Data processing method and device, electronic equipment, vehicle and storage medium

Abstract

The embodiment of the invention discloses a data processing method and device, electronic equipment, a vehicle and a storage medium. The method comprises the steps of obtaining to-be-encrypted target data; determining a target encryption algorithm used during target data encryption through the Markov chain parameters; and based on the target encryption algorithm, encrypting the target data to obtain encrypted data. Therefore, the target encryption algorithm used when the target data is encrypted is determined through the Markov chain parameter, so that the target data is encrypted according to the target encryption algorithm, the randomness of the encryption algorithm used when the target data is encrypted can be improved, the encrypted target data is not easy to crack, and the encryption efficiency of the target data is improved. And the data security is improved.

Description

Technical Field

[0001] The present application relates to the field of data processing, and in particular to a data processing method, device, electronic device, vehicle and storage medium. Background Art

[0002] In intelligent driving scenarios, various sensors are required to collect various vehicle-related data to achieve intelligent driving. To ensure the information security of the vehicle and the driver, the collected data needs to be encrypted. In existing data processing methods, encryption algorithms such as symmetric and asymmetric encryption algorithms are often used to encrypt the collected data.

[0003] During the research and practice of the existing technology, it was found that when the existing data processing method is used to encrypt data, the encrypted data is still very easy to be cracked, resulting in poor data security. Summary of the Invention

[0004] The embodiments of the present application provide a data processing method, device, electronic device, vehicle and storage medium, which can improve the randomness of the encryption algorithm used when encrypting target data, thereby making the encrypted target data difficult to crack, thereby improving data security.

[0005] In order to achieve the above-mentioned object, according to a first aspect of the present application, a data processing method is provided, the method comprising:

[0006] Obtain target data to be encrypted;

[0007] Determining a target encryption algorithm used when encrypting the target data through Markov chain parameters;

[0008] The target data is encrypted based on the target encryption algorithm to obtain encrypted data.

[0009] According to a second aspect of the present application, a data processing method is provided, the method comprising:

[0010] Get the Markov chain parameters used when encrypting encrypted data;

[0011] Determining a target encryption algorithm to be used when encrypting the encrypted data based on the Markov chain parameters;

[0012] Based on the target encryption algorithm, the encrypted data is decrypted to obtain decrypted data.

[0013] According to a third aspect of the present application, a data processing device is provided, comprising:

[0014] A first acquisition module, configured to acquire target data to be encrypted;

[0015] A first determining module is used to determine a target encryption algorithm used when encrypting the target data through a Markov chain parameter;

[0016] The encryption module is used to encrypt the target data based on the target encryption algorithm to obtain encrypted data.

[0017] According to a fourth aspect of the present application, a data processing device is provided, comprising:

[0018] The second acquisition module is used to obtain the Markov chain parameters used when encrypting the encrypted data;

[0019] A second determining module is configured to determine a target encryption algorithm used when encrypting the encrypted data based on the Markov chain parameters;

[0020] The decryption module is used to decrypt the encrypted data based on the target encryption algorithm to obtain decrypted data.

[0021] According to a fifth aspect of the present application, there is provided a data processing system, the data processing system comprising an encryption device and a decryption device;

[0022] The encryption device is used to execute the data processing method as described in the first aspect of this application;

[0023] The decryption device is used to execute the data processing method described in the second aspect of this application.

[0024] According to a sixth aspect of the present application, an electronic device is provided, comprising a processor and a memory, wherein the memory stores an application program, and the processor is configured to run the application program in the memory to implement the data processing method provided in an embodiment of the present application.

[0025] According to the seventh aspect of the present application, a vehicle is provided, which includes the electronic device provided by the third aspect of the present application or the data processing system provided by the fifth aspect.

[0026] According to an eighth aspect of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and the computer program is suitable for loading by a processor to execute the steps of any data processing method provided in the embodiments of the present application.

[0027] According to the ninth aspect of the present application, a computer program product is provided, which includes a computer program, and the computer program is stored in a computer-readable storage medium; when the processor of an electronic device reads the computer program from the computer-readable storage medium, the processor executes the computer program, so that the electronic device performs the steps in the data processing method provided in the embodiment of the present application.

[0028] In the data processing method, device, electronic device, vehicle, and storage medium of the embodiments of the present application, target data to be encrypted is obtained; a target encryption algorithm to be used when encrypting the target data is determined using Markov chain parameters; and the target data is encrypted based on the target encryption algorithm to obtain encrypted data. Thus, by determining the target encryption algorithm to be used when encrypting the target data using the Markov chain parameters, and then encrypting the target data based on the target encryption algorithm, the randomness of the encryption algorithm used when encrypting the target data can be improved, thereby making the encrypted target data less susceptible to decryption and thus improving data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0030] Figure 1 This is a schematic diagram of an implementation scenario of a data processing method provided in an embodiment of the present application;

[0031] Figure 2 This is a flow chart of a data processing method provided in an embodiment of the present application;

[0032] Figure 3 This is a schematic diagram of a specific architecture of a data processing method provided in an embodiment of the present application;

[0033] Figure 4a This is a schematic diagram of a specific flow of a data processing method provided in an embodiment of the present application;

[0034] Figure 4b This is another specific flow chart of a data processing method provided in an embodiment of the present application;

[0035] Figure 5 This is another flowchart of a data processing method provided by an embodiment of the present application;

[0036] Figure 6 is a structural diagram of a data processing device provided in an embodiment of the present application;

[0037] Figure 7 is another structural diagram of the data processing device provided in an embodiment of the present application;

[0038] Figure 8 It is a structural diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0039] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the embodiments described are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present application.

[0040] In the description of this application, the terms "first" and "second" are used for descriptive purposes only and should not be understood to indicate or imply relative importance or implicitly specify the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include one or more features. In the description of this application, "plurality" means two or more, unless otherwise specifically defined.

[0041] The embodiments of the present application provide a data processing method, device, electronic device, vehicle, and storage medium. The data processing device can be integrated into an electronic device, which can be a server, a terminal, or other device.

[0042] Among them, the server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, network acceleration services (Content Delivery Network, CDN), as well as basic cloud computing services such as big data and artificial intelligence platforms. Terminals may include but are not limited to mobile phones, computers, intelligent voice interaction devices, smart home appliances, vehicle-mounted terminals, aircraft, etc. Terminals and servers can be directly or indirectly connected through wired or wireless communication, and this application does not impose any restrictions on this.

[0043] The electronic device may be integrated into a vehicle, which may be a fuel vehicle, a plug-in hybrid vehicle, a new energy vehicle, etc. This application does not impose any specific limitation on this.

[0044] See also Figure 1 , taking the data processing device integrated into the electronic device as an example, Figure 1 This is a schematic diagram of an implementation scenario of the data processing method provided in an embodiment of the present application, wherein the electronic device can be integrated in a vehicle, and the electronic device can obtain target data to be encrypted; determine the target encryption algorithm used when encrypting the target data through Markov chain parameters; and encrypt the target data based on the target encryption algorithm to obtain encrypted data.

[0045] It should be noted that Figure 1The schematic diagram of the implementation environment scenario of the data processing method shown is merely an example. The implementation environment scenario of the data processing method described in the embodiments of this application is intended to more clearly illustrate the technical solutions of the embodiments of this application and does not constitute a limitation on the technical solutions provided by the embodiments of this application. Those skilled in the art will appreciate that with the evolution of data processing and the emergence of new business scenarios, the technical solutions provided in this application are equally applicable to similar technical problems.

[0046] The solutions provided in the embodiments of the present application are specifically described by the following embodiments. It should be noted that the description order of the following embodiments does not limit the preferred order of the embodiments.

[0047] This embodiment will be described from the perspective of a data processing device, which may be integrated into an electronic device.

[0048] See also Figure 2 , Figure 2 : is a flow chart of a data processing method provided in an embodiment of the present application. The data processing method includes:

[0049] Step S101: Obtain target data to be encrypted.

[0050] The target data may be data to be encrypted. For example, the target data may be data collected by a target device, such as data collected by a sensor provided in the target device. The target device may be a vehicle, an aircraft, a ship, or the like.

[0051] In one embodiment, the target data may be data collected by sensors in the vehicle, including data collected by a lidar sensor, data collected by a camera, and data collected via a bus, which may be a controller area network (CAN) bus. The data collected via the bus may be data transmitted by a CAN signal source. In this way, the required data collected by the vehicle's sensors can be used to generate plaintext data, which can then be temporarily stored in an industrial computer.

[0052] In one embodiment, the target data may include multiple types, and each type of target data has a different data source.

[0053] Optionally, each type of target data may be stored in a data acquisition package. Correspondingly, the step of obtaining the target data to be encrypted may include:

[0054] Obtain each type of target data to be encrypted from the data acquisition package.

[0055] The data acquisition package can be used to store the collected target data. The data acquisition package (DfBag) can be a database file, which can include a description of the corresponding data source (topic) in the data packet and specific information of each frame of data in each topic.

[0056] Step S102: Determine the target encryption algorithm used when encrypting the target data through the Markov chain parameters.

[0057] The Markov chain parameters may be parameters based on a Markov chain, for example, they may include a Markov matrix. The Markov matrix may include transition probabilities in the Markov chain, representing the probability of a system transitioning between different states. In the Markov chain of an embodiment of the present application, the states include a state in which a first encryption algorithm is selected to encrypt target data, and a state in which a second encryption algorithm is selected to encrypt target data. The Markov matrix includes the probability of selecting the first encryption algorithm to encrypt target data, and the probability of selecting the second encryption algorithm to encrypt target data. The complexity of the first encryption algorithm is greater than that of the second encryption algorithm. For example, the first encryption algorithm may be an encryption algorithm with a complexity of O(n), and the second encryption algorithm may be an encryption algorithm with a complexity of O(1). The encryption algorithm may be an algorithm for encrypting data, for example, it may be a chaotic mapping algorithm. The target encryption algorithm can be an algorithm for encrypting target data, for example, it can be a chaotic mapping algorithm such as piecewise linear chaotic mapping (PWLCM), sine mapping, Gaussian mapping, nonlinear dynamic system (tent) mapping, infinite folding iterative chaotic mapping (ICMIC), etc.

