WO2024012515A1 - 车辆监控方法、设备和存储介质 - Google Patents

车辆监控方法、设备和存储介质 Download PDF

Info

Publication number
WO2024012515A1
WO2024012515A1 PCT/CN2023/107146 CN2023107146W WO2024012515A1 WO 2024012515 A1 WO2024012515 A1 WO 2024012515A1 CN 2023107146 W CN2023107146 W CN 2023107146W WO 2024012515 A1 WO2024012515 A1 WO 2024012515A1
Authority
WO
WIPO (PCT)
Prior art keywords
key
monitoring
vehicle
encrypted
monitoring data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2023/107146
Other languages
English (en)
French (fr)
Inventor
卢龙
李正玉
孙瀛
王续
吕超
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NIO Technology Anhui Co Ltd
Original Assignee
NIO Technology Anhui Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by NIO Technology Anhui Co Ltd filed Critical NIO Technology Anhui Co Ltd
Priority to EP23839005.8A priority Critical patent/EP4557705A4/en
Publication of WO2024012515A1 publication Critical patent/WO2024012515A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/067—Network architectures or network communication protocols for network security for supporting key management in a packet data network using one-time keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/0643—Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/84—Vehicles

Definitions

  • the invention relates to the technical field of vehicle monitoring, and specifically provides a vehicle monitoring method, equipment and storage medium.
  • the monitoring information obtained may involve the privacy of the relevant personnel. If the monitoring information involving the privacy of the relevant personnel is leaked, it will have a serious impact on the relevant personnel, thereby reducing the risk of improve the reliability of vehicle monitoring.
  • the present invention is proposed to provide a vehicle monitoring method, equipment and storage medium that solve or at least partially solve the technical problem that vehicle monitoring information is easily leaked, resulting in low reliability of vehicle monitoring.
  • the present invention provides a vehicle monitoring method, which is applied to the vehicle end. Laws include:
  • the encrypted monitoring data is sent to the monitoring terminal, so that after the monitoring terminal generates the one-time first encryption key, it decrypts the encrypted monitoring data to obtain the monitoring data.
  • the present invention provides a vehicle monitoring method, which is applied to the monitoring end.
  • the method includes:
  • At least one first tag information corresponding to the encrypted monitoring data is obtained
  • the encrypted monitoring data is decrypted using the one-time first encryption key to obtain monitoring data corresponding to the encrypted monitoring data.
  • a vehicle monitoring method applied to a monitoring system including a vehicle terminal and a monitoring terminal, and the method includes:
  • the vehicle terminal obtains the monitoring data of the vehicle and at least one first tag information corresponding to the monitoring data; based on at least one of the first tag information and the pre-stored seed key, a key derivation algorithm is used to generate a preset The first derived key of the length; extracting the one-time first encryption key corresponding to the monitoring data from the first derived key of the preset length; using the one-time first encryption key to encrypt the monitoring data
  • the data is encrypted to obtain encrypted monitoring data; the encrypted monitoring data is sent to the monitoring terminal;
  • the monitoring terminal receives the encrypted monitoring data sent by the vehicle terminal, it will obtain the encrypted monitoring data.
  • At least one first tag information corresponding to the data according to at least one of the first tag information and the pre-stored seed key, using a key derivation algorithm to generate a first derived key of a preset length; from the preset length Extract the one-time first encryption key corresponding to the encrypted monitoring data using the first derived key; use the one-time first encryption key to decrypt the encrypted monitoring data to obtain the monitoring data corresponding to the encrypted monitoring data.
  • a vehicle monitoring device including a processor and a storage device.
  • the storage device is adapted to store a plurality of program codes.
  • the program codes are adapted to be loaded and run by the processor to perform any of the above.
  • a computer-readable storage medium which stores a plurality of program codes, and the program codes are suitable for being loaded and run by a processor to execute any one of the above technical solutions. vehicle monitoring methods.
  • the technical solution for implementing the present invention by obtaining the monitoring data of the vehicle and at least one first tag information corresponding to the monitoring data; according to at least one of the first tag information and the pre-stored seed key, using the key A derivation algorithm that generates a first derivation key of a preset length; extracts a one-time first encryption key corresponding to the monitoring data from the first derivation key of the preset length; utilizes the one-time first encryption
  • the key is used to encrypt the monitoring data to obtain encrypted monitoring data; the encrypted monitoring data is sent to the monitoring terminal so that after the monitoring terminal generates the one-time first encryption key, the encrypted monitoring data can be Decrypt to obtain the monitoring data, and realize further derivation based on the key derivation algorithm to generate a preset length of the derived key, extract the one-time first encryption key, and encrypt the monitoring data.
  • the key can still be effectively prevented from being cracked
  • Figure 1 is a schematic flowchart of the main steps of a vehicle monitoring method according to an embodiment of the present invention
  • FIG. 2 is a schematic flowchart of the main steps of a vehicle monitoring method according to another embodiment of the present invention.
  • FIG. 3 is a main structural block diagram of a monitoring system according to an embodiment of the present invention.
  • Figure 4 is a main structural block diagram of a vehicle monitoring device according to an embodiment of the present invention.
  • module and “processor” may include hardware, software, or a combination of both.
  • a module can include hardware circuits, various suitable sensors, communication ports, and memory. It can also include software parts, such as program code, or it can be a combination of software and hardware.
  • the processor may be a central processing unit, a microprocessor, an image processor, a digital signal processor, or any other suitable processor.
  • the processor has data and/or signal processing functions.
  • the processor can be implemented in software, hardware, or a combination of both.
  • Non-transitory computer-readable storage media include any suitable media that can store program code, such as magnetic disks, hard disks, optical disks, flash memory, read-only memory, random access memory, etc.
  • a and/or B means all possible combinations of A and B, such as just A, just B, or A and B.
  • the terms "at least one A or B” or “at least one of A and B” have a similar meaning to “A and/or B” and may include just A, just B or A and B.
  • the singular forms “a,” “the” and “the” may also include the plural form.
  • the monitoring information of the vehicle is usually obtained through monitoring equipment, and then the obtained monitoring information may involve the privacy of the relevant personnel. If this involves the monitoring of the privacy of the relevant personnel, If information is leaked, it will have a serious impact on relevant personnel, thereby reducing the reliability of vehicle monitoring.
  • the present invention provides the following technical solutions:
  • FIG 1 is a schematic flowchart of the main steps of a vehicle monitoring method according to an embodiment of the present invention. Among them, the vehicle monitoring method is applied to the vehicle end. As shown in Figure 1, this The vehicle monitoring method in the embodiment of the invention mainly includes the following steps 101 to 105.
  • Step 101 Obtain the monitoring data of the vehicle and at least one first tag information corresponding to the monitoring data;
  • the user can turn on the vehicle monitoring mode through the mobile phone or the car.
  • the vehicle After turning on the vehicle monitoring mode, the vehicle enters the vehicle-side guard mode of passive monitoring or the remote viewing mode of active monitoring.
  • the vehicle-side guard mode The starting condition is: receiving the monitoring instruction sent by the monitoring terminal, or generating the monitoring instruction.
  • the conditions for starting the remote viewing mode include: receiving a remote viewing request sent by the monitoring terminal.
  • the monitoring data of the vehicle can be collected through the monitoring equipment installed on the vehicle side, and then at least one first tag information corresponding to the monitoring data is obtained.
  • at least one tag information may include timestamp information, random information, predefined information and other information of the current session content.
  • the vehicle's monitoring data needs to be encrypted, and at least one tag information corresponding to the vehicle's monitoring data is transmitted in plain text.
  • Monitoring equipment installed on the vehicle can include, but is not limited to, sensors such as cameras around the vehicle body, ultrasonic radar, and G-Sensor.
  • Step 102 Use a key derivation algorithm to generate a first derivation key of a preset length based on at least one of the first tag information and a pre-stored seed key;
  • this step can be performed when it is detected that the monitoring data meets the preset alarm conditions.
  • the warnings corresponding to the vehicle guard mode can be divided into three levels: if an object approaches the vehicle and lasts for a certain period of time, a first-level warning will be triggered; if the vehicle collides, a second-level warning will be triggered; and if the vehicle is stolen, a third-level warning will be triggered. If the vehicle's monitoring mode is remote viewing mode, perform this step directly.
  • the implementation process of this step can refer to the following steps:
  • a key derivation algorithm can be used to hash the first tag information to obtain the processed first hash value, and the processed first hash value can be obtained according to the preset interception rules.
  • the hash value is intercepted to obtain the first hash value interception part.
  • the preset interception rules can be selected according to actual needs, and are not specifically limited in this embodiment.
  • the HKDF key derivation algorithm can be used to process the seed key and the intercepted part of the first hash value to obtain a derived key of a preset length.
  • the implementation process of this step can refer to the following steps:
  • all the first tag information can be spliced to obtain the first splicing information.
  • all the first tag information may include timestamp information "10101100”, random information "10001001”, and predefined information "11001011". After splicing, the first spliced information can be obtained as "10101100 10001001 11001011".
  • the first splicing information is hashed to obtain the processed second hash value, and the processed second hash value is intercepted according to the preset interception rules to obtain the second Hash value interception part.
  • the preset interception rules can be selected according to actual needs, and are not specifically limited in this embodiment.
