Communication method, device, central control platform, camera, vehicle, chip and medium

Abstract

The application provides a communication method and device, a central control platform, a camera, a vehicle, a chip and a medium, and relates to the field of communication. The method comprises the following steps: receiving a video playing request sent by a central control platform of a vehicle; the video playing request carries identity information of the central control platform for video playing; in the case that the central control platform is determined to have video playing permission according to the identity information, encrypting a video stream collected by a vehicle-mounted camera of the vehicle based on a first shared key negotiated by the central control platform and the vehicle-mounted camera to obtain an encrypted video stream; and sending the encrypted video stream to the central control platform; the encrypted video stream is used for decrypting the video stream based on the first shared key by the central control platform to obtain and play the video stream. Therefore, by adopting multiple security mechanisms including identity verification and data encryption, the probability of leakage of the video stream collected by the vehicle-mounted camera can be greatly reduced, and the overall security of video transmission can be significantly enhanced.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a communication method, device, central control platform, camera, vehicle, chip, and medium. Background Technology

[0002] In scenarios where a vehicle's central control platform accesses the vehicle's onboard cameras, the platform can directly access the video stream captured by the cameras via hardware or obtain the video stream through an internal interface. However, these methods of accessing the video stream may lead to privacy breaches, such as inappropriate exposure of in-vehicle activities or personal spaces, thus posing a potential threat to user safety and privacy. Summary of the Invention

[0003] This application aims to at least partially address one of the technical problems in the related art.

[0004] To this end, this application proposes a communication method, device, central control platform, camera, vehicle, chip, and medium to significantly reduce the probability of video stream leakage from vehicle-mounted cameras and enhance the overall security of video transmission by employing multiple security mechanisms, including authentication and data encryption.

[0005] One embodiment of this application proposes a communication method, including:

[0006] Receive a video playback request sent by the vehicle's central control platform; wherein the video playback request carries the identity information of the central control platform for video playback;

[0007] If the central control platform is determined to have video playback permissions based on the identity information, the video stream collected by the vehicle camera is encrypted based on the first shared key negotiated between the central control platform and the vehicle's in-vehicle camera to obtain an encrypted video stream.

[0008] The encrypted video stream is sent to the central control platform; wherein the encrypted video stream is used by the central control platform to decrypt it based on the first shared key, and then play the video stream.

[0009] Another embodiment of this application proposes an alternative communication method, including:

[0010] Send a video playback request to the vehicle's onboard camera; wherein the video playback request carries the vehicle's central control platform's identity information for video playback;

[0011] The system receives an encrypted video stream sent by the vehicle-mounted camera in response to the video playback request; wherein the encrypted video stream is obtained by the vehicle-mounted camera encrypting the acquired video stream based on a first shared key negotiated between the central control platform and the vehicle-mounted camera, after determining that the central control platform has video playback permissions based on the identity information.

[0012] The encrypted video stream is decrypted based on the first shared key to obtain and play the video stream.

[0013] Another aspect of this application provides a communication device, comprising:

[0014] A receiving module is used to receive a video playback request sent by the vehicle's central control platform; wherein the video playback request carries the identity information of the central control platform for video playback;

[0015] The encryption module is used to encrypt the video stream captured by the vehicle camera based on a first shared key negotiated between the central control platform and the vehicle's in-vehicle camera, when it is determined that the central control platform has video playback permissions according to the identity information, so as to obtain an encrypted video stream.

[0016] The sending module is used to send the encrypted video stream to the central control platform; wherein the encrypted video stream is used by the central control platform to decrypt it based on the first shared key, and then play the video stream.

[0017] Another embodiment of this application provides another communication device, including:

[0018] The sending module is used to send a video playback request to the vehicle's onboard camera; wherein the video playback request carries the identity information of the vehicle's central control platform for video playback.

[0019] The receiving module is used to receive the encrypted video stream sent by the vehicle-mounted camera in response to the video playback request; wherein, the encrypted video stream is obtained by the vehicle-mounted camera encrypting the acquired video stream based on a first shared key negotiated between the central control platform and the vehicle-mounted camera, after determining that the central control platform has video playback permissions based on the identity information;

[0020] The decryption module is used to decrypt the encrypted video stream based on the first shared key in order to obtain and play the video stream.

[0021] In another aspect of this application, an in-vehicle camera is provided, comprising: a processor; a memory for storing processor-executable instructions; wherein the processor is configured to implement the communication method as described in the preceding aspect.

[0022] In another aspect, this application proposes a central control platform, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, it implements the communication method described in the other aspect above.

[0023] In another aspect of this application, a vehicle is provided, comprising: a processor; a memory for storing processor-executable instructions; wherein the processor is configured to: implement the communication method as described in the foregoing aspect, and / or implement the communication method as described in the foregoing other aspect.

[0024] Another aspect of this application provides a chip including an interface circuit and a processing circuit coupled to each other. The interface circuit is used to input or output signals, and the processing circuit is configured to perform the communication method as described in the foregoing aspect, and / or, perform the communication method as described in the foregoing other aspect.

[0025] In another aspect of this application, a non-transitory computer-readable storage medium is provided, on which computer program instructions are stored, which, when executed by a processor, implement the communication method as described in the foregoing aspect, and / or, when executed, implement the communication method as described in the foregoing other aspect.

[0026] Another aspect of this application provides a computer program product having a computer program stored thereon, wherein the program, when executed by a processor, implements the communication method as described in the foregoing aspect, and / or, when executed, implements the communication method as described in the foregoing other aspect.

[0027] The communication method, device, central control platform, camera, vehicle, chip, and medium proposed in this application, in the scenario where the central control platform accesses the vehicle-mounted camera, authenticate the central control platform based on its identity information used for video playback to determine whether the central control platform has video playback permissions. If the authentication is successful (i.e., the central control platform has video playback permissions), the video stream captured by the vehicle-mounted camera is further encrypted, and the encrypted video stream is transmitted to the authorized central control platform. Thus, by adopting multiple security mechanisms including identity verification and data encryption, the probability of video stream leakage captured by the vehicle-mounted camera can be significantly reduced, and the overall security of video transmission can be significantly enhanced, ensuring the high confidentiality and integrity of the video stream.

[0028] Additional aspects and advantages of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of this application. Attached Figure Description

[0029] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, wherein:

[0030] Figure 1 A flowchart illustrating the first communication method provided in an embodiment of this application;

[0031] Figure 2 This is a flowchart illustrating the second communication method provided in an embodiment of this application.

[0032] Figure 3 This is a flowchart illustrating the third communication method provided in an embodiment of this application.

[0033] Figure 4 This is a flowchart illustrating the fourth communication method provided in an embodiment of this application.

[0034] Figure 5 This is a flowchart illustrating the fifth communication method provided in an embodiment of this application.

[0035] Figure 6 A flowchart illustrating the sixth communication method provided in this application embodiment;

[0036] Figure 7 This is a schematic diagram illustrating an application scenario as shown in an exemplary embodiment of this application;

[0037] Figure 8 This is a schematic diagram illustrating the implementation principle of an exemplary embodiment of this application;

[0038] Figure 9 This is a schematic diagram of the structure of a communication device provided in an embodiment of this application;

[0039] Figure 10 This is a schematic diagram of another communication device provided in an embodiment of this application;

[0040] Figure 11 This is a schematic diagram of the structure of a terminal provided in an embodiment of this application;

[0041] Figure 12 This is a block diagram illustrating a vehicle according to an exemplary embodiment;

[0042] Figure 13 This is a schematic diagram of the structure of a chip proposed in an embodiment of this application. Detailed Implementation

[0043] The embodiments of this application are described in detail below. Examples of these embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain this application, and should not be construed as limiting this application.

[0044] In view of at least one of the problems existing in the above-mentioned background technology, this application proposes a communication method, device, central control platform, vehicle camera, vehicle, chip and medium.

[0045] The communication method, apparatus, central control platform, camera, vehicle, chip, and medium of embodiments of this application are described below with reference to the accompanying drawings. Before specifically describing the embodiments of this application, for ease of understanding, commonly used technical terms are first introduced:

[0046] I-frame: Also known as an intra picture or intra-coded frame, an I-frame is usually the first frame of each Group of Pictures (GOP) (a video compression technique used by the Moving Picture Experts Group (MPEG)). It is moderately compressed and serves as a reference point for random access.

[0047] P-frame: Compresses the data in this frame based on the differences between this frame and the adjacent previous frame (I-frame or P-frame).

