Automobile trusted data space system

Abstract

The invention discloses an automobile trusted data space system which comprises a resource interaction system, a trusted management and control system, a value co-creation system, a data security protection center, a trusted data space client, an external portal and a data flow storage evidence chain. The method has the advantages that privacy security and compliance circulation are achieved, efficient collaboration of multi-source data is promoted, data value conversion and innovation are accelerated, and a new industrial collaboration normal form is constructed.

Description

Technical Field

[0001] The present invention relates to the technical field of automotive data management, and particularly to an automotive trusted data space system. Background Art

[0002] In China, the number of automobiles, especially new energy vehicles and charging facilities, is large and shows an increasing trend. There are problems in the automotive industry data industry, specifically including: high privacy degree of automotive data, difficult supply, mainly involving data privacy and security, and lack of a trusted platform; scattered automotive data resources, difficult collaboration, and difficulty in interconnection and interoperability; high professionalism of automotive algorithms, difficult development: involving lack of a consensus data catalog, training data, and development environment. Summary of the Invention

[0003] Aiming at the deficiencies of the above-mentioned prior art, the technical problem to be solved by this patent application is how to provide an automotive trusted data space system that realizes privacy security and compliant circulation, promotes efficient collaboration of multi-source data, accelerates data value conversion and innovation, and constructs a new paradigm of industrial collaboration.

[0004] To solve the above technical problems, the present invention adopts the following technical solutions:

[0005] An automotive trusted data space system includes a resource interaction system, a trusted control system, a value co-creation system, a data security protection center, a trusted data space client, an external portal, and a data circulation and evidence storage chain; the resource interaction system includes a data resource cataloging section and a data resource interaction section, which are responsible for cataloging, managing, and interacting with data resources to ensure the efficient utilization of data resources; the trusted control system includes a development and utilization section and a trusted control section to ensure the security, compliance, and privacy protection of data during development, use, and circulation; the value co-creation system is used for the full-process management of data circulation to ensure the efficiency, transparency, and compliance of data transactions and promote the maximization of data value; the data security protection center is used to provide comprehensive data security protection measures to ensure the confidentiality, integrity, and availability of data; the trusted data space client is used to integrate core user interaction functions; the external portal is used to promote the realization of the value of data transaction and circulation; the data circulation and evidence storage chain is used to ensure the trustworthiness, transparency, and traceability of the data flow process.

[0006] Preferably, the data resource cataloging section in the resource interaction system includes a data resource discovery module, a metadata management module, a data classification and grading module, and a data quality management module; the data resource interaction section includes a data catalog management module, a data resource retrieval module, and a data interconnection and conversion module

[0007] Preferably, the development and utilization section of the trusted control system includes data sandbox, privacy computing, trusted execution environment, and usage policy control; the trusted control section includes user registration, identity management, identity authentication, certificate management, client management, compliance control, and data security supervision

[0008] Preferably, the value co-creation system includes supply-demand matching, value assessment, transaction management, and audit and liquidation

[0009] Preferably, the data security protection center implements classification and grading, data desensitization, data audit, privacy protection, data encryption, data watermarking, log audit, data leakage prevention, and data security gateway

[0010] Preferably, the trusted data space client implements audit log reporting, full-scale audit, data sandbox node, privacy computing node, trusted access, contract negotiation, contract signing, data usage control, data resource delivery, data directory publishing, and data resource access functions

[0011] Preferably, the external portal provides services for ecological partners to settle in, data resource catalog, data product catalog, data supply-demand matching, and data processing and delivery; the data circulation and deposit evidence chain provides services for data asset grading, circulation traceability, and transaction deposit evidence

