Sensitive data security protection method, electronic equipment and storage medium

Abstract

The invention provides a sensitive data safety protection method, electronic equipment and a storage medium. The sensitive data safety protection method comprises the steps of collecting emotion data of a driver; determining an emotional state level according to the emotional data; determining an encryption key based on the emotional state level; encrypting the sensitive data by adopting an encryption method corresponding to the emotional state level according to the emotional state level and the encryption key; wherein different emotional state levels correspond to different encryption methods. The method and the device are used for setting different encryption methods according to different emotional state grades of a driver and carrying out graded protection on sensitive data, so that safety protection adaptive to the grades is provided for the sensitive data, and refinement and pertinence of sensitive data encryption are realized.

Description

Technical Field

[0001] The present application relates to the field of automotive electronic information technology, and more specifically, to a method for securely protecting sensitive data, an electronic device, a storage medium, and a computer program product. Background Art

[0002] With the continuous development of new energy vehicle technology, the functionality of in-vehicle information systems is becoming increasingly rich. Consequently, a large amount of sensitive data is transmitted and stored within the vehicle and between external platforms, including the driver's biometrics, physiological status, driving behavior, vehicle control commands, and environmental perception data. This data is highly dynamic and not only involves personal privacy but may also affect vehicle safety and user experience. However, existing technologies for protecting this sensitive data often employ a unified encryption scheme, using the same encryption algorithm regardless of the data's sensitivity. For example, driver biometric data (such as fingerprints and facial recognition information) and general driving behavior data (such as vehicle speed and steering frequency) may be treated the same. A leak of biometric data could lead to identity theft, while general driving behavior data, while potentially less vulnerable to leakage, lacks sufficient protection for highly sensitive data and may also result in a waste of resources. Summary of the Invention

[0003] The purpose of the embodiments of the present application is to provide a method, electronic device, and storage medium for the security protection of sensitive data, which are used to set different encryption methods according to the different emotional state levels of the driver, and perform hierarchical protection of sensitive data, thereby providing security protection for sensitive data that is commensurate with the risk level, and realizing the refinement and targeting of sensitive data encryption.

[0004] To achieve the above objectives, the technical solutions adopted in the embodiments of the present application are as follows: In a first aspect, an embodiment of the present application provides a method for securely protecting sensitive data, comprising: Collecting emotional data of the driver; determining an emotional state level based on the emotional data; determining an encryption key based on the emotional state level; encrypting the sensitive data using an encryption method corresponding to the emotional state level based on the emotional state level and the encryption key; wherein different emotional state levels correspond to different encryption methods.

[0005] In one embodiment, determining the encryption key based on the emotional state level includes: judging whether to update the historical key according to the change of the emotional state level; and determining the encryption key according to the historical key and whether to update the historical key.

[0006] In one embodiment, judging whether to update the historical key according to the change of the emotional state level includes: if the emotional state level does not change, not updating the historical key; and the encryption key is the historical key.

[0007] In one embodiment, determining whether to update the historical key based on the change in the emotional state level includes: if the emotional state level changes, determining to update the historical key; determining the encryption key based on the historical key and whether to update the historical key includes: generating the encryption key based on the real-time speed of the vehicle, a timestamp, and the historical key.

[0008] In one embodiment, the sensitive data is encrypted according to the emotional state level and the encryption key using an encryption method corresponding to the emotional state level, including: if the emotional state level is low, the sensitive data is encrypted using a first encryption method to obtain first encrypted data; if the emotional state level is intermediate, the sensitive data is encrypted using a second encryption method to obtain second encrypted data; if the emotional state level is high, the sensitive data is encrypted using a third encryption method to obtain third encrypted data; the security level of the first encryption method is lower than that of the second encryption method; the security level of the second encryption method is lower than that of the third encryption method.

[0009] In one embodiment, the first encryption method is an AES symmetric encryption method with a 128-bit key length.

