Multilevel information safety protection system, method and equipment for electric vehicle and medium

Abstract

The invention discloses a multi-level information safety protection system, method and device for an electric vehicle and a medium, and the method comprises the steps: determining the operation state, environment parameters and bus messages of the vehicle, and analyzing the operation state, the environment parameters and the bus messages through a preset neural network, so as to obtain a trust score; and determining a safety state of the vehicle according to the trust score, and determining a corresponding response mechanism according to the safety state so as to perform safety protection on the vehicle according to the response mechanism. According to the method, the vehicle running state, the environment parameters and the bus message are collected in real time, and deep analysis is performed by using the preset neural network, so that the trust score can be accurately generated. The scoring mechanism effectively quantifies the safety state of the vehicle, and is convenient to quickly judge and take corresponding response measures. According to the safety state and the response mechanism determined according to the scoring result, safety protection can be performed in a targeted manner, the protection accuracy and efficiency are improved, and the vehicle information safety is ensured.

Description

Technical Field

[0001] The present application relates to the field of vehicle safety technology, and in particular to a multi-level information security protection system, method, equipment and medium for electric vehicles. Background Art

[0002] Traditional vehicle security architectures primarily focus on physical vehicle security, basic communications security, and simple identity authentication. These architectures aim to maintain the stability of basic vehicle functions during normal operation and prevent unauthorized physical access and simple communications interference. However, with the advancement of intelligent and connected vehicles, the limitations of traditional architectures have become increasingly prominent, making them incapable of addressing increasingly complex security threats. Summary of the Invention

[0003] In order to solve the above problems, the present application proposes a multi-level information security protection system for electric vehicles, which is characterized by including: a vehicle side, which is equipped with a hardware security module, and integrates a CAN bus firewall and a dynamic trust assessment engine, and is also provided with a communication unit to perform dual-mode communication through the communication unit; a communication security subsystem, which is equipped with an encryption channel and a blockchain to encrypt information through the encryption channel, and the blockchain adopts a dual-chain structure; a cloud side, including a security policy center, an upgrade cluster, and a computing platform, the security policy center is used to distribute dynamic keys and analyze threat intelligence, the upgrade cluster is used to provide an execution environment and hash value verification, and the computing platform is used for data desensitization processing.

[0004] In one example, the dynamic trust assessment engine uses an LSTM neural network to collect vehicle operating status data and environmental parameter data, and performs neural network analysis on the collected data to determine timing characteristics, and performs scoring calculations on the timing characteristics to obtain scoring results, and determines a corresponding response mechanism based on the scoring results to perform protective operations based on the response mechanism.

[0005] In one example, a layered encryption architecture is set up inside the encryption channel, and the layered encryption architecture includes an encryption control layer, an encryption communication layer, and an encryption application layer; the encryption control layer is used to implement point-to-point authentication to verify the authenticity of the identities of both communicating parties; the encryption communication layer is used to determine the corresponding encryption algorithm according to the type of communication channel; the encryption application layer is used to perform differential processing on user data to protect user privacy.

[0006] In one example, the blockchain includes a consortium chain and a private chain; the consortium chain is used to store and verify the hash value of the firmware; and the private chain is used to store driving behavior data.

[0007] In one example, the upgrade cluster includes a vehicle-side upgrade package and an encrypted upgrade package; the vehicle-side upgrade package includes a version hash value corresponding to the vehicle-side, and the vehicle-side upgrade package is used to be verified and encrypted through the cloud to obtain an encrypted upgrade package.

[0008] On the other hand, the present application also proposes a multi-level information security protection method for trams, which is applied to a multi-level information security protection system for trams described in the above example. The method includes: determining the vehicle's operating status, environmental parameters and bus messages, and analyzing the operating status, environmental parameters and bus messages through a pre-set neural network to obtain a trust score; determining the safety status of the vehicle based on the trust score, and determining a corresponding response mechanism based on the safety status to perform safety protection on the vehicle based on the response mechanism.

[0009] In one example, the method further includes: determining an upgrade request for the vehicle through the vehicle side, and determining a vehicle side upgrade package based on the upgrade request; verifying the vehicle side upgrade package through the cloud, and encrypting the verified vehicle side upgrade package to obtain an encrypted upgrade package.

