Personal information security processing method, device and system, storage medium and vehicle

Abstract

The invention provides a personal information security processing method. The method comprises the following steps: a vehicle-end device randomly generates a data encryption key; storing the generated data encryption key, and displaying the data encryption key on a display screen of the vehicle-end equipment in the form of a two-dimensional code; acquiring personal information data needing to be transmitted, and encrypting the personal information data by using the generated data encryption key and a predetermined security encryption algorithm to obtain encrypted data; and establishing communication connection with a cloud server, performing bidirectional authentication, and uploading the encrypted data to the cloud server after the bidirectional authentication is successful. The invention further discloses a corresponding device and system, a storage medium and a vehicle. According to the invention, the security of personal information can be improved.

Description

Technical Field

[0001] The present invention relates to the field of data security technology in vehicle equipment, and in particular to a method, device, system, storage medium and vehicle for securely processing personal information. Background Art

[0002] With the development of intelligent, connected vehicles, the types and amounts of personal information collected by vehicles are increasing. Leakage of this personal information can severely impact user rights and corporate image. To enhance the user experience, automakers are offering features that synchronize vehicle-side information with mobile devices, such as remotely viewing in-car images. However, these features, which involve synchronizing information between the vehicle and mobile apps, involve long data transmission links and carry a high risk of information leakage.

[0003] Currently, data synchronization between the vehicle and the mobile phone is typically achieved through the cloud. This means the vehicle first synchronizes data to the IoV cloud, which then transmits it to the user's mobile phone. The long data transmission link between the vehicle and the mobile phone undoubtedly increases data security risks and can easily lead to personal information leakage. Furthermore, the transmitted data often involves personal privacy, which users do not want to be accessed by the cloud (automakers). Furthermore, in solutions that encrypt the transmission of personal information, the key is typically generated in the cloud and distributed to the mobile phone and vehicle. This also makes personal data easily accessible to the cloud, posing a risk of personal information leakage. Summary of the Invention

[0004] The technical problem to be solved by the present invention is to propose a method, device, system, storage medium and vehicle for secure processing of personal information, which can improve the security of personal information.

[0005] To solve the above technical problems, as one aspect of the present invention, a method for securely processing personal information is proposed, which is applied in a vehicle and includes the following steps:

[0006] The vehicle-side device randomly generates a data encryption key;

[0007] Store the generated data encryption key and display the data encryption key in the form of a QR code on the vehicle-side device display screen;

[0008] Collecting personal information data to be transmitted, and encrypting the personal information data using the generated data encryption key and a predetermined security encryption algorithm to obtain encrypted data;

[0009] Establish a communication connection with the cloud server and upload the encrypted data to the cloud server.

[0010] A data encryption key is randomly generated, including:

[0011] A random number of predetermined length generated using a hardware random number generator or a cryptographically secure pseudorandom number generator.

[0012] Storing the generated data encryption key includes:

[0013] The data encryption key is stored in a protected storage area of the vehicle-side device and encrypted using the vehicle-side device's master key, which is then rotated and updated regularly.

[0014] The step of establishing a communication connection with a cloud server and uploading the encrypted data to the cloud server includes:

[0015] Establish a communication connection with the cloud server and use a digital certificate-based authentication mechanism to perform two-way authentication with the cloud server;

[0016] When transmitting encrypted data, integrity checking and encryption protection are performed on the transmitted data.

[0017] As another aspect of the present invention, there is also provided a personal information security processing device for use in a vehicle, comprising:

[0018] The key generation module is used to randomly generate a data encryption key after the vehicle-side device is started;

[0019] The key display module is used to store the generated data encryption key and display the data encryption key in the form of a QR code on the vehicle-side device display screen;

[0020] A data encryption processing module is used to collect personal information data to be transmitted, and encrypt the personal information data using the generated data encryption key and a predetermined security encryption algorithm to obtain encrypted data;

[0021] The data upload module is used to establish a communication connection with the cloud server and perform two-way authentication. After the two-way authentication is successful, the encrypted data is uploaded to the cloud server.

