A method, device, system, equipment, and medium for secure encryption of vehicle information.

Abstract

The application provides a secure encryption method, device, system, equipment and medium for vehicle information, comprising: obtaining first feature information of a smart terminal and second feature information of a vehicle terminal after establishing communication with the smart terminal; determining the communication state of the vehicle terminal and the smart terminal, and constructing an encryption key according to the communication state and the characters of the first feature information and the second feature information; calling the encryption key to encrypt the interactive vehicle information to obtain encrypted information. The application can construct a specific encryption key for each smart terminal based on the feature information of the vehicle terminal and the smart terminal, and can encrypt by using the specific encryption key, so as to reduce the risk of information cracking or leakage, improve the security and privacy of information, and ensure information security. Meanwhile, the control safety of the vehicle terminal can also be improved by interacting with the encrypted information, and the driving risk of the user is reduced.

Description

Technical Field

[0001] This application relates to the field of vehicle information processing, and in particular to a method, apparatus, system, device, and medium for secure encryption of vehicle information. Background Technology

[0002] With the development of technology, vehicles are constantly evolving towards intelligence. Vehicle-to-everything (V2X) communication enables dialogue between vehicles, between vehicles and people, and between vehicles and the environment. For example, users can use smart terminals to establish communication with in-vehicle terminals via the internet to access and control the vehicle's information and resource systems. However, if information is stolen or leaked during transmission, it could be used by criminals to control the vehicle, increasing the risks associated with its use.

[0003] To ensure information security, one common method is to encrypt the communication information based on the communication key between the smart terminal and the vehicle terminal after establishing communication, and then transmit the encrypted information.

[0004] However, the commonly used methods have the following technical problems: the cryptographic algorithms and the device terminals themselves may have vulnerabilities or be vulnerable to being compromised. Once cracked, the encrypted information can be decrypted, leading to information leakage. At the same time, the encryption keys are generally fixed and easy to be reverse-engineered, which also increases the risk of leakage. Summary of the Invention

[0005] In view of the aforementioned problems, this application is made to provide a secure encryption method, apparatus, system, device, and medium for vehicle information that overcomes or at least partially solves the aforementioned problems, including:

[0006] A secure encryption method for vehicle information, the method comprising:

[0007] After establishing communication with the smart terminal, the first feature information of the smart terminal and the second feature information of the vehicle terminal are obtained respectively. The first feature information includes: the time information and communication requirement information of the communication between the smart terminal and the vehicle terminal. The second feature information includes: the characteristic parameters of the vehicle.

[0008] After determining the communication status between the vehicle terminal and the smart terminal, an encryption key is constructed using the characters of the first feature information and the second feature information based on the communication status.

[0009] The encrypted vehicle information is encrypted using the encryption key to obtain encrypted information.

[0010] In one possible implementation, constructing an encryption key using characters from the first feature information and the second feature information based on the communication state includes:

[0011] If the communication state is the initial communication state, then the initial communication timestamp is extracted from the time information, the first number value of different available applications is extracted from the communication demand information, and several first feature values ​​are extracted from the feature parameters.

[0012] After splitting the initial communication timestamp to obtain multiple first time values, the multiple first time values ​​and the multiple first number values ​​are concatenated to obtain the concatenated value;

[0013] An encryption key is constructed using the aforementioned first feature values ​​and the concatenated values.

[0014] In one possible implementation, constructing an encryption key using characters from the first feature information and the second feature information based on the communication state includes:

[0015] If the communication state is not the initial communication state, then obtain the communication interval duration;

[0016] If the communication interval duration is longer than the preset duration, then multiple values ​​of the current time node are extracted from the time information to obtain multiple second time values, second number values ​​of different historical applications are extracted from the communication demand information, and several second feature values ​​are extracted from the feature parameters.

[0017] The plurality of second time values, the plurality of second number values, and the plurality of second feature values ​​are respectively converted into matrices to obtain a time matrix, a number matrix, and a feature matrix;

[0018] The time matrix, the number matrix, and the feature matrix are concatenated to obtain a concatenated matrix, which is then converted into numerical data to obtain the encryption key.

[0019] In one possible implementation, the step of encrypting the interactive vehicle information using the encryption key to obtain encrypted information includes:

[0020] After determining the vehicle information for the interaction, one of the multiple encryption algorithms stored in the pre-screening database is selected as the target algorithm;

[0021] The vehicle information is encrypted using the encryption key according to the target algorithm to obtain encrypted information.

[0022] In one possible implementation, after determining the communication status between the vehicle terminal and the smart terminal, the method further includes:

[0023] The system obtains the user's personal information from the smart terminal and performs information review and processing based on the personal information.

[0024] Once the information review and processing is approved, the user's permission information is obtained from the smart terminal, and the permission information is used to generate application activation information.

[0025] The application can be opened or closed based on the application information provided.

[0026] In one possible implementation, after the step of encrypting the interacting vehicle information using the encryption key to obtain encrypted information, the method further includes:

[0027] Determine the number of communications and key generation duration for the smart terminal;

[0028] The target storage area is determined from multiple preset cache areas based on the number of communications and the key generation duration;

[0029] The encryption key is stored in the target storage area.

