WO2024120039A1

WO2024120039A1 - Data processing method and device, vehicle, and storage medium

Info

Publication number: WO2024120039A1
Application number: PCT/CN2023/126811
Authority: WO
Inventors: 张振国; 林华坤
Original assignee: 蔚来移动科技有限公司
Priority date: 2022-12-06
Filing date: 2023-10-26
Publication date: 2024-06-13
Also published as: CN118153068A

Abstract

The present invention relates to a data processing method and device, a vehicle, a storage medium, and a computer program product. The method comprises: in response to a trigger instruction of a vehicle key to a vehicle, determining a first key corresponding to the vehicle key; and in response to a first operation instruction of a user, according to the first key, encrypting first operation data corresponding to the first operation instruction, to obtain encrypted first operation data. By using the method, the security and reliability of user data can be improved.

Description

Data processing method, device, vehicle and storage medium

Technical Field

The present disclosure relates to the technical field of data processing, and in particular to a data processing method, device, vehicle and storage medium.

Background technique

During the use of the vehicle, the same vehicle can be driven by multiple users, and each user will generate corresponding behavior data when using the vehicle equipment. Since the generated vehicle data belongs to the user's personal usage data, users usually do not want to be accessed by other car users.

In traditional technology, data access permissions can be set for different users in the vehicle's data storage area, and each user can only access data within his or her own permissions. However, through this method, permission control can be easily bypassed, and the data in the storage area is vulnerable to near-field attacks, and the security and reliability of the data cannot be guaranteed.

Summary of the invention

Based on this, it is necessary to provide a data processing method, device, vehicle, storage medium and computer program product with high reliability to ensure the privacy of personal data in response to the above technical problems.

In a first aspect, an embodiment of the present disclosure provides a method for processing data. The method comprises:

In response to a triggering instruction of a vehicle key to a vehicle, determining a first key corresponding to the vehicle key;

In response to a first operation instruction of the user, first operation data corresponding to the first operation instruction is encrypted according to the first key to obtain encrypted first operation data.

In one embodiment, after determining the first key corresponding to the vehicle key, the method further includes:

Decrypting the key information of the vehicle using the first key to obtain a second key matching the first key;

The encrypting the first operation data corresponding to the first operation instruction according to the first key includes:

The first operation data corresponding to the first operation instruction is encrypted using the second key.

In one embodiment, the responding to the first operation instruction of the user includes:

Receiving a first operation instruction from a user, and obtaining user authentication information corresponding to the vehicle key;

In a case where the user authentication information matches the vehicle authentication information corresponding to the vehicle, respond to the first operation instruction.

In one embodiment, in response to a trigger instruction of a vehicle key to a vehicle, determining a first key corresponding to the vehicle key includes:

In response to a trigger instruction of the vehicle key to the vehicle, obtaining user authentication information corresponding to the vehicle key;

In a case where the user authentication information matches the vehicle authentication information corresponding to the vehicle, a first key corresponding to the vehicle key is obtained.

In one embodiment, the method further comprises:

In response to a user's trigger instruction for generating a subordinate key, generating configuration information of the subordinate key, wherein the configuration information includes a first subkey corresponding to the subordinate key;

The configuration information is encrypted using the first key to obtain encrypted configuration information.

In one embodiment, the method further comprises:

In response to a triggering instruction of the slave key to the vehicle, determining a first subkey corresponding to the slave key;

In response to a second operation instruction of the user, the second operation data corresponding to the second operation instruction is encrypted using the first subkey to obtain encrypted second operation data.

In one embodiment, the method further comprises:

In response to a data acquisition operation instruction of a user, acquiring an operation key corresponding to the data acquisition operation instruction;

In a case where the operation key matches the first key, decrypting the encrypted configuration information using the first key to obtain the configuration information;

The encrypted second operation data is decrypted using the first subkey corresponding to the configuration information to obtain the second operation data.

In one embodiment, after obtaining the encrypted first operation data, the method further includes:

determining a target storage area corresponding to the first key;

The encrypted first operation data is stored in the target storage area.