[0048] ECDH, short for Elliptic Curve Diffie–Hellman Key Exchange, is a key exchange protocol based on elliptic curve cryptography.

[0049] AES_256_CBC is one of the block cipher modes of the Advanced Encryption Standard (AES). It uses a 256-bit key length and the Cipher Block Chaining (CBC) mode in block cipher mode, providing strong protection for data confidentiality.

[0050] Figure 1 This is a flowchart illustrating the first communication method provided in an embodiment of this application.

[0051] It should be noted that the communication method of this application embodiment can be applied to a communication device. In some possible embodiments, the communication device can be configured in a vehicle's in-vehicle camera or chip, so that the in-vehicle camera or chip can perform communication functions. Additionally, in some possible embodiments, the communication device can also be software within the in-vehicle camera, etc.

[0052] In any embodiment of this application, the chip can be integrated into a camera. The chip includes a Central Processing Unit (CPU), Image Signal Processing (ISP), Application-Specific Integrated Circuit (ASIC), Digital Signal Processor (DSP), Field-Programmable Gate Array (FPGA), System on a Chip (SOC), Reduced Instruction Set Computer (RISC), etc., which will not be listed here.

[0053] There are no restrictions on the installation location of the vehicle-mounted camera; that is, the vehicle-mounted camera can be installed inside the vehicle's cabin, or it can be installed outside the vehicle's cabin.

[0054] The number of vehicle-mounted cameras can be at least one. For example, in order to improve the comprehensiveness and accuracy of image information collection, the number of vehicle-mounted cameras can be multiple, distributed in different locations of the vehicle according to actual needs.

[0055] The vehicles include, but are not limited to, hybrid vehicles, non-hybrid vehicles, electric vehicles, fuel cell vehicles, or other types of vehicles. The vehicles can be autonomous vehicles, semi-autonomous vehicles, or non-autonomous vehicles; this application does not impose any limitations on this.

[0056] For ease of explanation, the following description will use a vehicle-mounted camera as the subject of this communication method.

[0057] It should be noted that the acquisition, storage, use, and processing of data in this application comply with relevant laws and regulations and do not violate public order and good morals.

[0058] It should also be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, data stored, data displayed, etc.) and signals involved in this application are all authorized by the user or fully authorized by all parties, and the collection, use and processing of related data must comply with the relevant laws, regulations and standards of the relevant countries and regions.

[0059] like Figure 1 As shown, the communication method may include the following steps S101 to S103:

[0060] Step S101: Receive a video playback request sent by the vehicle's central control platform; wherein the video playback request carries the identity information of the central control platform used for video playback.

[0061] The identity information includes, but is not limited to, username and password.

[0062] In this embodiment of the application, when a user wants to view the video stream captured by the vehicle's in-vehicle camera on the vehicle's central control platform, the user can send a video playback request to the in-vehicle camera through the central control platform; wherein, the video playback request is used to request the playback of the video stream captured by the in-vehicle camera.

[0063] As one possible implementation, when the system detects a user's triggering operation on a target control associated with the vehicle camera in the human-machine interface (HMI) of the central control platform, the central control platform can send a video playback request to the vehicle camera; wherein, the target control is used to access the vehicle camera.

[0064] For example, the HMI interface of the central control platform can display controls for accessing various vehicle cameras. When a user wants to access a certain vehicle camera, the user can send a video playback request to the vehicle camera by triggering the target control associated with that vehicle camera. The target control is used to access the vehicle camera.

[0065] As another possible implementation, if the central control platform detects a user's voice input command for accessing the vehicle's camera, it can send a video playback request to the vehicle's camera.

[0066] As another possible implementation, if the central control platform detects a text input command manually entered by the user to access the vehicle camera, it can send a video playback request to the vehicle camera.

[0067] Therefore, the central control platform can access the vehicle camera in different ways, which can improve the flexibility and applicability of the method.

[0068] Step S102: After determining that the central control platform has video playback permissions based on the identity information, the video stream collected by the vehicle camera is encrypted based on the first shared key negotiated between the central control platform and the vehicle's in-vehicle camera to obtain an encrypted video stream.

[0069] The first shared key is the shared key negotiated by the central control platform and the vehicle camera during the key negotiation process.

[0070] As one possible implementation, the first shared key may include a permanent key. For example, the first shared key may be a permanent key negotiated between the central control platform and the vehicle camera when the central control platform first accesses the vehicle camera. The central control platform can then use the same shared key to perform encryption and decryption operations on the video stream each time it accesses the vehicle camera, thereby reducing resource consumption.

[0071] As another possible implementation, the first shared key may also include a temporary key. That is, the first shared key can be a temporary key that the central control platform dynamically negotiates each time it accesses the vehicle camera. Specifically, the central control platform uses a different shared key each time it accesses the vehicle camera to perform encryption and decryption operations on the video stream, and destroys the temporary shared key after each access. Therefore, by using a dynamically changing shared key to access the vehicle camera, the security of video stream transmission can be improved.

[0072] In this embodiment of the application, after receiving a video playback request, the vehicle-mounted camera can authenticate the central control platform based on the identity information in the video playback request to determine whether the central control platform has the permission to play the video stream collected by the vehicle-mounted camera (i.e., video playback permission). If the central control platform has video playback permission, the vehicle-mounted camera can encrypt the video stream collected by the vehicle-mounted camera based on the first shared key negotiated between itself and the central control platform to obtain an encrypted video stream.

[0073] As an example, an in-vehicle camera can use an encryption algorithm based on a first shared key to encrypt the video stream captured by the in-vehicle camera, resulting in an encrypted video stream.

[0074] It should be noted that this application does not limit the encryption algorithm. For example, the encryption algorithm includes, but is not limited to, the AES_256_CBC algorithm.

[0075] In any embodiment of this application, if the central control platform does not have video playback permissions, the vehicle camera can send a video playback failure response to the central control platform. This response indicates that the central control platform lacks video playback permissions. Correspondingly, upon receiving the video playback failure response, the central control platform can visually display it. This timely feedback mechanism allows users to intuitively understand the reason for the video playback failure, avoiding confusion or unnecessary attempts due to prolonged waiting. Furthermore, a clear failure response helps users quickly take follow-up actions (such as checking permission settings or contacting the administrator), improving user experience and reducing unnecessary resource consumption.

[0076] Alternatively, after receiving a video playback failure response, the central control platform can provide a voice announcement of the failure. This eliminates the need for visual feedback, allowing users to understand the reason for the video playback failure without looking at the HMI interface. This design is particularly suitable for driving scenarios or other situations where users need to focus on their primary tasks (such as driving or operating equipment), avoiding safety hazards caused by distraction from the screen.

[0077] Alternatively, after receiving a video playback failure response, the central control platform can visualize and verbally announce the failure. By using different feedback mechanisms to inform the user of the reason for the video playback failure, the flexibility and applicability of this method can be improved.

[0078] Step S103: Send an encrypted video stream to the central control platform; wherein, the encrypted video stream is used by the central control platform to decrypt based on the first shared key, obtain and play the video stream.

[0079] In this embodiment of the application, the vehicle-mounted camera can send an encrypted video stream to the central control platform. Correspondingly, after receiving the encrypted video stream, the central control platform can use the first shared key negotiated between itself and the vehicle-mounted camera to decrypt the encrypted video stream, obtain and play the video stream captured by the vehicle-mounted camera.

[0080] As an application scenario, after the vehicle-mounted camera is connected to and bound to the vehicle's Wi-Fi hotspot, the vehicle's central control platform can access the video stream captured by the vehicle-mounted camera via the wireless local area network. The vehicle-mounted camera authenticates the central control platform, and after confirming that the central control platform has the permission to play the video stream captured by the vehicle-mounted camera, it sends an encrypted video stream to the central control platform. This can improve the security of video stream transmission and prevent the leakage of user privacy.

[0081] The communication method of this application embodiment, in a scenario where the vehicle's central control platform accesses the vehicle's in-vehicle camera, authenticates the central control platform based on its identity information used for video playback to determine whether the central control platform has video playback permissions. If authentication is successful (i.e., the central control platform has video playback permissions), the video stream captured by the in-vehicle camera is further encrypted, and the encrypted video stream is transmitted to the authorized central control platform. Thus, by adopting multiple security mechanisms including identity verification and data encryption, the probability of video stream leakage captured by the in-vehicle camera can be significantly reduced, and the overall security of video transmission can be significantly enhanced, ensuring the high confidentiality and integrity of the video stream.