[0030] A secure encryption device for vehicle information, the device comprising:

[0031] The acquisition module is used to acquire, after establishing communication with the smart terminal, the first feature information of the smart terminal and the second feature information of the vehicle terminal respectively. The first feature information includes: the time information and communication requirement information of the communication between the smart terminal and the vehicle terminal. The second feature information includes: the characteristic parameters of the vehicle.

[0032] The construction module is used to determine the communication status between the vehicle terminal and the smart terminal, and then construct an encryption key based on the characters of the first feature information and the second feature information according to the communication status.

[0033] The encryption module is used to call the encryption key to encrypt the vehicle information exchanged, thereby obtaining encrypted information.

[0034] A secure encryption system for vehicle information, the system comprising:

[0035] Vehicle-mounted terminals, cloud platforms, and multiple smart terminals;

[0036] The vehicle-mounted terminal is communicatively connected to the multiple smart terminals, the cloud platform is communicatively connected to the multiple smart terminals, and the vehicle-mounted terminal is communicatively connected to the cloud platform.

[0037] The vehicle-mounted terminal is compatible with the secure encryption method for vehicle information described above.

[0038] An apparatus includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein the computer program, when executed by the processor, implements the steps of securely encrypting vehicle information as described above.

[0039] A computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps of securely encrypting vehicle information as described above.

[0040] This application has the following advantages:

[0041] In the embodiments of this application, after establishing communication with the smart terminal, the application can obtain the first feature information of the smart terminal and the second feature information of the vehicle terminal respectively; after determining the communication status between the vehicle terminal and the smart terminal, an encryption key is constructed using characters from the first feature information and the second feature information according to the communication status; the encryption key is then used to encrypt the interacting vehicle information to obtain encrypted information. By constructing a specific encryption key for each smart terminal based on the feature information of the vehicle terminal and the smart terminal, and using a specific encryption key for encryption, the risk of information being cracked or leaked can be reduced, improving information security and privacy, and ensuring information security; at the same time, interactive control through encrypted information can also improve the control security of the vehicle terminal and reduce the driving risk for the user. Attached Figure Description

[0042] To more clearly illustrate the technical solution of this application, the drawings used in the description of this application will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0043] Figure 1 This is a flowchart illustrating the steps of a secure encryption method for vehicle information provided in an embodiment of this application;

[0044] Figure 2 This is a structural block diagram of a vehicle information security encryption device provided in one embodiment of this application. Detailed Implementation

[0045] To make the objectives, features, and advantages of this application more apparent and understandable, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments. Obviously, the described embodiments are only some, not all, of the embodiments of this application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0046] With the development of technology, vehicles are constantly evolving towards intelligence. Vehicle-to-everything (V2X) communication enables dialogue between vehicles, between vehicles and people, and between vehicles and the environment. For example, users can use smart terminals to establish communication with in-vehicle terminals via the internet to access and control the vehicle's information and resource systems. However, if information is stolen or leaked during transmission, it could be used by criminals to control the vehicle, increasing the risks associated with its use.

[0047] To ensure information security, one common method is to encrypt the communication information based on the communication key between the smart terminal and the vehicle terminal after establishing communication, and then transmit the encrypted information.

[0048] However, the commonly used methods have the following technical problems: the cryptographic algorithms and the device terminals themselves may have vulnerabilities or be vulnerable to being compromised. Once cracked, the encrypted information can be decrypted, leading to information leakage. At the same time, the encryption keys are generally fixed and easy to be reverse-engineered, which also increases the risk of leakage.

[0049] To solve the above technical problems, refer to Figure 1 The diagram illustrates a flowchart of a secure encryption method for vehicle information according to an embodiment of this application.

[0050] In one embodiment, the vehicle information security encryption method is applicable to an in-vehicle terminal. The in-vehicle terminal can communicate and interact with different smart terminals of different users. During the interaction, the in-vehicle terminal can encrypt the vehicle information being interacted with and transmit it to the smart terminal to improve the privacy of the information, reduce the risk of information being cracked and leaked, and thus improve driving safety.

[0051] As an example, the secure encryption method for the vehicle information may include:

[0052] S11. After establishing communication with the smart terminal, the first feature information of the smart terminal and the second feature information of the vehicle terminal are obtained respectively. The first feature information includes: the time information and communication requirement information of the communication between the smart terminal and the vehicle terminal. The second feature information includes: the characteristic parameters of the vehicle.

[0053] In one embodiment, the vehicle terminal can establish communication with different smart terminals of different users. After establishing communication, the vehicle terminal can obtain the first feature information of the smart terminal and the second feature information recorded by the vehicle terminal.

[0054] In one operating mode, after the vehicle-mounted terminal and the smart terminal establish communication, the smart terminal can send first characteristic information to the vehicle-mounted terminal. This first characteristic information may include: time information and communication request information between the smart terminal and the vehicle-mounted terminal. The time information may be the time node and timestamp of the communication between the two parties. The communication request information may be requests from the smart terminal to invoke different functions and applications of the vehicle-mounted terminal.

[0055] In one operating mode, after the vehicle terminal establishes communication with the smart terminal, the vehicle terminal can extract the vehicle's feature parameters from its database (built-in database or cloud database) to obtain the second feature information. The vehicle's feature parameters may include its body parameters, driving parameters, performance parameters, model, etc.

