Security encryption method, device, system and equipment for vehicle information and medium

Abstract

The invention provides a safety encryption method, device, system and equipment for vehicle information and a medium, and the method comprises the steps: respectively obtaining the first feature information of an intelligent terminal and the second feature information of a vehicle-mounted terminal after the communication with the intelligent terminal is established; after the communication state of the vehicle-mounted terminal and the intelligent terminal is determined, the characters of the first feature information and the second feature information are adopted to construct an encryption key according to the communication state; and calling the encryption key to encrypt the interactive vehicle information to obtain encrypted information. According to the method, the specific encryption key of each intelligent terminal can be constructed based on the feature information of the vehicle terminal and the intelligent terminal, and encryption is performed by using the specific encryption key, so that the risk that the information is cracked or leaked can be reduced, the security and the privacy of the information are improved, and the information security is ensured; and meanwhile, interaction control is performed through encrypted information, so that the control safety of the vehicle-mounted terminal can be improved, and the driving risk of a user is reduced.

Description

Technical Field

[0001] The present application relates to the field of vehicle information processing, and particularly to a method, device, system, equipment and medium for securely encrypting vehicle information. Background Art

[0002] With the development of technology, vehicles are constantly moving towards the direction of intelligence. Through the vehicle networking, vehicle-to-vehicle, vehicle-to-person, and vehicle-to-environment conversations can be realized. For example, a user uses a smart terminal to establish communication with an in-vehicle terminal through the Internet to access the information and resource system of the vehicle and control it. However, if the information is stolen or leaked during the transmission process, it may be used by lawbreakers to control the vehicle with the leaked information, increasing the usage risk of the vehicle.

[0003] To ensure information security, one common method is: after the smart terminal and the in-vehicle terminal establish communication, the information of the communication is encrypted according to the communication key between the two parties, and then the encrypted information is transmitted.

[0004] However, the currently common methods have the following technical problems: there may be vulnerabilities or risks of being broken in the cryptographic algorithm and the device terminal itself. Once it is cracked, the encrypted information can be decrypted, resulting in information leakage. At the same time, the encrypted key is generally set fixedly and is easily reverse-cracked, which also increases the risk of leakage. Summary of the Invention

[0005] In view of the above problems, the present application is proposed to provide a method, device, system, equipment and medium for securely encrypting vehicle information that overcomes the above problems or at least partially solves the above problems, including:

[0006] A method for securely encrypting vehicle information, the method includes:

[0007] After establishing communication with the smart terminal, obtain the first feature information of the smart terminal and the second feature information of the in-vehicle terminal respectively. The first feature information includes: the time information and communication requirement information of the communication between the smart terminal and the in-vehicle terminal, and the second feature information includes: the characteristic parameters of the vehicle;

[0008] After determining the communication state between the in-vehicle terminal and the smart terminal, construct an encryption key according to the communication state using the characters of the first feature information and the second feature information;

[0009] Call the encryption key to encrypt the interactive vehicle information to obtain encrypted information.

[0010] In a possible implementation manner, the constructing an encryption key according to the communication state using the characters of the first feature information and the second feature information includes:

[0011] If the communication state is the initial communication state, extract the initial communication timestamp from the time information, extract the first number values of different available applications from the communication requirement information, and extract several first characteristic values from the characteristic parameters;

[0012] After splitting the initial communication timestamp into multiple first time values, splice the multiple first time values and the multiple first number values to obtain a spliced value;

[0013] Construct an encryption key using the several first characteristic values and the spliced value.

[0014] In a possible implementation manner, the constructing the encryption key using the characters of the first characteristic information and the second characteristic information according to the communication state includes:

[0015] If the communication state is a non-initial communication state, obtain the communication interval duration;

[0016] If the communication interval duration is greater than the preset duration, extract multiple values of the current time node from the time information to obtain multiple second time values, extract the second number values of different historical applications from the communication requirement information, and extract several second characteristic values from the characteristic parameters;

[0017] Convert the multiple second time values, the multiple second number values, and the several second characteristic values into matrices respectively to obtain a time matrix, a number matrix, and a characteristic matrix;

[0018] Splice the time matrix, the number matrix, and the characteristic matrix to obtain a spliced matrix, and convert the spliced matrix into numerical data to obtain an encryption key.

[0019] In a possible implementation manner, the calling the encryption key to encrypt the interactive vehicle information to obtain encrypted information includes:

[0020] After determining the interactive vehicle information, select one of the multiple encryption algorithms stored in the pre-trial database as the target algorithm;

[0021] Encrypt the vehicle information using the encryption key according to the target algorithm to obtain encrypted information.

[0022] In a possible implementation manner, after determining the communication state between the in-vehicle terminal and the intelligent terminal, the method further includes:

[0023] Obtain the personal information of the user from the intelligent terminal, and perform information review processing according to the personal information;

[0024] After the information review and processing is passed, obtain the user's permission information from the intelligent terminal and generate application activation information using the permission information;

[0025] Open the closed application program according to the application activation information.

[0026] In a possible implementation manner, after the step of encrypting the vehicle information of the interaction using the encryption key to obtain encrypted information, the method further includes:

[0027] Determine the communication times of the intelligent terminal and the key generation duration;

[0028] Determine a target storage area in a plurality of preset cache areas according to the communication times and the key generation duration;

[0029] Store the encryption key in the target storage area.