[0022] As another aspect of the present invention, a method for securely processing personal information is provided, which is applied to a mobile terminal and includes the following steps:

[0023] Call the QR code scanning program in the mobile terminal, scan the QR code on the vehicle-side device display, and parse it to obtain the data encryption key;

[0024] Storing the extracted data encryption key;

[0025] Establish a communication connection with the cloud server and send a request to the cloud server to remotely view vehicle data;

[0026] Receive the encrypted data fed back by the cloud server, use the stored data encryption key and the same security encryption algorithm as the vehicle side to decrypt the encrypted data to obtain the personal information data.

[0027] The storing of the extracted data encryption key includes: storing the data encryption key in a secure storage area of the mobile phone and regularly backing up the stored data encryption key;

[0028] Establish a communication connection with the cloud server, including: performing two-way authentication with the cloud server.

[0029] Accordingly, as another aspect of the present invention, there is also provided a personal information security processing device, which is applied to a mobile terminal and includes:

[0030] The QR code scanning and parsing module is used to call the QR code scanning program in the mobile terminal, scan the QR code on the vehicle-side device display screen, and parse it to obtain the data encryption key;

[0031] A password storage module, used to securely store the extracted data encryption keys;

[0032] The data request module is used to establish a communication connection with the cloud server and perform two-way authentication. After the two-way authentication is successful, it sends a request to the cloud server to remotely view the vehicle-side data;

[0033] The data decryption module is used to receive encrypted data fed back by the cloud server, and use the stored data encryption key and the same security encryption algorithm as the vehicle side to decrypt the encrypted data to obtain the personal information data.

[0034] Accordingly, as another aspect of the present invention, a method for securely processing personal information is provided, comprising the following steps:

[0035] The vehicle-side device randomly generates a data encryption key and displays the data encryption key in the form of a QR code on the vehicle-side device display screen;

[0036] The mobile terminal scans the QR code displayed by the vehicle-side device to obtain data, obtain the data encryption key and store it;

[0037] The vehicle-side device collects personal information data and encrypts the data using a data encryption key and a secure encryption algorithm to obtain encrypted data. After successful two-way authentication with the cloud server, the encrypted data is uploaded to the cloud server;

[0038] The cloud server receives and stores the encrypted data transmitted by the vehicle-side device;

[0039] After the two-way authentication between the mobile terminal and the cloud server is successful, a request to remotely view vehicle data is sent to the cloud server;

[0040] After receiving the request from the mobile terminal to remotely view vehicle data, the cloud server queries and obtains the requested encrypted data and transmits it to the mobile terminal;

[0041] The mobile terminal receives the encrypted data fed back by the cloud server, uses the stored data encryption key and the same security encryption algorithm as the vehicle side to decrypt the encrypted data to obtain the personal information data.

[0042] Accordingly, as another aspect of the present invention, a personal information security processing system is provided, comprising:

[0043] The vehicle side is equipped with the aforementioned personal information security processing device;

[0044] A mobile terminal having a personal information security processing device as described above deployed therein;

[0045] The cloud server is used to perform two-way authentication with the vehicle side and the mobile terminal respectively, receive and store the encrypted data uploaded by the vehicle side; and receive data query requests from the mobile terminal and send the requested encrypted data to the mobile terminal.

[0046] Accordingly, as another aspect of the present invention, it also includes a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above method are implemented.

[0047] Accordingly, as another aspect of the present invention, a vehicle is provided, comprising:

[0048] one or more processors;

[0049] a memory for storing one or more computer programs;

[0050] When the one or more computer programs are executed by the one or more processors, the one or more processors are caused to implement the aforementioned method.

[0051] The implementation of the present invention has the following beneficial effects:

[0052] The present invention provides a method, device, system, storage medium, and vehicle for securely processing personal information. This invention utilizes end-to-end encryption. When the vehicle-side device and mobile terminal are first connected (or in other specific scenarios), the encryption password is shared between the two via a QR code. The cloud server only stores the encrypted data and cannot access the corresponding data encryption password, thereby reducing the risk of cloud-based leaks. Implementing this invention effectively protects personal information, ensuring that only the user has access to their complete personal information, improving security while meeting the user's need for privacy protection.

[0053] In this invention, a two-way authentication mechanism is used for both vehicle-side and cloud-based communications, as well as between mobile devices and the cloud. This mechanism uses digital certificates for identity verification, for example, by matching public and private keys to confirm the legitimacy of both communicating parties and prevent man-in-the-middle attacks. This strict authentication mechanism effectively reduces the risk of data theft or tampering during transmission, ensuring communication security.

