CN115865350A

CN115865350A - Car cloud service system based on quantum safety

Info

Publication number: CN115865350A
Application number: CN202310168095.7A
Authority: CN
Inventors: 程腾; 吴泽旭; 石琴
Original assignee: Hefei University of Technology
Current assignee: Hefei University of Technology
Priority date: 2023-02-27
Filing date: 2023-02-27
Publication date: 2023-03-28
Anticipated expiration: 2043-02-27
Also published as: CN115865350B

Abstract

The invention discloses a quantum security-based vehicle cloud service system, which relates to the technical field of communication security of Internet of vehicles, and comprises: each vehicle end, each manufacturer end and a cloud end; establishing communication connections between vehicles, between vehicles and affiliated manufacturers and between manufacturers by using a cloud dispatching platform; the vehicle terminal quantum key generated by the vehicle terminal is used as a session key of the vehicle and is used for encrypting interaction information in communication connection between the vehicles and affiliated manufacturers; the quantum key generated by the manufacturer end is used as a charging quantum key of the vehicle, and the charging quantum key is pre-charged in the corresponding vehicle and synchronously stored in the manufacturer end and the cloud end, and is used for encrypting the vehicle end quantum key in communication connection between the vehicle and the manufacturer and between the vehicle and the vehicle. The invention aims to ensure the safety and integrity of interactive information in a vehicle cloud service system in a vehicle networking environment.

Description

Car cloud service system based on quantum safety

Technical Field

The invention relates to the technical field of communication safety of Internet of vehicles, in particular to a quantum safety-based vehicle cloud service system.

Background

The vehicle cloud service system mainly comprises a vehicle end service platform, a cloud dispatching platform and manufacturer cloud service platforms of manufacturers of all vehicles, and is used for providing vehicle networking services for the vehicles.

With the rapid development of technologies such as computer technology, internet technology, wireless communication technology and the like, the automobile industry also develops towards the direction of intelligent internet automobiles, and the automobile is not only a vehicle, but also an intelligent terminal. During the running process of the vehicle, a large amount of data can be generated, and meanwhile, the vehicle can perform a large amount of information interaction with manufacturers and other vehicles. In the information interaction process, if the interaction information is not encrypted for protection, the information is transmitted in a plaintext form, once a third party monitors a wireless channel, the plaintext content is in a list, so that the privacy information can be revealed, hijacking and tampering can be performed on the information, and greater potential traffic safety hazards can be caused. Therefore, the interactive information in the vehicle cloud service system needs to be encrypted, and confidentiality, availability and integrity of the information are guaranteed.

The vehicle cloud service system requires information encryption, requires the security of the interactive information, and also requires the encryption and decryption speed and the ciphertext length, so that the information interaction can be ensured to adapt to the scene of high-speed vehicle running. At present, common information encryption algorithms include an RSA encryption algorithm, an elliptic curve encryption algorithm and the like, but the algorithms all have some problems: the RSA algorithm has a large length of encrypted information, a slow calculation speed, a low efficiency, a large communication overhead, and a not very high security, and is easily attacked. The elliptic curve algorithm has higher security, but still has the problems of long encryption and decryption time and large length of encrypted information, and has larger communication overhead. In addition, with the development of quantum computing technology, computing power will develop rapidly, and the existing RSA encryption algorithm and elliptic curve encryption algorithm have a risk of brute force cracking in the presence of strong computing power. The quantum key is provided with possibility for resisting quantum attack.

Therefore, in the whole car cloud service system, how to use the quantum key and how to ensure that the interactive information can be protected by the encryption of the quantum key need to be designed and considered.

Disclosure of Invention

In order to overcome the defects in the prior art, the invention provides a quantum-safety-based vehicle cloud service system, which ensures the safety and integrity of interactive information in the vehicle cloud service system in a vehicle networking environment.

In order to achieve the purpose, the invention adopts the following technical scheme that:

a quantum security based vehicle cloud service system, comprising: the system comprises a vehicle end service platform of each vehicle, a manufacturer cloud service platform of each manufacturer and a cloud dispatching platform of a cloud end;

the car end service platform sets up on the vehicle, includes: the system comprises a vehicle-end quantum random number generator for generating a quantum key, an intelligent terminal for acquiring vehicle information, and a vehicle-end quantum communication unit for encrypting and decrypting the information; the vehicle-end quantum communication unit is in communication connection with the vehicle-end quantum random number generator and the intelligent terminal respectively; the vehicle-end quantum communication unit is also communicated with a cloud dispatching platform;

the vendor cloud service platform comprises: the system comprises a manufacturer quantum random number generator for generating quantum keys, a manufacturer quantum key management module for managing the quantum keys, an Internet of vehicles application server for providing Internet of vehicles services and generating application service information, and a quantum cryptography engine for encrypting and decrypting the information; the quantum secret server engine is in communication connection with a manufacturer quantum random number generator, a manufacturer quantum key management module and an Internet of vehicles application server respectively; the quantum secret server engine is also communicated with a cloud scheduling platform;

the cloud scheduling platform comprises: the system comprises a cloud quantum key management module for managing quantum keys and a quantum key distribution engine for encrypting and decrypting information; the quantum key distribution engine is in communication connection with the cloud quantum key management module; the quantum key distribution engine is also communicated with the vehicle-end quantum communication unit and the quantum secret server engine respectively;

and establishing communication connection between vehicles, between the vehicles and affiliated manufacturers and between manufacturers by using the cloud scheduling platform.

Preferably, a quantum key generated by the vehicle-end quantum random number generator of the vehicle, namely, a vehicle-end quantum key, is used as a session key of the vehicle, and is used for encrypting interaction information in communication connections between the vehicles and affiliated manufacturers.

Preferably, a quantum key generated by a manufacturer quantum random number generator of a manufacturer is used as a charging quantum key of the vehicle, the charging quantum key is pre-charged in a vehicle-end service platform of the corresponding vehicle, and is synchronously stored in a manufacturer quantum key management module of the manufacturer and a cloud quantum key management module of a cloud scheduling platform; the charging quantum key is used for encrypting the vehicle-end quantum key in communication connection between the vehicle and the manufacturer and between the vehicle and the vehicle.

Preferably, the specific process of establishing the communication connection between the vehicle and the manufacturer is as follows:

s1, when a vehicle c leaves a factory, a manufacturer quantum random number generator of a manufacturer a generates a corresponding quantum key for the vehicle c, namely a charging quantum key Ke, and the charging quantum key Ke is charged in a vehicle-end quantum communication unit of the vehicle c; simultaneously storing the charge quantum key Ke of the vehicle c in a manufacturer quantum key management module; the charging quantum key Ke of the vehicle c is sent to the cloud scheduling platform through the quantum secret server engine, and after the quantum key distribution engine receives the charging quantum key Ke of the vehicle c, the charging quantum key Ke of the vehicle c is stored in the cloud quantum key management module;

s2, establishing communication connection between the vehicle c and the manufacturer a by using the cloud scheduling platform, wherein the communication connection is as follows:

s21, generating a vehicle-end quantum key Kc by a vehicle-end quantum random number generator of the vehicle c, and sending the vehicle-end quantum key Kc to a vehicle-end quantum communication unit; the vehicle-end quantum communication unit encrypts a vehicle-end quantum key Kc by using a charge quantum key Ke of a vehicle c to obtain encrypted information Ke [ Kc ];

s22, the vehicle-end quantum communication unit sends the encrypted information Ke [ Kc ] to a cloud dispatching platform, and a quantum key distribution engine of the cloud dispatching platform forwards the encrypted information Ke [ Kc ] to a manufacturer a;

s23, after receiving the encrypted information Ke [ Kc ], the quantum cryptography engine of the manufacturer a decrypts the encrypted information by using the charge quantum key Ke of the vehicle c stored in the manufacturer quantum key management module to obtain decrypted information, namely, a vehicle end quantum key Kc of the vehicle c, and correspondingly stores the vehicle end quantum key Kc of the vehicle c in the manufacturer quantum key management module;

s24, information interaction is carried out between the vehicle c and the affiliated manufacturer a based on the vehicle end quantum key Kc of the vehicle c, and the information interaction comprises the following steps:

a quantum cryptography engine of a manufacturer a encrypts application service information Ma generated by the Internet of vehicles application server by using a vehicle-end quantum key Kc of a vehicle c, and sends the encrypted information, namely Kc [ Ma ], to a cloud dispatching platform; the quantum key distribution engine of the cloud scheduling platform forwards the encrypted information Kc [ Ma ] to the corresponding vehicle c; after receiving the encrypted information Kc [ Ma ], the vehicle-end quantum communication unit of the vehicle c decrypts by using the vehicle-end quantum key Kc to obtain decrypted information, namely application service information Ma issued by the internet-of-vehicles application server;

the vehicle-end quantum communication unit encrypts the information Mc of the vehicle by using a vehicle-end quantum key Kc and sends the encrypted information Kc [ Mc ] to the cloud dispatching platform; the quantum key distribution engine of the cloud scheduling platform forwards the encrypted information Kc [ Mc ] to the manufacturer a; after receiving the encrypted information Kc [ Mc ], the quantum cryptography engine of the manufacturer a decrypts the information by using the vehicle-end quantum key Kc of the vehicle c to obtain the decrypted information, i.e., the vehicle information Mc.

