Data transmission method, system and device, storage medium and program product

Abstract

The embodiment of the invention provides a data transmission method, system and device, a storage medium and a program product, and the method comprises the steps: verifying an identity verification request sent by a vehicle end, and obtaining a first verification result; if the first verification result is that verification is passed, generating a communication identifier corresponding to the identity verification request, and sending the communication identifier to the vehicle end; verifying a communication connection establishment request sent by the vehicle end to obtain a second verification result; wherein the communication connection establishment request comprises a communication identifier; if the second verification result is that the verification is passed, establishing communication connection with the vehicle end; and performing data transmission with the vehicle end based on the communication connection. According to the embodiment of the invention, the identity verification request sent by the vehicle end and the communication connection establishment request sent by the vehicle end are verified, so that the data and privacy security of the vehicle end can be ensured, the security and reliability of the communication connection between the vehicle end and the cloud end are improved, and the security and reliability of data transmission are improved.

Description

Technical Field

[0001] This invention relates to the field of vehicle-to-everything (V2X) communication technology, and in particular to a data transmission method, system, device, storage medium, and program product. Background Technology

[0002] With the rapid development of intelligent transportation systems, vehicle-to-everything (V2X) technology has become an important research direction. V2X improves traffic safety, optimizes traffic flow, and provides infotainment services by offering communication services between vehicles and between vehicles and infrastructure. However, existing V2X communication technologies commonly suffer from privacy leaks, data tampering, and forgery, resulting in low data security between vehicles and the cloud. Summary of the Invention

[0003] This invention provides a data transmission method, system, device, storage medium, and program product, which can improve the security of data transmission between the vehicle and the cloud.

[0004] In a first aspect, embodiments of this disclosure provide a data transmission method applied in the cloud, comprising: verifying an authentication request sent by a vehicle terminal to obtain a first verification result; if the first verification result is successful, generating a communication identifier corresponding to the authentication request and sending the communication identifier to the vehicle terminal; verifying a communication connection establishment request sent by the vehicle terminal to obtain a second verification result; wherein the communication connection establishment request includes the communication identifier; if the second verification result is successful, establishing a communication connection with the vehicle terminal; and transmitting data with the vehicle terminal based on the communication connection.

[0005] Secondly, this disclosure provides a data transmission method applied to a vehicle, including:

[0006] Send an authentication request to the cloud; receive a communication identifier corresponding to the authentication request sent by the cloud; wherein the communication identifier is a communication identifier generated by the cloud after the authentication request is verified; send a communication connection establishment request to the cloud; wherein the communication connection establishment request includes the communication identifier; if the cloud is received as having verified the communication connection establishment request, then data transmission is performed with the cloud based on the established communication connection.

[0007] Thirdly, embodiments of this disclosure also provide a data transmission system, including: the system includes a cloud and a vehicle; the cloud includes an authentication module and a first communication module; the vehicle includes a second communication module; the second communication module is configured to send an authentication request to the authentication module; the authentication module is configured to verify the authentication request and obtain a first verification result; if the first verification result is successful, a communication identifier corresponding to the authentication request is generated and the communication identifier is sent to the second communication module; the second communication module is further configured to send a communication connection establishment request to the first communication module; wherein the communication connection establishment request includes the communication identifier; the authentication module is further configured to verify the communication connection establishment request and obtain a second verification result; the first communication module is further configured to establish a communication connection with the second communication module if the second verification result is successful; the second communication module is further configured to perform data transmission with the first communication module based on the communication connection.

[0008] Fourthly, embodiments of this disclosure also provide an electronic device, the electronic device comprising: one or more processors; and a storage system for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the data transmission method as described in embodiments of this disclosure.

[0009] Fifthly, embodiments of this disclosure also provide a storage medium containing computer-executable instructions, which, when executed by a computer processor, are used to perform the data transmission method as described in embodiments of this disclosure.

[0010] Sixthly, embodiments of this disclosure also provide a computer program product, including a computer program that, when executed by a processor, implements the data transmission method as described in embodiments of this disclosure.