[0010] In one embodiment, the encrypting the sensitive data using a second encryption method to obtain second encrypted data includes: performing AES symmetric encryption with a 256-bit key length on the sensitive data, and combining the encrypted data with noise to obtain the second encrypted data.

[0011] In one embodiment, before combining the encrypted data with the noise, the method further comprises: generating the noise according to the real-time speed of the vehicle and a random value.

[0012] In one embodiment, the use of a third encryption method to encrypt the sensitive data to obtain third encrypted data includes: performing AES symmetric encryption with a 256-bit key length on the sensitive data, and storing the encrypted data in fragments to obtain third encrypted data.

[0013] In one embodiment, it also includes: receiving an access request from a vehicle system module; determining a target state level of the sensitive data based on the sensitive data accessed by the access request; determining a corresponding access frequency limit value based on the vehicle system module and the target state level; judging whether the access frequency limit value is exceeded based on the number of times the vehicle system module accesses the sensitive data, and if exceeded, adopting an exception handling mechanism.

[0014] In one embodiment, when the limit is exceeded, an exception handling mechanism is adopted, including: according to the number of times the access frequency limit is exceeded, when the number is less than or equal to a first threshold, a log is recorded; when the number is greater than the first threshold and less than or equal to a second threshold, a warning prompt is popped up; when the number is greater than the second threshold, the access preset time length is locked.

[0015] According to a second aspect of the present application, there is provided an electronic device comprising: a processor; and a memory for storing processor-executable instructions; wherein the processor is configured to execute the method for securely protecting sensitive data described in the above embodiment.

[0016] According to a third aspect of the present application, a storage medium is provided, storing a computer program, wherein the computer program can be executed by a processor to implement the method for securely protecting sensitive data described in the above embodiment.

[0017] According to a fourth aspect of the present application, a computer program product is provided, comprising a computer program / instruction, which, when executed by a processor, implements the method for securely protecting sensitive data described in the above embodiment.

[0018] The above-mentioned embodiments provide a method for protecting the security of sensitive data, an electronic device, and a storage medium. By setting different encryption methods according to the different emotional state levels of the driver, sensitive data is protected in a hierarchical manner, thereby achieving refined and targeted encryption of sensitive data. Differentiated protection strategies can be provided according to different scenarios, thereby providing sensitive data with security protection that is commensurate with the risk level, significantly improving the security and protection effect of sensitive data. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other relevant drawings can be obtained based on these drawings without creative work.

[0020] Figure 1 A schematic diagram of the architecture of the data security protection system provided in an embodiment of the present application; Figure 2 A flowchart of a method for protecting sensitive data provided in an embodiment of the present application; Figure 3 A schematic diagram of a process for encrypting data according to emotion levels provided in an embodiment of the present application; Figure 4 This is a schematic representation of the three-level risk assessment system provided in the embodiments of the present application; Figure 5 A flowchart of determining an encryption key based on changes in emotion levels provided in an embodiment of the present application; Figure 6 A schematic diagram of the hierarchical access control process provided in an embodiment of the present application; Figure 7 This is an indication of the permission control allocation provided in the embodiments of the present application; Figure 8 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

[0021] Icon: 001-electronic device; 002-processor; 003-memory. DETAILED DESCRIPTION

[0022] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0023] Figure 1 This is a schematic diagram of the architecture of the data security protection system provided in the embodiment of the present application; Figure 1 As shown in Figure 1, the system's three-tier security architecture includes: data acquisition layer, security processing layer, and application control layer. Each layer has a specific function and works together to ensure data security.

[0024] The data acquisition layer is the front-end of the system, responsible for collecting data related to the driver's emotions. Key components include cameras, which capture visual information such as the driver's facial expressions and eye contact. Sensors, including physiological sensors (such as heart rate sensors and skin conductance sensors), monitor the driver's physiological state and assist in determining their emotions. The raw data collected by these devices is transmitted to the security processing layer for further processing.