Preferably, the vehicle c1 and the vehicle c2 belong to different manufacturers, wherein the vehicle c1 belongs to the manufacturer a1, and the vehicle c1 and the manufacturer a1 have established communication connection; the vehicle c2 belongs to the manufacturer a2, and the vehicle c2 and the manufacturer a2 establish communication connection;

the cloud dispatching platform is used for establishing communication connection between the vehicle c1 and the vehicle c2, and the communication connection is as follows:

s31, the vehicle c1 sends a request for accessing the vehicle c2 to a cloud scheduling platform; after receiving the request, the quantum key distribution engine of the cloud scheduling platform forwards the request to a manufacturer a2 to which the vehicle c2 belongs;

s32, a manufacturer quantum key management module of the manufacturer a2 stores a charging quantum key Ke2 and a vehicle end quantum key Kc2 of the vehicle c2; after the quantum cryptography engine of the manufacturer a2 receives the request, the quantum cryptography engine encrypts a vehicle end quantum key Kc2 of the vehicle c2 by using a charging quantum key Ke2 of the vehicle c2 to obtain encrypted information Ke2[ Kc2], and sends the encrypted information Ke2[ Kc2] to the cloud scheduling platform;

s33, the cloud quantum key management module of the cloud dispatching platform stores the charging quantum key Ke2 of the vehicle c2 and the charging quantum key Ke1 of the vehicle c1; after receiving the encrypted information Ke2[ Kc2], a quantum key distribution engine of the cloud scheduling platform decrypts the encrypted information Ke2[ Kc2] by using a charge quantum key Ke2 of the vehicle c2 to obtain a vehicle-end quantum key Kc2 of the vehicle c2; the quantum key distribution engine encrypts a vehicle end quantum key Kc2 of the vehicle c2 by using a charging quantum key Ke1 of the vehicle c1 to obtain encrypted information Ke1[ Kc2], and sends the encrypted information Ke1[ Kc2] to the vehicle c1;

s34, after the vehicle-end quantum communication unit of the vehicle c1 receives the encrypted information Ke1[ Kc2], decrypting the encrypted information Ke1[ Kc2] by using the charging quantum key Ke1 of the vehicle c1 to obtain decrypted information, namely the vehicle-end quantum key Kc2 of the vehicle c2;

s35, the information interaction is carried out between the vehicle c1 and the vehicle c2 based on the vehicle end quantum key Kc2 of the vehicle c2, and the information interaction comprises the following steps:

the vehicle end quantum communication unit of the vehicle c1 encrypts information Mc1 of the vehicle c1 by using a vehicle end quantum key Kc2 of the vehicle c2, and sends the encrypted information Kc2[ Mc1] to the cloud dispatching platform; the quantum key distribution engine of the cloud dispatching platform forwards the encrypted information Kc2[ Mc1] to the vehicle c2; after receiving the encrypted information Kc2[ Mc1], the vehicle-end quantum communication unit of the vehicle c2 decrypts the encrypted information Kc2[ Mc1] by using the vehicle-end quantum key Kc2 of the vehicle c2 to obtain decrypted information, namely the information Mc1 of the vehicle c1;

the vehicle end quantum communication unit of the vehicle c2 encrypts information Mc2 of the vehicle c2 by using a vehicle end quantum key Kc2 of the vehicle c2, and sends the encrypted information Kc2[ Mc2] to the cloud dispatching platform; the quantum key distribution engine of the cloud dispatching platform forwards the encrypted information Kc2[ Mc2] to the vehicle c1; after receiving the encrypted information Kc2[ Mc2], the vehicle-end quantum communication unit of the vehicle c1 decrypts the encrypted information Kc2[ Mc2] by using the vehicle-end quantum key Kc2 of the vehicle c2, and obtains the decrypted information, that is, the information Mc2 of the vehicle c2.

Preferably, a certain amount of charging quantum keys are charged into a vehicle-side service platform of a corresponding vehicle and are synchronously stored in a manufacturer quantum key management module of a manufacturer and a cloud quantum key management module of a cloud scheduling platform;

under the set condition, the charging quantum keys in the vehicle-side service platform, the manufacturer quantum key management module and the cloud quantum key management module are periodically and synchronously updated.

Preferably, the quantum secret server engine of the manufacturer and the quantum key distribution engine of the cloud scheduling platform are connected through a dedicated line.

Preferably, the quantum cryptography engine of the manufacturer and the quantum key distribution engine of the cloud scheduling platform communicate with each other by using a BB84 protocol, and the two negotiate by using the BB84 protocol to generate a manufacturer quantum key as a session key of the manufacturer, which is used for encrypting interaction information in communication connection between the manufacturer and the manufacturer.

Preferably, the cloud scheduling platform is used for establishing communication connection between the manufacturer a1 and the manufacturer a2, and the communication connection is specifically as follows:

s41, the manufacturer a1 sends a request for accessing the manufacturer a2 to the cloud scheduling platform; after receiving the request, a quantum key distribution engine of the cloud scheduling platform forwards the request to a manufacturer a2;

s42, a quantum secret key Ka2 of the manufacturer a2 is generated between the quantum secret engine of the manufacturer a2 and the quantum secret key distribution engine of the cloud scheduling platform through BB84 protocol negotiation; the manufacturer a2 stores the manufacturer quantum key Ka2 in a manufacturer quantum key management module, and the cloud dispatching platform stores the manufacturer quantum key Ka2 of the manufacturer a2 in the cloud quantum key management module;

s43, the quantum key distribution engine of the cloud scheduling platform forwards the manufacturer quantum key Ka2 of the manufacturer a2 to the manufacturer a1;

s44, after the quantum cryptography engine of the manufacturer a1 receives the manufacturer quantum key Ka2 of the manufacturer a2, storing the manufacturer quantum key Ka2 of the manufacturer a2 in the manufacturer quantum key management module of the manufacturer a1;

s45, information interaction is carried out between the manufacturer a1 and the manufacturer a2 based on the manufacturer quantum key Ka2 of the manufacturer a2, and the information interaction comprises the following steps:

the method comprises the steps that an Internet-of-vehicles application server of a manufacturer a1 generates application service information Ma1, a quantum secret service engine of the manufacturer a1 encrypts the application service information Ma1 by using a manufacturer quantum key Ka2 of the manufacturer a2, and sends encrypted information Ka2[ Ma1] to a cloud dispatching platform; the quantum key distribution engine of the cloud scheduling platform forwards the encrypted information Ka2[ Ma1] to the manufacturer a2; after receiving the encrypted information Ka2[ Ma1], the quantum cryptography engine of the manufacturer a2 decrypts the encrypted information Ka2[ Ma1] by using the manufacturer quantum key Ka2 of the manufacturer a2 to obtain decrypted information, namely application service information Ma1 issued by the internet of vehicles application server of the manufacturer a1;

the method comprises the steps that an Internet-of-vehicles application server of a manufacturer a2 generates application service information Ma2, a quantum secret service engine of the manufacturer a2 encrypts the application service information Ma2 by using a manufacturer quantum key Ka2 of the manufacturer a2, and sends the encrypted information Ka2[ Ma2] to a cloud dispatching platform; the quantum key distribution engine of the cloud scheduling platform forwards the encrypted information Ka2[ Ma2] to the manufacturer a1; after receiving the encrypted information Ka2[ Ma2], the quantum cryptography engine of the manufacturer a1 decrypts the encrypted information Ka2[ Ma2] by using the manufacturer quantum key Ka2 of the manufacturer a2, and obtains decrypted information, namely application service information Ma2 issued by the car networking application server of the manufacturer a2.

Preferably, the vehicle-end service platform further comprises an electronic control unit for controlling the vehicle; the electronic control unit is in communication connection with the intelligent terminal;

the intelligent terminal comprises a communication module, a main control module and a CAN controller which are sequentially in communication connection;

the communication module is used for communicating with a vehicle end quantum communication unit; the CAN controller is used for carrying out data transmission on a CAN bus; the main control module controls the CAN controller to acquire the information of the vehicle through the CAN bus and sends the information of the vehicle to the vehicle-end quantum communication unit through the communication module; the main control module also receives the decrypted information from the vehicle-end quantum communication unit through the communication module, generates a control instruction according to the decrypted information, and then sends the control instruction to the electronic control unit through the CAN controller; and the electronic control unit correspondingly controls the vehicle according to the control instruction.

The invention has the advantages that:

(1) The invention aims to ensure the safety and integrity of interactive information in a vehicle cloud service system in a vehicle networking environment. In the car cloud service system, the quantum key technology is introduced, and the true random number generated based on the quantum physical principle or the quantum effect is used to generate a safer quantum key which can resist quantum attack. In the vehicle cloud service system, the safe encrypted communication between different vehicles and different manufacturers is ensured through the cloud scheduling platform.

