Vehicle cloud communication data transmission management method and device, equipment and storage medium

Abstract

The invention discloses a vehicle cloud communication data transmission management method, device and equipment and a storage medium, and relates to the technical field of vehicle cloud communication, and the method comprises the steps: receiving target transmission data sent by a first communication end application, and converting the target transmission data into a target transmission message based on a preset unified communication protocol standard; determining a resource load state corresponding to the target transmission message based on the resource configuration information; when the resource load state is load normal, performing permission verification on transmission of the target transmission message based on the authentication configuration information to obtain a permission verification result; and when the permission verification result is that the verification is passed, routing the target transmission message to the second communication end application based on the routing configuration information. By means of the mode, a unified protocol standard definition is provided for the vehicle end application and the cloud end application, the controllability and efficiency of data transmission are improved, the interface development reuse rate is increased, meanwhile, a unified security access entry is arranged, the transmission security is enhanced, and the data leakage risk is reduced.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of vehicle-cloud communication, and particularly relates to a vehicle-cloud communication data transmission management method and device, equipment and a storage medium. BACKGROUND

[0002] With the rapid development of automobile intelligence and networking, the whole vehicle electronic and electrical architecture is in a key evolution stage towards vehicle cloud computing. More and more automobile functions begin to rely on vehicle-cloud cooperation to achieve, for example, an automatic driving assistance system needs to obtain map updates, traffic information and other data from the cloud in real time, and at the same time, the sensor data of the vehicle itself is uploaded to the cloud for analysis and processing, and a remote diagnosis function requires the vehicle to transmit fault information to the cloud in a timely manner so that maintenance personnel can make accurate judgments and give solutions.

[0003] However, the current communication mode of numerous applications on the vehicle end and the cloud is chimney type, that is, each application independently establishes a connection with the cloud for data interaction. Due to the lack of unified specifications, there are great differences in data transmission formats, protocol selection and the like among the applications, which leads to great difficulties in managing, maintaining and expanding new applications for vehicle-cloud communication. At the same time, each vehicle end application has its own independent security authentication mechanism and access portal, which means that the vehicle needs to maintain a set of security certificates and authentication processes for each application, wasting a large amount of management resources, and more access portals also increase the risk of data exposure.

[0004] The above content is only used to assist in understanding the technical solutions of the present application and does not represent the acknowledgement of the above content as prior art. SUMMARY

[0005] The main purpose of the present application is to provide a vehicle-cloud communication data transmission management method, device, equipment and storage medium, which aims to solve the technical problem that there is a lack of unified specifications in the prior art, and it is difficult to effectively manage the data transmission of vehicle-cloud communication, affecting the transmission efficiency and transmission security.

[0006] To achieve the above purpose, the present application provides a vehicle-cloud communication data transmission management method, which comprises: receiving target transmission data sent by a first communication end application, and converting the target transmission data into a target transmission message based on a preset unified communication protocol standard; determining a resource load state corresponding to the target transmission message based on resource configuration information; when the resource load state is normal, performing permission verification on the transmission of the target transmission message based on authentication configuration information to obtain a permission verification result; when the permission verification result is verified, routing the target transmission message to a second communication end application based on routing configuration information.

[0007] In an embodiment, the step of receiving the target transmission data sent by the first communication terminal application, and converting the target transmission data into a target transmission message based on a preset unified communication protocol standard comprises: receiving the target transmission data sent by the first communication terminal application, and determining a data type of the target transmission data, wherein the data type at least includes a message type and a file type; determining a message filling standard of the target transmission data in the preset unified communication protocol standard based on the data type of the target transmission data; converting the target transmission data into a target transmission message based on the message filling standard, wherein header information of the target transmission message at least includes an application identification code, a target service identification code, a target interface identification code, a message identification code and timestamp information, and body information of the target transmission message is the target transmission data.

[0008] In an embodiment, the step of determining a resource load state based on the resource configuration information comprises: obtaining a current processing quantity corresponding to the data type of the target transmission data, and obtaining a data quantity of the target transmission message; determining a processing quantity threshold corresponding to the data type of the target transmission data based on the resource configuration information, and determining a data quantity threshold corresponding to the target transmission message; when the current processing quantity corresponding to the data type of the target transmission data is less than or equal to the processing quantity threshold and the data quantity of the target transmission message is less than or equal to the data quantity threshold, determining that a resource load state corresponding to the target transmission message is normal load.

[0009] In an embodiment, the authentication configuration information at least includes an application white list and an interface white list, and the step of performing permission verification on the transmission of the target transmission message based on the authentication configuration information when the resource load state is normal load to obtain a permission verification result comprises: when the resource load state is normal load, comparing the application identification code in the target transmission message with the application white list; when the application identification code conforms to the application white list, comparing the target interface identification code in the target transmission message with the interface white list; when the target interface identification code conforms to the interface white list, determining that the permission verification result is verification passed.

[0010] In an embodiment, the step of routing the target transmission message to the second communication terminal application based on the routing configuration information when the permission verification result is verification passed comprises: determining a target interface identifier code, a transmission priority, and a target routing address of the target transmission packet based on the routing configuration information when the permission check result is a check pass; routing the target transmission packet to the second communication end application based on the target interface identifier code, the transmission priority, and the target routing address of the target transmission packet.

[0011] In an embodiment, the step of routing the target transmission packet to the second communication end application based on the target interface identifier code, the transmission priority, and the target routing address of the target transmission packet further comprises: performing signing on the target transmission packet based on the stored security certificate when the signing requirement information of the first communication end application exists in the routing configuration information; performing encryption on the target transmission packet based on a target encryption algorithm corresponding to the encryption requirement information when the encryption requirement information of the first communication end application exists in the routing configuration information.

