Vehicle data access method and device, processor and electronic equipment

Abstract

The invention discloses a data access method and device of a vehicle, a processor and electronic equipment. The method comprises the steps that a current communication address at the current moment is acquired, and the current communication address is used for accessing operation data of a vehicle; determining a first total frequency of accessing the operation data through the current communication address before the current moment; based on the first total frequency, the level of the current communication address is determined, and the level is used for representing the confidence degree of the vehicle to the current communication address; under the level, determining an access authority for accessing the running data; according to an access strategy matched with the access permission, the operation data meeting the access permission are accessed through the current communication address, and the access strategy is used for representing a rule for accessing the operation data meeting the access permission. According to the invention, the technical problem of low security of vehicle data access is solved.

Description

Technical Field

[0001] The present invention relates to the field of vehicles, and in particular to a vehicle data access method, device, processor and electronic device. Background Art

[0002] Currently, because the in-vehicle computers of intelligent connected vehicles generally use the Android system, there is a huge threat to the data security of the in-vehicle computers. In the existing technology, traditional firewalls are often used to maintain the data security of the in-vehicle computers.

[0003] However, the above maintenance method is difficult to cope with the dynamic security requirements in complex communication scenarios such as vehicle computers, telematics control units (T-BOX), and cloud services, resulting in the technical problem of low security of vehicle data access.

[0004] Currently, no effective solution has been proposed to the technical problem of low security in data access of the above-mentioned vehicles. Summary of the Invention

[0005] Embodiments of the present invention provide a vehicle data access method, device, processor, and electronic device to at least solve the technical problem of low security in vehicle data access.

[0006] According to one aspect of an embodiment of the present invention, a vehicle data access method is provided, the method comprising: obtaining a current communication address at a current moment, wherein the current communication address is used to access vehicle operating data; determining a first total frequency of accesses to the operating data through the current communication address before the current moment; determining a rank of the current communication address based on the first total frequency, wherein the rank represents the vehicle's confidence in the current communication address; determining access rights for accessing the operating data under the rank; and accessing operating data that satisfies the access rights through the current communication address according to an access policy that matches the access rights, wherein the access policy represents a rule for accessing operating data that satisfies the access rights. Since, after obtaining the current communication address, the embodiment of the present invention determines the rank of the current communication address based on the first total frequency of accesses to the operating data through the current communication address before the current moment, determines access rights for accessing the operating data under the determined rank, and accesses operating data that satisfies the access rights through the current communication address according to the access policy that matches the access rights, the method achieves the purpose of addressing dynamic security requirements in complex communication scenarios such as between a vehicle computer and a T-BOX and cloud services, thereby achieving the technical effect of improving the security of vehicle data access.

[0007] Optionally, based on the first total frequency, the level of the current communication address is determined, including: determining a target relationship between the current communication address and a preset communication address; determining the level based on the target relationship and the first total frequency. Since the level of the current communication address is determined, the purpose of grading the current communication address is achieved, thereby achieving the technical effect of improving the security of accessing vehicle data through the communication address.

[0008] Optionally, based on the target relationship and the first total frequency, the level is determined, including: in response to the target relationship indicating that the current communication address is the same as the preset communication address, and the first total frequency is greater than or equal to the first threshold, determining the level to be the first level; in response to the target relationship indicating that the current communication address is different from the preset communication address, the first total frequency is less than the first threshold, greater than or equal to the second threshold, and there is no abnormal information of the current communication address, determining the level to be the second level, wherein the second threshold is less than the first threshold, the second level is lower than the first level, and the abnormal information is used to indicate abnormal access to data through the current communication address; in response to the target relationship indicating that the current communication address is different from the preset communication address, and the first total frequency is less than the second threshold, determining the level to be the third level, wherein the third level is lower than the second level. Since the level of the current communication address is determined, the purpose of grading the current communication address is achieved, thereby achieving the technical effect of improving the security of accessing vehicle data through the communication address.

[0009] Optionally, at the level, access rights for accessing the operating data are determined, including: at the first level, determining the access right as the first access right, wherein the first access right is used to allow access to the operating data through the current communication address at the current moment; at the second level, determining the access right as the second access right, wherein the second access right is used to allow access to part of the operating data in the operating data through the current communication address at the current moment; at the third level, determining the access right as the third access right, wherein the third access right is used to allow access to the remaining operating data in the operating data except part of the operating data through the current communication address at the current moment. Since the access rights for accessing the operating data are different at different levels, the purpose of determining the corresponding access rights according to different current communication addresses is achieved, thereby achieving the technical effect of improving the security of accessing the vehicle data through the communication address.

[0010] Optionally, the method also includes: determining a first access policy that matches the first access permission as the access policy, and determining the operating data as the operating data that meets the first access permission; accessing the operating data that meets the access permission through the current communication address according to the access policy that matches the access permission, including: accessing the operating data through the current communication address according to the first access policy. Since the operating data to be accessed through the current communication address can be determined based on the access permission, the purpose of determining the corresponding operating data to be accessed according to different current communication addresses is achieved, thereby achieving the technical effect of improving the security of vehicle data access.

[0011] Optionally, the method also includes: determining a second access policy that matches the second access permission as the access policy, and determining part of the operating data as operating data that meets the second access permission; accessing the operating data that meets the access permission through the current communication address according to the access policy that matches the access permission, including: accessing part of the operating data through the current communication address according to the second access policy. Since the operating data to be accessed through the current communication address can be determined based on the access permission, the purpose of determining the corresponding operating data to be accessed according to different current communication addresses is achieved, thereby achieving the technical effect of improving the security of vehicle data access.

[0012] Optionally, the method also includes: determining a third access policy that matches the third access permission as the access policy, and determining the remaining operating data as operating data that meets the third access permission; accessing the operating data that meets the access permission through the current communication address according to the access policy that matches the access permission, including: accessing the remaining operating data through the current communication address according to the third access policy. Since the operating data to be accessed through the current communication address can be determined based on the access permission, the purpose of determining the corresponding operating data to be accessed according to different current communication addresses is achieved, thereby achieving the technical effect of improving the security of vehicle data access.

[0013] Optionally, the method also includes: in response to the level being the second level, recording the second total frequency of access to operating data through the current communication address after the current moment; in response to the second total frequency being less than the second threshold, adjusting the level to the third level; or, in response to the second total frequency being less than the first threshold, greater than or equal to the second threshold, and there being abnormal information, adjusting the level to the third level. Since the level of the current communication address can be dynamically adjusted, the purpose of intelligently raising and lowering the level of the current communication address is achieved, thereby realizing the technical effect of improving the security of vehicle data access.

[0014] Optionally, the method also includes: in response to the level being the third level, recording the second total frequency of accessing the operating data through the current communication address after the current moment; in response to the second total frequency being less than the first threshold, greater than or equal to the second threshold, and there being no abnormal information, adjusting the level to the second level. Since the level of the current communication address can be dynamically adjusted, the purpose of intelligently raising and lowering the level of the current communication address is achieved, thereby realizing the technical effect of improving the security of vehicle data access.