(2) In the vehicle cloud service system, the session key used for vehicle communication is a vehicle-end quantum key generated in the vehicle, the mode can ensure that the generation rate of the vehicle session key is enough for vehicle communication, and meanwhile, the manufacturer cloud service platform of the manufacturer only needs to store the session keys of different vehicles, so that the pressure and the expense for generating the quantum key by the manufacturer cloud service platform are reduced. If the session keys used for vehicle communication are all produced by a manufacturer cloud service platform or a cloud dispatching platform, when the number of accessed vehicles is large, the quantum key generation pressure of the manufacturer cloud service platform or the cloud dispatching platform is large due to the limitation of the generation rate of the current quantum key. Therefore, in the case of a huge number of access vehicles or the session key needs to be updated rapidly (for example, to ensure safety, the session key uses a one-time pad updating strategy), the invention uses the vehicle-end quantum key generated inside the vehicle as the session key during vehicle communication, so that the session key of the vehicle can be self-sufficient and the generation rate thereof can be ensured.

(3) In the vehicle cloud service system, the quantum key generated by the manufacturer quantum random number generator of the manufacturer is used as the charging quantum key of the vehicle, is pre-charged in the corresponding vehicle and is synchronously stored in the manufacturer and the cloud dispatching platform, and the session key of the vehicle is encrypted in the communication connection between the vehicle and the manufacturer and between the vehicle and the vehicle by using the charging quantum key of the vehicle, so that all interaction processes related to data safety are encrypted and protected by the quantum key, all interaction processes in the vehicle networking environment are ensured to be encrypted and protected by the quantum key, and the safety of information interaction is further ensured.

(4) The vehicle cloud service system provided by the invention comprises the generation, management and use processes of the quantum key, ensures that all interactive information in the vehicle networking environment can be protected by the encryption of the quantum key, and ensures the safety of information interaction.

(5) In the vehicle cloud service system, the cloud scheduling platform can ensure that different vehicles of the same manufacturer can communicate with each other, so that the vehicles can obtain the vehicle networking application service provided by the manufacturer, and the manufacturer can also obtain the information of the corresponding vehicle; the cloud dispatching platform can also ensure that communication can be carried out between different manufacturers and between different vehicles of different manufacturers, so that the vehicles can also obtain the Internet of vehicles application services provided by other manufacturers, and the manufacturers can also obtain the information of other vehicles; therefore, each participant can perform safe information interaction in the car networking environment.

(6) In the whole car networking environment, each traffic participant can safely and fully obtain road traffic information, so that efficient traffic management is guaranteed, traffic passing efficiency is improved, and hidden dangers of traffic jam and traffic accidents are reduced.

(7) According to the vehicle cloud service system, a certain amount of charging quantum keys are charged into the vehicle and are synchronously stored in the manufacturer and the cloud scheduling platform, and the charging quantum keys in the vehicle, the manufacturer and the cloud scheduling platform are periodically and synchronously updated under corresponding conditions, so that the safety of the system is ensured, and the safety of information interaction is further ensured.

(8) In the vehicle cloud service system, a manufacturer is connected with a cloud scheduling platform through a special line (such as an optical fiber), a set of quantum key distribution system based on a BB84 protocol is erected and used for negotiating to generate a manufacturer quantum key of the manufacturer and encrypting and transmitting interactive information between manufacturers, the BB84 protocol is used for ensuring wired connection in the forms of the optical fiber and the like, and the keys are negotiated and generated by transmitting photon information, so that the advantage of using the BB84 protocol is that two parties can negotiate to generate the manufacturer quantum key in real time, the two parties can directly calculate and generate and obtain the manufacturer quantum key, and the manufacturer quantum key is transmitted to the other party without being generated by one party, so that the transmission process of the manufacturer quantum key is reduced, and the manufacturer quantum key is safer.

(9) The BB84 protocol is established between the manufacturer and the cloud dispatching platform, but not between the manufacturer and the manufacturer, so that the management is convenient. If the BB84 protocol is established by wired connection between manufacturers, if the whole system is added to a new manufacturer, all manufacturers need to construct a wired line for connecting the new manufacturer's server, which is troublesome. According to the invention, due to the existence of the cloud dispatching platform and the wired connection between the cloud dispatching platform and the manufacturer, only one wired connection is required to be established between the new manufacturer and the cloud dispatching platform, so that the management is convenient.

Drawings

Fig. 1 is an architecture diagram of a car cloud service system based on quantum security according to the present invention.

Fig. 2 is an architecture diagram of the intelligent terminal on the vehicle, i.e., the T-BOX, in the system of the present invention.

Fig. 3 is a flowchart of a processing method of the quantum security-based vehicle cloud service system according to the present invention.

Fig. 4 is a schematic data transmission diagram of the vehicle cloud service system of the present invention.

FIG. 5 is a flowchart of a method for establishing a communication link between a vehicle and a manufacturer.

FIG. 6 is a flow chart of a method for establishing a communication link between a vehicle and a vehicle.

Fig. 7 is an architecture diagram of a quantum key distribution system based on a BB84 protocol between a manufacturer and a cloud scheduling platform.

FIG. 8 is a flowchart of a method for establishing a communication link between a vendor and a manufacturer.

Description of reference numerals:

1-vehicle end service platform; 11-a vehicle-end quantum random number generator; 12-an electronic control unit; 13-an intelligent terminal; 14-a vehicle end quantum communication unit; 131-a communication module; 132-a master control module; 133-CAN controller 133;

2-a cloud scheduling platform; 21-cloud quantum key management module; 22-a quantum key distribution engine; 221-a photon receiver; 222-a key reception manager;

3-vendor cloud service platform; 31 manufacturer quantum random number generator; 32-vendor quantum key management module; 33-quantum tight servo engine; 34-a car networking application server; 331-a photon emitter; 332-key transmission manager.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

As shown in fig. 1, 2 and 4, a quantum security-based vehicle cloud service system mainly comprises a vehicle-end service platform 1, a cloud scheduling platform 2 and manufacturer cloud service platforms 3 of various manufacturers of various vehicles.

The vehicle-end service platform 1 mainly comprises a vehicle-end quantum random number generator 11, an ECU (electronic control Unit) 12, a T-BOX (Intelligent terminal) 13 and a vehicle-end quantum communication unit 14.

The vehicle-end quantum random number generator 11 generates a true random number based on a quantum physical principle or a quantum effect, further generates a quantum key through the generated true random number, and sends the quantum key to the vehicle-end quantum communication unit 14.

The ECU, i.e., the electronic control unit 12, is used to control the electronic system of the vehicle. The ECU is used as a vehicle-mounted computer on a vehicle and mainly has the functions of receiving and storing sensor parameters, calculating instructions according to vehicle conditions, outputting control signals, counting system faults and the like. There are a relatively large number of electronic systems on a vehicle, for example, an engine management system, which primarily controls engine operation; a vehicle body electronic stabilization system which mainly controls vehicle body stabilization; a battery management system that mainly manages a vehicle power battery; electric power steering, which mainly assists the driver in steering; a transmission control unit that mainly controls gear switching; there are also many systems with ECUs.

The intelligent terminal 13 acquires information of the vehicle through the CAN bus, and sends the information of the vehicle to the vehicle-end quantum communication unit 14 for information encryption; the intelligent terminal 13 is in communication connection with the electronic control unit 12; the intelligent terminal 13 further sends a control command to the electronic control unit 12 through the CAN bus, and the electronic control unit 12 performs a corresponding task according to the control command, that is, performs a corresponding control on an electronic system of the vehicle, for example, controls acceleration and deceleration, braking, steering, and the like of the vehicle.

The vehicle-end quantum communication unit 14 is used for encrypting and decrypting information, and the vehicle-end quantum communication unit 14 is respectively in communication connection with the vehicle-end quantum random number generator 11 and the intelligent terminal 13; the vehicle-end quantum communication unit 14 is also in communication with the cloud scheduling platform 2. The vehicle-end quantum communication unit 14 encrypts the information of the vehicle through the quantum key, and sends the encrypted information to the cloud scheduling platform 2. The vehicle-end quantum communication unit 14 further receives the encrypted information sent by the cloud scheduling platform 2, and the vehicle-end quantum communication unit 14 decrypts the encrypted information through the quantum key to obtain the decrypted information. The vehicle-end quantum communication unit 14 transmits the decrypted information to the intelligent terminal 13. The intelligent terminal 13 generates a control instruction according to the decrypted information, and sends the control instruction to the electronic control unit 12 through the CAN bus.

As shown in fig. 2, the intelligent terminal 13 is mainly composed of a communication module 131, a main control module 132, and a CAN controller 133, which are sequentially connected in a communication manner. The main control module 132 controls the CAN controller 133 to obtain information of the vehicle through the CAN bus, and sends the information of the vehicle to the vehicle-end quantum communication unit 14 through the communication module 131. The main control module 132 also receives the decrypted information from the vehicle-side quantum communication unit 14 through the communication module 131, generates a control instruction according to the decrypted information, and then sends the control instruction to the electronic control unit 12 through the CAN controller 133. The CAN controller 133 is responsible for the exchange of information over the CAN bus. The communication module 131 is responsible for communicating with the vehicle-end quantum communication unit 14.

