Vehicle-mounted data space-time dual protection method and system

Abstract

The application discloses a kind of vehicle-mounted data space-time dual protection method and system, belong to intelligent network connection automobile data security technical field.The method includes four core links of dynamic protection of running metasomasis, fusion layer situation strategy scheduling, anti-quantum encryption encapsulation storage, long-term key evolution and trusted verification.The application generates the dynamic running process of data protection by metasomasis transformation, guarantees the static security of long-term data storage by anti-quantum encryption, dynamically adjusts encryption strength based on real-time security situation, and establishes the cryptographic binding of data and generation environment by metasomasis context fingerprint.The application constructs the space-time integration protection system covering the whole life cycle of data, can resist current network attack and future quantum computing threat at the same time, has high security and strong explainability, and is suitable for automatic driving data record and other high-security level vehicle-mounted scenes.

Description

Technical Field

[0001] This invention relates to the field of data security technology for intelligent connected vehicles, and in particular to a method and system for dual spatiotemporal protection of in-vehicle data. Background Technology

[0002] As the intelligence and connectivity of intelligent connected vehicles continue to improve, vehicle data security faces a dual-dimensional security threat: first, real-time network attacks targeting vehicle hardware and software systems, including vulnerability exploitation, malicious code injection, and runtime data tampering; second, long-term threats to the cracking of stored data, especially accident data and operation logs with legal evidentiary value, which are at risk of being cracked offline with future quantum computing capabilities.

[0003] Existing vehicle data security technologies typically address these two types of threats in isolation, primarily employing two methods: The first is an intrinsic security scheme based on mimicry defense. This scheme constructs a dynamically changing operating environment through mimicry deception, mimicry transformation, and mimicry adjudication, interfering with and blocking attack chains in real time, effectively protecting against real-time attacks during runtime. However, the effectiveness of this type of scheme depends on the dynamic operating characteristics of the system. Once data is written to storage media and becomes a static file, the mimicry defense mechanism no longer provides direct protection, failing to address offline cracking after data theft and lacking the ability to resist future quantum computing attacks.

[0004] The second category is storage encryption schemes based on quantum-resistant cryptography. These schemes use post-quantum cryptography algorithms to encrypt and sign data that needs to be stored for a long time, ensuring the confidentiality and integrity of the data during the storage period of several years to decades. However, this type of scheme is a passive and static protection, which only protects stored data and cannot protect against runtime attacks during the data generation and processing stages. If an attacker breaks into the runtime system, they can tamper with and steal data before encryption, rendering quantum-resistant encryption meaningless. Furthermore, the cryptographic strategy is fixed and rigid, and it is impossible to dynamically adjust the protection strength according to the real-time security situation of the system, lacking coordination and linkage with active defense systems.

[0005] Therefore, there is an urgent need for a method and system for dual spatiotemporal protection of vehicle data to solve the existing technical problems. Summary of the Invention

[0006] The present invention aims to solve at least one of the technical problems existing in the prior art, and proposes a method and system for dual spatiotemporal protection of vehicle data.

[0007] In a first aspect, embodiments of the present invention provide a method for dual spatiotemporal protection of vehicle data, including:

[0008] Mimicry-based dynamic protection is implemented during data generation and runtime: After the vehicle application generates the original data to be protected, the data enters the protection range of the mimicry defense execution body; a mimicry transformation operation is performed to dynamically and randomly reconstruct the running environment of the data processing process, constructing a transformed dynamic running environment; the preprocessing of the original data is completed within the dynamic running environment to obtain the preprocessed data;

[0009] The scheduling adopts a fusion of security layer situational awareness and cryptographic strategy: real-time monitoring of the security status of the dynamic operating environment and output of the security situation level for the current period; the fusion security layer receives the security situation level, matches the corresponding strength of the anti-quantum cryptographic strategy based on the preset fusion strategy matrix, and determines the currently effective anti-quantum key material and cryptographic signature strength.

[0010] Quantum-resistant cryptographic encapsulation and persistent storage: Quantum-resistant key material with matched strength is used to perform quantum-resistant encryption on the preprocessed data to obtain ciphertext, and a quantum-resistant digital signature is calculated and generated; a secure data packet containing a data packet header, ciphertext, quantum-resistant digital signature, and metadata is assembled and generated, wherein the context fingerprint of the current mimicry transformation is embedded in the data packet header, and the secure data packet is written to a persistent storage medium;

[0011] Long-term key evolution and data trust verification: The key evolution process is triggered periodically or under continuous high-risk security conditions to generate a new generation of quantum-resistant key materials and repackage historical secure data packets within the confidentiality period; during data verification, decryption and signature verification are completed based on the corresponding version of the quantum-resistant key material, and the legitimacy of the operating environment in which the data was generated is verified through the mimicry transformation context fingerprint in the data packet header.