[0011] The technical solution of this disclosure verifies the authentication request sent by the vehicle to obtain a first verification result; if the first verification result is successful, a communication identifier corresponding to the authentication request is generated and sent to the vehicle; the communication connection establishment request sent by the vehicle is verified to obtain a second verification result; wherein, the communication connection establishment request includes the communication identifier; if the second verification result is successful, a communication connection is established with the vehicle; data is transmitted with the vehicle based on the communication connection. This disclosure, by verifying both the authentication request and the communication connection establishment request sent by the vehicle—that is, through dual verification—ensures the security of vehicle data and privacy, improves the security and reliability of the communication connection between the vehicle and the cloud, and enhances the security and reliability of data transmission. Attached Figure Description

[0012] The above and other features, advantages, and aspects of the embodiments of this disclosure will become more apparent from the accompanying drawings and the following detailed description. Throughout the drawings, the same or similar reference numerals denote the same or similar elements. It should be understood that the drawings are schematic, and the originals and elements are not necessarily drawn to scale.

[0013] Figure 1 This is a schematic diagram of a data transmission method provided in an embodiment of the present invention;

[0014] Figure 2 This is a schematic diagram of another data transmission method provided in an embodiment of the present invention;

[0015] Figure 3 This is a schematic diagram of a data transmission system structure provided in an embodiment of the present invention;

[0016] Figure 4 This is a schematic diagram of another data transmission system structure provided in an embodiment of the present invention;

[0017] Figure 5 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0018] Embodiments of this disclosure will now be described in more detail with reference to the accompanying drawings. While some embodiments of this disclosure are shown in the drawings, it should be understood that this disclosure can be implemented in various forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of this disclosure. It should be understood that the accompanying drawings and embodiments of this disclosure are for illustrative purposes only and are not intended to limit the scope of protection of this disclosure.

[0019] It should be understood that the various steps described in the method embodiments of this disclosure may be performed in different orders and / or in parallel. Furthermore, the method embodiments may include additional steps and / or omit the steps shown. The scope of this disclosure is not limited in this respect. The term "comprising" and its variations as used herein are open-ended, meaning "including but not limited to". It should be noted that the concepts of "first," "second," etc., mentioned in this disclosure are used only to distinguish different systems, modules, or units, and are not intended to limit the order of functions performed by these systems, modules, or units or their interdependencies. It should be noted that the modifications "a" or "a plurality of" mentioned in this disclosure are illustrative rather than restrictive, and those skilled in the art should understand that unless explicitly indicated otherwise in the context, they should be understood as "one or more". It is understood that the data involved in this technical solution (including but not limited to the data itself, the acquisition or use of data) shall comply with the requirements of applicable laws, regulations, and relevant provisions.

[0020] Figure 1 This is a schematic flowchart of a data transmission method provided by an embodiment of the present invention, applied to the cloud. This disclosure applies to scenarios where data transmission occurs between a vehicle and the cloud. The method can be executed by a data transmission system, which can be implemented in software and / or hardware, optionally through an electronic device, such as a mobile terminal, PC, or server. Figure 1 As shown, the method includes:

[0021] S110. Verify the authentication request sent by the vehicle terminal and obtain the first authentication result.

[0022] In this embodiment, "vehicle terminal" can be understood as "vehicle infotainment system," which refers to the intelligent in-vehicle terminal system integrated within the vehicle. This system integrates intelligent vehicle infotainment software, high-performance computing chips, and other components. The vehicle infotainment system not only handles various information processing and display within the vehicle but also possesses the ability to communicate efficiently with the cloud, enabling real-time data upload and download. The vehicle infotainment system can serve as the core platform for intelligent vehicles to interact with users and communicate with the cloud.

[0023] The authentication request may include vehicle information, vehicle login information, and private key.

[0024] Vehicle information can be understood as information that uniquely identifies the vehicle, such as the vehicle identification number (VIN) and vehicle model. Vehicle login information can be understood as the user's account for logging into the vehicle's infotainment system. The private key and its corresponding public key are a key pair generated using an encryption algorithm. This embodiment does not limit the specific encryption algorithm; for example, it can include RSA encryption (RSA) or Elliptic Curve Cryptography (ECC). The private key is allocated to the vehicle, and the corresponding public key is allocated to the cloud.