The manufacturer cloud service platform 3 is composed of a manufacturer quantum random number generator 31, a manufacturer quantum key management module 32, a quantum secret server engine 33 and an internet of vehicles application server 34.

The manufacturer quantum random number generator 31 generates a true random number based on a quantum physical principle or a quantum effect, and further generates a quantum key through the generated true random number; the vendor quantum key management module 32 is used for managing quantum keys; the quantum cryptography engine 33 is used for encrypting and decrypting information; the internet of vehicles application server 34 is used to provide internet of vehicles services and generate application service information. The quantum cryptography engine 33 is in communication connection with the manufacturer quantum random number generator 31, the manufacturer quantum key management module 32 and the internet-of-vehicles application server 34 respectively; the quantum cryptography engine 33 is also in communication with the cloud scheduling platform 2 and the internet of vehicles application server 34, respectively. The quantum cryptography engine 33 receives the encrypted information sent by the cloud scheduling platform 2, decrypts the encrypted information through a quantum key to obtain decrypted information, and sends the decrypted information to the internet-of-vehicles application server 34. The car networking application server 34 generates relevant application service information and sends the application service information to the quantum cryptography engine 33, and the quantum cryptography engine 33 encrypts the application service information through a quantum key and sends the encrypted information to the cloud scheduling platform 2.

The cloud scheduling platform 2 is composed of a cloud quantum key management module 21 and a quantum key distribution engine 22. The quantum key management module 21 is configured to manage a quantum key; the quantum key distribution engine 22 is used for encrypting and decrypting information; the quantum key distribution engine 22 is in communication connection with the quantum key management module 21; the quantum key distribution engine 22 is also in communication with the car-end quantum communication unit 14 and the quantum cryptography engine 33. As shown in fig. 4, the cloud scheduling platform 2 is configured to establish communication connections between the vehicle-side service platform 1 of the vehicle and the manufacturer cloud service platforms 3 of the manufacturer, between the cloud service platforms 3 of different manufacturers, and between the vehicle-side service platforms 1 of different vehicles in an information interaction scenario, including distribution of quantum keys and information interaction, and ensure security and fluency of the information interaction.

The quantum key generated by the vehicle-end quantum random number generator 11 of the vehicle, namely the vehicle-end quantum key, is used as a session key of the vehicle, and is used for encrypting interaction information in communication connection between vehicles and between the vehicles and affiliated manufacturers.

Quantum keys generated by a manufacturer quantum random number generator 31 of a manufacturer are used as charging quantum keys of the vehicles, the charging quantum keys are pre-charged in the vehicle-end service platform 1 of the corresponding vehicle and are synchronously stored in a manufacturer quantum key management module 32 of the manufacturer and a cloud quantum key management module 21 of a cloud dispatching platform 2; the charging quantum key is used for encrypting the vehicle-end quantum key in communication connection between the vehicle and the manufacturer and between the vehicle and the vehicle.

As shown in fig. 3, the processing method of the car cloud service system based on quantum security of the present invention is specifically as follows:

s1, when a vehicle c is produced and delivered from a factory, a manufacturer quantum random number generator 31 of a manufacturer a to which the vehicle c belongs generates a corresponding quantum key, namely a charging quantum key Ke, for the vehicle c, and the charging quantum key Ke is charged, namely pre-stored in a vehicle-end quantum communication unit 14 of the vehicle c. At the same time, the charge quantum key Ke for vehicle c is stored in the vendor quantum key management module 32; and the quantum key distribution engine 22 of the cloud scheduling platform 2 receives the charge quantum key Ke of the vehicle c and stores the charge quantum key Ke of the vehicle c in the cloud quantum key management module 21.

A certain amount of charging quantum keys Ke are charged in the vehicle-end quantum communication unit 14 of the corresponding vehicle, and are synchronously stored in the manufacturer quantum key management module 32 of the manufacturer and the cloud quantum key management module 21 of the cloud dispatching platform 2; under the set condition, the charging quantum key Ke in the vehicle-end quantum communication unit 14, the manufacturer quantum key management module 32 and the cloud quantum key management module 21 is periodically and synchronously updated.

In the invention, a certain amount of charging quantum keys Ke can be charged into the vehicle quantum communication unit 14 in a wired connection mode on a production line in the production process of vehicles on the production line, and the charging information can be recorded by the cloud scheduling platform 2 and the manufacturer cloud service platform 3. Alternatively, the vehicle may be refilled at a designated maintenance site when the quantum key Ke is refilled, i.e., will be used up, and a certain amount of the refilled quantum key Ke may be refilled into the vehicle at one time, similar to the vehicle being refilled, for example, at one time, by estimating the amount of use of the refilled quantum key Ke required for a period of time during the vehicle maintenance.

S2, as shown in fig. 5, after the vehicle c leaves the factory and gets on the way, a communication connection is established between the vehicle c and the manufacturer a, and the specific manner is as follows:

s21, the vehicle-end quantum random number generator 11 of the vehicle c generates a vehicle-end quantum key Kc, namely a session key, and sends the vehicle-end quantum key Kc to the vehicle-end quantum communication unit 14; the vehicle-end quantum communication unit 14 encrypts the vehicle-end quantum key Kc by using the charge quantum key Ke of the vehicle c, to obtain encrypted information, namely Ke [ Kc ].

S22, the vehicle-end quantum communication unit 14 sends the encrypted information Ke [ Kc ] to the cloud dispatching platform 2, and the quantum key distribution engine 22 of the cloud dispatching platform 2 forwards the encrypted information Ke [ Kc ] to the manufacturer a.

S23, after receiving the encrypted information Ke [ Kc ], the quantum cryptography engine 33 of the manufacturer a decrypts the encrypted information by using the charging quantum key Ke of the vehicle c stored in the manufacturer quantum key management module 32 to obtain decrypted information, i.e., the vehicle-end quantum key Kc of the vehicle c, and stores the vehicle-end quantum key Kc of the vehicle c in the manufacturer quantum key management module 32 correspondingly.

the internet of vehicles application server 34 of the manufacturer a generates related application service information Ma, the quantum cryptography engine 33 encrypts the application service information Ma generated by the internet of vehicles application server 34 by using the vehicle-end quantum key Kc of the vehicle c, and sends the encrypted information, namely Kc [ Ma ], to the cloud scheduling platform 2; the quantum key distribution engine 22 of the cloud scheduling platform 2 forwards the encrypted information Kc [ Ma ] to the corresponding vehicle c; after receiving the encrypted information Kc [ Ma ], the vehicle-end quantum communication unit 14 of the vehicle c decrypts the encrypted information by using the vehicle-end quantum key Kc to obtain decrypted information, that is, application service information Ma issued by the internet-of-vehicles application server 34, and sends the application service information Ma to the intelligent terminal 13, the intelligent terminal 13 generates a related control instruction according to the application service information Ma, and sends the control instruction to the electronic control unit 12 through the CAN bus, and the electronic control unit 12 executes a corresponding task according to the control instruction;

the intelligent terminal 13 of the vehicle c acquires the information Mc of the vehicle through the CAN bus and sends the information Mc of the vehicle to the vehicle-end quantum communication unit 14; the vehicle-end quantum communication unit 14 encrypts the information Mc of the vehicle by using the vehicle-end quantum key Kc, and sends the encrypted information Kc [ Mc ] to the cloud scheduling platform 2; the quantum key distribution engine 22 of the cloud scheduling platform 2 forwards the encrypted information Kc [ Mc ] to the manufacturer a; after receiving the encrypted information Kc [ Mc ], the quantum cryptography engine 33 of the manufacturer a decrypts the encrypted information Kc [ Mc ] by using the vehicle-end quantum key Kc of the vehicle c to obtain the decrypted information, i.e., the vehicle information Mc, and sends the vehicle information Mc to the internet-of-vehicles application server 34.

For the home vehicle, after acquiring the speed and position information of the vehicle, the car networking application server 34 may issue some application service information related to driving safety, such as overspeed warning and reverse driving warning, and may also issue some application service information related to life services, such as vehicle state check, road rescue, navigation, and the like. For commercial vehicles, the car networking application server 34 may issue some application service information related to vehicle operation, such as vehicle scheduling, monitoring vehicle status, etc. The invention can carry out encryption protection on the Internet of vehicles service which needs to upload and send information. And the vehicle end quantum key of the vehicle is updatable as a session key, and the updating mode can adopt a one-time-pad updating strategy, namely, the session key is updated once every time the vehicle is in communication connection with the affiliated manufacturer.

S3, as shown in fig. 6, a communication connection is established between the vehicle c1 and the vehicle c2, specifically as follows:

the vehicle c1 and the vehicle c2 belong to different manufacturers respectively, wherein the vehicle c1 belongs to the manufacturer a1, and the vehicle c1 and the manufacturer a1 establish communication connection; the vehicle c2 belongs to the manufacturer a2, and the vehicle c2 has already established a communication connection with the manufacturer a2.