[0082] This application provides another communication method. Figure 2 This is a flowchart illustrating the second communication method provided in an embodiment of this application.

[0083] It should be noted that this communication method can be executed alone, or it can be executed together with any embodiment or possible implementation in the embodiments of this application, or it can be executed together with any technical solution in the related technology. The embodiments of this application do not limit this.

[0084] like Figure 2 As shown, the communication method may include the following steps S201 to S205:

[0085] Step S201: Receive a video playback request sent by the vehicle's central control platform; wherein the video playback request carries the identity information of the central control platform used for video playback.

[0086] It should be noted that the explanation of step S201 can be found in the relevant description in any embodiment of this application, and will not be repeated here.

[0087] Step S202: If the central control platform has video playback permissions based on the identity information, determine whether the current video frame in the video stream captured by the vehicle's in-vehicle camera belongs to an I-frame. If yes, proceed to step S203; otherwise, proceed to step S204.

[0088] It should be noted that steps S203 and S204 are two parallel implementation methods, and either one can be selected for execution.

[0089] Step S203: Use the first shared key negotiated between the central control platform and the vehicle camera to encrypt at least a portion of the content in the current video frame.

[0090] It should be noted that the explanation of the first shared key in the foregoing embodiments also applies to this embodiment, and will not be repeated here.

[0091] It should also be noted that since an I-frame contains a complete video frame, at least a portion of the I-frame can be encrypted to prevent leakage.

[0092] That is, in the embodiments of this application, when the current video frame in the video stream captured by the vehicle camera belongs to the I-frame type, at least part of the content in the current video frame can be encrypted using the first shared key negotiated between the central control platform and the vehicle camera.

[0093] As one possible implementation, a first shared key can be used to encrypt the entire content of the current video frame to improve the security of the video stream.

[0094] As another possible implementation, a first shared key can be used to encrypt a portion of the current video frame, balancing encryption speed and video transmission efficiency.

[0095] As an example, the current video frame can be segmented based on a set data volume to obtain multiple segment data. The target segment data to be encrypted can be determined from the multiple segment data. Thus, in this application, the first shared key can be used to encrypt the target segment data.

[0096] The data volume is set to a pre-defined data volume threshold. For example, the data volume can be set to 400 bytes, 500 bytes, etc.

[0097] For example, the first N fragments of multiple data segments can be used as the target fragments to be encrypted, and the target fragments can be encrypted using a first shared key. The remaining fragments of multiple data segments other than the target fragments do not need to be encrypted, thereby improving the encryption rate and video transmission efficiency.

[0098] Wherein, N is a pre-defined positive integer, for example, the value of N is 1, 2, 3, etc.

[0099] Step S204: Refuse to encrypt the current video frame.

[0100] It should be noted that since the decoding of P-frames depends on I-frames, even if a P-frame is leaked, it is also impossible to decode a P-frame if the I-frame cannot be decrypted. Therefore, in this application, it is not necessary to encrypt the P-frame.

[0101] That is, in this embodiment of the application, in order to reduce the overhead of computing resources and at the same time ensure the security of video stream transmission, when the current video frame in the video stream captured by the vehicle camera belongs to the P frame type, encryption of the current video frame can be refused.

[0102] Step S205: Send an encrypted video stream to the central control platform; wherein, the encrypted video stream is used by the central control platform to decrypt based on the first shared key, obtain and play the video stream.

[0103] It should be noted that the explanation of step S205 can be found in the relevant description in any embodiment of this application, and will not be repeated here.

[0104] The communication method of this application embodiment, when the current video frame in the video stream captured by the vehicle camera belongs to the I-frame, uses a first shared key to encrypt at least part of the content in the current video frame, while when the current video frame belongs to the P-frame, it refuses to encrypt the current video frame, thus balancing the security of video stream transmission, the encryption rate of the video stream, and the transmission efficiency.

[0105] This application provides another communication method. Figure 3 This is a flowchart illustrating the third communication method provided in an embodiment of this application.

[0106] It should be noted that this communication method can be executed alone, or it can be executed together with any embodiment or possible implementation in the embodiments of this application, or it can be executed together with any technical solution in the related technology. The embodiments of this application do not limit this.

[0107] like Figure 3 As shown, the communication method may include the following steps S301 to S303:

[0108] Step S301: Receive a video playback request sent by the vehicle's central control platform through the video playback server of the vehicle's in-vehicle camera; wherein, the video playback request is sent by the central control platform through the uniform resource locator (URL) address of the video playback server.

[0109] The video playback request is used to request the playback of the video stream captured by the vehicle camera. The video playback request carries the identity information of the central control platform for video playback.

[0110] The video playback server is used to forward data. For example, the video playback server can forward video streams captured by vehicle-mounted cameras.

[0111] In this embodiment, when a user wants to view the video stream captured by the vehicle camera on the central control platform, the central control platform can send a video playback request to the vehicle camera through the URL address of the video playback server of the vehicle camera. Correspondingly, the vehicle camera can receive the video playback request sent by the central control platform through the video playback server.

[0112] In any embodiment of this application, the URL address of the video playback server can be dynamically generated by the vehicle camera and transmitted to the central control platform. Exemplarily, the generation and transmission method of the URL address can include the following steps A to D:

[0113] Step A: The vehicle camera receives the first Remote Procedure Call (RPC) message sent by the central control platform; the first RPC message is used to request the URL address for video playback.

[0114] Step B: In response to the first RPC message, the vehicle-mounted camera generates a URL address for a video playback server; wherein, the video playback server is used to forward the video stream captured by the vehicle-mounted camera.

[0115] Step C: Based on the first shared key negotiated between the central control platform and the vehicle camera, encrypt the URL address of the video playback server to obtain the encrypted address.

[0116] For example, the vehicle-mounted camera can use an encryption algorithm to encrypt the URL address of the video playback server based on the first shared key negotiated between the central control platform and the vehicle-mounted camera, thus obtaining an encrypted address.

[0117] Step D: The vehicle camera sends an encrypted address to the central control platform; the encrypted address is used by the central control platform to decrypt it based on the first shared key to obtain the URL address.

[0118] Therefore, by using an encryption mechanism to encrypt the URL address of the video playback server before transmission, the security of the video playback server's URL address can be improved, thereby preventing unauthorized users from stealing the URL address and accessing the video stream captured by the vehicle camera, thus improving the security of the video stream.

[0119] Step S302: If the central control platform has video playback permissions based on the identity information, the video stream collected by the vehicle camera is encrypted based on the first shared key negotiated between the central control platform and the vehicle camera to obtain an encrypted video stream.

[0120] It should be noted that the explanation of step S302 can be found in the relevant description in any embodiment of this application, and will not be repeated here.

[0121] Step S303: Send an encrypted video stream to the central control platform through the video playback server; wherein, the encrypted video stream is used by the central control platform to decrypt based on the first shared key, and then play the video stream.

[0122] In this embodiment of the application, the vehicle-mounted camera can send an encrypted video stream to the central control platform through a video playback server. Correspondingly, the central control platform can receive the encrypted video stream sent by the vehicle-mounted camera through the URL address of the video playback server, and decrypt the encrypted video stream using the first shared key negotiated between itself and the vehicle-mounted camera, thereby obtaining and playing the video stream captured by the vehicle-mounted camera.

[0123] In the communication method of this application embodiment, the central control platform sends a video playback request to the vehicle camera through the URL address of the video playback server, and receives the encrypted video stream sent by the vehicle camera in response to the video playback request through the same URL address, which can improve the effectiveness and success of data transmission.

[0124] This application provides another communication method. Figure 4 This is a flowchart illustrating the fourth communication method provided in the embodiments of this application.

[0125] It should be noted that this communication method can be executed alone, or it can be executed together with any embodiment or possible implementation in the embodiments of this application, or it can be executed together with any technical solution in the related technology. The embodiments of this application do not limit this.

[0126] like Figure 4 As shown, the communication method may include the following steps S401 to S407:

[0127] Step S401: Receive a second RPC message sent by the vehicle's central control platform; wherein the second RPC message is used to request identity information for video playback.

[0128] In this embodiment of the application, when a user wants to view the video stream captured by the vehicle's in-vehicle camera on the central control platform, the user can first send a second RPC message to the in-vehicle camera through the central control platform; wherein, the second RPC message is used to request the identity information for video playback.

[0129] Step S402: In response to the second RPC message, generate identity information for the authorized central control platform to play the video.

[0130] The identity information includes, but is not limited to, username and password.