[0025] The security processing layer is the core of the system, responsible for classifying, encrypting, and managing permissions for collected emotional data. Its main modules include the emotion classification module, the dynamic encryption module, and the permissions management module. The emotion classification module receives raw data from the data collection layer, analyzes the driver's emotional state through algorithms, and categorizes it into different levels (such as calm, tired, angry, etc.). The emotion classification module serves as the foundation for subsequent dynamic encryption and permissions management. Based on the emotional state level determined by the emotion classification module, the dynamic encryption module selects the appropriate encryption algorithm and key to encrypt sensitive data. The encryption method and key are dynamically adjusted based on changes in emotional state to meet different security requirements. The permissions management module is responsible for defining and managing the access rights of different system modules to encrypted data. Based on the emotional state level and system module requirements, data access frequency and access level are restricted to ensure data security and compliance. Through the collaborative work of these modules, the security processing layer ensures the security of sensitive data during transmission and storage.

[0026] The application control layer is the back-end part of the system, responsible for transmitting securely processed data to the in-vehicle system or cloud platform for use by other applications and services. Its main functions include: data transmission, interface management, application support, etc.

[0027] It should be noted that the above scenario is intended to more clearly illustrate the technical solution of the embodiment of the present application, and does not constitute a limitation on the technical solution provided by the embodiment of the present application. Ordinary technicians in this field can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solution provided by the embodiment of the present application is also applicable to similar technical problems.

[0028] The following introduces the method for handling vehicle collisions provided in the embodiments of the present application.

[0029] Figure 2 A flowchart of a method for protecting sensitive data provided in an embodiment of the present application; Figure 2 As shown, the method for protecting sensitive data includes the following steps S100 to S400: Step S100: Collect the driver's emotional data.

[0030] Step S200: Determine the emotional state level according to the emotional data.

[0031] Step S300: Determine an encryption key based on the emotional state level.

[0032] Step S400: Encrypt the sensitive data according to the emotional state level and the encryption key using an encryption method corresponding to the emotional state level; different emotional state levels correspond to different encryption methods.

[0033] Specifically, sensitive data in this application refers to highly private and highly secure data related to the driver's personal privacy, vehicle safety, and driving behavior. This data includes the driver's biometrics (e.g., facial images, fingerprints), physiological status (e.g., heart rate, blood pressure), driving behavior (e.g., fatigue level, operating habits), vehicle control commands (e.g., acceleration and braking commands), and environmental perception data (e.g., radar and camera data). This data is highly dynamic and requires real-time protection and dynamic management to prevent leakage, tampering, or unauthorized access, ensuring driving safety and privacy.

[0034] First, various sensors and devices are needed to collect data related to the driver's emotions, including facial expressions, voice intonation, and physiological signals. To ensure data reliability, multiple sensors and devices are typically used for data collection. For example, cameras are used to capture the driver's facial expressions and eye contact. Microphones are used to collect the driver's voice signals and analyze their intonation and speed. Physiological sensors such as heart rate sensors and skin conductance sensors are used to monitor the driver's physiological state for subsequent emotional state analysis.

[0035] The collected emotional data needs to be analyzed and processed to determine the driver's current emotional state. This emotional state level is an important basis for selecting subsequent encryption strategies and is typically categorized into multiple levels, such as calm, fatigue, and anger, corresponding to low, medium, and high emotional state levels, respectively. This emotional state level can be determined using machine learning algorithms or pre-set rules. For example, analyzing facial expression features (such as frowning eyebrows or drooping mouth corners) can determine whether the driver is angry, while monitoring heart rate changes can determine fatigue. The emotional state level classification can be designed based on actual application scenarios and safety requirements to ensure the effectiveness of encryption strategies.

[0036] Based on the determined emotional state level, the system will generate or select the corresponding encryption key. This process ensures that the key matches the current emotional state. Generally speaking, the higher the emotional state level, the more complex the key generation mechanism is to ensure the security and uniqueness of the key, thereby providing security protection for sensitive data that is appropriate to the risk level.