[0012] In an embodiment, the step of receiving the target transmission data sent by the first communication end and converting the target transmission data into a target transmission packet based on a preset unified communication protocol standard further comprises: uploading the stored local configuration information to a configuration platform to enable the configuration platform to perform validity check on the local configuration information, the configuration platform being arranged in the first communication end or the second communication end, and the local configuration information at least including resource configuration information, authentication configuration information, and routing configuration information; determining that the validity check on the local configuration information fails when receiving the latest configuration information issued by the configuration platform; updating the local configuration information based on the latest configuration information.

[0013] In addition, to achieve the above object, the application further provides a vehicle-cloud communication data transmission management device, which comprises: a data specification module configured to receive target transmission data sent by a first communication end application and convert the target transmission data into a target transmission packet based on a preset unified communication protocol standard; a security check module configured to determine a resource load state corresponding to the target transmission packet based on resource configuration information; The security check module is further configured to perform permission check on transmission of the target transmission packet based on authentication configuration information when the resource load state is normal load, to obtain a permission check result. a data routing module configured to route the target transmission packet to a second communication end application based on routing configuration information when the permission check result is a check pass.

[0014] In addition, to achieve the above object, the application further provides a vehicle-cloud communication data transmission management device, which comprises a memory, a processor and a computer program stored in the memory and executable on the processor, and the computer program is configured to implement the steps of the vehicle-cloud communication data transmission management method.

[0015] In addition, to achieve the above object, the application further provides a storage medium, which is a computer readable storage medium, and the storage medium stores a computer program, and the computer program is executed by a processor to implement the steps of the vehicle-cloud communication data transmission management method.

[0016] In addition, to achieve the above object, the application further provides a computer program product, which comprises a computer program, and the computer program is executed by a processor to implement the steps of the vehicle-cloud communication data transmission management method.

[0017] The application provides a vehicle-cloud communication data transmission management method, receiving target transmission data sent by a first communication end application, converting the target transmission data into target transmission messages based on a preset unified communication protocol standard; determining a resource load state corresponding to the target transmission messages based on resource configuration information; when the resource load state is normal, performing permission verification on the transmission of the target transmission messages based on authentication configuration information to obtain a permission verification result; and when the permission verification result is passed, routing the target transmission messages to a second communication end application based on routing configuration information. The application provides a unified protocol standard definition for vehicle end applications and cloud end applications, improves the controllability and efficiency of data transmission, makes the vehicle-cloud communication more stable and reliable, improves the interface development reuse rate, reduces the development cost, sets a unified security access portal, fully utilizes the management resources, centrally performs security authentication on data transmission, strengthens the data transmission security, reduces the data leakage risk, solves the technical problems of lack of unified specification, difficulty in effectively managing the data transmission of vehicle-cloud communication, and influence on transmission efficiency and transmission security. BRIEF DESCRIPTION OF DRAWINGS

[0018] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the application and serve to explain the principles of the application together with the specification.

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the application or the prior art, the accompanying drawings needed to be used in the embodiments or prior art description will be briefly introduced as follows. Obviously, for those skilled in the field, other drawings can also be obtained based on these drawings without creative labor.

[0020] Figure 1 Flowchart of the vehicle-cloud communication data transmission management method of the first embodiment of the application; Figure 2 Overall architecture of the vehicle-cloud communication data transmission management method provided by the first embodiment of the application; Figure 3 Data uploading flowchart of the vehicle-cloud communication data transmission management method provided by the first embodiment of the application; Figure 4 Data downloading flowchart of the vehicle-cloud communication data transmission management method provided by the first embodiment of the application; Figure 5 Security authentication flowchart of the vehicle-cloud communication data transmission management method provided by the first embodiment of the application; Figure 6 Flowchart of the vehicle-cloud communication data transmission management method of the second embodiment of the application; Figure 7 Module structure of the vehicle-cloud communication data transmission management device of the embodiment of the application; Figure 8 Device structure of the hardware running environment involved in the vehicle-cloud communication data transmission management method of the embodiment of the application.

[0021] The implementation, functional features and advantages of the application will be further described with reference to the embodiments and the accompanying drawings. DETAILED DESCRIPTION

[0022] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the application, and are not used to limit the application.

[0023] In order to better understand the technical solutions of the application, the following will be described in detail in combination with the drawings of the specification and specific embodiments.

[0024] The main solution of the embodiment of the application is: receiving target transmission data sent by a first communication end application, converting the target transmission data into target transmission messages based on a preset unified communication protocol standard; determining a resource load state corresponding to the target transmission messages based on resource configuration information; when the resource load state is normal load, performing authority verification on the transmission of the target transmission messages based on authentication configuration information to obtain an authority verification result; and when the authority verification result is verification passed, routing the target transmission messages to a second communication end application based on routing configuration information.

[0025] At present, the communication mode of many applications on the vehicle side and the cloud side is chimney type, that is, each application independently establishes a connection with the cloud side for data interaction. Due to the lack of unified specifications, there are great differences in data transmission format, protocol selection, etc. among various applications, which leads to great difficulties in managing, maintaining and expanding new applications for vehicle-cloud communication. At the same time, each vehicle-side application has its own independent security authentication mechanism and access portal, which means that the vehicle needs to maintain a set of security certificates and authentication processes for each application, wasting a lot of management resources, and more access portals also increase the risk of data exposure.

[0026] The application provides a solution to provide a unified protocol standard definition for vehicle-side applications and cloud-side applications, improve the controllability and efficiency of data transmission, make the vehicle-cloud communication more stable and reliable, and improve the interface development reuse rate and reduce the development cost. At the same time, a unified security access portal is set up, the management resources are fully utilized, the security authentication of data transmission is centralized, the data transmission security is strengthened, the data leakage risk is reduced, and the technical problems of lack of unified specifications, difficult to effectively manage the data transmission of vehicle-cloud communication, and affecting the transmission efficiency and transmission security are solved.