S31, the vehicle c1 sends a request for accessing the vehicle c2 to the cloud dispatching platform 2; after receiving the request, the quantum key distribution engine 22 of the cloud scheduling platform 2 forwards the request to the manufacturer a2 of the vehicle c2.

S32, a manufacturer quantum key management module 32 of the manufacturer a2 stores a charging quantum key Ke2 and a vehicle end quantum key Kc2 of the vehicle c2; after the quantum cryptography engine 33 of the manufacturer a2 receives the request, the quantum cryptography engine 33 encrypts the vehicle-end quantum key Kc2 of the vehicle c2 by using the charge quantum key Ke2 of the vehicle c2 to obtain encrypted information Ke2[ Kc2], and sends the encrypted information Ke2[ Kc2] to the cloud scheduling platform 2;

the vehicle-end quantum key Kc2 of the vehicle c2 is stored in the manufacturer quantum key management module 32 of the manufacturer a2 when the vehicle c2 establishes a communication connection with the manufacturer a2, that is, when the step S23 is performed. Moreover, the vehicle-end quantum key Kc2 of the vehicle c2 is updatable as a session key, and the updating manner may adopt a one-time-pad updating strategy, that is, the session key is updated once every time the vehicle communicates with the manufacturer to which the vehicle belongs.

S33, the cloud quantum key management module 21 of the cloud scheduling platform 2 already stores the charging quantum key Ke2 of the vehicle c2 and the charging quantum key Ke1 of the vehicle c1; after receiving the encrypted information Ke2[ Kc2], the quantum key distribution engine 22 of the cloud scheduling platform 2 decrypts the encrypted information Ke2[ Kc2] by using the charge quantum key Ke2 of the vehicle c2 to obtain a vehicle-end quantum key Kc2 of the vehicle c2; the quantum key distribution engine 22 encrypts the vehicle-side quantum key Kc2 of the vehicle c2 by using the charging quantum key Ke1 of the vehicle c1 to obtain encrypted information Ke1[ Kc2], and sends the encrypted information Ke1[ Kc2] to the vehicle c1.

Meanwhile, the quantum key distribution engine 22 stores the vehicle-side quantum key Kc2 of the vehicle c2 in the cloud-side quantum key management module 21, so that when other vehicles also request to access the vehicle c2 in the same time period, the vehicle-side quantum key Kc2 of the vehicle c2 can be rapidly issued.

S34, after receiving the encrypted information Ke1[ Kc2], the vehicle-side quantum communication unit 14 of the vehicle c1 decrypts the encrypted information Ke1[ Kc2] by using the charging quantum key Ke1 of the vehicle c1, and obtains the vehicle-side quantum key Kc2 of the vehicle c2, which is the decrypted information.

S35, performing information interaction between the vehicle c1 and the vehicle c2 based on the vehicle end quantum key Kc2 of the vehicle c2, including:

the intelligent terminal 13 of the vehicle c1 acquires the information Mc1 of the vehicle c1 through the CAN bus and sends the information Mc1 to the vehicle end quantum communication unit 14 of the vehicle c1; the vehicle-end quantum communication unit 14 of the vehicle c1 encrypts the information Mc1 of the vehicle c1 by using the vehicle-end quantum key Kc2 of the vehicle c2, and sends the encrypted information Kc2[ Mc1] to the cloud scheduling platform 2; the quantum key distribution engine 22 of the cloud scheduling platform 2 forwards the encrypted information Kc2[ Mc1] to the vehicle c2; after receiving the encrypted information Kc2[ Mc1], the vehicle-end quantum communication unit 14 of the vehicle c2 decrypts the encrypted information Kc2[ Mc1] by using the vehicle-end quantum key Kc2 of the vehicle c2 to obtain the decrypted information, i.e. the information Mc1 of the vehicle c1;

the intelligent terminal 13 of the vehicle c2 acquires the information Mc2 of the vehicle c2 through the CAN bus and sends the information Mc2 to the vehicle end quantum communication unit 14 of the vehicle c2; the vehicle-end quantum communication unit 14 of the vehicle c2 encrypts the information Mc2 of the vehicle c2 by using the vehicle-end quantum key Kc2 of the vehicle c2, and sends the encrypted information Kc2[ Mc2] to the cloud scheduling platform 2; the quantum key distribution engine 22 of the cloud scheduling platform 2 forwards the encrypted information Kc2[ Mc2] to the vehicle c1; after receiving the encrypted information Kc2[ Mc2], the vehicle-end quantum communication unit 14 of the vehicle c1 decrypts the encrypted information Kc2[ Mc2] by using the vehicle-end quantum key Kc2 of the vehicle c2, and obtains the information Mc2 of the vehicle c2, which is the decrypted information.

Since the vehicle c1 makes an access request to the vehicle c2, the vehicle c1 and the vehicle c2 may exchange information with each other only by using the vehicle end quantum key Kc2 of the vehicle c2 as a session key.

In the invention, the quantum secret service engine 33 of the manufacturer cloud service platform 3 and the quantum key distribution engine 22 of the cloud scheduling platform 2 are connected through a special line (such as an optical fiber), a set of quantum key distribution system based on a BB84 protocol is erected between the two engines, the existing BB84 protocol is used for communication, and the main functions of the system are to negotiate to generate manufacturer quantum keys of manufacturers and encrypt and transmit interactive information between the manufacturers.

As shown in fig. 7, the quantum key distribution system based on BB84 protocol includes: the optical quantum transmitter 331 and the key transmission manager 332 in the quantum key engine 33 at the transmitting side, and the optical quantum receiver 221 and the key reception manager 222 in the quantum key distribution engine 22 at the receiving side.

The optical quantum transmitter 331 of the sender is configured to prepare an optical quantum with a polarization state, generate a corresponding key sequence according to polarization information of the optical quantum, and send the key sequence to the key transmission manager 332, and transmit the optical quantum to the receiver through a quantum channel, that is, an optical fiber. The light quantum receiver 221 on the receiving side receives the light quantum through the quantum channel and by using different polarizing plates, and similarly, the light quantum receiver 221 generates a corresponding key sequence according to the polarization information of the light quantum and sends the key sequence to the key reception manager 222. The key reception manager 222 of the receiving side transmits the polarizer used by the optical quantum receiver 221 and the generated partial key to the transmitting side through a classical channel (information transmitted in the classical channel cannot know key information even if intercepted), such as a network channel. The key transmission manager 332 of the sender determines whether the adopted polarizer is correct or not according to the polarization information of the optical quantum, calculates the bit error rate of the key sequence, and sends the determination result and the calculation result to the receiver through the classical channel. The sender and receiver discard the measurement of the wrong polarizer and retain the measurement of the correct polarizer. Repeating the above process for many times, the key sequence with both sides consistent can be generated.

After the key sequences which are consistent with each other are generated, the sender publicly develops a part of keys to the receiver through a classical channel for comparison (the process of comparing the polaroids with the part of keys by the two parties is a negotiation process), if the error rate of the keys is within an error allowable range, the keys are regarded as safe, the two parties reserve the rest keys for encrypted communication, and the rest keys are manufacturer quantum keys generated by negotiation. If the error rate is too high, it indicates that there is a change of polarization information caused by third party eavesdropping, and the two parties abandon the key sequence and send out an eavesdropping alarm.

The BB84 protocol is used for ensuring wired connection in the form of optical fibers and the like, a secret key is generated through negotiation by transmitting photon information, although wired connection is formed between a manufacturer and a cloud scheduling platform, the manufacturer and the cloud scheduling platform are servers and cannot move randomly, and therefore inconvenience is avoided due to wired connection between the two parties. The double-transmission method can directly calculate, generate and obtain the manufacturer quantum key, and does not need one party to generate the manufacturer quantum key and then transmit the manufacturer quantum key to the other party, so that the key transmission process is omitted, and the manufacturer quantum key is safer.

The BB84 protocol is used for generating a session key for communication between vendors, and can be used for encrypted transmission of information between vendors and a cloud scheduling platform. However, once encrypted communication with a vehicle is involved, the BB84 protocol cannot be used, because the vehicle cannot establish a wired connection with a manufacturer or a cloud scheduling platform during driving, a session key, i.e., a vehicle-end quantum key, used for vehicle communication can only be generated by the vehicle interior, but cannot be generated by the BB84 protocol, the vehicle transmits the vehicle-end quantum key to the cloud or the manufacturer, and the charging of the quantum key is used for ensuring the transmission security of the vehicle-end quantum key. The information encrypted and transmitted by using the BB84 protocol may be a charging quantum key or a vehicle end quantum key of a vehicle, or may be interactive information between manufacturers, between manufacturers and a cloud, for example, after a manufacturer knows that a traffic jam is caused by a traffic accident on a certain road section, the manufacturer encrypts and transmits the information of the traffic jam road section to other manufacturers.