[0012] Preferably, the system completes the construction of the automotive data resource catalog, creates the metadata intelligent recognition technology, and realizes the mode of identity authentication and interface authentication; the automotive data resource catalog involves the compilation of data resource catalogs of various institutions, the drawing of resource maps of various data types, and the setting of data openness labels; its principle is to organize and classify the data resources in the automotive field through a systematic method to build a comprehensive data resource panorama for better management and utilization of these data resources; the research and development of metadata intelligent recognition uses artificial intelligence technology to automatically acquire, organize, and analyze metadata. Its principle is to improve the efficiency of data management, ensure the quality of data, and support the sharing and exchange of data through intelligent means; the identity authentication and interface authentication mode involves the setting and authentication of identity access mechanisms, the setting and authentication of standardized data interfaces, and the setting of historical transaction information communication authentication mechanisms, etc. Its principle is to ensure the security and legality of data through strict authentication mechanisms and realize the rapid signing and process management of contracts

[0013] In summary, the automotive trusted data space system has the following advantages

[0014] (1) Achieve privacy security and compliant circulation

[0015] Privacy Computing Technology Integration: Through technologies such as federated learning and blockchain-based evidence storage, ensure that cross-domain collaborative computing is completed with data in an encrypted state, achieve "data availability without visibility", and effectively address the risks of vehicle owner privacy and enterprise sensitive data leakage; Smart Contract Constraints on Data Permissions: Rely on the blockchain platform to automatically enforce data usage rules (such as access times and usage periods), ensure that the entire process of data circulation is traceable and tamper-proof, and meet the strict requirements of the government and enterprises for data compliance.

[0016] (2) Promote the efficient collaboration of multi-source data

[0017] Unify Data Standards and Interfaces: Establish an industry-level consensus data catalog (such as vehicle status, supply chain inventory, etc.), support real-time access and cleaning of data from heterogeneous systems (ERP, MES), and break the problem of "data silos"; High-performance Computing Engine Support: Integrate quantum computing and heterogeneous computing power technologies to improve the parallel processing efficiency of massive data (such as autonomous driving road condition simulation, intelligent cockpit interaction data), and shorten the analysis time for complex scenarios.

[0018] (3) Accelerate the transformation and innovation of data value

[0019] Open Data Service Ecosystem: Provide de-identified data sets (such as vehicle fault diagnosis libraries) and low-code development tools, lower the threshold of algorithm training, and empower the development of high-value scenarios such as intelligent driving decision-making and personalized insurance pricing; Dynamic Scenario Adaptation Capability: Based on location-based services (LBS) and biometric technologies, realize proactive data services (such as supply chain early warnings, user profile updates), and improve the refined operation and market response efficiency of enterprises.

[0020] (4) Build a new paradigm for industrial collaboration

[0021] Deep Cross-domain Resource Integration: Cover multiple fields such as automotive manufacturing, energy, and government affairs, and achieve real-time collaboration between upstream and downstream of the industrial chain (such as spare parts inventory, urban traffic scheduling) through a trusted data space to optimize resource allocation; Enhance Global Competitiveness: Support the transformation of "software-defined vehicles", become a benchmark for the marketization of data elements, and provide infrastructure guarantees for cutting-edge technologies such as intelligent networking and vehicle-road-cloud integration. Brief Description of the Drawings

[0022] Figure 1 It is a system framework diagram of an automotive trusted data space system according to the present invention.

[0023] Figure 2 It is a flowchart of the core technology in the automotive trusted data space system.

[0024] Figure 3 It is a mode flowchart constructed in the automotive trusted data space system. Detailed Implementation Manner

[0025] The present invention will be further described in detail below with reference to the accompanying drawings. In the description of the present invention, it should be understood that the orientation or positional relationship indicated by azimuth terms such as "upper, lower" and "top, bottom" is usually based on the orientation or positional relationship shown in the drawings, and is only for the convenience of describing the present invention and simplifying the description. Without contrary description, these azimuth terms do not indicate and imply that the devices or elements referred to must have a specific orientation or be constructed and operated in a specific orientation, and thus should not be construed as limiting the protection scope of the present invention; the azimuth terms "inside, outside" refer to the inside and outside relative to the contour of each component itself.