[0027] It should be noted that the execution subject of the embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a vehicle-cloud communication data transmission management device, etc. The embodiment does not make specific limitation hereon. Hereinafter, the vehicle-cloud communication data transmission management device is taken as an example to describe the embodiment and the following embodiments, wherein the vehicle-cloud communication data transmission management device can be regarded as an edge gateway on the vehicle side.

[0028] The application embodiment provides a vehicle-cloud communication data transmission management method, referring to Figure 1 , Figure 1 The flowchart of the first embodiment of the vehicle-cloud communication data transmission management method of the application.

[0029] In the embodiment, the vehicle-cloud communication data transmission management method comprises steps S10-S40: Step S10, receiving target transmission data sent by a first communication end application, and converting the target transmission data into target transmission packets based on a preset unified communication protocol standard; It should be noted that the first communication end and the second communication end are two ends of vehicle-cloud communication, the first communication end is the end of sending data, the second communication end is the end of receiving data, the first communication end application is the application of sending data in the first communication end, and the second communication end application is the application of receiving data in the second communication end. If the first communication end is the vehicle end, the second communication end is the cloud end, and the data transmission process at this time is data uploading. If the first communication end is the cloud end, the second communication end is the vehicle end, and the data transmission process at this time is data downloading.

[0030] In addition, it should be noted that the target transmission data, i.e. the data / information currently in need of transmission, can have multiple types, such as message type and file type, which are not limited in the embodiment. Since the communication mode of the current vehicle end and the cloud end is chimney type, there is a lack of unified planning of the communication mode, and there are great differences in the data transmission format, protocol selection and the like of each application, which makes it difficult to manage, maintain and expand new applications for vehicle-cloud communication. Therefore, a unified vehicle-cloud transmission channel is set in the edge gateway, and Figure 2 Before the vehicle end application interacts with the cloud end, the data needs to be transmitted to the vehicle end edge gateway, and the edge gateway uniformly selects the transmission protocol and completes the transmission message filling. The data transmitted by the cloud end to the vehicle end is uniformly transmitted through the edge gateway, and the edge gateway performs transmission protocol analysis and data distribution.

[0031] It can be understood that the preset unified communication protocol is a set of unified protocol standard definitions, that is, a standard format that needs to be referred to when filling the message. A unified vehicle-cloud access standard is set in the edge gateway, and the edge gateway provides a unified protocol standard definition for the vehicle end according to the type of the transmitted data, provides a synchronous / asynchronous interface definition standard including instructions, files and the like, and generates a proto (ProtocolBuffers, protocol buffer) library through a grpc (high-performance remote process call framework) protocol to uniformly develop the standard. At the same time, the edge gateway provides a unified protocol standard definition for the cloud end, including an MQTT (message queue telemetry transport) and an HTTP (hypertext transfer protocol) unified protocol format definition. Thus, the transmission format of vehicle-cloud communication development is unified, and the reuse rate and scalability of vehicle-cloud communication interface development are improved.

[0032] It should be understood that the target transmission message is the message obtained after filling, that is, the message used for transmission. Generally, the header information needs to be filled, and the body information is the target transmission data.

[0033] In an implementable embodiment, the step S10 can include: receiving the target transmission data sent by the first communication terminal application, determining the data type of the target transmission data, the data type at least including a message type and a file type; determining the message filling standard of the target transmission data in a preset unified communication protocol standard based on the data type of the target transmission data; and converting the target transmission data into a target transmission message based on the message filling standard.

[0034] It should be noted that the edge gateway defines the unified protocol standard for the vehicle terminal according to the transmission type. The message type and the file type are usually distinguished according to the size of the transmitted data amount. When the transmitted data amount is large, the file type can be selected, and when the transmitted data amount is small, the message type can be selected. For the message type, both synchronous and asynchronous modes are provided. The selection can be made according to whether the next instruction needs to be processed after the current instruction is processed. For example, the synchronous instruction can be used when it is ensured that the instruction is timely and accurately conveyed. The asynchronous instruction is used for event notification (for example, the vehicle configuration is updated in the background, the configuration information is updated, and the vehicle terminal is notified of the event occurrence through the instruction) or message notification (for example, the file is completely downloaded and then notified), so as to realize message transmission. For the file type, the hypertext transfer protocol (HTTP) transmission can be used. The HTTP protocol itself does not specify synchronization or asynchronization. In actual application, the synchronous mode is usually used for communication. In order to improve the efficiency, the large file can be divided into small files for transmission, so as to avoid that one file occupies the resource all the time and improve the resource utilization rate.

[0035] It can be understood that the message filling standard is a unified format standard for filling the message. Different data types correspond to different format standards. After the transmission protocol is selected, the edge gateway fills the transmission message. It adds necessary header information, such as the process ID (application process identity) allocated in advance, the interface ID (communication interface identity), the timestamp, etc., so that the vehicle terminal and the cloud terminal can accurately identify and process the data. Thus, the vehicle terminal application developer only needs to focus on the core function of the application, without needing to care about the complex data transmission details, which greatly reduces the development difficulty and workload.

[0036] It should be understood that when the data type is the message type, the application identification code (application ID), the target service identification code (service ID), the target interface identification code (target interface ID), the message identification code (message ID), and the timestamp information, etc. header information need to be filled in, and the specific message data to be transmitted is filled in the report body. When the data type is the file type, the application identification code (application ID), the target service identification code (service ID), the target interface identification code (target interface ID), the message identification code (file ID), the timestamp information, the file storage path, the file format, the file processing state, the progress notification frequency, etc. header information need to be filled in, and the specific file data to be transmitted is filled in the report body.