[0030] A security encryption device for vehicle information, the device includes:

[0031] An acquisition module, configured to respectively acquire the first feature information of the intelligent terminal and the second feature information of the in-vehicle terminal after establishing communication with the intelligent terminal, where the first feature information includes: time information and communication requirement information for communication between the intelligent terminal and the in-vehicle terminal, and the second feature information includes: characteristic parameters of the vehicle;

[0032] A construction module, configured to construct an encryption key using the characters of the first feature information and the second feature information according to the communication state after determining the communication state between the in-vehicle terminal and the intelligent terminal;

[0033] An encryption module, configured to encrypt the vehicle information of the interaction using the encryption key to obtain encrypted information.

[0034] A security encryption system for vehicle information, the system includes:

[0035] An in-vehicle terminal, a cloud platform, and multiple intelligent terminals;

[0036] The in-vehicle terminal is respectively communicatively connected to the multiple intelligent terminals, the cloud platform is respectively communicatively connected to the multiple intelligent terminals, and the in-vehicle terminal is communicatively connected to the cloud platform;

[0037] The in-vehicle terminal is applicable to the security encryption method for vehicle information as described above.

[0038] A device, including a processor, a memory, and a computer program stored on the memory and capable of running on the processor, where when the computer program is executed by the processor, the steps of the security encryption of vehicle information as described above are implemented

[0039] A computer-readable storage medium stores a computer program thereon, and when the computer program is executed by a processor, the steps of securely encrypting vehicle information as described above are implemented.

[0040] The present application has the following advantages:

[0041] In an embodiment of the present application, after establishing communication with an intelligent terminal, the present application can respectively obtain the first feature information of the intelligent terminal and the second feature information of the vehicle-mounted terminal; after determining the communication state between the vehicle-mounted terminal and the intelligent terminal, an encryption key is constructed according to the communication state using the characters of the first feature information and the second feature information; the encryption key is called to encrypt the interactive vehicle information to obtain encrypted information. By constructing an encryption key specific to each intelligent terminal based on the feature information of the vehicle terminal and the intelligent terminal, and using the specific encryption key for encryption, the risk of information being cracked or leaked can be reduced, the security and privacy of the information can be improved, and information security can be ensured; at the same time, by controlling the interaction through encrypted information, the control security of the vehicle-mounted terminal can also be improved, and the driving risk of the user can be reduced. Description of the Drawings

[0042] In order to more clearly illustrate the technical solutions of the present application, the drawings required for the description of the present application will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0043] Figure 1 is a flowchart of the steps of a method for securely encrypting vehicle information provided by an embodiment of the present application;

[0044] Figure 2 is a structural block diagram of a device for securely encrypting vehicle information provided by an embodiment of the present application. Detailed Embodiments

[0045] To make the above objects, features, and advantages of the present application more obvious and understandable, the present application will be further described in detail below with reference to the drawings and specific embodiments. Obviously, the described embodiments are some, but not all, of the embodiments of the present application. All other embodiments obtained by those of ordinary skill in the art without creative efforts based on the embodiments in the present application belong to the scope of protection of the present application.

[0046] With the development of technology, vehicles are constantly evolving towards the direction of intelligence. Through the vehicle network, vehicle-to-vehicle, vehicle-to-person, and vehicle-to-environment communication can be achieved. For example, users can use intelligent terminals to establish communication with in-vehicle terminals through the Internet to access the vehicle's information and resource systems and control them. However, if information is stolen or leaked during the transmission process, it may be exploited by criminals to control the vehicle, increasing the risk of vehicle use.

[0047] To ensure information security, one common method is: after the intelligent terminal and the in-vehicle terminal establish communication, the communication information is encrypted according to the encryption key of both parties, and then the encrypted information is transmitted.

[0048] However, the current common methods have the following technical problems: there may be vulnerabilities or risks of being broken in the cryptographic algorithm and the device terminal itself. Once cracked, the encrypted information can be decrypted, resulting in information leakage. At the same time, the encryption key is generally set fixedly and is easily reverse-cracked, which also increases the risk of leakage.

[0049] To solve the above technical problems, refer to Figure 1 , which shows the step flowchart of a method for securely encrypting vehicle information provided by an embodiment of the present application;

[0050] In one embodiment, the method for securely encrypting vehicle information is applicable to in-vehicle terminals. The in-vehicle terminal can communicate with different intelligent terminals of different users and perform information interaction. During the interaction process, the in-vehicle terminal can encrypt the vehicle information to be interacted and transmit it to the intelligent terminal to enhance the privacy of the information, reduce the risk of being cracked and leaked, and thus enhance driving safety.

[0051] Among them, as an example, the method for securely encrypting vehicle information may include:

[0052] S11. After establishing communication with the intelligent terminal, respectively obtain the first feature information of the intelligent terminal and the second feature information of the in-vehicle terminal. The first feature information includes: the time information and communication requirement information of the communication between the intelligent terminal and the in-vehicle terminal, and the second feature information includes: the characteristic parameters of the vehicle.

[0053] In one embodiment, the in-vehicle terminal can establish communication with different intelligent terminals of different users. After establishing communication, the in-vehicle terminal can obtain the first feature information of the intelligent terminal and at the same time can obtain the second feature information recorded by the in-vehicle terminal.