[0058] Among them, the time complexity of PWLCM is usually O(1), that is, constant time complexity. The time complexity of Sine mapping is also usually O(1) because the calculation of sine function is efficient and only requires a small number of calculation steps. Gaussian mapping usually involves the calculation of Gaussian distribution function, which may introduce higher time complexity, usually O(1) to O(n), where (n) is the amount of data processed or the accuracy. Tent mapping is nonlinear, and its computational complexity is usually O(1). ICMIC involves interpolation methods and control parameters, and its time complexity is usually higher, which may be O(n), where (n) is the number of steps or the amount of data mapped.

[0059] There are multiple ways to determine the target encryption algorithm used when encrypting the target data using Markov chain parameters. For example, the target encryption algorithm used in each encryption round of the target data can be determined using Markov chain parameters.

[0060] Among them, there can be multiple ways to determine the target encryption algorithm used by the target data in each encryption round through Markov chain parameters. For example, if the target data is data collected based on the target device, the Markov chain parameters corresponding to the target data can be determined based on the device association information of the target device. The Markov chain parameters include the initial probability of using at least two encryption algorithms to encrypt the target data; determining the number of encryption rounds corresponding to the target data; and determining the target encryption algorithm used by the target data in each encryption round from at least two encryption algorithms based on the Markov chain parameters and the number of encryption rounds.

[0061] The device-associated information may be information related to the target device, for example, including information such as the target device's load and environmental information. The load may include information such as the number of sensors in the target device used to collect target data and the data acquisition frame rate. The environmental information may indicate the environment in which the target device acquires target data, for example, including information such as cloudy, rainy, sunny, daytime, dusk, and nighttime. The initial probability may be the probability of encrypting the target data using at least two encryption algorithms. For example, assuming that the at least two encryption algorithms include a first encryption algorithm and a second encryption algorithm, the initial probability may include the probability of selecting the first encryption algorithm to encrypt the target data and the probability of selecting the second encryption algorithm to encrypt the target data. The number of encryption rounds may be the number of times the target data is encrypted.

[0062] Optionally, the at least two encryption algorithms may include at least one of a piecewise linear chaotic mapping algorithm, a sinusoidal mapping algorithm, a Gaussian mapping algorithm, a nonlinear dynamic system mapping algorithm, an infinite folding iterative chaotic mapping algorithm, and the like.

[0063] Among them, there are multiple ways to determine the Markov chain parameters corresponding to the target data based on the device association information of the target device. For example, based on the device association information of the target device, the initial probability of encrypting the target data using at least two encryption algorithms can be calculated; based on the initial probability corresponding to each encryption algorithm, the Markov matrix corresponding to the target data is determined as the Markov chain parameters corresponding to the target data.

[0064] Among them, based on the device association information of the target device, there can be multiple ways to calculate the initial probability of using at least two encryption algorithms to encrypt the target data. For example, the encryption algorithm may include a first encryption algorithm and a second encryption algorithm, and the complexity of the first encryption algorithm is greater than that of the second encryption algorithm. In this way, based on the device association information of the target device, the corresponding resource consumption constraint interval when encrypting the target data with the first encryption algorithm can be constructed; based on the resource consumption constraint interval, the initial probability of using the first encryption algorithm and the second encryption algorithm to encrypt the target data is calculated.

[0065] The first encryption algorithm may be a highly complex chaotic mapping algorithm such as Gaussian mapping or ICMIC mapping, and the second encryption algorithm may be a less complex chaotic mapping algorithm such as Sine mapping, PWLCM mapping, or tent mapping. The resource consumption constraint interval may be a condition constraining encryption of target data using the first encryption algorithm, and may be a linear constraint. The solution set interval may be an interval consisting of solution sets that satisfy the resource consumption constraint interval.

[0066] Among them, there can be multiple ways to construct the resource consumption constraint interval corresponding to when the target data is encrypted with the first encryption algorithm based on the device association information of the target device. For example, the target data includes multiple types, and the data source of each target data is different. Therefore, based on the device association information of the target device and the data source of the target data, the resource consumption constraint sub-interval corresponding to when the target data is encrypted with the first encryption algorithm can be constructed; the resource consumption constraint sub-intervals corresponding to each target data are summed to obtain the resource consumption constraint interval corresponding to when the target data is encrypted with the first encryption algorithm.

[0067] The resource consumption constraint sub-interval may be a constraint interval corresponding to each target data, and may be used to constrain the possibility of using the first encryption algorithm for each target data based on the computing capability of the target device.

[0068] Optionally, the device association information may include at least one of environmental information, target resource amount consumed to encrypt target data using the second encryption algorithm, the number of each data source in the target device, and a data acquisition frame rate.

[0069] The environmental information may be information indicating the acquisition scenario of the target device, for example, including cloudy, rainy, sunny, daytime, dusk, and nighttime. The target resource amount may be the amount of resources required to encrypt the target data using the second encryption algorithm. The resource amount may be the amount of computing resources used. The specific representation value of the resource amount may be set according to actual conditions and is not limited in this embodiment of the present application. The data acquisition frame rate may be information indicating the amount of data collected per second.

[0070] Optionally, the data source of the target data may include at least one of a radar sensor, a camera, and a bus. The number of the data sources may include the number of radar sensors, the number of cameras, and the number of bus signal sources in the target device.

[0071] Correspondingly, there may be multiple ways to construct a resource consumption constraint sub-interval corresponding to when the target data is encrypted using the first encryption algorithm based on the device association information of the target device and the data source of the target data. For example, the resource consumption constraint sub-interval may include a first resource consumption constraint sub-interval, a second resource consumption constraint sub-interval and / or a third resource consumption constraint sub-interval. The first resource consumption constraint sub-interval corresponding to when the target data of the radar sensor is encrypted using the first encryption algorithm may be constructed based on the target resource amount, the number of radar sensors in the target device, and the data acquisition frame rate; and\or, the second resource consumption constraint sub-interval corresponding to when the target data of the camera is encrypted using the first encryption algorithm may be constructed based on the environmental information, the number of cameras in the target device, and the data acquisition frame rate; and\or, the third resource consumption constraint sub-interval corresponding to when the target data of the bus is encrypted using the first encryption algorithm may be constructed based on the number of buses in the target device and the data acquisition frame rate.

[0072] For example, see Figure 3 , Figure 3 This is a specific architectural diagram of a data processing method provided in an embodiment of the present application. It can be assumed that x is the probability of using the first encryption algorithm with a complexity of 0(n) to encrypt the target data collected by the radar sensor, y is assumed to be the probability of using the first encryption algorithm with a complexity of 0(n) to encrypt the target data collected by the camera, and z is the probability of using the first encryption algorithm with a complexity of 0(n) to encrypt the target data corresponding to the CAN signal source. In this way, based on the device association information of the target device, the corresponding resource consumption constraint sub-interval when the target data of each data source is encrypted separately with the first encryption algorithm can be constructed, and the following linear constraint conditions can be deduced.

[0073] Among them, based on the target resource amount, the number of radar sensors in the target device, and the data acquisition frame rate, the first resource consumption constraint sub-interval corresponding to encrypting the target data of the radar sensor using the first encryption algorithm may include a lower limit interval (Tx{MIN}) and an upper limit interval (Tx{MAX}), which can be specifically expressed as:

[0074] Tx{MIN}<=x*radar data volume per second*number of radars in the current vehicle+a(1-x)

[0075] Tx{MAX}>=(1-x)*radar data volume per second*number of radars in the current vehicle+a(x)

[0076] The radar data volume per second can be the data acquisition frame rate of the radar sensor, and the number of radars in the current vehicle can be the number of radar sensors in the target device. a is the target resource volume, which can be a constant. The specific value can be set according to the actual situation and is used to characterize the hardware resource volume consumed by the radar data source encryption using the second encryption algorithm with O(1) complexity. Due to the large data volume of the radar data source, the hardware resources consumed by the radar data source encryption using the second encryption algorithm with O(1) complexity cannot be ignored. Therefore, for the radar data source, this factor needs to be added to the constraint conditions of the resource consumption constraint subinterval. In this way, the resource volume consumed by the radar data source encryption can be more accurately characterized, and the corresponding initial probability can be accurately calculated. This balances the computing resource consumption and encryption complexity, and determines the target encryption algorithm that meets the complexity requirements and meets the computing resource consumption of the target device, thereby improving encryption efficiency.

[0077] Correspondingly, based on the environmental information, the number of cameras in the target device, and the data acquisition frame rate, the second resource consumption constraint sub-interval corresponding to encrypting the target data of the camera using the first encryption algorithm may include a lower limit interval (Ty{MIN}) and an upper limit interval (Ty{MAX}), which can be specifically expressed as:

[0078] Ty{MIN}<=y*camera data volume per second*number of cameras on the current vehicle*proportional coefficient of weather change

[0079] Ty{MAX}>=(1-y)*camera data volume per second*number of cameras on the current vehicle*proportional coefficient of weather change

[0080] The camera data volume per second can be the corresponding camera's data acquisition frame rate, the number of cameras in the current vehicle can be the number of cameras in the target device, and the weather change scaling factor can be a scaling factor determined based on environmental information. Since the data demand of the camera data source during intelligent driving varies in different weather conditions, this factor needs to be factored into the constraints of the resource consumption constraint subinterval corresponding to the camera. The weather change scaling factor is assigned different values based on cloudy / rainy / snowy / sunny days and daytime / nighttime / dusk, and changes dynamically. For example, because the environments are more complex and changeable during cloudy, rainy, snowy, dusk, and nighttime, more data needs to be collected for environmental analysis. Therefore, a larger scaling factor is required for cloudy, rainy, snowy, dusk, and nighttime weather conditions, while a smaller scaling factor can be set for sunny and daytime weather conditions, as the environments are simpler and clearer. This allows for accurate characterization of the resources consumed by the camera data source, enabling accurate calculation of the corresponding initial probabilities, thereby improving encryption efficiency. In addition, the data volume of the camera data source is not as large as that of the lidar, so the hardware resources consumed by the camera's target data encryption using the second encryption algorithm with O(1) complexity can be ignored.

