissions, the vehicle system can enter debugging mode via debugging tools or debugging commands.

[0015] In some embodiments, identifying and extracting personal information from the vehicle system to obtain the target deleted data includes the following steps:

[0016] Scan the data storage area of ​​the vehicle system to identify and extract personal information from the vehicle system;

[0017] The personal information is categorized into several data types;

[0018] Based on the data type, obtain the target data to be deleted.

[0019] In some embodiments, obtaining the first hash value of the target deleted data includes the following steps:

[0020] The target data to be deleted is divided into blocks to obtain several first data blocks;

[0021] Perform a hash calculation on the first data block to obtain several third hash values;

[0022] The first hash value is obtained by merging several of the third hash values.

[0023] In some embodiments, executing the data erasure procedure on the target deleted data according to the number of repeated erasures includes the following steps:

[0024] Obtain the erasure area of ​​the target data to be deleted;

[0025] Lock and mark the erasure area;

[0026] Based on the size of the erased area, a random second data block is generated;

[0027] Write the second data block into the locked erase area.

[0028] In some embodiments, executing the data erasure procedure on the target deleted data according to the number of repeated erasures and rewrites further includes the following steps:

[0029] Determine whether the number of repeated erase / write operations has been reached. If the number of repeated erase / write operations has not been reached, return to the step of executing the data erasure / write procedure on the target deleted data according to the number of repeated erase / write operations. If the number of repeated erase / write operations has been reached, stop the data erasure / write procedure and delete the second data block written in the erasure area.

[0030] To achieve the above objectives, another aspect of the present invention provides a device for erasing personal information data in intelligent connected vehicles, the device comprising:

[0031] The first module is used to identify and extract personal information from the vehicle system to obtain the target data to be deleted;

[0032] The second module is used to preset the number of times the target data to be repeatedly erased and rewritten.

[0033] The third module is used to obtain the first hash value of the target deleted data;

[0034] The fourth module is used to obtain the data erasure and rewrite program of the vehicle system;

[0035] The fifth module is used to execute the data erasure and rewrite procedure on the target deleted data according to the number of repeated erasure and rewrite cycles;

[0036] The sixth module is used to obtain the second hash value of the erasure area of ​​the target deleted data;

[0037] The seventh module is used to compare the first hash value with the second hash value. If the second hash value is the same as the first hash value, the step of obtaining the data erasure procedure of the vehicle system is returned. If the second hash value is not the same as the first hash value, the current intelligent connected vehicle personal information data clearing process is terminated.

[0038] To achieve the above objectives, another aspect of the present invention provides an electronic device, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the aforementioned method for clearing personal information data of a smart connected vehicle.

[0039] To achieve the above objectives, another aspect of the present invention provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the aforementioned method for clearing personal information data of a smart connected vehicle.

[0040] To achieve the above objectives, another aspect of the present invention provides a computer program product or computer program including computer instructions stored in a computer-readable storage medium. A processor of a computer device can read the computer instructions from the computer-readable storage medium and execute the computer instructions, causing the computer device to perform the aforementioned method for erasing personal information data in a connected vehicle.

[0041] The embodiments of the present invention include at least the following beneficial effects: The present invention provides a method and apparatus for erasing personal information data of intelligent connected vehicles. This scheme identifies and extracts personal information from the vehicle system to obtain target data to be deleted; presets the number of repeated erasures of the target data to be deleted; obtains a first hash value of the target data to be deleted; obtains the data erasure program of the vehicle system; executes the data erasure program on the target data to be deleted according to the number of repeated erasures; obtains a second hash value of the erasure area of ​​the target data to be deleted; compares the first hash value with the second hash value; if the second hash value is the same as the first hash value, the process returns to the step of obtaining the data erasure program of the vehicle system; if the second hash value is different from the first hash value, the current process of erasing personal information data of intelligent connected vehicles ends. By calculating and comparing hash values, it is possible to determine whether data has been deleted, thereby improving the accuracy and reliability of data erasure. Attached Figure Description

[0042] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0043] Figure 1 This is a flowchart of a method for clearing personal information data in an intelligent connected vehicle according to an embodiment of the present invention;

[0044] Figure 2 This is a schematic diagram illustrating an optional implementation process for clearing personal information data in intelligent connected vehicles provided in an embodiment of the present invention;

[0045] Figure 3 This is a schematic diagram of the hardware structure of the electronic device provided in an embodiment of the present invention. Detailed Implementation

[0046] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with those of this invention; they are merely examples of apparatuses and methods consistent with some aspects of the embodiments of this invention as detailed in the appended claims.