[0010] In one example, the method further includes: determining a shared key pair, and sending the shared key pair to the vehicle end and the cloud; determining a preset timestamp, and adding the timestamp to the shared key pair.

[0011] On the other hand, the present application also proposes a multi-level information security protection device for a tram, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the multi-level information security protection device for a tram to execute: a method as described in any one of the above examples.

[0012] On the other hand, the present application also proposes a non-volatile computer storage medium storing computer-executable instructions, wherein the computer-executable instructions are configured to perform the method described in any one of the above examples.

[0013] This application uses a dynamic trust assessment engine to collect and analyze vehicle status and environmental parameters in real time, and uses LSTM neural networks for deep learning to achieve dynamic adjustment of security policies to respond to ever-changing security threats. A layered encryption architecture is adopted, with encryption performed step by step from the control layer to the application layer to ensure the security of data transmission. The control layer implements point-to-point authentication, the communication layer selects encryption algorithms based on the channel type, and the application layer performs differential privacy processing on user data to protect data security in all aspects. Firmware hash values ​​and driving behavior data are stored in a dual-chain blockchain structure to ensure data integrity and immutability, providing a reliable basis for security upgrades and audits. A trusted execution environment and hash value verification based on TEE are provided to ensure the security and reliability of firmware upgrades and prevent malicious firmware intrusions. The NTRU quantum-resistant encryption algorithm and quantum key distribution mechanism are used to effectively resist the security threats brought by future quantum computing and ensure long-term communication security. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0015] Figure 1 This is a flow chart of a multi-level information security protection method for a tram according to an embodiment of the present application;

[0016] Figure 2 This is a schematic diagram of a multi-level information security protection device for a tram in an embodiment of the present application. DETAILED DESCRIPTION

[0017] To make the purpose, technical solutions, and advantages of this application more clear, the technical solutions of this application will be clearly and completely described below in conjunction with the specific embodiments of this application and the corresponding drawings. Obviously, the embodiments described are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0018] The following describes in detail the technical solutions provided by various embodiments of the present application in conjunction with the accompanying drawings.

[0019] To address the above issues, an embodiment of the present application provides a multi-level information security protection system for electric vehicles, comprising:

[0020] On the vehicle side, a hardware security module is provided, which integrates a CAN bus firewall and a dynamic trust assessment engine, and is also provided with a communication unit to carry out dual-mode communication;

[0021] The communication security subsystem is equipped with an encryption channel and a blockchain to encrypt information through the encryption channel. The blockchain adopts a dual-chain structure;

[0022] The cloud includes a security policy center, an upgrade cluster, and a computing platform. The security policy center is used to distribute dynamic keys and analyze threat intelligence. The upgrade cluster is used to provide an execution environment and hash value verification. The computing platform is used for data desensitization.

[0023] In one embodiment, the vehicle-side security subsystem includes a hardware security module (HSM), which uses a security chip based on the national secret algorithm and supports multiple encryption algorithms such as SM2 / 3 / 4 / 9. It also integrates a security gateway, a built-in CAN bus firewall and a dynamic trust assessment engine to achieve real-time security monitoring and assessment. In addition, it is also equipped with a T-Box communication unit that supports 4G / 5G and V2X dual-mode communications, and has a built-in quantum-resistant encryption module to ensure communication security.

[0024] In one embodiment, the communication security subsystem uses encrypted channel technology and implements differentiated encryption strategies for different communication modes. Specifically, the LBlock lightweight encryption algorithm is used in 4G communication, and the NTRU quantum-resistant encryption algorithm is used in 5G and V2X communication. At the same time, the subsystem also has a blockchain verification node and adopts a dual-chain structure, in which the consortium chain is responsible for firmware verification and the private chain is used to store driving behavior data to ensure the security of communication and the reliability of data.

[0025] In one embodiment, the cloud management platform includes three core modules. Among them, the security policy center is responsible for the distribution of dynamic keys and the analysis of threat intelligence to ensure communication security; the OTA upgrade cluster uses a TEE-based trusted execution environment to upgrade firmware and ensures the integrity and security of the upgrade package through firmware hash value verification; the privacy computing platform supports federated learning and differential privacy technology to desensitize data to protect user privacy.