[0054] In an operation mode, after the in-vehicle terminal establishes communication with the intelligent terminal, the intelligent terminal can send first feature information to the in-vehicle terminal. The first feature information may include: time information of the communication between the intelligent terminal and the in-vehicle terminal and communication requirement information. The time information may be the time node and timestamp of the communication between the two parties. The communication requirement information may be request information for the intelligent terminal to call different functions and application programs of the in-vehicle terminal.

[0055] In an operation mode, after the in-vehicle terminal establishes communication with the intelligent terminal, the in-vehicle terminal can extract characteristic parameters of the vehicle from its database (built-in database or cloud database) to obtain second feature information. Among them, the characteristic parameters of the vehicle may include its body parameters, driving parameters, performance parameters, model, etc.

[0056] Subsequently, corresponding keys can be constructed for encryption based on the two different feature information. Since the first feature information is unique to the intelligent terminal and the second feature information is unique to the vehicle, and they are obtained when the two communicate with each other and are different for each communication, therefore, encryption can be performed by constructing corresponding encryption keys using the uncertain feature information to improve the security and privacy of the information.

[0057] In order to facilitate the intelligent terminal to decrypt the encrypted information subsequently, in an embodiment, after the in-vehicle terminal obtains the second feature information, the in-vehicle terminal can send the second feature information to the intelligent terminal for its subsequent encryption and decryption use.

[0058] Optionally, in order to prevent the second feature information from being stolen, the intelligent terminal can also look up the second feature information of the vehicle it communicates with from the cloud database of the vehicle. Specifically, after establishing communication with the in-vehicle terminal, the intelligent terminal sends a request to the cloud database to extract the second feature information.

[0059] S12. After determining the communication state between the in-vehicle terminal and the intelligent terminal, construct an encryption key according to the characters of the first feature information and the second feature information based on the communication state.

[0060] In an embodiment, the communication state between the in-vehicle terminal and the intelligent terminal can be determined. The communication state may be the first communication or non-first communication.

[0061] If it is the first communication, characteristic characters related to the first communication can be extracted from the first feature information and the second feature information, and then an encryption key can be constructed using the characteristic characters related to the first communication.

[0062] If it is not the first communication, the vehicle-mounted terminal may have established multiple communications with the intelligent terminal, and the user can perform different controls on the vehicle through the intelligent terminal. Therefore, relevant characteristic characters can be extracted from the first characteristic information and the second characteristic information according to the historical record of the prior communication, so that an encryption key can be constructed using the characteristic characters related to the prior communication to fit the actual communication situation.

[0063] In one embodiment, the vehicle-mounted terminal and the intelligent terminal may establish communication for the first time. In order to construct a corresponding encryption key based on the time of the first communication, where, by way of example, constructing the encryption key using the characters of the first characteristic information and the second characteristic information according to the communication state may include the following sub-steps:

[0064] S21. If the communication state is the first communication state, extract the first communication timestamp from the time information, extract the first number values of different available application programs from the communication requirement information, and extract several first characteristic values from the characteristic parameters.

[0065] S22. After splitting the first communication timestamp into multiple first time values, splice the multiple first time values and the multiple first number values to obtain a spliced value.

[0066] S23. Construct an encryption key using the several first characteristic values and the spliced value.

[0067] In one embodiment, if the communication state between the vehicle-mounted terminal and the intelligent terminal is the first communication state, the vehicle-mounted terminal can extract the first communication timestamp from the time information.

[0068] Similarly, the vehicle-mounted terminal can extract the first number values of different available application programs from the communication requirement information. Among them, the communication requirement information sent by the intelligent terminal to the vehicle-mounted terminal contains the application programs to be called. As the functions of the intelligent terminal continue to increase, the available application programs or vehicle intelligent driving functions also increase accordingly. However, different application programs and intelligent driving functions have different permissions. Since the vehicle-mounted terminal and the intelligent terminal are in the first communication, if all application programs and functions are opened to the intelligent terminal, there are security risks in use; therefore, only a part of the application programs and functions can be opened. Correspondingly, the application programs called by the user can be determined from the communication requirement information, and this application program is the available application program opened to the user. In order to distinguish different application programs and application functions, the vehicle-mounted terminal can pre-add corresponding numbers to different application programs and different application functions, and the number values of the available application programs can be obtained to get the first number values. For example, if the user calls two application programs, music playback and map navigation, the number values of these application programs can be obtained to get two first number values.

[0069] Similarly, the in-vehicle terminal can extract the numerical values of different feature items from the feature parameters, so as to obtain a number of first feature numerical values. For example, if the vehicle model is xx00xx1, it can be split to obtain a number of first feature numerical values. For another example, the feature parameters of the vehicle include: body parameters, driving parameters, performance parameters, and model. Preset characters (such as the 1st character, the 3rd character, the 1-5th characters, etc.) can be extracted from each parameter item to obtain a number of first feature numerical values. The specific extraction method can be adjusted according to actual needs.

[0070] Next, the initial communication timestamp can be split to obtain multiple first time numerical values. For example, if the initial communication timestamp is 202501011233, it can be split to obtain 2, 0, 2, 5, 0, 1, 0, 1, 1, 2, 3, 3, to obtain multiple first time numerical values.

[0071] Next, multiple first time numerical values and multiple first number values can be concatenated to obtain a concatenated value. In one embodiment, the concatenation methods include but are not limited to automatic space, superposition concatenation, string formatting concatenation, concatenation by str.format(), concatenation by str.join(), concatenation by F-strings, etc.