[0015] Optionally, the method also includes: recording a first initial total frequency of accessing operating data through the current communication address before the current moment; according to the target period, using an attenuation parameter corresponding to the target period, attenuating the first initial total frequency to obtain a first total frequency. Since the first initial total frequency can be attenuated, the purpose of preventing long-term inactive communication addresses from occupying resources is achieved, thereby achieving the technical effect of improving the efficiency of vehicle data access.

[0016] According to one aspect of an embodiment of the present invention, a data access device for a vehicle is provided, which may include: an acquisition unit for acquiring a current communication address at a current moment, wherein the current communication address is used to access the vehicle's operating data; a first determination unit for determining a first total frequency of accessing the operating data through the current communication address before the current moment; a second determination unit for determining a level of the current communication address based on the first total frequency, wherein the level is used to indicate the vehicle's confidence in the current communication address; a third determination unit for determining, under the level, access rights for accessing the operating data; and an access unit for accessing the operating data that meets the access rights through the current communication address in accordance with an access policy that matches the access rights, wherein the access policy is used to indicate rules for accessing the operating data that meets the access rights.

[0017] According to another aspect of an embodiment of the present invention, a processor is provided, which is configured to run a program, wherein when the program is run by the processor, the vehicle data access method according to an embodiment of the present invention is executed.

[0018] According to another aspect of an embodiment of the present invention, an electronic device is provided, comprising: a memory storing a computer program; and a processor for running the computer program, wherein the vehicle data access method in each embodiment of the present invention is executed when the computer program is running.

[0019] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium includes a stored executable program, wherein when the executable program is executed, the device where the computer-readable storage medium is located is controlled to execute the vehicle data access method according to an embodiment of the present invention.

[0020] According to another aspect of an embodiment of the present invention, a computer program product is further provided. The computer program product includes a computer program. When the computer program is executed by a processor, the vehicle data access method in the embodiment of the present invention is implemented.

[0021] According to another aspect of an embodiment of the present invention, a computer program product is also provided, including a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium is used to store a computer program, and when the computer program is executed by a processor, the vehicle data access method in the embodiment of the present invention is implemented.

[0022] According to another aspect of an embodiment of the present invention, a computer program is further provided. When the computer program is executed by a processor, the vehicle data access method in the above-mentioned embodiment of the present invention is implemented.

[0023] In an embodiment of the present invention, when accessing the data of a vehicle, the current communication address at the current moment can be obtained, and then the first total frequency of accessing the operating data through the obtained current communication address before the current moment can be determined. Based on the determined first total frequency, the level of the current communication address can be determined, and under the determined level, the access rights for accessing the operating data can be determined, and according to the access policy that matches the access rights, the operating data that meets the access rights can be accessed through the current communication address. Since the embodiment of the present application can determine the level of the current communication address after obtaining the current communication address based on the determined first total frequency of accessing the operating data through the current communication address before the current moment, and under the determined level, the access rights for accessing the operating data can be determined, and according to the access policy that matches the access rights, the operating data that meets the access rights can be accessed through the current communication address, thereby achieving the purpose of being able to cope with the dynamic security requirements in complex communication scenarios such as vehicle computers and T-BOXs, cloud services, etc., thereby solving the technical problem of low security of vehicle data access, and further achieving the technical effect of improving the security of vehicle data access. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0025] Figure 1 is a flow chart of a vehicle data access method according to an embodiment of the present invention;

[0026] Figure 2 2 is a schematic diagram of a vehicle information security protection system for an intelligent connected vehicle based on IP access management according to an embodiment of the present invention;

[0027] Figure 3 is a schematic diagram of a data access device for a vehicle according to an embodiment of the present invention;

[0028] Figure 4 is a schematic diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0029] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings of the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.

[0030] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0031] According to an embodiment of the present invention, a vehicle data access method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0032] Figure 1 Flowchart of a vehicle data access method according to an embodiment of the present invention. The method may include the following steps:

[0033] Step S101: Acquire the current communication address at the current moment, wherein the current communication address is used to access the vehicle's operating data.

[0034] In the technical solution provided in step S101 of the present invention, the current communication address can be used to access the vehicle's operating data. The current communication address can be an Internet Protocol (IP) address, and the operating data can be vehicle-mounted computer data. The vehicle-mounted computer data can include sensitive data and non-sensitive data. Sensitive data can include at least one of the following: vehicle status data, location and navigation data, driver and passenger data, energy consumption and charging data, and fault and repair data. Non-sensitive data can include at least one of the following: entertainment and multimedia data and environmental perception data. Environmental perception data can include in-vehicle and out-of-vehicle environmental data.

[0035] In this embodiment, the current communication address at the current moment is obtained. Optionally, this embodiment detects whether there is an access request to access the vehicle's operating data at each moment. If an access request to access the vehicle's operating data is detected at the current moment, the current communication address that issued the access request is obtained at the current moment.

[0036] For example, when the current time is 14:00:00, at each time before 14:00:00 and 14:00:00, a check is performed to determine whether there is an access request to the vehicle's operating data. If an access request to the vehicle's operating data is detected at 14:00:00, the current communication address at 14:00:00 that issued the access request is obtained. The time here is only used as an example and is not specifically limited.

[0037] Step S102: determining a first total frequency of accessing the operating data through the current communication address before the current moment.

[0038] In the technical solution provided in step S102 of the present invention, the first total frequency may be used to represent the total frequency of accesses to the operating data through the current communication address before the current time. For example, if the current time is 15:00:00 on January 1, 2025, the first total frequency may be the total frequency of accesses to the operating data through the current IP address before 15:00:00 on January 1, 2025. The first total frequency may be denoted as N. The time here is merely an example and is not a specific limitation.

[0039] In this embodiment, after obtaining the current communication address at the current moment, a first total frequency of accesses to operational data using the current communication address before the current moment is determined. Optionally, based on obtaining the current communication address, this embodiment determines the first total frequency as the total frequency of accesses to operational data using the current communication address at historical moments, where the historical moment is a moment before the current moment and may include multiple historical sub-moments.

[0040] For example, if the current time is 18:00:00 on January 1, 2025, the historical time is the time before 18:00:00 on January 1, 2025. Based on the current communication address, the total frequency of accessing the operating data through the current communication address before 18:00:00 on January 1, 2025 is determined as the first total frequency. The time here is only for example and is not a specific limitation.

[0041] Step S103 : determining the level of the current communication address based on the first total frequency, wherein the level is used to indicate the degree of confidence of the vehicle in the current communication address.

[0042] In the technical solution provided in step S103 of the present invention, the aforementioned level can be used to represent the vehicle's confidence in the current communication address. The higher the level of the current communication address, the higher the vehicle's confidence in the current communication address. For example, if the level includes a first level and a second level, and the second level is lower than the first level, the vehicle's confidence in the current communication address corresponding to the first level is higher than the vehicle's confidence in the current communication address corresponding to the second level. This is merely an example and is not intended to be a specific limitation.

[0043] In this embodiment, after determining a first total frequency of accesses to operational data via the current communication address prior to the current moment, the rank of the current communication address is determined based on the first total frequency. Optionally, based on the determination of the first total frequency, this embodiment compares the relationship between the determined first total frequency and a frequency threshold to obtain a comparison result, where the frequency threshold may include a first threshold and a second threshold, with the second threshold being less than the first threshold. Based on the comparison result, the rank of the current communication address can be determined, that is, the vehicle's confidence in the current communication address can be determined.