[0037] In step S20, based on the resource configuration information, the resource load state corresponding to the target transmission message is determined. It should be noted that the resource configuration information is the configuration for managing resources, for example: the number of files uploaded / downloaded at the same time, the number of message data processed at the same time, and the limit of the amount of single message data, to ensure the normal operation of the edge gateway and the normal data transmission load.

[0038] In one possible implementation, step S20 can include: obtaining the current processing quantity corresponding to the data type of the target transmission data, and obtaining the data quantity of the target transmission message; based on the resource configuration information, determining the processing quantity threshold corresponding to the data type of the target transmission data, and determining the data quantity threshold corresponding to the target transmission message; when the current processing quantity corresponding to the data type of the target transmission data is less than or equal to the processing quantity threshold and the data quantity of the target transmission message is less than or equal to the data quantity threshold, determining that the resource load state corresponding to the target transmission message is normal load.

[0039] It should be noted that the current processing quantity is the quantity currently being processed according to the data type, if the data type of the target transmission data is the message type, the current processing quantity corresponding to the data type of the target transmission data is the number of messages currently being processed, if the data type of the target transmission data is the file type, the current processing quantity corresponding to the data type of the target transmission data is the number of files currently being processed. The data quantity of the target transmission message is the size of the target transmission message.

[0040] In addition, it should be noted that the resource load state is the load condition of the transmission data resource, including two states of normal load and abnormal load. The normal load means that the resource can load the transmission of the target transmission message, and the abnormal load means that the resource cannot load the transmission of the target transmission message.

[0041] It can be understood that according to the resource configuration information, the processing quantity threshold (maximum processable value) and the data quantity threshold (maximum transmittable data quantity value) can be determined. If the current processing quantity corresponding to the data type of the target transmission data is less than or equal to the processing quantity threshold and the data quantity of the target transmission message is less than or equal to the data quantity threshold, that is, the maximum processable value is not exceeded and the maximum transmittable data quantity value is not exceeded, it is considered that the current resource can load the transmission of the target transmission message, and at this time, the resource load state is normal load. On the contrary, if the current processing quantity corresponding to the data type of the target transmission data is greater than the processing quantity threshold and / or the data quantity of the target transmission message is greater than the data quantity threshold, that is, the maximum processable value is exceeded and / or the maximum transmittable data quantity value is exceeded, it is considered that the current resource cannot load the transmission of the target transmission message, and at this time, the resource load state is abnormal load.

[0042] In step S30, when the resource load state is normal load, the transmission of the target transmission message is subjected to permission verification based on the authentication configuration information, and a permission verification result is obtained. It should be noted that the authentication configuration information is the configuration of the permission, and at least includes an application white list and an interface white list. The application white list is a list of applications that can be subjected to secure transmission, and the application white list usually uses an identification code to represent the application, for example, an application ID. The interface white list is a list of interfaces that can be subjected to secure transmission, and the interface white list usually uses an identification code to represent the interface, for example, an interface ID.

[0043] In a feasible implementation, step S30 can include: when the resource load state is normal load, comparing the application identification code in the target transmission message with the application white list; when the application identification code conforms to the application white list, comparing the target interface identification code in the target transmission message with the interface white list; and when the target interface identification code conforms to the interface white list, determining that the permission verification result is verification passed.

[0044] It should be noted that if the resource load state is normal load, the verification of the permission is continued, and the result of the verification is the permission verification result. The permission verification result includes two cases of verification passed and verification failed. Verification passed means that the transmission permission is possessed, and verification failed means that the transmission permission is not possessed.

[0045] It can be understood that when the resource load state is normal, it is firstly judged whether the application has the permission, the application identifier code in the target transmission message is compared with the application white list, if the application identifier code is consistent with the application white list, it is explained that the application identifier code is in the application white list, the application (the first communication end application) corresponding to the application identifier code has the transmission permission, it is further judged whether the interface has the permission, the target interface identifier code in the target transmission message is compared with the interface white list, if the target interface identifier code is consistent with the interface white list, it is explained that the target interface identifier code is in the interface white list, the interface (the target interface) corresponding to the target interface identifier code has the transmission permission, at this time, the first communication end application and the target interface both have the transmission permission, the permission verification passes, that is, the permission verification result is the verification pass. If the application identifier code is not consistent with the application white list and / or the target interface identifier code is not consistent with the interface white list, it is explained that the first communication end application does not have the transmission permission and / or the target interface does not have the transmission permission, the permission verification does not pass, at this time, the permission verification result is the verification fail, and the edge gateway will refuse to perform the data transmission.

[0046] In the specific implementation, the embodiment newly adds the edge gateway to perform the interface level identity authentication on the application, filters the interfaces / applications not in the white list, and strengthens the data security transmission. Meanwhile, the edge gateway is taken as the unified security authentication entrance, the security authentication interfaces exposed to the outside are avoided to be excessive, and the resource waste caused by the repeated security authentication is avoided.

[0047] It should be understood that if the resource load state is abnormal, the current data transmission process is stopped, at this time, the first communication end application can be sent the reminding information of the transmission exception.

[0048] Step S40, when the permission verification result is the verification pass, the target transmission message is routed to the second communication end application based on the routing configuration information.

[0049] It should be noted that the routing configuration information is the configuration of the routing, for example, the target interface identifier code (interface ID), the interface type (such as synchronous / asynchronous / file uploading / file downloading), the interface protocol, the encryption requirement information and the encryption algorithm (such as no requirement / MD5, etc.), the transmission priority, the target routing address, which are not limited in the embodiment.

[0050] It can be understood that after the permission verification passes, the routing query is performed, and the message routing is performed to the second communication end application according to the routing configuration query result.