[0037] Finally, sensitive data is encrypted based on the emotional state level and the generated encryption key. Different emotional state levels correspond to different encryption methods, preventing key reuse and enabling hierarchical management of data protection. This ensures higher levels of encryption protection in high-risk scenarios, reduces the risk of privacy leaks caused by plaintext transmission of emotional data, and prevents illegal tampering of vehicle control commands in emergency situations. It also avoids resource waste caused by over-encryption in low-risk scenarios, optimizes system resource utilization, and improves the overall efficiency and security of data protection.

[0038] In one embodiment, Figure 3 A schematic diagram of a process for encrypting data according to emotion levels provided in an embodiment of the present application; Figure 3 As shown, step S400, based on the emotional state level and the encryption key, uses an encryption method corresponding to the emotional state level to encrypt the sensitive data, including steps S410 to S430: Step S410: If the emotional state level is low, the sensitive data is encrypted using a first encryption method to obtain first encrypted data.

[0039] Step S420: If the emotional state level is intermediate, the sensitive data is encrypted using a second encryption method to obtain second encrypted data. Step S430: If the emotional state level is high, the sensitive data is encrypted using a third encryption method to obtain third encrypted data; the security level of the first encryption method is lower than that of the second encryption method; the security level of the second encryption method is lower than that of the third encryption method.

[0040] Specifically, Figure 4 The three-level risk assessment system provided in the embodiment of this application is intended to represent; Figure 4 As shown, this application divides the driver's emotional state into three levels according to their emotional characteristics, and takes corresponding protection measures for different levels: In one embodiment, the first encryption method is an AES symmetric encryption method with a 128-bit key length.

[0041] Specifically, for an emotional state level of 1 (corresponding to a low emotional state), the corresponding emotional characteristics are calm or joyful, and the corresponding protection measure is to encrypt sensitive data using the AES-128 encryption algorithm. This encryption method meets the data protection needs of low-risk emotional states and balances security and system resource usage.

[0042] In one embodiment, a second encryption method is used to encrypt the sensitive data to obtain second encrypted data, including: performing AES symmetric encryption with a 256-bit key length on the sensitive data, and combining the encrypted data with noise to obtain the second encrypted data.

[0043] Specifically, for an emotional state level of 2 (corresponding to a medium emotional state), the corresponding emotional characteristics are fatigue or distraction. The corresponding protection measure is to use the AES-256 encryption algorithm and add noise to the encrypted data. The AES-256 encryption algorithm provides higher security than AES-128, and the addition of noise further enhances the data's resistance to attacks, effectively defending against potential threats to data in fatigue or distraction states.

[0044] In one embodiment, before combining the encrypted data with the noise, the method further includes: generating noise according to the real-time speed of the vehicle and a random value.

[0045] Specifically, the noise is calculated using the following formula: Noise=rand(0,1)*1.5*Speed / 100 Among them, Noise is noise, Speed ​​is the current vehicle speed, the speed unit is km / h, and rand(0, 1) is a random number generated from 0 to 1.

[0046] In one embodiment, a third encryption method is used to encrypt sensitive data to obtain third encrypted data, including: performing AES symmetric encryption with a 256-bit key length on the sensitive data, and storing the encrypted data in fragments to obtain the third encrypted data.

[0047] Specifically, for emotional state level 3 (corresponding to the high emotional state level), the corresponding emotional characteristics are anger or panic, and the corresponding protection measures are the use of the AES-256 encryption algorithm and sharded storage. This is the highest level of protection, suitable for high-risk emotional states. Sharded storage divides data into multiple fragments and stores them in a distributed manner. Even if an attacker obtains some data fragments, it is difficult to restore the complete sensitive information, thus ensuring the greatest possible data security.

[0048] In one embodiment, Figure 5 The flowchart of determining the encryption key according to the change of the emotion level provided in the embodiment of the present application; Figure 5 As shown, step S300, determining the encryption key based on the emotional state level, includes the following steps S310-S320: Step S310: Determine whether to update the historical key based on the change in the emotional state level.