  • the HKDF key derivation algorithm can be used to process the seed key and the intercepted part of the second hash value to obtain a derived key of a preset length.
  • Step 103 Extract the one-time first encryption key corresponding to the monitoring data from the first derived key of the preset length;
  • the said key can be extracted from the first derived key of the preset length based on the preset extraction rules.
  • the preset extraction rules can be customized.
  • the key length derived from the HKDF key derivation algorithm is 512 bytes
  • the length of the one-time first encryption key is 256 bytes
  • the extraction rules that can be defined are intermediate Segment it and select part of it as the one-time first encryption key.
  • Other extraction rules can also be used, such as extracting 256 bytes of data from 512 bytes Form a one-time first encryption key. This embodiment will not illustrate each example one by one. In this way, after extracting the derived key of the preset length and obtaining the one-time first encryption key, even if the first tag information and seed key corresponding to the monitoring data are leaked, the key can still be effectively prevented from being cracked.
  • Step 104 Use the one-time first encryption key to encrypt the monitoring data to obtain encrypted monitoring data
  • the vehicle terminal can encrypt the monitoring data using the one-time first encryption key to obtain encrypted monitoring data.
  • Step 105 Send the encrypted monitoring data to the monitoring terminal, so that after the monitoring terminal generates the one-time first encryption key, it decrypts the encrypted monitoring data to obtain the monitoring data.
  • the vehicle terminal can send encrypted monitoring data to the monitoring terminal.
  • the type of encrypted monitoring data generated is usually the offline session type.
  • the encrypted monitoring data can be uploaded to the cloud.
  • the cloud sends an alarm notification to the monitoring terminal, and the monitoring terminal sends a download request to the cloud in order to download the encrypted monitoring data from the cloud server.
  • the vehicle's monitoring mode is remote viewing mode
  • the type of encrypted monitoring data generated is usually the online session type. In this case, the encrypted monitoring data can be uploaded to the cloud, and the cloud directly delivers the encrypted monitoring data to the monitoring terminal.
  • the monitoring terminal after receiving the encrypted monitoring data sent by the vehicle end, can obtain at least one first tag information corresponding to the encrypted monitoring data; according to at least one of the first tag information and the pre-stored
  • the seed key uses a key derivation algorithm to generate a first derived key of a preset length; extracting a one-time first encryption key corresponding to the encrypted monitoring data from the first derived key of the preset length;
  • the encrypted monitoring data is decrypted using the one-time first encryption key to obtain monitoring data corresponding to the encrypted monitoring data.
  • the vehicle monitoring method of this embodiment obtains the monitoring data of the vehicle and at least one first tag information corresponding to the monitoring data; and uses the key to derive Algorithm to generate a first derived key of a preset length; extract a one-time first encryption key corresponding to the monitoring data from the first derived key of a preset length; use the one-time first encryption key to encrypt the monitoring data.
  • a one-time first encryption key can also be used in combination with a one-time initial vector to encrypt the data to be processed with salt to enhance the encryption. safety.
  • the generation process of one-time initial vector can refer to the following steps:
  • the HmacSha1 algorithm can be used to encrypt the timestamp information and return the first encrypted ciphertext.
  • the first target information can be extracted from the first encrypted ciphertext according to customized extraction rules.
  • the extracted first target information can be encrypted with Sha256 and the second encrypted ciphertext can be returned.
  • the second target information can be extracted from the second encrypted ciphertext as a one-time initial vector according to customized extraction rules.
  • the second target information is obtained as a one-time initial vector, which improves the difficulty of cracking the one-time initial vector and further improves the data quality. security.
  • a first key digest corresponding to the one-time first encryption key can also be generated based on the one-time first encryption key; and the first key digest is sent to the Monitoring end, so that the monitoring end generates a second key digest and communicates it with the first The key digest is compared to verify the one-time first encryption key to determine that the encrypted monitoring data is indeed sent by the vehicle.
  • the seed key acquisition process can be divided into the following two methods:
  • the first is to self-generate the seed key.
  • the specific steps are as follows:
  • the vehicle's master key, vehicle's device identification code, preset context information and random information can be obtained.
  • the master key of the vehicle terminal can be generated by the hardware security module of the vehicle terminal, and the life cycle of the master key of the vehicle terminal is consistent with the life cycle of the hardware of the vehicle terminal.
  • the master key of the car can be generated based on the relevant information of the hardware of the car. If the hardware of the car is replaced, the master key of the car needs to be regenerated.
  • a key derivation algorithm can be used to process the master key of the vehicle terminal, the device identification code of the vehicle terminal, the preset context information and the random information, and derive a seed key. key and store the seed key.
  • the seed key can be encrypted and shared. Specifically, follow the steps below:
  • the HMAC algorithm can be used to process the device identification code in and out of the vehicle to obtain the signature information of the seed key, and use the signature information to sign the seed key to prevent the seed key from being tampered with.
  • the second splicing information is obtained based on the signature information, the seed key and the current timestamp information according to preset splicing rules.
  • the seed key information is encrypted so that the terminal to be synchronized can obtain the encrypted seed key information and decrypt it to obtain the seed key.
  • the encryption seed key information can be presented in the form of a QR code, so that the encryption seed key information can be obtained by scanning the code.
  • the first method is usually chosen to obtain the seed key, that is, the vehicle terminal itself generates the seed key, the monitoring terminal scans the QR code of the vehicle terminal, obtains the encrypted seed key, and then decrypts it to obtain the seed key. key.
  • the user can also control the vehicle terminal through the monitoring terminal, and the monitoring terminal generates control data for controlling the vehicle terminal, and obtains at least one second label information corresponding to the control data; according to at least one of the The second tag information and the pre-stored seed key generate a second derived key of preset length; extract the one-time second encryption key corresponding to the manipulation data from the second derived key of preset length. ; Use the one-time second encryption key to encrypt the monitoring data to obtain encrypted control data; send the encrypted control data to the vehicle end.
  • the vehicle terminal receives the encrypted control data sent by the monitoring terminal, it obtains at least one second tag information corresponding to the encrypted control data; and generates a preset based on at least one of the second tag information and the pre-stored seed key. a second derived key of a predetermined length; extracting a one-time second encryption key corresponding to the encrypted manipulation data from the second derived key of a preset length; using the one-time second encryption key to encrypt the The encrypted control data is decrypted to obtain the control data corresponding to the encrypted control data used to control the vehicle.
  • FIG. 2 is a schematic flowchart of the main steps of a vehicle monitoring method according to another embodiment of the present invention. Among them, the vehicle monitoring method is applied to the monitoring terminal. As shown in Figure 2, the vehicle monitoring method in the embodiment of the present invention mainly includes the following steps 201 to 204.
  • Step 201 If the encrypted monitoring data sent by the vehicle is received, obtain at least one first tag information corresponding to the encrypted monitoring data;
  • the corresponding first label information is the same.
  • the first label information will be transmitted to the monitoring terminal in plain text, and the monitoring terminal can obtain at least one first label information.
  • a label information is included in the monitoring terminal in plain text, and the monitoring terminal can obtain at least one first label information.
  • Step 202 Use a key derivation algorithm to generate a first derivation key of a preset length based on at least one of the first tag information and a pre-stored seed key;
  • the process for the monitoring terminal to generate the first derived key of the preset length is the same as the process for the vehicle terminal to generate the first derived key of the preset length.
  • the process for the monitoring terminal to generate the first derived key of the preset length is the same as the process for the vehicle terminal to generate the first derived key of the preset length.
  • the seed key pre-stored in the monitoring terminal can be obtained from the vehicle terminal by scanning the code; the encrypted seed key is processed to obtain and store the seed key. . Please refer to the above relevant records for details and will not be repeated here.
  • Step 203 Extract the one-time first encryption key corresponding to the encrypted monitoring data from the first derived key of the preset length;
  • the process of extracting the one-time first encryption key on the monitoring end is the same as the process of extracting the one-time first encryption key on the vehicle end.
  • the process of extracting the one-time first encryption key on the vehicle end is the same as the process of extracting the one-time first encryption key on the vehicle end.
  • Step 204 Use the one-time first encryption key to decrypt the encrypted monitoring data to obtain monitoring data corresponding to the encrypted monitoring data.
  • the vehicle monitoring method of this embodiment if the encrypted monitoring data sent by the vehicle is received, at least one first tag information corresponding to the encrypted monitoring data is obtained; according to at least one of the first tag information and the pre-stored seed key , using a key derivation algorithm to generate a first derived key of a preset length; extracting a one-time first encryption key corresponding to the encrypted monitoring data from the first derived key of a preset length; using the The one-time first encryption key decrypts the encrypted monitoring data to obtain the monitoring data corresponding to the encrypted monitoring data, which realizes further derivation and extraction based on the key derivation algorithm to generate a derivation key of a preset length.