[0051] In a possible implementation, step S40 can include: when the permission check result is a check pass, determining, based on the routing configuration information, a target interface identifier code, a transmission priority, and a target routing address of the target transmission message; and routing the target transmission message to the second communication terminal application based on the target interface identifier code, the transmission priority, and the target routing address of the target transmission message.

[0052] It should be noted that different first communication terminal applications usually correspond to different routing configurations. The edge gateway determines the target interface identifier code, the transmission priority, and the target routing address of the target transmission message based on the routing configuration information stored locally, and routes the target transmission message to the second communication terminal application according to the target interface identifier code, the transmission priority, and the target routing address.

[0053] In a specific implementation, reference can be made to Figure 3 For data uploading, the vehicle terminal application transmits data to the edge gateway, the edge gateway parses the data, the edge gateway performs security permission check and routing query on the vehicle terminal interface, and the edge gateway routes the data to the cloud terminal. Reference can be made to Figure 4 For data downloading, the cloud terminal issues a message to the edge gateway, the edge gateway parses the data, the edge gateway performs security permission check and routing query on the interface, and the edge gateway routes the data to the vehicle terminal application.

[0054] Further, in a possible implementation, before the step of routing the target transmission message to the second communication terminal application based on the target interface identifier code, the transmission priority, and the target routing address of the target transmission message, the method further includes: when the signing requirement information of the first communication terminal application exists in the routing configuration information, signing the target transmission message based on the stored security certificate; and when the encryption requirement information of the first communication terminal application exists in the routing configuration information, encrypting the target transmission message based on a target encryption algorithm corresponding to the encryption requirement information.

[0055] It should be noted that the security certificate is usually a PKI (Public Key Infrastructure, public key infrastructure) security certificate. The security certificate is obtained and stored by the edge gateway, and the first communication terminal application can select whether to use the security certificate for security authentication according to its own needs, thereby reducing the application security certificate check process and reducing the risk of data leakage in the data transmission process. The demand of the first communication terminal application for the security certificate can be set in the signing requirement information / deciphering requirement information.

[0056] It can be understood that if the signing requirement information of the first communication end application exists in the routing configuration information, it indicates that the first communication end application needs to use the security certificate for signing, at this time, the security certificate is selected to sign the target transmission message, and then the target transmission message is routed. If the un-signing requirement information of the first communication end application exists in the routing configuration information, it indicates that the first communication end application needs to use the security certificate for un-signing, at this time, the security certificate is selected to un-sign the target transmission message, and then the target transmission message is routed. In the specific implementation, reference is made to Figure 5 The edge gateway checks the state of the local security certificate, and if the security certificate does not exist / has not been updated, applies to the cloud for obtaining / updating the security certificate and stores it locally. When the application needs to perform security authentication, the local security certificate is obtained for signing / un-signing.

[0057] It should be noted that in the embodiment, the edge gateway provides data encryption / decryption function, and the encryption requirement information can be set for the encryption requirement, and the target encryption algorithm used for encryption can be set. The decryption requirement information can be set for the decryption requirement, and the target decryption algorithm used for decryption can be set.

[0058] It can be understood that if the encryption requirement information of the first communication end application exists in the routing configuration information, the target transmission message is encrypted based on the target encryption algorithm corresponding to the encryption requirement information. If the decryption requirement information of the first communication end application exists in the routing configuration information, the target transmission message is decrypted based on the target decryption algorithm corresponding to the decryption requirement information.

[0059] The embodiment provides a vehicle-cloud communication data transmission management method, receiving target transmission data sent by a first communication end application, converting the target transmission data into a target transmission message based on a preset unified communication protocol standard; determining a resource load state based on resource configuration information; when the resource load state is normal, performing permission verification on the transmission of the target transmission message based on authentication configuration information to obtain a permission verification result; and when the permission verification result is passed, routing the target transmission message to a second communication end application based on routing configuration information. The embodiment provides a unified protocol standard definition for vehicle end applications and cloud end applications, improves the controllability and efficiency of data transmission, makes the vehicle-cloud communication more stable and reliable, improves the interface development reuse rate, reduces the development cost, sets a unified security access portal, fully utilizes the management resources, centrally performs security authentication on data transmission, strengthens the security of data transmission, and reduces the risk of data leakage.

[0060] Based on the first embodiment of the application, in the second embodiment of the application, the same or similar contents as the above-mentioned first embodiment can be referred to the above introduction, and will not be described in detail. On this basis, please refer to Figure 6Before step S10, steps S01-S03 can be included. In step S01, the stored local configuration information is uploaded to the configuration platform, so that the configuration platform performs validity check on the local configuration information. It should be noted that the configuration platform is arranged in the first communication end or the second communication end, and generally, the configuration platform is arranged in the cloud. The local configuration information is the relevant configuration information stored in the edge gateway, and at least includes resource configuration information, authentication configuration information and routing configuration information.

[0061] It can be understood that the configuration platform is deployed in the cloud, and the configuration information can be edited on the configuration platform. Before the edge gateway transmits data, the configuration information is uploaded to the configuration platform in the cloud.

[0062] In step S02, when the latest configuration information issued by the configuration platform is received, it is determined that the validity check of the local configuration information fails. It can be understood that when the configuration information uploaded by the edge gateway is received by the cloud, the validity check is performed. That is, the configuration information uploaded by the edge gateway is compared with the configuration information edited in the configuration platform. If they are inconsistent, the validity check fails, indicating that the local configuration information stored in the edge gateway is not the latest data. The cloud will issue the latest configuration data to the edge gateway. If they are consistent, the validity check passes, indicating that the local configuration information stored in the edge gateway is the latest data, and the data transmission can continue. Step S10 is started.