[0056] Subsequently, encryption can be performed by constructing corresponding keys based on the two different characteristic information. Since the first characteristic information is unique to the smart terminal and the second characteristic information is unique to the vehicle, and both are obtained during communication between the two and are different for each communication, encryption using uncertain characteristic information can construct corresponding encryption keys to enhance the security and privacy of the information.

[0057] To facilitate the subsequent decryption of encrypted information by the smart terminal, in one embodiment, after the vehicle terminal obtains the second feature information, the vehicle terminal can send the second feature information to the smart terminal for subsequent encryption and decryption.

[0058] Optionally, to prevent the second feature information from being stolen, the smart terminal can also search for the second feature information of the vehicle it is communicating with from the vehicle's cloud database. Specifically, after establishing communication with the vehicle terminal, the smart terminal can send a request to the cloud database to extract the second feature information.

[0059] S12. After determining the communication status between the vehicle terminal and the smart terminal, construct an encryption key using the characters of the first feature information and the second feature information based on the communication status.

[0060] In one embodiment, the communication status between the vehicle terminal and the smart terminal can be determined, and the communication status can be either the first communication or a non-first communication.

[0061] If it is the first communication, feature characters related to the first communication can be extracted from the first feature information and the second feature information, and then the encryption key can be constructed using the feature characters related to the first communication.

[0062] If this is not the first communication, the vehicle terminal may have established multiple communications with the smart terminal, allowing the user to control the vehicle in different ways through their smart terminal. Therefore, relevant feature characters can be extracted from the first and second feature information based on the historical communication records. This allows the use of feature characters related to previous communications to construct an encryption key that closely matches the actual communication situation.

[0063] In one embodiment, the vehicle terminal and the smart terminal may be establishing communication for the first time. In order to construct a corresponding encryption key based on the time of their initial communication, as an example, the step of constructing the encryption key using characters of the first feature information and the second feature information according to the communication status may include the following sub-steps:

[0064] S21. If the communication state is the initial communication state, then extract the initial communication timestamp from the time information, extract the first number value of different available applications from the communication demand information, and extract several first feature values ​​from the feature parameters.

[0065] S22. After splitting the initial communication timestamp to obtain multiple first time values, the multiple first time values ​​and the multiple first number values ​​are concatenated to obtain a concatenated value.

[0066] S23. Construct an encryption key using the aforementioned first feature values ​​and the concatenated values.

[0067] In one embodiment, if the communication status between the vehicle terminal and the smart terminal is the initial communication status, the vehicle terminal can extract the initial communication timestamp from the time information.

[0068] Similarly, the in-vehicle terminal can extract the first ID value of different available applications from the communication request information. The communication request information sent by the smart terminal to the in-vehicle terminal includes the application to be invoked. As the functionality of the smart terminal increases, the number of available applications and in-vehicle intelligent driving functions also increases. However, different applications and intelligent driving functions have different permissions. Since this is the first communication between the in-vehicle terminal and the smart terminal, opening all applications and functions to the smart terminal poses a security risk; therefore, only a portion of applications and functions can be opened. Correspondingly, the application invoked by the user can be determined from the communication request information; this application is the available application open to the user. To distinguish different applications and application functions, the in-vehicle terminal can pre-assign corresponding numbers to different applications and application functions, and can obtain the ID value of the available application to obtain the first ID value. For example, if a user invokes both music playback and map navigation applications, the ID values ​​of these applications can be obtained, resulting in two first ID values.

[0069] Similarly, the vehicle terminal can extract values ​​of different feature items from the feature parameters to obtain several first feature values. For example, the vehicle model number xx00xx1 can be broken down to obtain several first feature values. As another example, if the vehicle's feature parameters include body parameters, driving parameters, performance parameters, and model number, preset characters can be extracted from each parameter item (e.g., the 1st character, the 3rd character, characters 1-5, etc.) to obtain several first feature values. The specific extraction method can be adjusted according to actual needs.

[0070] Next, the initial communication timestamp can be split to obtain multiple first time values. For example, if the initial communication timestamp is 202501011233, it can be split to obtain 2, 0, 2, 5, 0, 1, 0, 1, 1, 2, 3, 3, thus obtaining multiple first time values.

[0071] Next, multiple first-time values ​​and multiple first-number values ​​can be concatenated to obtain a concatenated value. In one embodiment, the concatenation methods include, but are not limited to, automatic spacing, concatenation by stacking, string formatting, concatenation using str.format(), concatenation using str.join(), and concatenation using F-strings.

[0072] After obtaining the concatenated values, an encryption key can be constructed using several first characteristic values ​​and the concatenated values.

[0073] In one operation mode, the construction method can add several first feature values ​​to the concatenated values ​​according to preset character intervals to obtain the encryption key.

[0074] In another approach, a quantum encryption algorithm can be used to generate a binary key value from several first feature values ​​and convert the concatenated values ​​into binary values. The binary key value and the binary values ​​are then concatenated into a string, and a string consisting of "0" and "1" is obtained. The string is then photon polarized according to a preset polarization direction to generate an encryption key.

[0075] It should be noted that different methods can be used to construct encryption keys according to different encryption needs, and adjustments can be made according to actual requirements.