[0044] Step S104: Under the level, determine the access rights for accessing the operation data.

[0045] In the technical solution provided in the above step S104 of the present invention, the above access rights may correspond one-to-one with the level of the current communication address.

[0046] In this embodiment, after determining the level of the current communication address based on the first total frequency, access rights for accessing the operating data are determined at the level. Alternatively, in this embodiment, based on determining the level of the current communication address, access rights corresponding to the level of the current communication address are determined at the level.

[0047] Optionally, if the levels include the first level, the second level and the third level, and the second level is lower than the first level, and the third level is lower than the second level, then when the level of the current communication address is the first level, the access rights for accessing the operating data can be determined to be the access rights adapted to the first level, wherein the access rights adapted to the first level can be used to allow access to the operating data through the current communication address at the current moment.

[0048] Optionally, when the level of the current communication address is the second level, the access rights for accessing the operating data can be determined as access rights adapted to the second level, wherein the access rights adapted to the second level can be used to allow access to part of the operating data through the current communication address at the current moment.

[0049] Optionally, when the level of the current communication address is the third level, the access permission for accessing the operating data can be determined as the access permission adapted to the third level, wherein the access permission adapted to the third level can be used to allow access to the remaining operating data except for part of the operating data in the operating data through the current communication address at the current moment.

[0050] Step S105 : Accessing the operating data that meets the access permission through the current communication address according to the access policy that matches the access permission, wherein the access policy is used to represent the rules for accessing the operating data that meets the access permission.

[0051] In the technical solution provided in step S105 of the present invention, the access policy can be used to represent rules for accessing operational data that meets the access rights. Specifically, if the access rights are those compatible with the first level, the access policy can be an access policy based on the Hypertext Transfer Protocol Secure (HTTPS), or an access policy based on two-way authentication. If the access rights are those compatible with the second level, the access policy can be an access policy based on Advanced Encryption Standard (AES) encryption. If the access rights are those compatible with the third level, the access policy can be an access policy that does not require encryption or authentication.

[0052] In this embodiment, after determining the access rights for accessing the operational data at the level, the operational data that satisfies the access rights is accessed through the current communication address in accordance with the access policy that matches the access rights. Alternatively, this embodiment, based on determining the access rights, first determines an access policy that matches the access rights, and then, in accordance with the access policy, accesses the operational data that satisfies the access rights through the current communication address.

[0053] Optionally, if the access right is an access right adapted to the first level, it is determined that the above access policy can be an access policy based on two-way authentication. According to the access policy based on two-way authentication, the operating data that meets the access right adapted to the first level is accessed through the current communication address.

[0054] Optionally, if the access right is an access right adapted to the second level, it is determined that the above access policy can be an access policy based on AES encryption. According to the access policy based on AES encryption, the operating data that meets the access right adapted to the second level is accessed through the current communication address.

[0055] Optionally, if the access right is an access right adapted to the third level, it is determined that the above-mentioned access policy can be an access policy based on AES encryption, and according to the access policy without encryption and authentication, the operating data that meets the access right adapted to the third level is accessed through the current communication address.

[0056] In the above steps S101 to S105 of the present application, when accessing the vehicle data, the current communication address at the current moment can be obtained, and then the first total frequency of accessing the operating data through the obtained current communication address before the current moment can be determined. Based on the determined first total frequency, the level of the current communication address can be determined, and under the determined level, the access rights for accessing the operating data can be determined, and according to the access policy that matches the access rights, the operating data that meets the access rights can be accessed through the current communication address. Since the embodiment of the present application determines the level of the current communication address after obtaining the current communication address, based on the determined first total frequency of accessing the operating data through the current communication address before the current moment, the access rights for accessing the operating data can be determined, and according to the access policy that matches the access rights, the operating data that meets the access rights can be accessed through the current communication address, thereby achieving the purpose of being able to cope with the dynamic security requirements in complex communication scenarios such as vehicle-to-vehicle and T-BOX, cloud services, etc., thereby solving the technical problem of low security of vehicle data access, and further achieving the technical effect of improving the security of vehicle data access.

[0057] The method for determining the level of the current communication address based on the first total frequency in this embodiment is further described below.

[0058] As an optional embodiment, step S103, determining the level of the current communication address based on the first total frequency, includes: determining a target relationship between the current communication address and a preset communication address; and determining the level based on the target relationship and the first total frequency.

[0059] In this embodiment, the preset communication address may be an IP address in a factory-cured high-trust list.

[0060] In this embodiment, the target relationship may include: the current communication address is the same as the preset communication address, and the current communication address is different from the preset communication address.

[0061] In this embodiment, after determining the first total frequency of accessing operational data via the current communication address prior to the current moment, a target relationship between the current communication address and a preset communication address is determined. Based on the determination of the first total frequency, this embodiment compares the current communication address with the preset communication address to determine the target relationship between the current and preset communication addresses. This achieves the purpose of determining whether the current and preset communication addresses are identical, thereby achieving the technical effect of improving the security of accessing vehicle data via communication addresses.

[0062] In this embodiment, after determining the target relationship between the current communication address and the preset communication address, a rank is determined based on the target relationship and the first total frequency. Optionally, based on the target relationship, this embodiment compares the relationship between the determined first total frequency and the frequency threshold to obtain a comparison result. Based on the target relationship and the comparison result, the rank of the current communication address can be determined. By determining the rank of the current communication address, the current communication address can be classified, thereby achieving the technical effect of improving the security of accessing vehicle data via the communication address.

[0063] The method for determining the level based on the target relationship and the first total frequency of this embodiment is further described below.

[0064] As an optional embodiment, the level is determined based on the target relationship and the first total frequency, including: in response to the target relationship indicating that the current communication address is the same as the preset communication address, and the first total frequency is greater than or equal to the first threshold, determining the level to be the first level; in response to the target relationship indicating that the current communication address is different from the preset communication address, the first total frequency is less than the first threshold, greater than or equal to the second threshold, and there is no abnormal information of the current communication address, determining the level to be the second level; in response to the target relationship indicating that the current communication address is different from the preset communication address, and the first total frequency is less than the second threshold, determining the level to be the third level.

[0065] In this embodiment, the first threshold may be, but is not limited to, 1000, and the first level may be used to indicate that the current communication address is a preset IP.

[0066] In this embodiment, after determining a target relationship between the current communication address and the preset communication address, in response to the target relationship indicating that the current communication address is identical to the preset communication address and the first total frequency is greater than or equal to the first threshold, the level is determined to be the first level. Alternatively, in this embodiment, based on the determination of the target relationship, if the target relationship indicates that the current communication address is identical to the preset communication address and the comparison result indicates that the first total frequency is greater than or equal to the first of the frequency thresholds, the level is determined to be the first level. By determining the level of the current communication address, the purpose of grading the current communication address is achieved, thereby achieving the technical effect of improving the security of accessing vehicle data via the communication address.

[0067] In this embodiment, the second threshold may be smaller than the first threshold. For example, the second threshold may be, but is not limited to, 100.

[0068] In this embodiment, the second level may be lower than the first level, and the second level may be used to indicate that the current communication address is a general IP.

