CN108924835B - Vehicle control system, method and safety control unit - Google Patents
Vehicle control system, method and safety control unit Download PDFInfo
- Publication number
- CN108924835B CN108924835B CN201810718061.XA CN201810718061A CN108924835B CN 108924835 B CN108924835 B CN 108924835B CN 201810718061 A CN201810718061 A CN 201810718061A CN 108924835 B CN108924835 B CN 108924835B
- Authority
- CN
- China
- Prior art keywords
- vehicle
- control
- unit
- control unit
- safety
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L5/00—Arrangements affording multiple use of the transmission path
- H04L5/003—Arrangements for allocating sub-channels of the transmission path
- H04L5/0053—Allocation of signaling, i.e. of overhead other than pilot signals
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
- H04W4/30—Services specially adapted for particular environments, situations or purposes
- H04W4/40—Services specially adapted for particular environments, situations or purposes for vehicles, e.g. vehicle-to-pedestrians [V2P]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W76/00—Connection management
- H04W76/30—Connection release
- H04W76/34—Selective release of ongoing connections
Landscapes
- Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Computer Networks & Wireless Communication (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Electric Propulsion And Braking For Vehicles (AREA)
- Selective Calling Equipment (AREA)
Abstract
The invention provides a vehicle control system, a vehicle control method and a safety control unit, wherein the system comprises: the communication unit is used for receiving the control message from the base station through communication connection with the base station in the Internet of vehicles; the vehicle-mounted unit is electrically connected with the communication unit and used for generating a control instruction according to the control message received by the communication unit; the vehicle control unit is electrically connected with the vehicle-mounted unit and used for executing a control command; the safety control unit is electrically connected with the vehicle-mounted unit, the communication unit and the vehicle control unit and used for carrying out safety verification on the control message, and if the safety verification fails, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected. The control of the electrical connection between the vehicle-mounted unit and the vehicle control unit is realized through the safety control unit, the safe operation control of the vehicle is realized, and the problem that in the prior art, when a safety protection product is invalid, the vehicle control unit is controlled by a hacker, so that the vehicle is in dangerous operation is solved.
Description
Technical Field
The invention relates to the technical field of vehicle networking, in particular to a vehicle control system, a vehicle control method and a safety control unit.
Background
With the development of automobiles, the degree of vehicle informatization is higher and higher, central control systems and vehicle-mounted systems of various vehicles are realized based on modern operating systems, and with the improvement of vehicle networking and informatization degree, the possibility and the danger degree of network attack are increased increasingly.
In the related art, security protection products such as security guards, antivirus software, firewalls and the like are usually deployed in a vehicle system to prevent a vehicle operation system from being attacked by a network, but in actual use, a hacker can still bypass the security protection products by using system bugs to completely control the operation state of a vehicle, so that the vehicle operation is in danger.
Disclosure of Invention
The present invention is directed to solving, at least to some extent, one of the technical problems in the related art.
Therefore, a first object of the present invention is to provide a vehicle control system, so as to implement safety verification of a control message received by a communication unit through a safety control unit, and when the safety verification fails, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected, so that the vehicle recovers a safe driving state, and the safety of vehicle operation is ensured.
A second object of the invention is to propose a vehicle control method.
A third object of the invention is to propose a safety control unit.
A fourth object of the invention is to propose a non-transitory computer-readable storage medium.
A fifth object of the invention is to propose a computer program product.
To achieve the above object, an embodiment of a first aspect of the present invention provides a vehicle control system, including:
the communication unit is used for receiving a control message from a base station in the Internet of vehicles through communication connection with the base station;
the vehicle-mounted unit is electrically connected with the communication unit and used for generating a control instruction according to the control message received by the communication unit;
the vehicle control unit is electrically connected with the vehicle-mounted unit and used for executing the control command;
and the safety control unit is electrically connected with the vehicle-mounted unit, the communication unit and the vehicle control unit and used for carrying out safety verification on the control message, and if the safety verification fails, the electric connection between the vehicle-mounted unit and the vehicle control unit is disconnected.