[0012] Furthermore, the original data to be protected includes at least event log data from the autonomous driving data recording system, vehicle safety logs, and OTA upgrade packages.

[0013] Furthermore, the mimicry transformation operation includes real-time dynamic randomization adjustment of the memory layout, control flow path, and function entry address of the processing process; the preprocessing includes data serialization, compression, and format verification.

[0014] Furthermore, the security posture level includes at least three levels: no anomalies, detection of scanning and probing, and encounter of penetration attempts. The fusion security layer receives the security posture level and, based on a pre-set fusion strategy matrix, matches a quantum-resistant cryptographic strategy of corresponding strength, specifically including:

[0015] When the security status is normal, a baseline strength quantum-resistant cryptographic strategy is adopted.

[0016] The security posture level is to increase the key strength level of quantum-resistant cryptography when scanning and probing are detected;

[0017] When a security posture is detected as a penetration attempt, the system switches to a high-strength quantum-resistant cryptographic strategy and triggers a temporary key update.

[0018] Furthermore, the structure of the secure data packet is: [Header|C|Sig_pqc|Metadata]; where Header is the data packet header, containing data identifier, timestamp, security status level marker, password strength identifier, key material version number, and mimicry transformation context fingerprint; C is the ciphertext obtained by quantum-resistant encryption; Sig_pqc is the quantum-resistant digital signature; and Metadata is the data attribute metadata.

[0019] Furthermore, the mimicry transformation context fingerprint is the hash value of the mimicry transformation identifier, used to establish a cryptographic binding relationship between the statically stored data and its dynamic operating environment at the time of generation, serving as the basis for verifying the legality of the environment during data forensics.

[0020] Furthermore, the key evolution process can be triggered periodically or under sustained high-risk security conditions. Specific methods include: generating new key material using a new generation of quantum-resistant cryptographic algorithms or higher-strength parameters; decrypting historical ciphertext with the old key, re-encrypting it with the new key and generating a new signature to complete the repackaging of historical data; and updating the mimicry transformation strategy parameter set synchronously with the key evolution event.

[0021] Furthermore, the specific method for data verification includes: extracting the key version number from the secure data packet and retrieving the corresponding version of the quantum-resistant key material; verifying the legitimacy of the quantum-resistant digital signature, and decrypting the ciphertext to obtain preprocessed data after successful verification; extracting the mimicry transformation context fingerprint from the data packet header, verifying whether the fingerprint corresponds to a legitimate mimicry transformation period, and confirming that the data generation environment has not been tampered with.

[0022] Secondly, this invention also discloses a vehicle-mounted data spatiotemporal dual protection system, comprising: a data generation and operation mimicry dynamic protection module, a situational awareness and cryptographic strategy module, a quantum-resistant cryptographic encapsulation and persistent storage module, and a long-term key evolution and data trust verification module; wherein:

[0023] The data generation and operation mimicry dynamic protection module is used to generate raw data to be protected in vehicle applications. After the data enters the protection range of the mimicry defense execution body, it performs a mimicry transformation operation to dynamically and randomly reconstruct the running environment of the data processing process, and constructs a transformed dynamic running environment. Within the dynamic running environment, it completes the preprocessing of the raw data to obtain preprocessed data.

[0024] The situational awareness and cryptographic strategy module is used to monitor the security status of the dynamic operating environment in real time and output the security situation level for the current period. The fusion security layer receives the security situation level, matches the corresponding strength of the anti-quantum cryptographic strategy based on the preset fusion strategy matrix, and determines the currently effective anti-quantum key material and cryptographic signature strength.

[0025] A quantum-resistant cryptographic encapsulation and persistent storage module is used to perform quantum-resistant encryption on preprocessed data using a matching strength quantum-resistant key material to obtain ciphertext, calculate and generate a quantum-resistant digital signature; assemble and generate a secure data packet containing a data packet header, ciphertext, quantum-resistant digital signature, and metadata, wherein the context fingerprint of the current mimicry transformation is embedded in the data packet header, and write the secure data packet into a persistent storage medium;

[0026] The long-term key evolution and data trust verification module is used to trigger the key evolution process periodically or under continuous high-risk security conditions, generate a new generation of quantum-resistant key materials, and repackage historical secure data packets within the confidentiality period. During data verification, decryption and signature verification are completed based on the corresponding version of the quantum-resistant key material. The legitimacy of the operating environment in which the data was generated is verified by the mimicry transformation context fingerprint in the data packet header.