[0081] Correspondingly, based on the number of buses in the target device and the data acquisition frame rate, the third resource consumption constraint sub-interval corresponding to encrypting the target data of the bus using the first encryption algorithm may include a lower limit interval (Tz{MIN}) and an upper limit interval (Tz{MAX}), which can be specifically expressed as:

[0082] Tz{MIN}<=z*CAN signal source data volume per second*number of CAN signal sources in the current vehicle

[0083] Tz{MAX}>=(1-z)*CAN signal source data volume per second*number of CAN signal sources in the current vehicle

[0084] The data volume per second of the CAN signal source can be expressed as the data acquisition frame rate corresponding to the CAN bus, and the number of CAN signal sources in the current vehicle can be expressed as the number of buses in the target device. Since the data demand of the CAN signal source does not vary much in different weather conditions, the proportional coefficient of weather changes does not need to be considered here. In addition, due to the small data volume of the CAN signal source, the hardware resources consumed by the second encryption algorithm with O(1) complexity can be ignored.

[0085] After constructing the resource consumption constraint sub-interval corresponding to when the target data is encrypted using the first encryption algorithm based on the device-associated information of the target device and the data source of the target data, the resource consumption constraint sub-interval corresponding to each target data can be summed to obtain the resource consumption constraint interval corresponding to when the target data is encrypted using the first encryption algorithm. There are various ways to sum the resource consumption constraint sub-intervals corresponding to each target data to obtain the resource consumption constraint interval corresponding to when the target data is encrypted using the first encryption algorithm. For example, the lower limit interval of the resource consumption constraint sub-interval corresponding to each target data can be summed, and the upper limit interval of the resource consumption constraint sub-interval corresponding to each target data can be summed to obtain the resource consumption constraint interval corresponding to when the target data is encrypted using the first encryption algorithm.

[0086] For example, when encrypting the target data with the first encryption algorithm, the corresponding resource consumption constraint interval may include an upper limit interval and a lower limit interval. The lower limit interval can be expressed as Tz{MIN}+Ty{MIN}+Tx{MIN}, and the upper limit interval can be expressed as Tz{MAX}+Ty{MAX}+Tx{MAX}.

[0087] Optionally, there can be multiple ways to calculate the initial probability of using the first encryption algorithm and the second encryption algorithm to encrypt the target data based on the resource consumption constraint interval. For example, the solution set interval can be calculated based on the resource consumption constraint interval; and the initial probability of using the first encryption algorithm and the second encryption algorithm to encrypt the target data can be calculated based on the solution set interval.

[0088] Among them, based on the resource consumption constraint interval, there can be multiple ways to calculate the solution set interval. For example, the maximum hardware resource amount of the target data acquisition device in the target device and the minimum hardware resource amount corresponding to the minimum complexity required for encrypting the target data can be obtained; based on the maximum hardware resource amount, the minimum hardware resource amount and the resource consumption constraint interval, the solution set interval is calculated.

[0089] Among them, the maximum amount of hardware resources can be the amount of hardware resources that the target device can provide for encrypting the target data, the minimum amount of hardware resources can be the amount of hardware resources required for encrypting the target data using an encryption algorithm with the minimum complexity required for encrypting the target data, and the minimum complexity can be the minimum complexity used to encrypt the target data, which can ensure the data security of the target data. The values of the minimum amount of hardware resources and the maximum amount of hardware resources can be set according to actual conditions. For example, a unified standard can be adopted to set corresponding values for the quantity corresponding to each data source, the data acquisition frame rate, the maximum amount of hardware resources, and the minimum amount of hardware resources based on the degree of resource consumption influence corresponding to various factors, so as to measure the influence of various factors on resource consumption and accurately solve the initial probabilities corresponding to various encryption algorithms.

[0090] The goal of the resource consumption constraint interval is to minimize the total complexity (T_{total}) of the encryption algorithm used to encrypt the target data, while also exceeding the preset minimum complexity and ensuring that the total complexity of the encryption algorithm does not exceed the maximum hardware resource limit (T_{max}) of the target vehicle. Based on the hardware processing capabilities of the target device when collecting the current target data, the maximum complexity of the encryption algorithm used for the target data is constrained to avoid consuming too many hardware resources of the target device during encryption, resulting in program crashes or frame loss. A minimum complexity is also set to prevent data leakage caused by attackers obtaining a round of keys or even seed keys, thus ensuring the security of the target data.

[0091] In intelligent driving scenarios, data acquisition packages contain many different data sources (such as camera data, radar data, and CAN signal data). Each data source has a completely different frame rate and corresponding data volume, which can be used to determine the initial probability of the encryption algorithm in the Markov matrix coefficients. Therefore, the linear programming constraints corresponding to the target data must also consider factors such as the frame rate of each data source and the corresponding data volume per frame. The data acquisition package is a database file that contains a description of the corresponding data source (topic) in the data package, as well as specific information about each frame of data in each topic.

[0092] In the specific scenario of autonomous vehicle data collection, when collecting full data, the vehicle uses the highest-end configuration of 11 cameras + 3 LiDAR sensors + wheel speed-related CAN signal sources, and the data volume is also very large. This configuration of the relevant data sources for data collection is relatively common in the current intelligent driving field and can be used as the upper limit of data volume for analysis to ensure the security of the closed-loop upload of vehicle-side data to the cloud. When collecting partial data, it may often not contain the large-volume LiDAR signal source, or only contain the signal sources of some cameras. This configuration of the relevant data sources for data collection is also very common in the current intelligent driving field. The encryption and decryption algorithms provided in the embodiments of the present application can effectively and flexibly ensure the complexity of encrypting the target data in this situation to ensure data security. According to calculations, when recording full data and using an encryption algorithm with an O(n) level complexity for about 10 rounds of encryption, the computing load of the on-board industrial computer will be reached, because the database writes to the disk and uploads to the cloud during data recording also require hardware resources. This situation can be used as the maximum amount of hardware resources required by the target device to encrypt the target data. Under certain conditions, if only the CAN bus and some camera data are recorded, the impact on the computing load of the on-board industrial computer is not significant. More encryption algorithms with O(n) level complexity can be used for encryption to ensure better encryption effect.

[0093] Among them, there are many ways to calculate the solution set interval based on the maximum amount of hardware resources, the minimum amount of hardware resources and the resource consumption constraint interval. For example, linear constraint processing can be performed based on the maximum amount of hardware resources, the minimum amount of hardware resources and the resource consumption constraint interval, so as to calculate the value that can make the consumed resource amount less than the maximum amount of hardware resources, greater than the minimum amount of hardware resources, and within the resource consumption constraint interval, that is, the possible value of the probability of using the first encryption algorithm to encrypt the target data, and obtain the corresponding solution set interval.

[0094] For example, the upper limit of the overall hardware computing capability of the data acquisition package corresponding to the target data (i.e., the maximum amount of hardware resources) can be expressed as T{MAX}, and the lower limit of the overall encryption complexity of the data acquisition package (i.e., the minimum amount of hardware resources) can be expressed as T{MIN}, thereby obtaining the linear constraint condition:

[0095] T{MIN} <Tz{MIN}+Ty{MIN}+Tx{MIN};

[0096] T{MAX}>Tz{MAX}+Ty{MAX}+Tx{MAX};

[0097] 1>=x>=0;

[0098] 1>=y>=0;

[0099] 1>=z>=0.

[0100] The coefficients corresponding to T{MIN} and T{MAX} can fluctuate based on different hardware conditions. Based on these linear constraints, a three-dimensional linear feasible region, or solution interval, can be solved. This allows pseudorandom numbers to be generated within the x, y, and z three-dimensional linear feasible region, yielding the initial probabilities for each encryption algorithm, which serve as the initial coefficients of the Markov matrix.

[0101] Optionally, there are multiple ways to calculate the initial probabilities of using the first encryption algorithm and the second encryption algorithm to encrypt the target data based on the solution interval. For example, based on the solution interval, the first probability of using the first encryption algorithm to encrypt the target data of each data source can be determined; based on the first probability, the second probability of using the second encryption algorithm to encrypt the target data of each data source can be calculated; based on the first probability and the second probability, the initial probabilities of using the first encryption algorithm and the second encryption algorithm to encrypt the target data can be obtained.

[0102] The first probability may be a probability of encrypting the target data of each data source using a first encryption algorithm, and the second probability may be a probability of decrypting the target data of each data source using a second encryption algorithm.

[0103] Among them, based on the initial probability corresponding to each encryption algorithm, there can be multiple ways to determine the Markov matrix corresponding to the target data. For example, assuming that the Markov chain corresponding to the target data includes two states, namely the state of selecting the first encryption algorithm to encrypt the target data, and the state of selecting the second encryption algorithm to encrypt the target data, the initial probability includes the probability a of selecting the first encryption algorithm to encrypt the target data, and the probability b of selecting the second encryption algorithm to encrypt the target data, then the Markov matrix can be expressed as [a, b].

[0104] Specifically, based on the solution set interval, the step of calculating the initial probability of encrypting the target data using the first encryption algorithm and the second encryption algorithm can find the optimal solution for T_{total}=x+y+z within the solution set interval, and obtain the initial probabilities of encrypting the target data using the first encryption algorithm as x, y, and z, so that the initial probabilities of encrypting the target data using the second encryption algorithm can be calculated as 1-x, 1-y, and 1-z.

[0105] Optionally, a random value can be taken in the solution interval to obtain the initial probability of encrypting the target data using the first encryption algorithm. The value located in the center area of the solution interval can also be used as the initial probability of encrypting the target data using the first encryption algorithm, etc.

[0106] In this way, a Markov matrix can be constructed based on the initial probability. When encrypting the target data of the radar sensor, the encryption algorithm for each encryption round is determined by the coefficient x of the Markov matrix (i.e., the initial probability of using the first encryption algorithm to encrypt the target data corresponding to the radar data source). x corresponds to the possibility of selecting the first encryption algorithm in the next round, and 1-x corresponds to the possibility of selecting the second encryption algorithm in the next round. After the corresponding x value is obtained by linear programming, x corresponds to the probability of the first encryption algorithm, such as the Gaussian mapping and ICMIC mapping, with O(n) level complexity in the Markov matrix coefficients, and 1-x corresponds to the probability of using the encryption algorithm with O(1) level complexity in the Markov matrix coefficients to encrypt the target data corresponding to the radar sensor.