[0047] It should be noted that although functional modules are divided in the system diagram and a logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the system or the order in the flowchart. The terms "first / S100" and "second / S200" in the specification, claims, and the foregoing drawings may be used herein to describe various concepts, but unless specifically stated otherwise, these concepts are not limited by these terms. These terms are used only to distinguish one concept from another. For example, first information may also be referred to as second information without departing from the scope of the embodiments of the invention, and similarly, second information may also be referred to as first information. Depending on the context, the words "if" or "when" as used herein may be interpreted as "when," "in response to a determination," or "in the event of a determination."

[0048] The terms “at least one,” “multiple,” “each,” “any,” etc., used in this invention, “at least one” includes one, two, or more than two; “multiple” includes two or more than two; “each” refers to each of the corresponding multiple; and “any” refers to any one of the multiple.

[0049] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the art to which the present invention pertains. The terms used herein are for the purpose of describing embodiments of the present invention only and are not intended to limit the present invention.

[0050] In in-vehicle systems, user data is typically stored in the Data partition. Before a user sells, exchanges, or donates the data, the in-vehicle system needs to be reset to ensure that the data is permanently deleted and unrecoverable. Currently, common data formatting methods, such as in Android phones, involve using ADB (Android Debug Bridge) to automatically enter Recovery mode, quickly formatting the Data partition, reclaiming space storing user privacy data, overwriting all free space in the Data partition, and covering any remaining user data storage blocks. However, different systems and data erasure standards perform different number of data erasures and fill different data blocks, and there is a lack of thorough verification of whether data has been erased. This can lead to incomplete data erasure in some cases, posing a security risk.

[0051] In view of this, such as Figure 1 As shown, this embodiment of the invention provides a method for clearing personal information data in intelligent connected vehicles, which may include, but is not limited to, steps S100 to S700:

[0052] Step S100: Identify and extract personal information from the vehicle system to obtain the target data to be deleted;

[0053] Step S200: Preset the number of times the target data to be repeatedly erased and rewritten;

[0054] Step S300: Obtain the first hash value of the target deleted data;

[0055] Step S400: Obtain the data erasure and rewrite program for the vehicle system;

[0056] Step S500: Execute the data erasure and rewrite procedure on the target deleted data according to the number of repeated erasure and rewrite cycles;

[0057] Step S600: Obtain the second hash value of the erasure region of the target deleted data;

[0058] Step S700: Compare the first hash value with the second hash value. If the second hash value is the same as the first hash value, return to the step of obtaining the data erasure procedure of the vehicle system. If the second hash value is not the same as the first hash value, end the current intelligent connected vehicle personal information data clearing process.

[0059] In some embodiments, prior to step S100, the method further includes: obtaining debugging permissions; and, based on the debugging permissions, entering the debugging mode of the vehicle system using a debugging tool or debugging commands. Entering the debugging mode of the vehicle system using specific debugging tools or commands typically requires specific permissions or passwords to ensure that only authorized users can access the system's underlying functions. For example, permission verification is performed before debugging the vehicle system. Some vehicle systems may require users to log in to the cloud using a pre-assigned username and password to activate debugging permissions. This ensures that only authorized users can enter the debugging mode, thereby protecting the vehicle system from the risk of unauthorized access. After successfully verifying permissions, the debugging tool can then be invoked for system debugging.

[0060] In some embodiments, step S100 may include, but is not limited to, steps S110 to S130:

[0061] Step S110: Scan the data storage area of ​​the vehicle system, identify and extract personal information from the vehicle system;

[0062] Step S120: Classify the personal information to obtain several data types;

[0063] Step S130: Obtain the target data to be deleted based on the data type.