[0076] In one embodiment, the vehicle terminal and the smart terminal may have already established multiple communications, and this is not the first communication. Multiple keys have already been established during previous communications. If the key is repeatedly constructed each time, the processing efficiency is low. To improve processing efficiency, as an example, the step of constructing an encryption key using characters from the first feature information and the second feature information based on the communication status may include the following sub-steps:

[0077] S31. If the communication state is not the initial communication state, then obtain the communication interval duration.

[0078] S32. If the communication interval duration is longer than the preset duration, then multiple values ​​of the current time node are extracted from the time information to obtain multiple second time values, second number values ​​of different historical applications are extracted from the communication demand information, and several second feature values ​​are extracted from the feature parameters.

[0079] S33. Convert the plurality of second time values, the plurality of second number values ​​and the plurality of second feature values ​​into matrices respectively to obtain a time matrix, a number matrix and a feature matrix.

[0080] S34. Concatenate the time matrix, the number matrix, and the feature matrix to obtain a concatenated matrix, and convert the concatenated matrix into numerical data to obtain the encryption key.

[0081] In one embodiment, if the communication state between the vehicle terminal and the smart terminal is not the initial communication state, the vehicle terminal can obtain the communication interval duration with the smart terminal. This communication interval duration is the interval between the current time node of the communication between the vehicle terminal and the smart terminal and the time node of the last disconnection between the vehicle terminal and the smart terminal.

[0082] If the communication interval is longer than the preset duration, it means that the communication interval between the two is too long and the encryption key needs to be reconstructed. At this time, multiple values ​​of the current time node can be extracted from the time information to obtain multiple second time values, the second number values ​​of different historical applications can be extracted from the communication requirement information, and several second feature values ​​can be extracted from the feature parameters.

[0083] The extraction method can be based on the number of characters counted according to a preset character set, resulting in multiple second time values. For example, if the current time node is 202501011233, characters can be extracted according to the preset characters "1" and "3", resulting in 3 instances of the character "1" and 2 instances of the character "3", thus obtaining two first time values, 3 and 2 respectively. Alternatively, the current time node can be split to obtain multiple second time values, similar to the above example.

[0084] Similarly, the second ID value of different historical applications can be extracted from the communication requirement information. Here, the historical application is the ID corresponding to the application or function that the user last invoked through the smart terminal on the in-vehicle terminal, and multiple second ID values ​​can be obtained. Each application or function has a corresponding ID, as explained in the example above.

[0085] Similarly, several second feature values ​​can be extracted from the feature parameters. The specific extraction method can be found in the above description.

[0086] Next, the multiple second time values, multiple second number values, and several second feature values ​​can be converted into matrices to obtain the time matrix, number matrix, and feature matrix.

[0087] Then, the time matrix, number matrix, and feature matrix are concatenated to obtain the concatenated matrix. After concatenation, the concatenated matrix is ​​converted into numerical data to obtain the encryption key.

[0088] In one operation mode, the number of second time values, second number values, and second feature values ​​can be counted. If the number is the same, assuming there are 5 of them, the 5 second time values ​​can be converted into a 5*5 matrix to obtain the time matrix; similarly, the 5 second number values ​​can be converted into a 5*5 matrix to obtain the number matrix; and the 5 second feature values ​​can be converted into a 5*5 matrix to obtain the feature matrix.

[0089] If the quantities are not the same, padding can be added to make the quantity of each value the same, and then the values ​​can be converted into a matrix. Optionally, if the quantities are not the same, the minimum value can be taken, and then a matrix can be constructed based on the minimum quantity. When extracting values ​​based on the minimum value, extraction can be random or according to a preset method. For example, if there are 5 second time values, 6 second number values, and 7 second feature values, a 5*5 matrix can be constructed. During extraction, the first 5 values ​​can be selected from the 6 second number values, or the first 5 values ​​can be selected from the 7 second feature values ​​to make the quantity of each value the same, and then the values ​​can be converted into a matrix.

[0090] Alternatively, the values ​​of the second time value, the second number value, and the second feature value can be converted into 8-bit binary values ​​one by one to obtain a binary matrix.

[0091] Next, the time matrix, numbering matrix, and feature matrix can be concatenated sequentially to obtain a concatenated matrix. After obtaining the concatenated matrix, it is converted into numerical data to obtain the encryption key.

[0092] In one operation mode, a certain character length can be set to convert the concatenated matrix into numerical data. Specifically, the characters can be converted into numerical data to obtain the encryption key.

[0093] S13. Use the encryption key to encrypt the vehicle information exchanged to obtain encrypted information.

[0094] After obtaining the encryption key, the information exchanged with the smart terminal can be determined, including vehicle information. This vehicle information is then encrypted using the encryption key to obtain encrypted information, which is then sent to the smart terminal.

[0095] There are various encryption methods. To allow for flexible encryption processing, as an example, the step of encrypting the interacting vehicle information using the encryption key to obtain encrypted information may include the following sub-steps:

[0096] S131. After determining the vehicle information for the interaction, select one of the multiple encryption algorithms stored in the pre-screening database as the target algorithm.

[0097] S132. The vehicle information is encrypted using the encryption key according to the target algorithm to obtain encrypted information.