In a second aspect, the present disclosure also provides a data processing device. The device includes:

A determination module, configured to determine a first key corresponding to the vehicle key in response to a triggering instruction of the vehicle key to the vehicle;

The encryption module is used to respond to a first operation instruction of a user and encrypt first operation data corresponding to the first operation instruction according to the first key to obtain the encrypted first operation data.

In one embodiment, in the determining module, the following further comprises:

The first decryption module is used to decrypt the key information of the vehicle using the first key to obtain the key information of the vehicle. A second key that matches the first key;

The encryption module comprises:

The first encryption submodule is used to encrypt the first operation data corresponding to the first operation instruction by using the second key.

In one embodiment, the encryption module includes:

A receiving module, used to receive a first operation instruction from a user and obtain user authentication information corresponding to the vehicle key;

A response module is used to respond to the first operation instruction when the user authentication information matches the vehicle authentication information corresponding to the vehicle.

In one embodiment, the determining module includes:

A first acquisition module, configured to acquire user authentication information corresponding to the vehicle key in response to a trigger instruction of the vehicle key to the vehicle;

The second acquisition module is used to acquire a first key corresponding to the vehicle key when the user authentication information matches the vehicle authentication information corresponding to the vehicle.

In one embodiment, the device further comprises:

A generation module, configured to generate configuration information of a subordinate key in response to a generation trigger instruction of a subordinate key from a user, wherein the configuration information includes a first subkey corresponding to the subordinate key;

The second encryption submodule is used to encrypt the configuration information using the first key to obtain encrypted configuration information.

In one embodiment, the device further comprises:

A first determination submodule, configured to determine a first subkey corresponding to the slave key in response to a trigger instruction of the slave key to the vehicle;

The third encryption submodule is used to respond to the user's second operation instruction and use the first subkey to encrypt the second operation data corresponding to the second operation instruction to obtain the encrypted second operation data.

In one embodiment, the device further comprises:

A third acquisition module, configured to respond to a data acquisition operation instruction of a user and acquire an operation key corresponding to the data acquisition operation instruction;

a second decryption module, configured to decrypt the encrypted configuration information using the first key to obtain the configuration information when the operation key matches the first key;

The third decryption module is used to decrypt the encrypted second operation data using the first subkey corresponding to the configuration information to obtain the second operation data.

In one embodiment, the encryption module further includes:

A second determination submodule, used to determine a target storage area corresponding to the first key;

The storage module is used to store the encrypted first operation data in the target storage area.

In a third aspect, the embodiments of the present disclosure further provide a vehicle, wherein the vehicle includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the steps of any one of the methods in the embodiments of the present disclosure are implemented.

In a fourth aspect, the embodiments of the present disclosure further provide a computer-readable storage medium, wherein a computer program is stored thereon, and when the computer program is executed by a processor, the steps of any one of the methods in the embodiments of the present disclosure are implemented.

In a fifth aspect, the embodiments of the present disclosure further provide a computer program product, wherein the computer program product includes a computer program, and when the computer program is executed by a processor, the steps of any one of the methods in the embodiments of the present disclosure are implemented.

In the disclosed embodiment, when a user uses a vehicle, the vehicle is triggered by a vehicle key, and a first key corresponding to the vehicle key is obtained in response to a triggering instruction of the vehicle by the vehicle key. When the user operates the vehicle, the vehicle generates operation data in response to the user's operation instruction, and the generated operation data is encrypted by using the first key to obtain the encrypted operation data, thereby realizing encryption of the user's operation data. The operation data is encrypted by the first key corresponding to the user's car key, and other users cannot directly access or access the user's operation data through other keys, thereby ensuring the security of the user's personal data; and the encrypted data is not easily decrypted by data attacks by encrypting with the key, thereby improving the security and reliability of the data; by setting the key corresponding to the key, when the user uses the vehicle, the operation data is directly encrypted by using the corresponding key, without the need for other additional configurations, the processing process is simple, and the implementation difficulty is low. While ensuring data security and reliability, the data encryption process is simplified, and it can be applied to more application scenarios.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is an application environment diagram of a method for processing data in one embodiment;

FIG2 is a schematic flow chart of a method for processing data in one embodiment;

FIG3 is a schematic flow chart of a method for processing data in one embodiment;

FIG4 is a schematic diagram of the structure of a data processing system in one embodiment;

FIG5 is a schematic flow chart of a method for processing data in one embodiment;

FIG6 is a schematic diagram of a control method between a vehicle key and a vehicle in one embodiment;

FIG7 is a schematic diagram of a flow chart of a data acquisition method in one embodiment;

FIG8 is a schematic flow chart of a data access method of a slave key in one embodiment;

FIG9 is a block diagram of a data processing device according to an embodiment;

FIG. 10 is a diagram showing the internal structure of a vehicle in one embodiment.