[0025] The first verification result can be understood as the result of the cloud verifying the identity verification request.

[0026] In this embodiment, the vehicle information, vehicle login information, and private key can be verified sequentially. If the verification results of the vehicle information, vehicle login information, and private key are all successful, the first verification result is successful. If at least one of the verification results of the vehicle information, vehicle login information, and private key is unsuccessful, the first verification result is unsuccessful.

[0027] Optionally, the authentication request sent by the vehicle terminal is verified to obtain a first verification result, including: verifying the private key based on the pre-generated public key to obtain a private key verification result; if the private key verification result is successful, then the vehicle information is verified to obtain a vehicle information verification result; if the vehicle information verification result is successful, then the vehicle login information is verified to obtain a vehicle login information verification result; if the vehicle login information verification result is successful, then the first verification result is successful; if at least one of the private key verification result, vehicle information verification result, and vehicle login information verification result is unsuccessful, then the first verification result is unsuccessful.

[0028] In this embodiment, the cloud can use a pre-generated public key to verify the private key, i.e., to confirm whether the private key matches the public key, thereby confirming the legitimacy of the private key. If the private key and public key do not match, the private key verification result is verification failure, and correspondingly, the first verification result is verification failure. If the private key and public key match, it means that the public key in the cloud and the private key on the vehicle are a key pair, and the private key verification result is verification success. The cloud then uses pre-stored standard vehicle information to verify the vehicle information sent by the vehicle, i.e., to confirm whether the vehicle information sent by the vehicle is consistent with the standard vehicle information, thereby confirming the authenticity of the vehicle information sent by the vehicle (preventing forgery and tampering of vehicle information). If the vehicle information sent by the vehicle is inconsistent with the standard vehicle information, the vehicle information verification result is verification failure, and correspondingly, the first verification result is verification failure. If the vehicle information sent by the vehicle is consistent with the standard vehicle information, the vehicle information verification result is verification success, and the vehicle login information is verified to obtain the vehicle login information verification result. If the cloud does not store the vehicle login information corresponding to the vehicle information, it indicates that the user is logging into the vehicle for the first time, and the vehicle login information can be verified by default. If the cloud has pre-stored the corresponding vehicle login information, it indicates that the user is not logging into the vehicle for the first time, and the vehicle login information has been recorded in the cloud. In this case, the pre-stored vehicle login information can be compared with the vehicle login information sent by the vehicle. If they match, the vehicle login information verification result is successful, and the corresponding first verification result is successful. If they do not match, the vehicle login information verification result is unsuccessful, and the corresponding first verification result is unsuccessful.

[0029] In this embodiment, the legitimacy of the private key and the authenticity of the vehicle information are verified through the public key to prevent forgery or tampering. The vehicle login information is also verified based on whether it is the first login. This ensures the correctness of the user's identity. In other words, the identity verification request can be accurately verified through multiple verification measures, thereby ensuring the security of the vehicle and protecting the legitimate rights and interests of the vehicle and the user.

[0030] S120. If the first verification result is successful, a communication identifier corresponding to the authentication request is generated and sent to the vehicle.

[0031] In this embodiment, if the first verification result is successful, meaning the identity verification request is successful, the cloud generates a corresponding communication identifier based on the identity verification request and sends the communication identifier back to the vehicle. Simultaneously, the cloud also stores the communication identifier in the cloud. In this embodiment, during the process of the vehicle sending a communication connection establishment request to the cloud, the communication identifier is a crucial information element required in the communication connection establishment request to ensure the communication security between the vehicle and the cloud.

[0032] Optionally, generating a communication identifier corresponding to the authentication request includes: generating a communication identifier corresponding to the authentication request based on the vehicle information, the vehicle login information, and dynamic information; and replacing the previously saved communication identifier with the communication identifier corresponding to the authentication request.

[0033] The dynamic information refers to the current time and / or a random number.