[0072] After obtaining the concatenated value, an encryption key can be constructed using a number of first feature numerical values and the concatenated value.

[0073] In one operation mode, the construction method can add a number of first feature numerical values to the concatenated value at preset character intervals to obtain the encryption key.

[0074] In another operation mode, a binary secret key value can be generated from a number of first feature numerical values based on the quantum encryption algorithm and the concatenated value can be converted into a binary value. The binary secret key value and the binary value are concatenated as strings, and then a string composed of "0" and "1" is obtained. The string is photon polarized according to a preset polarization direction to generate the encryption key.

[0075] It should be noted that different methods can also be used to construct the encryption key according to different encryption needs, and specific adjustments can be made according to actual needs.

[0076] In one embodiment, the in-vehicle terminal and the intelligent terminal may have established multiple communications, not the first communication. In the prior communication process, multiple secret keys have been established. If the secret key is rebuilt every time, the processing efficiency is low. In order to improve the processing efficiency, among them, as an example, constructing the encryption key using the characters of the first feature information and the second feature information according to the communication state may include the following sub-steps:

[0077] S31. If the communication state is a non - initial communication state, obtain the communication interval duration.

[0078] S32. If the communication interval duration is greater than the preset duration, extract multiple values of the current time node from the time information to obtain multiple second - time values, extract the second - number values of different historical application programs from the communication demand information, and extract several second - feature values from the feature parameters.

[0079] S33. Convert the multiple second - time values, the multiple second - number values, and the several second - feature values into matrices respectively to obtain a time matrix, a number matrix, and a feature matrix.

[0080] S34. Concatenate the time matrix, the number matrix, and the feature matrix to obtain a concatenated matrix, and convert the concatenated matrix into numerical data to obtain an encryption key.

[0081] In an embodiment, if the communication state between the vehicle - mounted terminal and the intelligent terminal is a non - initial communication state, the vehicle - mounted terminal can obtain the communication interval duration with the intelligent terminal. The communication interval duration is the interval duration from the current time node of the communication between the vehicle - mounted terminal and the intelligent terminal to the time node when the vehicle - mounted terminal and the intelligent terminal were disconnected last time.

[0082] If the communication interval duration is greater than the preset duration, it means that the interval between their communications is long and an encryption key needs to be reconstructed. At this time, multiple values of the current time node can be extracted from the time information to obtain multiple second - time values, the second - number values of different historical application programs can be extracted from the communication demand information, and several second - feature values can be extracted from the feature parameters.

[0083] The extraction method can count the number of characters according to a preset character to obtain multiple second - time values. For example, if the current time node is 202501011233, the characters can be extracted according to the preset characters "1" and "3", obtaining 3 characters of "1" and 2 characters of "3", and getting two first - time values of 3 and 2 respectively. Or, referring to the above example, the current time node can be split to obtain multiple second - time values.

[0084] Similarly, the second - number values of different historical application programs can be extracted from the communication demand information. Among them, using the historical application program is the number corresponding to the application program or function that the user called on the vehicle - mounted terminal through the intelligent terminal last time, multiple second - number values can be obtained. Each application program or function has a corresponding number, and the specific explanation can refer to the above example.

[0085] Similarly, several second - feature values can also be extracted from the feature parameters. The specific extraction method can also refer to the above description.

[0086] Next, multiple second time values, multiple second number values, and several second characteristic values can be respectively converted into matrices to obtain a time matrix, a number matrix, and a characteristic matrix.

[0087] Then, the time matrix, the number matrix, and the characteristic matrix are spliced to obtain a spliced matrix. After completion of splicing, the spliced matrix is converted into numerical data to obtain an encryption key.

[0088] In an operation mode, the quantities of the second time values, the second number values, and the second characteristic values can be counted. If the quantities are the same, assuming they are all 5, the 5 second time values can be converted into a 5×5 matrix to obtain a time matrix; similarly, the 5 second number values are converted into a 5×5 matrix to obtain a number matrix; the 5 second characteristic values are converted into a 5×5 matrix to obtain a characteristic matrix.

[0089] If the quantities are different, padding can be performed to make the quantities of each value the same, and then each value is converted into a matrix. Optionally, if the quantities are different, the minimum value can also be taken, and then a matrix is constructed according to the minimum quantity. When extracting values according to the minimum value, they can be randomly extracted or extracted according to a preset method. For example, if the quantity of the second time values is 5, the quantity of the second number values is 6, and the quantity of the second characteristic values is 7, a 5×5 matrix can be constructed. When extracting, the first 5 can be selected from the 6 second number values; the first 5 can be selected from the 7 second characteristic values to make the quantities of each value the same, and then each value is converted into a matrix.

[0090] Optionally, the values of the second time values, the second number values, and the second characteristic values can also be respectively converted into 8-bit binary one by one to obtain a binary matrix.

[0091] Next, the time matrix, the number matrix, and the characteristic matrix can be spliced vertically in sequence, and finally a spliced matrix can be obtained. After obtaining the spliced matrix, the spliced matrix is converted into numerical data to obtain an encryption key.

[0092] In an operation mode, a character length of a certain length can be set, and the spliced matrix is converted into numerical data. Specifically, its characters are converted into numerical data to obtain an encryption key.

[0093] S13. Call the encryption key to encrypt the vehicle information for interaction to obtain encrypted information.