Detailed ways

In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure more clear, the embodiments of the present disclosure are further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the embodiments of the present disclosure and are not used to limit the embodiments of the present disclosure.

The data processing method provided in the embodiment of the present disclosure can be applied in the application environment as shown in Figure 1. Among them, the terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. Among them, the terminal 102 can be but is not limited to various personal computers, laptops, smart phones, tablets, Internet of Things devices and portable wearable devices. The Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart car-mounted devices, etc. Portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc. The server 104 can be implemented with an independent server or a server cluster consisting of multiple servers.

In one embodiment, as shown in FIG2 , a data processing method is provided, which is described by taking the method applied to the terminal in FIG1 as an example, including the following steps:

Step S210, in response to a triggering instruction of the vehicle by the vehicle key, determining a first key corresponding to the vehicle key;

In the disclosed embodiment, when the user uses the vehicle, the user needs to trigger the vehicle through the car key to switch the vehicle state from a locked state to an unlocked state. Among them, the car key may include but is not limited to a physical key, a smart digital key, etc. In this embodiment, there is a communication connection between the car key and the vehicle, and data can be transmitted. In response to the triggering instruction of the car key to the vehicle, the first key corresponding to the car key is determined. Among them, the first key can be stored in the car key in a preset manner, and the corresponding relationship between the car key and the first key can be obtained according to the actual application scenario setting. Usually, one car key corresponds to one first key, and one first key can correspond to one or more car keys.

Step S220: In response to a first operation instruction from the user, encrypt first operation data corresponding to the first operation instruction according to the first key to obtain encrypted first operation data.

In the embodiment of the present disclosure, when the user operates the vehicle, the user sends a first operation instruction. After receiving the first operation instruction, the vehicle performs a corresponding operation and generates first operation data. The first operation instruction may include but is not limited to an operation control instruction sent by the user through a vehicle device or other device. After the first operation data is generated, the first operation data is encrypted using the acquired first key to obtain the encrypted first operation data. In one example, the first operation data is encrypted using a preset encryption system. In one example, the first operation data can be directly encrypted using the first key. The first operation data may be encrypted, or other encryption methods may be determined according to the first key to encrypt the first operation data. The first operation data may include but is not limited to vehicle status data generated by the user during the use of the vehicle, data generated by the device on the vehicle, etc. The data generated by the device on the vehicle may include but is not limited to positioning information data, video data, voice data, application access record data, etc. In one example, the first operation data may include the user's video data and voice data, wherein when the user uses the vehicle, in response to the first operation instruction of the user entering the vehicle, the corresponding operation data is obtained by using the preset image acquisition device and voice acquisition device, that is, the video data and voice data generated when the user uses the vehicle.

In the disclosed embodiment, when a user uses a vehicle, the vehicle is triggered by the vehicle key, and the first key corresponding to the vehicle key is obtained in response to the triggering instruction of the vehicle by the vehicle key. When the user operates the vehicle, the vehicle responds to the user's operation instruction and generates operation data. The generated operation data is encrypted by the first key to obtain the encrypted operation data, thereby realizing the encryption of the user's operation data. The operation data is encrypted by the first key corresponding to the user's car key, and other users cannot directly access or access the user's operation data through other keys, thereby ensuring the security of the user's personal data; and the encrypted data is not easily decrypted by data attacks by encrypting with the key, thereby improving the security and reliability of the data; by setting the key corresponding to the key, when the user uses the vehicle, the operation data is directly encrypted with the corresponding key, without the need for other additional configurations, the processing process is simple, the implementation difficulty is small, and while ensuring the security and reliability of the data, the data encryption process is simplified, and it can be applied to more application scenarios. Through the disclosed embodiment, the personal data isolation protection when sharing a car can be realized, and each car user can only view his own car data, thereby improving the security of the vehicle data.