  • the one-time first encryption key encrypts the monitoring data. In this way, even if the first tag information and seed key corresponding to the monitoring data are leaked, the key can still be effectively prevented from being cracked, thus improving the efficiency of data transmission of the monitoring data. security in the process, thereby improving the reliability of vehicle monitoring.
  • a one-time first encryption key can also be used in combination with a one-time initial vector to encrypt the data to be processed with salt to enhance the encryption.
  • Security therefore, when decrypting, the monitoring end also needs to generate a one-time initial vector.
  • the process of generating the one-time initial vector can refer to the process of generating the one-time initial vector on the vehicle side, which will not be described again here.
  • a first key digest corresponding to the one-time first encryption key can also be generated based on the one-time first encryption key; and the first key digest is sent to the Monitoring end, so that the monitoring end generates a second key digest and compares it with the first key digest to check the one-time first encryption key to determine that the encrypted monitoring data is indeed the vehicle Sent by the end.
  • step 201 If the encrypted monitoring data sent by the vehicle is received, obtain at least one first tag information corresponding to the encrypted monitoring data", the following steps may also be performed:
  • the monitoring mode of the vehicle is the vehicle-side guard mode
  • a download request is sent to the cloud server to download the encrypted monitoring data from the cloud server; wherein, the starting condition of the vehicle-side guard mode is: to The vehicle terminal sends monitoring instructions, or receives monitoring instructions sent by the vehicle terminal;
  • the encrypted monitoring data is directly received from the cloud server; wherein the starting conditions for the remote viewing mode include: a remote viewing request sent to the vehicle.
  • the user can also control the vehicle terminal through the monitoring terminal.
  • the encryption or decryption process of the control data refers to the above-mentioned relevant records for details and will not be repeated here.
  • the present invention also provides a vehicle monitoring method applied to a monitoring system including a vehicle terminal and a monitoring terminal.
  • the vehicle terminal obtains the monitoring data of the vehicle and at least one third parameter corresponding to the monitoring data.
  • a tag information according to at least one of the first tag information and a pre-stored seed key, using a key derivation algorithm to generate a first derived key of a preset length; from the first derived key of the preset length Extract the one-time first encryption key corresponding to the monitoring data; use the one-time first encryption key to encrypt the monitoring data to obtain encrypted monitoring data; send the encrypted monitoring data to the monitoring terminal;
  • the monitoring terminal receives the encrypted monitoring data sent by the vehicle terminal, it obtains at least one first tag information corresponding to the encrypted monitoring data; and uses the key according to the at least one first tag information and the pre-stored seed key.
  • a derivation algorithm that generates a first derivation key of a preset length; extracts a one-time first encryption key corresponding to the encrypted monitoring data from the first derivation key of a preset length; using the one-time first derivation key The encryption key decrypts the encrypted monitoring data to obtain monitoring data corresponding to the encrypted monitoring data.
  • Figure 3 is a main structural block diagram of a monitoring system according to an embodiment of the present invention.
  • the vehicle terminal may include a first remote viewing module and a first guard module
  • the monitoring terminal may include a second remote viewing module and a second guard module.
  • the first remote viewing module can perform the following functions:
  • Information collected by the camera (it can also be information collected by other monitoring equipment, this embodiment is not specifically limited):
  • the car-side remote viewing service collects real-time picture information through the cameras inside and outside the car.
  • Video encoding The video encoding and decoding module is responsible for encoding the collected real-time picture information.
  • Video end-to-end encryption The encoded streaming media calls the end-to-end encryption module to encrypt the streaming media data.
  • Video stream push The final encrypted video stream is pushed to the mobile phone by the video push module, and the mobile phone plays the video stream.
  • the first guard module can perform the following functions:
  • Sensor collection information (it can also be information collected by other monitoring equipment, this embodiment does not impose specific restrictions):
  • the guard mode service collects various sensor information through the sensor information collection module. Including sensors around the car body, such as cameras, ultrasonic radar, and G-Sensor.
  • the guard mode collects various sensor information and fuses and analyzes the information. When the analysis results trigger alarm conditions, event information is reported. In specific implementation, it can The alarm is divided into three levels: if an object approaches the vehicle and lasts for a certain period of time, a first-level alarm will be triggered; if the vehicle collides, a second-level alarm will be triggered; and if the vehicle is robbed, a third-level alarm will occur.
  • End-to-end encryption of event information and event notification When an alarm is triggered, the guard mode will generate alarm information, including time, location, alarm level, alarm description, video and pictures, etc., call the end-to-end encryption module to generate offline session information, and then Use the key derivation algorithm and offline session information to derive the offline session key. Finally, call the end-to-end encryption interface and the offline session key to encrypt the alarm information. Finally, the end-to-end encrypted alarm information and offline session information ( Offline session information (clear text transmission) is pushed to the cloud and notified to the monitoring end.
  • alarm information including time, location, alarm level, alarm description, video and pictures, etc.
  • the second remote viewing module can perform the following functions:
  • Remote viewing request The monitoring end clicks the remote viewing request, and the vehicle end remote viewing service responds.
  • the two ends establish a real-time session connection and use the real-time session information and the end-to-end encryption key derivation algorithm to derive the end-to-end encryption session key (the key is in The session key is calculated and generated by both ends through a key derivation algorithm, and the third party cannot obtain the session key).
  • the session key is used for real-time session data encryption.
  • Remote viewing and playback After the monitoring terminal and the vehicle terminal establish an end-to-end encrypted connection, the vehicle terminal will continue to push real-time picture information. After receiving the real-time picture data, the monitoring terminal calls the end-to-end encryption and decryption interface and uses the derived session key pair The data is decrypted and finally played through a streaming media player.
  • the second guard module can perform the following functions:
  • the monitoring end guard mode will receive an alarm notification on the event viewing page. After clicking the alarm information, the monitoring end downloads the alarm information + offline session information from the cloud, and then calls the end-to-end encryption key derivation algorithm + offline session information to derive the offline Session key, and finally call the decryption interface of the end-to-end encryption module + offline session key to decrypt the alarm information and view it.
  • both the vehicle terminal and the monitoring terminal also include end-to-end encryption modules.
  • the end-to-end encryption modules can have the following functions: QR code generation or scanning, session management, key derivation, key management, data encryption and decryption, etc.
  • QR code generation or scanning can have the following functions: QR code generation or scanning, session management, key derivation, key management, data encryption and decryption, etc.
  • key derivation can have the following functions: QR code generation or scanning, session management, key derivation, key management, data encryption and decryption, etc.
  • the present invention can implement all or part of the process in the method of the above-mentioned embodiment, and can also be completed by instructing relevant hardware through a computer program.
  • the computer program can be stored in a computer-readable file. In the storage medium, when the computer program is executed by the processor, the steps of each of the above method embodiments can be implemented.
  • the computer program includes computer program code, which may be in the form of source code, object code, executable file or some intermediate form.
  • the computer-readable storage medium may include: any entity or device capable of carrying the computer program code, media, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory, random access memory, electrical carrier wave signals, telecommunications signals, and software distribution media, etc.
  • computer-readable storage media Storage media does not include electrical carrier signals and telecommunications signals.
  • the present invention also provides a vehicle monitoring device.
  • FIG. 4 is a main structural block diagram of a vehicle monitoring device according to an embodiment of the present invention.
  • the vehicle monitoring device in the embodiment of the present invention includes a processor 40 and a storage device 41 .
  • the storage device 41 may be configured to store a program for executing the vehicle monitoring method of the above method embodiment, and the processor 40 may be configured to execute the program in the storage device 41 .
  • the program includes but is not limited to executing the vehicle monitoring method of the above method embodiment. Procedures for monitoring methods. For ease of explanation, only the parts related to the embodiments of the present invention are shown. If specific technical details are not disclosed, please refer to the method part of the embodiments of the present invention.
  • the vehicle monitoring device may be a control device including various electronic devices.
  • the present invention also provides a computer-readable storage medium.
  • the computer-readable storage medium may be configured to store a program for executing the vehicle monitoring method of the above method embodiment.
  • the program may be loaded and run by a processor to implement the above vehicle monitoring method. Monitoring methods.
  • the computer-readable storage medium may be a storage device formed by various electronic devices.
  • the computer-readable storage medium is a non-transitory computer-readable storage medium.
  • each module is only for illustrating the present invention
  • the physical devices corresponding to these modules can be the processor itself, or a part of the software in the processor, a part of the hardware, or a part of the combination of software and hardware. Therefore, the number of individual modules in the figure is only illustrative.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Power Engineering (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Burglar Alarm Systems (AREA)
  • Traffic Control Systems (AREA)