[0026] As Figures 1-3 shown, an automotive trusted data space system includes a resource interaction system, a trusted control system, a value co-creation system, a data security protection center, a trusted data space client, an external portal, and a data circulation and evidence storage chain; the resource interaction system includes a data resource cataloging section and a data resource interaction section, which are responsible for cataloging, managing, and interacting with data resources to ensure the efficient utilization of data resources; the trusted control system includes a development and utilization section and a trusted control section to ensure the security, compliance, and privacy protection of data during development, use, and circulation; the value co-creation system is used for the full-process management of data circulation to ensure the efficiency, transparency, and compliance of data transactions and promote the maximization of data value; the data security protection center is used to provide comprehensive data security protection measures to ensure the confidentiality, integrity, and availability of data; the trusted data space client is used to implement the integration of core user interaction functions; the external portal is used to promote the realization of the value of data transaction and circulation; the data circulation and evidence storage chain is used to ensure the trust, transparency, and traceability of the data flow process.

[0027] Preferably, the data resource cataloging section in the resource interaction system includes a data resource discovery module, a metadata management module, a data classification and grading module, and a data quality management module; the data resource interaction section includes a data directory management module, a data resource retrieval module, and a data interconnection and conversion module

[0028] Specifically, the data resource discovery module is used to help users quickly discover and locate the required data resources, and supports search functions based on keywords, tags, or classifications; the metadata management module is used to manage the meta-information of data, facilitate the description and retrieval of data resources, and supports the automatic extraction and manual editing of metadata; the data classification and grading module is used to classify and grade data for easy management and use, and supports custom classification and grading criteria; the data quality management module is used to ensure the accuracy, integrity, and consistency of data, and provides data quality assessment and repair functions.

[0029] Specifically, the data directory management module is used to manage data directories, facilitating users to search for and use data resources, and supporting dynamic updates and version control of directories; the data resource retrieval module is used to provide efficient data retrieval functions, supporting multiple query methods, including full-text retrieval, fuzzy retrieval, and advanced retrieval; the data interoperability and conversion module is used to achieve interoperability and conversion between different data formats and standards, supporting the conversion of common data formats (including but not limited to JSON, XML, CSV).

[0030] Preferably, the development and utilization section of the trusted control system includes a data sandbox, privacy computing, a trusted execution environment, and usage policy control; the trusted control section includes user registration, identity management, identity authentication, certificate management, client management, compliance control, and data security supervision

[0031] Specifically, the data sandbox is used to provide a secure isolation environment for data testing and analysis, preventing data leakage, supporting multi-tenant isolation, and ensuring that the data of different users does not interfere with each other; privacy computing is used to perform calculations while protecting data privacy, supporting multi-party data collaboration, and adopting technologies such as federated learning and secure multi-party computation (MPC); the trusted execution environment is used to provide a hardware-level secure execution environment, ensuring the confidentiality and integrity of data and code, and supporting hardware-based encryption and isolation technologies; usage policy control is used to formulate and execute data usage policies, ensuring that data is used according to rules, and supporting dynamic policy adjustment and real-time monitoring.

[0032] Specifically, user registration is used to manage the user registration process, ensuring the authenticity and credibility of user identities, supporting a multi-level review mechanism, and ensuring that registered users comply with regulations; identity management is used to manage user identity information, supporting role and permission allocation, and providing identity lifecycle management functions; identity authentication is used to verify user identities through multi-factor authentication (such as passwords, biometrics, OTP, etc.), supporting single sign-on (SSO) and cross-platform authentication; certificate management is used to manage digital certificates, ensuring communication security and identity verification, and supporting the issuance, update, and revocation of certificates; client management is used to manage client devices, ensuring device compliance and security, and providing device registration, monitoring, and remote management functions; compliance control is used to ensure that data usage complies with laws, regulations, and industry standards, and provides compliance inspection and reporting functions; data security supervision is used to monitor the data security status in real time, detect and handle security threats in a timely manner, and provide security incident alarms and response functions.