In one embodiment, as shown in FIG3 , after determining the first key corresponding to the vehicle key, the method further includes:

Step S212, using the first key to decrypt the key information of the vehicle to obtain a second key matching the first key;

Step S221: Use the second key to encrypt the first operation data corresponding to the first operation instruction.

In the embodiment of the present disclosure, after determining to obtain the first key corresponding to the car key, the key information of the vehicle is decrypted using the first key, and the second key matching the first key is obtained after decryption, wherein the key information of the vehicle can be stored in a storage area of the vehicle in a preset manner, or can be stored in a preset encryption system, and the encryption system is used to encrypt the user's operation data. Among them, the correspondence between the first key and the second key can be obtained according to the actual application scenario setting, and one second key can correspond to one or more first keys. When encrypting the operation data, the second key is used to encrypt it to obtain the encrypted first operation data. In one possible implementation method, the first key is stored in the car key in a preset manner, and in response to the car key's triggering instruction to the vehicle, the vehicle and the car key are connected. The first key is used to communicate with the vehicle key to obtain the first key of the vehicle key, and the key information stored in the vehicle is decrypted using the first key to obtain the second key.

FIG4 is a schematic diagram of a data processing system according to an exemplary embodiment. Referring to FIG4, when a user uses a vehicle, the user triggers the vehicle with a car key. The vehicle responds to the trigger instruction of the car key and uses the first key in the car key to decrypt the key information to obtain the second key corresponding to the car key, that is, the master key in FIG4. Different keys may correspond to different master keys, and the user's car key and the first key may correspond to each other one by one. The corresponding relationship between the car key and the master key may be obtained according to the actual application scenario. In some application scenarios, if the same user holds multiple car keys, multiple car keys may correspond to the same master key. The operation data generated by the user when using the vehicle, such as positioning data, video data, voice data, application access data, etc., is encrypted using the corresponding master key using the encryption system, and the encrypted data is stored in the storage system. In an example, different storage areas are set for multiple master keys in the storage system, and the encrypted data is stored in the corresponding area, so as to achieve the separation of different user data.

In the disclosed embodiment, by setting a second key corresponding to the first key in the vehicle, the key in the car key and the key used to encrypt data are separated. When encrypting data, the corresponding second key is determined according to the first key of the car key, and the data is encrypted using the second key, thereby achieving a many-to-one relationship between the first key and the second key. This is suitable for various application scenarios such as the same user holding multiple car keys and multiple users holding multiple keys sharing data permissions. Moreover, the user can replace or add or reduce the car key by only setting the corresponding relationship between the car key key and the vehicle key, without changing the encryption system of the vehicle, thereby improving the flexibility of using the vehicle key and enhancing the user experience.

In the disclosed embodiment, after the user sends the first operation instruction, the user authentication information corresponding to the car key is obtained, and the obtained user authentication information is used to match the vehicle authentication information of the vehicle. If the match is successful, it can be considered that the car key at this time has passed the authentication, and the first operation instruction sent by the user can be executed and responded to the first operation instruction. Generally, it is possible to set the matching relationship between the user authentication information of the car key and the vehicle authentication information of the vehicle according to the corresponding relationship between the car key and the vehicle, and a corresponding relationship can exist between a vehicle and one or more car keys. In one example, the user authentication information may include a digital key certificate, and the car key is authenticated according to the digital key certificate. If the authentication is passed, the first operation instruction sent by the user is responded to. In one example, the matching relationship between the car key and the vehicle is also Matching can be performed by means of digital signatures. In one example, when the user authentication information does not match the vehicle authentication information, the first operation instruction may not be responded to. In a possible implementation, the user's operation instructions can also be classified to obtain a plurality of different categories of operation instructions. According to the specific matching content between the user authentication information corresponding to the car key and the vehicle authentication information, the authority of the different categories of operation instructions can be controlled. For example, the user sends a first operation instruction, obtains the user authentication information corresponding to the car key, matches the user authentication information and the vehicle authentication information, determines whether the car key corresponding to the user authentication information has the authority for the first operation instruction, and responds to the first operation instruction if the authority for the first operation instruction exists. For different operation instructions, the user authentication information corresponding to the car key may have different matching results.