[0054] In this invention, the generated data encryption keys are securely stored in secure storage areas on both the vehicle and mobile terminals, equipped with anti-tampering and anti-theft mechanisms, and protected by encryption. Furthermore, the stored data encryption keys are regularly backed up, and the backup data is also encrypted. This secure key storage and backup mechanism effectively prevents key loss, improves the system's fault tolerance and reliability, and ensures that users can access their original personal information at any time. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, without inventive work, other drawings derived from these drawings still fall within the scope of the present invention.

[0056] Figure 1 A schematic diagram of the main process of a first embodiment of a method for securely processing personal information provided by the present invention;

[0057] Figure 2 A schematic diagram of the main process of a second embodiment of a method for securely processing personal information provided by the present invention;

[0058] Figure 3 This is a schematic diagram of the main process of a third embodiment of a method for securely processing personal information provided by the present invention;

[0059] Figure 4 A schematic structural diagram of an embodiment of a personal information security processing system provided by the present invention;

[0060] Figure 5 for Figure 4 Schematic diagram of the structure of the CRRC end;

[0061] Figure 6 for Figure 4 Schematic diagram of the structure of the mobile terminal. DETAILED DESCRIPTION

[0062] In order to make the objectives, technical solutions and advantages of the present invention more clear, the present invention will be described in further detail below with reference to the accompanying drawings.

[0063] like Figure 1 FIG. 1 shows a schematic diagram of the main process of a first embodiment of a method for securely processing personal information provided by the present invention. In this embodiment, the method for securely processing personal information is applied to a vehicle, and includes the following steps:

[0064] Step S10: The vehicle-side device randomly generates a data encryption key (DEK) with a predetermined number of bits;

[0065] Specifically, the step S10 further includes:

[0066] After the vehicle-side device is powered on, a hardware random number generator (HRNG) or a cryptographically secure pseudo-random number generator (CSPRNG) is used to generate a random number of a predetermined number of bits (e.g., 128 kbit) in a secure hardware security module (HSM) or a hardened software environment. The random number generation algorithm must comply with international security standards, such as a hardware random number generator (HRNG) or a cryptographically secure pseudo-random number generator (CSPRNG), to ensure that the generated key is sufficiently random and unpredictable.

[0067] Step S11, storing the generated data encryption key and displaying the data encryption key on the vehicle-side device display screen in the form of a QR code;

[0068] In this step, storing the generated data encryption key may include:

[0069] The data encryption key is stored in a protected storage area on the vehicle-side device. This area has an access control mechanism and can only be accessed by authorized vehicle-side modules. It is encrypted and protected using the vehicle-side device's master key. The master key is rotated and updated regularly (e.g., monthly) to reduce the risk of key leakage.

[0070] The generated DEK is displayed on the vehicle's display screen in the form of a QR code. The QR code generation process must adhere to relevant encoding standards to ensure accurate recognition by mobile terminals. Furthermore, the QR code can be processed for security reasons, such as adding a check digit and implementing error-correction coding, to prevent key retrieval failures caused by errors during QR code transmission or scanning.

[0071] Step S12: collecting personal information data to be transmitted, and encrypting the personal information data using the generated data encryption key and a predetermined security encryption algorithm to obtain encrypted data;

[0072] Specifically, the vehicle-side device collects personal information data (Message) that needs to be transmitted, such as in-vehicle images, vehicle status information, etc. Before encryption, the data is pre-processed, such as compression and format conversion, to reduce the data volume and improve encryption efficiency.

[0073] The vehicle-side device uses the generated data encryption key (DEK) and a predetermined security encryption algorithm to encrypt the preprocessed data.

[0074] In a specific example, the secure encryption algorithm can employ an internationally accepted symmetric encryption algorithm, such as the Advanced Encryption Standard (AES). The AES algorithm is efficient and secure, effectively protecting data confidentiality. During the encryption process, the AES algorithm specifications are strictly adhered to, and appropriate encryption modes (such as CBC, GCM, etc.) and padding methods (such as PKCS#7) are set to ensure the security and correctness of the encryption process. The encrypted data is the encrypted data (DEK_Message).

[0075] Step S13: Establish a communication connection with the cloud server and perform two-way authentication. After the two-way authentication is successful, upload the encrypted data to the cloud server.