[0033] Preferably, the value co-creation system includes supply-demand matching, value assessment, transaction management, and audit and settlement.

[0034] Specifically, supply-demand matching is used to match data suppliers and demanders through intelligent algorithms to improve transaction efficiency. It supports multiple matching modes, such as demand-based, price-based, or service-quality-based; value assessment is used to evaluate the value of data assets, considering factors such as data quality, scarcity, and application scenarios. It provides a dynamic pricing model to support real-time adjustment of data transaction prices; transaction management is used to manage the entire process of data transactions, including contract signing, payment, delivery, and after-sales service. It provides functions such as transaction status tracking to ensure the transparency of the transaction process; audit and settlement: audit the transaction process to ensure compliance. It provides a settlement function to support fund settlement and account reconciliation. Deploy three major technologies of identity management, contract management, and deposit tracing and origin tracing to enhance data control capabilities.

[0035] Preferably, the data security protection center implements classification and grading, data desensitization, data audit, privacy protection, data encryption, data watermarking, log audit, data leakage prevention, and data security gateway.

[0036] Specifically: Classification and grading are used to classify and grade data for easy security management, and support dynamic adjustment of classification and grading strategies; data desensitization is used to desensitize sensitive data to protect user privacy, and supports multiple desensitization algorithms (such as masking, replacement, encryption, etc.); data audit is used to audit data usage to ensure compliance with data usage, and provides audit log and reporting functions; privacy protection is used to take measures to protect user privacy and prevent privacy leakage, and supports technologies such as anonymization and de-identification; data encryption is used to encrypt data to ensure the security of data during transmission and storage, and supports symmetric encryption and asymmetric encryption algorithms; data watermarking is used to add watermarks to data for easy tracking and identification of data sources, and supports visible watermarks and invisible watermarks; log audit is used to audit system logs to timely detect and handle security threats, and provides log analysis and alarm functions; data leakage prevention is used to take measures to prevent data leakage and ensure data security, and supports data leakage detection and blocking functions; the data security gateway is used to provide a data security gateway to ensure the security of data during transmission, and supports traffic monitoring, access control, and encrypted transmission.

[0037] Preferably, the trusted data space client implements audit log reporting, full-scale audit, data sandbox node, privacy computing node, trusted access, contract negotiation, contract signing, data usage control, data resource delivery, data directory publishing, and data resource access functions.

[0038] Specifically: Audit log reporting: Record all operation logs of the client and report the logs to the data center for subsequent auditing and analysis. Record key information such as user operations, data access, and transaction behaviors. Support real-time or scheduled log reporting to ensure the integrity and timeliness of the logs. Provide log compression and encryption functions to ensure the security of log transmission; Full-scale audit: Conduct a comprehensive audit of user behaviors, data access, transaction processes, etc. Support multi-dimensional audit analysis, such as time, user, operation type, etc. Provide an audit report generation function for compliance checking and problem tracing; Data sandbox node: Provide an isolated execution environment to ensure that data operations within the sandbox do not cause data leakage. Support multi-tenant isolation to ensure that data of different users does not interfere with each other. Provide data access control and operation restriction functions to ensure data security; Privacy computing node: Support privacy computing technologies such as federated learning and secure multi-party computation (MPC) to ensure that data is computed locally and only the computation results are shared, protecting the privacy of the original data. Provide computing task management and monitoring functions to ensure the efficiency and reliability of the computing process; Trusted access: Ensure the secure access of the client to the data space and prevent illegal access and data leakage. Support multi-factor authentication (such as passwords, biometrics, OTP, etc.) to ensure the credibility of user identities. Provide an encrypted communication channel, support device authentication and binding, and prevent illegal device access; Contract negotiation: Conduct the negotiation of data transaction contracts on the client side, clarify the transaction terms and conditions, provide contract template and clause editing functions to facilitate quick agreement between both parties. Support smart contract technologies to ensure the automatic execution of contract clauses. Provide a contract version management function for subsequent modification and tracing; Contract signing: Sign data transaction contracts on the client side, support electronic signature technologies to ensure the legal effect of the contracts. Provide a contract deposit function to store contract information on the blockchain to ensure immutability. Support a contract status tracking function to facilitate both parties to understand the contract execution situation; Data usage control: Provide a data access permission control function to ensure that users can only access authorized data. Support restrictions on the time, frequency, and scope of data usage. Provide a real-time monitoring function to promptly detect and handle illegal usage behaviors; Data resource delivery: Support multiple data delivery methods, such as API interfaces, file transfers, etc. Provide data encryption and integrity verification functions. Support a delivery status tracking function to facilitate both parties to confirm the completion of delivery; Data directory publishing: Provide data directory editing and publishing functions, support dynamic updates, support directory classification, tagging, and search functions to facilitate users to quickly locate data. Provide a directory permission control function to ensure that only authorized users can access; Data resource access: Support multiple data access methods, such as APIs, database connections, etc. Provide a data access permission control function. Support a data access status monitoring function to promptly detect and handle access problems.