[0131] In this embodiment of the application, when the vehicle-mounted camera receives the second RPC message, it can generate identity information that authorizes the central control platform to play the video.

[0132] In step S403, the identity information is encrypted using the second shared key negotiated between the central control platform and the vehicle's onboard camera to obtain encrypted information.

[0133] The second shared key is the shared key negotiated by the central control platform and the vehicle camera during the key negotiation process.

[0134] As one possible implementation, the second shared key may include a permanent key. For example, the second shared key may be a permanent key negotiated between the central control platform and the vehicle camera when the platform first accesses the vehicle camera. The central control platform can then use the same shared key to perform encryption and decryption operations on identity information each time it accesses the vehicle camera, thereby reducing resource consumption.

[0135] As another possible implementation, the second shared key may also include a temporary key. That is, the second shared key can be a temporary key dynamically negotiated by the central control platform each time it accesses the vehicle camera. Specifically, the central control platform uses a different shared key each time it accesses the vehicle camera to perform encryption and decryption operations on the identity information, and destroys the temporary shared key after each access. Therefore, by using a dynamically changing shared key to perform encryption and decryption operations on the identity information used for video playback, the security of the identity information can be improved, preventing unauthorized users from stealing the identity information, thereby further enhancing the security of the video stream.

[0136] In this embodiment, the vehicle-mounted camera can use a second shared key negotiated between itself and the central control platform to encrypt the identity information and obtain encrypted information.

[0137] In any embodiment of this application, the vehicle-mounted camera and the central control platform may use the following steps E to F to negotiate and obtain a first shared key and a second shared key:

[0138] Step E: The vehicle camera authenticates the first account information currently logged into the central control platform based on at least one second account information that is authorized to access the vehicle camera, in order to determine whether the first account information has access rights to the vehicle camera.

[0139] This involves using a master account with configuration permissions to configure which accounts can participate in sharing the video stream captured by the vehicle-mounted camera. These accounts (hereinafter referred to as shared accounts) can then participate in the shared video stream. For example, a master account with configuration permissions (such as the vehicle owner's account) can configure which accounts can participate in sharing the video stream captured by the vehicle-mounted camera. In this case, the vehicle-mounted camera can save the account information of these shared accounts as well as the account information of the master account, as secondary account information that allows access to the vehicle-mounted camera.

[0140] In this application, the first account information currently logged into the central control platform can be authenticated based on the information of each second account that is allowed to access the vehicle camera, to determine whether the first account information has access to the vehicle camera. If yes, the subsequent step F is executed; if no, a rejection message is sent to the central control platform. The rejection message is used to indicate that the central control platform does not have access to the vehicle camera. Accordingly, after receiving the rejection message, the central control platform can display the rejection message visually and / or broadcast it via voice, so that the user can know the reason why they cannot access the vehicle camera in a timely manner, thereby avoiding confusion or unnecessary operation attempts caused by long waiting times.

[0141] Step F: If the vehicle camera determines that the currently logged-in first account information has access to the vehicle camera, it performs a key negotiation process with the central control platform to obtain the first shared key and the second shared key negotiated between the central control platform and the vehicle camera.

[0142] In summary, this method enables multiple users to share video streams captured by in-vehicle cameras. For example, multiple users can access the video streams captured by the in-vehicle camera on the same device or different devices, improving the flexibility and convenience of the method. Furthermore, the in-vehicle camera only performs a key negotiation process with the central control platform to obtain a first shared key and a second shared key if the first account currently logged in on the central control platform is authenticated and has access to the in-vehicle camera. This enhances the security of in-vehicle camera access.

[0143] Step S404: Send encrypted information to the central control platform; wherein, the encrypted information is used by the central control platform to decrypt based on the second shared key to obtain the identity information.

[0144] In this embodiment of the application, the vehicle-mounted camera can send encrypted information to the central control platform. Correspondingly, after receiving the encrypted information, the central control platform can decrypt the encrypted information based on the second shared key negotiated between itself and the vehicle-mounted camera to obtain the identity information of the central control platform used for video playback.

[0145] Step S405: Receive a video playback request sent by the central control platform; wherein the video playback request carries the identity information of the central control platform used for video playback.

[0146] Step S406: After determining that the central control platform has video playback permissions based on the identity information, the video stream collected by the vehicle camera is encrypted based on the first shared key negotiated between the central control platform and the vehicle camera to obtain an encrypted video stream.

[0147] Step S407: Send an encrypted video stream to the central control platform; wherein, the encrypted video stream is used by the central control platform to decrypt based on the first shared key, obtain and play the video stream.

[0148] It should be noted that the explanations of steps S405 to S407 can be found in the relevant descriptions in any embodiment of this application, and will not be repeated here.

[0149] The communication method of this application embodiment dynamically allocates identity information for video playback to the central control platform through the vehicle-mounted camera, which can not only improve the security of the identity information of the central control platform, but also improve the access security of the vehicle-mounted camera.

[0150] The above are various method embodiments executed by the vehicle-mounted camera. This application also provides a communication method executed by the central control platform.

[0151] Figure 5 This is a flowchart illustrating the fifth communication method provided in the embodiments of this application.

[0152] like Figure 5 As shown, the communication method may include the following steps S501 to S503:

[0153] Step S501: Send a video playback request to the vehicle's onboard camera; wherein the video playback request carries the vehicle's central control platform's identity information for video playback.

[0154] The identity information includes, but is not limited to, username and password.

[0155] In this embodiment of the application, when a user wants to view the video stream captured by the vehicle camera on the central control platform, the central control platform can send a video playback request to the vehicle camera; wherein, the video playback request is used to request the playback of the video stream captured by the vehicle camera.

[0156] As one possible implementation, when the system detects a user's triggering operation on a target control associated with the vehicle camera in the human-machine interface (HMI) of the central control platform, the central control platform can send a video playback request to the vehicle camera; wherein, the target control is used to access the vehicle camera.

[0157] For example, the HMI interface of the central control platform can display controls for accessing various vehicle cameras. When a user wants to access a certain vehicle camera, the user can send a video playback request to the vehicle camera by triggering the target control associated with that vehicle camera. The target control is used to access the vehicle camera.

[0158] As another possible implementation, if the central control platform detects a user's voice input command for accessing the vehicle's camera, it can send a video playback request to the vehicle's camera.

[0159] As another possible implementation, if the central control platform detects a text input command manually entered by the user to access the vehicle camera, it can send a video playback request to the vehicle camera.

[0160] Therefore, the central control platform can access the vehicle camera in different ways, which can improve the flexibility and applicability of the method.

[0161] Step S502: Receive the encrypted video stream sent by the vehicle camera in response to the video playback request; wherein, the encrypted video stream is obtained by encrypting the acquired video stream based on the first shared key negotiated between the central control platform and the vehicle camera, after the vehicle camera has determined that the central control platform has video playback permissions based on the identity information.

[0162] The first shared key is the shared key negotiated between the central control platform and the vehicle camera during the key negotiation process. This first shared key can be either a permanent key or a temporary key.

[0163] In this embodiment, after receiving a video playback request, the vehicle-mounted camera can authenticate the central control platform based on the identity information in the video playback request to determine whether the central control platform has the permission to play the video stream captured by the vehicle-mounted camera (i.e., video playback permission). If the central control platform has video playback permission, the vehicle-mounted camera can encrypt the video stream captured by the vehicle-mounted camera based on the first shared key negotiated between itself and the central control platform to obtain an encrypted video stream, and send the encrypted video stream to the central control platform. Correspondingly, the central control platform can receive the encrypted video stream sent by the vehicle-mounted camera in response to the video playback request.

[0164] In any embodiment of this application, regarding step S501, the central control platform can send a video playback request to the vehicle camera via the URL address of the vehicle camera's video playback server. Correspondingly, regarding step S502, the central control platform can receive the encrypted video stream sent by the vehicle camera in response to the video playback request via the URL address of the video playback server. This improves the effectiveness and success rate of data transmission.

[0165] In any embodiment of this application, the URL address can be obtained by the central control platform through the following steps: First, the central control platform can send a first RPC message to the vehicle camera; wherein, the first RPC message is used to request the URL address for video playback; then, the central control platform can receive an encrypted address sent by the vehicle camera; wherein, the encrypted address is obtained by the vehicle camera responding to the first RPC message, generating the URL address of the video playback server, and encrypting the URL address based on a first shared key; then, the central control platform can decrypt the encrypted address based on the first shared key to obtain the URL address.