[0034] In this embodiment, the communication identifier has a corresponding binding or association relationship with the vehicle information and vehicle-to-everything (V2X) login information included in the authentication request. The communication identifier generated based on vehicle information, V2X login information, and dynamic information ensures its uniqueness, while the addition of dynamic information guarantees that each generated communication identifier is different. In this embodiment, each time a new communication identifier is generated, it is saved and the previously saved communication identifier is replaced. That is, after generating the communication identifier corresponding to the authentication request based on vehicle information, V2X login information, and dynamic information, the previously saved communication identifier is replaced with the communication identifier corresponding to the authentication request, thereby ensuring the one-time use of the communication identifier and improving communication security. Furthermore, the communication identifier can be associated with the corresponding vehicle information and V2X login information, allowing the tracking of specific vehicle information and V2X login information through the communication identifier, thus ensuring the traceability of the communication identifier.

[0035] S130. Verify the communication connection establishment request sent by the vehicle end and obtain the second verification result.

[0036] The communication connection establishment request includes communication identifier, vehicle information, and vehicle login information.

[0037] The second verification result can be understood as the result of the cloud's verification of the communication connection establishment request.

[0038] In this embodiment, the communication identifier stored in the cloud can be used to verify the communication identifier in the communication connection establishment request. At the same time, the vehicle information and vehicle login information in the communication connection establishment request can be used to verify the communication identifier in the communication connection establishment request, thereby obtaining a second verification result.

[0039] Optionally, the communication connection establishment request sent by the vehicle terminal is verified to obtain a second verification result, including: if there is a saved record corresponding to the communication identifier in the cloud, and the vehicle information and vehicle login information corresponding to the communication identifier are the same as the vehicle information and vehicle login information in the communication connection establishment request, then the second verification result is verification passed.

[0040] In this embodiment, if a saved record corresponding to the communication identifier in the communication connection establishment request exists in the cloud (indicating that the communication identifier in the communication connection establishment request is consistent with the communication identifier saved in the cloud), and the vehicle information and vehicle login information associated with the communication identifier in the communication connection establishment request correspond to the same vehicle information and vehicle login information corresponding to the communication identifier saved in the cloud, then it indicates that the communication identifier saved in the cloud has a corresponding association or binding relationship with the vehicle information and vehicle login information in the communication connection establishment request, and the communication connection establishment request is considered to have passed verification, i.e., the second verification result is verification passed. If a saved record corresponding to the communication identifier in the communication connection establishment request does not exist in the cloud, and / or the vehicle information and vehicle login information associated with the communication identifier in the communication connection establishment request do not correspond to the same vehicle information and vehicle login information in the communication connection establishment request, then the communication connection establishment request is considered to have failed verification, i.e., the second verification result is verification failed.

[0041] In this embodiment, by verifying the communication identifier and the vehicle information and vehicle login information associated with the communication identifier, unauthorized connections and data tampering can be prevented, ensuring the reliability of communication between the vehicle and the cloud and the security of data transmission.

[0042] S140. If the second verification result is successful, a communication connection is established with the vehicle.

[0043] The communication connection is used for secure data transmission between the vehicle and the cloud. In this embodiment, if the second verification result is successful, it indicates that the cloud has verified the communication connection establishment request sent by the vehicle, confirming that the vehicle's identity and permissions are legitimate and valid. Under these circumstances, the cloud can establish a communication connection with the vehicle, enabling secure interaction and data transmission between them.

[0044] S150, data transmission with the vehicle is based on the communication connection.

[0045] In this embodiment, the vehicle can transmit data to the cloud via a communication connection, and the cloud can also transmit data to the vehicle via a communication connection. The data transmitted between the vehicle and the cloud can be encrypted or unencrypted.

[0046] It should be noted that when the vehicle's infotainment system is powered off or restarted, the communication connection ends, and the corresponding communication identifier becomes invalid. The vehicle needs to resend the authentication request and the communication connection establishment request to the cloud. In other words, the communication identifier is dynamically generated and is a one-time event, becoming invalid when the communication connection ends. It needs to be regenerated every time the vehicle establishes a communication connection with the cloud.