[0094] After obtaining the encryption key, the information for interaction with the intelligent terminal can be determined to obtain vehicle information, and then the vehicle information is encrypted using the encryption key to obtain encrypted information. Then the encrypted information is sent to the intelligent terminal.

[0095] There are various encryption methods. To perform encryption processing flexibly, as an example, encrypting the vehicle information in interaction by using the encryption key to obtain encrypted information may include the following sub-steps:

[0096] S131. After determining the vehicle information in interaction, select one of the multiple encryption algorithms stored in the pre-trial database as the target algorithm.

[0097] S132. Encrypt the vehicle information by using the encryption key according to the target algorithm to obtain encrypted information.

[0098] In one embodiment, the in-vehicle terminal can preset several encryption algorithms in advance, and can select one of the multiple encryption algorithms stored in the pre-trial database as the target algorithm. Then encrypt the vehicle information by using the encryption key according to the target algorithm to obtain encrypted information.

[0099] To notify the intelligent terminal, the in-vehicle terminal can select one of the multiple encryption algorithms stored in the cloud database as the target algorithm. After the cloud database determines that the in-vehicle terminal selects the target algorithm, the cloud database can notify the intelligent terminal to facilitate the intelligent terminal to decrypt according to the target algorithm.

[0100] In another optional encryption operation, the encryption key can be used as the information signature of the vehicle information, and then it is encrypted and compressed to obtain encrypted information.

[0101] The specific operation method can also be adjusted according to actual needs and is not limited herein.

[0102] In one embodiment, the communication frequencies between the intelligent terminals of different users and the in-vehicle terminal are different. It may be connected once a day or once a month. According to the above analysis, if a user connects frequently, their encryption key can be retained for subsequent use. To store the encryption key of the user, as an example, after the step of encrypting the vehicle information in interaction by using the encryption key to obtain encrypted information, the method further includes:

[0103] S14. Determine the communication times of the intelligent terminal and the key generation duration.

[0104] S15. Determine the target storage area in multiple preset cache areas according to the communication times and the key generation duration.

[0105] S16. Store the encryption key into the target storage area.

[0106] In one embodiment, the vehicle-mounted terminal may determine the communication times between the vehicle-mounted terminal and the intelligent terminal and the key generation duration. The communication times are the number of times the vehicle-mounted terminal communicates with the intelligent terminal. The key generation duration is the duration for the vehicle-mounted terminal to generate the key of the intelligent terminal for the current communication.

[0107] For example, when the vehicle-mounted terminal communicates with the intelligent terminal for the first time, the communication times are 1 and the key generation duration is 0. When the vehicle-mounted terminal communicates with the intelligent terminal for the third time, the communication times are 3, and its encryption key was generated 12 hours ago, so the key generation duration is 12 hours.

[0108] Next, it may be determined whether the intelligent terminal communicates frequently with the vehicle-mounted terminal according to the communication times and the key generation duration. If it is frequent communication, a target storage area for storing the encryption key may be determined from a plurality of preset cache areas. Then, the encryption key is stored in the target storage area.

[0109] For example, if the communication times are greater than the preset times and the key generation duration is less than the preset storage duration, the vehicle-mounted terminal determines that it communicates frequently with the intelligent terminal. At this time, a target storage area for storing the encryption key may be determined from a plurality of preset cache areas.

[0110] It should be noted that the vehicle-mounted terminal may process a plurality of preset cache areas every day. If the key generation duration of the encryption key stored in the cache area is greater than the preset storage duration, the encryption key stored in the cache area is deleted.

[0111] Optionally, if each cache area stores an encryption key and one cache area needs to be emptied for storing the encryption key, the communication times and the key generation duration corresponding to the encryption key of each cache area may be obtained.

[0112] By comparing the key generation duration of the encryption key to be stored with the key generation duration corresponding to the encryption key of each cache area, an encryption key with a longer key generation duration may be deleted. For example, if the key generation duration corresponding to the encryption key in a cache area is greater than the key generation duration of the encryption key to be stored, the encryption key in that cache area is deleted, and that cache area is used as the target storage area for storing the encryption key to be stored.

[0113] If the key generation duration corresponding to the encryption key in each cache area is less than the key generation duration of the encryption key to be stored, the encryption key to be stored is not stored.

[0114] If the key generation duration corresponding to the encryption key of a cache area is equal to the key generation duration of the encryption key to be stored, and the key generation durations corresponding to the encryption keys of the remaining cache areas are less than the key generation duration of the encryption key to be stored, the communication times of the encryption keys with the same duration can be determined, and the encryption key with fewer communication times can be deleted.

[0115] By dividing different cache areas to store encryption keys and directly storing the encryption keys, it is possible to avoid repeatedly constructing encryption keys for frequently communicating smart terminals, thereby improving communication efficiency. At the same time, it is possible to determine whether the encryption key meets the deletion requirement according to the key generation duration, avoid storing the encryption key for a long time, and reduce the risk of the encryption key being stolen.

[0116] In an optional embodiment, when the application function of the in-vehicle terminal that the user needs to call has no permission, in order to open the call permission for the user, as an example, after the step of determining the communication state between the in-vehicle terminal and the smart terminal, the following sub-steps may be included:

[0117] S41. Obtain the personal information of the user from the smart terminal and perform information review processing according to the personal information.

[0118] S42. After the information review processing is passed, obtain the permission information of the user from the smart terminal and generate activation application information using the permission information.

[0119] S43. Open the closed application program according to the activation application information.