[0027] Thirdly, the present invention also discloses an electronic device, comprising:

[0028] One or more processors;

[0029] Memory, used to store one or more programs;

[0030] When the one or more programs are executed by the one or more processors, the one or more processors implement the method.

[0031] This invention discloses a spatiotemporal dual protection method and system for vehicle-mounted data, belonging to the field of intelligent connected vehicle data security technology. The method includes four core components: runtime mimicry dynamic protection, fusion layer situational strategy scheduling, quantum-resistant cryptographic encapsulation and storage, and long-term key evolution and trusted verification. This invention protects the dynamic operation of data generation and processing through mimicry transformation, ensures the static security of long-term data storage through quantum-resistant cryptography, dynamically adjusts encryption strength based on real-time security situation, and establishes a cryptographic binding between data and the generation environment through mimicry context fingerprinting. This invention constructs a spatiotemporal integrated protection system covering the entire data lifecycle, capable of simultaneously resisting current network attacks and future quantum computing threats, possessing both high security and strong interpretability, and is suitable for high-security vehicle-mounted scenarios such as autonomous driving data recording.

[0032] Compared with the prior art, the present invention has the following beneficial effects:

[0033] 1. Constructing a spatiotemporal integrated defense in depth: It creates a new security paradigm of "runtime mimicry dynamic protection + storage-time quantum-resistant static protection + synergy of the two strategies", eliminating security gaps in data protection at different stages of the data lifecycle and providing the most complete protection for vehicle data to date.

[0034] 2. Achieve dynamic multiplication of security capabilities: By integrating security layers, static cryptographic protection gains "situational awareness" and "dynamic response" capabilities. When the system is attacked, it can not only intercept attacks in real time, but also automatically increase the long-term cracking difficulty of leaked data (if stolen), significantly increasing the overall cost and uncertainty for attackers.

[0035] 3. Long-term security for the future: The inherent quantum-resistant cryptography and key evolution mechanism is specifically designed to address the threat of quantum computing, ensuring the security of data with legal evidentiary value (such as accident data) throughout its statutory retention period (10-15 years), thus solving a long-standing pain point in compliance.

[0036] 4. Enhanced Evidence Collection and Tracing Capabilities: By embedding a mimicry transformation context fingerprint F_context into the data packet, a cryptographic link is established between the data and the system's security state at the time of its generation. In incident investigations or forensic examinations, this provides strong evidence that "the data was generated in a secure environment that has not been tampered with," significantly enhancing the data's legal evidentiary value.

[0037] 5. High integration and deployability: This architecture can be integrated as a complete "safety data platform" with in-vehicle systems such as DSSAD, and is transparent to applications. Through reasonable resource allocation, the overall performance overhead can be controlled within an acceptable range (e.g., <5%). Attached Figure Description

[0038] Figure 1 A flowchart illustrating a method for dual spatiotemporal protection of vehicle data provided in an embodiment of the present invention;

[0039] Figure 2 A structural block diagram of a vehicle-mounted data spatiotemporal dual protection system provided in an embodiment of the present invention;

[0040] Figure 3 This is a structural block diagram of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0041] To enable those skilled in the art to better understand the technical solutions of the present invention, exemplary embodiments of the present invention are described below in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to aid understanding. These should be considered merely exemplary. Therefore, those skilled in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and brevity, descriptions of well-known functions and structures are omitted in the following description.

[0042] Where there is no conflict, the various embodiments of the present invention and the features thereof may be combined with each other.

[0043] As used herein, the term “and / or” includes any and all combinations of one or more related enumerated entries.

[0044] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the invention. As used herein, the singular forms “a” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will also be understood that when the terms “comprising” and / or “made of” are used in this specification, the presence of the stated feature, integral, step, operation, element, and / or component is specified, but the presence or addition of one or more other features, integrals, steps, operations, elements, components, and / or groups thereof is not excluded. Terms such as “connected” or “linked” are not limited to physical or mechanical connections but can include electrical connections, whether direct or indirect.

[0045] Unless otherwise specified, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having the meaning consistent with their meaning in the context of the relevant art and the invention, and will not be interpreted as having an idealized or overly formal meaning unless expressly so defined herein.