[0049] Step S320: Determine the encryption key based on the historical key and whether to update the historical key.

[0050] Specifically, the system monitors changes in emotional state levels. If the emotional state level changes (for example, from level 1 to level 2 or higher), the key update mechanism is triggered. A change in emotional state level indicates increased data sensitivity and risk. This judgment process ensures that encryption keys can be updated promptly when emotional state changes to adapt to new risk scenarios, thereby enhancing the flexibility and security of data protection. After determining whether to update historical keys, the system generates or selects new encryption keys based on the current emotional state level and historical keys. By updating the keys, even if the old key is leaked, an attacker cannot use the old key to access new data. According to relevant regulations (such as the "Several Provisions on Automotive Data Security Management"), the system is required to strictly protect biometric data. The key update mechanism is one of the important measures to ensure compliance.

[0051] In one embodiment, step S310 determines whether to update the historical key based on the change in the emotional state level, including: if the emotional state level has not changed, not updating the historical key; the encryption key is the historical key.

[0052] Specifically, if the emotional state level remains unchanged, the historical key is not updated and is directly used as the current encryption key. This mechanism ensures that when the emotional state is stable, the system can continue to use the existing key, thereby reducing unnecessary key updates, improving system efficiency, and maintaining data security.

[0053] In one embodiment, step S310 determines whether to update the historical key based on the change in the emotional state level, including: if the emotional state level changes, determining to update the historical key; determining the encryption key based on the historical key and whether to update the historical key, including: generating the encryption key based on the real-time speed of the vehicle, the timestamp and the historical key.

[0054] Specifically, when the emotional state level changes (for example, from level 1 to level 2 or higher), the system triggers the key update mechanism. After determining that the historical key needs to be updated, the system generates a new encryption key according to the following formula: Key(new)=SHA256(KEY(old)+timestamp+Speed / 10) Among them, Key (new) is the new encryption key, SHA256 is the hash algorithm, KEY (old) is the currently used historical key, Timestamp is the current UNIX timestamp (accurate to seconds), and Speed ​​is the real-time speed of the vehicle (km / h).

[0055] This method generates dynamic keys by combining historical keys, timestamps, and vehicle speed. Because keys are dynamically generated based on changes in emotional state level, the passage of time, and real-time changes in vehicle speed, they ensure real-time and adaptable key generation. The introduction of timestamps and vehicle speed ensures that each key is unique. Even at the same emotional state level, keys generated at different times and speeds will differ. The use of the SHA256 algorithm ensures the keys are unidirectional and collision-resistant, making it impossible to reverse-analyze the original data from the key, and it is virtually impossible to generate the same key from different input data. New keys are generated based on historical keys, maintaining key continuity and facilitating key management and updates.

[0056] In one embodiment, a hierarchical storage strategy is adopted for key storage, where the master key is stored in a security chip and replaced regularly, and the dynamic key is temporarily stored in a memory and has a limited retention time, to ensure the security and availability of the key.

[0057] Specifically, the master key is stored in the security chip and replaced every six months. This practice leverages the security chip's high security and anti-attack capabilities, providing a solid foundation for the entire encryption system. Meanwhile, dynamic keys are temporarily stored in memory, with a maximum retention time limited to 10 minutes. This short storage period reduces the risk of key exposure in memory, further enhancing security. A derivational relationship exists between the master key and the dynamic key, with the dynamic key derived from the master key. The master key serves as the root key for generating dynamic keys, ensuring the security and trustworthiness of the dynamic keys. This tiered storage strategy combines the advantages of hardware encryption and volatile storage, ensuring both key security and system flexibility and efficiency.

[0058] In one embodiment, Figure 6 A schematic diagram of the hierarchical access control process provided in the embodiment of the present application; Figure 6 As shown, the method for protecting sensitive data further includes the following steps S500 to S800: Step S500: Receive an access request from a vehicle system module.