[0064] In steps S110 to S130 of some embodiments, in debug mode, the system scans the vehicle's storage devices, scans the data storage area of ​​the in-vehicle system, and identifies and extracts all stored personal information. This information may include music playback records, navigation history, contacts, etc. After extracting the stored personal information, the system categorizes this personal information into different data types for easier viewing and management by the user. The user can view the categorized personal information in the data management interface and select the data type to be deleted (such as music, navigation records, or contacts, but not limited to these), i.e., the target data to be deleted.

[0065] In step S200 of some embodiments, the number of rewrite cycles for each data type to be deleted can be set. Optionally, the user can specify the number of rewrite cycles for each data type to enhance the security of data deletion and prevent data recovery. To increase the difficulty of data recovery, the user can specify to select three or seven rewrite cycles or other numbers of rewrite cycles. For example, three rewrite cycles may include: first overwriting each addressable location with a random bit pattern, then overwriting each addressable location on the storage device with binary zeros, and finally overwriting each addressable location with binary ones. After each overwrite operation, verification can be performed to ensure that the previous overwrite has been successfully completed. The seven-step erasure process can include: first, overwriting each addressable location with binary zeros; second, overwriting each addressable location with binary one; third, overwriting each addressable location with a random bit pattern; fourth, overwriting each addressable location again with binary zeros; fifth, overwriting each addressable location again with binary one; sixth, overwriting each addressable location again with a random bit pattern; and seventh, finally overwriting each addressable location with a random bit pattern. Each step can be verified to ensure the previous step was successful. By using a different padding pattern each time, the difficulty of data recovery can be increased.

[0066] In some embodiments, step S300 may include, but is not limited to, steps S310 to S330.

[0067] Step S310: Divide the target data to be deleted into blocks to obtain several first data blocks;

[0068] Step S320: Perform a hash calculation on the first data block to obtain several third hash values;

[0069] Step S330: Merge several of the third hash values ​​to obtain the first hash value.

[0070] In steps S310 to S330 of some embodiments, the target data to be deleted is provided to a hash algorithm for hash calculation to generate a unique identifier for the data—a hash value. The core operation of calculating the hash value is to process the extracted target data using a hash algorithm (such as SHA-256 or MD5) to generate a unique hash value. During the calculation process, the target data is divided into several blocks (usually the same size as the storage block) using the hash algorithm, resulting in several first data blocks. Each first data block then participates in the hash calculation, yielding several third hash values. Finally, these third hash values ​​are combined to form a unique hash value, resulting in the first hash value. The calculated hash value is the unique identifier of the target data. This embodiment of the invention utilizes the characteristic that hash values ​​can be used to verify the integrity and consistency of data. In subsequent steps, the calculation and comparison of hash values ​​determine whether data has been deleted, thereby improving the accuracy and reliability of data erasure.

[0071] For example, taking the user's selection to delete a file named photo.jpg as an example, the process of obtaining the first hash value of the target deleted data includes: the in-vehicle system extracts the file content of the target deleted data photo.jpg from the vehicle's storage, which can obtain the file content (data block), file size (e.g., 1MB), and file path (e.g., / mnt / sdcard / photos / photo.jpg). The file content is divided into several first data blocks, optionally, each first data block can be 4KB or 8KB in size. Next, a hash calculation is performed on the extracted first data block. Taking the SHA-256 algorithm as an example, the vehicle system performs hash calculations on all the first data blocks of photo.jpg one by one, and combines the calculated third hash values ​​into a unique hash value. The vehicle system will then generate a 256-bit (32-byte) first hash value. Assuming the result is: d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2 This hash value will serve as the unique identifier of the target deleted data photo.jpg file for subsequent data integrity verification.

[0072] As a unique representation of data, a hash value means that any small change to the data will result in a change in the hash value. This ensures the accuracy and reliability of data deletion and is a key technical measure to ensure that data can be tracked and verified in subsequent deletion processes.