[0069] In this embodiment, the above-mentioned abnormal information can be used to indicate abnormal access to data through the current communication address. For example, the above-mentioned abnormal information can be displayed as an abnormal request and / or a security warning, which is only an example and not a specific limitation.

[0070] In this embodiment, after determining the position deviation information and the direction deviation information, in response to the target relationship indicating that the current communication address is different from the preset communication address, the first total frequency is less than the first threshold and greater than or equal to the second threshold, and no abnormal information exists regarding the current communication address, the level is determined to be the second level. Optionally, based on the determination of the target relationship, if the target relationship indicates that the current communication address is different from the preset communication address, and the comparison result indicates that the first total frequency is less than the first threshold value among the frequency threshold values and greater than or equal to the second threshold value among the frequency threshold values, the level is determined to be the second level. Since the level of the current communication address has been determined, the purpose of grading the current communication address is achieved, thereby achieving the technical effect of improving the security of accessing vehicle data through the communication address.

[0071] In this embodiment, the third level may be lower than the second level, and the third level may be used to indicate that the current communication address is an unfamiliar IP.

[0072] In this embodiment, after determining the position deviation information and the direction deviation information, in response to the target relationship indicating that the current communication address is different from the preset communication address and the first total frequency is less than the second threshold, the level is determined to be the third level. Alternatively, in this embodiment, based on the determination of the target relationship, if the target relationship indicates that the current communication address is different from the preset communication address and the comparison result indicates that the first total frequency is less than the second threshold value among the frequency thresholds, the level is determined to be the third level. By determining the level of the current communication address, the purpose of grading the current communication address is achieved, thereby achieving the technical effect of improving the security of accessing vehicle data through the communication address.

[0073] The following further introduces the method for determining the access rights for accessing the operating data at the above level in this embodiment.

[0074] As an optional embodiment, step S104 determines the access rights for accessing the running data at different levels, including: at the first level, determining the access rights as the first access rights; at the second level, determining the access rights as the second access rights; at the third level, determining the access rights as the third access rights.

[0075] In this embodiment, the first access permission may be used to allow access to the operating data through the current communication address at the current moment.

[0076] In this embodiment, after determining the level of the current communication address based on the first total frequency, the access permission is determined to be the first access permission at the first level. Optionally, in this embodiment, if the level of the current communication address is the first level, the access permission for accessing the operating data is determined to be the access permission compatible with the first level. In other words, the access permission for accessing the operating data is determined to be the first access permission. Since the access permission for accessing the operating data varies at different levels, the corresponding access permission can be determined based on different current communication addresses, thereby achieving the technical effect of improving the security of accessing vehicle data via the communication address.

[0077] In this embodiment, the second access permission may be used to allow access to part of the operating data through the current communication address at the current moment, wherein the part of the operating data may be used to represent sensitive data in the vehicle computer data.

[0078] In this embodiment, after determining the level of the current communication address based on the first total frequency, the access permission is determined to be the second access permission at the second level. Optionally, in this embodiment, if the level of the current communication address is the second level, the access permission for accessing the operating data is determined to be the access permission compatible with the second level. In other words, the access permission for accessing the operating data is determined to be the second access permission. Since the access permission for accessing the operating data varies at different levels, the corresponding access permission can be determined based on different current communication addresses, thereby achieving the technical effect of improving the security of accessing vehicle data via the communication address.

[0079] In this embodiment, the third access right can be used to allow access to the remaining operating data in the operating data except for part of the operating data through the current communication address at the current moment. The remaining operating data can be used to represent non-sensitive data in the vehicle computer data. The non-sensitive data may include: in-vehicle environment data and out-vehicle environment data. The in-vehicle environment data may include: in-vehicle temperature and in-vehicle humidity, etc. The out-vehicle environment data may include: out-vehicle weather and out-vehicle noise, etc. The third access right can be used to allow access to non-sensitive data through the current communication address at the current moment. For example, the third access right can be used to allow access to the vehicle's weather application programming interface (API) data through the current communication address at the current moment.

[0080] In this embodiment, after determining the level of the current communication address based on the first total frequency, the access permission is determined to be the third access permission at the third level. Optionally, in this embodiment, if the level of the current communication address is the third level, the access permission for accessing the operating data is determined to be the access permission compatible with the third level. In other words, the access permission for accessing the operating data is determined to be the third access permission. Since the access permission for accessing the operating data varies at different levels, the corresponding access permission can be determined based on different current communication addresses, thereby achieving the technical effect of improving the security of accessing vehicle data via the communication address.

[0081] The following further describes the method of accessing the operating data that meets the access rights through the current communication address according to the access policy that matches the access rights in this embodiment.

[0082] As an optional implementation method, the method also includes: determining a first access policy that matches the first access permission as the access policy, and determining the running data as the running data that satisfies the first access permission; accessing the running data that satisfies the access permission through the current communication address according to the access policy that matches the access permission, including: accessing the running data through the current communication address according to the first access policy.

[0083] In this embodiment, the first access policy that matches the first access right is determined as the access policy, and the operating data is determined to be operating data that satisfies the first access right. Optionally, based on determining that the access right is the first access right, this embodiment further determines the first access policy that matches the first access right as the access policy, and determines the operating data to be accessed as operating data that satisfies the first access right. This achieves the purpose of determining the corresponding operating data to be accessed based on different current communication addresses, thereby achieving the technical effect of improving the security of vehicle data access.

[0084] In this embodiment, after determining the first access policy that matches the first access permission as the access policy and determining the operating data as the operating data that satisfies the first access permission, the operating data is accessed via the current communication address in accordance with the first access policy. Alternatively, in this embodiment, based on the determination of the access policy and the operating data, the operating data is accessed via the current communication address in accordance with the first access policy. Since the operating data to be accessed via the current communication address can be determined based on the access permission, the corresponding operating data to be accessed can be determined based on different current communication addresses, thereby achieving the technical effect of improving the security of vehicle data access.

[0085] Optionally, if the first access policy matching the first access permission is an HTTPS-based access policy, the operation data is accessed through the current communication address according to the HTTPS-based access policy.

[0086] The following further describes the method of accessing the operating data that meets the access rights through the current communication address according to the access policy that matches the access rights in this embodiment.

[0087] As an optional implementation method, the method also includes: determining a second access policy that matches the second access permission as the access policy, and determining part of the running data as the running data that satisfies the second access permission; accessing the running data that satisfies the access permission through the current communication address according to the access policy that matches the access permission, including: accessing part of the running data through the current communication address according to the second access policy.

[0088] In this embodiment, the second access policy that matches the second access permission is determined as the access policy, and the portion of the operating data is determined to satisfy the second access permission. Optionally, based on determining that the access permission is the second access permission, this embodiment further determines the second access policy that matches the second access permission as the access policy, and determines the portion of the operating data to satisfy the second access permission. This achieves the purpose of determining the corresponding operating data to be accessed based on different current communication addresses, thereby achieving the technical effect of improving the security of vehicle data access.