In one example, as shown in FIG5 , the encryption process can be executed in the vehicle's onboard system. When encrypting the user's operation data, it is first necessary to obtain the user authentication information of the car key, that is, the certificate information. When the certificate information matches, the second key is used for encryption. During the decryption process, the first key in the car key is used to decrypt and obtain the second key. When the user authentication information matches, the encrypted ciphertext is decrypted using the second key to obtain the decrypted operation data. In this embodiment, the ciphertext is further protected by the user authentication information in the key. Encryption and decryption are performed only when the authentication is passed, thereby improving the security of user data.

In the disclosed embodiment, when a user operates a vehicle, the user authentication information corresponding to the car key is matched with the vehicle authentication information, so that the user's identity authentication can be realized. When the authentication is passed, the operation instruction is responded to, thereby ensuring the safety of the vehicle and improving the reliability of the user data. By matching the authentication information, the operation permissions of different key users can be set, further improving the intelligence of the vehicle and being applicable to more application scenarios. In this embodiment, the control operation of the vehicle is realized through the user authentication information, and the encryption operation of the vehicle data is realized through the key, thereby realizing the sharing of vehicle control and the private ownership of vehicle data, ensuring data privacy while improving the user experience.

In the disclosed embodiment, when a user uses a car key to send a trigger instruction to a vehicle, in response to the trigger instruction, the user authentication information corresponding to the car key is obtained, and the obtained user authentication information is used to match the vehicle authentication information of the vehicle. If the match is successful, it can be considered that the car key at this time has passed the authentication, and the first key corresponding to the car key is obtained. Generally, the matching relationship between the user authentication information of the car key and the vehicle authentication information of the vehicle can be set according to the corresponding relationship between the car key and the vehicle, and a corresponding relationship can exist between a vehicle and one or more car keys. In one example, the user authentication information may include a digital key certificate, and the car key is authenticated according to the digital key certificate. If the authentication is successful, the first key corresponding to the car key is obtained. In one example, the matching relationship between the car key and the vehicle can also be matched by a digital signature. In one example, when the user authentication information does not match the vehicle authentication information, no operation is performed.

In one example, as shown in FIG6 , the vehicle control data and the vehicle operation data are managed separately. When the user authentication information of the car key matches the vehicle authentication information of the vehicle, the user can use the control right to control the vehicle. When the key information is stored in the car key and can match the vehicle authentication information, the user can use the control right to control the vehicle, and can also use the corresponding key to decrypt the encrypted data in the vehicle to obtain the vehicle data and access the vehicle data. In one example, when the car key only has a control function, for example, when the car key only stores the user authentication information and does not store the key information, the user can use the car key to control the vehicle control system and control the vehicle, but cannot obtain the vehicle data stored in the vehicle. In one example, when the car key has a control function and a data access function, for example, when the car key stores the user authentication information and the key information, the user can use the car key to control the vehicle, and can also view and access the vehicle data corresponding to the key information. In one example, the vehicle data may include but is not limited to the user's historical operation data.

In the disclosed embodiment, when obtaining the first key corresponding to the car key, the user authentication information and the vehicle authentication information corresponding to the car key are matched. When the match is successful, the first key of the car key is obtained, thereby ensuring the security of the first key and the privacy of the vehicle data. Only when the car key and the vehicle match can the corresponding key be obtained, thereby avoiding the waste of computing resources in the case of mismatch, saving the data processing process, improving processing efficiency, and enhancing the user experience.

In one embodiment, the method further comprises:

