Considerations on data security of Internet of Vehicles

doi:10.12267/j.issn.2096-5931.2023.02.001

Abstract

Abstract:

With the explosive growth of the data scale and industry scale of the Internet of Vehicles (IoV), the data security risks of the Internet of Vehicles data are also increasing. In order to improve the data security governance level of Internet of vehicles data, this paper first analyzes the key characteristics of the development of Internet of vehicles, including new network form, new data composition, and new data flow system. Then, this paper mainly discusses the data security challenges brought by data itself, data flow process, strong offensive and weak defensive situation. Furthermore, this paper proposes three prospective enlightenment: the establishment of data classification security management mechanism for different subjects; form its own system of defense in depth scheme; adhere to the integrated security strategy based on the holistic security concept.

Key words: Internet of Vehicles, data security, date flow, data classification, defense in depth

CLC Number:

TN929.5

LI Yufeng, LIU Qi, WEI Liang. Considerations on data security of Internet of Vehicles[J]. Information and Communications Technology and Policy, 2023, 49(2): 2-8.

Add to citation manager EndNote|Ris|BibTeX

URL:

http://ictp.caict.ac.cn/EN/10.12267/j.issn.2096-5931.2023.02.001

http://ictp.caict.ac.cn/EN/Y2023/V49/I2/2

Figures/Tables 2

References 12

[1]	ABI Research. The connected car market will endure a 15% shipment decline, flat revenues in 2020; sales return on trend early, 2022[R], 2020.
[2]	Juniper Research. In-vehicle commerce opportunties drive total connected cars to exceed 775 million by 2023[R], 2018.
[3]	国家互联网信息办公室. 汽车数据安全管理若干规定(试行)[Z], 2021.
[4]	EQUINIX. Key trends in connected vehicle and smart mobility: unlocking value with strategic infrastructure[R], 2022.
[5]	工信部赵志国:85%关键部件存漏洞车联网安全工作任重道远[EB/OL]. [2022-10-20]. https://www.maiche.com/news/detail/2203454.html.
[6]	丰田: 约 296 000条客户信息可能已被泄露[EB/OL]. [2022-10-10]. https://baijiahao.baidu.com/s?id=1746020620286109365&wfr=spider&for=p.
[7]	KOSCHER K, CZESKIS A, ROESNER F, et al. Experimental security analysis of a modern automobile[C]// 31st IEEE Symposium on Security and Privacy, S&P 2010, 16-19 May 2010, Berleley/Oakland, California, USA. IEEE, 2010.
[8]	USMAN, RAUF. A taxonomy of Bio-Inspired cyber security approaches: existing techniques and future directions[J]. Arabian Journal for Science & Engineering, 2018, 43(12):6693-6708.
[9]	ROJAS I, ORTU O F. [Lecture notes in computer science]bioinformatics and biomedical engineering volume 10209[J]. Cyber Immunity, 2017, 10.1007/978-3-319-56154-7(Chapter 19):199-208. doi: 10.1007/978-3-319-56154-7
[10]	MTHUNZI S N, BENKHELIFA E, BOSAKOWSKI T, et al. A bioinspired approach to cyber security[J]. Machine Learning for Computer and Cyber Security: Principle, Algorithms, and Practices; CRC Press: Boca Raton, FL, USA, 2019:75.
[11]	BECK G, HABICHT G S. Immunity and the invertebrates[J]. Scientific American, 1996, 275(5):6066.
[12]	Upstream. Upstream’s 2022 global automotive cybersecurity report[R], 2022.

数据类型	数据构成				安全影响
车主数据	姓名、性别、年龄、身份等	住址(充电桩)、通信录等	娱乐、支付等数据	手机信息(蓝牙)、生物识别信息等	泄露用户隐私等
车外环境数据	行车途中、停车地点全景视野内的行人、道路及环境数据,其中包括敏感地域、关键人员与装备、敏感场景等都可以实时实地记录与跟踪				影响个人隐私、企业机密,严重时影响军事秘密、经济秘密和国家秘密等
车内运行数据	驾驶行为数据	车内图像和录音数据	速度、转速、温度、胎压、指令、网络等汽车内部状态参数和数据		泄露隐私等
位置轨迹数据	位置、行车轨迹、高精度地图、车联网位置信息等				隐私泄露,敏感高精度地理信息涉及国家安全
公共交通数据	公共交通信息、停车场实时信息、乘客时空分布数据、区域间客流数据等				用户驾驶安全、公共安全
汽车企业数据	联网车辆的服务数据、研发数据、营销数据、管理数据等				商业数据安全等
网络数据	V2V、V2I、V2C等数据				影响企业机密、用户驾驶安全和隐私等
融合数据	公共交通数据、汽车企业数据、上百万辆汽车采集的个人数据、轨迹数据、图片数据、地理位置等数据的融合				全方位的安全影响