[0089] In this embodiment, after determining the second access policy that matches the second access permission as the access policy and determining the portion of operating data as operating data that satisfies the second access permission, the portion of operating data is accessed via the current communication address in accordance with the second access policy. Alternatively, this embodiment, based on the determination of the access policy and operating data, accesses the portion of operating data via the current communication address in accordance with the second access policy. Since the operating data to be accessed via the current communication address can be determined based on the access permission, the purpose of determining the corresponding operating data to be accessed based on different current communication addresses is achieved, thereby achieving the technical effect of improving the security of vehicle data access.

[0090] Optionally, if the second access policy matching the second access permission is an access policy based on AES encryption, the sensitive data is accessed through the current communication address according to the access policy based on AES encryption.

[0091] The following further describes the method of accessing the operating data that meets the access rights through the current communication address according to the access policy that matches the access rights in this embodiment.

[0092] As an optional implementation method, the method also includes: determining a third access policy that matches the third access permission as the access policy, and determining the remaining running data as the running data that satisfies the third access permission; accessing the running data that satisfies the access permission through the current communication address according to the access policy that matches the access permission, including: accessing the remaining running data through the current communication address according to the third access policy.

[0093] In this embodiment, the third access policy that matches the third access right is determined as the access policy, and the remaining operating data is determined as the operating data that satisfies the third access right. Optionally, based on determining that the access right is the third access right, this embodiment also determines the third access policy that matches the third access right as the access policy, and determines the remaining operating data as the operating data that satisfies the third access right. This achieves the purpose of determining the corresponding operating data to be accessed based on different current communication addresses, thereby achieving the technical effect of improving the security of vehicle data access.

[0094] In this embodiment, after determining the third access policy that matches the third access permission as the access policy and determining the remaining operating data as operating data that satisfies the third access permission, the remaining operating data is accessed through the current communication address in accordance with the third access policy. Alternatively, this embodiment, based on the determination of the access policy and operating data, accesses the remaining operating data through the current communication address in accordance with the third access policy. Because the operating data to be accessed through the current communication address can be determined based on the access permission, the purpose of determining the corresponding operating data to be accessed based on different current communication addresses is achieved, thereby achieving the technical effect of improving the security of vehicle data access.

[0095] Optionally, if the third access policy that matches the third access right is an access policy that does not require encryption and authentication, then the sensitive data can be directly accessed through the current communication address according to the access policy that does not require encryption and authentication.

[0096] The data access method for the vehicle described above in this embodiment is further described below.

[0097] As an optional embodiment, the method also includes: in response to the level being the second level, recording the second total frequency of access to the operating data through the current communication address after the current moment; in response to the second total frequency being less than the second threshold, adjusting the level to the third level; or, in response to the second total frequency being less than the first threshold, greater than or equal to the second threshold, and there being abnormal information, adjusting the level to the third level.

[0098] In this embodiment, the second total frequency may be used to represent the total frequency of accessing the operating data through the current communication address after the current moment.

[0099] In this embodiment, in response to the level being the second level, a second total frequency of accesses to the operational data via the current communication address after the current moment is recorded. Optionally, this embodiment determines the relationship between the level of the current communication address and the second and third levels. If the level of the current communication address is determined to be the second level, the second total frequency of accesses to the operational data via the current communication address after the current moment is recorded. This achieves the purpose of calculating the total frequency of accesses to the operational data by the current communication address.

[0100] In this embodiment, in response to the second level being the second total frequency of accesses to operating data through the current communication address after the current moment being recorded, the level is adjusted to the third level in response to the second total frequency being less than the second threshold; or, in response to the second total frequency being less than the first threshold, greater than or equal to the second threshold, and the presence of abnormal information. Optionally, based on the recording of the second total frequency, this embodiment determines the relationship between the second total frequency and the first and second thresholds in the frequency thresholds. If it is determined that the second total frequency is less than the second threshold in the frequency thresholds, the level of the current communication address is adjusted to the third level; or, if it is determined that the second total frequency is less than the first threshold in the frequency thresholds, greater than or equal to the second threshold in the frequency thresholds, and the presence of abnormal information, the level of the current communication address is adjusted to the third level. Since the level of the current communication address can be dynamically adjusted, the purpose of intelligently raising and lowering the level of the current communication address is achieved, thereby achieving the technical effect of improving the security of vehicle data access.

[0101] Optionally, when the first threshold is 900 and the second threshold is 110, if the second total frequency of general IP access to running data is less than 110, the level of the current communication address is adjusted to the third level; or, if the second total frequency of general IP access to running data is less than 900 and greater than or equal to 110, and there is abnormal information, the level of the current communication address is adjusted to the third level. The numerical values here are only for illustration and are not specifically limited.

[0102] The data access method for the vehicle described above in this embodiment is further described below.

[0103] As an optional embodiment, the method also includes: in response to the level being the third level, recording the second total frequency of accessing the operating data through the current communication address after the current moment; in response to the second total frequency being less than the first threshold, greater than or equal to the second threshold, and there being no abnormal information, adjusting the level to the second level.

[0104] In this embodiment, in response to the level being the third level, a second total frequency of accesses to the operational data via the current communication address after the current moment is recorded. Optionally, this embodiment determines the relationship between the level of the current communication address and the second and third levels. If the level of the current communication address is determined to be the third level, the second total frequency of accesses to the operational data via the current communication address after the current moment is recorded. This achieves the purpose of calculating the total frequency of accesses to the operational data by the current communication address.

[0105] In this embodiment, in response to the level being the third level, after recording the second total frequency of accesses to operating data through the current communication address after the current moment, and in response to the second total frequency being less than the first threshold, greater than or equal to the second threshold, and no abnormal information being present, the level is adjusted to the second level. Optionally, this embodiment, based on the recording of the second total frequency, determines the relationship between the second total frequency and the first and second thresholds in the frequency thresholds. If it is determined that the second total frequency is less than the first threshold in the frequency thresholds, greater than or equal to the second threshold in the frequency thresholds, and no abnormal information being present, the level of the current communication address is adjusted to the second level. Since the level of the current communication address can be dynamically adjusted, the purpose of intelligently raising and lowering the level of the current communication address is achieved, thereby achieving the technical effect of improving the security of vehicle data access.

[0106] Optionally, when the first threshold is 999 and the second threshold is 111, if the second total frequency of access to the running data by the unfamiliar IP is less than 999 and greater than or equal to 111, and there is no abnormal information, the level of the current communication address is adjusted to the second level. The numerical value here is only for illustration and is not specifically limited.

[0107] The data access method for the vehicle described above in this embodiment is further described below.

[0108] As an optional embodiment, the method also includes: recording the first initial total frequency of accessing the operating data through the current communication address before the current moment; according to the target period, using the attenuation parameter corresponding to the target period, attenuating the first initial total frequency to obtain the first total frequency.

[0109] In this embodiment, the target period may be, but is not limited to, 7 days.

[0110] In this embodiment, the attenuation parameter may be used to represent a parameter for attenuating the frequency according to a period. For example, the attenuation parameter may also be a time attenuation factor, which may be represented by λ=0.8 / period.