[0076] This step further includes:

[0077] The vehicle-side device establishes a communication connection with the cloud server. During the connection establishment process, both parties perform mutual authentication. This mutual authentication uses an identity verification mechanism based on digital certificates. In this specific example, the vehicle-side device and the cloud server each have a digital certificate issued by an authoritative certificate authority (CA).

[0078] At this point, the vehicle-side device sends its digital certificate to the cloud server. The cloud server verifies the vehicle-side device's digital certificate, checking its validity, signature, and other information. Simultaneously, the cloud server sends its own digital certificate to the vehicle-side device, which then verifies the cloud server's digital certificate. Only when both parties have successfully verified each other, is two-way authentication successful and the communication connection established.

[0079] After the communication connection is established, the vehicle-side device transmits the encrypted data to the cloud server via a secure communication protocol (such as TLS / SSL). When transmitting the encrypted data, a hash algorithm is used to perform integrity verification and encryption protection on the transmitted data.

[0080] like Figure 2FIG2 is a schematic diagram showing the main flow of a second embodiment of a method for securely processing personal information provided by the present invention; in this embodiment, the method for securely processing personal information is applied to a mobile terminal, which may be a smart phone, a tablet, a mobile computer, or a smart wearable device; the method comprises the following steps:

[0081] Step S20: calling the QR code scanning program in the mobile terminal to scan the QR code on the display screen of the vehicle-side device and parse it to obtain the data encryption key;

[0082] Specifically, the corresponding software is opened in the mobile terminal, and the function of scanning the QR code is selected in the specific interface of the software. The software calls the camera module of the mobile terminal device to start the QR code scanning program.

[0083] The mobile terminal's scanning program scans the QR code on the vehicle-side device's display in real time. During the scanning process, a highly efficient image recognition algorithm is employed to quickly and accurately identify the information contained in the QR code. Furthermore, the scanning environment is monitored for factors such as ambient light intensity and the clarity of the QR code. If the scanning environment is not ideal, the user is prompted to adjust the position of the phone or vehicle-side device to improve scanning success rates.

[0084] Once the QR code is successfully scanned, the mobile terminal parses the information in the QR code and extracts the data encryption key (DEK). During the parsing process, the data can be checked for integrity to ensure that the extracted DEK is correct.

[0085] Step S21, storing the extracted data encryption key; specifically, including: storing the data encryption key in a secure storage area of the mobile phone, and regularly backing up the stored data encryption key;

[0086] In some cases, after obtaining the DEK, the mobile terminal immediately stores it securely locally. The storage method must also meet high security requirements, such as storing the DEK in a secure storage area of the phone, such as the Android system's Keystore (with hardware-level encryption protection to prevent other applications or external attackers from obtaining it) or the iOS system's Secure Enclave (also with hardware-level security protection).

[0087] In a specific example, access control is implemented on the stored DEK, so that only authorized modules on the mobile terminal can access the key. At the same time, the mobile terminal can regularly back up the stored DEK, and the backup data is stored in the cloud or other secure location. However, the backup data also needs to be encrypted to prevent data leakage during the backup process.

[0088] Step S22: Establish a communication connection with the cloud server and perform two-way authentication. After the two-way authentication is successful, send a request to the cloud server to remotely view the vehicle data.

[0089] Specifically, a user initiates a request to remotely view vehicle-side data on a mobile device. The mobile device then establishes a communication connection with the cloud server, also undergoing two-way authentication. This process is similar to the two-way authentication between the vehicle device and the cloud server, employing a digital certificate-based authentication mechanism.

[0090] The mobile terminal sends its digital certificate to the cloud server, which verifies it. Simultaneously, the cloud server sends its digital certificate to the mobile terminal, which verifies it. Only when both parties have successfully verified each other, is mutual authentication successful and the communication connection established.

[0091] After successful two-way authentication, the cloud server performs a permissions check on the mobile terminal to confirm whether the user has the right to remotely view vehicle data. If the permission check passes, the cloud server enables the remote viewing of vehicle data and sends a confirmation message to the mobile terminal.

[0092] Step S23: Receive the encrypted data from the cloud server and decrypt it using the stored data encryption key and the same secure encryption algorithm used on the vehicle to obtain the personal information. Specifically, after receiving the encrypted data from the cloud server, the mobile terminal first performs an integrity check on the received data to ensure that it has not been tampered with during transmission.