The BB84 protocol is established between the manufacturer and the cloud dispatching platform, but not between the manufacturer and the manufacturer, so that the management is convenient. If the BB84 protocol is established by wired connection between manufacturers, if the whole system is added to a new manufacturer, all manufacturers need to construct a wired line for connecting the new manufacturer's server, which is troublesome. According to the invention, due to the existence of the cloud dispatching platform and the wired connection between the cloud dispatching platform and the manufacturer, only one wired connection needs to be established between the new manufacturer and the cloud dispatching platform, so that the management is convenient.

As shown in fig. 8, the manufacturer a1 and the manufacturer a2 establish a communication connection, in the following manner:

s41, the manufacturer a1 sends a request for accessing the manufacturer a2 to the cloud dispatching platform 2; after receiving the request, the quantum key distribution engine 22 of the cloud scheduling platform 2 forwards the request to the manufacturer a2.

S42, a quantum secret key Ka2 of the manufacturer a2 is generated between the quantum secret server engine 33 of the manufacturer a2 and the quantum secret key distribution engine 22 of the cloud scheduling platform 2 through BB84 protocol negotiation; the manufacturer a2 stores the manufacturer quantum key Ka2 in the manufacturer quantum key management module 32, and the cloud scheduling platform 2 stores the manufacturer quantum key Ka2 of the manufacturer a2 in the cloud quantum key management module 21.

The manufacturer quantum key is used as a session key for communication connection between manufacturers.

S43, the quantum key distribution engine 22 of the cloud scheduling platform 2 forwards the manufacturer quantum key Ka2 of the manufacturer a2 to the manufacturer a1.

S44, after the quantum cryptography engine 33 of the manufacturer a1 receives the manufacturer quantum key Ka2 of the manufacturer a2, the manufacturer quantum key Ka2 of the manufacturer a2 is stored in the manufacturer quantum key management module 32 of the manufacturer a1.

the car networking application server 34 of the manufacturer a1 generates related application service information Ma1, the quantum cryptography engine 33 of the manufacturer a1 encrypts the application service information Ma1 by using the manufacturer quantum key Ka2 of the manufacturer a2, and sends the encrypted information, namely Ka2[ Ma1], to the cloud scheduling platform 2; the quantum key distribution engine 22 of the cloud scheduling platform 2 forwards the encrypted information Ka2[ Ma1] to the manufacturer a2; after receiving the encrypted information Ka2[ Ma1], the quantum cryptography engine 33 of the manufacturer a2 decrypts the encrypted information Ka2[ Ma1] by using the manufacturer quantum key Ka2 of the manufacturer a2 to obtain decrypted information, namely application service information Ma1 issued by the internet-of-vehicles application server 34 of the manufacturer a1, and sends the application service information Ma1 to the internet-of-vehicles application server 34 of the manufacturer a2;

the car networking application server 34 of the manufacturer a2 generates related application service information Ma2, the quantum cryptography engine 33 of the manufacturer a2 encrypts the application service information Ma2 by using the manufacturer quantum key Ka2 of the manufacturer a2, and sends the encrypted information, namely Ka2[ Ma2], to the cloud scheduling platform 2; the quantum key distribution engine 22 of the cloud scheduling platform 2 forwards the encrypted information Ka2[ Ma2] to the manufacturer a1; after receiving the encrypted information Ka2[ Ma2], the quantum cryptography engine 33 of the manufacturer a1 decrypts the encrypted information Ka2[ Ma2] by using the manufacturer quantum key Ka2 of the manufacturer a2, obtains decrypted information, that is, application service information Ma2 issued by the car networking application server 34 of the manufacturer a2, and sends the application service information Ma2 to the car networking application server 34 of the manufacturer a1.

Since the manufacturer a1 makes an access request to the manufacturer a2, the manufacturer a1 and the manufacturer a2 only need to exchange information by using the manufacturer quantum key Ka2 of the manufacturer a2 as a session key. Moreover, the manufacturer quantum key Ka2 of the manufacturer a2 is updatable as a session key, and the updating manner may adopt a one-time-pad updating strategy, that is, the session key is updated every time the manufacturers perform communication connection.

In the embodiment, a specific scene is taken as an example to explain a specific processing process and an action of the vehicle cloud service system.

Scene one,

Suppose that: the vehicle c1 and the vehicle c2 belong to different manufacturers respectively, namely belong to a manufacturer a1 and a2 respectively, the vehicle c1 and the vehicle c2 are driven on the road respectively, and have completed the generation and distribution stages of the vehicle-end quantum key between themselves and the manufacturers belonging to them, namely steps S21-S23, and have realized the encrypted communication based on the vehicle-end quantum key between themselves and the manufacturers belonging to them, namely step S24. Meanwhile, a manufacturer quantum key management module 32 of the manufacturer a1 already stores a charging quantum key Ke1 and a vehicle end quantum key Kc1 of the vehicle c1, a manufacturer quantum key management module 32 of the manufacturer a2 already stores a charging quantum key Ke2 and a vehicle end quantum key Kc2 of the vehicle c2, and a cloud quantum key management module 21 of the cloud scheduling platform 2 already stores a charging quantum key Ke1 of the vehicle c1 and a charging quantum key Ke2 of the vehicle c2.

If the vehicle c1 has a traffic accident and causes road traffic congestion, and the vehicle c2 is about to enter the accident road section of the vehicle c1 at this time, because the V2X communication in the vehicle-road coordination is a mode with broadcast communication, the vehicles can sense the existence of the opposite side through the V2X communication, and when the vehicle c2 enters the communication range of the vehicle c1, the vehicle c1 needs to inform the vehicle c2 that the traffic accident occurs on the road section, and reminds the vehicle c2 to pay attention to avoiding.

In this case, the processing procedure of the vehicle cloud service system of the present invention is:

the vehicle c1 sends a request to the cloud dispatching platform 2, and the request for accessing the vehicle c2 requests to establish communication connection with the vehicle c2; after receiving the request, the quantum key distribution engine 22 of the cloud scheduling platform 2 sends the request to the manufacturer a1 of the vehicle c1 and the manufacturer a2 of the vehicle c2, respectively.

The quantum cryptography engine 33 of the manufacturer a1 encrypts the vehicle-end quantum key Kc1 of the vehicle c1 by using the charge quantum key Ke1 of the vehicle c1; the quantum cryptography engine 33 of the manufacturer a2 encrypts the vehicle-end quantum key Kc2 of the vehicle c2 by using the charge quantum key Ke2 of the vehicle c2; the quantum cryptography engine 33 of the manufacturer a1 and the quantum cryptography engine 33 of the manufacturer a2 respectively send encrypted information, namely, ke1[ Kc1] and Ke2[ Kc2], to the cloud scheduling platform 2.

After receiving the encrypted information Ke1[ Kc1] and Ke2[ Kc2], the quantum key distribution engine 22 of the cloud scheduling platform 2 decrypts the encrypted information Ke1[ Kc1] and Ke2[ Kc2] by using the charge quantum key Ke1 of the vehicle c1 and the charge quantum key Ke2 of the vehicle c2 stored in the cloud quantum key management module 21, respectively obtains the vehicle-end quantum key Kc1 of the vehicle c1 and the vehicle-end quantum key Kc2 of the vehicle c2, and correspondingly stores the vehicle-end quantum key Kc1 of the vehicle c1 and the vehicle-end quantum key Kc2 of the vehicle c2 in the cloud quantum key management module 21.

Since the vehicle c1 requests to access the vehicle c2, the quantum key distribution engine 22 of the cloud scheduling platform 2 encrypts the vehicle end quantum key Kc2 of the vehicle c2 by using the vehicle end quantum key Kc1 of the vehicle c1 to obtain encrypted information, that is, kc1[ Kc2], and sends the encrypted information Kc1[ Kc2] to the vehicle c1.

After receiving the encrypted information Kc1[ Kc2], the vehicle-end quantum communication unit 14 of the vehicle c1 decrypts the encrypted information Kc1[ Kc2] by using its own vehicle-end quantum key Kc1, to obtain the vehicle-end quantum key Kc2 of the vehicle c2.

The vehicle c1 performs information interaction with the vehicle c2 through the vehicle end quantum key Kc2 of the vehicle c2, and the manner of performing information interaction between the vehicles is shown in step S35, and the vehicle c1 informs the vehicle c2 that the vehicle c2 is about to enter the accident road section, so as to remind the vehicle c2 of avoiding.

Meanwhile, the vehicle c1 also performs information interaction with the affiliated manufacturer a1 through the vehicle end quantum key Kc1 of the vehicle c1, the information interaction mode between the vehicle and the affiliated manufacturer is as shown in step S24, the vehicle c1 informs the affiliated manufacturer a1 of the accident road section, after the manufacturer a1 knows the accident road section, the manufacturer a1 informs other affiliated vehicles near the accident road section of the accident road section, so as to remind other affiliated vehicles near the accident road section to detour the accident road section as early as possible, and secondary traffic accidents and traffic congestion are avoided.