[0107] Correspondingly, when encrypting the target data collected by the camera, the encryption algorithm used in each encryption round can be determined by the coefficients of the Markov matrix, where y corresponds to the possibility of selecting an encryption algorithm with O(n) complexity in the next round, and 1-y corresponds to the possibility of selecting an encryption algorithm with O(1) complexity in the next round.

[0108] Correspondingly, when encrypting the target data obtained from the CAN bus, the encryption algorithm used in each encryption round can be determined by the coefficients of the Markov matrix, where z corresponds to the possibility of selecting an encryption algorithm with O(n) complexity in the next round, and 1-z corresponds to the possibility of selecting an encryption algorithm with O(1) complexity in the next round.

[0109] In this way, we can get a 3*2 Markov matrix, which can be expressed as

[0110]

[0111] The encryption algorithm used for the target data corresponding to each data source is determined based on the Markov matrix, and a better encryption solution can be obtained adaptively according to the data size of various data sources.

[0112] After determining the Markov chain parameters corresponding to the target data based on the device association information of the target device, the number of encryption rounds corresponding to the target data can be determined. There are various ways to determine the number of encryption rounds corresponding to the target data. For example, the number of encryption rounds corresponding to the target data can be customized based on actual conditions, or the number of encryption rounds corresponding to the target data can be calculated by calculating the initial probabilities corresponding to at least two encryption algorithms based on the device association information.

[0113] For example, by determining linear constraints based on the maximum hardware resource amount, the minimum hardware resource amount, and the resource consumption constraint interval, the following linear constraints can be obtained:

[0114] T{MIN} <N*(Tz{MIN}+Ty{MIN}+Tx{MIN});

[0115] T{MAX}>N*(Tz{MAX}+Ty{MAX}+Tx{MAX});

[0116] 1>=x>=0;

[0117] 1>=y>=0;

[0118] 1>=z>=0;

[0119] c>=N>=1.

[0120] Where N is the variable corresponding to the number of encryption rounds, and c is the maximum number of encryption rounds. The specific value of c can be set according to the actual situation. In this way, based on the above linear constraints, the optimal solution for the number of encryption rounds N can be solved, and thus the number of encryption rounds corresponding to the target data can be determined.

[0121] There are multiple ways to determine the target encryption algorithm used by the target data in each encryption round based on the Markov chain parameters and the number of encryption rounds. For example, the target Markov chain parameters corresponding to each encryption round can be determined based on the Markov chain parameters and the number of encryption rounds; and the target encryption algorithm used in each encryption round can be determined from at least two encryption algorithms based on the target Markov chain parameters corresponding to each encryption round.

[0122] The target Markov chain parameters corresponding to the first encryption round are the Markov chain parameters, and the target Markov chain parameters in the remaining encryption rounds are calculated based on the target Markov chain parameters and Markov chain parameters corresponding to the previous encryption round.

[0123] The target Markov chain parameter may be a Markov chain parameter corresponding to each encryption round.

[0124] There are multiple ways to determine the target Markov chain parameters corresponding to each encryption round based on the Markov chain parameters and the number of encryption rounds. For example, for the first encryption round, the Markov chain parameters can be used as the target Markov chain parameters for the first encryption round. For the second encryption round, the power of the Markov chain parameters can be calculated to obtain the target Markov chain parameters for the second encryption round. For the third encryption round, the product of the target Markov chain parameters for the second encryption round and the Markov chain parameters can be calculated to obtain the target Markov chain parameters for the third encryption round. This process can be deduced from the above to obtain the target Markov chain parameters corresponding to each encryption round.

[0125] Among them, based on the target Markov chain parameters corresponding to each encryption round, there can be multiple ways to determine the target encryption algorithm used in each encryption round among at least two encryption algorithms. For example, the Markov chain can be used to determine the type of encryption algorithm selected for the next encryption round based on the probability corresponding to each state in the Markov matrix, so that the target encryption algorithm used to encrypt the target data can be randomly selected from the encryption algorithms under this type.

[0126] Step S103: encrypt the target data based on the target encryption algorithm to obtain encrypted data.

[0127] The encrypted data may be target data encrypted according to a target encryption algorithm.

[0128] Among them, there are many ways to encrypt the target data based on the target encryption algorithm to obtain encrypted data. For example, the initial encryption parameters required by the target encryption algorithm can be selected from the generated random numbers; based on the target encryption algorithm and the initial encryption parameters, the target data is encrypted to obtain encrypted data.

[0129] Among them, the initial encryption parameters can be the initial parameters of the target encryption algorithm. For example, when the target encryption algorithm is a chaotic mapping algorithm, the initial encryption parameters can include an initial key, an encryption key, and initialization parameters. The initialization parameters can include an initial value (x0) and control parameters, etc.

[0130] Optionally, the target data may correspond to a target encryption algorithm with multiple encryption rounds, so as to encrypt the target data multiple times to improve data security.

[0131] There are many ways to generate random numbers. For example, a hash algorithm (sha256) can be used to generate a 256-bit hash value, i.e., a random number. Specifically, a Unix timestamp can be used as the initial seed to ensure randomness. Then, hash values can be iteratively generated to generate pseudo-random numbers.

[0132] Among them, since the target data of the target device will eventually be written to the disk as a database file, the target data and the corresponding header can be encrypted separately. The target data can include data content and data header. The data content is the plaintext of the target data, and the data header can be the header of the database file where the target data will be written to the disk.

[0133] Among them, there are multiple ways to encrypt the target data based on the target encryption algorithm and initial encryption parameters to obtain encrypted data. For example, the data content can be encrypted based on the target encryption algorithm and initial encryption parameters corresponding to each encryption round to obtain the first encrypted data; the data header can be encrypted based on the target encryption algorithm and initial encryption parameters corresponding to each encryption round to obtain the second encrypted data; and encrypted data can be obtained based on the first encrypted data and the second encrypted data.

[0134] Optionally, because the data header is relatively more important data information and requires better encryption, after encrypting the target data content and data header using the target encryption algorithm, the data header can be re-encrypted to prevent the attacker from analyzing the data subject information from the data header after the database file corresponding to the target data is brute-force cracked, thereby endangering the data security of the target device. To this end, the data header can be indexed and XORed to re-encrypt the data header.

[0135] For example, there are multiple ways to encrypt the data header based on the target encryption algorithm and initial encryption parameters corresponding to each encryption round to obtain the second encrypted data. For example, the data header can be encrypted based on the target encryption algorithm and initial encryption parameters corresponding to each encryption round to obtain the initial encrypted data; the initial encrypted data can be encrypted to obtain the second encrypted data.

[0136] Among them, there can be multiple ways to encrypt the initial encrypted data to obtain the second encrypted data. For example, the second encrypted data may include the first data and / or the second data, and replacement information with the same data length as the initial encrypted data can be obtained, and the replacement information includes randomly arranged numerical values, and the number of numerical values matches the data length; the initial encrypted data is sorted based on the replacement information to obtain the first data, and / or, key information with the same data length as the initial encrypted data is obtained; the key unit in the key information is XORed with the data unit at the corresponding position in the initial encrypted data to obtain the second data.

[0137] For example, a permutation table can be generated first: a permutation table with the same data length as the initial encrypted data is created. Assuming the data length of the target data is n, an array containing the numbers 0 to (n-1) can be generated and randomly arranged to obtain permutation information. This randomly arranged permutation information can then be used to rearrange the data in the data header. For example, assuming that there is a data header of [D_0, D_1, ..., D_{n-1}] and permutation information of [P_0, P_1, ..., P_{n-1}], the data units in the data header can be rearranged based on the order of the array indices in the permutation information, so that the first data can be [D_{P_0}, D_{P_1}, ..., D_{P_{n-1}}].

[0138] For example, a key with the same length as the initial encrypted data can be generated. This key can be a randomly generated byte array, which is then XORed with the data unit at the corresponding position in the initial encrypted data. For example, each data unit in the initial encrypted data is compared with each corresponding key unit in the key to generate the second data. For example, if the initial encrypted data is [D_0, D_1, ..., D_{n-1}] and the key is [K_0, K_1, ..., K_{n-1}], then after the XOR operation, the resulting second data is [D_0^K_0, D_1^K_1, ..., D_{n-1}^K_{n-1}].

[0139] Therefore, since the data header is important data information and requires better encryption effect, the data in the data header can be disrupted by using index replacement and XOR operations, and then each data unit in the initial encrypted data can be encrypted with the key information to further ensure the security of the data.

[0140] In one embodiment, the data header may be re-encrypted using only index replacement, only XOR operation, or both. The data header may be re-encrypted using both index replacement and XOR operation. The data header may be encrypted first using index replacement and then re-encrypted using XOR operation, or may be encrypted first using XOR operation and then re-encrypted using index replacement. This is not limited in the present embodiment.

[0141] Optionally, the encrypted data can be uploaded to the cloud so that the encrypted data can be stored in the cloud. In this way, when the encrypted data is needed, the encrypted data can be obtained through the cloud.

[0142] For example, the encrypted data may be compressed and uploaded to the cloud, enter the network cloud, and be stored in a plaintext data packet using the network cloud, so that the encrypted data can be obtained from the cloud for decryption.

[0143] In one embodiment, the target data is sensor data and the encryption algorithm is a chaotic mapping algorithm. Figure 4a , Figure 4a This is a specific flow chart of a data processing method provided by an embodiment of the present application. Data can be collected through sensors to obtain massive plaintext data, namely, target data. At the same time, initial encryption parameters can be obtained by generating random numbers through hashing and salting, so that the plaintext DfBag data content, plaintext DfBag data header and initial encryption parameters in the target data can be encrypted. Specifically, the initial state value (i.e., initial probability), number of iteration rounds (i.e., number of encryption rounds) and initial encryption parameters can be determined based on the device association information of the target device, and the Markov chain can be superimposed. In multiple chaotic mapping algorithms under at least two encryption algorithms, the target encryption algorithm for encrypting the target data under each encryption round is determined, so that the data content and data header are encrypted according to the target encryption algorithm of each encryption round. In addition, the encrypted data header can be indexed and replaced by replacement information, and then an XOR operation is performed according to the key information to obtain the encrypted data header, so that encrypted data can be generated based on the encrypted data header and data content. Due to the memoryless nature of the Markov chain, the target encryption algorithm of each round depends only on the encryption algorithm of the previous round, thereby ensuring sufficient encryption randomness and improving the encryption security of the target data.