[0026] In one embodiment, the system also includes a dynamic trust assessment model, building a multi-dimensional trust scoring system based on vehicle operating status and environmental parameters, and using an LSTM neural network to perform real-time analysis of CAN bus message characteristics to identify abnormal traffic with a detection accuracy of up to 99.2%. Vehicle operating status includes speed and battery condition, while environmental parameters include GPS location and network signal strength.

[0027] In one embodiment, the layered encryption architecture uses the national secret SM9 algorithm at the control layer to implement point-to-point authentication between electronic control units (ECUs), ensuring that the authentication delay is less than 15ms; at the communication layer, it combines the quantum key distribution (QKD) pre-sharing mechanism and the lightweight LBlock algorithm to effectively reduce resource consumption by 40%; at the application layer, differential privacy technology is used to process user data. When the privacy parameter ε = 0.5, the positioning accuracy deviation can reach more than 300 meters, thereby comprehensively protecting data security and user privacy.

[0028] In one embodiment, the secure OTA upgrade mechanism adopts a dual-chain blockchain structure, that is, a combination of a consortium chain and a private chain, to store firmware hash values ​​to ensure the integrity and traceability of the firmware upgrade; at the same time, it uses a TEE-based trusted execution environment for verification to ensure the security and credibility of the upgrade process.

[0029] like Figure 1 As shown, an embodiment of the present application provides a multi-level information security protection method for a tram, the method comprising:

[0030] S101: Determine the operating status, environmental parameters, and bus messages of a vehicle, and analyze the operating status, environmental parameters, and bus messages through a preset neural network to obtain a trust score.

[0031] In one embodiment, the dynamic trust assessment engine integrates multi-source data to achieve security assessments: its input data includes vehicle status, CAN bus messages, and environmental parameters. Vehicle operating status includes speed, battery SOC, motor torque, etc. Environmental parameters include GPS location, network signal strength, and timestamps. CAN bus messages include ID distribution, cycle characteristics, and load content. The assessment model uses an LSTM neural network to analyze time series features, with a sliding window length of 50ms, and calculates scores based on a trust scoring formula; the scoring formula is:

[0032] T score =0.4S vehicle +0.3S network +0.3S behavior

[0033] Among them, S vehicle S is the vehicle status score, network is the network status score, S behavior Score the behavioral status.

[0034] S102: Determine a safety status of the vehicle according to the trust score, and determine a corresponding response mechanism according to the safety status, so as to perform safety protection on the vehicle according to the response mechanism.

[0035] The safety level is divided according to the scoring threshold. When it is in the normal range, T score ≥0.8; in suspicious state, 0.5≤T score <0.8; when the risk is high, T score <0.5. Different states trigger corresponding response mechanisms. Normal states maintain the current security policy. Suspicious states initiate enhanced authentication, such as secondary confirmation. High-risk states trigger security takeover, such as switching to limp home mode.

[0036] In one embodiment, the layered encryption system adopts differentiated encryption strategies for different layers. At the control layer, the SM9 algorithm is used to implement point-to-point authentication between electronic control units (ECUs). The key update cycle can be dynamically adjusted according to actual needs, for example, ranging from 50 to 200 transactions per time, while ensuring that the authentication latency is less than 15ms and the resource usage does not exceed 35KB of ROM. At the communication layer, the 4G channel uses the LBlock lightweight encryption algorithm, effectively reducing resource consumption by 40%, while the 5G / V2X channel uses the NTRU quantum-resistant encryption algorithm with the parameter set ntru-hps2048509. The secure distribution of keys is achieved through a pre-sharing mechanism based on quantum key distribution (QKD). At the application layer, differential privacy technology is used for user data. When the privacy parameter ε is set to 0.5, the positioning accuracy deviation can reach more than 300 meters. At the same time, the firmware update process stores hash values ​​through a dual-chain blockchain structure to ensure data integrity and traceability.

[0037] In one embodiment, the secure OTA upgrade mechanism builds a rigorous firmware verification process and anti-tampering design. In the firmware verification process, the vehicle first initiates an upgrade package request, which includes the current version hash value; the cloud then verifies the legitimacy of the request, and ensures the authenticity and timeliness of the request through timestamps, random numbers, and SM3 signatures; then, the cloud returns an encrypted upgrade package encapsulated using the NTRU algorithm, and attaches blockchain hash verification information to ensure data integrity; after receiving the upgrade package, the vehicle uses the TEE trusted execution environment for decryption and integrity verification. To prevent the firmware from being tampered with, the mechanism uses a dual signature mechanism based on the SM2 algorithm to sign the firmware, while implementing a forced version number increment strategy to resist downgrade attacks, and is equipped with a secure boot mode as an emergency recovery measure, supporting local firmware repair, thereby comprehensively ensuring the security of OTA upgrades.