[0166] Therefore, by using an encryption mechanism to encrypt the URL address of the video playback server before transmission, the security of the video playback server's URL address can be improved, thereby preventing unauthorized users from stealing the URL address and accessing the video stream captured by the vehicle camera, thus improving the security of the video stream.

[0167] In any embodiment of this application, the identity information can be obtained by the central control platform through the following steps: First, the central control platform can send a second RPC message to the vehicle camera; wherein, the second RPC message is used to request identity information for video playback. Then, the central control platform can receive encrypted information sent by the vehicle camera; wherein, the encrypted information is obtained by the vehicle camera responding to the second RPC message, generating identity information authorizing the central control platform to play the video, and encrypting the identity information using a second shared key negotiated between the central control platform and the vehicle camera. Then, the central control platform can decrypt the encrypted information based on the second shared key to obtain the identity information.

[0168] Therefore, dynamically assigning identity information for video playback to the central control platform via in-vehicle cameras can not only improve the security of the identity information on the central control platform, but also enhance the access security of the in-vehicle cameras.

[0169] Step S503: Decrypt the encrypted video stream based on the first shared key to obtain and play the video stream.

[0170] In this embodiment of the application, after receiving the encrypted video stream, the central control platform can use the first shared key negotiated between itself and the vehicle camera to decrypt the encrypted video stream, and then obtain and play the video stream captured by the vehicle camera.

[0171] It should be noted that the explanations and descriptions of the various method embodiments executed by the vehicle-mounted camera described above also apply to this embodiment, and their implementation principles are similar, so they will not be repeated here.

[0172] The communication method of this application embodiment, in a scenario where the vehicle's central control platform accesses the vehicle's in-vehicle camera, authenticates the central control platform based on its identity information used for video playback to determine whether the central control platform has video playback permissions. If authentication is successful (i.e., the central control platform has video playback permissions), the video stream captured by the in-vehicle camera is further encrypted, and the encrypted video stream is transmitted to the authorized central control platform. Thus, by adopting multiple security mechanisms including identity verification and data encryption, the probability of video stream leakage captured by the in-vehicle camera can be significantly reduced, and the overall security of video transmission can be significantly enhanced, ensuring the high confidentiality and integrity of the video stream.

[0173] This application provides another communication method. Figure 6 This is a flowchart illustrating the sixth communication method provided in the embodiments of this application.

[0174] It should be noted that this communication method can be executed alone, or it can be executed together with any embodiment or possible implementation in the embodiments of this application, or it can be executed together with any technical solution in the related technology. The embodiments of this application do not limit this.

[0175] like Figure 6 As shown, the communication method may include the following steps S601 to S605:

[0176] Step S601: Send a video playback request to the vehicle's onboard camera; wherein the video playback request carries the vehicle's central control platform's identity information for video playback.

[0177] Step S602: Receive the encrypted video stream sent by the vehicle camera in response to the video playback request; wherein, the encrypted video stream is obtained by encrypting the acquired video stream based on the first shared key negotiated between the central control platform and the vehicle camera, after the vehicle camera has determined that the central control platform has video playback permissions based on the identity information.

[0178] It should be noted that the explanations of steps S601 to S603 can be found in the relevant descriptions in any embodiment of this application, and will not be repeated here.

[0179] Step S603: From the encrypted video stream, determine the fragment data that belongs to the same video frame and whose frame type is I frame.

[0180] It should be noted that during the encryption phase of the video stream, if the first shared key is not used to encrypt video frames of type P, but is used to encrypt video frames of type I, then during the decryption phase of the video stream, video frames of type I can be decrypted without needing to decrypt video frames of type P.

[0181] In this application, firstly, fragmented data belonging to the same video frame and of type I frame can be identified from the encrypted video stream.

[0182] Step S604: Determine the encrypted fragment data from the fragment data.

[0183] For example, the first N data shards can be used as encrypted data shards.

[0184] In step S605, the encrypted data segments are decrypted using the first shared key to obtain and play the video stream.

[0185] In this embodiment of the application, the encrypted segmented data can be decrypted based on the first shared key negotiated between the central control platform and the vehicle camera to obtain and play the video stream.

[0186] The communication method of this application embodiment determines the fragment data belonging to the same video frame and of type I frame from the encrypted video stream, determines the encrypted fragment data from the fragment data, and decrypts the encrypted fragment data using a first shared key, which can balance the security of video stream transmission and the decryption rate of the video stream.

[0187] In any embodiment of this application, the communication method between the vehicle's central control platform and the onboard camera can be as follows: Figure 7 As shown, after the vehicle-mounted camera is connected to and bound to the vehicle's hotspot, the vehicle's central control platform can access the video stream captured by the camera via Wi-Fi. The principle behind video stream access is as follows: Figure 8 As shown, the main steps include:

[0188] Step S81: The user can access the vehicle camera through the access control of a vehicle camera in the HMI interface of the central control platform. At this time, the central control platform and the vehicle camera can execute the key protocol process to negotiate and obtain a first shared key (such as key 1) and a second shared key (such as key 2).

[0189] For example, the central control platform and the vehicle camera can negotiate key 1 and key 2 through the ECDH protocol.

[0190] Step S82: The central control platform sends an RPC message to the vehicle camera through an internal security channel to request the URL address for video playback. Correspondingly, the vehicle camera can dynamically generate the URL address of the video playback server (such as a RealTime Streaming Protocol (RTSP) server), and use an encryption algorithm to encrypt the URL address based on key 1 to obtain the encrypted address, and send the encrypted address to the central control platform.

[0191] It should be noted that this application does not limit the encryption algorithm. For example, the encryption algorithm includes, but is not limited to, the AES_256_CBC algorithm.

[0192] Step S83: The central control platform sends an RPC message to the vehicle camera through an internal security channel to request the identity information (including username and password) for video playback. Correspondingly, the vehicle camera can dynamically generate the identity information for video playback from the central control platform, and use an encryption algorithm to encrypt the identity information based on key 2 to obtain encrypted information, and send the encrypted information to the central control platform.

[0193] Step S84: The central control platform decrypts the encrypted address using key 1 to obtain the URL address of the video playback server (such as an RTSP server), and decrypts the encrypted information using key 2 to obtain the identity information used for video playback. Then, it can send a video playback request carrying the identity information to the vehicle-mounted camera via this URL address. Correspondingly, after receiving the video playback request, the vehicle-mounted camera can determine whether the central control platform has video playback permissions based on this identity information. If so, it uses key 1 to encrypt the captured video stream, obtaining an encrypted video stream, and sends the encrypted video stream to the central control platform. The central control platform can then decrypt the encrypted video stream using key 1 to obtain and play the video stream captured by the vehicle-mounted camera.

[0194] Optionally, the vehicle-mounted camera can also determine whether the frame attribute of the current video frame in the captured video stream is an I-frame. If so, at least part of the content of the current video frame (such as the first 500 bytes) is encrypted to improve the encryption speed and playback speed of the video stream.

[0195] In summary, the solution provided in this application has at least the following advantages: it enhances the security of the URL address of the video playback server; it enhances the security of the identity information used for video playback; it enhances the security of video stream transmission; and the central control platform can securely access the video from the vehicle camera without worrying about video leakage.

[0196] To implement the above embodiments, this application also proposes a communication device.

[0197] Figure 9 This is a schematic diagram of the structure of a communication device provided in an embodiment of this application.

[0198] like Figure 9 As shown, the communication device 900 may include a receiving module 910, an encryption module 920, and a sending module 930.

[0199] The receiving module 910 is used to receive a video playback request sent by the vehicle's central control platform; the video playback request carries the identity information of the central control platform for video playback.

[0200] The encryption module 920 is used to encrypt the video stream captured by the vehicle camera based on the first shared key negotiated between the central control platform and the vehicle's in-vehicle camera, when it is determined that the central control platform has video playback permissions based on the identity information, so as to obtain an encrypted video stream.

[0201] The sending module 930 is used to send an encrypted video stream to the central control platform; wherein, the encrypted video stream is used by the central control platform to decrypt it based on the first shared key, and then play the video stream.

[0202] Furthermore, in one implementation of this application embodiment, the encryption module 920 is used to: if the current video frame in the video stream captured by the vehicle camera belongs to an I-frame, then use the first shared key to encrypt at least a portion of the content in the current video frame; if the current video frame belongs to a P-frame, then refuse to encrypt the current video frame.

[0203] In one implementation of this application, the encryption module 920 is used to: segment the current video frame based on a set data volume to obtain multiple segment data; determine the target segment data to be encrypted from the multiple segment data; and encrypt the target segment data using a first shared key.