[0093] The mobile terminal retrieves the previously stored data encryption key (DEK) from its local secure storage area and decrypts the encrypted data using the same secure encryption algorithm (e.g., AES) as used for vehicle-side encryption. During the decryption process, the encryption algorithm specifications are strictly followed, and the same encryption mode and padding are used as for encryption to ensure the security and correctness of the decryption process. The data obtained after decryption is the original personal information data (Message).

[0094] The mobile terminal displays the decrypted data to the user, such as displaying in-car images or vehicle status information on the app interface. At the same time, certain security processing is performed on the displayed data, such as desensitizing sensitive information to prevent information leakage when the user views the data.

[0095] like Figure 3FIG2 is a schematic diagram showing the main flow of a third embodiment of a method for securely processing personal information provided by the present invention. In this embodiment, the method for securely processing personal information is applied to a system including a vehicle terminal, a mobile terminal, and a cloud server. Specifically, the method for securely processing personal information includes the following steps:

[0096] Step 1: The vehicle-side device randomly generates a data encryption key with a predetermined number of bits, and displays the data encryption key in the form of a QR code on the vehicle-side device display screen;

[0097] Step 2: The mobile terminal scans the QR code displayed by the vehicle-side device to obtain data, obtain the data encryption key and store it;

[0098] Step 3: The vehicle-side device collects personal information data and encrypts the data using a data encryption key and a secure encryption algorithm to obtain encrypted data;

[0099] Step 4: After the vehicle-side device successfully completes the two-way authentication with the cloud server, it uploads the encrypted data to the cloud server; the cloud server receives and stores the encrypted data transmitted by the vehicle-side device;

[0100] Step 5: After the two-way authentication between the mobile terminal and the cloud server is successful, a request to remotely view vehicle data is sent to the cloud server;

[0101] Step 6: After receiving the request from the mobile terminal to remotely view vehicle data, the cloud server queries and obtains the requested encrypted data and transmits it to the mobile terminal;

[0102] The cloud server uses an efficient data storage and retrieval mechanism to quickly and accurately locate the encrypted data that needs to be synchronized in the database.

[0103] After retrieving the encrypted data, the cloud server communicates with the mobile terminal again to confirm the data transmission request and parameters. Once confirmed, the cloud server transmits the encrypted data to the mobile terminal via a secure communication protocol (such as TLS / SSL). During the transmission process, the transmitted data is also protected by integrity checks and encryption.

[0104] In step 7, the mobile terminal receives the encrypted data fed back by the cloud server, and decrypts the encrypted data using the stored data encryption key and the same security encryption algorithm as the vehicle side to obtain the personal information data.

[0105] For more details, please refer to and combine the above Figure 1 and Figure 2 The description is not repeated here.

[0106] like Figure 4FIG. 1 is a schematic diagram showing a structure of an embodiment of a personal information security processing system provided by the present invention. In this embodiment, the personal information security processing system includes at least:

[0107] The vehicle side 1 is used to randomly generate a data encryption key and display it in the form of a QR code; and periodically use the data encryption key to encrypt personal information data and transmit it to the cloud server 2;

[0108] The mobile terminal 3 is configured to scan the QR code to obtain the data encryption key therein; request the encrypted data uploaded by the vehicle terminal 1 from the cloud server 2, and decrypt the encrypted data using the data encryption key and a predetermined encryption algorithm; the mobile terminal 3 may be a smartphone, tablet, mobile computer, smart wearable device, etc.;

[0109] The cloud server 2 is used to perform two-way authentication with the vehicle terminal 1 and the mobile terminal 3 respectively, receive and store the encrypted data uploaded by the vehicle terminal 1; and receive data query requests from the mobile terminal 3 and send the requested encrypted data to the mobile terminal 3.

[0110] More specifically, if Figure 5 As shown, it shows Figure 4 The vehicle end 1 at least includes:

[0111] The key generation module 10 is used to randomly generate a data encryption key of a predetermined number of bits after the vehicle-side device is started;

[0112] The key display module 11 is used to store the generated data encryption key and display the data encryption key in the form of a QR code on the vehicle-side device display screen;

[0113] The data encryption processing module 12 is used to collect personal information data to be transmitted, and encrypt the personal information data using the generated data encryption key and a predetermined security encryption algorithm to obtain encrypted data;

[0114] The data uploading module 13 is used to establish a communication connection with the cloud server and perform two-way authentication. After the two-way authentication is successful, the encrypted data is uploaded to the cloud server.