[0111] In this embodiment, a first initial total frequency of accesses to operational data via the current communication address before the current moment is recorded; the first initial total frequency is attenuated according to a target period using an attenuation parameter corresponding to the target period to obtain a first total frequency. Alternatively, this embodiment first records the first initial total frequency of accesses to operational data via the current communication address before the current moment, then determines an attenuation parameter corresponding to the target period; and according to the target period, attenuates the first initial total frequency using the determined attenuation parameter to obtain the first total frequency. By attenuating the first initial total frequency, the purpose of preventing long-term inactive communication addresses from occupying resources is achieved, thereby achieving the technical effect of improving the efficiency of vehicle data access.

[0112] Optionally, when the target period is 7 days, the attenuation parameter corresponding to the target period is λ = 0.8 / 7 = 0.114. Using the attenuation parameter of 0.114, the first initial total frequency is automatically attenuated by 20% of the total frequency per sliding period to obtain a first total frequency. The numerical value here is for illustration only and is not intended to be a specific limitation.

[0113] In an embodiment of the present invention, when accessing the data of a vehicle, the current communication address at the current moment can be obtained, and then the first total frequency of accessing the operating data through the obtained current communication address before the current moment can be determined. Based on the determined first total frequency, the level of the current communication address can be determined, and under the determined level, the access rights for accessing the operating data can be determined, and according to the access policy that matches the access rights, the operating data that meets the access rights can be accessed through the current communication address. Since the embodiment of the present application can determine the level of the current communication address after obtaining the current communication address based on the determined first total frequency of accessing the operating data through the current communication address before the current moment, and under the determined level, the access rights for accessing the operating data can be determined, and according to the access policy that matches the access rights, the operating data that meets the access rights can be accessed through the current communication address, thereby achieving the purpose of being able to cope with the dynamic security requirements in complex communication scenarios such as vehicle computers and T-BOXs, cloud services, etc., thereby solving the technical problem of low security of vehicle data access, and further achieving the technical effect of improving the security of vehicle data access.

[0114] The technical solutions of the embodiments of the present invention are described below with reference to preferred implementation methods.

[0115] Currently, because the in-vehicle computers of intelligent connected vehicles generally use the Android system, there is a huge threat to the data security of the in-vehicle computers. In the existing technology, traditional firewalls are often used to maintain the data security of the in-vehicle computers.

[0116] However, the above maintenance method is difficult to cope with the dynamic security requirements in complex communication scenarios such as vehicle computers, T-BOX, and cloud services, resulting in technical problems such as low security of vehicle data access.

[0117] In order to solve the above technical problems, an embodiment of the present invention proposes a vehicle data access method. After obtaining the current communication address at the current moment, the level of the current communication address is determined according to the first total frequency of accessing the operating data through the current communication address before the current moment. Under the determined level, the access rights for accessing the operating data are determined, and the operating data that meets the access rights is accessed according to the access policy that matches the access rights. This achieves the purpose of being able to cope with dynamic security requirements in complex communication scenarios such as vehicle computers and T-BOXs, cloud services, etc., thereby solving the technical problem of low security of vehicle data access, and further achieving the technical effect of improving the security of vehicle data access.

[0118] In this embodiment, the vehicle information security protection system of the intelligent connected vehicle based on IP access management can access the operating data that meets the access rights through the current communication address according to the access policy that matches the access rights. Figure 2 is a schematic diagram of a vehicle information security protection system for an intelligent connected vehicle based on IP access management according to an embodiment of the present invention. Figure 2 As shown, the system 200 may include: a vehicle computer 201 and an IP management pool 2011. The IP management pool 2011 may store unfamiliar IPs (N < 100), general IPs (100 < N < 1000), and preset IPs (1000 < N). The unfamiliar IPs are IPs restricted by default, the general IPs are dynamically trusted IPs, and the preset IPs are fixed trusted IPs.

[0119] In the aforementioned intelligent connected vehicle information security protection system 200 based on IP access management, there are three levels of dynamic IP permission management. These three levels of dynamic IPs can include: Pre-configured IPs, which are on a factory-hardened high-trust list (e.g., TBOX / Telematics Service Provider (TSP) / critical sensors), allowing access to sensitive data and requiring two-way certificate authentication; General IPs, which are dynamically updated, high-frequency interactive IPs and allow access to sensitive data but require AES-128 encryption and verification; and Unknown IPs, which are in an isolated zone by default and only allow access to public services, i.e., only basic information queries, such as weather API queries, are allowed.

[0120] In this embodiment, in order to prevent the core device (eg, TBOX) from being forged, a digital certificate or a hardware security module (HSM) is used to store the threshold IP.

[0121] In this embodiment, the access rights for a preset IP address allow access to the vehicle computer data through the preset IP address at the current moment. The access rights for a general IP address allow access to sensitive data within the vehicle computer data through the general IP address at the current moment. The access rights for an unfamiliar IP address allow access to operational data within the vehicle computer data, excluding sensitive data, through the unfamiliar IP address at the current moment.

[0122] In this embodiment, an intelligent promotion and demotion mechanism is introduced for general IPs and unfamiliar IPs. That is to say, a sliding time window algorithm is introduced: a fixed period is replaced by a statistical period of 7 days, and the N value is dynamically calculated to avoid long-term cumulative deviations; a dual trigger condition for upgrade is set: when both the access frequency (that is, the N value threshold (for example, 1000)) and the behavior compliance check (for example, no abnormal requests) are met, the unfamiliar IP can be upgraded to a general IP. The trigger condition for risk linkage demotion is set: when the general IP has not accessed the operating data for 30 days, or the first total frequency decays to less than the second threshold, or the associated service of the general IP has more than 3 security alarms, the general IP will be immediately downgraded to an unfamiliar IP. The numerical value here is only for example and is not specifically limited.

[0123] This embodiment introduces a security enhancement policy for IP addresses. Specifically, pre-set IP addresses are dynamically verified using digital certificates and heartbeat packets to verify their authenticity, thus preventing IP forgery. A sandbox mechanism is used to authenticate general IP addresses, with virtual channels enabled for IP addresses with a value of 100 ≤ N < 1000. Sensitive operations require secondary authentication. Furthermore, an intelligent IP cleanup policy is introduced. Unknown IP addresses are automatically cleared after 30 days of no interaction. Dynamic IP addresses are automatically decremented by 20% of their N value with each sliding cycle. A time decay factor (λ = 0.8 / cycle) is incorporated into the N value calculation to ensure that newly active IP addresses receive appropriate weighting.

[0124] In this embodiment, the number of visits to the vehicle's operating data by unfamiliar IP addresses is lower than that by general IP addresses; the number of visits to the vehicle's operating data by general IP addresses is lower than that by preset IP addresses. The frequency of visits to the vehicle's operating data by unfamiliar IP addresses is lower than that by general IP addresses; the frequency of visits to the vehicle's operating data by general IP addresses is lower than that by preset IP addresses.

[0125] In this embodiment, all relevant data of unfamiliar IPs are cleared every 24 hours, all relevant data of general IPs are cleared every 24*7 hours, and relevant non-sensitive data of preset IPs are cleared. In addition, sensitive data of preset IPs cannot be cleared regularly and can only be cleared manually.