In the disclosed embodiments, users can also generate subordinate keys based on the car keys they hold to suit more application scenarios. For example, in a scenario where the car owner temporarily lends out the vehicle, the car owner can generate subordinate keys for the lender to use based on the car keys they hold. When a user needs to generate a subordinate key, a generation trigger instruction for the subordinate key is issued. In response to the generation trigger instruction, configuration information for the subordinate key is generated to obtain the subordinate key. In one example, the subordinate key may include but is not limited to a physical key, an intelligent digital key, etc. The generation of the subordinate key may be implemented through hardware, for example, a new key is made as a subordinate key according to the configuration information. The generation of the subordinate key may also be implemented through software, for example, the configuration information of an existing key is changed according to the configuration information, a new key is generated according to the configuration information, and the subordinate key is obtained. Specifically, the configuration information includes the first subkey corresponding to the slave key, and may also include but is not limited to the user authentication information of the slave key. The first subkey is used to encrypt the user operation data corresponding to the slave key. After obtaining the configuration information of the slave key, the configuration information of the slave key is encrypted using the first key to obtain the encrypted configuration information. In one example, the encrypted configuration information can be stored in the car key held by the user, and can also be stored in a preset storage area of the vehicle.

In the disclosed embodiment, a user can generate a subordinate key based on the car key he/she holds, and the subordinate key corresponds to a first subkey, and the configuration information of the subordinate key is encrypted using the first key corresponding to the car key. In scenarios such as temporary lending of the vehicle, the subordinate key is used, and the lender cannot view the user's historical operation data, thereby ensuring the security of the user's historical operation data. The temporary operation data is encrypted using the first subkey, thereby implementing encryption protection of the temporary operation data, further improving the encryption protection strength of the user data, and being applicable to more application scenarios.

In one embodiment, the method further comprises:

In the disclosed embodiment, after obtaining the slave key, when the user uses the slave key to trigger the vehicle, the slave key is used to send a trigger instruction to the vehicle, and in response to the trigger instruction, the first subkey corresponding to the slave key is obtained. When the user uses the vehicle, a second operation instruction is sent, and in response to the second operation instruction of the user, second operation data is obtained. The second operation data is encrypted using the first subkey to obtain the encrypted second operation data. In this embodiment, the process of encrypting the operation data using the first subkey of the slave key is similar to the process of encrypting the operation data using the first key of the key held by the user. In one example, when determining the first subkey corresponding to the slave key and responding to the second operation instruction of the user, the user authentication information corresponding to the slave key is obtained, and when the user authentication information matches the vehicle authentication information of the vehicle, the corresponding operation is performed.

In the embodiment of the present disclosure, during the use of the slave key, the user operation data is encrypted using the first subkey corresponding to the slave key, thereby realizing encryption protection of the user data during the use of the slave key, and being independent of the operation data of other users, thereby ensuring the security of the operation data of the slave key user. While improving the security and reliability of vehicle operation data, it is suitable for more application scenarios and enhances the user experience.

In one embodiment, as shown in FIG7 , the method further includes:

Step S710, in response to a data acquisition operation instruction from a user, acquiring an operation key corresponding to the data acquisition operation instruction;

Step S720, when the operation key matches the first key, decrypt the encrypted configuration information using the first key to obtain the configuration information;

Step S730: Decrypt the encrypted second operation data using the first subkey corresponding to the configuration information to obtain the second operation data.

In the disclosed embodiment, the operation data generated during the use of the slave key can be viewed by the user of the slave key and can also be accessed by the user of the car key to which the slave key belongs. Specifically, when the user wants to access the operation data of the slave key, the car key is used to send a data acquisition operation instruction. In response to the data acquisition operation instruction, the operation key corresponding to the data acquisition operation instruction is obtained, that is, the key corresponding to the car key that issued the data acquisition operation instruction. It is determined whether the operation key matches the first key of the car key to which the slave key belongs. If the operation key matches the first key, it can be considered that the car key that sends the data acquisition operation instruction at this time is the car key to which the slave key belongs. In the generation process of the slave key, the configuration information of the slave key is encrypted using the first key. At this time, the decrypted configuration information is decrypted using the first key to obtain the configuration information of the slave key. According to the configuration information, the first subkey corresponding to the slave key can be determined. The encrypted second operation data can be decrypted using the obtained first subkey to obtain the second operation data, and the user can view and access the second operation data.