[0063] In step S03, the local configuration information is updated based on the latest configuration information.

[0064] It should be noted that according to the received latest configuration information, the local stored resource configuration information, authentication configuration information and routing configuration information and other local configuration information are updated.

[0065] It can be understood that in the traditional scheme, the application data routing configuration does not support online real-time update, and needs to be updated by modifying the development code and recompiling integration. In the embodiment, the routing configuration message, authentication configuration message, resource configuration information and other configuration information in the edge gateway support cloud real-time update, which can update the data routing configuration in real time, and support security verification and gateway resource allocation modification.

[0066] The embodiment provides a vehicle-cloud communication data transmission management method, configuration information is uploaded to a configuration platform, so that the configuration platform performs validity checking on the configuration information; when receiving latest configuration information issued by the configuration platform, it is determined that the validity checking of the configuration information fails; based on the latest configuration information, resource configuration information, authentication configuration information and routing configuration information are updated. The embodiment provides a unified protocol standard definition for vehicle-side applications and cloud-side applications, improves the controllability and efficiency of data transmission, makes vehicle-cloud communication more stable and reliable, improves interface development reuse rate, reduces development cost, sets a unified security access portal, fully utilizes management resources, centrally performs security authentication on data transmission, strengthens data transmission security, reduces data leakage risk, in addition, configuration information can be updated in real time, and the convenience of data routing configuration update is improved.

[0067] It should be noted that the above examples are only used for understanding the present application and do not constitute a limitation on the vehicle-cloud communication data transmission management method of the present application. More forms of simple transformation based on the technical concept are within the protection scope of the present application.

[0068] The present application also provides a vehicle-cloud communication data transmission management device, please refer to Figure 7 The vehicle-cloud communication data transmission management device comprises: A data specification module 10 is configured to receive target transmission data sent by a first communication end application, and convert the target transmission data into target transmission packets based on a preset unified communication protocol standard. A security verification module 20 is configured to determine a resource load state corresponding to the target transmission packets based on resource configuration information. The security verification module 20 is further configured to perform permission verification on the transmission of the target transmission packets based on authentication configuration information when the resource load state is normal, and obtain a permission verification result. A data routing module 30 is configured to route the target transmission packets to a second communication end application based on routing configuration information when the permission verification result is verified.

[0069] In a possible implementation, the data specification module 10 is further configured to receive target transmission data sent by a first communication end application, determine a data type of the target transmission data, and the data type at least includes a message type and a file type. The packet filling standard of the target transmission data is determined in the preset unified communication protocol standard based on the data type of the target transmission data. The target transmission data is converted into a target transmission packet based on the packet filling standard, and the header information of the target transmission packet at least includes an application identification code, a target service identification code, a target interface identification code, a packet identification code, and timestamp information, and the body information of the target transmission packet is the target transmission data.

[0070] In an implementable embodiment, the security verification module 20 is further configured to acquire a current processing quantity corresponding to the data type of the target transmission data, and acquire a data quantity of the target transmission packet; Based on the resource configuration information, a processing quantity threshold corresponding to the data type of the target transmission data is determined, and a data quantity threshold corresponding to the target transmission packet is determined; When the current processing quantity corresponding to the data type of the target transmission data is less than or equal to the processing quantity threshold and the data quantity of the target transmission packet is less than or equal to the data quantity threshold, it is determined that the resource load state corresponding to the target transmission packet is normal load.

[0071] In an implementable embodiment, the authentication configuration information at least includes an application white list and an interface white list, and the security verification module 20 is further configured to, when the resource load state is normal load, compare the application identification code in the target transmission packet with the application white list; When the application identification code conforms to the application white list, the target interface identification code in the target transmission packet is compared with the interface white list; When the target interface identification code conforms to the interface white list, it is determined that the permission verification result is verified.

[0072] In an implementable embodiment, the data routing module 30 is further configured to, when the permission verification result is verified, determine the target interface identification code, the transmission priority, and the target routing address of the target transmission packet based on the routing configuration information; The target transmission packet is routed to the second communication end application based on the target interface identification code, the transmission priority, and the target routing address of the target transmission packet.

[0073] In an implementable embodiment, the data routing module 30 is further configured to, when the signing requirement information of the first communication end application exists in the routing configuration information, sign the target transmission packet based on the stored security certificate; When the encryption requirement information of the first communication end application exists in the routing configuration information, the target transmission packet is encrypted based on the target encryption algorithm corresponding to the encryption requirement information.

[0074] In a feasible implementation, the data specification module 10 is further configured to upload the stored local configuration information to a configuration platform to enable the configuration platform to perform validity check on the local configuration information, the configuration platform being arranged in the first communication end or the second communication end, and the local configuration information at least including resource configuration information, authentication configuration information and routing configuration information. Upon receiving the latest configuration information issued by the configuration platform, it is determined that the validity check of the local configuration information fails. Based on the latest configuration information, the local configuration information is updated.

[0075] The vehicle-cloud communication data transmission management device provided by the present application adopts the vehicle-cloud communication data transmission management method in the above embodiments, and can solve the technical problem of lack of unified specification and difficulty in effectively managing the data transmission of vehicle-cloud communication, thereby affecting the transmission efficiency and transmission security. Compared with the prior art, the vehicle-cloud communication data transmission management device provided by the present application has the same beneficial effects as the vehicle-cloud communication data transmission management method provided by the above embodiments, and the other technical features in the vehicle-cloud communication data transmission management device are the same as the features disclosed in the above embodiments, which will not be repeated here.

[0076] The present application provides a vehicle-cloud communication data transmission management device, which comprises at least one processor and a memory in communication connection with the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the vehicle-cloud communication data transmission management method in the above embodiment one.