[0204] In one implementation of this application embodiment, the receiving module 910 is configured to: receive a video playback request sent by the central control platform through the video playback server of the vehicle camera; wherein, the video playback request is sent by the central control platform through the Uniform Resource Locator (URL) address of the video playback server;

[0205] The sending module 930 is used to send an encrypted video stream to the central control platform via the video playback server.

[0206] In one implementation of this application embodiment, the communication device 900 may further include:

[0207] The first processing module is used to receive a first remote procedure call (RPC) message sent by the central control platform; wherein the first RPC message is used to request a URL address for video playback; in response to the first RPC message, it generates a URL address for a video playback server; wherein the video playback server is used to forward the video stream captured by the vehicle-mounted camera; it encrypts the URL address based on a first shared key to obtain an encrypted address; and it sends the encrypted address to the central control platform; wherein the encrypted address is used by the central control platform to decrypt it based on the first shared key to obtain a URL address.

[0208] In one implementation of this application embodiment, the communication device 900 may further include:

[0209] The second processing module is used to receive a second RPC message sent by the central control platform; wherein the second RPC message is used to request identity information for video playback; in response to the second RPC message, it generates identity information authorizing the central control platform to play the video; it uses a second shared key negotiated between the central control platform and the vehicle camera to encrypt the identity information to obtain encrypted information; and it sends the encrypted information to the central control platform; wherein the encrypted information is used by the central control platform to decrypt based on the second shared key to obtain the identity information.

[0210] In one implementation of this application embodiment, the communication device 900 may further include:

[0211] The third processing module is used to authenticate the first account information currently logged into the central control platform based on at least one second account information that is allowed to access the vehicle camera, so as to determine whether the first account information has access to the vehicle camera; if so, it performs a key negotiation process with the central control platform to obtain the first shared key and the second shared key negotiated between the central control platform and the vehicle camera.

[0212] In one implementation of this application, the sending module 930 is further configured to: send a video playback failure response to the central control platform when it is determined, based on the identity information, that the central control platform does not have video playback permissions; wherein the video playback failure response is used by the central control platform for visual display and / or voice broadcasting, indicating that the central control platform does not have video playback permissions.

[0213] It should be noted that the explanation of the communication method embodiment performed on the vehicle camera described above also applies to the communication device of this embodiment, and will not be repeated here.

[0214] In the communication device of this application embodiment, in the scenario where the central control platform accesses the vehicle camera, the central control platform is authenticated based on its identity information used for video playback to determine whether it has video playback permissions. If the authentication is successful (i.e., the central control platform has video playback permissions), the video stream captured by the vehicle camera is further encrypted, and the encrypted video stream is transmitted to the authorized central control platform. Thus, by adopting multiple security mechanisms including identity verification and data encryption, the probability of video stream leakage captured by the vehicle camera can be significantly reduced, and the overall security of video transmission can be significantly enhanced, ensuring the high confidentiality and integrity of the video stream.

[0215] To implement the above embodiments, this application also proposes a communication device.

[0216] Figure 10 This is a schematic diagram of another communication device provided in an embodiment of this application.

[0217] like Figure 10 As shown, the communication device 1000 may include: a transmitting module 1010, a receiving module 1020, and a decryption module 1030.

[0218] The sending module 1010 is used to send a video playback request to the vehicle's onboard camera; the video playback request carries the vehicle's central control platform's identity information for video playback.

[0219] The receiving module 1020 is used to receive the encrypted video stream sent by the vehicle camera in response to the video playback request; wherein, the encrypted video stream is obtained by encrypting the acquired video stream based on the first shared key negotiated between the central control platform and the vehicle camera, after the vehicle camera has determined that the central control platform has video playback permissions based on the identity information.

[0220] The decryption module 1030 is used to decrypt the encrypted video stream based on the first shared key in order to obtain and play the video stream.

[0221] Furthermore, in one implementation of this application embodiment, the sending module 1010 is configured to perform any of the following:

[0222] In response to a trigger operation on a target control associated with the vehicle camera in the human-machine interface (HMI), a video playback request is sent to the vehicle camera; wherein, the target control is used to access the vehicle camera.

[0223] In response to the detection of a voice input command for accessing the vehicle camera, a video playback request is sent to the vehicle camera;

[0224] In response to the detection of a text input command for accessing the vehicle camera, a video playback request is sent to the vehicle camera.

[0225] In one implementation of this application, the sending module 1010 is used to: send a video playback request to the vehicle camera via the URL address of the video playback server of the vehicle camera;

[0226] The receiving module 1020 is used to receive, via a URL address, an encrypted video stream sent by the vehicle-mounted camera in response to a video playback request.

[0227] In one implementation of this application embodiment, the URL address is obtained using the following module:

[0228] The first processing module is used to send a first RPC message to the vehicle-mounted camera; wherein the first RPC message is used to request the URL address for video playback; receive an encrypted address sent by the vehicle-mounted camera; wherein the encrypted address is obtained by the vehicle-mounted camera responding to the first RPC message, generating the URL address of the video playback server, and encrypting the URL address based on a first shared key; and decrypt the encrypted address based on the first shared key to obtain the URL address.

[0229] In one implementation of this application embodiment, the identity information is obtained using the following module:

[0230] The second processing module is used to send a second RPC message to the vehicle-mounted camera; wherein the second RPC message is used to request identity information for video playback; and to receive encrypted information sent by the vehicle-mounted camera; wherein the encrypted information is obtained by the vehicle-mounted camera responding to the second RPC message, generating identity information authorizing the central control platform to play the video, and encrypting the identity information using a second shared key negotiated between the central control platform and the vehicle-mounted camera; and decrypting the encrypted information based on the second shared key to obtain the identity information.

[0231] In one implementation of this application, the decryption module 1030 is used to: determine from the encrypted video stream fragment data that belongs to the same video frame and has a frame type of I frame; determine from the fragment data that has been encrypted; and decrypt the encrypted fragment data using a first shared key.

[0232] It should be noted that the explanation of the communication method embodiment executed by the central control platform described above also applies to the communication device of this embodiment, and will not be repeated here.

[0233] In the communication device of this application embodiment, in the scenario where the vehicle's central control platform accesses the vehicle's in-vehicle camera, the central control platform is authenticated based on its identity information used for video playback to determine whether it has video playback permissions. If the authentication is successful (i.e., the central control platform has video playback permissions), the video stream captured by the in-vehicle camera is further encrypted, and the encrypted video stream is transmitted to the authorized central control platform. Thus, by adopting multiple security mechanisms including identity verification and data encryption, the probability of video stream leakage captured by the in-vehicle camera can be significantly reduced, and the overall security of video transmission can be significantly enhanced, ensuring the high confidentiality and integrity of the video stream.

[0234] In another embodiment of this application, an in-vehicle camera is provided, comprising: a processor; and a memory for storing processor-executable instructions; wherein the processor is configured to: implement as described above. Figures 1 to 4 The communication method described in any embodiment.

[0235] To implement the above embodiments, this application also proposes a central control platform, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, it implements the aforementioned... Figures 5 to 8 The communication method described in any embodiment.

[0236] Taking the central control platform, including the terminal, as an example. Figure 11 This is a schematic diagram of the structure of a terminal provided in an embodiment of this application. For example, the terminal 1100 may be a mobile phone, a computer, a digital broadcasting terminal, a messaging device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc.

[0237] Reference Figure 11 Terminal 1100 may include one or more of the following components: processing component 1102, memory 1104, power component 1106, multimedia component 1108, audio component 1110, input / output (I / O) interface 1112, sensor component 1114, and communication component 1116.

[0238] Processing component 1102 typically controls the overall operation of terminal 1100, such as operations associated with display, telephone calls, data communication, camera operation, and recording. Processing component 1102 may include one or more processors 1120 to execute instructions to perform all or part of the steps of the methods described above. Furthermore, processing component 1102 may include one or more modules to facilitate interaction between processing component 1102 and other components. For example, processing component 1102 may include a multimedia module to facilitate interaction between multimedia component 1108 and processing component 1102.

[0239] Memory 1104 is configured to store various types of data to support operation on terminal 1100. Examples of this data include instructions for any application or method operating on terminal 1100, contact data, phonebook data, messages, pictures, videos, etc. Memory 1104 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as Static Random Access Memory (SRAM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Erasable Programmable Read-Only Memory (EPROM), Programmable Read-Only Memory (PROM), Read-Only Memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0240] Power component 1106 provides power to various components of terminal 1100. Power component 1106 may include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power to terminal 1100.