In the disclosed embodiment, the operation data generated during the use of the slave key can be accessed by the user of the car key to which the slave key belongs. Since the configuration information is encrypted using the first key of the car key during the generation of the slave key, the configuration information can be decrypted using the first key, thereby obtaining the first subkey, and decrypting and accessing the encrypted second operation data. Through the disclosed embodiment, the privacy and security of the operation data during the use of the slave key can be guaranteed, and the user of the car key to which the slave key belongs can also obtain the operation data of the vehicle during the use of the slave key in a timely manner. Based on the relationship between the slave key and the car key, the data access scope of the slave key and the car key is restricted, thereby ensuring the control of the vehicle data by the user of the car key, improving the security and reliability of temporary borrowing of the vehicle, etc., and being applicable to more application scenarios, thereby enhancing the user experience.

determining a target storage area corresponding to the first key;

The encrypted first operation data is stored in the target storage area.

In the disclosed embodiment, after the first operation data is encrypted, the target storage area corresponding to the first key is determined, and the encrypted first operation data is stored in the target storage area, wherein the target storage area is usually set in the vehicle. When there are multiple first keys, each first key corresponds to a storage area for storing the corresponding encrypted operation data. In one example, during the use of the slave key, the generated encrypted data can be stored in the storage area corresponding to the first key of the vehicle key to which the slave key belongs. In one example, when the first key has a corresponding When a second key is used, one second key may correspond to one storage area, and one second key may correspond to multiple first keys. In this case, one storage area may also correspond to multiple first keys.

In the disclosed embodiment, the storage area for storing encrypted data is divided, and different first keys may correspond to different storage areas, thereby realizing the separation of operation data of different users in a multi-user situation, further improving the security and reliability of user operation data, avoiding problems such as data loss caused by chaotic data storage in a multi-user scenario, and improving the user experience.

FIG8 is a flow chart of a data access method of a slave key according to an exemplary embodiment. Referring to FIG8 , a master user can generate a slave key for a temporary user. The slave key corresponds to a subkey, and the encrypted subkey ciphertext is stored in the key of the master user. When the temporary user uses the slave key to use the vehicle, the temporary operation data generated is encrypted by the encryption system and stored in the storage system, wherein the encryption is performed using the subkey corresponding to the slave key. In one example, the operation data generated by the temporary user can be stored in different locations in the same storage area as the historical operation data of the master user. The operation data of the master user is encrypted using the first key or the second key corresponding to the key. The temporary user cannot access the historical operation data of the master user using the slave key, thereby ensuring the security of the operation data of the master user. The master user can access the operation data of the temporary user. When the master user accesses the operation data of the temporary user, in response to the operation instruction of data acquisition, the subkey ciphertext is decrypted using the key to obtain the subkey. The master user can decrypt the encrypted temporary operation data using the subkey to obtain the temporary operation data, thereby realizing the access and viewing of the temporary operation data.

Through the disclosed embodiments, in scenarios such as temporary vehicle lending, the temporary user cannot access the data of the primary user, and the data generated by the temporary user can only be accessed by the temporary user and the corresponding primary user, and cannot be viewed by others, which ensures both the privacy of the primary user's data and the security of the temporary user's data. The primary user can view the vehicle usage data of the temporary user, which improves the safety and reliability of the vehicle and the primary user's experience.

It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the accompanying drawings may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a portion of the steps or stages in other steps.

Based on the same inventive concept, the embodiment of the present disclosure also provides a data processing device for implementing the data processing method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations of one or more data processing device embodiments provided below can be referred to above. The limitations on the data processing method in the description will not be repeated here.

In one embodiment, as shown in FIG9 , a data processing device 900 is provided, including:

A determination module 910, configured to determine a first key corresponding to the vehicle key in response to a triggering instruction of the vehicle key to the vehicle;

The encryption module 920 is used to respond to a first operation instruction of the user and encrypt first operation data corresponding to the first operation instruction according to the first key to obtain the encrypted first operation data.

In one embodiment, the determining module further comprises:

a first decryption module, used to decrypt the key information of the vehicle using the first key to obtain a second key matching the first key;

The encryption module comprises:

In one embodiment, the encryption module includes:

In one embodiment, the determining module includes:

In one embodiment, the apparatus further comprises:

The third encryption submodule is used to respond to the second operation instruction of the user by using the first subkey to encrypt the second The second operation data corresponding to the operation instruction is encrypted to obtain encrypted second operation data.