[0073] In some embodiments, the in-vehicle system may also store the calculated hash value in a recovery log or recovery record. The parameters stored during the hash value storage operation may include the hash value and its corresponding data block information. By storing the hash value, data integrity and consistency can be ensured, and it is used for verification and validation during the recovery process. In this embodiment of the invention, it is also used for hash value comparison to determine whether the target deleted data has been cleared.

[0074] In some embodiments, after calculating the hash value, the in-vehicle system can also provide feedback to the user on the hash calculation result. The returned feedback parameters may include, but are not limited to, the calculation result (success / failure), the hash value (if the calculation result is successful), and an error message (if the calculation result is unsuccessful). If the calculation is successful, the in-vehicle system displays the calculated hash value and allows the user to continue deleting or restoring data. If the calculation fails, the in-vehicle system displays the error reason and suggests that the user retry.

[0075] In step S400 of some embodiments, in response to the user's data erasure command, a pre-set data erasure program is pushed to the vehicle system. This program is responsible for performing data deletion and filling operations to ensure that the data is completely erased.

[0076] In some embodiments, step S500 may include, but is not limited to, steps S510 to S540:

[0077] Step S510: Obtain the erasure area of ​​the target deleted data;

[0078] Step S520: Lock and mark the erasure area;

[0079] Step S530: Generate a random second data block according to the size of the erasure area;

[0080] Step S540: Write the second data block into the locked erase area.

[0081] In steps S510 to S520 of some embodiments, the file or region of the target data to be deleted is obtained according to the path of the target data to be deleted, i.e., the erasure region. The system will lock and mark the data erasure region where the erasure operation needs to be performed. This erasure region typically includes the location of the target data to be deleted or a free storage area.

[0082] In step S530 of some embodiments, the system generates a random data block, i.e., a second data block, based on the size of the erasure area. The size of the generated random data block is equal to the size of the target erasure area. For example, if the target area is 4KB, the system will generate a 4KB random byte sequence. The content of the generated random data block is completely unpredictable to ensure that the target deleted data is overwritten.

[0083] In step S540 of some embodiments, random data from the generated second data block is written into a locked erase area.

[0084] The data erasure procedure can erase data in a user-specified area, ensuring that this data cannot be recovered. By overwriting the original data, it prevents recovery and ensures data security and unrecoverability. Simultaneously, random data is used for padding. This generates unpredictable data to fill the storage area, thus overwriting the original data. Recovery tools cannot identify or reconstruct the original data, making recovery extremely unlikely, thereby ensuring that deleted data cannot be retrieved by recovery tools.

[0085] In some embodiments, step S500 may also include, but is not limited to, step S550:

[0086] Step S550: Determine whether the number of repeated erase / write operations has been reached. If the number of repeated erase / write operations has not been reached, return to the step of executing the data erasure / write program on the target deleted data according to the number of repeated erase / write operations. If the number of repeated erase / write operations has been reached, stop the data erasure / write program and delete the second data block written in the erasure area.

[0087] In step S550 of some embodiments, the system checks whether the user-specified number of rewrite cycles has been reached. If the specified number of rewrite cycles has not been reached, the data erasure procedure will continue to perform the filling operation until the set number is reached. Once the specified number of rewrite cycles is reached, the system will stop the data erasure procedure. Subsequently, the filled data will be deleted to release storage space and ensure that the original deleted data cannot be recovered.

[0088] In step S600 of some embodiments, the system will recalculate the hash value of the deleted area, that is, calculate the second hash value of the erased area corresponding to the original target deleted data, to confirm that the data has been successfully erased and cannot be recovered. This process provides users with additional security and ensures the complete deletion of personal information.

[0089] In step S700 of some embodiments, the hash value calculated before confirming the deletion of the target data is compared with the hash value of the erased area obtained after the data erasure procedure is completed. That is, the first hash value and the second hash value are compared. If the second hash value is the same as the first hash value, the step of pushing the pre-set data erasure procedure to the vehicle system needs to be returned to perform a second data erasure. If the second hash value is different from the first hash value, the target data has been cleared, and the current intelligent connected vehicle personal information data erasure process can be terminated.