[0059] Step S600: Determine a target state level of the sensitive data according to the sensitive data accessed by the access request.

[0060] Step S700: Determine a corresponding access frequency limit value according to the vehicle system module and the target state level.

[0061] Step S800: Determine whether the number of times the vehicle system module accesses sensitive data exceeds the access frequency limit value based on the number of times the vehicle system module accesses sensitive data. If the number of times the vehicle system module accesses sensitive data exceeds the access frequency limit value, an exception handling mechanism is adopted.

[0062] Specifically, the system continuously monitors and receives access requests from different vehicle system modules (such as the central control display, ADAS system, remote service platform, etc.). Each module sends an access request when it needs to obtain data.

[0063] The system determines the target status level of sensitive data based on the type of sensitive data specified in the access request. The target status level of sensitive data is divided into three levels based on the risk level of the emotional data: Level 1 (low risk): The emotional state is relatively stable, such as calm and happy. At this time, the access frequency limit can be relatively relaxed.

[0064] Level 2 (medium risk): emotional state is relatively unstable, such as fatigue, distraction, etc. At this time, the access frequency limit can be moderate.

[0065] Level 3 (high risk): highly unstable emotional state, such as anger, panic, etc. At this time, the frequency of access should be strictly limited and usually requires authorization.

[0066] The system comprehensively determines access frequency limits based on the vehicle system module type and target state level. For low-risk sensitive data, low-authority modules are allowed access at a first frequency; for medium-risk sensitive data, medium-authority modules are allowed access at a second frequency, which is lower than the first frequency. For high-risk sensitive data, high-authority modules are allowed access at a third frequency, which requires authorization and is lower than the first frequency.

[0067] Specifically, vehicle system modules include but are not limited to: central control display screen, ADAS system, and remote service platform. Among them, the low-authority module can be the central control display screen, which is mainly used to display basic vehicle information and driving status. It has low real-time requirements, so the access frequency limit can be low. The medium-authority module can be the ADAS system, which is used to provide driving assistance functions. It needs to obtain emotional data in real time to make quick decisions, so the access frequency limit needs to be higher. The high-authority module can be the remote service platform, which is used to remotely monitor and manage vehicles. It involves high-risk data, requires strict access frequency restrictions, and usually requires authorization.

[0068] The system sets an access frequency limit for each module based on the vehicle system module type and target status level. This hierarchical access control mechanism ensures that different modules receive appropriate access rights and frequency limits based on their functional requirements and data risk level, thereby optimizing system resource usage while protecting data security.

[0069] In one embodiment, Figure 7 The permission control allocation provided in the embodiment of the present application is intended; Figure 7As shown, the central control display can only access Level 1 data, with an access frequency limited to no more than once per minute. The ADAS system can access Level 2 data, with an access frequency limited to no more than five times per second. The remote service platform can access Level 3 data, but only after authorization, and with an access frequency limited to no more than once per hour.

[0070] The vehicle system monitors the number of accesses to each module in real time. If the access frequency of a module exceeds the preset limit, the system will activate the exception handling mechanism.

[0071] In one embodiment, when the limit is exceeded, an exception handling mechanism is adopted, including: based on the number of times the access frequency limit is exceeded, when the number is less than or equal to a first threshold, a log is recorded; when the number is greater than the first threshold and less than or equal to a second threshold, a warning prompt is popped up; when the number is greater than the second threshold, the access preset time length is locked.

[0072] Specifically, when illegal access is detected, a progressive response is triggered: when the number of violations is less than or equal to the first threshold, the system records detailed information about the violation, including time, module, access request content, etc., for subsequent analysis and auditing. When the number of violations is greater than the first threshold and less than or equal to the second threshold, the system pops up a warning prompt to the user or driver, reminding them to pay attention to abnormal access frequency and possible security risks. When the number of violations is greater than the second threshold, the system locks the access rights of the module for a preset duration. The lock duration is dynamically adjusted according to the number of violations, and the lock duration is calculated according to the following formula: T_{lock} = 60 * (N_{error} - 2) Where T_{lock} is the lock duration in minutes, N_{error} is the number of illegal accesses, and 60 is the coefficient for converting seconds to minutes.