Abstract

本发明提供了一种车辆监控方法、设备和存储介质，包括：获取车辆的监控数据和其对应的至少一个第一标签信息；根据至少一个第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从第一衍生密钥抽取出监控数据对应的一次性第一加密密钥；利用一次性第一加密密钥对监控数据进行加密；将得到的加密监控数据发送给监控端，以便监控端生成一次性第一加密密钥后，对加密监控数据进行解密，得到监控数据，实现了在密钥衍生算法生成预设长度的衍生密钥的基础上，进一步衍生，抽取到一次性第一加密密钥，对监控数据进行加密，可以有效防止密钥被破解，提高监控数据在数据传输过程中的安全性，进而提高车辆监控的可靠性。

Description

车辆监控方法、设备和存储介质
本申请要求2022年7月14日提交的、发明名称为“车辆监控方法、设备和存储介质”的中国专利申请202210834133.3的优先权，上述中国专利申请的全部内容通过引用并入本申请中。
技术领域
本发明涉及车辆监控技术领域，具体提供一种车辆监控方法、设备和存储介质。
背景技术
随着经济快速发展，全球汽车保有量越来越多，很多家庭都购买了汽车。除了日常养护、燃油成本，汽车另一项重要开支就是维修，特别是一些豪华平品牌的汽车。很多停车点都没有监控或者监控无法完全覆盖，当车辆出现剐蹭或者遭受恶意破坏时，往往因为无法找到肇事人，造成的损失只能车主自己承担。相关技术中，市场上已出现少量可以在停车时记录车辆内外的监控信息的设备。另外，在车辆行驶过程中，为了获知车辆的相关信息或者对车辆上的特定物品进行监控等，也通常也会采用监控设备获取车辆行驶过程中的相关监控信息。
然而，无论是车辆停车还是车辆行驶过程中，所获取的监控信息都可能会涉及到相关人员的隐私，如果这些涉及到相关人员隐私的监控信息被泄露，会对相关人员造成严重影响，从而降低了车辆监控的可靠性。
发明内容
为了克服上述缺陷，提出了本发明，以提供解决或至少部分地解决车辆的监控信息容易被泄露，造成车辆监控的可靠性较低的技术问题的车辆监控方法、设备和存储介质。
在第一方面，本发明提供一种车辆监控方法，应用于车端，所述方 法包括：
获取车辆的监控数据和与所述监控数据对应的至少一个第一标签信息；
根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；
从所述预设长度的第一衍生密钥抽取出所述监控数据对应的一次性第一加密密钥；
利用所述一次性第一加密密钥对所述监控数据进行加密，得到加密监控数据；
将所述加密监控数据发送给监控端，以便所述监控端生成所述一次性第一加密密钥后，对所述加密监控数据进行解密，得到所述监控数据。
在第二方面，本发明提供一种车辆监控方法，应用于监控端，所述方法包括：
若接收到车端发送的加密监控数据，获取所述加密监控数据对应的至少一个第一标签信息；
根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；
从所述预设长度的第一衍生密钥抽取出所述加密监控数据对应的一次性第一加密密钥；
利用所述一次性第一加密密钥对所述加密监控数据进行解密，得到加密监控数据对应的监控数据。
在第三方面，提供一种车辆监控方法，应用于包括车端和监控端的监控系统，所述方法包括：
所述车端获取车辆的监控数据和与所述监控数据对应的至少一个第一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述监控数据进行加密，得到加密监控数据；将所述加密监控数据发送给监控端；
所述监控端若接收到车端发送的加密监控数据，获取所述加密监控 数据对应的至少一个第一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述加密监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述加密监控数据进行解密，得到加密监控数据对应的监控数据。
在第四方面，提供一种车辆监控设备，包括处理器和存储装置，所述存储装置适于存储多条程序代码，所述程序代码适于由所述处理器加载并运行以执行上述中任一项所述的车辆监控方法。
在第五方面，提供一种计算机可读存储介质，该计算机可读存储介质其中存储有多条程序代码，所述程序代码适于由处理器加载并运行以执行上述任一项技术方案所述的车辆监控方法。
本发明上述一个或多个技术方案，至少具有如下一种或多种有益效果：
在实施本发明的技术方案中，通过获取车辆的监控数据和与所述监控数据对应的至少一个第一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述监控数据进行加密，得到加密监控数据；将所述加密监控数据发送给监控端，以便所述监控端生成所述一次性第一加密密钥后，对所述加密监控数据进行解密，得到所述监控数据，实现了在密钥衍生算法生成预设长度的衍生密钥的基础上，进一步衍生，抽取到一次性第一加密密钥，对监控数据进行加密，这样，即使监控数据对应的第一标签信息和种子密钥被泄露后，仍可以有效防止密钥被破解，从而提高了监控数据在数据传输过程中的安全性，进而提高了车辆监控的可靠性。
附图说明
参照附图，本发明的公开内容将变得更易理解。本领域技术人员容易理解的是：这些附图仅仅用于说明的目的，而并非意在对本发明的保护范围组成限制。此外，图中类似的数字用以表示类似的部件，其中：
图1是根据本发明的一个实施例的车辆监控方法的主要步骤流程示意图；
图2是根据本发明的另一个实施例的车辆监控方法的主要步骤流程示意图；
图3是根据本发明的一个实施例的监控系统的主要结构框图；
图4是根据本发明的一个实施例的车辆监控设备的主要结构框图。
具体实施方式
下面参照附图来描述本发明的一些实施方式。本领域技术人员应当理解的是，这些实施方式仅仅用于解释本发明的技术原理，并非旨在限制本发明的保护范围。
在本发明的描述中，“模块”、“处理器”可以包括硬件、软件或者两者的组合。一个模块可以包括硬件电路，各种合适的感应器，通信端口，存储器，也可以包括软件部分，比如程序代码，也可以是软件和硬件的组合。处理器可以是中央处理器、微处理器、图像处理器、数字信号处理器或者其他任何合适的处理器。处理器具有数据和/或信号处理功能。处理器可以以软件方式实现、硬件方式实现或者二者结合方式实现。非暂时性的计算机可读存储介质包括任何合适的可存储程序代码的介质，比如磁碟、硬盘、光碟、闪存、只读存储器、随机存取存储器等等。术语“A和/或B”表示所有可能的A与B的组合，比如只是A、只是B或者A和B。术语“至少一个A或B”或者“A和B中的至少一个”含义与“A和/或B”类似，可以包括只是A、只是B或者A和B。单数形式的术语“一个”、“这个”也可以包含复数形式。
相关技术中，无论是车辆停车还是车辆行驶过程中，通常都会通过监控设备获取车辆的监控信息，然后所获取的监控信息都可能会涉及到相关人员的隐私，如果这些涉及到相关人员隐私的监控信息被泄露，会对相关人员造成严重影响，从而降低了车辆监控的可靠性。
因此，为了解决上述技术问题，本发明提供了以下技术方案：
参阅附图1，图1是根据本发明的一个实施例的车辆监控方法的主要步骤流程示意图。其中，该车辆监控方法应用于车端。如图1所示，本 发明实施例中的车辆监控方法主要包括下列步骤101-步骤105。
步骤101、获取车辆的监控数据和与所述监控数据对应的至少一个第一标签信息；
在一个具体实现过程中，可以由用户通过手机端或者车端开启车辆监控模式，开启车辆监控模式后车辆进入被动监控状态的车端守卫模式或主动监控的远程查看模式，其中，车端守卫模式的启动条件为：接收到监控端发送的监控指令，或者，生成监控指令。远程查看模式的启动条件包括：接收到监控端发送的远程查看请求。
在开启车辆监控模式后，可以通过设置在车端的监控设备采集车辆的监控数据，然后获取与所述监控数据对应的至少一个第一标签信息。其中，至少一个标签信息可以包括当前的会话内容的时间戳信息、随机信息、预定义信息等信息。其中，在进行车端到监控端会话过程中，车辆的监控数据需要进行加密，而车辆的监控数据对应的至少一个标签信息则以明文形式进行传输。设置在车端的监控设备可以包括但不限制于车身周围摄像头、超声波雷达、G-Sensor等传感器。
步骤102、根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；
在一个具体实现过程中，若车辆的监控模式为车端守卫模式，当检测到所述监控数据满足预设的告警条件时，可以执行该步骤。其中，车端守卫模式对应的警告可以分为三级：物体靠近车辆并持续一定时间则触发一级警告、车辆发生碰撞则触发二级警告、车辆发生盗抢则发生三级警告。若车辆的监控模式为远程查看模式，则直接执行该步骤。
在一个具体实现过程中，若所述第一标签信息的数目为1个，该步骤的实现过程可以参考如下步骤：
(1)将所述第一标签信息进行哈希处理，并对处理后的第一哈希值进行截取，得到第一哈希值截取部分；
在一个具体实现过程中，可以利用密钥衍生算法，对所述第一标签信息进行哈希处理，得到处理后的第一哈希值，并按照预设的截取规则，对处理后的第一哈希值进行截取，得到第一哈希值截取部分。其中，预设的截取规则可以根据实际需求选择，本实施例不做具体限制。
(2)基于所述种子密钥和所述第一哈希值截取部分，生成所述预设长度的第一衍生密钥。
可以利用HKDF密钥衍生算法，对所述种子密钥和所述第一哈希值截取部分进行处理，得到预设长度的衍生密钥。
在一个具体实现过程中，若所述第一标签信息的数目至少为2个，该步骤的实现过程可以参考如下步骤：