[0090] refer to Figure 2 , Figure 2The following illustrates an optional implementation process for clearing personal information data in intelligent connected vehicles provided by an embodiment of the present invention:

[0091] S1. Enter the vehicle's infotainment system using debug mode;

[0092] S2. Control the vehicle system to retrieve and classify personal information to ensure the integrity of the information;

[0093] S3. Confirm the data type and number of erase / write cycles selected by the user to ensure that the user's intention is met;

[0094] S4. Calculate the hash value of the data to be deleted:

[0095] S41. Extract the data to be deleted;

[0096] S42. Calculate the hash value of the extracted data;

[0097] S43. Store the calculated hash value;

[0098] S44. The system returns the hash calculation result to the user;

[0099] S5. Push the data erasure and rewrite program to the vehicle system;

[0100] S6. Execute the data erasure and write procedure to fill the data partition:

[0101] S61. Lock and mark the data area where the erase / write operation needs to be performed;

[0102] S62. The system generates a random data block of the same size as the target erasure area.

[0103] S63. The generated random data is written to the locked target data area;

[0104] S7. Determine if the number of rewrite cycles has been reached. If not, the program will continue to perform the filling operation until the set number of cycles is reached.

[0105] S8: Stop erasing and writing, delete the filled data, and restore space;

[0106] S9. Recalculate the hash value of the deleted area to confirm that the data has been successfully erased and cannot be recovered. Compare the new hash value with the hash value calculated in step S4 above. If the hash value in step S9 is the same as the hash value in step S4, return to step S5. If they are different, end the process.

[0107] It should be noted that in all specific embodiments of this application, when processing data related to user identity or characteristics, such as user information, user behavior data, user historical data, and user location information, user permission or consent is obtained first. Furthermore, the collection, use, and processing of this data comply with relevant laws, regulations, and standards. In addition, when embodiments of this application require access to sensitive personal information of users, separate permission or consent from the user is obtained through pop-ups or redirection to confirmation pages. Only after obtaining the user's separate permission or consent is the necessary user-related data required for the proper functioning of these embodiments acquired.

[0108] This invention also provides a device for erasing personal information data in intelligent connected vehicles, which can implement the above-described method for erasing personal information data in intelligent connected vehicles. The device includes:

[0109] The first module is used to identify and extract personal information from the vehicle system to obtain the target data to be deleted;

[0110] The second module is used to preset the number of times the target data to be repeatedly erased and rewritten.

[0111] The third module is used to obtain the first hash value of the target deleted data;

[0112] The fourth module is used to obtain the data erasure and rewrite program of the vehicle system;

[0113] The fifth module is used to execute the data erasure and rewrite procedure on the target deleted data according to the number of repeated erasure and rewrite cycles;

[0114] The sixth module is used to obtain the second hash value of the erasure area of ​​the target deleted data;

[0115] The seventh module is used to compare the first hash value with the second hash value. If the second hash value is the same as the first hash value, the step of obtaining the data erasure procedure of the vehicle system is returned. If the second hash value is not the same as the first hash value, the current intelligent connected vehicle personal information data clearing process is terminated.

[0116] It is understood that the content of the above method embodiments is applicable to the present device embodiments. The specific functions implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0117] This invention also provides an electronic device, which includes a processor and a memory. The memory stores a computer program, and the processor executes the computer program to implement the aforementioned method for clearing personal information data in a smart connected vehicle. This electronic device can be any smart terminal, including a tablet computer or an in-vehicle computer.

[0118] It is understood that the content of the above method embodiments is applicable to this device embodiment. The specific functions implemented by this device embodiment are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0119] refer to Figure 3 , Figure 3 The hardware structure of an electronic device according to another embodiment is illustrated. The electronic device includes:

[0120] The processor 801 can be implemented using a general-purpose CPU (Central Processing Unit), microprocessor, application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present invention.

[0121] The memory 802 can be implemented as a read-only memory (ROM), static storage device, dynamic storage device, or random access memory (RAM). The memory 802 can store the operating system and other applications. When the technical solutions provided in the embodiments of this specification are implemented through software or firmware, the relevant program code is stored in the memory 802 and is called and executed by the processor 801 to implement the intelligent connected vehicle personal information data clearing method of this embodiment of the invention.