[0047] Optionally, data transmission with the vehicle is performed based on the communication connection, including: if the received data transmitted by the vehicle is encrypted, the encrypted data is decrypted based on the public key to obtain the decrypted data; wherein the encrypted data is obtained by the vehicle using the private key; and the decrypted data is stored.

[0048] In this embodiment, if the vehicle uses a private key to encrypt the data and then sends the encrypted data to the cloud, the cloud, upon receiving the encrypted data, uses the public key corresponding to the vehicle's private key to decrypt the encrypted data, thereby restoring the original data. This encryption method can be called asymmetric encryption. Finally, the decrypted data is stored in the database. In this embodiment, through asymmetric encryption, the vehicle uses a private key to encrypt data to ensure secure transmission, while the cloud uses the public key to decrypt and obtain the original data, effectively preventing data from being illegally stolen or tampered with during transmission.

[0049] The technical solution of this disclosure verifies the authentication request sent by the vehicle to obtain a first verification result; if the first verification result is successful, a communication identifier corresponding to the authentication request is generated and sent to the vehicle; the communication connection establishment request sent by the vehicle is verified to obtain a second verification result; wherein, the communication connection establishment request includes the communication identifier; if the second verification result is successful, a communication connection is established with the vehicle; data is transmitted with the vehicle based on the communication connection. This disclosure, by verifying both the authentication request and the communication connection establishment request sent by the vehicle—that is, through dual verification—ensures the security of vehicle data and privacy, improves the security and reliability of the communication connection between the vehicle and the cloud, and enhances the security and reliability of data transmission.

[0050] Figure 2 This is a schematic flowchart of another data transmission method provided in an embodiment of the present invention. It is applied to the vehicle end. See also... Figure 2 The method provided in this embodiment of the invention specifically includes the following steps:

[0051] S210, Send an authentication request to the cloud.

[0052] The cloud platform has the ability to communicate with the vehicle, verify authentication requests and communication connection establishment requests sent by the vehicle, decrypt encrypted data sent by the vehicle, and store the decrypted data.

[0053] S220: Receive the communication identifier corresponding to the authentication request sent from the cloud.

[0054] The communication identifier is generated by the cloud after the authentication request is verified.

[0055] In this embodiment, the cloud verifies the authentication request. If the first verification result is successful, a communication identifier corresponding to the authentication request is generated, so that the vehicle can receive the communication identifier fed back by the cloud.

[0056] The process involves the cloud verifying the private key based on a pre-generated public key to obtain a private key verification result. If the private key verification passes, the vehicle information is verified to obtain a vehicle information verification result. If the vehicle information verification passes, the vehicle infotainment system login information is verified to obtain a vehicle infotainment system login information verification result. If the vehicle infotainment system login information verification result passes, the first verification result is considered successful, meaning the cloud has successfully verified the identity verification request. If at least one of the private key verification result, vehicle information verification result, or vehicle infotainment system login information verification result fails, the first verification result is considered unsuccessful, meaning the vehicle will receive feedback indicating that the identity verification request failed.

[0057] The cloud platform generates a communication identifier for the authentication request based on vehicle information, vehicle login information, and dynamic information. The dynamic information includes the current time and / or a random number.

[0058] S230: Send a communication connection establishment request to the cloud.

[0059] The communication connection establishment request includes a communication identifier.

[0060] The cloud platform verifies the communication connection establishment request and obtains a second verification result. If the second verification result is successful, the communication connection establishment request is verified, and the cloud platform establishes a communication connection with the vehicle. If the second verification result is unsuccessful, the communication connection establishment request fails, the cloud platform refuses to establish a communication connection with the vehicle, and sends a connection failure message.

[0061] S240. If the verification result of the communication connection establishment request from the cloud is received, data transmission is performed with the cloud based on the established communication connection.

[0062] In this embodiment, if there is a saved record corresponding to the communication identifier in the cloud, and the vehicle information and vehicle login information corresponding to the communication identifier are the same as the vehicle information and vehicle login information in the communication connection establishment request, then the second verification result is verification passed, that is, the cloud verifies the communication connection establishment request.