[0073] For example, assume that the system sets the first threshold to 2 times and the second threshold to 3 times. When the access frequency of a module exceeds the limit: 1st Violation: System Logging.

[0074] Second violation: The system pops up a warning prompt.

[0075] Third violation: The system locks access to the module for 1 hour (T_{lock} = 60* (3 - 2) = 60 minutes).

[0076] Fourth violation: The system locks access to the module for 2 hours (T_{lock} = 60* (4 - 2) = 120 minutes).

[0077] Through this progressive response mechanism, the system can effectively respond to violations of varying frequencies, ensuring data security and system stability. Furthermore, this mechanism dynamically adjusts the lockout duration based on the number of violations, ensuring system security while avoiding excessive penalties and ensuring a positive user experience.

[0078] In one specific embodiment, the system detects that the driver yawns three or more times in a row within one minute. Based on the preset emotional assessment model, the system determines that the driver is in a level 2 fatigue state. An emotional state level of 2 indicates a relatively unstable emotional state and requires appropriate protective measures. To protect the driver's privacy and the safety of the vehicle, the system adopts the following protective procedures: Camera captures images: The system uses the on-board camera to capture the driver's facial expressions and behavioral movements to obtain raw image data (Dataraw). The system will then encrypt the collected raw image data to ensure the security of the data during transmission and storage and protect the driver's privacy.

[0079] Generate encrypted data: The system uses the AES-256 encryption algorithm to encrypt the original data and add noise to generate encrypted data (Dataenc). The specific formula is as follows: Dataenc = AES256 (Dataraw) + Noise, using the AES-256 encryption algorithm and random noise to ensure high security and unpredictability of encrypted data.

[0080] Access rights restrictions: Since the data is classified as Level 2, the system only allows the ADAS system to access encrypted data, and the access frequency is limited to no more than 5 times per second. This ensures that the ADAS system can obtain necessary data while preventing excessive access or misuse of the data.

[0081] The embodiment of the present application also provides an electronic device, Figure 8 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application, such as Figure 8 As shown, the electronic device 001 may include a processor 002 and a memory 003 for storing processor-executable instructions, and the processor 002 is configured to implement the steps of the sensitive data security protection method of any of the above embodiments.

[0082] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. The computer program can be executed by a processor to implement the sensitive data security protection method of any of the above embodiments.

[0083] An embodiment of the present application also provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the sensitive data security protection method of any of the above embodiments.

[0084] In summary, the technical solution provided by the embodiment of the present invention has the following advantages: By combining emotional state classification with dynamic data encryption, the data security and system performance of the in-vehicle information system are significantly improved. The mechanism of adjusting the encryption strength according to the emotional state enables the system to flexibly select the appropriate encryption algorithm under different emotional risk levels, thereby optimizing the efficiency of the encryption process while ensuring data security. This mechanism not only reduces the time consumed in data encryption, but also significantly reduces the response delay in emergency situations, ensuring that the system can respond quickly at critical moments and improving driving safety. The solution of this application also realizes the dynamic update of keys, further enhancing the system's anti-attack capabilities, extending the key brute force cracking time, and effectively resisting potential attack threats. At the same time, by optimizing the allocation of system resources, the system resource utilization rate is reduced and the overall operating efficiency of the system is improved.

[0085] Furthermore, in terms of rights management, this application's solution employs a hierarchical rights control mechanism, dynamically adjusting the access rights and frequency of different modules based on the emotional state level and the functional requirements of the system modules. These improvements have resulted in significant improvements in data encryption time, key brute force cracking time, emergency response delays, and system resource utilization, providing a more efficient, secure, and resource-optimized solution for the automotive electronic information technology sector.

[0086] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely illustrative.