[0126] In this embodiment, when accessing vehicle data, after obtaining the current communication address, the level of the current communication address can be determined based on the first total frequency of accessing the operating data through the current communication address before the current moment. Under the determined level, the access rights for accessing the operating data can be determined, and according to the access policy that matches the access rights, the operating data that meets the access rights can be accessed through the current communication address. This achieves the purpose of being able to cope with dynamic security requirements in complex communication scenarios such as vehicle computers and T-BOXs, cloud services, etc., thereby solving the technical problem of low security of vehicle data access, and further achieving the technical effect of improving the security of vehicle data access.

[0127] According to an embodiment of the present invention, a vehicle control device is further provided. It should be noted that the vehicle control device can be used to execute a vehicle control method in the embodiment.

[0128] Figure 3 FIG. 1 is a schematic diagram of a data access device for a vehicle according to an embodiment of the present invention. Figure 3As shown, the vehicle data access device 300 may include: an acquisition unit 301 , a first determination unit 302 , a second determination unit 303 , a third determination unit 304 and an access unit 305 .

[0129] The acquisition unit 301 is used to acquire the current communication address at the current moment, wherein the current communication address is used to access the operation data of the vehicle.

[0130] The first determining unit 302 is configured to determine a first total frequency of accessing the operating data through the current communication address before the current moment.

[0131] The second determining unit 303 is configured to determine a level of the current communication address based on the first total frequency, wherein the level is used to indicate a degree of confidence of the vehicle in the current communication address.

[0132] The third determining unit 304 is configured to determine access rights for accessing the operating data at the level.

[0133] The access unit 305 is configured to access the running data that meets the access permission through the current communication address according to the access policy that matches the access permission, wherein the access policy is used to represent the rules for accessing the running data that meets the access permission.

[0134] Optionally, the second determining unit 303 may include: a first determining module, configured to determine a target relationship between the current communication address and a preset communication address; and a second determining module, configured to determine a level based on the target relationship and the first total frequency.

[0135] Optionally, the second determination module may include: a determination submodule, for determining that the level is the first level in response to the target relationship indicating that the current communication address is the same as the preset communication address and the first total frequency is greater than or equal to the first threshold; determining that the level is the second level in response to the target relationship indicating that the current communication address is different from the preset communication address, the first total frequency is less than the first threshold, greater than or equal to the second threshold, and there is no abnormal information of the current communication address, wherein the second threshold is less than the first threshold, the second level is lower than the first level, and the abnormal information is used to indicate abnormal access to data through the current communication address; determining that the level is the third level in response to the target relationship indicating that the current communication address is different from the preset communication address and the first total frequency is less than the second threshold, wherein the third level is lower than the second level.

[0136] Optionally, the third determination unit 304 may include: a third determination module, used to determine, at the first level, the access permission as the first access permission, wherein the first access permission is used to allow access to the operating data through the current communication address at the current moment; a fourth determination module, used to determine, at the second level, the access permission as the second access permission, wherein the second access permission is used to allow access to part of the operating data in the operating data through the current communication address at the current moment; a fifth determination module, used to determine, at the third level, the access permission as the third access permission, wherein the third access permission is used to allow access to the remaining operating data in the operating data except part of the operating data through the current communication address at the current moment.

[0137] Optionally, the data access device 300 of the vehicle may include: a fourth determination unit, used to determine the first access strategy matching the first access permission as the access strategy, and determine the operating data as the operating data that satisfies the first access permission; the access unit 305 can access the operating data that satisfies the access permission through the current communication address in accordance with the access strategy matching the access permission by executing the following steps: access the operating data through the current communication address in accordance with the first access strategy.

[0138] Optionally, the data access device 300 of the vehicle may include: a fifth determination unit, used to determine the second access strategy matching the second access permission as the access strategy, and determine part of the operating data as the operating data that meets the second access permission; the access unit 305 can access the operating data that meets the access permission through the current communication address in accordance with the access strategy matching the access permission by executing the following steps: access part of the operating data through the current communication address in accordance with the second access strategy.

[0139] Optionally, the data access device 300 of the vehicle may include: a sixth determination unit, used to determine a third access strategy that matches the third access permission as the access strategy, and determine the remaining operating data as operating data that meets the third access permission; the access unit 305 can access the operating data that meets the access permission through the current communication address in accordance with the access strategy that matches the access permission by executing the following steps: access the remaining operating data through the current communication address in accordance with the third access strategy.

[0140] Optionally, the data access device 300 of the vehicle may include: a first recording unit, for recording the second total frequency of accessing the operating data through the current communication address after the current moment in response to the level being the second level; a first adjustment unit, for adjusting the level to the third level in response to the second total frequency being less than the second threshold; or, in response to the second total frequency being less than the first threshold, greater than or equal to the second threshold, and there being abnormal information, adjusting the level to the third level.

[0141] Optionally, the vehicle's data access device 300 may include: a second recording unit for recording, in response to the level being the third level, the second total frequency of accessing the operating data through the current communication address after the current moment; a second adjustment unit for adjusting the level to the second level in response to the second total frequency being less than the first threshold, greater than or equal to the second threshold, and there being no abnormal information.

[0142] Optionally, the vehicle's data access device 300 may include: a third recording unit, used to record the first initial total frequency of accessing the operating data through the current communication address before the current moment; an attenuation unit, used to attenuate the first initial total frequency according to the target period using an attenuation parameter corresponding to the target period to obtain a first total frequency.

[0143] In this embodiment, an acquisition unit is used to obtain a current communication address at a current moment, wherein the current communication address is used to access the vehicle's operating data; a first determination unit is used to determine a first total frequency of accessing the operating data through the current communication address before the current moment; a second determination unit is used to determine a level of the current communication address based on the first total frequency, wherein the level is used to indicate the degree of confidence the vehicle has in the current communication address; a third determination unit is used to determine the access rights for accessing the operating data under the level; an access unit is used to access the operating data that meets the access rights through the current communication address in accordance with an access policy that matches the access rights, wherein the access policy is used to indicate the rules for accessing the operating data that meets the access rights, thereby achieving the purpose of coping with dynamic security requirements in complex communication scenarios such as vehicle computers and T-BOXs, cloud services, etc., thereby solving the technical problem of low security of vehicle data access, and further achieving the technical effect of improving the security of vehicle data access.

[0144] According to an embodiment of the present invention, an electronic device is further provided. Figure 4 is a schematic diagram of an electronic device according to an embodiment of the present invention, such as Figure 4 As shown, the electronic device 400 may include a processor 410 and a memory 420, wherein the memory 410 is used to store computer programs; the processor 420 is used to run the programs stored in the memory 410 to implement the vehicle data access method of the present application.

[0145] In this application, a plurality refers to two or more.

[0146] In this application, unless otherwise expressly defined, the terms "mounted," "connected," and "connected" should be interpreted broadly. For example, they can refer to fixed, detachable, or integral connections; mechanical or electrical connections; direct or indirect connections through an intermediary; and internal communication between two components. A person of ordinary skill in the art will understand the specific meanings of these terms in this application.

[0147] The terms "first," "second," "third," "fourth," etc. (if any) in this application are used to distinguish similar objects and are not necessarily used to describe a particular sequential order.

[0148] The term "and / or" in this application simply describes an association between related objects, indicating that three possible relationships exist. For example, A and / or B can represent: A exists alone, A and B exist simultaneously, and B exists alone. In addition, the character " / " in this application generally indicates that the related objects are in an "or" relationship.