[0046] In the technical solution of this invention, the collection, storage, use, processing, transmission, provision, and disclosure of user personal information all comply with relevant laws and regulations and do not violate public order and good morals. The use of user data in this technical solution follows relevant national laws and regulations (e.g., the "Information Security Technology - Personal Information Security Specification"). For example: appropriate measures are taken for personal information access control; restrictions are imposed on the display of personal information; the purpose of using personal information does not exceed the scope of direct or reasonable association; and explicit identity targeting is eliminated when using personal information to avoid precisely locating a specific individual.

[0047] To address at least one of the technical problems existing in the aforementioned related technologies, the present invention provides a method and system for dual spatiotemporal protection of vehicle data.

[0048] This implementation discloses a method for dual spatiotemporal protection of vehicle data, such as... Figure 1 ,include:

[0049] S100. Perform mimicry dynamic protection during data generation and runtime: After the vehicle application generates the original data to be protected, the data enters the protection range of the mimicry defense execution body; perform mimicry transformation operation to dynamically and randomly reconstruct the running environment of the data processing process, and construct the transformed dynamic running environment; complete the preprocessing of the original data in the dynamic running environment to obtain the preprocessed data.

[0050] In S100 of this implementation, the original data to be protected includes at least event log data (DSSAD) from the autonomous driving data recording system, vehicle safety logs, and OTA upgrade packages. The mimicry transformation operation includes real-time dynamic randomization adjustment of the memory layout, control flow path, and function entry address of the processing process; the preprocessing includes data serialization, compression, and format verification.

[0051] For example, an in-vehicle application (such as DSSAD) generates a data block D_raw to be recorded. D_raw first enters the protection range of the mimicry defense enforcer and performs the following operations:

[0052] a) Mimicry Transformation: Based on a preset strategy, a real-time dynamic transformation is performed on the memory layout, control flow, and other aspects of the processes or libraries involved in processing D_raw. The transformed runtime environment is denoted as E_transformed.

[0053] b) In the E_transformed environment, perform necessary preprocessing on D_raw (such as serialization and compression) to obtain D_proc. This step ensures that the data is under dynamic protection during the generation and processing stages.

[0054] S200. Employs a fusion of security layer situational awareness and cryptographic strategy for scheduling: Real-time monitoring of the security status of the dynamic operating environment and outputting the security situation level for the current period; The fusion security layer receives the security situation level, and based on the preset fusion strategy matrix, matches the corresponding strength of the anti-quantum cryptographic strategy to determine the currently effective anti-quantum key material and encryption signature strength.

[0055] In S200 of this implementation, the security posture level includes at least three levels: no anomaly, detection of scanning and probing, and encounter of penetration attempt. The fusion security layer receives the security posture level and, based on a preset fusion strategy matrix, matches a quantum-resistant cryptographic strategy of corresponding strength, specifically including:

[0056] When the security status is normal, a baseline strength quantum-resistant cryptographic strategy is adopted.

[0057] The security posture level is to increase the key strength level of quantum-resistant cryptography when scanning and probing are detected;

[0058] When a security posture is detected as a penetration attempt, the system switches to a high-strength quantum-resistant cryptographic strategy and triggers a temporary key update.

[0059] For example, monitor the operation of the E_transformed environment. Output the security posture assessment results for the current monitoring period (e.g., no anomalies, scan detected, penetration attempt encountered) as a security posture level label L_sec and send it to the fused security layer.

[0060] The security policy engine of the integrated security layer receives L_sec and queries the key and state management module to obtain the currently valid quantum key resistance material PQC-KM_current and its associated metadata (such as algorithm identifier and strength).

[0061] The engine dynamically determines the cryptographic strength S_crypto for this data storage based on a predefined fusion strategy matrix. For example:

[0062] If L_sec is "no anomaly", then S_crypto uses the baseline strength (such as Kyber-768).

[0063] If L_sec is "Encountered a penetration attempt", then S_crypto will automatically upgrade to high-strength mode (such as Kyber-1024) and trigger a temporary PQC-KM update.

[0064] The core strategy is to transform the attack pressure suffered during runtime into an immediate improvement in the long-term confidentiality of stored data.

[0065] S300. Perform quantum-resistant cryptographic encapsulation and persistent storage: Using a quantum-resistant key material with matched strength, perform quantum-resistant encryption on the preprocessed data to obtain ciphertext, calculate and generate a quantum-resistant digital signature; assemble and generate a secure data packet containing a data packet header, ciphertext, quantum-resistant digital signature, and metadata, wherein the context fingerprint of the current mimicry transformation is embedded in the data packet header, and write the secure data packet into a persistent storage medium;

[0066] In S300 of this embodiment, the structure of the secure data packet is: [Header|C|Sig_pqc|Metadata]; where Header is the data packet header, which includes data identifier, timestamp, security status level marker, password strength identifier, key material version number, and mimicry transformation context fingerprint; C is the ciphertext obtained by quantum-resistant encryption; Sig_pqc is the quantum-resistant digital signature; and Metadata is the data attribute metadata.