[0077] Reference will be made to the following Figure 8 which shows a structural schematic diagram of a vehicle-cloud communication data transmission management device suitable for implementing the embodiments of the present application. The vehicle-cloud communication data transmission management device in the embodiments of the present application can include but is not limited to mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs (Personal Digital Assistant), PADs (Portable Application Description), PMPs (Portable Media Player), vehicle-mounted terminals (such as vehicle-mounted navigation terminals) and the like, and fixed terminals such as digital TVs, desktop computers and the like. Figure 8 The vehicle-cloud communication data transmission management device shown is only an example, and should not bring any limitation to the functions and use range of the embodiments of the present application.

[0078] As Figure 8As shown, the vehicle-cloud communication data transmission management device can include a processing apparatus 1001 (e.g., a central processing unit, a graphics processing unit, etc.) that can perform various appropriate actions and processes according to programs stored in a ROM (Read Only Memory) 1002 or programs loaded from a storage apparatus 1003 into a RAM (Random Access Memory) 1004. Various programs and data required for the operation of the vehicle-cloud communication data transmission management device are also stored in the RAM 1004. The processing apparatus 1001, the ROM 1002, and the RAM 1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: input apparatuses 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; output apparatuses 1008 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; the storage apparatus 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication apparatus 1009. The communication apparatus 1009 can allow the vehicle-cloud communication data transmission management device to communicate wirelessly or by wire with other devices to exchange data. Although the vehicle-cloud communication data transmission management device with various systems is shown in the figure, it should be understood that all the shown systems are not required to be implemented or possessed. More or fewer systems can be alternatively implemented or possessed.

[0079] In particular, according to embodiments of the present disclosure, the processes described above with reference to the flowcharts can be implemented as a computer software program. For example, embodiments of the present disclosure include a computer program product comprising a computer program carried on a computer readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network through the communication apparatus, or installed from the storage apparatus 1003, or installed from the ROM 1002. When the computer program is executed by the processing apparatus 1001, the above-mentioned functions defined in the methods of embodiments of the present disclosure are performed.

[0080] The vehicle-cloud communication data transmission management device provided by the present disclosure adopts the vehicle-cloud communication data transmission management method in the above embodiments, and can solve the technical problem of lack of unified specification, difficulty in effectively managing the data transmission of vehicle-cloud communication, and impact on transmission efficiency and transmission security. Compared with the prior art, the vehicle-cloud communication data transmission management device provided by the present disclosure has the same beneficial effects as the vehicle-cloud communication data transmission management method provided by the above embodiments, and other technical features in the vehicle-cloud communication data transmission management device are the same as the features disclosed in the previous embodiment method, which will not be repeated here.

[0081] It should be understood that various parts of the present application can be realized in hardware, software, firmware, or a combination thereof. In the above description of embodiments, specific functional, structural, material or characteristic features are combined in a manner appropriate for the particular example or embodiment. However, each feature can also be provided separately or in any appropriate sub-combination.

[0082] The above merely provides a specific implementation of the present application, but the protection scope of the present application is not limited thereto, and any person skilled in the art can easily think of changes or replacements within the technical scope disclosed by the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

[0083] The present application provides a computer readable storage medium having stored thereon computer readable program instructions (i.e. computer programs) for performing the vehicle-cloud communication data transmission management method in the above-described embodiments.

[0084] The computer readable storage medium provided by the present application may, for example, be a U disk, but is not limited to an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, system or device, or any combination of the above. More specific examples of the computer readable storage medium can include, but are not limited to: an electrical connection having one or more conductive wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any appropriate combination of the above. In the present embodiment, the computer readable storage medium can be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, system or device. The program code contained in the computer readable storage medium can be transmitted in any appropriate medium, including but not limited to: an electrical wire, an optical cable, an RF (Radio Frequency: radio frequency), etc., or any appropriate combination of the above.

[0085] The above computer readable storage medium can be contained in the vehicle-cloud communication data transmission management device; or can exist separately and not be assembled into the vehicle-cloud communication data transmission management device.

[0086] The computer readable storage medium described above carries one or more programs, when the one or more programs are executed by the vehicle-cloud communication data transmission management device, the vehicle-cloud communication data transmission management device is caused to: receive target transmission data sent by a first communication end application, convert the target transmission data into a target transmission message based on a preset unified communication protocol standard; determine a resource load state corresponding to the target transmission message based on resource configuration information; when the resource load state is normal load, perform permission verification on transmission of the target transmission message based on authentication configuration information to obtain a permission verification result; and when the permission verification result is verification passed, route the target transmission message to a second communication end application based on routing configuration information.

[0087] Computer program code for carrying out operations of the present application can be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code can execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider).

[0088] The flow diagrams and the block diagrams in the drawings are illustrations of architectures, functionalities, and operations of possible implementations of systems, methods, and computer program products according to various embodiments of present application. In this regard, each block in the flow diagrams or block diagrams can represent a module, a procedure, or a part of code, which comprises one or more executable instructions for implementing the specified functions. It should also be noted that, in some alternative implementations, the functions noted in the blocks can occur in a different order than that noted in the figures. For example, two blocks noted in succession can in fact be executed substantially concurrently or in the opposite order, depending on the functionality involved. It should also be noted that each block in the block diagrams and / or flow diagrams, and combinations of blocks in the block diagrams and / or flow diagrams, can be implemented by dedicated hardware-based systems that perform the specified functions or operations, or can be implemented by a combination of dedicated hardware-based systems and computer instructions.

[0089] The modules described in the embodiments of this application can be implemented in software or hardware. The names of the modules do not necessarily limit the functionality of the unit itself.