[0241] Multimedia component 1108 includes a screen that provides an output interface between the terminal 1100 and the user. In some embodiments, the screen may include a Liquid Crystal Display (LCD) and a Touch Panel (TP). If the screen includes a Touch Panel, the screen may be implemented as a touchscreen to receive input signals from the user. The Touch Panel includes one or more touch sensors to sense touches, swipes, and gestures on the Touch Panel. The touch sensors may sense not only the boundaries of the touch or swipe action but also the duration and pressure associated with the touch or swipe operation. In some embodiments, multimedia component 1108 includes a front-facing camera and / or a rear-facing camera. When the terminal 1100 is in an operating mode, such as a shooting mode or a video mode, the front-facing camera and / or the rear-facing camera may receive external multimedia data. Each front-facing camera and rear-facing camera may be a fixed optical lens system or have focal length and optical zoom capabilities.

[0242] Audio component 1110 is configured to output and / or input audio signals. For example, audio component 1110 includes a microphone (MIC) configured to receive external audio signals when terminal 1100 is in an operating mode, such as call mode, recording mode, and voice recognition mode. The received audio signals may be further stored in memory 1104 or transmitted via communication component 1116. In some embodiments, audio component 1110 also includes a speaker for outputting audio signals.

[0243] I / O interface 1112 provides an interface between processing component 1102 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include, but are not limited to, home buttons, volume buttons, power buttons, and lock buttons.

[0244] Sensor assembly 1114 includes one or more sensors for providing state assessments of various aspects of terminal 1100. For example, sensor assembly 1114 may detect the on / off state of terminal 1100, the relative positioning of components such as the display and keypad of terminal 1100, changes in position of terminal 1100 or a component of terminal 1100, the presence or absence of user contact with terminal 1100, the orientation or acceleration / deceleration of terminal 1100, and temperature changes of terminal 1100. Sensor assembly 1114 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. Sensor assembly 1114 may also include an optical sensor, such as a complementary metal-oxide-semiconductor (CMOS) or charge-coupled device (CCD) image sensor, for use in imaging applications. In some embodiments, sensor assembly 1114 may also include an accelerometer, a gyroscope, a magnetometer, a pressure sensor, or a temperature sensor.

[0245] Communication component 1116 is configured to facilitate wired or wireless communication between terminal 1100 and other devices. Terminal 1100 can access wireless networks based on communication standards, such as WiFi, 4G, or 5G, or combinations thereof. In one exemplary embodiment, communication component 1116 receives broadcast signals or broadcast-related information from an external broadcast management system via a broadcast channel. In one exemplary embodiment, communication component 1116 further includes a Near Field Communication (NFC) module to facilitate short-range communication. For example, the NFC module may be implemented based on Radio Frequency Identification (RFID), Infrared Data Association (IrDA), Ultra-Wideband (UWB), Bluetooth, and other technologies.

[0246] In an exemplary embodiment, terminal 1100 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above-described method.

[0247] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 1104 including instructions, which can be executed by a processor 1120 of a terminal 1100 to perform the above-described method. For example, the non-transitory computer-readable storage medium may be a read-only memory (ROM), a random access memory (RAM), a compact disc read-only memory (CD-ROM), magnetic tape, a floppy disk, or an optical data storage device, etc.

[0248] To implement the above embodiments, this application also proposes a vehicle, including: a processor; a memory for storing processor-executable instructions; wherein the processor is configured to implement the communication method as described in any of the foregoing embodiments.

[0249] Figure 12 This is a block diagram illustrating a vehicle 1200 according to an exemplary embodiment. For example, vehicle 1200 may be a hybrid vehicle, a non-hybrid vehicle, an electric vehicle, a fuel cell vehicle, or other types of vehicle. Vehicle 1200 may be an autonomous vehicle, a semi-autonomous vehicle, or a non-autonomous vehicle.

[0250] Reference Figure 12 The vehicle 1200 may include various subsystems, such as an infotainment system 1210, a perception system 1220, a decision control system 1230, a drive system 1240, and a computing platform 1250. The vehicle 1200 may also include more or fewer subsystems, and each subsystem may include multiple components. Furthermore, each subsystem and component of the vehicle 1200 can be interconnected via wired or wireless means.

[0251] In some embodiments, the infotainment system 1210 may include a communication system, an entertainment system, and a navigation system, etc.

[0252] The perception system 1220 may include several sensors for sensing information about the environment surrounding the vehicle 1200. For example, the perception system 1220 may include a global positioning system (which may be a GPS system, a BeiDou system, or another positioning system), an inertial measurement unit (IMU), a lidar, a millimeter-wave radar, an ultrasonic radar, and a camera device.

[0253] The decision control system 1230 may include a computing system, a vehicle controller, a steering system, a throttle, and a braking system.

[0254] The drive system 1240 may include components that provide powered motion to the vehicle 1200. In one embodiment, the drive system 1240 may include an engine, an energy source, a transmission system, and wheels. The engine may be one or a combination of internal combustion engines, electric motors, and compressed air engines. The engine is capable of converting energy provided by the energy source into mechanical energy.

[0255] Some or all of the functions of the vehicle 1200 are controlled by a computing platform 1250. The computing platform 1250 may include at least one processor 1251 and a memory 1252, the processor 1251 being able to execute instructions 1253 stored in the memory 1252.

[0256] Processor 1251 can be any conventional processor, such as a commercially available CPU. The processor may also include, for example, a Graphics Processing Unit (GPU), a Field Programmable Gate Array (FPGA), a System on Chip (SOC), an Application Specific Integrated Circuit (ASIC), or a combination thereof.

[0257] The memory 1252 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk.

[0258] In addition to instruction 1253, memory 1252 can also store data, such as road maps, route information, vehicle position, direction, speed, and other data. The data stored in memory 1252 can be used by computing platform 1250.

[0259] In this embodiment of the application, processor 1251 may execute instruction 1253 to complete all or part of the steps of any of the above method embodiments.

[0260] To implement the above embodiments, this application also proposes a chip, wherein the chip includes an interface circuit and a processing circuit coupled to each other. The interface circuit is used to input or output signals, and the processing circuit is configured to perform the communication method provided in any of the foregoing embodiments.

[0261] Figure 13 This is a schematic diagram of another chip structure proposed in an embodiment of this application. See also... Figure 13 The diagram shown is a schematic representation of the structure of chip 1300, but it is not limited to this.

[0262] Chip 1300 includes processing circuitry 1301, which is configured to perform any of the above communication methods.

[0263] In some embodiments, chip 1300 further includes one or more interface circuits 1302. Optionally, interface circuit 1302 is connected to memory 1303, and interface circuit 1302 can be used to receive signals from memory 1303 or other devices, and interface circuit 1302 can be used to send signals to memory 1303 or other devices. For example, interface circuit 1302 can read instructions stored in memory 1303 and send the instructions to processing circuit 1301.

[0264] In some embodiments, the interface circuit 1302 performs at least one of the communication steps such as sending and / or receiving in the above method, while the processing circuit 1301 performs other steps.

[0265] In some embodiments, the terms interface circuit, interface, transceiver pin, transceiver, etc., can be used interchangeably.

[0266] In some embodiments, chip 1300 further includes one or more memories 1303 for storing instructions. Optionally, all or part of the memories 1303 may be located outside of chip 1300.

[0267] To implement the above embodiments, this application also proposes a non-transitory computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements the communication method as described in any of the foregoing method embodiments.

[0268] To implement the above embodiments, this application also proposes a computer program product having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the communication method as described in any of the foregoing method embodiments.

[0269] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., refer to specific features, structures, materials, or characteristics described in connection with that embodiment or example, which are included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0270] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this application, "multiple" means at least two, such as two, three, etc., unless otherwise explicitly specified.

[0271] Any process or method description in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing custom logic functions or processes, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as should be understood by those skilled in the art to which embodiments of this application pertain.

[0272] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-including system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device. More specific examples of computer-readable media (a non-exhaustive list) include: electrical connections (electronic devices) having one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and compact disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which the program can be printed, because the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0273] It should be understood that various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0274] Those skilled in the art will understand that all or part of the steps of the methods in the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, the program includes one or a combination of the steps of the method embodiments.

[0275] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0276] The storage medium mentioned above can be a read-only memory, a disk, or an optical disk, etc. Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions, and variations to the above embodiments within the scope of this application.