[0039] Preferably, the external portal provides services for ecological partners to settle in, data resource catalog, data product catalog, data supply and demand matching, and data processing and delivery; the data circulation and deposit chain provides services for data asset grading, circulation traceability, and transaction deposit.

[0040] Specifically, for ecological partners to settle in: it provides registration, review, and settlement services for ecological partners (such as automobile enterprises, suppliers, service providers, etc.) to ensure the legality and credibility of partners; data resource catalog: it displays all available data resources in the data space for users to browse and select; data product catalog: it lists data products available for trading, including product descriptions, pricing, and usage scopes; data supply and demand matching: it connects data demanders and suppliers through intelligent matching algorithms to promote data transactions; data processing and delivery: it provides services such as data cleaning, conversion, and processing, and delivers them to users as required.

[0041] Specifically, data asset grading: it grades data assets for easy management and trading; circulation traceability: it records the data flow process to ensure that the data source and destination are traceable; transaction deposit: it stores the key information of data transactions on the chain to ensure transaction transparency and immutability.

[0042] Preferably, the system completes the construction of an automotive data resource catalog, develops metadata intelligent recognition technology, and realizes the mode of identity authentication and interface authentication; the automotive data resource catalog involves the compilation of data resource catalogs of various institutions, the drawing of resource maps of various data types, and the setting of data openness tags; its principle is to organize and classify automotive data resources through a systematic method to build a comprehensive data resource panorama for better management and utilization of these data resources; the research and development of metadata intelligent recognition uses artificial intelligence technology to automatically acquire, organize, and analyze metadata, and its principle is to improve the efficiency of data management, ensure data quality, and support data sharing and exchange through intelligent means; the identity authentication and interface authentication mode involves the setting and authentication of identity access mechanisms, the setting and authentication of standardized data interfaces, and the setting of historical transaction information authentication mechanisms, etc., and its principle is to ensure data security and legality through strict authentication mechanisms and realize the rapid signing and process management of contracts.

[0043] Specifically, the automotive data resource catalog has a wide range of application scenarios in the automotive industry, including intelligent driving and autonomous driving, vehicle networking technology, electric vehicle charging management, vehicle diagnosis and predictive maintenance, sales strategies, and market prediction; the metadata intelligent recognition technology has wide applications in scenarios such as document management, data retrieval, and contract management, and can significantly improve the efficiency and accuracy of information processing; the identity authentication and interface authentication mode has wide applications in multiple fields such as automotive, finance, government affairs, medical care, and education, and can significantly improve the security and efficiency of information processing.