[0144] In one embodiment, please refer to Figure 4b , Figure 4b This is another specific flow diagram of a data processing method provided by an embodiment of the present application. The method obtains a database file corresponding to target data, performs multiple rounds of chaotic map encryption on the data content and data header in the database file, and then re-encrypts the data header to obtain encrypted data. This allows an attacker to brute-force crack the key of the Markov chain plus chaotic map algorithm and then read the database file in the data acquisition package. However, since the data header has been re-encrypted, the cracking attempt will fail, thereby protecting the data security of the target data.

[0145] In this way, the data processing method based on data acquisition hybrid encryption and decryption provided by the embodiment of the present application determines the initial encryption parameters corresponding to the chaotic mapping algorithm by generating random numbers. Then, the initial encryption parameters and the data content and data header are encrypted separately. At the same time, the Markov chain can be superimposed and utilized. Taking advantage of its memoryless characteristics, the selection of the chaotic mapping algorithm for the N+1 round of encryption depends only on the encryption algorithm for the Nth round, and each data source topic in the Dfbag data acquisition package generates a Markov random sequence corresponding to its own chaotic mapping algorithm. After completing the chaotic mapping encryption, the position index of the ciphertext of the initially generated data header is permuted, and then an XOR operation is performed, thereby increasing data security. In addition, the embodiment of the present application adopts a dynamic programming algorithm, combines the dynamic programming algorithm with the device-related information such as different vehicle CPU loads and acquisition scenarios, and reasonably determines the Markov chain parameters. The Markov chain parameters then reasonably determine the probability of selecting chaotic mapping algorithms of different complexities. The encryption time and encryption complexity are balanced within a reasonable range solved by the dynamic programming solution, so as to become a data encryption algorithm suitable for intelligent driving sensor data acquisition, greatly improving data encryption efficiency. Furthermore, since the encrypted data must ultimately be stored as a database file, and the first step in attacking a database file is to decrypt the header, this embodiment of the application employs multiple rounds of Markov chain encryption for both the header and the data content, and then superimposes index permutation and XOR operations to enhance data security.

[0146] As can be seen from the above, the embodiments of the present application obtain target data to be encrypted; determine the target encryption algorithm to be used when encrypting the target data using Markov chain parameters; and encrypt the target data based on the target encryption algorithm to obtain encrypted data. Thus, by determining the target encryption algorithm to be used when encrypting the target data using the Markov chain parameters, and then encrypting the target data based on the target encryption algorithm, the randomness of the encryption algorithm used when encrypting the target data can be improved, thereby making the encrypted target data difficult to crack and thus improving data security.

[0147] The present application also provides another data processing method. This embodiment will be described from the perspective of a data processing device, which can be integrated into an electronic device. The meanings of the terms used in the data processing method are the same as those in the above-mentioned data processing method. For specific implementation details, please refer to the description in the method embodiment.

[0148] For example, see Figure 5 , Figure 5 1 is another flow chart of the data processing method provided in an embodiment of the present application. The data processing method includes:

[0149] Step S201: Obtain the Markov chain parameters used when encrypting the encrypted data.

[0150] Among them, when decrypting the decrypted data, there is no need to perform linear optimization again. It is only necessary to obtain the Markov state matrix corresponding to the target data of each data source when encrypting the encrypted data, that is, the Markov chain parameters. Then, based on the Markov chain parameters, the target encryption algorithm corresponding to each encryption round during encryption can be inferred, and the target data can be inversely mapped for the corresponding rounds to obtain the original plaintext, that is, the target data.

[0151] Step 202: Determine the target encryption algorithm used when encrypting the encrypted data based on the Markov chain parameters.

[0152] Step S203: decrypt the encrypted data based on the target encryption algorithm to obtain decrypted data.

[0153] The decrypted data may be data obtained by decrypting the encrypted data.

[0154] Optionally, the encrypted data may be encrypted multiple times using a target encryption algorithm in multiple encryption rounds.

[0155] There are multiple ways to decrypt the encrypted data based on the target encryption algorithm to obtain the decrypted data. For example, the encrypted data can be decrypted based on the target encryption algorithm corresponding to each encryption round to obtain the decrypted data.

[0156] Among them, the encrypted data may include first encrypted data corresponding to the data content and second encrypted data corresponding to the data header. Therefore, based on the target encryption algorithm corresponding to each encryption round, the encrypted data is decrypted to obtain decrypted data, which may include: based on the target encryption algorithm corresponding to each encryption round, the first encrypted data is decrypted to obtain first decrypted data; based on the target encryption algorithm corresponding to each encryption round, the second encrypted data is decrypted to obtain second decrypted data; based on the first decrypted data and the second decrypted data, the decrypted target data is obtained.

[0157] Among them, there are multiple ways to decrypt the second encrypted data based on the target encryption algorithm corresponding to each encryption round to obtain the second decrypted data. For example, the second encrypted data can be decrypted based on the target encryption algorithm corresponding to each encryption round to obtain initial decrypted data; the initial decrypted data can be decrypted to obtain second decrypted data.

[0158] Among them, there can be multiple ways to decrypt the initial decrypted data and obtain the second decrypted data. For example, the second decrypted data may include third data and fourth data, and the replacement information corresponding to the second encrypted data can be obtained; based on the replacement information, the initial decrypted data is reversely sorted to obtain the third data; and / or, the key information corresponding to the second encrypted data is obtained; based on the key information, the initial decrypted data is reversely XORed to obtain the fourth data.

[0159] In one embodiment, the present application also provides a data acquisition hybrid encryption and decryption system that can be used to implement a data acquisition hybrid encryption and decryption method. The data acquisition hybrid encryption and decryption system may include a data information acquisition sensor, an industrial control computer, a data encryption module, a data decryption module, and a data upload module. The data information acquisition sensor can be used to acquire required data information and obtain plaintext data. The industrial control computer is electrically connected to the data information acquisition sensor and can be used to store plaintext data. The data encryption module is electrically connected to the industrial control computer and can be used to encrypt the plaintext data in the industrial control computer. The data decryption module can be electrically connected to the data encryption module and used to decrypt the plaintext data encrypted by the data encryption module. The data upload module is electrically connected to the data decryption module and the data encryption module and can be used to compress and upload the encrypted data to a network cloud, and input the encrypted data into a plaintext database from the network cloud. The data upload module is also used to input the plaintext signed by the correct decryption digest into the network cloud and input the plaintext into the plaintext database from the network cloud.

[0160] Specifically, the data encryption module can include a preliminary encryption unit and a secondary encryption unit. The preliminary encryption unit can be used to generate a chaotic mapping algorithm using random numbers for encryption, and set initial parameters, initial state values, and iterative rounds, superimpose the Markov chain, and generate the ciphertext of the data content and the data header. The secondary encryption unit can perform an index permutation operation on the iteratively generated ciphertext of the data content and the data header, and then perform an XOR operation. The data decryption module can include an information summary decryption unit and a data decryption unit. The information summary decryption unit can be used to obtain the Markov matrix during encryption, and obtain the mapping algorithm corresponding to each round of encryption according to the key-value pair (01). The data decryption unit can be used to first perform an inverse OR operation, and then perform an inverse index permutation according to the position index permutation during encryption to obtain the preliminary encrypted data after the mixed chaotic mapping. Then, according to the chaotic mapping algorithm corresponding to the Markov chain, the data plaintext collected initially is parsed in reverse order.

[0161] As can be seen from the above, the embodiments of the present application obtain the Markov chain parameters used when encrypting the encrypted data; based on the Markov chain parameters, determine the target encryption algorithm used when encrypting the encrypted data; and decrypt the encrypted data based on the target encryption algorithm to obtain decrypted data. Thus, by determining the target encryption algorithm used when encrypting the encrypted data based on the Markov chain parameters used when encrypting the encrypted data, and then decrypting the encrypted data based on the target encryption algorithm used when encrypting the encrypted data, this encryption and decryption method can leverage the randomness of the Markov chain to make the encrypted data difficult to crack, thereby improving data security.

[0162] To facilitate better implementation of the data processing method provided in the embodiment of the present application, the embodiment of the present application also provides a device based on the above data processing method. The meanings of the terms are the same as those in the above data processing method, and the specific implementation details can be referred to the description in the method embodiment.

[0163] For example, Figure 6 , which is a schematic diagram of the structure of a data processing device provided in an embodiment of the present application, the data processing device may include a first acquisition module 301, a first determination module 302, and an encryption module 303, as follows:

[0164] A first acquisition module 301 is used to acquire target data to be encrypted;

[0165] A first determination module 302 is configured to determine a target encryption algorithm to be used when encrypting target data using Markov chain parameters;

[0166] The encryption module 303 is used to encrypt the target data based on the target encryption algorithm to obtain encrypted data.

[0167] In one embodiment, the first determining module 302 includes:

[0168] The determination submodule is used to determine the target encryption algorithm used by the target data in each encryption round through the Markov chain parameters.

[0169] In one embodiment, the target data is data collected based on the target device, and the submodule is determined, including:

[0170] a parameter determination unit, configured to determine a Markov chain parameter corresponding to the target data based on the device association information of the target device, the Markov chain parameter including an initial probability of encrypting the target data using at least two encryption algorithms;

[0171] A round number determination unit, used to determine the number of encryption rounds corresponding to the target data;

[0172] The algorithm determination unit is used to determine a target encryption algorithm used by the target data in each encryption round from at least two encryption algorithms based on the Markov chain parameters and the number of encryption rounds.

[0173] In one embodiment, the parameter determination unit includes:

[0174] a probability calculation subunit, configured to calculate, based on the device association information of the target device, an initial probability of encrypting the target data using at least two encryption algorithms;

[0175] The parameter determination subunit is used to determine the Markov matrix corresponding to the target data based on the initial probability corresponding to each encryption algorithm, as the Markov chain parameter corresponding to the target data.

[0176] In one embodiment, the at least two encryption algorithms include a first encryption algorithm and a second encryption algorithm, the complexity of the first encryption algorithm is greater than that of the second encryption algorithm, and the probability calculation subunit is configured to:

[0177] Constructing a resource consumption constraint interval corresponding to encrypting the target data using the first encryption algorithm based on the device association information of the target device;

[0178] Based on the resource consumption constraint interval, an initial probability of using the first encryption algorithm and the second encryption algorithm to encrypt the target data is calculated.