[0149] Unless otherwise specified, all steps of the present application may be performed sequentially or randomly. For example, the vehicle control method of the present application may include step S101 and step S102, which means that the vehicle control method of the present application may include step S101 and step S102 performed sequentially, or may include step S102 and step S101 performed sequentially. For example, the vehicle control method of the present application may also include step S103, which means that step S103 may be added to the method in any order. For example, the vehicle control method of the present application may include step S101, step S102 and step S103, or may include step S101, step S103 and step S102, or may include step S103, step S101 and step S102, etc.

[0150] According to an embodiment of the present invention, a processor is further provided, which is used to run a program, wherein the program executes the vehicle data access method in the embodiment when the program is run by the processor.

[0151] According to an embodiment of the present invention, an electronic device is further provided, comprising: a memory storing a computer program; and a processor for running the computer program, wherein the vehicle data access method of the embodiment is executed when the computer program is running.

[0152] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium includes a stored program, wherein when the program is executed, the device where the computer-readable storage medium is located is controlled to execute the vehicle data access method of the embodiment.

[0153] According to an embodiment of the present invention, a computer program product is further provided. The computer program product includes a computer program. When the computer program is executed by a processor, the vehicle data access method in the embodiment is implemented.

[0154] According to an embodiment of the present invention, a computer program product is also provided, including a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium is used to store a computer program, and when the computer program is executed by a processor, the vehicle data access method in the embodiment is implemented.

[0155] According to an embodiment of the present invention, a computer program is further provided. When the computer program is executed by a processor, the vehicle data access method in the embodiment is implemented.

[0156] The serial numbers of the above embodiments of the present invention are for description only and do not represent the advantages or disadvantages of the embodiments.

[0157] In the above embodiments of the present invention, the description of each embodiment has its own focus. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0158] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only exemplary. For example, the division of units can be a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0159] Units described as separate components may or may not be physically separate, and components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple units. Some or all of the units may be selected to achieve the purpose of the present embodiment according to actual needs.

[0160] In addition, the functional units in the various embodiments of the present invention may be integrated into a single processing unit, each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0161] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the relevant technology, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the various embodiments of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, abbreviated as Read-Only Memory), random access memory (RAM, abbreviated as Random Access Memory), mobile hard disk, magnetic disk or optical disk, and other media that can store program code.

[0162] The above are only preferred embodiments of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A vehicle data access method, characterized in that: include: Obtaining a current communication address at a current moment, wherein the current communication address is used to access vehicle operation data; determining a first total frequency of accesses to the operational data through the current communication address before the current moment; determining a level of the current communication address based on the first total frequency, wherein the level is used to represent a degree of confidence of the vehicle in the current communication address; determining access rights for accessing the operating data at the level; According to an access policy matching the access permission, the operating data that meets the access permission is accessed through the current communication address, wherein the access policy is used to represent a rule for accessing the operating data that meets the access permission.

2. The method according to claim 1, characterized in that Determining a level of the current communication address based on the first total frequency includes: Determining a target relationship between the current communication address and a preset communication address; The rank is determined based on the target relationship and the first total frequency.

3. The method according to claim 2, characterized in that Determining the level based on the target relationship and the first total frequency includes: In response to the target relationship indicating that the current communication address is the same as the preset communication address, and the first total frequency is greater than or equal to a first threshold, determining that the level is the first level; In response to the target relationship indicating that the current communication address is different from the preset communication address, the first total frequency is less than the first threshold and greater than or equal to a second threshold, and there is no abnormal information of the current communication address, determining that the level is the second level, wherein the second threshold is less than the first threshold, the second level is lower than the first level, and the abnormal information is used to indicate abnormal access to the data through the current communication address; In response to the target relationship indicating that the current communication address is different from the preset communication address and the first total frequency is less than the second threshold, the level is determined to be a third level, wherein the third level is lower than the second level.

4. The method according to claim 3, characterized in that At the level, access rights for accessing the operating data are determined, including: At the first level, determining the access permission as a first access permission, wherein the first access permission is used to allow access to the operating data through the current communication address at the current moment; At the second level, determining the access permission as a second access permission, wherein the second access permission is used to allow access to part of the operating data through the current communication address at the current moment; At the third level, the access permission is determined to be a third access permission, wherein the third access permission is used to allow access to the remaining operating data except the partial operating data in the operating data through the current communication address at the current moment.

5. The method according to claim 4, characterized in that The method further comprises: determining a first access policy that matches the first access permission as the access policy, and determining the operating data as operating data that satisfies the first access permission; Accessing the operating data that meets the access permission through the current communication address according to the access policy that matches the access permission includes: accessing the operating data through the current communication address according to the first access policy.

6. The method according to claim 4, characterized in that The method further comprises: determining a second access policy that matches the second access permission as the access policy, and determining the portion of the operating data as operating data that satisfies the second access permission; Accessing the operating data that meets the access permission through the current communication address according to the access policy matching the access permission includes: accessing the part of the operating data through the current communication address according to the second access policy.

7. The method according to claim 4, characterized in that The method further comprises: determining a third access policy that matches the third access permission as the access policy, and determining the remaining operating data as operating data that satisfies the third access permission; Accessing the operating data that meets the access permission through the current communication address according to the access policy matching the access permission includes: accessing the remaining operating data through the current communication address according to the third access policy.

8. The method according to claim 3, characterized in that The method further comprises: In response to the level being the second level, recording a second total frequency of accesses to the operating data through the current communication address after the current moment; In response to the second total frequency being less than the second threshold, the level is adjusted to the third level; or, in response to the second total frequency being less than the first threshold, greater than or equal to the second threshold, and the abnormal information being present, the level is adjusted to the third level.

9. The method according to claim 3, characterized in that The method further comprises: In response to the level being the third level, recording a second total frequency of accesses to the operating data through the current communication address after the current moment; In response to the second total frequency being less than the first threshold and greater than or equal to a second threshold, and the abnormal information not existing, the level is adjusted to the second level.

10. The method according to any one of claims 1 to 9, characterized in that The method further comprises: Recording a first initial total frequency of accessing the operating data through the current communication address before the current moment; According to a target period, the first initial total frequency is attenuated using an attenuation parameter corresponding to the target period to obtain the first total frequency.

11. A data access device for a vehicle, characterized in that: include: an acquiring unit, configured to acquire a current communication address at a current moment, wherein the current communication address is used to access the operation data of the vehicle; a first determining unit, configured to determine a first total frequency of accessing the operating data through the current communication address before the current moment; a second determining unit, configured to determine a level of the current communication address based on the first total frequency, wherein the level is used to represent a degree of confidence of the vehicle in the current communication address; a third determining unit, configured to determine access rights for accessing the operating data at the level; An access unit is configured to access the operating data that meets the access permission through the current communication address according to an access policy that matches the access permission, wherein the access policy is used to represent a rule for accessing the operating data that meets the access permission.

12. A processor, characterized in that: The processor is configured to run a program, wherein the program, when run by the processor, executes the vehicle data access method according to any one of claims 1 to 10.

13. An electronic device, characterized in that: include: a memory storing an executable program; A processor is used to run the program, wherein the vehicle data access method according to any one of claims 1 to 10 is executed when the program is run.

Images