[0044] The core technologies of this system include identity management technology, contract management technology, trusted control technology, and evidence storage and traceability technology.

[0045] Specifically, for identity management technology, the zero-trust architecture is a cybersecurity model that assumes threats exist both inside and outside the network. Therefore, it requires the authentication and authorization of all users, devices, and applications, regardless of their location. A digital certificate is an electronic document used to prove the identity of digital entities (such as users, devices, and applications). It contains a public key, identity information, and a digital signature, and is issued by a trusted certificate authority (CA). Relying on technical paths such as zero trust and digital certificates, it focuses on solving the identity problems of various resources, including enterprise data, government data, and industry institution data. After identity authentication, corresponding digital certificates are issued to enable authorized use of the data.

[0046] Specifically, contract management technology includes the formulation of basic contract templates, venue contract templates, data use control, and processing. Formulation of basic contract templates: Study the basic elements of data use control and formulate a basic contract template that includes terms such as data providers, data users, data scope, purpose of use, term of use, and security requirements. Formulation of venue contract templates: On the basis of the basic contract template, further formulate venue contract templates, considering venue-specific data use scenarios, such as data processing sites and data sharing sites, and clarify venue-related security requirements, access control, compliance auditing, and other terms. Data use control and processing: Study how to control and process data use according to the contract, including data access control, data processing procedures, compliance auditing, etc., to ensure the compliance and security of data during sharing and processing.

[0047] Specifically, trusted control technology includes usage control, privacy computing, and data sandboxes. Usage control: Usage control is a dynamic access control based on factors such as identity, behavior, time, and location. This control mechanism forms control policies by presetting data usage conditions, and relies on the control policies to monitor the data usage process in real time and dynamically determine the permission or rejection of data operations. Privacy computing: Privacy computing includes technologies such as federated learning, multi-party secure computing, and trusted execution environments. These technologies allow data analysis and calculation without revealing the original data, aiming to ensure that data is "usable but invisible" in all aspects of the entire data flow process, including generation, storage, calculation, application, and destruction. Data sandboxes: Data sandboxes include endpoint security sandboxes and distributed sandboxes. These sandboxes create an application-layer isolation environment that allows data users to analyze and process data within a safe and controlled area.

[0048] Specifically, the evidence preservation and traceability technology relies on blockchain, log auditing, and data circulation transaction certificates to achieve the evidence preservation and traceability of key events, key behaviors, etc. during the data flow process; it includes blockchain, log auditing, and data circulation transaction certificates. Blockchain: Utilize the characteristics of decentralization, immutability, and traceability of blockchain to record key events and key behaviors during the data flow process in an encrypted form on a distributed ledger to ensure the authenticity and integrity of the data. Log auditing: By collecting and analyzing system logs, record key events and key behaviors during the data flow process for subsequent traceability and auditing. Data circulation transaction certificate: During the data flow process, generate a unique transaction certificate for each data transaction, record key information such as the time, location, participants, and data content of the transaction, and use technologies such as digital signatures to ensure the immutability and traceability of the certificate.

[0049] This solution solves the "difficulty in supply": Build a trusted circulation system

[0050] 1. Strengthen privacy and security technologies: Application of privacy computing technologies: Through technologies such as federated learning (FL), trusted execution environment (TEE), and multi-party secure computation (MPC), achieve "usable but invisible" data, and solve the problem of the circulation of vehicle owners' privacy and enterprise sensitive data; Data classification and management: Establish a grading standard for the sensitivity of automotive data (such as user location information, driving behavior data, etc.), and clarify the circulation rules and usage permissions for data at different levels.

[0051] 2. Build a trusted data platform: Data sandbox and smart contract: Build an industry-level trusted data circulation platform, use the data sandbox to isolate the original data, and automate the execution of data usage rules through smart contracts to ensure circulation compliance; Third-party authoritative certification: Introduce a third-party certification mechanism led by the government or industry association to conduct full-process supervision on the qualifications and behaviors of data suppliers and users.