In order to achieve the above object, an embodiment of a second aspect of the present invention provides a vehicle control method, including:
the method is applied to a vehicle control system which comprises an on-board unit and a vehicle control unit, wherein the on-board unit is used for generating a control instruction according to a control message of the Internet of vehicles, and the vehicle control unit is used for executing the control instruction, and the method comprises the following steps:
acquiring a control message of the Internet of vehicles;
performing security verification on the control message;
if the safety verification fails, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected;
and if the safety verification is passed, sending the control message to the vehicle-mounted unit so that the vehicle-mounted unit generates a control instruction for controlling the vehicle control unit according to the control message.
In order to achieve the above object, a third aspect of the present invention provides a safety control unit applied to a vehicle control system including an on-board unit configured to generate a control instruction according to a control message of an internet of vehicles, and a vehicle control unit configured to execute the control instruction;
the safety control unit is electrically connected with the vehicle-mounted unit and the vehicle control unit;
the safety control unit includes: a memory, a processor and a computer program stored on the memory and executable on the processor, when executing the program, implementing a vehicle control method as described in the second aspect.
To achieve the above object, a fourth aspect of the present invention provides a non-transitory computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements the vehicle control method according to the second aspect.
To achieve the above object, an embodiment of a fifth aspect of the present invention provides a computer program product, wherein when the instructions of the computer program product are executed by a processor, the vehicle control method according to the second aspect is implemented.
The technical scheme provided by the embodiment of the invention has the following beneficial effects:
the communication unit is used for receiving the control message from the base station through communication connection with the base station in the Internet of vehicles; the vehicle-mounted unit is electrically connected with the communication unit and used for generating a control instruction according to the control message received by the communication unit; the vehicle control unit is electrically connected with the vehicle-mounted unit and used for executing a control command; the safety control unit is electrically connected with the vehicle-mounted unit, the communication unit and the vehicle control unit and used for carrying out safety verification on the control message, and if the safety verification fails, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected. The control of the electrical connection between the vehicle-mounted unit and the vehicle control unit is realized through the safety control unit, the safe operation control of the vehicle is realized, the vehicle is prevented from being remotely controlled by hackers, and the safety of the vehicle operation is guaranteed.
Drawings
The foregoing and/or additional aspects and advantages of the present invention will become apparent and readily appreciated from the following description of the embodiments, taken in conjunction with the accompanying drawings of which:
fig. 1 is a schematic structural diagram of a vehicle control system according to an embodiment of the present invention;
FIG. 2 is a schematic diagram of another vehicle control system provided in an embodiment of the present invention;
FIG. 3 is a schematic structural diagram of an on-board unit 20 according to an embodiment of the present invention;
FIG. 4 is a schematic flow chart illustrating a vehicle control method according to an embodiment of the present invention; and
fig. 5 is a schematic structural diagram of the safety control unit 30 according to the embodiment of the present invention.
Detailed Description
Reference will now be made in detail to embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like or similar reference numerals refer to the same or similar elements or elements having the same or similar function throughout. The embodiments described below with reference to the drawings are illustrative and intended to be illustrative of the invention and are not to be construed as limiting the invention.
A vehicle control system, a method, and a safety control unit of an embodiment of the invention are described below with reference to the drawings.
Fig. 1 is a schematic structural diagram of a vehicle control system according to an embodiment of the present invention.
As shown in fig. 1, the system includes: a communication unit 10, an on-board unit 20, a safety control unit 30, and a vehicle control unit 40.
And a communication unit 10 for receiving control messages from the base station through a communication connection with the base station inside the internet of vehicles.
The on-board unit 20 is electrically connected to the communication unit 10, and configured to generate a control instruction according to the control message received by the communication unit 10, so that the vehicle control unit 40 performs vehicle control according to the control instruction, for example, controlling a switch of an air conditioner of the vehicle, adjusting a vehicle speed of the vehicle, or adjusting a driving direction of the vehicle.
And the vehicle control unit 40 is electrically connected with the vehicle-mounted unit 20 and used for executing control instructions.
And the safety control unit 30 is electrically connected with the on-board unit 20, the communication unit 10 and the vehicle control unit 40 and is used for carrying out safety verification on the control message, and if the safety verification fails, the electric connection between the on-board unit 20 and the vehicle control unit 40 is disconnected, so that the vehicle is separated from remote control, the control of a driver on the vehicle is recovered, and the running safety of the vehicle is improved.
It should be noted that, the safety control unit 30 is connected to the communication unit 10, so that it can be ensured that all the control messages received by the communication unit 10 are subjected to safety verification, and the effectiveness of safety control is improved.