[0090] The readable storage medium provided in this application is a computer-readable storage medium that stores computer-readable program instructions (i.e., a computer program) for executing the above-described vehicle-to-cloud communication data transmission management method. This solves the technical problem of lacking unified standards, making it difficult to effectively manage vehicle-to-cloud communication data transmission, and affecting transmission efficiency and security. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in this application are the same as those of the vehicle-to-cloud communication data transmission management method provided in the above embodiments, and will not be repeated here.

[0091] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the vehicle-to-cloud communication data transmission management method described above.

[0092] The computer program product provided in this application can solve the technical problem of the lack of unified standards, which makes it difficult to effectively manage the data transmission of vehicle-to-cloud communication, thus affecting transmission efficiency and security. Compared with the prior art, the beneficial effects of the computer program product provided in this application are the same as those of the vehicle-to-cloud communication data transmission management method provided in the above embodiments, and will not be repeated here.

[0093] The above are only some embodiments of this application and do not limit the patent scope of this application. All equivalent structural transformations made under the technical concept of this application and using the content of this application specification and drawings, or direct / indirect applications in other related technical fields, are included in the patent protection scope of this application.

Claims

1. A vehicle-to-cloud communication data transmission management method, characterized in that, The method includes: Receive target transmission data sent by the first communication terminal application, and convert the target transmission data into a target transmission message based on a preset unified communication protocol standard; Based on the resource configuration information, determine the resource load status corresponding to the target transmission message; When the resource load status is normal, the transmission of the target transmission message is verified based on the authentication configuration information to obtain the permission verification result. When the permission verification result is successful, the target transmission message is routed to the second communication terminal application based on the routing configuration information.

2. The method as described in claim 1, characterized in that, The step of receiving the target transmission data sent by the first communication terminal application and converting the target transmission data into a target transmission message based on a preset unified communication protocol standard includes: Receive target transmission data sent by a first communication terminal application, determine the data type of the target transmission data, and the data type includes at least message type and file type; Based on the data type of the target transmitted data, the message filling standard of the target transmitted data is determined in the preset unified communication protocol standard; Based on the message padding standard, the target transmission data is converted into a target transmission message. The header information of the target transmission message includes at least an application identifier, a target service identifier, a target interface identifier, a message identifier, and timestamp information. The body information of the target transmission message is the target transmission data.

3. The method as described in claim 1, characterized in that, The step of determining the resource load status corresponding to the target transmission message based on resource configuration information includes: Obtain the current processing quantity corresponding to the data type of the target transmitted data, and obtain the data volume of the target transmitted message; Based on the resource configuration information, determine the processing quantity threshold corresponding to the data type of the target transmitted data, and determine the data volume threshold corresponding to the target transmitted message; When the current processing quantity corresponding to the data type of the target transmitted data is less than or equal to the processing quantity threshold and the data volume of the target transmitted message is less than or equal to the data volume threshold, the resource load status corresponding to the target transmitted message is determined to be normal.

4. The method as described in claim 1, characterized in that, The authentication configuration information includes at least an application whitelist and an interface whitelist. The step of performing permission verification on the transmission of the target transmission packet based on the authentication configuration information to obtain the permission verification result when the resource load status is normal includes: When the resource load status is normal, the application identifier code in the target transmission message is compared with the application whitelist; When the application identifier code matches the application whitelist, the target interface identifier code in the target transmission message is compared with the interface whitelist; When the target interface identifier code matches the interface whitelist, the permission verification result is determined to be successful.

5. The method as described in claim 1, characterized in that, The step of routing the target transmission message to the second communication terminal application based on the routing configuration information when the permission verification result is successful includes: When the permission verification result is successful, the target interface identifier, transmission priority, and target route address of the target transmission packet are determined based on the routing configuration information. Based on the target interface identifier, transmission priority, and target routing address of the target transmission message, the target transmission message is routed to the second communication terminal application.

6. The method as described in claim 5, characterized in that, Before the step of routing the target transmission message to the second communication terminal application based on the target interface identifier code, transmission priority, and target routing address of the target transmission message, the method further includes: When the routing configuration information contains the signature requirement information of the first communication terminal application, the target transmission message is signed based on the stored security certificate; When the routing configuration information contains encryption requirement information for the first communication terminal application, the target transmission message is encrypted based on the target encryption algorithm corresponding to the encryption requirement information.

7. The method according to any one of claims 1 to 6, characterized in that, Before the step of receiving the target transmission data sent by the first communication terminal and converting the target transmission data into a target transmission message based on a preset unified communication protocol standard, the method further includes: The stored local configuration information is uploaded to the configuration platform so that the configuration platform can perform a validity check on the local configuration information. The configuration platform is set in the first communication terminal or the second communication terminal. The local configuration information includes at least resource configuration information, authentication configuration information and routing configuration information. Upon receiving the latest configuration information from the configuration platform, it is determined that the validity check of the local configuration information has failed. Based on the latest configuration information, the local configuration information is updated.

8. A vehicle-to-cloud communication data transmission management device, characterized in that, The device includes: The data specification module is used to receive target transmission data sent by the first communication terminal application and convert the target transmission data into target transmission messages based on a preset unified communication protocol standard. The security verification module is used to determine the resource load status corresponding to the target transmission message based on resource configuration information. The security verification module is also used to perform permission verification on the transmission of the target transmission message based on the authentication configuration information when the resource load status is normal, and obtain the permission verification result. The data routing module is used to route the target transmission message to the second communication terminal application based on the routing configuration information when the permission verification result is successful.

9. A vehicle-to-cloud communication data transmission management device, characterized in that, The device includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, the computer program being configured to implement the steps of the vehicle-to-cloud communication data transmission management method as described in any one of claims 1 to 7.

10. A storage medium, characterized in that, The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, it implements the steps of the vehicle-to-cloud communication data transmission management method as described in any one of claims 1 to 7.

Images