[0098] In one embodiment, the vehicle terminal can pre-set several encryption algorithms and select one of them as the target algorithm from multiple encryption algorithms stored in the pre-screening database. Then, the vehicle information is encrypted using an encryption key according to the target algorithm to obtain encrypted information.

[0099] To notify the smart terminal, the in-vehicle terminal can select one of several encryption algorithms stored in a cloud database as the target algorithm. After determining that the in-vehicle terminal has selected the target algorithm, the cloud database can notify the smart terminal, allowing the smart terminal to decrypt the data using the target algorithm.

[0100] In another optional encryption operation, the encryption key can be used as an information signature for the vehicle information, and then encrypted and compressed to obtain encrypted information.

[0101] The specific operating method can be adjusted according to actual needs, and is not limited here.

[0102] In one embodiment, the communication frequency between different users' smart terminals and the vehicle terminal varies, possibly connecting once a day or once a month. As explained above, if a user connects frequently, their encryption key can be retained for later use. To store the user's encryption key, as an example, after the step of encrypting the interacting vehicle information using the encryption key to obtain encrypted information, the method further includes:

[0103] S14. Determine the number of communications and key generation duration for the smart terminal.

[0104] S15. Determine the target storage area from multiple preset cache areas based on the number of communications and the key generation duration.

[0105] S16. Store the encryption key in the target storage area.

[0106] In one embodiment, the vehicle-mounted terminal can determine the number of communications and the key generation duration of the smart terminal, wherein the number of communications is the number of times the vehicle-mounted terminal and the smart terminal communicate, and the key generation duration is the time it takes for the vehicle-mounted terminal to generate the key for the smart terminal in this communication.

[0107] For example, the vehicle terminal and the smart terminal are communicating for the first time, with a communication count of 1 and a key generation time of 0. The vehicle terminal and the smart terminal are communicating for the third time, with a communication count of 3, and the encryption key was generated 12 hours ago, with a key generation time of 12 hours.

[0108] Next, the frequency of communication and key generation time can be used to determine whether the smart terminal communicates frequently with the vehicle terminal. If frequent communication is observed, a target storage area for storing the encryption key can be selected from among several preset cache areas. The encryption key is then stored in the target storage area.

[0109] For example, if the number of communications exceeds a preset number and the key generation time is less than the preset storage time, the vehicle terminal is determined to be communicating frequently with the smart terminal. In this case, one of the preset cache areas can be selected as the target storage area for storing the encryption key.

[0110] It should be noted that the vehicle terminal can process multiple preset cache areas every day. If the key generation time of the encryption key stored in the cache area is longer than the preset storage time, the encryption key stored in the cache area will be deleted.

[0111] Optionally, if each cache region stores an encryption key, one cache region's encryption key storage needs to be cleared. The number of communications and key generation time corresponding to the encryption key in each cache region can be obtained.

[0112] By comparing the key generation time of the encryption key to be stored with the key generation time of the encryption key in each cache region, an encryption key with a longer key generation time can be deleted. For example, if the key generation time of the encryption key in a cache region is longer than the key generation time of the encryption key to be stored, the encryption key in that cache region is deleted, and that cache region is used as the target storage region to store the encryption key to be stored.

[0113] If the key generation time corresponding to the encryption key of each cache area is less than the key generation time of the encryption key to be stored, then the encryption key to be stored will not be stored.

[0114] If the key generation time of the encryption key in one cache area is equal to the key generation time of the encryption key to be stored, and the key generation time of the encryption keys in the other cache areas is less than the key generation time of the encryption key to be stored, the number of communication times of encryption keys with the same duration can be determined, and the encryption key with the fewer communication times can be deleted.

[0115] By dividing the encryption keys into different cache areas and storing them directly, the encryption keys can be avoided by repeatedly building encryption keys for frequently communicating smart terminals, thereby improving communication efficiency. At the same time, the encryption key can be determined as long as it has been generated to determine whether it meets the deletion requirements, thus avoiding long-term storage of encryption keys and reducing the risk of encryption keys being stolen.

[0116] In an optional embodiment, if the user does not have permission to access the application functions of the vehicle terminal, in order to grant the user access, the following sub-steps may be included after the step of determining the communication status between the vehicle terminal and the smart terminal, as an example:

[0117] S41. Obtain the user's personal information from the smart terminal, and perform information review processing based on the personal information.

[0118] S42. After the information review and processing is approved, the user's permission information is obtained from the smart terminal and the permission information is used to generate application activation information.

[0119] S43. Open the closed application according to the application activation information.

[0120] In one operational method, personal information of the user sent by the smart terminal can be obtained and processed for review. This review can include pre-screening and manual review. Specifically, the user's personal information can be compared with information in a preset template. If they match, the information is then transmitted to a cloud platform for manual review by cloud platform administrators. Once the manual review is also passed, the information review process is considered complete.

[0121] At this point, the user's permission information sent by the smart terminal can be obtained. Specifically, the permission information may be the permission flag value of the user account.

[0122] The vehicle terminal can identify the corresponding application based on the permission tag value, and check whether the installed application list contains the permission tag value to identify the corresponding application. If the permission tag value identifies the corresponding application, it will determine whether the application is open to the user. If it is not open, it can generate application activation information and display the application to the user based on the application activation information, thereby opening and closing the application for the user to call.