In the vehicle control system of the embodiment, the communication unit receives communication connection between base stations in the vehicle networking, receives the control message from the base stations, and sends the control message to the vehicle-mounted unit through the communication unit, the vehicle-mounted unit generates a control command according to the control message, the vehicle control unit executes the control command to control the vehicle to execute corresponding operation, the safety control unit is arranged to carry out safety verification on the control message received by the communication unit, and when the safety verification fails, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected, so that the vehicle recovers a safe driving state, and the running safety of the vehicle is guaranteed.
Based on the foregoing embodiment, this embodiment provides another vehicle control system, and further clearly describes a structure of a safety control unit, so as to enable electrical connection between an on-board unit and a vehicle control unit to be disconnected when a control message fails to be safely verified, where fig. 2 is a schematic structural diagram of another vehicle control system provided in this embodiment of the present invention, and as shown in fig. 2, the safety control unit 30 may further include: a processor 31, a fuse 32 and a fuse 33.
And the processor 31 is electrically connected with the on-board unit 20 and the communication unit 10 and is used for performing safety verification on the control message and sending the control instruction to the vehicle control unit 40 when the safety verification is passed.
And the fuse 32 is connected with the processor 31 and is used for fusing the fuse 33 when the safety verification fails.
And the fuse 33 is electrically connected with the vehicle control unit 40 and the vehicle-mounted unit 20 and is used for transmitting control commands between the vehicle control unit 40 and the vehicle-mounted unit 20.
In some embodiments, the safety control unit 30 is specifically configured to determine whether the safety verification is passed according to whether the control message includes a preset abnormal instruction. Specifically, when the vehicle normally runs, the control message does not include a preset abnormal instruction, when the vehicle is abnormal in running, the base station may send a special control message, the control message includes a preset abnormal instruction, the abnormal instruction is an instruction message that cannot be verified by the safety control unit 30, and when the safety verification fails, the program solidified in the fuse 32 may control to load voltage at two ends of the fuse 33, and the voltage difference loaded at the two ends is greater than a preset threshold value, so that the fuse 33 is fused due to a thermal effect under the action of a large current, thereby disconnecting the electrical connection between the vehicle control unit 40 and the vehicle-mounted unit 20, disengaging the vehicle from remote control, and ensuring driving safety.
It should be noted that the program solidified in the safety control unit 30 cannot be changed and erased, which prevents malicious tampering, so that when the safety control unit 30 detects an abnormal command, the electrical connection between the vehicle control unit 40 and the vehicle-mounted unit 20 can be disconnected, and the electrical connection is disconnected on a hardware level, which improves the safety.
In some embodiments, the fuse 33 is removably connected to the vehicle control unit 40 and the on-board unit 20, such that after the fuse 33 is blown, a new fuse 33 can be replaced to re-enable remote control of the vehicle after the vehicle is restored to safety.
In some embodiments, as shown in FIG. 3, the on-board unit 20 includes: an onboard controller 21, a center control panel 22, and a driving assistance device 23.
And the vehicle-mounted controller 21 is used for converting the control message into a corresponding control instruction, acquiring the vehicle operation data sent by the vehicle control unit 40 and sending the vehicle operation data to the communication unit 10.
And the central control screen 42 is used for displaying according to the control instruction and/or the vehicle operation data sent by the vehicle control unit 40 so as to facilitate the user to view, such as displaying the current oil quantity, displaying an electronic map and the like.
The driving auxiliary device 43, the central control panel 42 and the vehicle-mounted controller 41 are used for generating auxiliary driving information according to vehicle operation data and sensing data acquired by a vehicle-mounted sensor, controlling the central control panel 42 to display according to the auxiliary driving information, or controlling the vehicle control unit 40 according to the auxiliary driving information, specifically, the driving auxiliary device 43 can utilize a sensor installed on a vehicle to acquire surrounding environment data at any time in the driving process of the vehicle, identify static and dynamic objects, and perform system operation and analysis by combining with navigator map data, so that a driver can be aware of possible dangers in advance, and the comfort and safety of vehicle driving are effectively improved.
In some embodiments, the vehicle control unit 40 further includes a plurality of ECU's 44 for executing control commands, and each ECU44 is electrically connected to the on-board unit 20 via a vehicle bus.