[0120] In an operation mode, the personal information of the user sent by the smart terminal can be obtained, and information review processing can be performed according to the personal information. Among them, the review can include information pre-review and manual review. Specifically, the personal information of the user can be compared with the information in the preset template, and if they are the same, it is transmitted to the cloud platform for the management personnel of the cloud platform to perform manual review. When the manual review is also passed, it is determined that the information review processing is passed.

[0121] At this time, the permission information of the user sent by the smart terminal can be obtained. The permission information can specifically be the permission marking value of the user account.

[0122] The in-vehicle terminal can determine the corresponding application program according to the permission marking value, and judge whether the installed application program list contains the application program determined by the permission marking value. If there is an application program determined by the permission marking value, it is judged whether the application program is open to the user. If it is not open, activation application information can be generated, and the application program can be displayed to the user according to the activation application information, thereby opening the closed application program for the user to call.

[0123] If the application list cannot determine the corresponding application based on the permission flag value, an upgrade request can be generated and sent to the cloud platform. The cloud platform can send an ota upgrade package according to the upgrade request. The in-vehicle terminal can install the corresponding application according to the ota upgrade package, and then generate the application activation information, and display the installed application to the user according to the application activation information, so as to open the closed application for the user to call.

[0124] In this embodiment, the present application provides a method for securely encrypting vehicle information. The beneficial effects are as follows: After establishing communication with the intelligent terminal, the present application can respectively obtain the first feature information of the intelligent terminal and the second feature information of the in-vehicle terminal; after determining the communication state between the in-vehicle terminal and the intelligent terminal, an encryption key is constructed according to the communication state using the characters of the first feature information and the second feature information; the encryption key is called to encrypt the interactive vehicle information to obtain encrypted information. By constructing a specific encryption key for each intelligent terminal based on the feature information of the vehicle terminal and the intelligent terminal, and using the specific encryption key for encryption, the risk of information being cracked or leaked can be reduced, the security and privacy of the information can be improved, and the information security can be ensured; at the same time, by controlling the interaction through the encrypted information, the control security of the in-vehicle terminal can also be improved, and the driving risk of the user can be reduced.

[0125] For the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can refer to the partial description of the method embodiment.

[0126] Referring to Figure 2 , a structural block diagram of a vehicle information security encryption device provided by an embodiment of the present application is shown;

[0127] Specifically, it includes:

[0128] An acquisition module 201, configured to respectively obtain the first feature information of the intelligent terminal and the second feature information of the in-vehicle terminal after establishing communication with the intelligent terminal. The first feature information includes: time information and communication requirement information for communication between the intelligent terminal and the in-vehicle terminal, and the second feature information includes: characteristic parameters of the vehicle;

[0129] A construction module 202, configured to construct an encryption key according to the communication state using the characters of the first feature information and the second feature information after determining the communication state between the in-vehicle terminal and the intelligent terminal;

[0130] An encryption module 203, configured to call the encryption key to encrypt the interactive vehicle information to obtain encrypted information.

[0131] In an alternative embodiment, constructing an encryption key using the characters of the first feature information and the second feature information according to the communication status includes:

[0132] If the communication status is the initial communication status, extract the initial communication timestamp from the time information, extract the first number value of different available applications from the communication requirement information, and extract a plurality of first feature values from the feature parameters;

[0133] After splitting the initial communication timestamp to obtain a plurality of first time values, splice the plurality of first time values and the plurality of number values to obtain a spliced value;

[0134] Construct an encryption key using the plurality of first feature values and the spliced value.

[0135] In an alternative embodiment, constructing an encryption key using the characters of the first feature information and the second feature information according to the communication status includes:

[0136] If the communication status is a non-initial communication status, obtain the communication interval duration;

[0137] If the communication interval duration is greater than a preset duration, extract a plurality of values of the current time node from the time information to obtain a plurality of second time values, extract the second number value of different historical applications from the communication requirement information, and extract a plurality of second feature values from the feature parameters;

[0138] Convert the plurality of second time values, the plurality of second number values, and the plurality of second feature values into matrices respectively to obtain a time matrix, a number matrix, and a feature matrix;

[0139] Splice the time matrix, the number matrix, and the feature matrix to obtain a spliced matrix, and convert the spliced matrix into numerical data to obtain an encryption key.

[0140] In an alternative embodiment, encrypting the interactive vehicle information using the encryption key to obtain encrypted information includes:

[0141] After determining the interactive vehicle information, select one of the multiple encryption algorithms stored in the pre-trial database as the target algorithm;

[0142] Encrypt the vehicle information using the encryption key according to the target algorithm to obtain encrypted information.

[0143] In an alternative embodiment, the device further includes:

[0144] An audit module, configured to, after determining the communication status between the vehicle terminal and the intelligent terminal, obtain the personal information of the user from the intelligent terminal, and perform information audit processing based on the personal information;

[0145] A generation module, configured to, after the information audit processing is passed, obtain the permission information of the user from the intelligent terminal and generate application opening information by using the permission information;

[0146] An opening module, configured to open a closed application program according to the application opening information.

[0147] In an optional embodiment, the device further includes:

[0148] A determination times module, configured to determine the communication times of the intelligent terminal and the key generation duration after the step of encrypting the vehicle information interacted by using the encryption key to obtain encrypted information;

[0149] A determination area module, configured to determine a target storage area in a plurality of preset cache areas according to the communication times and the key generation duration;

[0150] A storage module, configured to store the encryption key into the target storage area.