[0122] The 803 input / output interface is used to implement information input and output.

[0123] The communication interface 804 is used to enable communication and interaction between this device and other devices. Communication can be achieved through wired means (such as USB, Ethernet cable, etc.) or wireless means (such as mobile network, WIFI, Bluetooth, etc.).

[0124] Bus 805 transmits information between various components of the device (e.g., processor 801, memory 802, input / output interface 803, and communication interface 804);

[0125] The processor 801, memory 802, input / output interface 803, and communication interface 804 are connected to each other within the device via bus 805.

[0126] This invention also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described method for clearing personal information data in a smart connected vehicle.

[0127] It is understood that the content of the above method embodiments is applicable to this storage medium embodiment. The specific functions implemented in this storage medium embodiment are the same as those in the above method embodiments, and the beneficial effects achieved are also the same as those achieved in the above method embodiments.

[0128] This invention also provides a computer program product or computer program, which includes computer instructions stored in a computer-readable storage medium. A processor of a computer device can read the computer instructions from the computer-readable storage medium and execute the computer instructions, causing the computer device to perform the aforementioned method for erasing personal information data in a connected vehicle.

[0129] In summary, the method and apparatus for clearing personal information data of intelligent connected vehicles according to embodiments of the present invention have the following advantages:

[0130] 1. This invention incorporates a hash verification mechanism to ensure that all personal information is erased. Through hash value verification, the system can perform a comprehensive check after data deletion to ensure that no residual information remains, thereby significantly improving the security and reliability of data deletion.

[0131] 2. In the data erasure process, this embodiment of the invention utilizes the unpredictability of random data filling, using random data to fill and overwrite the original data. Since the filling content is randomly generated, recovery tools cannot identify or reconstruct the original data, making recovery extremely difficult. Furthermore, random data filling complies with multiple international secure erasure standards. Additionally, recovery tools rely on traces of the original data for recovery, while random filling ensures that no traces are available for recovery, increasing the difficulty of making the data unrecoverable.

[0132] In some alternative embodiments, the functions / operations mentioned in the block diagrams may not occur in the order shown in the operation diagrams. For example, depending on the functions / operations involved, two consecutively shown blocks may actually be executed substantially simultaneously, or the blocks may sometimes be executed in reverse order. Furthermore, the embodiments presented and described in the flowcharts of this invention are provided by way of example to provide a more comprehensive understanding of the technology. The disclosed methods are not limited to the operations and logic flows presented herein. Alternative embodiments are contemplated in which the order of various operations is altered and sub-operations described as part of a larger operation are executed independently.

[0133] Furthermore, although the invention has been described in the context of functional modules, it should be understood that, unless otherwise stated, one or more of the described functions and / or features may be integrated into a single physical device and / or software module, or one or more functions and / or features may be implemented in a separate physical device or software module. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the invention. Rather, given the properties, functions, and internal relationships of the various functional modules in the apparatus disclosed herein, the actual implementation of the module will be understood within the scope of conventional skill of an engineer. Therefore, those skilled in the art can implement the invention as set forth in the claims using ordinary techniques without excessive experimentation. It is also understood that the specific concepts disclosed are merely illustrative and not intended to limit the scope of the invention, which is determined by the full scope of the appended claims and their equivalents.

[0134] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, essentially, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0135] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device.

[0136] More specific examples of computer-readable media (a non-exhaustive list) include: electrical connections (electronic devices) having one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which the program can be printed, because the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0137] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0138] In the description of this specification, references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0139] Although embodiments of the invention have been shown and described, those skilled in the art will understand that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the claims and their equivalents.

[0140] The above is a detailed description of the preferred embodiments of the present invention. However, the present invention is not limited to the embodiments described. Those skilled in the art can make various equivalent modifications or substitutions without departing from the spirit of the present invention. All such equivalent modifications or substitutions are included within the scope defined by the claims of the present invention.