[0067] In S300 of this embodiment, the mimicry transformation context fingerprint is the hash value of the mimicry transformation identifier, which is used to establish a cryptographic binding relationship between the statically stored data and the dynamic operating environment in which it was generated, and serves as the basis for verifying the legality of the environment during data forensics.

[0068] Specifically, the fusion security layer issues instructions to the quantum-resistant cryptographic executor to encrypt D_proc using the key corresponding to S_crypto in PQC-KM_current, obtaining ciphertext C. Simultaneously, it calculates the quantum-resistant digital signature Sig_pqc for D_proc. The encrypted object is data that has already undergone mimicry transformation.

[0069] The final security data packet P_final is generated, with the structure: [Header | C | Sig_pqc | Metadata]. The Header contains the data identifier, timestamp, L_sec, S_crypto, PQC-KM version ID, and the context fingerprint F_context of this mimicry transformation (such as the hash of the transformation identifier).

[0070] P_final is written to persistent storage. The addition of F_context enables future verification not only to verify the integrity and origin of the data, but also to trace the mimicry defense state in which the data was generated, providing support for advanced forensics.

[0071] S400. Perform long-term key evolution and data trust verification: trigger the key evolution process periodically or under continuous high-risk security conditions to generate a new generation of quantum-resistant key materials and repackage historical secure data packets within the confidentiality period; during data verification, decryption and signature verification are completed based on the corresponding version of the quantum-resistant key material, and the legitimacy of the operating environment in which the data was generated is verified through the mimicry transformation context fingerprint in the data packet header.

[0072] In this embodiment, the key evolution process is triggered periodically or under a sustained high-risk security situation. The specific methods include: generating new key material using a new generation of quantum-resistant cryptographic algorithms or higher strength parameters; decrypting historical ciphertext with the old key, re-encrypting it with the new key and generating a new signature to complete the repackaging of historical data; and updating the mimicry transformation strategy parameter set synchronously with the key evolution event.

[0073] In this embodiment, the specific method for data verification includes: extracting the key version number from the secure data packet and retrieving the corresponding version of the quantum-resistant key material; verifying the legitimacy of the quantum-resistant digital signature, and decrypting the ciphertext to obtain preprocessed data after successful verification; extracting the mimicry transformation context fingerprint from the data packet header, verifying whether the fingerprint corresponds to a legitimate mimicry transformation period, and confirming that the data generation environment has not been tampered with.

[0074] Specifically, the first step is key evolution: the fused security layer initiates the key evolution process periodically or when L_sec remains high. Using a new generation of PQC algorithms or stronger parameters, a new PQC-KM_next is generated, and all historical PQC-KMs still within their confidentiality period are repackaged. This process is decoupled from mimicry defense, but the evolution event itself is recorded and may trigger fine-tuning of the next round of mimicry transformation strategy.

[0075] Then, data verification is performed: When data verification is needed in the future, the verifier first uses the corresponding PQC-KM to verify Sig_pqc and decrypts C to obtain D_proc. Through F_context in the Header, it can be confirmed that the data was generated within a legitimate mimicry transformation cycle, realizing a reliable association from static data to the dynamic security environment at the time of its generation.

[0076] This embodiment discloses a spatiotemporal dual protection method for vehicle-mounted data. The method includes four core components: runtime mimicry dynamic protection, fusion layer situational strategy scheduling, quantum-resistant cryptographic encapsulation and storage, and long-term key evolution and trusted verification. This invention protects the dynamic operation of data generation and processing through mimicry transformation, ensures the static security of long-term data storage through quantum-resistant cryptography, dynamically adjusts encryption strength based on real-time security situation, and establishes a cryptographic binding between data and the generation environment through mimicry context fingerprinting. This invention constructs a spatiotemporal integrated protection system covering the entire data lifecycle, capable of simultaneously resisting current network attacks and future quantum computing threats. It possesses both high security and strong interpretability, making it suitable for high-security vehicle-mounted scenarios such as autonomous driving data recording.