[0052] II. Solve the "difficulty in collaboration": Promote cross-domain resource integration

[0053] 1. Unify data standards and interfaces: Industry consensus data catalog: Jointly develop a unified data resource catalog (such as vehicle status data, supply chain inventory data, etc.) with automobile manufacturers, spare parts manufacturers, the government, etc., and clarify data formats, interface standards, and sharing protocols; Blockchain evidence preservation and traceability: Use blockchain technology to record the data transfer path to ensure the credibility and traceability of multi-party collaboration.

[0054] 2. Build a multi-source data fusion foundation: Data middleware development: Deploy cross-platform data middleware to be compatible with data systems of different enterprises / organizations (such as ERP, MES), and achieve real-time access, cleaning, and transformation of heterogeneous data; High-performance encrypted state computing engine: Support cross-domain data joint computing in an encrypted state (such as supply chain collaborative forecasting, urban traffic scheduling), and break the "data silos".

[0055] III. Solve the "difficulty in development": Build an open innovation ecosystem

[0056] 1. Build a data opening and algorithm incubation platform: Desensitized data open library: Establish industry-level desensitized data sets (such as vehicle fault diagnosis data, user portrait tag library), and provide standardized API interfaces for algorithm developers to call. Low-code algorithm development toolchain: Develop algorithm model templates for automotive scenarios (such as battery life prediction, intelligent driving decision-making), and lower the threshold of algorithm training.

[0057] 2. Cultivate a data service ecosystem: Construction of a data business service system: Introduce third-party service institutions such as data annotation, model training, and compliance auditing, and improve the full-process support ability for data product development. Scenario-based data product innovation: Focus on high-value scenarios (such as intelligent networking, after-sales service), and promote the development of SaaS products integrating data and algorithms (such as real-time road condition optimization system, personalized insurance pricing model).

[0058] This automotive trusted data space system has the following advantages:

[0059] (1) Achieve privacy security and compliant circulation

[0060] Integration of privacy computing technology: Through technologies such as federated learning and blockchain evidence storage, ensure that data completes cross-domain joint computing in an encrypted state, achieve "data can be used but not seen", and effectively solve the risk of leakage of vehicle owners' privacy and enterprise sensitive data; Smart contract constraints on data permissions: Rely on the blockchain platform to automatically execute data usage rules (such as the number of accesses, usage period), ensure that the whole process of data circulation is traceable and tamper-proof, and meet the strict requirements of the government and enterprises for data compliance.

[0061] (2) Promote efficient cooperation of multi-source data

[0062] Unify data standards and interfaces: Establish an industry-level consensus data directory (such as vehicle status, supply chain inventory, etc.), support real-time access and cleaning of data from heterogeneous systems (ERP, MES), and break the "data silos" problem; Support of high-performance computing engine: Integrate quantum computing and heterogeneous computing power technologies to improve the parallel processing efficiency of massive data (such as autonomous driving road condition simulation, intelligent cockpit interaction data), and shorten the analysis time of complex scenarios.

[0063] (3) Accelerate data value transformation and innovation

[0064] Open data service ecosystem: Provide desensitized data sets (such as vehicle fault diagnosis libraries) and low-code development tools to lower the threshold of algorithm training and empower the development of high-value scenarios such as intelligent driving decision-making and personalized insurance pricing; Dynamic scenario adaptation ability: Based on location-based services (LBS) and biometric technologies, implement proactive data services (such as supply chain early warnings, user profile updates) to improve the refined operation of enterprises and the market response efficiency.

[0065] (4) Build a new paradigm for industrial collaboration

[0066] Deep integration of cross-domain resources: Cover multiple fields such as automobile manufacturing, energy, and government affairs, and achieve real-time collaboration between upstream and downstream of the industrial chain (such as spare parts inventory, urban traffic dispatching) through a trusted data space to optimize resource allocation; Enhancement of global competitiveness: Support the transformation of "software-defined vehicles", become a benchmark for the marketization of data elements, and provide infrastructure guarantees for cutting-edge technologies such as intelligent networking and vehicle-road-cloud integration.