[0063] In this embodiment, after establishing a communication connection between the cloud and the vehicle, the vehicle can use its private key to encrypt the data and transmit the encrypted data to the cloud. The cloud then uses the public key corresponding to the vehicle's private key to decrypt the encrypted data and stores the decrypted data.

[0064] The technical solution of this disclosure includes: sending an authentication request to the cloud; receiving a communication identifier corresponding to the authentication request sent by the cloud; wherein the communication identifier is generated after the cloud verifies the authentication request; sending a communication connection establishment request to the cloud; wherein the communication connection establishment request includes the communication identifier; and if the cloud verifies the communication connection establishment request, then data transmission is performed with the cloud based on the established communication connection. This disclosure, through cloud-based authentication request verification and communication connection establishment request verification—that is, through dual verification of the vehicle by the cloud—ensures the security of vehicle data and privacy, improves the security and reliability of the communication connection between the vehicle and the cloud, and enhances the security and reliability of data transmission.

[0065] Figure 3 This is a schematic diagram of a data transmission system structure provided in an embodiment of the present disclosure, such as... Figure 3 As shown, the system includes a cloud platform and a vehicle-side platform. The cloud platform includes an authentication module and a first communication module. The vehicle-side platform includes a second communication module. The second communication module is used to send an authentication request to the authentication module. The authentication module is used to verify the authentication request and obtain a first verification result. If the first verification result is successful, a communication identifier corresponding to the authentication request is generated and sent to the second communication module. The second communication module is also used to send a communication connection establishment request to the first communication module. The communication connection establishment request includes the communication identifier. The authentication module is also used to verify the communication connection establishment request and obtain a second verification result. The first communication module is also used to establish a communication connection with the second communication module if the second verification result is successful. The second communication module is also used to transmit data with the first communication module based on the communication connection.

[0066] In this embodiment, the second communication module sends an authentication request to the authentication module; the authentication module verifies the authentication request and obtains a first verification result; if the first verification result is successful, a communication identifier corresponding to the authentication request is generated and sent to the second communication module; the second communication module sends a communication connection establishment request to the first communication module; wherein, the communication connection establishment request includes the communication identifier; the authentication module verifies the communication connection establishment request and obtains a second verification result; if the second verification result is successful, the first communication module establishes a communication connection with the second communication module; the second communication module transmits data with the first communication module based on the communication connection. This embodiment, by verifying both the authentication request sent by the second communication module and the communication connection establishment request through the authentication module—that is, through dual authentication—ensures the security of vehicle-side data and privacy, improves the security and reliability of the communication connection between the vehicle and the cloud, and enhances the security and reliability of data transmission. This, in turn, increases user trust and satisfaction with the vehicle network system and promotes the widespread application of vehicle network technologies and services.

[0067] The authentication request includes vehicle information, vehicle login information, and private key.

[0068] For example, Figure 4 This is a schematic diagram of another data transmission system structure provided in an embodiment of the present invention. Optionally, the vehicle terminal further includes an encryption module, a vehicle information providing module, and a vehicle login module; the encryption module is used to obtain the vehicle terminal's private key and send the private key to the second communication module; the vehicle information providing module is used to obtain vehicle information and send the vehicle information to the second communication module; the vehicle login module is used to obtain vehicle login information and send the vehicle login information to the second communication module.

[0069] In this embodiment, the vehicle terminal obtains its private key through the encryption module and sends the private key to the second communication module; the vehicle terminal obtains vehicle information through the vehicle information providing module and sends the vehicle information to the second communication module; the vehicle terminal obtains vehicle login information through the vehicle login module and sends the vehicle login information to the second communication module. Thus, the second communication module can include vehicle information, vehicle login information, and the private key, and can then send an authentication request including vehicle information, vehicle login information, and the private key to the first communication module.