[0151] An embodiment of the present application provides a security encryption system for vehicle information;

[0152] Specifically, it includes: a vehicle terminal, a cloud platform, and multiple intelligent terminals;

[0153] The vehicle terminal is respectively communicatively connected to the multiple intelligent terminals, the cloud platform is respectively communicatively connected to the multiple intelligent terminals, and the vehicle terminal is communicatively connected to the cloud platform;

[0154] The vehicle terminal is applicable to the security encryption method for vehicle information as described in the above embodiment.

[0155] The present application provides a computer device for the security encryption method of vehicle information, which may specifically include the following:

[0156] The above computer device is presented in the form of a general computing device, and the components of the computer device may include, but are not limited to: one or more processors or processing units, a system memory, and a bus connecting different system components (including the system memory and the processing unit).

[0157] The bus represents one or more of several types of bus architectures, including a memory bus or memory controller, a peripheral bus, an Accelerated Graphics Port, a processor, or a local bus using any of the multiple bus architectures. By way of example, these architectures include, but are not limited to, Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MAC) bus, Enhanced ISA bus, Video Electronics Standards Association (VESA) local bus, and Peripheral Component Interconnect (PCI) bus.

[0158] A computer device typically includes a variety of computer system readable media. These media can be any available media that can be accessed by the computer device, including volatile and nonvolatile media, removable and non-removable media.

[0159] System memory may include computer system readable media in the form of volatile memory, such as random access memory (RAM) and / or cache memory. The computer device may further include other removable / non-removable, volatile / nonvolatile computer system storage media. By way of example only, a storage system may be used for reading from and writing to a non-removable, nonvolatile magnetic medium (commonly referred to as a "hard disk drive"). A disk drive may be provided for reading from and writing to a removable nonvolatile disk (such as a "floppy disk"), and an optical disk drive for reading from and writing to a removable nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical medium). In these instances, each drive may be connected to the bus by one or more data media interfaces. The memory may include at least one program product having a set (e.g., at least one) of program modules that are configured to carry out the functions of the embodiments of the present application.

[0160] A program / utility having a set (at least one) of program modules may be stored, for example, in the memory. Such program modules include - but are not limited to - an operating system, one or more application programs, other program modules, and program data, and an implementation of a network environment may be included in each or some combination of these examples. The program modules typically carry out the functions and / or methods of the embodiments described in the present application.

[0161] The computer device can also communicate with one or more external devices (such as a keyboard, a pointing device, a display, a camera, etc.), and can also communicate with one or more devices that enable a user to interact with the computer device, and / or communicate with any device that enables the computer device to communicate with one or more other computing devices (such as a network card, a modem, etc.). Such communication can be carried out through an input / output (I / O) interface. Moreover, the computer device 12 can also communicate with one or more networks (such as a local area network (LAN)), a wide area network (WAN), and / or a public network (such as the Internet) through a network adapter. As shown in the figure, the network adapter communicates with other modules of the computer device through a bus. It should be understood that other hardware and / or software modules can be used in combination with the computer device, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, etc.

[0162] The processing unit executes various functional applications and data processing by running programs stored in the system memory, for example, implementing the secure encryption method for vehicle information provided by the embodiments of the present application.

[0163] That is to say, when the above-mentioned processing unit executes the above program, it realizes:

[0164] After establishing communication with the intelligent terminal, respectively obtain the first feature information of the intelligent terminal and the second feature information of the vehicle terminal. The first feature information includes: the time information and communication requirement information of the communication between the intelligent terminal and the vehicle terminal. The second feature information includes: the characteristic parameters of the vehicle;

[0165] After determining the communication state between the vehicle terminal and the intelligent terminal, construct an encryption key according to the communication state using the characters of the first feature information and the second feature information;

[0166] Call the encryption key to encrypt the interactive vehicle information to obtain encrypted information.

[0167] In the embodiments of the present application, the present application also provides a computer-readable storage medium, on which a computer program is stored. When the program is executed by a processor, it realizes the secure encryption method for vehicle information provided by all embodiments of the present application.

[0168] That is to say, when the program is executed by the processor, it realizes:

[0169] After establishing communication with the intelligent terminal, respectively obtain the first feature information of the intelligent terminal and the second feature information of the vehicle terminal. The first feature information includes: the time information and communication requirement information of the communication between the intelligent terminal and the vehicle terminal. The second feature information includes: the characteristic parameters of the vehicle;

[0170] After determining the communication state between the vehicle terminal and the intelligent terminal, construct an encryption key according to the characters of the first feature information and the second feature information based on the communication state;

[0171] Call the encryption key to encrypt the vehicle information for interaction to obtain encrypted information.

[0172] Any combination of one or more computer-readable media may be used. A computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples (a non-exhaustive list) of the computer-readable storage medium include: an electrical connection having one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this document, a computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device.

[0173] A computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries computer-readable program code. Such a propagated data signal may take various forms, including - but not limited to - an electromagnetic signal, an optical signal, or any suitable combination of the above. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0174] Computer program code for performing the operations of this application can be written in one or more programming languages or combinations thereof. The above-mentioned programming languages include object-oriented programming languages such as Java, Smalltalk, C++, and also include conventional procedural programming languages such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, executed as an independent software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computer (for example, by using an Internet service provider to connect through the Internet). Each embodiment in this specification is described in a progressive manner. The key point of each embodiment is to illustrate the differences from other embodiments. For the same or similar parts among the embodiments, reference can be made to each other.