[0123] If the application list does not have a permission tag value to identify the corresponding application, an upgrade request can be generated and sent to the cloud platform. The cloud platform can then send an OTA upgrade package based on the upgrade request. The vehicle terminal can install the corresponding application based on the OTA upgrade package, and then generate application activation information. Based on the application activation information, the installed application is displayed to the user, thereby opening and closing the application for the user to use.

[0124] In this embodiment, the present application provides a secure encryption method for vehicle information. Its advantages are as follows: After establishing communication with a smart terminal, the present application can obtain first characteristic information of the smart terminal and second characteristic information of the vehicle terminal; after determining the communication status between the vehicle terminal and the smart terminal, an encryption key is constructed using characters from the first and second characteristic information based on the communication status; the encryption key is then used to encrypt the interacting vehicle information to obtain encrypted information. By constructing a specific encryption key for each smart terminal based on the characteristic information of the vehicle terminal and the smart terminal, and using this specific encryption key for encryption, the risk of information being cracked or leaked can be reduced, improving information security and privacy, and ensuring information security; simultaneously, using encrypted information for interactive control can also improve the control security of the vehicle terminal and reduce the driving risk for users.

[0125] As the system implementation is basically similar to the method implementation, it is described in a relatively simple way. For relevant details, please refer to the description of the method implementation.

[0126] Reference Figure 2 The diagram shows a structural block diagram of a vehicle information security encryption device provided in an embodiment of this application.

[0127] Specifically, it includes:

[0128] The acquisition module 201 is used to acquire, after establishing communication with the smart terminal, the first feature information of the smart terminal and the second feature information of the vehicle terminal respectively. The first feature information includes: the time information and communication requirement information of the communication between the smart terminal and the vehicle terminal. The second feature information includes: the feature parameters of the vehicle.

[0129] The construction module 202 is used to determine the communication status between the vehicle terminal and the smart terminal, and then construct an encryption key based on the characters of the first feature information and the second feature information according to the communication status.

[0130] The encryption module 203 is used to call the encryption key to encrypt the interactive vehicle information to obtain encrypted information.

[0131] In an optional embodiment, constructing an encryption key using characters from the first feature information and the second feature information based on the communication state includes:

[0132] If the communication state is the initial communication state, then the initial communication timestamp is extracted from the time information, the first number value of different available applications is extracted from the communication demand information, and several first feature values ​​are extracted from the feature parameters.

[0133] After splitting the initial communication timestamp to obtain multiple first time values, the multiple first time values ​​and the multiple first number values ​​are concatenated to obtain the concatenated value;

[0134] An encryption key is constructed using the aforementioned first feature values ​​and the concatenated values.

[0135] In an optional embodiment, constructing an encryption key using characters from the first feature information and the second feature information based on the communication state includes:

[0136] If the communication state is not the initial communication state, then obtain the communication interval duration;

[0137] If the communication interval duration is longer than the preset duration, then multiple values ​​of the current time node are extracted from the time information to obtain multiple second time values, second number values ​​of different historical applications are extracted from the communication demand information, and several second feature values ​​are extracted from the feature parameters.

[0138] The plurality of second time values, the plurality of second number values, and the plurality of second feature values ​​are respectively converted into matrices to obtain a time matrix, a number matrix, and a feature matrix;

[0139] The time matrix, the number matrix, and the feature matrix are concatenated to obtain a concatenated matrix, which is then converted into numerical data to obtain the encryption key.

[0140] In an optional embodiment, the step of encrypting the interacting vehicle information using the encryption key to obtain encrypted information includes:

[0141] After determining the vehicle information for the interaction, one of the multiple encryption algorithms stored in the pre-screening database is selected as the target algorithm;

[0142] The vehicle information is encrypted using the encryption key according to the target algorithm to obtain encrypted information.

[0143] In an optional embodiment, the device further includes:

[0144] The review module is used to obtain the user's personal information from the smart terminal after determining the communication status between the vehicle terminal and the smart terminal, and to perform information review processing based on the personal information.

[0145] The generation module is used to obtain the user's permission information from the smart terminal and generate application activation information using the permission information after the information review and processing is passed.

[0146] An open module is used to open or close applications based on the application activation information.

[0147] In an optional embodiment, the device further includes:

[0148] The number of communication attempts module is used to determine the number of communication attempts and the key generation duration of the smart terminal after the step of calling the encryption key to encrypt the vehicle information of the interaction and obtaining the encrypted information.

[0149] The region determination module is used to determine the target storage region from multiple preset cache regions based on the number of communications and the key generation duration;

[0150] A storage module is used to store the encryption key in the target storage area.

[0151] One embodiment of this application provides a secure encryption system for vehicle information;

[0152] Specifically, this includes: in-vehicle terminals, cloud platforms, and multiple smart terminals;

[0153] The vehicle-mounted terminal is communicatively connected to the multiple smart terminals, the cloud platform is communicatively connected to the multiple smart terminals, and the vehicle-mounted terminal is communicatively connected to the cloud platform.

[0154] The vehicle-mounted terminal is applicable to the secure encryption method for vehicle information as described in the above embodiments.