[0070] Optionally, the authentication module is also used to verify the private key based on the pre-generated public key to obtain the private key verification result; if the private key verification result is successful, the vehicle information is verified to obtain the vehicle information verification result; if the vehicle information verification result is successful, the vehicle login information is verified to obtain the vehicle login information verification result; if the vehicle login information verification result is successful, the first verification result is successful; if at least one of the private key verification result, vehicle information verification result, and vehicle login information verification result is unsuccessful, the first verification result is unsuccessful.

[0071] Optionally, the authentication module is also used to generate a communication identifier corresponding to the authentication request based on vehicle information, vehicle login information, and dynamic information; wherein, the dynamic information is the current time information and / or a random number; and the previously saved communication identifier is replaced with the communication identifier corresponding to the authentication request.

[0072] Optionally, the authentication module is also used to determine if the second verification result is successful if there is a saved record corresponding to the communication identifier in the cloud, and the vehicle information and vehicle login information corresponding to the communication identifier are the same as the vehicle information and vehicle login information in the communication connection establishment request.

[0073] like Figure 4 As shown, optionally, the cloud also includes a decryption module and a storage module; the encryption module is also used to encrypt the data using a private key and send the encrypted data to the second communication module; the second communication module is also used to transmit the encrypted data to the first communication module based on the communication connection; the decryption module is used to decrypt the encrypted data in the first communication module to obtain the decrypted data; and the storage module is used to store the decrypted data.

[0074] In this embodiment, the encryption module encrypts the data using a private key and sends the encrypted data to the second communication module; the second communication module transmits the encrypted data to the first communication module based on the communication connection; the decryption module decrypts the encrypted data in the first communication module to obtain the decrypted data; and the storage module stores the decrypted data. This embodiment, through asymmetric encryption, uses a private key to encrypt data on the vehicle side to ensure secure transmission, while the cloud uses a public key to decrypt and obtain the original data, effectively preventing data from being illegally stolen or tampered with during transmission.

[0075] The data transmission system provided in this disclosure can execute the data transmission method provided in any embodiment of this disclosure, and has the corresponding functional modules and beneficial effects of executing the method.

[0076] Figure 5A schematic diagram of an electronic device 10, which can be used to implement embodiments of the present invention, is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile systems, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing systems. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0077] like Figure 5 As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 may also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0078] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0079] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as method data transfer.

[0080] In some embodiments, the method data transfer may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or mounted on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the method data transfer described above may be performed. Alternatively, in other embodiments, processor 11 may be configured to perform method data transfer by any other suitable means (e.g., by means of firmware).

[0081] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input system, and at least one output system, and transferring data and instructions to the storage system, the at least one input system, and the at least one output system.

[0082] Computer programs used to implement the methods of the present invention can be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data transmission system, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be implemented. The computer programs can be executed entirely on the machine, partially on the machine, as a standalone software package partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0083] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, system, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems, or devices, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0084] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display system (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing system (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of systems can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0085] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0086] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0087] This invention also provides a computer program product, including a computer program that, when executed by a processor, implements the data transmission method provided in any embodiment of this application.

[0088] In implementing the computer program product, computer program code for performing the operations of this invention can be written in one or more programming languages ​​or a combination thereof. Programming languages ​​include object-oriented programming languages ​​such as Java, Smalltalk, and C++, as well as conventional procedural programming languages ​​such as C or similar languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0089] Note that the above description is merely a preferred embodiment of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions can be made without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and may include many other equivalent embodiments without departing from the concept of the present invention, the scope of which is determined by the scope of the appended claims.

Claims

1. A data transmission method, characterized in that, Applied to the cloud, including: Verify the authentication request sent by the vehicle and obtain the first verification result; If the first verification result is successful, a communication identifier corresponding to the authentication request is generated and the communication identifier is sent to the vehicle terminal. The communication connection establishment request sent by the vehicle is verified to obtain a second verification result; wherein the communication connection establishment request includes the communication identifier; If the second verification result is successful, a communication connection is established with the vehicle terminal; Data is transmitted between the vehicle and the communication device based on the communication connection.