(11)将所有所述第一标签信息进行拼接，得到拼接信息；
在一个具体实现过程中，可以对所有的第一标签信息进行拼接，得到第一拼接信息。例如，所有的第一标签信息可以包括时间戳信息“10101100”、随机信息“10001001”、预定义信息“11001011”，拼接后可以得到第一拼接信息为“10101100 10001001 11001011”。
(12)将所述拼接信息进行哈希处理，并对处理后的第二哈希值进行截取，得到第二哈希值截取部分；
在得到第一拼接后，对第一拼接信息进行哈希处理，得到处理后的第而哈希值，并按照预设的截取规则，对处理后的第二哈希值进行截取，得到第二哈希值截取部分。其中，预设的截取规则可以根据实际需求选择，本实施例不做具体限制。
(13)基于所述种子密钥和所述第二哈希值截取部分，生成所述预设长度的第一衍生密钥。
可以利用HKDF密钥衍生算法，对所述种子密钥和所述第二哈希值截取部分进行处理，得到预设长度的衍生密钥。
步骤103、从所述预设长度的第一衍生密钥抽取出所述监控数据对应的一次性第一加密密钥；
在一个具体实现过程中，在得到预设长度的第一衍生密钥后，为了进一步提高密钥破解难度，可以基于预设的抽取规则，从预设长度的第一衍生密钥抽取出所述待处理数据对应的一次性第一加密密钥。
具体地，预设的抽取规则可以自定义，例如，HKDF密钥衍生算法衍生的密钥长度为512字节，一次性第一加密密钥的长度为256字节，可以定义的抽取规则为中间切分，选取其中一部分作为一次性第一加密密钥即可。也可以采用其他抽取规则，如从512字节中抽取256字节数据 组成一次性第一加密密钥。本实施例不再一一举例说明。这样，从预设长度的衍生密钥进行抽取后，得到一次性第一加密密钥后，即使监控数据对应的第一标签信息和种子密钥被泄露后，仍可以有效防止密钥被破解。
步骤104、利用所述一次性第一加密密钥对所述监控数据进行加密，得到加密监控数据；
在一个具体实现过程中，车端在得到一次性第一加密密钥后，可以利用所述一次性第一加密密钥对所述监控数据进行加密，得到加密监控数据。
步骤105、将所述加密监控数据发送给监控端，以便所述监控端生成所述一次性第一加密密钥后，对所述加密监控数据进行解密，得到所述监控数据。
车端可以将加密监控数据发送给监控端，具体地，若车端的监控模式为车端守卫模式，通常生成的加密监控数据的类型为离线会话类型，此时，可以将加密监控数据上传到云端后，云端向监控端发送告警通知，监控端再向云端发送下载请求，才能从云端服务器下载所述加密监控数据。若车辆的监控模式为远程查看模式，通常生成的加密监控数据的类型为在线会话类型，此时，可以将加密监控数据上传到云端后，云端直接向监控端下发加密监控数据。
在一个具体实现过程中，监控端在接收到车端发送的加密监控数据后，可以获取所述加密监控数据对应的至少一个第一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述加密监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述加密监控数据进行解密，得到加密监控数据对应的监控数据。
本实施例的车辆监控方法，通过获取车辆的监控数据和与所述监控数据对应的至少一个第一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述监控数据进行加密，得 到加密监控数据；将所述加密监控数据发送给监控端，以便所述监控端生成所述一次性第一加密密钥后，对所述加密监控数据进行解密，得到所述监控数据，实现了在密钥衍生算法生成预设长度的衍生密钥的基础上，进一步衍生，抽取到一次性第一加密密钥，对监控数据进行加密，这样，即使监控数据对应的第一标签信息和种子密钥被泄露后，仍可以有效防止密钥被破解，从而提高了监控数据在数据传输过程中的安全性，进而提高了车辆监控的可靠性。
在一个具体实现过程中，为了进一步提高监控数据加密的安全性，在加密时，还可以将一次性第一加密密钥与一次性初始向量结合使用，对待处理数据进行带盐加密，增强加密的安全性。其中，一次性初始向量的生成过程可以参照如下步骤：
(21)对至少一个所述第一标签信息进行加密，得到第一加密密文；
在一个具体实现过程中，以第一标签信息为时间戳信息为例，可以使用HmacSha1算法对时间戳信息加密并返回第一加密密文。
(22)从所述第一加密密文中抽取第一目标信息；
在一个具体实现过程中，可以按照自定义的抽取规则，从所述第一加密密文中抽取第一目标信息。
(23)对所述第一目标信息进行加密，得到第二加密密文；
可以对抽取后的第一目标信息再进行Sha256加密并返回第二加密密文。
(24)从所述第二加密密文中抽取第二目标信息作为一次性初始向量。
可以按照自定义的抽取规则，从所述第二加密密文中抽取第二目标信息作为一次性初始向量。
本实施例中，在生成一次性初始向量时，根据自定义的抽取规则进行两次抽取后，得到第二目标信息作为一次性初始向量，提高了一次性初始向量的破解难度，进一步提高了数据的安全性。
在一个具体实现过程中，还可以根据所述一次性第一加密密钥，生成所述一次性第一加密密钥对应的第一密钥摘要；将所述第一密钥摘要发送给所述监控端，以便所述监控端生成第二密钥摘要，并与所述第一 密钥摘要进行比对，以对所述一次性第一加密密钥进行检验，以便确定加密监控数据确实为车端发送的。
在一个具体实现过程中，种子密钥的获取过程可以分为如下两种方式：
第一种，自生成种子密钥，具体步骤如下：
(31)获取车端的主密钥、车端的设备识别码、预设的上下文信息和随机信息；
在一个具体实现过程中，可以获取车端的主密钥、车端的设备识别码、预设的上下文信息和随机信息。其中，车端的主密钥可以有车端的硬件安全模块生成，且车端的主密钥的生命周期与车端的硬件生命周期一致。也就是说，可以根据车端的硬件的相关信息，生成车端的主密钥，如果车端的硬件被更换后，需要重新生成车端的主密钥。
(32)基于所述车端的主密钥、所述车端的设备识别码、所述预设的上下文信息和所述随机信息，利用密钥衍生算法，生成所述种子密钥，并存储所述种子密钥。
在一个具体实现过程中，可以利用密钥衍生算法，对所述车端的主密钥、所述车端的设备识别码、所述预设的上下文信息和所述随机信息进行处理，衍生出种子密钥，并对种子密钥进行存储。
在一个具体实现过程中，在生成种子密钥后，通常需要将种子密钥分享给与其进行会话的一端，因此，为了保证种子密钥的安全性，可以对种子密钥进行加密分享，具体可以参照如下步骤：
(41)基于所述车端的设备识别码，获取所述种子密钥的签名信息；
在一个具体实现过程中，可以使用HMAC算法，对车端的设备识别码进出处理，得到种子密钥的签名信息，并利用签名信息对种子密钥签名，防止种子密钥被篡改。
(42)基于所述签名信息、所述种子密钥和当前时间戳信息进行拼接，得到第二拼接信息；
在一个具体实现过程中，基于所述签名信息、所述种子密钥和当前时间戳信息按照预设的拼接规则进行拼接，得到第二拼接信息。
(43)基于用户提供的密码，对所述第二拼接信息进行加密，得到 加密种子密钥信息，以便被待同步终端获取所述加密种子密钥信息后进行解密，得到所述种子密钥。
第二种，从与监控终端中获取种子密钥，具体步骤如下：
(51)通过扫码方式获取加密种子密钥信息；
在一个具体实现过程中，加密种子密钥信息可以以二维码的形式呈现，这样，可以通过扫码方式获取加密种子密钥信息。
(52)基于用户提供的密码，对所述加密种子密钥进行解密，得到解密种子密钥信息；
(53)从所述解密种子密钥信息抽取出签名信息和种子密钥；
(54)基于所述车端的设备识别码和所述签名信息，对所述种子密钥进行验签；
(55)当验签结果表示通过时，存储所述种子密钥。
需要说明的是，在实际应用中通常选择第一中方式获取种子密钥，即车端自身生成种子密钥，监控端扫描车端的二维码，获取加密种子密钥后，再解密得到种子密钥。
在一个具体实现过程中，用户也可以通过监控端对车端进行操控，监控端生成用于操控车端的操控数据，并获取所述操控数据对应的至少一个第二标签信息；根据至少一个所述第二标签信息和预存储的种子密钥，生成预设长度的第二衍生密钥；从所述预设长度的第二衍生密钥抽取出所述操控数据对应的一次性第二加密密钥；利用所述一次性第二加密密钥对所述监控数据进行加密，得到加密操控数据；将所述加密操控数据发送给车端。
车端若接收到所述监控端发送的加密操控数据，获取所述加密操控数据对应的至少一个第二标签信息；根据至少一个所述第二标签信息和预存储的种子密钥，生成预设长度的第二衍生密钥；从所述预设长度的第二衍生密钥抽取出所述加密操控数据对应的一次性第二加密密钥；利用所述一次性第二加密密钥对所述加密操控数据进行解密，得到加密操控数据对应的用于操控车端的操控数据。
上述对操控数据进行加密或解密的实现过程与前述对监控数据实现加密或解密的过程相同，详细请参考上述相关记载，在此不再赘述。
参阅附图2，图2是根据本发明的另一个实施例的车辆监控方法的主要步骤流程示意图。其中，该车辆监控方法应用于监控端。如图2所示，本发明实施例中的车辆监控方法主要包括下列步骤201-步骤204。
步骤201、若接收到车端发送的加密监控数据，获取所述加密监控数据对应的至少一个第一标签信息；
在一个具体实现过程中，无论是车端的监控数据还是加密监控数据，其对应的第一标签信息是相同的，第一标签信息会以明文形式传输给监控端，监控端可以获取到至少一个第一标签信息。
步骤202、根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；