[0179] In one embodiment, the calculation of the initial probability of using the first encryption algorithm and the second encryption algorithm to encrypt the target data based on the resource consumption constraint interval is specifically used to:

[0180] Calculate the solution set interval based on the resource consumption constraint interval;

[0181] Based on the solution set interval, an initial probability of encrypting the target data using the first encryption algorithm and the second encryption algorithm is calculated.

[0182] In one embodiment, the above-mentioned calculation of the solution set interval based on the resource consumption constraint interval is specifically used for:

[0183] Obtaining the maximum hardware resource amount of the target data acquisition device in the target device and the minimum hardware resource amount corresponding to the minimum complexity required for encrypting the target data;

[0184] Based on the maximum hardware resource amount, the minimum hardware resource amount and the resource consumption constraint interval, the solution set interval is calculated.

[0185] In one embodiment, the target data includes multiple types, each type of target data has a different data source. The above-mentioned device association information based on the target device is used to construct the resource consumption constraint interval corresponding to the target data when the target data is encrypted using the first encryption algorithm, specifically for:

[0186] Constructing a resource consumption constraint subinterval corresponding to when encrypting the target data using a first encryption algorithm based on the device association information of the target device and the data source of the target data;

[0187] The resource consumption constraint sub-intervals corresponding to the target data are summed to obtain the resource consumption constraint interval corresponding to when the target data is encrypted using the first encryption algorithm.

[0188] In one embodiment, each type of target data is stored in a data acquisition package, and the target data to be encrypted is obtained, specifically for:

[0189] Each type of target data to be encrypted is obtained from the data acquisition package.

[0190] In one embodiment, the device association information includes at least one of environmental information, target resource amount consumed to encrypt target data using the second encryption algorithm, quantity of each data source in the target device, and data acquisition frame rate.

[0191] In one embodiment, the data source includes at least one of a radar sensor, a camera, and a bus. The data source, based on the device association information of the target device and the target data, constructs a resource consumption constraint subinterval corresponding to when the target data is encrypted using a first encryption algorithm, specifically for:

[0192] Constructing a first resource consumption constraint subinterval corresponding to encrypting target data of the radar sensor using a first encryption algorithm based on the target resource amount, the number of radar sensors in the target device, and the data acquisition frame rate; and\or,

[0193] Based on the environmental information, the number of cameras in the target device, and the data acquisition frame rate, constructing a second resource consumption constraint subinterval corresponding to encrypting the target data of the camera using the first encryption algorithm; and\or,

[0194] Based on the number of buses in the target device and the data acquisition frame rate, a third resource consumption constraint sub-interval corresponding to encrypting the target data of the bus using the first encryption algorithm is constructed.

[0195] In one embodiment, the calculation of the initial probability of encrypting the target data using the first encryption algorithm and the second encryption algorithm based on the solution set interval is specifically used to:

[0196] Determining, based on the solution set interval, a first probability of encrypting target data from each data source using a first encryption algorithm;

[0197] Based on the first probability, calculating a second probability of encrypting the target data of each data source using the second encryption algorithm;

[0198] Based on the first probability and the second probability, an initial probability of encrypting the target data using the first encryption algorithm and the second encryption algorithm is obtained.

[0199] In one embodiment, the algorithm determination unit is configured to:

[0200] Based on the Markov chain parameters and the number of encryption rounds, determine the target Markov chain parameters corresponding to each encryption round;

[0201] Based on the target Markov chain parameters corresponding to each encryption round, a target encryption algorithm used in each encryption round is determined from at least two encryption algorithms.

[0202] In one embodiment, the target Markov chain parameters corresponding to the first encryption round are the Markov chain parameters, and the target Markov chain parameters in the remaining encryption rounds are calculated based on the target Markov chain parameters corresponding to the previous encryption round and the Markov chain parameters.

[0203] In one embodiment, the at least two encryption algorithms include at least one of a piecewise linear chaotic mapping algorithm, a sinusoidal mapping algorithm, a Gaussian mapping algorithm, a nonlinear dynamic system mapping algorithm, and an infinite folding iterative chaotic mapping algorithm.

[0204] In one embodiment, the encryption module 303 is configured to:

[0205] Select the initial encryption parameters required by the target encryption algorithm from the generated random number;

[0206] Based on the target encryption algorithm and the initial encryption parameters, the target data is encrypted to obtain encrypted data.

[0207] In one embodiment, target data corresponds to a target encryption algorithm with multiple encryption rounds. The target data includes data content and a data header. The target data is encrypted based on the target encryption algorithm and initial encryption parameters to obtain encrypted data, which is specifically used to:

[0208] Encrypting the data content based on the target encryption algorithm and initial encryption parameters corresponding to each encryption round to obtain first encrypted data;

[0209] Encrypting the data header based on the target encryption algorithm and initial encryption parameters corresponding to each encryption round to obtain second encrypted data;

[0210] Encrypted data is obtained based on the first encrypted data and the second encrypted data.

[0211] In one embodiment, the data header is encrypted based on the target encryption algorithm and initial encryption parameters corresponding to each encryption round to obtain the second encrypted data, which is specifically used to:

[0212] Based on the target encryption algorithm and initial encryption parameters corresponding to each encryption round, the data header is encrypted to obtain the initial encrypted data;

[0213] The initial encrypted data is encrypted to obtain second encrypted data.

[0214] In one embodiment, the second encrypted data packet, the first data and / or the second data, is encrypted by encrypting the initial encrypted data to obtain the second encrypted data, specifically for:

[0215] Obtaining replacement information having the same length as the data of the initial encrypted data, the replacement information including randomly arranged values, the number of which matches the data length;

[0216] Sorting the initial encrypted data based on the replacement information to obtain first data;

[0217] and / or,

[0218] Obtain key information having the same length as the data of the initial encrypted data;

[0219] An exclusive OR operation is performed on the key unit in the key information and the data unit at the corresponding position in the initial encrypted data to obtain second data.

[0220] In one embodiment, the data processing device further includes an uploading module configured to:

[0221] Upload the encrypted data to the cloud to store the encrypted data in the cloud.

[0222] In one embodiment, the target data is data stored in an industrial computer of the target device, and the first acquisition module 301 can be used to acquire the target data to be encrypted from the industrial computer.

[0223] As can be seen from the above, in this embodiment of the application, first acquisition module 301 acquires target data to be encrypted; first determination module 302 determines the target encryption algorithm to be used when encrypting the target data using Markov chain parameters; and encryption module 303 encrypts the target data based on the target encryption algorithm to obtain encrypted data. Thus, by determining the target encryption algorithm to be used when encrypting the target data using the Markov chain parameters, and then encrypting the target data based on the target encryption algorithm, the randomness of the encryption algorithm used when encrypting the target data can be improved, thereby making the encrypted target data less susceptible to decryption and thus improving data security.

[0224] To facilitate better implementation of the data processing method provided in the embodiment of the present application, the embodiment of the present application also provides a device based on the above data processing method. The meanings of the terms are the same as those in the above data processing method, and the specific implementation details can be referred to the description in the method embodiment.

[0225] For example, Figure 7 FIG. 4 is another structural diagram of a data processing device provided in an embodiment of the present application. The data processing device may include a second acquisition module 401, a second determination module 402, and a decryption module 403, as follows:

[0226] The second acquisition module 401 is used to obtain the Markov chain parameters used when encrypting the encrypted data;

[0227] A second determining module 402 is configured to determine a target encryption algorithm to be used when encrypting encrypted data based on the Markov chain parameters;

[0228] The decryption module 403 is used to decrypt the encrypted data based on the target encryption algorithm to obtain decrypted data.

[0229] In one embodiment, the encrypted data is encrypted multiple times using a target encryption algorithm in multiple encryption rounds. The above-mentioned decryption of the encrypted data based on the target encryption algorithm to obtain decrypted data is specifically used to:

[0230] Based on the target encryption algorithm corresponding to each encryption round, the encrypted data is decrypted to obtain the decrypted data.

[0231] In one embodiment, the encrypted data includes first encrypted data corresponding to the data content and second encrypted data corresponding to the data header. The above-mentioned target encryption algorithm corresponding to each encryption round is used to decrypt the encrypted data to obtain decrypted data, which is specifically used to:

[0232] Decrypting the first encrypted data based on the target encryption algorithm corresponding to each encryption round to obtain first decrypted data;

[0233] Decrypting the second encrypted data based on the target encryption algorithm corresponding to each encryption round to obtain second decrypted data;

[0234] Decrypted target data is obtained based on the first decrypted data and the second decrypted data.

[0235] In one embodiment, the target encryption algorithm corresponding to each encryption round is used to decrypt the second encrypted data to obtain the second decrypted data, which is specifically used to:

[0236] Decrypting the second encrypted data based on the target encryption algorithm corresponding to each encryption round to obtain initial decrypted data;

[0237] The initial decrypted data is decrypted to obtain second decrypted data.

[0238] In one embodiment, the second decrypted data includes the third data and the fourth data. The decryption of the initial decrypted data to obtain the second decrypted data is specifically used to:

[0239] Obtaining key information corresponding to the second encrypted data;

[0240] Based on the key information, performing an inverse XOR operation on the initial decrypted data to obtain third data;

[0241] and / or,

[0242] Obtaining replacement information corresponding to the second encrypted data;

[0243] Based on the replacement information, the initial decrypted data is reversely sorted to obtain fourth data.

[0244] As can be seen from the above, in this embodiment of the application, second acquisition module 401 obtains the Markov chain parameters used when encrypting the encrypted data; second determination module 402 determines the target encryption algorithm used when encrypting the encrypted data based on the Markov chain parameters; and decryption module 403 decrypts the encrypted data based on the target encryption algorithm to obtain decrypted data. Thus, by determining the target encryption algorithm used when encrypting the encrypted data based on the Markov chain parameters used when encrypting the encrypted data, and then decrypting the encrypted data based on the target encryption algorithm used when encrypting the encrypted data, this encryption and decryption method can leverage the randomness of the Markov chain to make the encrypted data difficult to crack, thereby improving data security.