2. The method according to claim 1, characterized in that, in, The authentication request includes vehicle information, vehicle system login information, and a private key; the authentication request sent by the vehicle is verified to obtain a first verification result, including: The private key is verified based on the pre-generated public key to obtain the private key verification result; If the private key verification result is successful, then the vehicle information is verified to obtain the vehicle information verification result; If the vehicle information verification result is successful, then the vehicle login information is verified to obtain the vehicle login information verification result; If the vehicle login information verification result is successful, then the first verification result is successful. If at least one of the private key verification results, the vehicle information verification result, and the vehicle login information verification result is a verification failure, then the first verification result is a verification failure.

3. The method according to claim 2, characterized in that, Generate the communication identifier corresponding to the authentication request, including: The communication identifier corresponding to the authentication request is generated based on the vehicle information, the vehicle login information, and the dynamic information; wherein, the dynamic information is the current time information and / or a random number; Replace the previously saved communication identifier with the communication identifier corresponding to the authentication request.

4. The method according to claim 3, characterized in that, in, The communication connection establishment request also includes the vehicle information and the vehicle login information; The communication connection establishment request sent by the vehicle is verified to obtain a second verification result, including: If a record corresponding to the communication identifier exists in the cloud, and the vehicle information and vehicle login information corresponding to the communication identifier are the same as the vehicle information and vehicle login information in the communication connection establishment request, then the second verification result is verification passed.

5. The method according to claim 2, characterized in that, Data transmission with the vehicle based on the communication connection includes: If the received data transmitted by the vehicle is encrypted, the encrypted data is decrypted based on the public key to obtain the decrypted data; wherein, the encrypted data is obtained by the vehicle using the private key. Store the decrypted data.

6. A data transmission method, characterized in that, Applications in vehicles include: Send an authentication request to the cloud; Receive the communication identifier corresponding to the authentication request sent by the cloud; wherein, the communication identifier is a communication identifier generated by the cloud after the authentication request is successfully verified. Send a communication connection establishment request to the cloud; wherein the communication connection establishment request includes the communication identifier; If the cloud verifies the establishment of the communication connection, data transmission is performed with the cloud based on the established communication connection.

7. A data transmission system, characterized in that, The system includes a cloud platform and a vehicle-mounted platform; the cloud platform includes an authentication module and a first communication module; the vehicle-mounted platform includes a second communication module. The second communication module is used to send an authentication request to the authentication module; The authentication module is used to verify the authentication request and obtain a first verification result; if the first verification result is successful, a communication identifier corresponding to the authentication request is generated and the communication identifier is sent to the second communication module. The second communication module is further configured to send a communication connection establishment request to the first communication module; wherein the communication connection establishment request includes the communication identifier; The authentication module is also used to verify the communication connection establishment request and obtain a second verification result; The first communication module is further configured to establish a communication connection with the second communication module if the second verification result is a successful verification. The second communication module is also used to transmit data with the first communication module based on the communication connection.

8. The system according to claim 7, characterized in that, in, The authentication request includes vehicle information, vehicle login information, and a private key; the vehicle terminal also includes an encryption module, a vehicle information providing module, and a vehicle login module. The encryption module is used to obtain the private key of the vehicle and send the private key to the second communication module; The vehicle information providing module is used to acquire vehicle information and send the vehicle information to the second communication module; The vehicle login module is used to obtain vehicle login information and send the vehicle login information to the second communication module.

9. The system according to claim 8, characterized in that, The cloud also includes a decryption module and a storage module; The encryption module is also used to encrypt the data using the private key and send the encrypted data to the second communication module; The second communication module is further configured to transmit encrypted data to the first communication module based on the communication connection; The decryption module is used to decrypt the encrypted data in the first communication module to obtain the decrypted data; The storage module is used to store the decrypted data.

10. An electronic device, characterized in that, The electronic device includes: One or more processors; A storage system is used to store one or more programs. When the one or more programs are executed by the one or more processors, the one or more processors implement the data transmission method as described in any one of claims 1-6.

11. A storage medium comprising computer-executable instructions, which, when executed by a computer processor, are used to perform the data transmission method as described in any one of claims 1-6.

12. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the data transmission method as described in any one of claims 1-6.

Images