在一个具体实现过程中，监控端生成预设长度的第一衍生密钥的过程与车端生成预设长度的第一衍生密钥的过程相同，详细请参考上述相关记载，在此不再赘述。
需要说明的是，监控端中预存储的种子密钥可以通过扫码方式从所述车端获取所述加密种子密钥；对所述加密种子密钥进行处理，得到并存储所述种子密钥。详细请参考上述相关记载，在此不再赘述。
步骤203、从所述预设长度的第一衍生密钥抽取出所述加密监控数据对应的一次性第一加密密钥；
在一个具体实现过程中，监控端抽取一次性第一加密密钥的过程与车端抽取一次性第一加密密钥的过程相同，详细请参考上述相关记载，在此不再赘述。
步骤204、利用所述一次性第一加密密钥对所述加密监控数据进行解密，得到加密监控数据对应的监控数据。
本实施例的车辆监控方法，若接收到车端发送的加密监控数据，获取所述加密监控数据对应的至少一个第一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述加密监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述加密监控数据进行解密，得到加密监控数据对应的监控数据，实现了在密钥衍生算法生成预设长度的衍生密钥的基础上，进一步衍生，抽取到 一次性第一加密密钥，对监控数据进行加密，这样，即使监控数据对应的第一标签信息和种子密钥被泄露后，仍可以有效防止密钥被破解，从而提高了监控数据在数据传输过程中的安全性，进而提高了车辆监控的可靠性。
在一个具体实现过程中，为了进一步提高监控数据加密的安全性，在加密时，还可以将一次性第一加密密钥与一次性初始向量结合使用，对待处理数据进行带盐加密，增强加密的安全性，因此，在进行解密时，监控端也需要生成一次性初始向量。其中，一次性初始向量的生成过程可以参照车端生成一次性初始向量的过程，在此不再赘述。
在一个具体实现过程中，还可以根据所述一次性第一加密密钥，生成所述一次性第一加密密钥对应的第一密钥摘要；将所述第一密钥摘要发送给所述监控端，以便所述监控端生成第二密钥摘要，并与所述第一密钥摘要进行比对，以对所述一次性第一加密密钥进行检验，以便确定加密监控数据确实为车端发送的。
在一个具体实现过程中，在步骤201“若接收到车端发送的加密监控数据，获取所述加密监控数据对应的至少一个第一标签信息”之前，还可以执行如下步骤：
若车辆的监控模式为车端守卫模式，在接收到告警通知后，向云端服务器发送下载请求，以便从云端服务器下载所述加密监控数据；其中，所述车端守卫模式的启动条件为：向车端发送监控指令，或者，接收到车端发送的监控指令；
若车辆的监控模式为远程查看模式，直接从云端服务器接收所述加密监控数据；其中，所述远程查看模式的启动条件包括：向车端发送的远程查看请求。
在一个具体实现过程中，用户也可以通过监控端对车端进行操控，监控端对车端进行操控时操控数据的加密或解密过程详细参考上述相关记载，在此不再赘述。
进一步地，本发明还提供了一种应用于包括车端和监控端的监控系统的车辆监控方法。
所述车端获取车辆的监控数据和与所述监控数据对应的至少一个第 一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述监控数据进行加密，得到加密监控数据；将所述加密监控数据发送给监控端；
所述监控端若接收到车端发送的加密监控数据，获取所述加密监控数据对应的至少一个第一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述加密监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述加密监控数据进行解密，得到加密监控数据对应的监控数据。
参见图3，图3是根据本发明的一个实施例的监控系统的主要结构框图。如图3所示，车端可以包括第一远程查看模块和第一守卫模块，监控端可以包括第二远程查看模块和第二守卫模块。
第一远程查看模块可以执行如下功能：
摄像头采集信息(也可以是其他监控设备采集的信息，本实施例不做具体限制)：当手机端请求远程查看功能，车端远程查看服务通过车内外摄像头采集实时画面信息。
视频编码：视频编解码模块负责对采集到的实时画面信息进行编码。
视频端到端加密：编码后的流媒体调用端到端加密模块对流媒体数据加密。
视频流推送：最后加密后的视频流由视频推流模块推送到手机端，手机端播放视频流。
第一守卫模块可以执行如下功能：
传感器采集信息(也可以是其他监控设备采集的信息，本实施例不做具体限制)：当用户通过监控端或者车端开启守卫模式后，守卫模式服务通过传感器信息采集模块采集各种传感器信息，包括车身周围摄像头、超声波雷达、G-Sensor等传感器。
信息融合分析：守卫模式采集到各种传感器信息后对信息进行融合和分析，当分析结果触发告警条件时上报事件信息，在具体实现中可以 将告警分为三级：物体靠近车辆并持续一定时间则触发一级告警、车辆发生碰撞则触发二级告警、车辆发生盗抢则发生三级告警。
事件信息端到端加密和事件通知：当触发告警时，守卫模式会生成告警信息，包括时间、位置、告警级别、告警描述、视频和图片等，调用端到端加密模块生成离线会话信息，然后使用密钥衍生算法加上离线会话信息衍生出离线会话密钥，最后调用端到端加密接口以及离线会话密钥对告警信息进行加密，最后将端到端加密后的告警信息以及离线会话信息(离线会话信息明文传输)推送到云端并通知监控端。
第二远程查看模块可以执行如下功能：
远程查看请求：监控端点击远程查看请求，车端远程查看服务响应，两端建立实时会话连接并利用实时会话信息和端到端加密密钥衍生算法衍生端到端加密会话密钥(密钥在两端通过密钥衍生算法计算生成，第三方无法获取会话密钥)，该会话密钥用于实时会话数据加密。
远程查看播放：监控端和车端建立端到端加密连接后，车端会持续推送实时画面信息，监控端接收到实时画面数据后调用端到端加密解密接口，利用衍生得到的会话密钥对数据进行解密，最后通过流媒体播放器播放。
第二守卫模块可以执行如下功能：
事件查看：监控端守卫模式会在事件查看页面收到告警通知，点击告警信息后监控端从云端下载告警信息+离线会话信息，然后调用端到端加密密钥衍生算法+离线会话信息衍生出离线会话密钥，最后调用端到端加密模块的解密接口+离线会话密钥解密告警信息并查看。
其中，车端和监控端还均包括端到端加密模块，端到端加密模块可以具有如下功能：二维码生成或扫描，会话管理，密钥衍生、密钥管理、数据加解密等。详细的功能实现过程，可以参考前述车辆监控方法的相关记载，在此不再赘述。
需要指出的是，尽管上述实施例中将各个步骤按照特定的先后顺序进行了描述，但是本领域技术人员可以理解，为了实现本发明的效果，不同的步骤之间并非必须按照这样的顺序执行，其可以同时(并行)执行或以其他顺序执行，这些变化都在本发明的保护范围之内。
本领域技术人员能够理解的是，本发明实现上述一实施例的方法中的全部或部分流程，也可以通过计算机程序来指令相关的硬件来完成，所述的计算机程序可存储于一计算机可读存储介质中，该计算机程序在被处理器执行时，可实现上述各个方法实施例的步骤。其中，所述计算机程序包括计算机程序代码，所述计算机程序代码可以为源代码形式、对象代码形式、可执行文件或某些中间形式等。所述计算机可读存储介质可以包括：能够携带所述计算机程序代码的任何实体或装置、介质、U盘、移动硬盘、磁碟、光盘、计算机存储器、只读存储器、随机存取存储器、电载波信号、电信信号以及软件分发介质等。需要说明的是，所述计算机可读存储介质包含的内容可以根据司法管辖区内立法和专利实践的要求进行适当的增减，例如在某些司法管辖区，根据立法和专利实践，计算机可读存储介质不包括电载波信号和电信信号。
进一步，本发明还提供了一种车辆监控设备。
参阅附图4，图4是根据本发明的一个实施例的车辆监控设备的主要结构框图。如图4所示，本发明实施例中的车辆监控设备包括处理器40和存储装置41。存储装置41可以被配置成存储执行上述方法实施例的车辆监控方法的程序，处理器40可以被配置成用于执行存储装置41中的程序，该程序包括但不限于执行上述方法实施例的车辆监控方法的程序。为了便于说明，仅示出了与本发明实施例相关的部分，具体技术细节未揭示的，请参照本发明实施例方法部分。该车辆监控设备可以是包括各种电子设备形成的控制设备。
进一步，本发明还提供了一种计算机可读存储介质。在根据本发明的一个计算机可读存储介质实施例中，计算机可读存储介质可以被配置成存储执行上述方法实施例的车辆监控方法的程序，该程序可以由处理器加载并运行以实现上述车辆监控方法。为了便于说明，仅示出了与本发明实施例相关的部分，具体技术细节未揭示的，请参照本发明实施例方法部分。该计算机可读存储介质可以是包括各种电子设备形成的存储装置设备，可选的，本发明实施例中计算机可读存储介质是非暂时性的计算机可读存储介质。
进一步，应该理解的是，由于各个模块的设定仅仅是为了说明本发 明的装置的功能单元，这些模块对应的物理器件可以是处理器本身，或者处理器中软件的一部分，硬件的一部分，或者软件和硬件结合的一部分。因此，图中的各个模块的数量仅仅是示意性的。
本领域技术人员能够理解的是，可以对装置中的各个模块进行适应性地拆分或合并。对具体模块的这种拆分或合并并不会导致技术方案偏离本发明的原理，因此，拆分或合并之后的技术方案都将落入本发明的保护范围内。
至此，已经结合附图所示的优选实施方式描述了本发明的技术方案，但是，本领域技术人员容易理解的是，本发明的保护范围显然不局限于这些具体实施方式。在不偏离本发明的原理的前提下，本领域技术人员可以对相关技术特征作出等同的更改或替换，这些更改或替换之后的技术方案都将落入本发明的保护范围之内。