[0115] More specifically, if Figure 6 As shown, it shows Figure 4 Schematic diagram of the structure of the mobile terminal in the mobile terminal, the mobile terminal 3 at least includes:

[0116] The QR code scanning and parsing module 30 is used to call the QR code scanning program in the mobile terminal, scan the QR code on the display screen of the vehicle-side device, and parse it to obtain the data encryption key;

[0117] Password storage module 31, used for securely storing the extracted data encryption key;

[0118] The data request module 32 is used to establish a communication connection with the cloud server and perform two-way authentication. After the two-way authentication is successful, it sends a request to the cloud server to remotely view the vehicle-side data;

[0119] The data decryption module 33 is used to receive the encrypted data fed back by the cloud server, and use the stored data encryption key and the same security encryption algorithm as the vehicle side to decrypt the encrypted data to obtain the personal information data therein.

[0120] For more details, please refer to and combine the above Figures 1 to 3 The description is not repeated here.

[0121] As another aspect of the present invention, a computer-readable storage medium is provided on which a computer program is stored. When the computer program is executed by a processor, the computer program can achieve the following Figures 1 to 3 For more details, please refer to and combine the above Figures 1 to 3 The description is not repeated here.

[0122] As another aspect of the present invention, a vehicle is provided, comprising:

[0123] one or more processors;

[0124] a memory for storing one or more computer programs;

[0125] When the one or more computer programs are executed by the one or more processors, the one or more processors are caused to implement the following Figures 1 to 3 For more details, please refer to and combine the above Figures 1 to 3 The description is not repeated here.

[0126] The implementation of the embodiments of the present invention has the following beneficial effects:

[0127] The present invention provides a method, device, system, storage medium, and vehicle for securely processing personal information. This invention utilizes end-to-end encryption. When the vehicle-side device and mobile terminal are first connected (or in other specific scenarios), the encryption password is shared between the two via a QR code. The cloud server only stores the encrypted data and cannot access the corresponding data encryption password, thereby reducing the risk of cloud-based leaks. Implementing this invention effectively protects personal information, ensuring that only the user has access to their complete personal information, improving security while meeting the user's need for privacy protection.

[0128] In this invention, a two-way authentication mechanism is used for both vehicle-side and cloud-based communications, as well as between mobile devices and the cloud. This mechanism uses digital certificates for identity verification, for example, by matching public and private keys to confirm the legitimacy of both communicating parties and prevent man-in-the-middle attacks. This strict authentication mechanism effectively reduces the risk of data theft or tampering during transmission, ensuring communication security.

[0129] In this invention, the generated data encryption keys are securely stored in secure storage areas on both the vehicle and mobile terminals, equipped with anti-tampering and anti-theft mechanisms, and protected by encryption. Furthermore, the stored data encryption keys are regularly backed up, and the backup data is also encrypted. This secure key storage and backup mechanism effectively prevents key loss, improves the system's fault tolerance and reliability, and ensures that users can access their original personal information at any time.

[0130] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowcharts and / or block diagrams, as well as combinations of processes and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowcharts and / or block diagrams. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0131] The above disclosure is only a preferred embodiment of the present invention and certainly cannot be used to limit the scope of the present invention. Therefore, equivalent changes made according to the claims of the present invention are still within the scope of the present invention.

Claims

1. A method for securely processing personal information, applied in a vehicle, characterized in that: Including steps: The vehicle-side device randomly generates a data encryption key; Store the generated data encryption key and display the data encryption key in the form of a QR code on the vehicle-side device display screen; Collecting personal information data to be transmitted, and encrypting the personal information data using the generated data encryption key and a predetermined security encryption algorithm to obtain encrypted data; Establish a communication connection with the cloud server and upload the encrypted data to the cloud server.

2. The method according to claim 1, characterized in that A data encryption key with a predetermined number of bits is randomly generated, including: A random number of predetermined length generated using a hardware random number generator or a cryptographically secure pseudorandom number generator.