[0087] If the function is implemented in the form of a software function module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0088] The above are merely examples of the present application and are not intended to limit the scope of protection of the present application. Those skilled in the art will appreciate that various modifications and variations are possible. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present application shall be included within the scope of protection of the present application.

[0089] The above are only specific embodiments of the present application, but the scope of protection of this application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A method for protecting sensitive data, characterized in that: include: Collect driver’s emotional data; determining an emotional state level based on the emotional data; determining an encryption key based on the emotional state level; According to the emotional state level and the encryption key, the sensitive data is encrypted using an encryption method corresponding to the emotional state level; wherein different emotional state levels correspond to different encryption methods.

2. The method according to claim 1, characterized in that The step of determining an encryption key based on the emotional state level includes: Determining whether to update the historical key according to the change in the emotional state level; The encryption key is determined according to the historical key and whether the historical key needs to be updated.

3. The method according to claim 2, characterized in that The determining whether to update the historical key according to the change in the emotional state level includes: If the emotional state level does not change, the historical key is not updated; the encryption key is the historical key.

4. The method according to claim 2, characterized in that The determining whether to update the historical key according to the change in the emotional state level includes: If the emotional state level changes, determining to update the historical key; The determining the encryption key according to the historical key and whether to update the historical key includes: generating the encryption key according to the real-time speed of the vehicle, a timestamp, and the historical key.

5. The method according to claim 1, wherein The step of encrypting the sensitive data according to the emotional state level and the encryption key using an encryption method corresponding to the emotional state level includes: If the emotional state level is low, encrypting the sensitive data using a first encryption method to obtain first encrypted data; If the emotional state level is intermediate, encrypting the sensitive data using a second encryption method to obtain second encrypted data; If the emotional state level is high, the sensitive data is encrypted using a third encryption method to obtain third encrypted data; the security level of the first encryption method is lower than that of the second encryption method; the security level of the second encryption method is lower than that of the third encryption method.

6. The method according to claim 5, characterized in that The first encryption method is an AES symmetric encryption method with a 128-bit key length.

7. The method according to claim 5, characterized in that The step of encrypting the sensitive data using a second encryption method to obtain second encrypted data includes: The sensitive data is symmetric encrypted using AES with a 256-bit key length, and the encrypted data is combined with noise to obtain the second encrypted data.

8. The method according to claim 7, characterized in that Before combining the encrypted data with the noise, the method further comprises: The noise is generated according to the real-time speed of the vehicle and a random value.

9. The method according to claim 5, characterized in that The step of encrypting the sensitive data using a third encryption method to obtain third encrypted data includes: The sensitive data is symmetric encrypted using AES with a 256-bit key length, and the encrypted data is stored in fragments to obtain third encrypted data.

10. The method according to claim 1, characterized in that Also includes: receiving an access request from a vehicle system module; Determining a target status level of the sensitive data according to the sensitive data accessed by the access request; Determining a corresponding access frequency limit value according to the vehicle system module and the target state level; Based on the number of times the vehicle system module accesses the sensitive data, it is determined whether the access frequency limit is exceeded. If exceeded, an exception handling mechanism is adopted.

11. The method according to claim 10, characterized in that When the above is exceeded, an exception handling mechanism is adopted, including: According to the number of times the access frequency limit is exceeded, when the number is less than or equal to a first threshold, a log is recorded; when the number is greater than the first threshold and less than or equal to a second threshold, a warning prompt is popped up; when the number is greater than the second threshold, the access is locked for a preset time.

12. An electronic device, characterized in that: The electronic device comprises: processor; a memory for storing processor-executable instructions; The processor is configured to execute the sensitive data security protection method according to any one of claims 1 to 11.

13. A computer-readable storage medium, characterized in that The storage medium stores a computer program, and the computer program can be executed by a processor to complete the sensitive data security protection method according to any one of claims 1 to 11.

14. A computer program product, characterized in that The method comprises a computer program / instruction, which, when executed by a processor, implements the method for securely protecting sensitive data according to any one of claims 1 to 11.

Images