[0038] In one embodiment, the abnormal driving command interception mechanism achieves safety protection through a multi-stage collaborative approach. During the data collection phase, the security gateway monitors CAN bus messages in real time at a 1kHz sampling rate, extracting key commands such as torque requests and braking signals. During the behavioral analysis phase, the system compares the collected commands with a historical driving pattern database containing over 1,000 hours of compliance data, accurately detecting abnormal features such as "sudden full throttle commands while stationary." When an anomaly is detected, the system immediately triggers a Level 3 alert and requests cloud-based confirmation via V2X technology. If no cloud response is received within 300ms, limp home mode is automatically activated to mitigate potential risks and ensure driving safety.

[0039] In one embodiment, the quantum computing attack-resistant communication mechanism ensures communication security through a three-stage process. In the key generation stage, the vehicle and the cloud pre-share an NTRU key pair based on the quantum key distribution (QKD) mechanism, and set a key update every 50 transactions to ensure the timeliness and security of the key. In the encryption transmission stage, the system divides the plaintext data into 256-byte blocks and NTRU encrypts them, while adding a timestamp and random number to prevent replay attacks. In the decryption verification stage, the receiver first verifies the validity of the timestamp, that is, the difference between the sending time and the current time is required to be less than 200ms. It then decrypts the data and verifies the data integrity through SM3 hash comparison, thus building a communication defense line against quantum computing attacks.

[0040] like Figure 2 As shown, the embodiment of the present application also provides a multi-level information security protection device for trams, including:

[0041] at least one processor; and,

[0042] a memory communicatively connected to at least one processor; wherein,

[0043] The memory stores instructions that can be executed by at least one processor, and the instructions are executed by at least one processor to enable a multi-level information security protection device of an electric vehicle to execute: the method described in any one of the above embodiments.

[0044] An embodiment of the present application further provides a non-volatile computer storage medium storing computer executable instructions, wherein the computer executable instructions are configured to perform the method described in any one of the above embodiments.

[0045] In the 1990s, technological improvements could be clearly distinguished as either hardware improvements (for example, improvements to circuit structures like diodes, transistors, and switches) or software improvements (improvements to process flows). However, with the advancement of technology, many process flow improvements today can now be considered direct improvements to hardware circuit structures. Designers almost always create the corresponding hardware circuit structure by programming the improved process flow into the hardware circuit. Therefore, it cannot be said that a process flow improvement cannot be implemented using hardware modules. For example, a programmable logic device (PLD), such as a field programmable gate array (FPGA), is an integrated circuit whose logical function is determined by user programming. Designers can "integrate" a digital system on a PLD through their own programming, without having to hire a chip manufacturer to design and manufacture a dedicated integrated circuit chip. Moreover, nowadays, instead of manually fabricating integrated circuit chips, this programming is mostly done using "logic compiler" software. This is similar to the software compiler used when developing programs. Before compilation, the original code must also be written in a specific programming language, called a hardware description language (HDL). There is not just one HDL, but many, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art will also understand that by simply programming the method flow in one of these hardware description languages ​​and then programming it into an integrated circuit, a hardware circuit that implements the logic method flow can be easily obtained.

[0046] The controller can be implemented in any suitable manner. For example, the controller can take the form of a microprocessor or processor and a computer-readable medium storing computer-readable program code (e.g., software or firmware) executable by the (micro)processor, logic gates, switches, application-specific integrated circuits (ASICs), programmable logic controllers, and embedded microcontrollers. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320. The memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art will also know that in addition to implementing the controller in a purely computer-readable program code format, the controller can be implemented in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers by logically programming the method steps. Therefore, such a controller can be considered a hardware component, and the devices included therein for implementing various functions can also be considered as structures within the hardware component. Or even, the devices for implementing various functions can be considered as both software modules that implement the method and structures within the hardware component.