In the vehicle control system provided by the embodiment of the invention, the processor, the fuse and the fuse are arranged in the safety control unit, so that when the control message received by the vehicle contains the preset abnormal instruction, the processor controls the fuse to increase the voltage difference exceeding the preset threshold value at the two ends of the fuse, the fuse is fused, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected, the vehicle recovers normal operation, the vehicle operation safety is ensured, and the detachable structure of the fuse is arranged, so that the fuse can be replaced again after the vehicle recovers normal operation, and the remote control mode of the vehicle is recovered.
In order to implement the foregoing embodiment, the present invention further provides a vehicle control method, which is applied to the vehicle control system described in the foregoing embodiment, where the vehicle control system includes an on-board unit for generating a control instruction according to a control message of an internet of vehicles, and a vehicle control unit for executing the control instruction, and fig. 4 is a schematic flow chart of the vehicle control method provided in the embodiment of the present invention, and as shown in fig. 4, the method includes the following steps:
Specifically, the vehicle is in the internet of vehicles, and a terminal in the internet of vehicles can realize remote control of the vehicle through an installed application program, wherein the terminal can be a mobile phone, a palm computer, a mobile computer, an IPAD and the like. The terminal sends control messages to a background server of the Internet of vehicles, the background server transmits the control messages through the base stations, and the communication unit receives the control messages from the base stations through communication connection among the base stations in the Internet of vehicles and sends the control messages to the safety control unit.
As a possible implementation manner, whether the security verification passes is determined according to whether the control message contains a preset abnormal instruction.
Specifically, the safety control unit performs safety verification on the received control message to determine whether the control message contains a preset abnormal instruction. As a possible implementation, the exception instruction can be guaranteed not to be abused by itself through a token rolling algorithm or a message signature algorithm, and can also be guaranteed to be uniquely identified.
And step 403, if the safety verification is not passed, disconnecting the electrical connection between the vehicle-mounted unit and the vehicle control unit.
Specifically, if the safety control unit fails to verify the safety of the control message, it indicates that the control message includes a preset abnormal instruction, where the abnormal instruction is used to indicate that the vehicle has been illegally controlled and needs to disconnect the electrical connection between the onboard unit and the vehicle control unit, and specifically, the processor of the safety control unit may indicate the fuse to apply a voltage difference greater than a threshold value to two ends of the fuse, so that the fuse is fused by the generated heat under the action of the instantaneous large current, thereby disconnecting the electrical connection between the onboard unit and the vehicle control unit, so that the vehicle cannot receive the remote control message, and the vehicle returns to a normal operation state.
For example, when the internet of vehicles is invaded by a hacker, the vehicle is controlled by the hacker, the hacker can send a control message which enables the vehicle to be in a dangerous operation state, the vehicle can prompt the vehicle to be controlled in an active mode such as giving out warning tone, or a vehicle control department determines that the vehicle is controlled by analyzing the operation condition of the vehicle, and after the vehicle is determined to be possibly controlled, the vehicle control department can send a preset abnormal instruction message through a base station, so that after the safety control unit receives the abnormal instruction message, the abnormal control instruction is identified, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected, the vehicle-mounted unit of the vehicle does not receive the control message any more, the remote control is disconnected, and the normal operation state of the vehicle is recovered.
As a possible implementation mode, after the vehicle recovers the normal operation, the fuse in the safety control unit can be replaced, the convenience of vehicle maintenance is improved, and the safety of vehicle operation is improved while the control mode of vehicle operation is increased.
And step 404, if the safety verification is passed, sending a control message to the vehicle-mounted unit so that the vehicle-mounted unit generates a control instruction for controlling the vehicle control unit according to the control message.
Specifically, if the safety verification passes, it is indicated that the control message does not include a preset abnormal instruction, and the electrical connection between the on-board unit and the vehicle control unit does not need to be disconnected, the control message is continuously sent to the on-board unit, so that the on-board unit generates a control instruction for controlling the vehicle control unit according to the control message.
According to the vehicle control method, the control message of the Internet of vehicles is acquired, the control message is subjected to safety verification, if the safety verification fails, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected, if the safety verification passes, the control message is sent to the vehicle-mounted unit, so that the vehicle-mounted unit generates a control instruction for controlling the vehicle control unit according to the control message, the safety control unit is arranged, when the control message cannot pass the safety verification, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected, the safety operation of the vehicle is recovered, and when the control message passes the safety verification, the vehicle is controlled to continue to operate normally, and the safety of the vehicle operation is improved.