[0245] Accordingly, an embodiment of the present application also provides a data processing system, which includes an encryption device and / or a decryption device, wherein the encryption device is used to execute the above-mentioned data processing method for encrypting target data; the decryption device is used to execute the above-mentioned data processing method for decrypting encrypted data.

[0246] Optionally, the encryption device may also be used to obtain target data to be encrypted from an industrial computer of the target device.

[0247] Optionally, the encryption device may also be used to upload encrypted data to the cloud, and the decryption device may also be used to obtain the encrypted data in the cloud for decryption.

[0248] Accordingly, the embodiment of the present application further provides an electronic device, such as Figure 8 As shown, Figure 8Schematic diagram of the structure of an electronic device provided in an embodiment of the present application. The electronic device 500 includes a processor 501 having one or more processing cores, a memory 502 having one or more computer-readable storage media, and a computer program stored in the memory 502 and executable on the processor. The processor 501 is electrically connected to the memory 502. It will be understood by those skilled in the art that the electronic device structure shown in the figure does not constitute a limitation of the electronic device, and may include more or fewer components than shown, or combine certain components, or arrange the components differently.

[0249] The processor 501 is the control center of the electronic device 500. It connects the various parts of the entire electronic device 500 using various interfaces and lines. It executes various functions of the electronic device 500 and processes data by running or loading software programs and / or units stored in the memory 502 and calling data stored in the memory 502. The processor 501 can be a processor CPU, a graphics processor GPU, a network processor (NP), etc., and can implement or execute the various methods, steps, and logic blocks disclosed in the embodiments of this application.

[0250] In the embodiment of the present application, the processor 501 in the electronic device 500 loads instructions corresponding to one or more application processes into the memory 502 according to the following steps, and the processor 501 runs the application stored in the memory 502 to implement various functions, such as:

[0251] Obtain target data to be encrypted; determine a target encryption algorithm used when encrypting the target data through Markov chain parameters; encrypt the target data based on the target encryption algorithm to obtain encrypted data.

[0252] Furthermore, various functions implemented by running the application stored in the memory 502 can also be described in the aforementioned embodiments and will not be repeated here.

[0253] The specific implementation of the above operations can be found in the previous embodiments and will not be repeated here.

[0254] Optional, such as Figure 8 As shown, the electronic device 500 further includes: a touch screen 503, a radio frequency circuit 504, an audio circuit 505, an input unit 506, and a power supply 507. Among them, the processor 501 is electrically connected to the touch screen 503, the radio frequency circuit 504, the audio circuit 505, the input unit 506, and the power supply 507 respectively. Those skilled in the art will understand that Figure 8The electronic device structure shown in the figure does not constitute a limitation to the electronic device, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0255] The touch display screen 503 can be used for displaying a graphical user interface and receiving an operation instruction generated by the user acting on the graphical user interface. The touch display screen 503 can include a display panel and a touch panel. Among them, the display panel can be used for displaying information input by the user or information provided to the user and various graphical user interfaces of the electronic device, and these graphical user interfaces can be composed of graphics, text, icons, videos and any combination thereof. Optionally, the display panel can be configured in the form of a liquid crystal display (LCD), an organic light emitting diode (OLED, Organic Light-Emitting Diode) or the like. The touch panel can be used for collecting the user's touch operation on or near it (such as the user uses any suitable object or accessory such as a finger, a stylus on the touch panel or near the touch panel), and generates corresponding operation instructions, and the operation instructions execute corresponding programs. Optionally, the touch panel may include two parts: a touch detection device and a touch controller. Among them, the touch detection device detects the user's touch direction, detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts it into the touch point coordinates, and then sends it to the processor 501, and can receive the command sent by the processor 501 and execute it. The touch panel can cover the display panel. When the touch panel detects a touch operation on or near it, it is transmitted to the processor 501 to determine the type of touch event, and then the processor 501 provides a corresponding visual output on the display panel according to the type of touch event. In an embodiment of the present application, the touch panel and the display panel can be integrated into the touch display screen 503 to realize input and output functions. However, in some embodiments, the touch panel and the touch panel can be used as two independent components to realize input and output functions. That is, the touch display screen 503 can also be used as part of the input unit 506 to realize the input function.

[0256] The radio frequency circuit 504 may be used to transmit and receive radio frequency signals, so as to establish wireless communication with a network device or other electronic devices through wireless communication, and to transmit and receive signals with the network device or other electronic devices.

[0257] The audio circuit 505 can be used to provide an audio interface between the user and the electronic device through a speaker and microphone. The audio circuit 505 can convert the received audio data into an electrical signal and transmit it to the speaker, which then converts it into a sound signal for output. The microphone, on the other hand, converts the collected sound signal into an electrical signal, which is received by the audio circuit 505 and converted into audio data. The audio data is then output to the processor 501 for processing, and then transmitted to another electronic device through the radio frequency circuit 504, or the audio data is output to the memory 502 for further processing. The audio circuit 505 may also include an earphone jack to provide communication between an external headset and the electronic device.

[0258] The input unit 506 may be configured to receive input target video and generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control.

[0259] The power supply 507 is used to supply power to the various components of the electronic device 500. Optionally, the power supply 507 can be logically connected to the processor 501 via a power management system, thereby enabling the power management system to manage charging, discharging, and power consumption. The power supply 507 can also include one or more DC or AC power supplies, a recharging system, a power failure detection circuit, a power converter or inverter, a power status indicator, and other arbitrary components.

[0260] although Figure 8 Not shown in the figure, the electronic device 500 may further include a camera, a sensor, a wireless fidelity module, a Bluetooth module, etc., which will not be described in detail here.

[0261] In the above embodiments, the descriptions of each embodiment have their own emphasis. For parts not described in detail in a particular embodiment, please refer to the relevant descriptions of other embodiments. It should be noted that the electronic device provided in the embodiments of this application and the data processing method in the above embodiments are based on the same concept. The specific implementation process is detailed in the above method embodiments and will not be repeated here.

[0262] As can be seen from the above, the electronic device provided in the embodiments of the present application can obtain target data to be encrypted; determine the target encryption algorithm used when encrypting the target data using Markov chain parameters; and encrypt the target data based on the target encryption algorithm to obtain encrypted data. Thus, by determining the target encryption algorithm used when encrypting the target data using the Markov chain parameters, and then encrypting the target data based on the target encryption algorithm, the randomness of the encryption algorithm used when encrypting the target data can be improved, thereby making the encrypted target data difficult to crack and thus improving data security.

[0263] Those skilled in the art will appreciate that all or part of the steps in the various methods of the above embodiments may be accomplished by instructions, or by controlling related hardware through instructions. The instructions may be stored in a computer-readable storage medium and loaded and executed by a processor.

[0264] To this end, an embodiment of the present application provides a computer-readable storage medium, which includes a computer program. When the computer program is run on an electronic device, the computer program is used to cause the electronic device to perform any of the data processing methods provided in the embodiments of the present application. For example, the computer program can perform the following steps of the data processing method:

[0265] Obtain target data to be encrypted; determine a target encryption algorithm used when encrypting the target data through Markov chain parameters; encrypt the target data based on the target encryption algorithm to obtain encrypted data.

[0266] Furthermore, for the detailed steps of the above method steps, please refer to the description in the above embodiments, which will not be repeated here.

[0267] The specific implementation of the above operations can be found in the previous embodiments and will not be repeated here.

[0268] The computer-readable storage medium may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0269] Since the computer program stored in the computer-readable storage medium can execute any data processing method provided in the embodiments of the present application, the beneficial effects that can be achieved by any data processing method provided in the embodiments of the present application can be achieved. Please refer to the previous embodiments for details and will not be repeated here.

[0270] According to one aspect of the present application, a computer program product is also provided, including a computer program, which is stored in a computer-readable storage medium; when a processor of an electronic device reads the computer program from the computer-readable storage medium, the processor executes the computer program, so that the electronic device executes the methods provided in various optional implementations of the above embodiments.

[0271] In the above-mentioned data processing device, computer-readable storage medium, electronic device, and computer program product embodiments, the description of each embodiment has its own focus. For parts not described in detail in a particular embodiment, reference can be made to the relevant descriptions of other embodiments. Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes and beneficial effects of the above-described data processing device, computer-readable storage medium, computer program product, electronic device, and their corresponding units can be referred to the description of the data processing method in the above embodiments, and the details will not be repeated here.

[0272] The above is a detailed introduction to a data processing method, device, electronic device, vehicle, computer-readable storage medium and computer program product provided in the embodiments of the present application. Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for technical personnel in this field, based on the ideas of the present application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A data processing method, characterized in that: include: Obtain target data to be encrypted; Determining a target encryption algorithm used when encrypting the target data through Markov chain parameters; The target data is encrypted based on the target encryption algorithm to obtain encrypted data.

2. The data processing method according to claim 1, wherein: The determining, by using the Markov chain parameters, of a target encryption algorithm used when encrypting the target data includes: The target encryption algorithm used by the target data in each encryption round is determined by using the Markov chain parameters.

3. The data processing method according to claim 2, characterized in that: The target data is data collected based on the target device, and the target encryption algorithm used for the target data in each encryption round is determined by using the Markov chain parameters, including: determining, based on the device association information of the target device, the Markov chain parameters corresponding to the target data, the Markov chain parameters including initial probabilities of encrypting the target data using at least two encryption algorithms; Determining the number of encryption rounds corresponding to the target data; Based on the Markov chain parameters and the number of encryption rounds, the target encryption algorithm used by the target data in each encryption round is determined from the at least two encryption algorithms.

4. The data processing method according to claim 3, wherein: The determining, based on the device association information of the target device, the Markov chain parameter corresponding to the target data includes: calculating, based on the device association information of the target device, the initial probability of encrypting the target data using the at least two encryption algorithms; Based on the initial probability corresponding to each encryption algorithm, a Markov matrix corresponding to the target data is determined as the Markov chain parameter corresponding to the target data.

5. The data processing method according to claim 4, characterized in that: The at least two encryption algorithms include a first encryption algorithm and a second encryption algorithm, the complexity of the first encryption algorithm is greater than that of the second encryption algorithm, and the calculating, based on the device association information of the target device, the initial probability of using the at least two encryption algorithms to encrypt the target data includes: constructing, based on the device association information of the target device, a resource consumption constraint interval corresponding to when the target data is encrypted using the first encryption algorithm; The initial probability of encrypting the target data using the first encryption algorithm and the second encryption algorithm is calculated based on the resource consumption constraint interval.