[0175] Although the preferred embodiments of the embodiments of this application have been described, those skilled in the art can make additional changes and modifications to these embodiments once they know the basic creative concepts. Therefore, the appended claims are intended to be construed as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of this application.

[0176] Finally, it should also be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or terminal device comprising a series of elements not only includes those elements, but also includes other elements not expressly listed, or also includes elements inherent to such process, method, article or terminal device. Without further limitation, an element defined by the statement "comprising an..." does not exclude the existence of additional identical elements in the process, method, article or terminal device comprising the element.

[0177] The above has introduced in detail a method, device, system, equipment and medium for secure encryption of vehicle information provided by this application. Specific examples are used in this article to elaborate on the principle and implementation manner of this application. The description of the above embodiments is only used to help understand the method and its core idea of this application; at the same time, for those of ordinary skill in the art, based on the idea of this application, there will be changes in the specific implementation manner and application scope. In summary, the content of this specification should not be construed as a limitation to this application.

Claims

1. A method for secure encryption of vehicle information, characterized in that, The method includes: After establishing communication with the intelligent terminal, obtaining the first feature information of the intelligent terminal and the second feature information of the vehicle terminal respectively. The first feature information includes the time information and communication requirement information of the communication between the intelligent terminal and the vehicle terminal, and the second feature information includes the characteristic parameters of the vehicle. After determining the communication state between the vehicle terminal and the intelligent terminal, constructing an encryption key using the characters of the first feature information and the second feature information according to the communication state. Invoking the encryption key to encrypt the interactive vehicle information to obtain encrypted information.

2. The security encryption method for vehicle information according to claim 1, characterized in that, The constructing of the encryption key using the characters of the first feature information and the second feature information according to the communication state includes: If the communication state is the initial communication state, extracting the initial communication timestamp from the time information, extracting the first number values of different available application programs from the communication requirement information, and extracting several first feature values from the characteristic parameters. After splitting the initial communication timestamp into multiple first time values, splicing the multiple first time values and the multiple first number values to obtain a spliced value. Constructing an encryption key using the several first feature values and the spliced value.

3. The method for securely encrypting vehicle information according to claim 1, wherein: The constructing of the encryption key using the characters of the first feature information and the second feature information according to the communication state includes: If the communication state is a non-initial communication state, obtaining the communication interval duration. If the communication interval duration is greater than the preset duration, extracting multiple values of the current time node from the time information to obtain multiple second time values, extracting the second number values of different historical application programs from the communication requirement information, and extracting several second feature values from the characteristic parameters. Converting the multiple second time values, the multiple second number values, and the several second feature values into matrices respectively to obtain a time matrix, a number matrix, and a feature matrix. Splicing the time matrix, the number matrix, and the feature matrix to obtain a spliced matrix, and converting the spliced matrix into numerical data to obtain an encryption key.

4. The security encryption method for vehicle information according to claim 1, characterized in that The invoking of the encryption key to encrypt the interactive vehicle information to obtain encrypted information includes: After determining the interactive vehicle information, selecting one of the multiple encryption algorithms stored in the pre-trial database as the target algorithm. Encrypting the vehicle information using the encryption key according to the target algorithm to obtain encrypted information.

5. The method for securely encrypting vehicle information according to any one of claims 1 to 4, characterized in that: After determining the communication state between the vehicle terminal and the intelligent terminal, the method further includes: Obtaining the personal information of the user from the intelligent terminal and performing information review processing according to the personal information. After the information review processing passes, obtaining the permission information of the user from the intelligent terminal and generating application opening information using the permission information. Opening the closed application program according to the application opening information.

6. The security encryption method for vehicle information according to any one of claims 1 to 4, characterized in that, After the step of invoking the encryption key to encrypt the interactive vehicle information to obtain encrypted information, the method further includes: Determining the communication times of the intelligent terminal and the key generation duration. Determining the target storage area in multiple preset cache areas according to the communication times and the key generation duration. Store the encryption key in the target storage area.

7. A security encryption device for vehicle information, characterized in that, The device includes: An acquisition module, configured to respectively acquire first feature information of the smart terminal and second feature information of the vehicle terminal after establishing communication with the smart terminal. The first feature information includes time information and communication requirement information for communication between the smart terminal and the vehicle terminal, and the second feature information includes characteristic parameters of the vehicle. A construction module, configured to construct an encryption key using characters of the first feature information and the second feature information according to the communication state after determining the communication state between the vehicle terminal and the smart terminal. An encryption module, configured to encrypt the interacted vehicle information by invoking the encryption key to obtain encrypted information.

8. A security encryption system for vehicle information, characterized in that, The system includes: a vehicle terminal, a cloud platform, and multiple smart terminals; The vehicle terminal is respectively communicatively connected to the multiple smart terminals, the cloud platform is respectively communicatively connected to the multiple smart terminals, and the vehicle terminal is communicatively connected to the cloud platform; The vehicle terminal is applicable to the security encryption method for vehicle information as described in any one of claims 1-6.

9. An electronic device comprising: A memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor implements the security encryption method for vehicle information as described in any one of claims 1-6 when executing the computer program.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer-executable program, and the computer-executable program is used to cause a computer to execute the security encryption method for vehicle information as described in any one of claims 1-6.

Images