Claims (15)

  1. 一种车辆监控方法，其特征在于，应用于车端，所述方法包括：
    获取车辆的监控数据和与所述监控数据对应的至少一个第一标签信息；
    根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；
    从所述预设长度的第一衍生密钥抽取出所述监控数据对应的一次性第一加密密钥；
    利用所述一次性第一加密密钥对所述监控数据进行加密，得到加密监控数据；
    将所述加密监控数据发送给监控端，以便所述监控端生成所述一次性第一加密密钥后，对所述加密监控数据进行解密，得到所述监控数据。
  2. 根据权利要求1所述的车辆监控方法，其特征在于，还包括：
    对至少一个所述第一标签信息进行加密，得到第一加密密文；
    从所述第一加密密文中抽取第一目标信息；
    对所述第一目标信息进行加密，得到第二加密密文；
    从所述第二加密密文中抽取第二目标信息作为一次性初始向量；其中，所述一次性初始向量与所述一次性第一加密密钥共同用于对所述监控数据进行对称加密。
  3. 根据权利要求1所述的车辆监控方法，其特征在于，还包括：
    根据所述一次性第一加密密钥，生成所述一次性第一加密密钥对应的第一密钥摘要；
    将所述第一密钥摘要发送给所述监控端，以便所述监控端生成第二密钥摘要，并与所述第一密钥摘要进行比对，以对所述一次性第一加密密钥进行检验。
  4. 根据权利要求1所述的车辆监控方法，其特征在于，根据至少一个 所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥，包括：
    若所述第一标签信息的数目为1个，将所述第一标签信息进行哈希处理，并对处理后的第一哈希值进行截取，得到第一哈希值截取部分；并基于所述种子密钥和所述第一哈希值截取部分，生成所述预设长度的第一衍生密钥；
    若所述第一标签信息的数目至少为2个，将所有所述第一标签信息进行拼接，得到拼接信息；将所述拼接信息进行哈希处理，并对处理后的第二哈希值进行截取，得到第二哈希值截取部分；基于所述种子密钥和所述第二哈希值截取部分，生成所述预设长度的第一衍生密钥。
  5. 根据权利要求1所述的车辆监控方法，其特征在于，根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥，包括：
    若车辆的监控模式为车端守卫模式，当检测到所述监控数据满足预设的告警条件时，根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；其中，所述车端守卫模式的启动条件为：接收到监控端发送的监控指令，或者，生成监控指令；
    若车辆的监控模式为远程查看模式，则直接根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；其中，所述远程查看模式的启动条件包括：接收到监控端发送的远程查看请求。
  6. 根据权利要求1所述的车辆监控方法，其特征在于，还包括：
    若接收到所述监控端发送的加密操控数据，获取所述加密操控数据对应的至少一个第二标签信息；
    根据至少一个所述第二标签信息和预存储的种子密钥，生成预设长度的第二衍生密钥；
    从所述预设长度的第二衍生密钥抽取出所述加密操控数据对应的一 次性第二加密密钥；
    利用所述一次性第二加密密钥对所述加密操控数据进行解密，得到加密操控数据对应的用于操控车端的操控数据。
  7. 一种车辆监控方法，其特征在于，应用于监控端，所述方法包括：
    若接收到车端发送的加密监控数据，获取所述加密监控数据对应的至少一个第一标签信息；
    根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；
    从所述预设长度的第一衍生密钥抽取出所述加密监控数据对应的一次性第一加密密钥；
    利用所述一次性第一加密密钥对所述加密监控数据进行解密，得到加密监控数据对应的监控数据。
  8. 根据权利要求7所述的车辆监控方法，其特征在于，还包括：
    对至少一个所述第一标签信息进行加密，得到第一加密密文；
    从所述第一加密密文中抽取第一目标信息；
    对所述第一目标信息进行加密，得到第二加密密文；
    从所述第二加密密文中抽取第二目标信息作为一次性初始向量；其中，所述一次性初始向量与所述一次性第一加密密钥共同用于对所述加密监控数据进行对称解密。
  9. 根据权利要求7所述的车辆监控方法，其特征在于，还包括：
    根据所述一次性第一加密密钥，生成所述一次性第一加密密钥对应的第二密钥摘要；
    将所述第二密钥摘要与接收的车端发送的第一密钥摘要进行比对，以便对所述一次性第一加密密钥进行检验。
  10. 根据权利要求7所述的车辆监控方法，其特征在于，若接收到车端发送的加密监控数据，获取所述加密监控数据对应的至少一个第一标 签信息之前，还包括：
    若车辆的监控模式为车端守卫模式，在接收到告警通知后，向云端服务器发送下载请求，以便从云端服务器下载所述加密监控数据；其中，所述车端守卫模式的启动条件为：向车端发送监控指令，或者，接收到车端发送的监控指令；
    若车辆的监控模式为远程查看模式，直接从云端服务器接收所述加密监控数据；其中，所述远程查看模式的启动条件包括：向车端发送的远程查看请求。
  11. 根据权利要求7所述的车辆监控方法，其特征在于，还包括：
    生成用于操控车端的操控数据，并获取所述操控数据对应的至少一个第二标签信息；
    根据至少一个所述第二标签信息和预存储的种子密钥，生成预设长度的第二衍生密钥；
    从所述预设长度的第二衍生密钥抽取出所述操控数据对应的一次性第二加密密钥；
    利用所述一次性第二加密密钥对所述监控数据进行加密，得到加密操控数据；
    将所述加密操控数据发送给车端，以便所述车端生成的所述一次性第二加密密钥，对所述加密操控数据进行解密，得到所述操控数据。
  12. 根据权利要求7所述的车辆监控方法，其特征在于，根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥之前，还包括：
    通过扫码方式从所述车端获取所述加密种子密钥；
    对所述加密种子密钥进行处理，得到并存储所述种子密钥。
  13. 一种车辆监控方法，其特征在于，应用于包括车端和监控端的监控系统，所述方法包括：
    所述车端获取车辆的监控数据和与所述监控数据对应的至少一个第 一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述监控数据进行加密，得到加密监控数据；将所述加密监控数据发送给监控端；
    所述监控端若接收到车端发送的加密监控数据，获取所述加密监控数据对应的至少一个第一标签信息；根据至少一个所述第一标签信息和预存储的种子密钥，利用密钥衍生算法，生成预设长度的第一衍生密钥；从所述预设长度的第一衍生密钥抽取出所述加密监控数据对应的一次性第一加密密钥；利用所述一次性第一加密密钥对所述加密监控数据进行解密，得到加密监控数据对应的监控数据。
  14. 一种车辆监控设备，包括处理器和存储装置，所述存储装置适于存储多条程序代码，其特征在于，所述程序代码适于由所述处理器加载并运行以执行权利要求1至13中任一项所述的车辆监控方法。
  15. 一种计算机可读存储介质，其中存储有多条程序代码，其特征在于，所述程序代码适于由处理器加载并运行以执行权利要求1至13中任一项所述的车辆监控方法。
PCT/CN2023/107146 2022-07-14 2023-07-13 车辆监控方法、设备和存储介质 Ceased WO2024012515A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP23839005.8A EP4557705A4 (en) 2022-07-14 2023-07-13 VEHICLE MONITORING METHOD AND DEVICE, AND STORAGE SUPPORT