[0155] This application provides a computer device for a secure encryption method for vehicle information, which may specifically include the following:

[0156] The aforementioned computer device is presented in the form of a general-purpose computing device. The components of the computer device may include, but are not limited to: one or more processors or processing units, system memory, and buses connecting different system components (including system memory and processing units).

[0157] A bus refers to one or more of several bus architectures, including a memory bus or memory controller, a peripheral bus, a graphics acceleration port, a processor, or a local bus using any of the various bus architectures. Examples of these architectures include, but are not limited to, the Industry Standard Architecture (ISA) bus, the Micro Channel Architecture (MAC) bus, the Enhanced ISA bus, the Audio / Video Electronics Standards Association (VESA) local bus, and the Peripheral Component Interconnect (PCI) bus.

[0158] Computer devices typically include a variety of computer system-readable media. These media can be any available media that can be accessed by a computer device, including volatile and non-volatile media, and removable and non-removable media.

[0159] System memory may include computer system readable media in the form of volatile memory, such as random access memory (RAM) and / or cache memory. The computer device may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the storage system may be used to read and write non-removable, non-volatile magnetic media (commonly referred to as a "hard disk drive"). Disk drives for reading and writing to removable non-volatile disks (such as "floppy disks") and optical disk drives for reading and writing to removable non-volatile optical disks (such as CD-ROMs, DVD-ROMs, or other optical media) may be provided. In these cases, each drive may be connected to a bus via one or more data media interfaces. The memory may include at least one program product having a set (e.g., at least one) of program modules configured to perform the functions of the embodiments of this application.

[0160] A program / utility having a set (at least one) of program modules can be stored, for example, in memory. Such program modules include—but are not limited to—an operating system, one or more applications, other program modules, and program data. Each or some combination of these examples may include an implementation of a network environment. The program modules typically perform the functions and / or methods described in the embodiments of this application.

[0161] The computer device can also communicate with one or more external devices (e.g., keyboard, pointing device, monitor, camera, etc.), one or more devices that enable a user to interact with the computer device, and / or any device that enables the computer device to communicate with one or more other computing devices (e.g., network card, modem, etc.). This communication can be performed through an input / output (I / O) interface. Furthermore, the computer device 12 can also communicate with one or more networks (e.g., local area network (LAN)), wide area network (WAN), and / or public networks (e.g., the Internet) via a network adapter. As shown, the network adapter communicates with other modules of the computer device via a bus. It should be understood that other hardware and / or software modules can be used in conjunction with the computer device, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0162] The processing unit executes various functional applications and data processing by running programs stored in the system memory, such as implementing the secure encryption method for vehicle information provided in the embodiments of this application.

[0163] That is, when the above processing unit executes the above program, it achieves the following:

[0164] After establishing communication with the smart terminal, the first feature information of the smart terminal and the second feature information of the vehicle terminal are obtained respectively. The first feature information includes: the time information and communication requirement information of the communication between the smart terminal and the vehicle terminal. The second feature information includes: the characteristic parameters of the vehicle.

[0165] After determining the communication status between the vehicle terminal and the smart terminal, an encryption key is constructed using the characters of the first feature information and the second feature information based on the communication status.

[0166] The encrypted vehicle information is encrypted using the encryption key to obtain encrypted information.

[0167] In this application embodiment, the application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the secure encryption method for vehicle information as provided in all embodiments of the application.

[0168] That is, to implement the following when the program is executed by the processor:

[0169] After establishing communication with the smart terminal, the first feature information of the smart terminal and the second feature information of the vehicle terminal are obtained respectively. The first feature information includes: the time information and communication requirement information of the communication between the smart terminal and the vehicle terminal. The second feature information includes: the characteristic parameters of the vehicle.

[0170] After determining the communication status between the vehicle terminal and the smart terminal, an encryption key is constructed using the characters of the first feature information and the second feature information based on the communication status.

[0171] The encrypted vehicle information is encrypted using the encryption key to obtain encrypted information.

[0172] Any combination of one or more computer-readable media may be used. A computer-readable medium may be a computer-to-signal medium or a computer-readable storage medium. A computer-readable storage medium may be, for example—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples (a non-exhaustive list) of computer-readable storage media include: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this document, a computer-readable storage medium may be any tangible medium that contains or stores a program that may be used by or in connection with an instruction execution system, apparatus, or device.

[0173] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals may take various forms, including—but not limited to—electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, capable of transmitting, propagating, or transmitting programs for use by or in connection with an instruction execution system, apparatus, or device.

[0174] Computer program code for performing the operations of this application can be written in one or more programming languages ​​or a combination thereof. These programming languages ​​include object-oriented programming languages—such as Java, Smalltalk, and C++—and conventional procedural programming languages—such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider). The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably.

[0175] Although preferred embodiments of the present application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of the embodiments of the present application.

[0176] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal device. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal device that includes said element.