数据类型	数据构成				安全影响
车主数据	姓名、性别、年龄、身份等	住址(充电桩)、通信录等	娱乐、支付等数据	手机信息(蓝牙)、生物识别信息等	泄露用户隐私等
车外环境数据	行车途中、停车地点全景视野内的行人、道路及环境数据,其中包括敏感地域、关键人员与装备、敏感场景等都可以实时实地记录与跟踪				影响个人隐私、企业机密,严重时影响军事秘密、经济秘密和国家秘密等
车内运行数据	驾驶行为数据	车内图像和录音数据	速度、转速、温度、胎压、指令、网络等汽车内部状态参数和数据		泄露隐私等
位置轨迹数据	位置、行车轨迹、高精度地图、车联网位置信息等				隐私泄露,敏感高精度地理信息涉及国家安全
公共交通数据	公共交通信息、停车场实时信息、乘客时空分布数据、区域间客流数据等				用户驾驶安全、公共安全
汽车企业数据	联网车辆的服务数据、研发数据、营销数据、管理数据等				商业数据安全等
网络数据	V2V、V2I、V2C等数据				影响企业机密、用户驾驶安全和隐私等
融合数据	公共交通数据、汽车企业数据、上百万辆汽车采集的个人数据、轨迹数据、图片数据、地理位置等数据的融合				全方位的安全影响

[1]	ZHANG Zhaolong, XIE Jiang, BAO Hongyu. Thoughts on data security compliance governance in telecommunication field [J]. Information and Communications Technology and Policy, 2023, 49(2): 14-19.
[2]	HU Guohua, WANG Zhendong, LIU Shaoyu, LI Qiang. Government data security compliance analysis and innovation practice [J]. Information and Communications Technology and Policy, 2023, 49(2): 20-29.
[3]	JU Xin, CAO Jing, CHEN Fozhong, LIU Wenmao, HU Zhonghua. Application and security research of privacy computing in health industry [J]. Information and Communications Technology and Policy, 2023, 49(2): 43-48.
[4]	FENG Shiduo, GAO Jingjie, LI Shenzhi, YAO Nanwei. Research on the evolution trend of ICT supply chain security system [J]. Information and Communications Technology and Policy, 2023, 49(2): 49-53.
[5]	PIAO Hongguo, LIU Minghui. Research on the target framework and implementation scheme of data security compliance system construction [J]. Information and Communications Technology and Policy, 2023, 49(2): 58-64.
[6]	LIANG Qing. Middle platform of data security builds the lifeline of enterprise data [J]. Information and Communications Technology and Policy, 2023, 49(2): 92-96.
[7]	ZHANG Bin, WEN Nuan, QIU Qin, ZHOU Ying, LI Wenqi. Research and practice of data security management in information and communication enterprises [J]. Information and Communications Technology and Policy, 2022, 48(8): 19-23.
[8]	LIU Xin, CAO Jing, SHAO Zhijie, ZHOU Yuefeng. Anti-ransomware research based on data storage technologies [J]. Information and Communications Technology and Policy, 2022, 48(8): 36-42.
[9]	WANG Wei, CAO Jing, CHENG Geng, LI Xueying. Research on reducing the impact of automated decision on personal information security [J]. Information and Communications Technology and Policy, 2022, 48(8): 52-58.
[10]	WEI Kai, YAN Shu, LYU Ailin. An overview on the market-based allocation of data factor [J]. Information and Communications Technology and Policy, 2022, 48(8): 59-64.
[11]	ZHOU Bohui, YU Le, MA Yusheng, PAN Jiali. Patent situation analysis of data security technology [J]. Information and Communications Technology and Policy, 2022, 48(7): 87-91.
[12]	GUO Zhen, LI Shuaizheng. Thinking on the path of accelerating the development of digital economy based on artificial intelligence [J]. Information and Communications Technology and Policy, 2022, 48(6): 69-74.
[13]	ZHANG Xiye. The research on financial data compliance management [J]. Information and Communications Technology and Policy, 2022, 48(4): 25-30.
[14]	LI Xueni, QIN Shukai. Research on the construction of data security governance capability evaluation framework [J]. Information and Communications Technology and Policy, 2022, 48(2): 37-41.
[15]	GONG Shiran, LIU Xuehua. Research and analysis of data security governance [J]. Information and Communications Technology and Policy, 2022, 48(2): 42-46.