The manufacturer a1 also issues a request to the cloud scheduling platform 2 to request access to other manufacturers, that is, to request to establish communication connection with other manufacturers, and the specific manner of establishing communication connection between different manufacturers is as shown in step S4, the manufacturer a1 performs information interaction with other manufacturers, the manufacturer a1 informs the accident road segment to other manufacturers, and after other manufacturers know the accident road segment, other manufacturers can inform other vehicles near the accident road segment of the accident road segment to remind other vehicles near the accident road segment to detour the accident road segment as early as possible, so as to avoid secondary traffic accidents and traffic congestion.

Scene two

Suppose that: a special vehicle c3 (e.g., an ambulance, a fire truck, etc.) needs to perform an emergency task, and the special vehicle c3 is expected to be able to avoid a road traffic jam on a driving route to a destination.

before the special vehicle c3 departs, a communication connection is established between the special vehicle c3 and the affiliated manufacturer a3, the specific way of establishing the communication connection between the special vehicle c3 and the affiliated manufacturer is as shown in step S2, the special vehicle c3 performs information interaction with the affiliated manufacturer a3, and the special vehicle c3 sends the departure place, the destination and the driving route to the affiliated manufacturer a3.

After the manufacturer a3 knows the departure point, the destination, and the driving route of the special vehicle c3, the manufacturer a3 informs other affiliated vehicles near the driving route of the special vehicle c3 of the relevant conditions of the special vehicle c3, so as to remind the other affiliated vehicles near the driving route to drive carefully, avoid in advance, or bypass as early as possible.

Meanwhile, the manufacturer a3 also issues a request to the cloud scheduling platform 2 to request access to other manufacturers, that is, to request communication connection establishment with other manufacturers, and a specific manner of establishing communication connection between different manufacturers is as shown in step S4, the manufacturer a3 performs information interaction with other manufacturers, the manufacturer a3 informs the other manufacturers of the departure place, the destination and the driving route of the special vehicle c3, and after other manufacturers know the relevant conditions of the special vehicle c3, other manufacturers can inform other vehicles near the driving route of the relevant conditions of the special vehicle c3, so as to remind other vehicles near the driving route to drive carefully, avoid ahead or detour ahead as possible.

In the vehicle cloud service system, the cloud scheduling platform can ensure that different vehicles of the same manufacturer can communicate with each other, so that the vehicles can obtain the vehicle networking application service provided by the manufacturer, and the manufacturer can also obtain the information of the corresponding vehicle; the cloud dispatching platform can also ensure that communication can be carried out between different manufacturers and between different vehicles of different manufacturers, so that the vehicles can also obtain the Internet of vehicles application services provided by other manufacturers, and the manufacturers can also obtain the information of other vehicles; therefore, each participant can perform safe information interaction in the car networking environment. In the whole car networking environment, each traffic participant can safely and fully obtain road traffic information, so that efficient traffic management is guaranteed, traffic passing efficiency is improved, and the hidden danger of traffic jam and traffic accidents is reduced.

The invention is not to be considered as limited to the specific embodiments shown and described, but is to be understood to cover all modifications, equivalents, and alternatives falling within the spirit and scope of the invention as defined by the appended claims.

Claims

1. A car cloud service system based on quantum security, comprising: the system comprises a vehicle end service platform (1) of each vehicle, a manufacturer cloud service platform (3) of each manufacturer and a cloud dispatching platform (2) of a cloud end;

vehicle end service platform (1) sets up on the vehicle, includes: the system comprises a vehicle-end quantum random number generator (11) for generating a quantum key, an intelligent terminal (13) for acquiring vehicle information, and a vehicle-end quantum communication unit (14) for encrypting and decrypting the information; the vehicle-end quantum communication unit (14) is in communication connection with the vehicle-end quantum random number generator (11) and the intelligent terminal (13) respectively; the vehicle-end quantum communication unit (14) is also communicated with the cloud dispatching platform (2);

the vendor cloud service platform (3) comprises: the system comprises a manufacturer quantum random number generator (31) for generating a quantum key, a manufacturer quantum key management module (32) for managing the quantum key, a vehicle networking application server (34) for providing vehicle networking services and generating application service information, and a quantum cryptography engine (33) for encrypting and decrypting the information; the quantum key server management system comprises a quantum key server (33), a manufacturer quantum random number generator (31), a manufacturer quantum key management module (32) and an Internet of vehicles application server (34), wherein the quantum key server (33) is in communication connection with the manufacturer quantum random number generator (31), the manufacturer quantum key management module and the Internet of vehicles application server (34) respectively; the quantum secret service engine (33) is also communicated with the cloud scheduling platform (2);

the cloud scheduling platform (2) comprises: the system comprises a cloud quantum key management module (21) used for managing quantum keys, and a quantum key distribution engine (22) used for encrypting and decrypting information; the quantum key distribution engine (22) is in communication connection with the cloud quantum key management module (21); the quantum key distribution engine (22) is also communicated with a vehicle-end quantum communication unit (14) and a quantum secret server engine (33) respectively;

and establishing communication connection between vehicles, between the vehicles and affiliated manufacturers and between the manufacturers by utilizing the cloud dispatching platform (2).

2. The vehicle cloud service system based on quantum security as claimed in claim 1, wherein a quantum key (vehicle-end quantum key) generated by a vehicle-end quantum random number generator (11) of the vehicle is used as a session key of the vehicle for encrypting interaction information in communication connections between vehicles and manufacturers.

3. The vehicle cloud service system based on quantum security according to claim 2, wherein a quantum key generated by a manufacturer quantum random number generator (31) of a manufacturer is used as a charging quantum key of a vehicle, the charging quantum key is pre-charged in a vehicle-end service platform (1) of the corresponding vehicle, and is synchronously stored in a manufacturer quantum key management module (32) of the manufacturer and a cloud quantum key management module (21) of a cloud scheduling platform (2); the charging quantum key is used for encrypting the vehicle-end quantum key in communication connection between the vehicle and the manufacturer and between the vehicle and the vehicle.

4. The vehicle cloud service system based on quantum security of claim 3, wherein the specific process of establishing communication connection between the vehicle and the manufacturer is as follows:

s1, when a vehicle c leaves a factory, a manufacturer quantum random number generator (31) of a manufacturer a generates a corresponding quantum key, namely a charging quantum key Ke, for the vehicle c, and the charging quantum key Ke is charged in a vehicle-end quantum communication unit (14) of the vehicle c; while storing the charge quantum key Ke for the vehicle c in the vendor quantum key management module (32); the charging quantum key Ke of the vehicle c is sent to the cloud scheduling platform (2) through the quantum key issuing engine (33), and after the charging quantum key Ke of the vehicle c is received by the quantum key issuing engine (22), the charging quantum key Ke of the vehicle c is stored in the cloud quantum key management module (21);

s2, establishing communication connection between the vehicle c and the manufacturer a by using the cloud dispatching platform (2), wherein the communication connection is as follows:

s21, a vehicle-end quantum random number generator (11) of the vehicle c generates a vehicle-end quantum key Kc and sends the vehicle-end quantum key Kc to a vehicle-end quantum communication unit (14); the vehicle-end quantum communication unit (14) encrypts a vehicle-end quantum key Kc by using a charge quantum key Ke of the vehicle c to obtain encrypted information Ke [ Kc ];

s22, the vehicle-end quantum communication unit (14) sends the encrypted information Ke [ Kc ] to the cloud dispatching platform (2), and a quantum key distribution engine (22) of the cloud dispatching platform (2) forwards the encrypted information Ke [ Kc ] to the manufacturer a to which the information Ke [ Kc ] belongs;

s23, after receiving the encrypted information Ke [ Kc ], the quantum key server engine (33) of the manufacturer a decrypts the encrypted information Ke [ Kc ] by using the charging quantum key Ke of the vehicle c stored in the manufacturer quantum key management module (32) to obtain decrypted information, namely, a vehicle-end quantum key Kc of the vehicle c, and correspondingly stores the vehicle-end quantum key Kc of the vehicle c in the manufacturer quantum key management module (32);

a quantum cryptography engine (33) of a manufacturer a encrypts application service information Ma generated by an Internet of vehicles application server (34) by using a vehicle-end quantum key Kc of a vehicle c, and sends the encrypted information, namely Kc [ Ma ], to a cloud dispatching platform (2); a quantum key distribution engine (22) of the cloud scheduling platform (2) forwards the encrypted information Kc [ Ma ] to a corresponding vehicle c; after receiving the encrypted information Kc [ Ma ], a vehicle end quantum communication unit (14) of the vehicle c decrypts by using a vehicle end quantum key Kc to obtain decrypted information, namely application service information Ma sent by a vehicle networking application server (34);

the vehicle-end quantum communication unit (14) encrypts the information Mc of the vehicle by using the vehicle-end quantum key Kc and sends the encrypted information Kc [ Mc ] to the cloud dispatching platform (2); a quantum key distribution engine (22) of the cloud scheduling platform (2) forwards the encrypted information Kc [ Mc ] to the manufacturer a; after receiving the encrypted information Kc [ Mc ], the quantum cryptography engine (33) of the manufacturer a decrypts the information by using the vehicle-end quantum key Kc of the vehicle c to obtain the decrypted information, i.e., the vehicle information Mc.