[0047] The systems, devices, modules, or units described in the above embodiments may be implemented by computer chips or entities, or by products having certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smartphone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0048] For the convenience of description, the above devices are described as being divided into various units according to their functions. Of course, when implementing this specification, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0049] The various embodiments in this application are described in a progressive manner. Similar portions between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, the device and medium embodiments are generally similar to the method embodiments, so their descriptions are relatively simple. For relevant portions, refer to the descriptions of the method embodiments.

[0050] The devices and media provided in the embodiments of the present application correspond one-to-one to the methods. Therefore, the devices and media also have similar beneficial technical effects to their corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the devices and media will not be repeated here.

[0051] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0052] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the steps in the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0053] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0054] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0055] In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory.

[0056] Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0057] Computer-readable media includes permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include transitory computer-readable media (transitory media), such as modulated data signals and carrier waves.

[0058] It should also be noted that the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, commodity, or apparatus that includes a series of elements includes not only those elements but also other elements not explicitly listed, or includes elements inherent to such process, method, commodity, or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not exclude the presence of other identical elements in the process, method, commodity, or apparatus that includes the element.

[0059] The above are merely embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application should all be included within the scope of the claims of the present application.

Claims

1. A multi-level information security protection system for trams, characterized in that: include: The vehicle side is provided with a hardware security module, and integrates a CAN bus firewall and a dynamic trust assessment engine, and is also provided with a communication unit to perform dual-mode communication through the communication unit; A communication security subsystem is provided with an encryption channel and a blockchain to encrypt information through the encryption channel, and the blockchain adopts a dual-chain structure; The cloud includes a security policy center, an upgrade cluster, and a computing platform. The security policy center is used to distribute dynamic keys and analyze threat intelligence, the upgrade cluster is used to provide an execution environment and hash value verification, and the computing platform is used for data desensitization processing.

2. The system according to claim 1, wherein: The dynamic trust assessment engine uses an LSTM neural network to collect vehicle operating status data and environmental parameter data, and performs neural network analysis on the collected data to determine time series characteristics, and then performs scoring calculations on the time series characteristics to obtain scoring results. The corresponding response mechanism is determined based on the scoring results, and protective operations are performed based on the response mechanism.

3. The system according to claim 1, wherein: The encryption channel is internally provided with a layered encryption architecture, which includes an encryption control layer, an encryption communication layer, and an encryption application layer; The encryption control layer is used to implement point-to-point authentication to verify the authenticity of the identities of both communicating parties; The encryption communication layer is used to determine the corresponding encryption algorithm according to the communication channel type; The encryption application layer is used to perform differential processing on user data to protect user privacy.

4. The system according to claim 1, wherein: The blockchain includes a consortium chain and a private chain; The alliance chain is used to store and verify the hash value of the firmware; The private chain is used to store driving behavior data.

5. The system according to claim 1, wherein: The upgrade cluster includes a vehicle-side upgrade package and an encrypted upgrade package; The vehicle-side upgrade package includes a version hash value corresponding to the vehicle-side, and the vehicle-side upgrade package is used to be verified and encrypted through the cloud to obtain an encrypted upgrade package.

6. A multi-level information security protection method for electric vehicles, characterized in that: In the multi-level information security protection system for electric vehicles as claimed in any one of claims 1 to 5, the method comprises: determining an operating state, environmental parameters, and bus messages of the vehicle, and analyzing the operating state, the environmental parameters, and the bus messages using a pre-set neural network to obtain a trust score; The safety status of the vehicle is determined according to the trust score, and a corresponding response mechanism is determined according to the safety status, so as to perform safety protection on the vehicle according to the response mechanism.

7. The method according to claim 6, characterized in that The method further comprises: Determining, through the vehicle side, an upgrade request for the vehicle, and determining a vehicle side upgrade package according to the upgrade request; The vehicle-side upgrade package is verified through the cloud, and the verified vehicle-side upgrade package is encrypted to obtain an encrypted upgrade package.

8. The method according to claim 6, characterized in that The method further comprises: Determine a shared key pair, and send the shared key pair to the vehicle end and the cloud; A preset timestamp is determined, and the timestamp is added to the shared key pair.

9. A multi-level information security protection device for trams, characterized in that: include: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the multi-level information security protection device of the tram to execute: the method according to any one of claims 6 to 8.

10. A non-volatile computer storage medium storing computer executable instructions, characterized in that: The computer executable instructions are configured to: perform the method according to any one of claims 6 to 8.

Images