[0067] Finally, it should be noted that those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these changes and modifications.

Claims

1. An automotive trusted data space system, characterized in that, It includes a resource interaction system, a trusted management and control system, a value co-creation system, a data security protection center, a trusted data space client, an external portal, and a data circulation and evidence preservation chain; the resource interaction system includes a data resource cataloging section and a data resource interaction section, which are responsible for the cataloging, management, and interaction of data resources to ensure the efficient utilization of data resources; the trusted management and control system includes a development and utilization section and a trusted management and control section to ensure the security, compliance, and privacy protection of data during the processes of development, use, and circulation; the value co-creation system is used for the full-process management of data circulation to ensure the efficiency, transparency, and compliance of data transactions and promote the maximization of data value; the data security protection center is used to provide comprehensive data security protection measures to ensure the confidentiality, integrity, and availability of data; the trusted data space client is used to implement the integration of core user interaction functions; the external portal is used to promote the realization of the value of data transaction and circulation; the data circulation and evidence preservation chain is used to ensure the trustworthiness, transparency, and traceability of the data flow process.

2. The automobile trusted data space system according to claim 1, characterized in that: The data resource cataloging section in the resource interaction system includes a data resource discovery module, a metadata management module, a data classification and grading module, and a data quality management module; the data resource interaction section includes a data directory management module, a data resource retrieval module, and a data interconnection and conversion module.

3. The automotive trusted data space system according to claim 2, characterized in that, The development and utilization section of the trusted management and control system includes a data sandbox, privacy computing, a trusted execution environment, and usage policy control; the trusted management and control section includes user registration, identity management, identity authentication, certificate management, client management, compliance control, and data security supervision.

4. The automotive trusted data space system according to claim 3, characterized in that, The value co-creation system includes supply and demand matching, value assessment, transaction management, and audit and liquidation.

5. The vehicle trusted data space system according to claim 4, characterized in that The data security protection center implements classification and grading, data desensitization, data audit, privacy protection, data encryption, data watermarking, log audit, data leakage prevention, and a data security gateway.

6. The vehicle trusted data space system according to claim 5, wherein, The trusted data space client implements functions such as audit log reporting, full-scale audit, data sandbox node, privacy computing node, trusted access, contract negotiation, contract signing, data usage control, data resource delivery, data directory publishing, and data resource access.

7. The automotive trusted data space system according to claim 6, wherein The external portal provides services such as the entry of ecological partners, data resource catalog, data product catalog, data supply and demand matching, and data processing and delivery; the data circulation and evidence preservation chain provides services such as data asset grading, circulation traceability, and transaction evidence preservation.

8. The automotive trusted data space system according to claim 7, characterized in that, The system completes the construction of an automotive data resource catalog, creates a metadata intelligent recognition technology, and realizes the mode of identity authentication and interface authentication; the automotive data resource catalog involves the compilation of data resource catalogs of various institutions, the drawing of resource maps of various data types, and the setting of data openness tags. Its principle lies in sorting and classifying the data resources in the automotive field through a systematic method to construct a comprehensive data resource panorama for better management and utilization of these data resources. The research and development of metadata intelligent recognition uses artificial intelligence technology to automatically acquire, organize, and analyze metadata. Its principle lies in improving the efficiency of data management, ensuring the quality of data, and supporting data sharing and exchange through intelligent means. The identity authentication and interface authentication modes involve the setting and authentication of identity access mechanisms, the setting and authentication of standardized data interfaces, the setting of historical transaction information authentication mechanisms, etc. The principle is to ensure the security and legality of data through strict authentication mechanisms, and to achieve the rapid signing and process management of contracts.

Images