In one embodiment, the apparatus further comprises:

In one embodiment, the encryption module further comprises:

Each module in the above data processing device can be implemented in whole or in part by software, hardware, or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

In one embodiment, a vehicle is provided, and the computer device may include a server, and its internal structure diagram may be shown in Figure 10. The vehicle includes a processor, a memory, and a network interface connected via a system bus. Among them, the processor of the vehicle is used to provide computing and control capabilities. The memory of the vehicle includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the vehicle is used to store data such as user operation data. The network interface of the vehicle is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, a data processing method is implemented.

Those skilled in the art will understand that the structure shown in FIG. 10 is merely a block diagram of a partial structure related to the embodiment of the present disclosure, and does not constitute a limitation on the vehicle to which the embodiment of the present disclosure is applied. A specific vehicle may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

In one embodiment, a vehicle is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above-mentioned method embodiments when executing the computer program.

In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in the embodiments of the present disclosure are all information and data authorized by the user or fully authorized by all parties.

A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the embodiments of the present disclosure can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in the present disclosure may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchain, etc., but are not limited to this. The processor involved in each embodiment provided in the present disclosure may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic unit, a data processing logic unit based on quantum computing, etc., but are not limited to this.

The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

The above-described embodiments only express several implementation methods of the embodiments of the present disclosure, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the patent of the embodiments of the present disclosure. It should be pointed out that, for those of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the embodiments of the present disclosure, and these all belong to the protection scope of the embodiments of the present disclosure. Therefore, the protection scope of the embodiments of the present disclosure shall be subject to the attached claims.

Claims

A data processing method, characterized in that the method comprises:

In response to a triggering instruction of a vehicle key to a vehicle, determining a first key corresponding to the vehicle key;

In response to a first operation instruction of the user, first operation data corresponding to the first operation instruction is encrypted according to the first key to obtain encrypted first operation data.
The method according to claim 1, characterized in that, after determining the first key corresponding to the vehicle key, it also includes:

Decrypting the key information of the vehicle using the first key to obtain a second key matching the first key;

The encrypting the first operation data corresponding to the first operation instruction according to the first key includes:

The first operation data corresponding to the first operation instruction is encrypted using the second key.
The method according to claim 1 or 2, characterized in that the responding to the first operation instruction of the user comprises:

Receiving a first operation instruction from a user, and obtaining user authentication information corresponding to the vehicle key;

In a case where the user authentication information matches the vehicle authentication information corresponding to the vehicle, respond to the first operation instruction.
The method according to any one of claims 1 to 3, characterized in that the step of determining the first key corresponding to the vehicle key in response to a triggering instruction of the vehicle by the vehicle key comprises:

In response to a triggering instruction of a vehicle key to a vehicle, obtaining user authentication information corresponding to the vehicle key;

In a case where the user authentication information matches the vehicle authentication information corresponding to the vehicle, a first key corresponding to the vehicle key is obtained.
The method according to any one of claims 1 to 4, characterized in that the method further comprises:

In response to a user's trigger instruction for generating a subordinate key, generating configuration information of the subordinate key, wherein the configuration information includes a first subkey corresponding to the subordinate key;

The configuration information is encrypted using the first key to obtain encrypted configuration information.
The method according to claim 5, characterized in that the method further comprises:

In response to a triggering instruction of the slave key to the vehicle, determining a first subkey corresponding to the slave key;

In response to a second operation instruction of the user, the second operation data corresponding to the second operation instruction is encrypted using the first subkey to obtain encrypted second operation data.
A data processing device, characterized in that the device comprises:

A determination module, configured to determine a first key corresponding to the vehicle key in response to a triggering instruction of the vehicle key to the vehicle;

The encryption module is used to respond to a first operation instruction of a user and encrypt first operation data corresponding to the first operation instruction according to the first key to obtain the encrypted first operation data.
A vehicle comprises a memory and a processor, wherein the memory stores a computer program, and wherein the processor implements the steps of the data processing method according to any one of claims 1 to 6 when executing the computer program.
A computer-readable storage medium having a computer program stored thereon, characterized in that when the computer program is executed by a processor, the steps of the data processing method described in any one of claims 1 to 6 are implemented.
A computer program product, comprising a computer program, characterized in that when the computer program is executed by a processor, the steps of the data processing method described in any one of claims 1 to 6 are implemented.