[0177] The above provides a detailed description of a secure encryption method, apparatus, system, device, and medium for vehicle information provided in this application. Specific examples have been used to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of this application. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of this application. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. A method for securely encrypting vehicle information, characterized by, The method comprises: After establishing communication with the intelligent terminal, first characteristic information of the intelligent terminal and second characteristic information of the vehicle-mounted terminal are acquired respectively, the first characteristic information comprises time information and communication demand information of communication between the intelligent terminal and the vehicle-mounted terminal, and the second characteristic information comprises characteristic parameters of the vehicle; After determining the communication state of the vehicle-mounted terminal and the intelligent terminal, a character of the first characteristic information and the second characteristic information is used to construct an encryption key according to the communication state; The encryption key is called to encrypt the interactive vehicle information, and encrypted information is obtained; The character of the first characteristic information and the second characteristic information is used to construct an encryption key according to the communication state, which comprises: If the communication state is a first communication state, a first communication time stamp is extracted from the time information, a first number value of different available application programs is extracted from the communication demand information, and a plurality of first characteristic values are extracted from the characteristic parameters; After a plurality of first time values are obtained by splitting the first communication time stamp, the plurality of first time values and the plurality of first number values are spliced to obtain spliced values; The plurality of first characteristic values and the spliced values are used to construct an encryption key; Or; The character of the first characteristic information and the second characteristic information is used to construct an encryption key according to the communication state, which comprises: If the communication state is a non-first communication state, a communication interval duration is acquired; If the communication interval duration is greater than a preset duration, a plurality of second time values are obtained by extracting a plurality of values of a current time node from the time information, a second number value of different historical application programs is extracted from the communication demand information, and a plurality of second characteristic values are extracted from the characteristic parameters; The plurality of second time values, the plurality of second number values and the plurality of second characteristic values are respectively converted into matrices to obtain a time matrix, a number matrix and a characteristic matrix; The time matrix, the number matrix and the characteristic matrix are spliced to obtain a spliced matrix, and the spliced matrix is converted into numerical data to obtain an encryption key.

2. The method of claim 1, wherein, The encryption key is called to encrypt the interactive vehicle information, and encrypted information is obtained, which comprises: After the interactive vehicle information is determined, one of a plurality of encryption algorithms stored in a pre-trial database is selected as a target algorithm; According to the target algorithm, the vehicle information is encrypted by using the encryption key to obtain encrypted information.

3. The method of claim 1 or 2, wherein After the communication state of the vehicle-mounted terminal and the intelligent terminal is determined, the method further comprises: Personal information of a user is acquired from the intelligent terminal, and information audit processing is performed according to the personal information; When the information audit processing is passed, permission information of the user is acquired from the intelligent terminal, and application opening information is generated by using the permission information; According to the application opening information, a closed application program is opened.

4. The method of claim 1 or 2, wherein After the step of calling the encryption key to encrypt the interactive vehicle information to obtain encrypted information, the method further comprises: The communication frequency of the intelligent terminal and the key generation duration are determined; According to the communication frequency and the key generation duration, a target storage area is determined in a plurality of preset cache areas. storing the encryption key to the target storage area.

5. A security encryption apparatus for vehicle information, characterized by comprising: The device comprises: an acquisition module, configured to acquire first characteristic information of the intelligent terminal and second characteristic information of the vehicle terminal respectively after communication with the intelligent terminal is established, the first characteristic information comprising time information and communication demand information of communication between the intelligent terminal and the vehicle terminal, and the second characteristic information comprising characteristic parameters of the vehicle; a construction module, configured to construct an encryption key by using characters of the first characteristic information and the second characteristic information according to a communication state between the vehicle terminal and the intelligent terminal after the communication state is determined; an encryption module, configured to call the encryption key to encrypt vehicle information of interaction to obtain encrypted information; the construction module is further configured to: if the communication state is a first communication state, extract a first communication timestamp from the time information, extract first number values of different available application programs from the communication demand information, and extract a plurality of first characteristic values from the characteristic parameters; after a plurality of first time values are obtained by splitting the first communication timestamp, splice the plurality of first time values and the plurality of first number values to obtain spliced values; construct an encryption key by using the plurality of first characteristic values and the spliced values; or; the construction module is further configured to: if the communication state is a non-first communication state, acquire a communication interval duration; if the communication interval duration is greater than a preset duration, extract a plurality of second time values from a plurality of values of a current time node in the time information, extract second number values of different historical application programs from the communication demand information, and extract a plurality of second characteristic values from the characteristic parameters; convert the plurality of second time values, the plurality of second number values, and the plurality of second characteristic values into matrices respectively to obtain a time matrix, a number matrix, and a characteristic matrix; splice the time matrix, the number matrix, and the characteristic matrix to obtain a spliced matrix, and convert the spliced matrix into numerical data to obtain an encryption key.

6. A security encryption system for vehicle information, characterized by, The system comprises a vehicle terminal, a cloud platform, and a plurality of intelligent terminals; the vehicle terminal is in communication connection with the plurality of intelligent terminals respectively, the cloud platform is in communication connection with the plurality of intelligent terminals respectively, and the vehicle terminal is in communication connection with the cloud platform; the vehicle terminal is applicable to the secure encryption method of vehicle information according to any one of claims 1-4.

7. An electronic device comprising: A memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the secure encryption method of vehicle information according to any one of claims 1-4 when executing the computer program.

8. A computer-readable storage medium, characterized in that, The computer readable storage medium stores a computer executable program, and the computer executable program is used to make a computer execute the secure encryption method of vehicle information according to any one of claims 1-4.

Images