Claims

1. A method for clearing personal information data in intelligent connected vehicles, characterized in that, include: Identify and extract personal information from the vehicle's in-vehicle system to obtain the target data to be deleted; The number of times the target data can be repeatedly erased and rewritten is preset; Obtain the first hash value of the target deleted data; Obtain the data erasure and rewrite program for the vehicle system; The data erasure and rewrite procedure is executed on the target deleted data according to the number of repeated erasure and rewrite cycles. Obtain the second hash value of the erased area of ​​the target deleted data; The first hash value and the second hash value are compared. If the second hash value is the same as the first hash value, the step of obtaining the data erasure procedure of the vehicle system is returned. If the second hash value is not the same as the first hash value, the current intelligent connected vehicle personal information data clearing process is terminated. The step of executing the data erasure and rewrite procedure on the target deleted data according to the number of repeated erasure and rewrite cycles includes the following steps: Obtain the erasure area of ​​the target deleted data; the erasure area includes the location of the target deleted data or a free storage area; Lock and mark the erasure area; A random second data block is generated based on the size of the erasure area; the size of the second data block is equal to the size of the erasure area. Write the second data block into the locked erase area.

2. The method for clearing personal information data of an intelligent connected vehicle according to claim 1, characterized in that, Before identifying and extracting personal information from the vehicle system to obtain the target deleted data, the following steps are also included: Obtain debugging privileges; Based on the aforementioned debugging permissions, the vehicle system can enter debugging mode via debugging tools or debugging commands.

3. The method for clearing personal information data of an intelligent connected vehicle according to claim 1, characterized in that, The process of identifying and extracting personal information from the vehicle system to obtain the target data to be deleted includes the following steps: Scan the data storage area of ​​the vehicle system to identify and extract personal information from the vehicle system; The personal information is categorized into several data types; Based on the data type, obtain the target data to be deleted.

4. The method for clearing personal information data of an intelligent connected vehicle according to claim 1, characterized in that, Obtaining the first hash value of the target deleted data includes the following steps: The target data to be deleted is divided into blocks to obtain several first data blocks; Perform a hash calculation on the first data block to obtain several third hash values; The first hash value is obtained by merging several of the third hash values.

5. The method for clearing personal information data of an intelligent connected vehicle according to claim 1, characterized in that, The step of executing the data erasure and rewrite procedure on the target deleted data according to the number of repeated erasure and rewrite cycles further includes the following steps: Determine whether the number of repeated erase / write operations has been reached. If the number of repeated erase / write operations has not been reached, return to the step of executing the data erasure / write procedure on the target deleted data according to the number of repeated erase / write operations. If the number of repeated erase / write operations has been reached, stop the data erasure / write procedure and delete the second data block written in the erasure area.

6. A device for erasing personal information data in intelligent connected vehicles, characterized in that, include: The first module is used to identify and extract personal information from the vehicle system to obtain the target data to be deleted; The second module is used to preset the number of times the target data to be repeatedly erased and rewritten. The third module is used to obtain the first hash value of the target deleted data; The fourth module is used to obtain the data erasure and rewrite program of the vehicle system; The fifth module is used to execute the data erasure and rewrite procedure on the target deleted data according to the number of repeated erasure and rewrite cycles; The sixth module is used to obtain the second hash value of the erasure area of ​​the target deleted data; The seventh module is used to compare the first hash value with the second hash value. If the second hash value is the same as the first hash value, the step of obtaining the data erasure procedure of the vehicle system is returned. If the second hash value is not the same as the first hash value, the current intelligent connected vehicle personal information data clearing process is terminated. Specifically, the fifth module is used for: Obtain the erasure area of ​​the target deleted data; the erasure area includes the location of the target deleted data or a free storage area; Lock and mark the erasure area; A random second data block is generated based on the size of the erasure area; the size of the second data block is equal to the size of the erasure area. Write the second data block into the locked erase area.

7. An electronic device, characterized in that, Including the processor and memory; The memory is used to store programs; The processor executes the program to implement the method as described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that, The storage medium stores a program that is executed by a processor to implement the method as described in any one of claims 1 to 5.

9. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the method as described in any one of claims 1 to 5.

Images