3. The method according to claim 2, characterized in that Stores the generated data encryption keys, including: The data encryption key is stored in a protected storage area of the vehicle-side device and encrypted using the vehicle-side device's master key, which is then rotated and updated regularly.

4. The method according to any one of claims 1 to 3, characterized in that Establishing a communication connection with a cloud server and uploading the encrypted data to the cloud server includes: Establish a communication connection with the cloud server and use a digital certificate-based authentication mechanism to perform two-way authentication with the cloud server; When transmitting encrypted data, integrity checking and encryption protection are performed on the transmitted data.

5. A personal information security processing device, used in a vehicle, characterized in that: include: The key generation module is used to randomly generate a data encryption key after the vehicle-side device is started; The key display module is used to store the generated data encryption key and display the data encryption key in the form of a QR code on the vehicle-side device display screen; A data encryption processing module is used to collect personal information data to be transmitted, and encrypt the personal information data using the generated data encryption key and a predetermined security encryption algorithm to obtain encrypted data; The data upload module is used to establish a communication connection with the cloud server and perform two-way authentication. After the two-way authentication is successful, the encrypted data is uploaded to the cloud server.

6. A method for securely processing personal information, applied to a mobile terminal, characterized in that: The steps include: Call the QR code scanning program in the mobile terminal, scan the QR code on the vehicle-side device display, and parse it to obtain the data encryption key; Storing the extracted data encryption key; Establish a communication connection with the cloud server and send a request to the cloud server to remotely view vehicle data; Receive the encrypted data fed back by the cloud server, use the stored data encryption key and the same security encryption algorithm as the vehicle side to decrypt the encrypted data to obtain the personal information data.

7. The method according to claim 6, characterized in that in: The storing of the extracted data encryption key includes: storing the data encryption key in a secure storage area of the mobile phone and regularly backing up the stored data encryption key; Establish a communication connection with the cloud server, including: performing two-way authentication with the cloud server.

8. A personal information security processing device, used in a mobile terminal, characterized in that: include: The QR code scanning and parsing module is used to call the QR code scanning program in the mobile terminal, scan the QR code on the vehicle-side device display screen, and parse it to obtain the data encryption key; A password storage module, used to securely store the extracted data encryption keys; The data request module is used to establish a communication connection with the cloud server and perform two-way authentication. After the two-way authentication is successful, it sends a request to the cloud server to remotely view the vehicle-side data; The data decryption module is used to receive encrypted data fed back by the cloud server, and use the stored data encryption key and the same security encryption algorithm as the vehicle side to decrypt the encrypted data to obtain the personal information data.

9. A method for securely processing personal information, characterized in that: The steps include: The vehicle-side device randomly generates a data encryption key and displays the data encryption key in the form of a QR code on the vehicle-side device display screen; The mobile terminal scans the QR code displayed by the vehicle-side device to obtain data, obtain the data encryption key and store it; The vehicle-side device collects personal information data and encrypts the data using a data encryption key and a secure encryption algorithm to obtain encrypted data. After successful two-way authentication with the cloud server, the encrypted data is uploaded to the cloud server; The cloud server receives and stores the encrypted data transmitted by the vehicle-side device; After the two-way authentication between the mobile terminal and the cloud server is successful, a request to remotely view vehicle data is sent to the cloud server; After receiving the request from the mobile terminal to remotely view vehicle data, the cloud server queries and obtains the requested encrypted data and transmits it to the mobile terminal; The mobile terminal receives the encrypted data fed back by the cloud server, uses the stored data encryption key and the same security encryption algorithm as the vehicle side to decrypt the encrypted data to obtain the personal information data.

10. A personal information security processing system, characterized in that: include: A vehicle end, in which the personal information security processing device according to claim 5 is deployed; A mobile terminal, in which the personal information security processing device according to claim 8 is deployed; The cloud server is used to perform two-way authentication with the vehicle and mobile terminal, receive and store encrypted data uploaded by the vehicle; and receiving a data query request from a mobile terminal, and sending the requested encrypted data to the mobile terminal.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 4, 6, and 9 are implemented.

12. A vehicle, characterized in that: include: one or more processors; a memory for storing one or more computer programs; When the one or more computer programs are executed by the one or more processors, the one or more processors are caused to implement the method according to any one of claims 1 to 4.

Images