Claims

1. A communication method, characterized in that, include: Receive a video playback request sent by the vehicle's central control platform; wherein the video playback request carries the identity information of the central control platform for video playback; If the central control platform is determined to have video playback permissions based on the identity information, the video stream collected by the vehicle camera is encrypted based on the first shared key negotiated between the central control platform and the vehicle's in-vehicle camera to obtain an encrypted video stream. The encrypted video stream is sent to the central control platform; wherein the encrypted video stream is used by the central control platform to decrypt it based on the first shared key, and then play the video stream.

2. The method according to claim 1, characterized in that, The encryption of the video stream captured by the vehicle-mounted camera based on the first shared key negotiated between the central control platform and the vehicle's in-vehicle camera includes: If the current video frame in the video stream captured by the vehicle camera belongs to an I-frame, then the first shared key is used to encrypt at least a portion of the content in the current video frame. If the current video frame belongs to the P-frame type, then encryption of the current video frame is refused.

3. The method according to claim 2, characterized in that, The step of encrypting at least a portion of the content in the current video frame using the first shared key includes: Based on the set data volume, the current video frame is segmented to obtain multiple segmented data. From the multiple data fragments, determine the target data fragment to be encrypted; The target fragment data is encrypted using the first shared key.

4. The method according to claim 1, characterized in that, The video playback request sent by the vehicle's central control platform includes: The video playback server of the vehicle-mounted camera receives the video playback request sent by the central control platform; wherein, the video playback request is sent by the central control platform through the Uniform Resource Locator (URL) address of the video playback server; Sending the encrypted video stream to the central control platform includes: The encrypted video stream is sent to the central control platform via the video playback server.

5. The method according to claim 4, characterized in that, The method further includes: Receive a first Remote Procedure Call (RPC) message sent by the central control platform; wherein the first RPC message is used to request the URL address for video playback; In response to the first RPC message, a URL address for the video playback server is generated; wherein, the video playback server is used to forward the video stream captured by the vehicle-mounted camera; The URL address is encrypted using the first shared key to obtain an encrypted address; The encrypted address is sent to the central control platform; wherein the encrypted address is used by the central control platform to decrypt it based on the first shared key to obtain the URL address.

6. The method according to any one of claims 1-5, characterized in that, The method further includes: Receive a second RPC message sent by the central control platform; wherein the second RPC message is used to request identity information for video playback; In response to the second RPC message, generate identity information authorizing the central control platform to play the video; The identity information is encrypted using the second shared key negotiated between the central control platform and the vehicle camera to obtain encrypted information; The encrypted information is sent to the central control platform; wherein the encrypted information is used by the central control platform to decrypt it based on the second shared key to obtain the identity information.

7. The method according to claim 6, characterized in that, Before receiving the second RPC message sent by the central control platform, the method further includes: Based on at least one second account information that allows access to the vehicle camera, the first account information currently logged into the central control platform is authenticated to determine whether the first account information has access to the vehicle camera. If so, a key negotiation process is performed with the central control platform to obtain the first shared key and the second shared key negotiated between the central control platform and the vehicle camera.

8. The method according to any one of claims 1-5, characterized in that, The method further includes: If, based on the identity information, it is determined that the central control platform does not have video playback permissions, a video playback failure response is sent to the central control platform. The video playback failure response is used by the central control platform for visual display and / or voice broadcast, indicating that the central control platform does not have video playback permissions.

9. A communication method, characterized in that, include: Send a video playback request to the vehicle's onboard camera; wherein the video playback request carries the vehicle's central control platform's identity information for video playback; The system receives an encrypted video stream sent by the vehicle-mounted camera in response to the video playback request; wherein the encrypted video stream is obtained by the vehicle-mounted camera encrypting the acquired video stream based on a first shared key negotiated between the central control platform and the vehicle-mounted camera, after determining that the central control platform has video playback permissions based on the identity information. The encrypted video stream is decrypted based on the first shared key to obtain and play the video stream.

10. The method according to claim 9, characterized in that, Sending a video playback request to the vehicle-mounted camera includes any one of the following: In response to a trigger operation on a target control associated with the vehicle-mounted camera in the human-computer interaction (HMI) interface, a video playback request is sent to the vehicle-mounted camera; wherein the target control is used to access the vehicle-mounted camera; In response to detecting a voice input command for accessing the vehicle-mounted camera, a video playback request is sent to the vehicle-mounted camera; In response to detecting a text input command for accessing the vehicle-mounted camera, a video playback request is sent to the vehicle-mounted camera.

11. The method according to claim 10, characterized in that, Sending a video playback request to the vehicle-mounted camera includes: The video playback request is sent to the vehicle camera via the URL address of the video playback server of the vehicle camera; Receiving the encrypted video stream sent by the vehicle-mounted camera in response to the video playback request includes: The encrypted video stream sent by the vehicle-mounted camera in response to the video playback request is received via the URL address.

12. The method according to claim 11, characterized in that, The URL address was obtained using the following steps: Send a first RPC message to the vehicle-mounted camera; wherein the first RPC message is used to request the URL address for video playback; Receive the encrypted address sent by the vehicle-mounted camera; wherein, the encrypted address is obtained by the vehicle-mounted camera responding to the first RPC message, generating the URL address of the video playback server, and encrypting the URL address based on the first shared key; The encrypted address is decrypted using the first shared key to obtain the URL address.

13. The method according to any one of claims 9-12, characterized in that, The identity information is obtained through the following steps: Send a second RPC message to the vehicle-mounted camera; wherein the second RPC message is used to request identity information for video playback; The system receives encrypted information sent by the vehicle-mounted camera; wherein the encrypted information is obtained by the vehicle-mounted camera responding to the second RPC message, generating identity information authorizing the central control platform to play the video, and encrypting the identity information using a second shared key negotiated between the central control platform and the vehicle-mounted camera. The encrypted information is decrypted using the second shared key to obtain the identity information.

14. The method according to any one of claims 9-12, characterized in that, The decryption of the encrypted video stream based on the first shared key includes: From the encrypted video stream, determine the fragment data that belongs to the same video frame and is of type I frame; From the fragmented data, determine the encrypted fragmented data; The encrypted fragmented data is decrypted using the first shared key.

15. A communication device, characterized in that, include: A receiving module is used to receive a video playback request sent by the vehicle's central control platform; wherein the video playback request carries the identity information of the central control platform for video playback; The encryption module is used to encrypt the video stream captured by the vehicle camera based on a first shared key negotiated between the central control platform and the vehicle's in-vehicle camera, when it is determined that the central control platform has video playback permissions according to the identity information, so as to obtain an encrypted video stream. The sending module is used to send the encrypted video stream to the central control platform; wherein the encrypted video stream is used by the central control platform to decrypt it based on the first shared key, and then play the video stream.

16. A communication device, characterized in that, include: The sending module is used to send a video playback request to the vehicle's onboard camera; wherein the video playback request carries the vehicle's central control platform's identity information for video playback; The receiving module is used to receive the encrypted video stream sent by the vehicle-mounted camera in response to the video playback request; wherein, the encrypted video stream is obtained by the vehicle-mounted camera encrypting the acquired video stream based on a first shared key negotiated between the central control platform and the vehicle-mounted camera, after determining that the central control platform has video playback permissions based on the identity information; The decryption module is used to decrypt the encrypted video stream based on the first shared key in order to obtain and play the video stream.

17. A vehicle-mounted camera, characterized in that, include: processor; Memory used to store processor-executable instructions; The processor is configured as follows: The steps of implementing the method as described in any one of claims 1 to 8.

18. A central control platform, characterized in that, It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, it implements the steps of the method as described in any one of claims 9 to 14.

19. A vehicle, characterized in that, include: processor; Memory used to store processor-executable instructions; The processor is configured as follows: Implement the steps of the method as described in any one of claims 1 to 8, and / or implement the steps of the method as described in any one of claims 9 to 14.

20. A non-transitory computer-readable storage medium having computer program instructions stored thereon, characterized in that, When executed by a processor, the program instructions implement the steps of the method according to any one of claims 1 to 8, and / or implement the steps of the method according to any one of claims 9 to 14.

21. A chip, characterized in that, The chip includes an interface circuit and a processing circuit that are coupled to each other. The interface circuit is used to input or output signals, and the processing circuit is used to implement the method of any one of claims 1 to 8, and / or to implement the method of any one of claims 9 to 14.

22. A computer program product, characterized in that, The method includes a computer program that, when executed by a processor, implements the steps of the method according to any one of claims 1 to 8, and / or implements the steps of the method according to any one of claims 9 to 14.

Images