6. The data processing method according to claim 5, characterized in that: The calculating, based on the resource consumption constraint interval, the initial probability of using the first encryption algorithm and the second encryption algorithm to encrypt the target data includes: Calculating a solution set interval based on the resource consumption constraint interval; Based on the solution set interval, the initial probability of encrypting the target data using the first encryption algorithm and the second encryption algorithm is calculated.

7. The data processing method according to claim 6, characterized in that: The calculating of a solution set interval based on the resource consumption constraint interval includes: Obtaining the maximum hardware resource amount of the target data acquisition device in the target device and the minimum hardware resource amount corresponding to the minimum complexity required for encrypting the target data; The solution set interval is calculated based on the maximum hardware resource amount, the minimum hardware resource amount, and the resource consumption constraint interval.

8. The data processing method according to claim 6, characterized in that: The target data includes multiple types, each type of the target data has a different data source, and constructing a resource consumption constraint interval corresponding to when encrypting the target data using the first encryption algorithm based on the device association information of the target device includes: constructing, based on the device association information of the target device and the data source of the target data, a resource consumption constraint subinterval corresponding to when the target data is encrypted using the first encryption algorithm; The resource consumption constraint sub-intervals corresponding to the target data are summed to obtain the resource consumption constraint interval corresponding to when the target data is encrypted using the first encryption algorithm.

9. The data processing method according to claim 8, characterized in that: Each type of target data is stored in a data acquisition package, and obtaining the target data to be encrypted includes: Each type of target data to be encrypted is obtained from the data acquisition package.

10. The data processing method according to claim 8, characterized in that: The device association information includes at least one of environmental information, a target amount of resources required to encrypt the target data using the second encryption algorithm, the number of each data source in the target device, and a data acquisition frame rate.

11. The data processing method according to claim 10, characterized in that: The data source includes at least one of a radar sensor, a camera, and a bus. The constructing, based on the device association information of the target device and the data source of the target data, of a resource consumption constraint subinterval corresponding to when the target data is encrypted using the first encryption algorithm includes: constructing, based on the target resource amount, the number of radar sensors in the target device, and the data acquisition frame rate, a first resource consumption constraint subinterval corresponding to encrypting the target data of the radar sensor using the first encryption algorithm; and\or, Based on the environmental information, the number of cameras in the target device, and the data acquisition frame rate, constructing a second resource consumption constraint subinterval corresponding to encrypting the target data of the camera using the first encryption algorithm; and\or, Based on the number of the buses in the target device and a data acquisition frame rate, a third resource consumption constraint sub-interval corresponding to encrypting the target data of the bus using the first encryption algorithm is constructed.

12. The data processing method according to claim 8, characterized in that: The calculating, based on the solution interval, the initial probability of using the first encryption algorithm and the second encryption algorithm to encrypt the target data includes: Determining, based on the solution set interval, a first probability of encrypting the target data of each of the data sources using the first encryption algorithm; Based on the first probability, calculating a second probability of encrypting the target data of each of the data sources using the second encryption algorithm; The initial probability of encrypting the target data using the first encryption algorithm and the second encryption algorithm is obtained based on the first probability and the second probability.

13. The data processing method according to claim 3, characterized in that: The step of determining, based on the Markov chain parameters and the number of encryption rounds, the target encryption algorithm used by the target data in each encryption round from among the at least two encryption algorithms comprises: Determining target Markov chain parameters corresponding to each encryption round based on the Markov chain parameters and the number of encryption rounds; Based on the target Markov chain parameters corresponding to each encryption round, the target encryption algorithm used in each encryption round is determined from the at least two encryption algorithms.

14. The data processing method according to claim 13, wherein: The target Markov chain parameters corresponding to the first encryption round are the Markov chain parameters, and the target Markov chain parameters in the remaining encryption rounds are calculated based on the target Markov chain parameters corresponding to the previous encryption round and the Markov chain parameters.

15. The data processing method according to claim 3, characterized in that: The at least two encryption algorithms include at least one of a piecewise linear chaotic mapping algorithm, a sinusoidal mapping algorithm, a Gaussian mapping algorithm, a nonlinear dynamic system mapping algorithm, and an infinite folding iterative chaotic mapping algorithm.

16. The data processing method according to any one of claims 1 to 15, characterized in that: The step of encrypting the target data based on the target encryption algorithm to obtain encrypted data includes: Selecting the initial encryption parameters required by the target encryption algorithm from the generated random number; The target data is encrypted based on the target encryption algorithm and the initial encryption parameters to obtain the encrypted data.

17. The data processing method according to claim 16, characterized in that: The target data corresponds to a target encryption algorithm with multiple encryption rounds, the target data includes data content and a data header, and encrypting the target data based on the target encryption algorithm and the initial encryption parameters to obtain the encrypted data includes: Encrypting the data content based on the target encryption algorithm and the initial encryption parameters corresponding to each encryption round to obtain first encrypted data; Encrypting the data header based on the target encryption algorithm and the initial encryption parameters corresponding to each encryption round to obtain second encrypted data; The encrypted data is obtained based on the first encrypted data and the second encrypted data.

18. The data processing method according to claim 17, characterized in that: The step of encrypting the data header based on the target encryption algorithm and the initial encryption parameters corresponding to each encryption round to obtain second encrypted data includes: Encrypting the data header based on the target encryption algorithm and the initial encryption parameters corresponding to each encryption round to obtain initial encrypted data; The initial encrypted data is encrypted to obtain the second encrypted data.

19. The data processing method according to claim 18, characterized in that: The second encrypted data includes the first data and / or the second data, and encrypting the initial encrypted data to obtain the second encrypted data includes: Obtaining replacement information having the same data length as the initial encrypted data, the replacement information including randomly arranged numerical values, the number of which matches the data length; sorting the initial encrypted data based on the replacement information to obtain the first data; and / or, Acquire key information having the same data length as the initial encrypted data; An exclusive OR operation is performed on the key unit in the key information and the data unit at the corresponding position in the initial encrypted data to obtain the second data.

20. The data processing method according to claim 1, wherein: The method further comprises: The encrypted data is uploaded to a cloud to store the encrypted data in the cloud.

21. A data processing method, characterized in that: include: Get the Markov chain parameters used when encrypting encrypted data; Determining a target encryption algorithm to be used when encrypting the encrypted data based on the Markov chain parameters; Based on the target encryption algorithm, the encrypted data is decrypted to obtain decrypted data.

22. The data processing method according to claim 21, characterized in that: The encrypted data is encrypted multiple times by a target encryption algorithm in multiple encryption rounds, and the encrypted data is decrypted based on the target encryption algorithm to obtain decrypted data, including: The encrypted data is decrypted based on the target encryption algorithm corresponding to each encryption round to obtain the decrypted data.

23. The data processing method according to claim 22, characterized in that: The encrypted data includes first encrypted data corresponding to the data content and second encrypted data corresponding to the data header, and decrypting the encrypted data based on the target encryption algorithm corresponding to each encryption round to obtain the decrypted data includes: Decrypting the first encrypted data based on the target encryption algorithm corresponding to each encryption round to obtain first decrypted data; decrypting the second encrypted data based on the target encryption algorithm corresponding to each encryption round to obtain second decrypted data; The decrypted data is obtained based on the first decrypted data and the second decrypted data.

24. The data processing method according to claim 23, characterized in that: Decrypting the second encrypted data based on the target encryption algorithm corresponding to each encryption round to obtain second decrypted data includes: decrypting the second encrypted data based on the target encryption algorithm corresponding to each encryption round to obtain initial decrypted data; The initial decrypted data is decrypted to obtain the second decrypted data.

25. The data processing method according to claim 24, characterized in that: The second decrypted data includes third data and fourth data, and decrypting the initial decrypted data to obtain the second decrypted data includes: Obtaining key information corresponding to the second encrypted data; Based on the key information, performing an inverse XOR operation on the initial decrypted data to obtain the third data; and / or, Obtaining replacement information corresponding to the second encrypted data; Based on the replacement information, the initial decrypted data is reversely sorted to obtain the fourth data.

26. A data processing device, characterized in that: include: A first acquisition module, configured to acquire target data to be encrypted; A first determining module is used to determine a target encryption algorithm used when encrypting the target data through a Markov chain parameter; The encryption module is used to encrypt the target data based on the target encryption algorithm to obtain encrypted data.

27. The data processing device according to claim 26, characterized in that The target data is data stored in an industrial computer of a target device, and the first acquisition module is used to acquire the target data from the industrial computer.

28. A data processing device, characterized in that: include: The second acquisition module is used to obtain the Markov chain parameters used when encrypting the encrypted data; A second determining module is configured to determine a target encryption algorithm used when encrypting the encrypted data based on the Markov chain parameters; The decryption module is used to decrypt the encrypted data based on the target encryption algorithm to obtain decrypted data.

29. A data processing system, characterized in that: The data processing system includes an encryption device and / or a decryption device; The encryption device is used to execute the data processing method according to any one of claims 1 to 20; The decryption device is used to execute the data processing method according to any one of claims 21 to 25.

30. The data processing system according to claim 29, wherein: The encryption device is further used to obtain the target data to be encrypted from the industrial computer of the target device.

31. The data processing system according to claim 29, wherein: The encryption device is further used to upload the encrypted data to the cloud; The decryption device is further used to obtain the encrypted data in the cloud for decryption.

32. An electronic device, characterized in that: The method comprises a processor and a memory, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor is enabled to perform the steps of the method according to any one of claims 1 to 25.

33. A vehicle, characterized in that: The vehicle includes the electronic device according to claim 32, or the data processing device according to any one of claims 26 to 28, or the data processing system according to any one of claims 29 to 31.

34. A computer-readable storage medium, characterized in that The method comprises a computer program. When the computer program is run on an electronic device, the computer program is used to enable the electronic device to execute the steps of any one of the methods according to claims 1 to 25.

35. A computer program product, characterized in that The invention comprises a computer program, which implements the steps of the method according to any one of claims 1 to 25 when executed by a processor.

Images