5. The vehicle cloud service system based on quantum security according to claim 4, wherein the vehicle c1 and the vehicle c2 belong to different manufacturers respectively, wherein the vehicle c1 belongs to the manufacturer a1, and the vehicle c1 and the manufacturer a1 have established communication connection; the vehicle c2 belongs to the manufacturer a2, and the vehicle c2 and the manufacturer a2 establish communication connection;

the cloud dispatching platform (2) is utilized to establish communication connection between the vehicle c1 and the vehicle c2, and the communication connection is as follows:

s31, the vehicle c1 sends a request for accessing the vehicle c2 to the cloud dispatching platform (2); after receiving the request, a quantum key distribution engine (22) of the cloud scheduling platform (2) forwards the request to a manufacturer a2 to which the vehicle c2 belongs;

s32, a manufacturer quantum key management module (32) of the manufacturer a2 stores a charging quantum key Ke2 and a vehicle end quantum key Kc2 of the vehicle c2; after the quantum cryptography engine (33) of the manufacturer a2 receives the request, the quantum cryptography engine (33) encrypts the vehicle-end quantum key Kc2 of the vehicle c2 by using the charge quantum key Ke2 of the vehicle c2 to obtain encrypted information Ke2[ Kc2], and sends the encrypted information Ke2[ Kc2] to the cloud scheduling platform (2);

s33, a charging quantum key Ke2 of the vehicle c2 and a charging quantum key Ke1 of the vehicle c1 are already stored in a cloud quantum key management module (21) of the cloud scheduling platform (2); after receiving the encrypted information Ke2[ Kc2], a quantum key distribution engine (22) of the cloud scheduling platform (2) decrypts the encrypted information Ke2[ Kc2] by using a charge quantum key Ke2 of the vehicle c2 to obtain a vehicle-end quantum key Kc2 of the vehicle c2; the quantum key distribution engine (22) encrypts a vehicle end quantum key Kc2 of the vehicle c2 by using a charging quantum key Ke1 of the vehicle c1 to obtain encrypted information Ke1[ Kc2], and sends the encrypted information Ke1[ Kc2] to the vehicle c1;

s34, after the vehicle-end quantum communication unit (14) of the vehicle c1 receives the encrypted information Ke1[ Kc2], decrypting the encrypted information Ke1[ Kc2] by using the charging quantum key Ke1 of the vehicle c1 to obtain decrypted information, namely the vehicle-end quantum key Kc2 of the vehicle c2;

a vehicle end quantum communication unit (14) of the vehicle c1 encrypts information Mc1 of the vehicle c1 by using a vehicle end quantum key Kc2 of the vehicle c2, and sends the encrypted information Kc2[ Mc1] to a cloud dispatching platform (2); a quantum key distribution engine (22) of the cloud scheduling platform (2) forwards the encrypted information Kc2[ Mc1] to the vehicle c2; after receiving the encrypted information Kc2[ Mc1], a vehicle-end quantum communication unit (14) of the vehicle c2 decrypts the encrypted information Kc2[ Mc1] by using a vehicle-end quantum key Kc2 of the vehicle c2 to obtain decrypted information, namely the information Mc1 of the vehicle c1;

a vehicle end quantum communication unit (14) of the vehicle c2 encrypts information Mc2 of the vehicle c2 by using a vehicle end quantum key Kc2 of the vehicle c2, and sends the encrypted information Kc2[ Mc2] to a cloud dispatching platform (2); the quantum key distribution engine (22) of the cloud scheduling platform (2) forwards the encrypted information Kc2[ Mc2] to the vehicle c1; after receiving the encrypted information Kc2[ Mc2], the vehicle-end quantum communication unit (14) of the vehicle c1 decrypts the encrypted information Kc2[ Mc2] by using the vehicle-end quantum key Kc2 of the vehicle c2, and obtains the information Mc2 of the vehicle c2, which is the decrypted information.

6. The vehicle cloud service system based on quantum security as claimed in any one of claims 3-5, wherein a certain number of charge quantum keys are charged in the vehicle-side service platform (1) of the corresponding vehicle, and are synchronously stored in the manufacturer quantum key management module (32) of the manufacturer and the cloud quantum key management module (21) of the cloud scheduling platform (2);

under the set condition, the charging quantum keys in the vehicle-side service platform (1), the manufacturer quantum key management module (32) and the cloud quantum key management module (21) are periodically and synchronously updated.

7. The vehicle cloud service system based on quantum security of any one of claims 1-5, wherein the quantum secret service engine (33) of the manufacturer and the quantum key distribution engine (22) of the cloud scheduling platform (2) are connected through a dedicated line.

8. The vehicle cloud service system based on quantum security of claim 7, wherein a quantum cryptography engine (33) of a manufacturer and a quantum key distribution engine (22) of a cloud scheduling platform (2) communicate with each other using a BB84 protocol, and the two negotiate with the BB84 protocol to generate a manufacturer quantum key as a manufacturer session key for encrypting interaction information in communication connection between the manufacturer and the manufacturer.

9. The vehicle cloud service system based on quantum security of claim 8, wherein the cloud scheduling platform (2) is used to establish a communication connection between a manufacturer a1 and a manufacturer a2, and the communication connection is as follows:

s41, the manufacturer a1 sends a request for accessing the manufacturer a2 to the cloud scheduling platform (2); after receiving the request, a quantum key distribution engine (22) of the cloud scheduling platform (2) forwards the request to a manufacturer a2;

s42, a quantum secret key Ka2 of the manufacturer a2 is generated through negotiation between a quantum secret server engine (33) of the manufacturer a2 and a quantum secret key distribution engine (22) of the cloud scheduling platform (2) through a BB84 protocol; the manufacturer a2 stores the manufacturer quantum key Ka2 in a manufacturer quantum key management module (32), and the cloud dispatching platform (2) stores the manufacturer quantum key Ka2 of the manufacturer a2 in a cloud quantum key management module (21);

s43, the quantum key distribution engine (22) of the cloud scheduling platform (2) forwards the manufacturer quantum key Ka2 of the manufacturer a2 to the manufacturer a1;

s44, after the quantum cryptography engine (33) of the manufacturer a1 receives the manufacturer quantum key Ka2 of the manufacturer a2, the manufacturer quantum key Ka2 of the manufacturer a2 is stored in the manufacturer quantum key management module (32) of the manufacturer a1;

the method comprises the steps that an Internet of vehicles application server (34) of a manufacturer a1 generates application service information Ma1, a quantum cryptography engine (33) of the manufacturer a1 encrypts the application service information Ma1 by using a manufacturer quantum key Ka2 of the manufacturer a2, and sends the encrypted information Ka2[ Ma1] to a cloud dispatching platform (2); a quantum key distribution engine (22) of the cloud scheduling platform (2) forwards the encrypted information Ka2[ Ma1] to a manufacturer a2; after receiving the encrypted information Ka2[ Ma1], the quantum cryptography engine (33) of the manufacturer a2 decrypts the encrypted information Ka2[ Ma1] by using the manufacturer quantum key Ka2 of the manufacturer a2 to obtain decrypted information, namely application service information Ma1 sent by the Internet of vehicles application server (34) of the manufacturer a1;

the method comprises the steps that an Internet of vehicles application server (34) of a manufacturer a2 generates application service information Ma2, a quantum cryptography engine (33) of the manufacturer a2 encrypts the application service information Ma2 by using a manufacturer quantum key Ka2 of the manufacturer a2, and sends the encrypted information Ka2[ Ma2] to a cloud dispatching platform (2); a quantum key distribution engine (22) of the cloud scheduling platform (2) forwards the encrypted information Ka2[ Ma2] to the manufacturer a1; after receiving the encrypted information Ka2[ Ma2], the quantum cryptography engine (33) of the manufacturer a1 decrypts the encrypted information Ka2[ Ma2] by using the manufacturer quantum key Ka2 of the manufacturer a2 to obtain decrypted information, namely application service information Ma2 sent by the internet-of-vehicles application server (34) of the manufacturer a2.

10. The quantum security-based vehicle cloud service system according to claim 1, wherein the vehicle-end service platform (1) further comprises an electronic control unit (12) for controlling a vehicle; the electronic control unit (12) is in communication connection with the intelligent terminal (13);

the intelligent terminal (13) comprises a communication module (131), a main control module (132) and a CAN controller (133) which are in communication connection in sequence;

the communication module (131) is used for communicating with a vehicle-end quantum communication unit (14); the CAN controller (133) is used for data transmission on a CAN bus; the main control module (132) controls the CAN controller (133) to acquire the information of the vehicle through the CAN bus and sends the information of the vehicle to the vehicle-end quantum communication unit (14) through the communication module (131); the main control module (132) receives the decrypted information from the vehicle-end quantum communication unit (14) through the communication module (131), generates a control instruction according to the decrypted information, and then sends the control instruction to the electronic control unit (12) through the CAN controller (133); and the electronic control unit (12) correspondingly controls the vehicle according to the control instruction.