[0077] Based on the same inventive concept, embodiments of the present invention also provide a vehicle-mounted data spatiotemporal dual protection system, such as... Figure 2 It includes: a data generation and operation mimicry dynamic protection module, a situational awareness and cryptographic strategy module, a quantum-resistant cryptographic encapsulation and persistent storage module, and a long-term key evolution and data trust verification module; among which:

[0078] The data generation and operation mimicry dynamic protection module is used to generate raw data to be protected in vehicle applications. After the data enters the protection range of the mimicry defense execution body, it performs a mimicry transformation operation to dynamically and randomly reconstruct the running environment of the data processing process, and constructs a transformed dynamic running environment. Within the dynamic running environment, it completes the preprocessing of the raw data to obtain preprocessed data.

[0079] The situational awareness and cryptographic strategy module is used to monitor the security status of the dynamic operating environment in real time and output the security situation level for the current period. The fusion security layer receives the security situation level, matches the corresponding strength of the anti-quantum cryptographic strategy based on the preset fusion strategy matrix, and determines the currently effective anti-quantum key material and cryptographic signature strength.

[0080] A quantum-resistant cryptographic encapsulation and persistent storage module is used to perform quantum-resistant encryption on preprocessed data using a matching strength quantum-resistant key material to obtain ciphertext, calculate and generate a quantum-resistant digital signature; assemble and generate a secure data packet containing a data packet header, ciphertext, quantum-resistant digital signature, and metadata, wherein the context fingerprint of the current mimicry transformation is embedded in the data packet header, and write the secure data packet into a persistent storage medium;

[0081] The long-term key evolution and data trust verification module is used to trigger the key evolution process periodically or under continuous high-risk security conditions, generate a new generation of quantum-resistant key materials, and repackage historical secure data packets within the confidentiality period. During data verification, decryption and signature verification are completed based on the corresponding version of the quantum-resistant key material. The legitimacy of the operating environment in which the data was generated is verified by the mimicry transformation context fingerprint in the data packet header.

[0082] The specific working methods of the data generation and operation mimicry dynamic protection module, situational awareness and cryptographic strategy module, quantum-resistant cryptographic encapsulation and persistent storage module, and long-term key evolution and data trust verification module have been described in detail in the above-mentioned vehicle-mounted data spatiotemporal dual protection method, and will not be repeated here in this embodiment.

[0083] Based on the same inventive concept, embodiments of the present invention also provide an electronic device. Figure 3 This is a structural block diagram of an electronic device provided in an embodiment of the present invention. Figure 3 As shown, an embodiment of the present invention provides an electronic device including: one or more processors 101, a memory 102, and one or more I / O interfaces 103. The memory 102 stores one or more programs, which, when executed by the one or more processors, cause the one or more processors to implement any of the methods described in the above embodiments; the one or more I / O interfaces 103 are connected between the processor and the memory, configured to enable information interaction between the processor and the memory.

[0084] The processor 101 is a device with data processing capabilities, including but not limited to a central processing unit (CPU); the memory 102 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), and flash memory (FLASH); the I / O interface (read / write interface) 103 is connected between the processor 101 and the memory 102, and can realize information interaction between the processor 101 and the memory 102, including but not limited to a data bus (Bus).

[0085] In some embodiments, the processor 101, memory 102, and I / O interface 103 are interconnected via bus 104, and thus connected to other components of the computing device.

[0086] In some embodiments, the one or more processors 101 include a field-programmable gate array.

[0087] This invention also provides a computer-readable medium. The computer-readable medium stores a computer program, which, when executed by a processor, implements the steps of any of the methods described in the above embodiments. The computer-readable storage medium may be a volatile or non-volatile computer-readable storage medium.

[0088] This invention also provides a computer program product, including computer-readable code, or a non-volatile computer-readable storage medium carrying computer-readable code, wherein when the computer-readable code is run in the processor of an electronic device, the processor in the electronic device executes the above-described method.

[0089] Those skilled in the art will understand that all or some of the steps, systems, and apparatuses disclosed above, and their functional modules / units, can be implemented as software, firmware, hardware, or suitable combinations thereof. In hardware implementations, the division between functional modules / units mentioned above does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed collaboratively by several physical components. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit (ASIC). Such software can be distributed on a computer-readable storage medium, which may include computer storage media (or non-transitory media) and communication media (or transient media).

[0090] As is known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information, such as computer-readable program instructions, data structures, program modules, or other data. Computer storage media includes, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), static random access memory (SRAM), flash memory or other memory technologies, portable compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical disc storage, magnetic cartridges, magnetic tape, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and is accessible to a computer. Furthermore, it is known to those skilled in the art that communication media typically contain computer-readable program instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transmission mechanisms, and may include any information delivery medium.