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202210834133.3A CN115225673B (zh) 2022-07-14 2022-07-14 车辆监控方法、设备和存储介质
CN202210834133.3 2022-07-14

Publications (1)

Publication Number Publication Date
WO2024012515A1 true WO2024012515A1 (zh) 2024-01-18

Family

ID=83611822

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2023/107146 Ceased WO2024012515A1 (zh) 2022-07-14 2023-07-13 车辆监控方法、设备和存储介质

Country Status (3)

Country Link
EP (1) EP4557705A4 (zh)
CN (1) CN115225673B (zh)
WO (1) WO2024012515A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN119561956A (zh) * 2024-10-24 2025-03-04 中国第一汽车股份有限公司 车辆评审系统和方法
CN120433934A (zh) * 2025-07-07 2025-08-05 中楹青创科技有限公司 传感数据芯片级动态密钥协商方法

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115225673B (zh) * 2022-07-14 2024-12-13 蔚来汽车科技(安徽)有限公司 车辆监控方法、设备和存储介质
CN115225672B (zh) * 2022-07-14 2024-07-26 蔚来汽车科技(安徽)有限公司 端到端的数据传输方法、设备和介质
CN117812582B (zh) * 2024-03-01 2024-04-30 合肥工业大学 一种车辆的哨兵模式数据监管方法及监管系统

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110557738A (zh) * 2019-07-12 2019-12-10 安徽中科美络信息技术有限公司 一种车辆监测信息安全传输方法及系统
CN110768938A (zh) * 2018-07-27 2020-02-07 上海汽车集团股份有限公司 一种车辆安全通信方法及装置
WO2020108847A1 (de) * 2018-11-30 2020-06-04 Siemens Aktiengesellschaft Verfahren und vorrichtung zum übertragen von daten in einem publish-subscribe-system
CN114448714A (zh) * 2022-02-25 2022-05-06 百果园技术(新加坡)有限公司 数据加密解密方法、装置、设备和存储介质
CN115225673A (zh) * 2022-07-14 2022-10-21 蔚来汽车科技(安徽)有限公司 车辆监控方法、设备和存储介质

Family Cites Families (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2006101398A (ja) * 2004-09-30 2006-04-13 Hitachi Kokusai Electric Inc 監視システム
CA2583741C (en) * 2004-10-15 2014-10-14 Verisign, Inc. An algorithm to create and validate a one time password
CN101958907A (zh) * 2010-09-30 2011-01-26 中兴通讯股份有限公司 一种传输密钥的方法、系统和装置
EP2506176A1 (en) * 2011-03-30 2012-10-03 Irdeto Corporate B.V. Establishing unique key during chip manufacturing
CN202364318U (zh) * 2011-12-13 2012-08-01 刘明阁 一种加密视频车载记录装置
KR101331201B1 (ko) * 2012-08-20 2013-11-18 경북대학교 산학협력단 Ｃｃｔｖ 카메라 촬영 영상의 보안 전송 시스템 및 그 방법
CN104270614B (zh) * 2014-10-16 2017-07-14 浙江宇视科技有限公司 一种视频加密解密方法及装置
CN105991563B (zh) * 2015-02-05 2020-07-03 阿里巴巴集团控股有限公司 一种保护敏感数据安全的方法、装置及三方服务系统
EP3506668A1 (en) * 2017-12-27 2019-07-03 Gemalto Sa A method for updating a one-time secret key
CN109861819B (zh) * 2019-03-19 2022-04-15 天津中德应用技术大学 基于混淆加密块算法的数据加密方法及解密方法
CN110245534B (zh) * 2019-06-15 2024-03-19 吴新胜 一种基于双向认证的高安全性射频识别方法、装置和系统
CN111404682B (zh) * 2020-03-17 2023-04-25 江苏恒宝智能系统技术有限公司 一种Android环境密钥分段处理方法及装置
CN111612945A (zh) * 2020-05-06 2020-09-01 浙江中邦数码科技有限公司 一种智能锁生成动态密码的方法和智能锁系统
CN115225672B (zh) * 2022-07-14 2024-07-26 蔚来汽车科技(安徽)有限公司 端到端的数据传输方法、设备和介质

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110768938A (zh) * 2018-07-27 2020-02-07 上海汽车集团股份有限公司 一种车辆安全通信方法及装置
WO2020108847A1 (de) * 2018-11-30 2020-06-04 Siemens Aktiengesellschaft Verfahren und vorrichtung zum übertragen von daten in einem publish-subscribe-system
CN110557738A (zh) * 2019-07-12 2019-12-10 安徽中科美络信息技术有限公司 一种车辆监测信息安全传输方法及系统
CN114448714A (zh) * 2022-02-25 2022-05-06 百果园技术(新加坡)有限公司 数据加密解密方法、装置、设备和存储介质
CN115225673A (zh) * 2022-07-14 2022-10-21 蔚来汽车科技(安徽)有限公司 车辆监控方法、设备和存储介质

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP4557705A4

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN119561956A (zh) * 2024-10-24 2025-03-04 中国第一汽车股份有限公司 车辆评审系统和方法
CN120433934A (zh) * 2025-07-07 2025-08-05 中楹青创科技有限公司 传感数据芯片级动态密钥协商方法

Also Published As

Publication number Publication date
EP4557705A1 (en) 2025-05-21
CN115225673A (zh) 2022-10-21
CN115225673B (zh) 2024-12-13
EP4557705A4 (en) 2025-10-29

Similar Documents

Publication Publication Date Title
WO2024012515A1 (zh) 车辆监控方法、设备和存储介质
US11228438B2 (en) Security device for providing security function for image, camera device including the same, and system on chip for controlling the camera device
CN111274578B (zh) 一种视频监控系统的数据安全防护系统和方法
CN109218825B (zh) 一种视频加密系统
CN110011958B (zh) 信息加密方法、装置、计算机设备及存储介质
CN108737110B (zh) 一种用于防重放攻击的数据加密传输方法及装置
CN109151508B (zh) 一种视频加密方法
CN115225672B (zh) 端到端的数据传输方法、设备和介质
KR20180137251A (ko) 블록체인 기술을 활용한 포그 컴퓨터의 보안 및 디바이스 제어 방법
KR20160060867A (ko) 차량용 블랙박스의 영상 위ㆍ변조 탐지 시스템 및 방법
US20230012696A1 (en) True secure airgap
CN112804215A (zh) 一种基于零信任机制的视频采集安全处理系统及方法
CN112383577A (zh) 授权方法、装置、系统、设备和存储介质
Feng et al. Autonomous vehicles' forensics in smart cities
CN112566121B (zh) 一种防止攻击的方法及服务器、存储介质
CN119743248A (zh) 一种基于量子密钥加密的远程计量数据传输方法及系统
CN118413350A (zh) 一种视频流加解密的方法及存储介质
CN116760575A (zh) 异常控制指令的检测方法、装置、电子设备及存储介质
CN109522708B (zh) 对应用程序的运行环境进行安全管控方法及装置
CN112769783B (zh) 数据传输方法及云服务器、接收端和发送端
CN112769544B (zh) 一种智能设备激活授权方法及系统
CN118282643A (zh) 智能设备远程控制方法、计算机设备及存储介质
CN112769789A (zh) 一种加密通信方法及系统
CN117097520A (zh) 物联网设备的接入验证方法、设备及存储介质
CN110933028A (zh) 报文传输方法、装置、网络设备及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 23839005

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 2023839005

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2023839005

Country of ref document: EP

Effective date: 20250214

WWP Wipo information: published in national office

Ref document number: 2023839005

Country of ref document: EP