Research And Implementation Of Car Networking Information Service Platform Security Mechanism

With the sustained and rapid development of Chinese economic and social,car ownership shows a trend of rapid growth and the car networking technology becomes more and more popular.The car networking information service platform based on vehicle terminal provides comprehensive information services such as monitoring vehicle status.These services bring great convenience to people,but also face many security threats.The security of the platform is the premise to ensure the stable and reliable running of the platform and its importance is self-evident.In order to secure the car networking information service platform,the security system of the platform is built from multple levels and multiple dimensions,by using a variety of security mechanisms.In the aspect of application-level security,some common web application security weaknesses are studied firstly.And then a series of security precautions are introducted.After that,an identity authentication based on USB Key is applied in the platform and the identity of vehicle terminal is certified by the platform.In addition,the strategy of role-based access control is adopted to implement the permission management in the platform.In the aspect of data transmission,the HTTPS protocol is studied,and the HTTPS is deployed in the application server cluster.And the symmetric encryption algorithm is used to encrypt the data collected by the vehicle terminal before transmission.In respect of the database security,the salt and the password are concatenated and processed with a hash function,and the resulting output is stored with the salt in platform's database.In addition,the AES algorithm is used to encrypt the other data that needs to be viewed,and the resulting output is stored.Then,high availability of the database is realized through the Mycat database middleware.A variety of technical means are combined to achieve the goal of safe operation and maintenance such as firewalls,bastion machine,nagios,log analysis.In particular,a layered and extended system of log acquisition and analysis is designed through Fluentd,Kafka and Elasticsearch.To sum up,the security system which covers the network,server,application and data and other aspects,can effectively secure the car networking information service platform.