[0091] The computer-readable program instructions described herein can be downloaded from computer-readable storage media to various computing / processing devices, or downloaded via a network, such as the Internet, local area network, wide area network, and / or wireless network, to an external computer or external storage device. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers, and / or edge servers. A network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards them to the computer-readable storage media in the respective computing / processing device.

[0092] The computer program instructions used to perform the operations of this invention may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk, C++, etc., and conventional procedural programming languages ​​such as the "C" language or similar programming languages. The computer-readable program instructions may be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or may be connected to an external computer (e.g., via the Internet using an Internet service provider). In some embodiments, electronic circuitry, such as programmable logic circuitry, field-programmable gate arrays (FPGAs), or programmable logic arrays (PLAs), is personalized by utilizing state information from the computer-readable program instructions. This electronic circuitry can execute the computer-readable program instructions to implement various aspects of the invention.

[0093] The computer program product described herein can be implemented specifically through hardware, software, or a combination thereof. In one alternative embodiment, the computer program product is specifically embodied in a computer storage medium; in another alternative embodiment, the computer program product is specifically embodied in a software product, such as a software development kit (SDK), etc.

[0094] Various aspects of the present invention are described herein with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer-readable program instructions.

[0095] These computer-readable program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus to produce a machine such that, when executed by the processor of the computer or other programmable data processing apparatus, they create means for implementing the functions / actions specified in one or more blocks of the flowchart and / or block diagram. These computer-readable program instructions can also be stored in a computer-readable storage medium that causes a computer, programmable data processing apparatus, and / or other device to operate in a particular manner; thus, the computer-readable medium storing the instructions comprises an article of manufacture that includes instructions for implementing aspects of the functions / actions specified in one or more blocks of the flowchart and / or block diagram.

[0096] Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to perform the functions / actions specified in one or more boxes of a flowchart and / or block diagram.

[0097] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of an instruction, which contains one or more executable instructions for implementing a specified logical function. In some alternative implementations, the functions marked in the blocks may occur in a different order than those shown in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, may be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0098] Example embodiments have been disclosed herein, and while specific terminology has been used, it is for illustrative purposes only and should be construed as such, and is not intended to be limiting. In some instances, it will be apparent to those skilled in the art that features, characteristics, and / or elements described in conjunction with particular embodiments may be used alone, or in combination with features, characteristics, and / or elements described in conjunction with other embodiments, unless otherwise expressly indicated. Therefore, those skilled in the art will understand that various changes in form and detail may be made without departing from the scope of the invention as set forth in the appended claims.

Claims

1. A method for dual spatiotemporal protection of vehicle-mounted data, characterized in that, include: Mimicry-based dynamic protection is implemented during data generation and runtime: After the vehicle application generates the original data to be protected, the data enters the protection range of the mimicry defense execution body; a mimicry transformation operation is performed to dynamically and randomly reconstruct the running environment of the data processing process, constructing a transformed dynamic running environment; the preprocessing of the original data is completed within the dynamic running environment to obtain the preprocessed data; Scheduling is performed by integrating security layer situational awareness and cryptographic strategies: real-time monitoring of the security status of the dynamic operating environment and output of the security situation level for the current period; The fusion security layer receives the security status level, matches the corresponding strength of the anti-quantum cryptography strategy based on the preset fusion strategy matrix, and determines the currently effective anti-quantum key material and cryptographic signature strength. Quantum-resistant cryptographic encapsulation and persistent storage: Quantum-resistant key material with matched strength is used to perform quantum-resistant encryption on the preprocessed data to obtain ciphertext, and a quantum-resistant digital signature is calculated and generated; a secure data packet containing a data packet header, ciphertext, quantum-resistant digital signature, and metadata is assembled and generated, wherein the context fingerprint of the current mimicry transformation is embedded in the data packet header, and the secure data packet is written to a persistent storage medium; Long-term key evolution and data trust verification: The key evolution process is triggered periodically or under continuous high-risk security conditions to generate a new generation of quantum-resistant key materials and repackage historical secure data packets within the confidentiality period; during data verification, decryption and signature verification are completed based on the corresponding version of the quantum-resistant key material, and the legitimacy of the operating environment in which the data was generated is verified through the mimicry transformation context fingerprint in the data packet header.

2. The method according to claim 1, characterized in that, The original data to be protected includes at least event log data from the autonomous driving data recording system, vehicle safety logs, and OTA upgrade packages.

3. The method according to claim 1, characterized in that, The mimicry transformation operation includes real-time dynamic randomization adjustment of the memory layout, control flow path, and function entry address of the processing process; the preprocessing includes data serialization, compression, and format verification.

4. The method according to claim 1, characterized in that, The security posture level includes at least three levels: no anomalies, detection of scanning and probing, and encounter of penetration attempts. The fusion security layer receives the security posture level and, based on a pre-set fusion strategy matrix, matches a quantum-resistant cryptographic strategy of corresponding strength, specifically including: When the security status is normal, a baseline strength quantum-resistant cryptographic strategy is adopted. The security posture level is to increase the key strength level of quantum-resistant cryptography when scanning and probing are detected; When a security posture is detected as a penetration attempt, a high-strength quantum-resistant cryptographic strategy is switched to and a temporary key update is triggered.

5. The method according to claim 1, characterized in that, The structure of the secure data packet is: [Header|C|Sig_pqc|Metadata]; where Header is the data packet header, containing data identifier, timestamp, security status level marker, password strength identifier, key material version number, and mimicry transformation context fingerprint; C is the ciphertext obtained by quantum-resistant encryption; Sig_pqc is the quantum-resistant digital signature; and Metadata is the data attribute metadata.

6. The method according to claim 1, characterized in that, The mimicry transformation context fingerprint is the hash value of the mimicry transformation identifier, used to establish a cryptographic binding relationship between statically stored data and its dynamic operating environment at the time of generation, serving as the basis for verifying the legality of the environment during data forensics.

7. The method according to claim 1, characterized in that, The key evolution process is triggered periodically or under a sustained high-risk security situation. Specific methods include: generating new key material using a new generation of quantum-resistant cryptographic algorithms or higher strength parameters; decrypting historical ciphertext with the old key and then re-encrypting it with the new key to generate a new signature, thus completing the repackaging of historical data; and updating the mimicry transformation strategy parameter set synchronously with the key evolution event.

8. The method according to claim 1, characterized in that, The specific methods for data verification include: extracting the key version number from the secure data packet and retrieving the corresponding version of the quantum-resistant key material; verifying the legitimacy of the quantum-resistant digital signature, and decrypting the ciphertext to obtain preprocessed data after successful verification; extracting the mimicry transformation context fingerprint from the data packet header, verifying whether the fingerprint corresponds to a legitimate mimicry transformation period, and confirming that the data generation environment has not been tampered with.

9. A vehicle-mounted data spatiotemporal dual protection system, employing any one of the methods of claims 1-8, characterized in that, include: The module comprises a data generation and operation mimicry dynamic protection module, a situational awareness and cryptographic strategy module, a quantum-resistant cryptographic encapsulation and persistent storage module, and a long-term key evolution and data trust verification module; among which: The data generation and operation mimicry dynamic protection module is used to generate raw data to be protected in vehicle applications. After the data enters the protection range of the mimicry defense execution body, it performs a mimicry transformation operation to dynamically and randomly reconstruct the running environment of the data processing process, and constructs a transformed dynamic running environment. Within the dynamic running environment, it completes the preprocessing of the raw data to obtain preprocessed data. The situational awareness and cryptographic strategy module is used to monitor the security status of the dynamic operating environment in real time and output the security situation level for the current period. The fusion security layer receives the security situation level, matches the corresponding strength of the anti-quantum cryptographic strategy based on the preset fusion strategy matrix, and determines the currently effective anti-quantum key material and cryptographic signature strength. A quantum-resistant cryptographic encapsulation and persistent storage module is used to perform quantum-resistant encryption on preprocessed data using a matching strength quantum-resistant key material to obtain ciphertext, calculate and generate a quantum-resistant digital signature; assemble and generate a secure data packet containing a data packet header, ciphertext, quantum-resistant digital signature, and metadata, wherein the context fingerprint of the current mimicry transformation is embedded in the data packet header, and write the secure data packet into a persistent storage medium; The long-term key evolution and data trust verification module is used to trigger the key evolution process periodically or under continuous high-risk security conditions, generate a new generation of quantum-resistant key materials, and repackage historical secure data packets within the confidentiality period. During data verification, decryption and signature verification are completed based on the corresponding version of the quantum-resistant key material. The legitimacy of the operating environment in which the data was generated is verified by the mimicry transformation context fingerprint in the data packet header.

10. An electronic device, characterized in that, include: One or more processors; Memory, used to store one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of claims 1 to 8.

Images