Based on the above embodiment, the embodiment of the present invention further provides a safety control unit 30, fig. 5 is a schematic structural diagram of the safety control unit 30 provided in the embodiment of the present invention, the safety control unit 30 is applied to the vehicle control system in the embodiment corresponding to fig. 1 to fig. 3, and the vehicle control system includes an on-board unit 20 for generating a control instruction according to a control message of the internet of vehicles, and a vehicle control unit 40 for executing the control instruction.
The safety control unit 30 is electrically connected to the on-board unit 20 and the vehicle control unit 40.
As shown in fig. 5, the safety control unit 30 includes: the memory 34, the processor 31 and a computer program stored on the memory 34 and operable on the processor 31, when the processor executes the program, implement the vehicle control method in the embodiment corresponding to fig. 4.
In order to implement the above-described embodiments, embodiments of the present invention also propose a non-transitory computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements a vehicle control method as described in the aforementioned method embodiments.
In order to implement the above embodiments, the present invention further provides a computer program product, wherein when the instructions in the computer program product are executed by a processor, the vehicle control method according to the foregoing method embodiments is implemented.
In the description herein, references to the description of the term "one embodiment," "some embodiments," "an example," "a specific example," or "some examples," etc., mean that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the invention. In this specification, the schematic representations of the terms used above are not necessarily intended to refer to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples. Furthermore, various embodiments or examples and features of different embodiments or examples described in this specification can be combined and combined by one skilled in the art without contradiction.
Furthermore, the terms "first", "second" and "first" are used for descriptive purposes only and are not to be construed as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one such feature. In the description of the present invention, "a plurality" means at least two, e.g., two, three, etc., unless specifically limited otherwise.
Any process or method descriptions in flow charts or otherwise described herein may be understood as representing modules, segments, or portions of code which include one or more executable instructions for implementing steps of a custom logic function or process, and alternate implementations are included within the scope of the preferred embodiment of the present invention in which functions may be executed out of order from that shown or discussed, including substantially concurrently or in reverse order, depending on the functionality involved, as would be understood by those reasonably skilled in the art of the present invention.
The logic and/or steps represented in the flowcharts or otherwise described herein, e.g., an ordered listing of executable instructions that can be considered to implement logical functions, can be embodied in any computer-readable medium for use by or in connection with an instruction execution system, apparatus, or device, such as a computer-based system, processor-containing system, or other system that can fetch the instructions from the instruction execution system, apparatus, or device and execute the instructions. For the purposes of this description, a "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of the computer-readable medium would include the following: an electrical connection (electronic device) having one or more wires, a portable computer diskette (magnetic device), a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disc read-only memory (CDROM). Additionally, the computer-readable medium could even be paper or another suitable medium upon which the program is printed, as the program can be electronically captured, via for instance optical scanning of the paper or other medium, then compiled, interpreted or otherwise processed in a suitable manner if necessary, and then stored in a computer memory.
It should be understood that portions of the present invention may be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, the various steps or methods may be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. If implemented in hardware, as in another embodiment, any one or combination of the following techniques, which are known in the art, may be used: a discrete logic circuit having a logic gate circuit for implementing a logic function on a data signal, an application specific integrated circuit having an appropriate combinational logic gate circuit, a Programmable Gate Array (PGA), a Field Programmable Gate Array (FPGA), or the like.
It will be understood by those skilled in the art that all or part of the steps carried by the method for implementing the above embodiments may be implemented by hardware related to instructions of a program, which may be stored in a computer readable storage medium, and when the program is executed, the program includes one or a combination of the steps of the method embodiments.
In addition, functional units in the embodiments of the present invention may be integrated into one processing module, or each unit may exist alone physically, or two or more units are integrated into one module. The integrated module can be realized in a hardware mode, and can also be realized in a software functional module mode. The integrated module, if implemented in the form of a software functional module and sold or used as a stand-alone product, may also be stored in a computer readable storage medium.
The storage medium mentioned above may be a read-only memory, a magnetic or optical disk, etc. Although embodiments of the present invention have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting the present invention, and that variations, modifications, substitutions and alterations can be made to the above embodiments by those of ordinary skill in the art within the scope of the present invention.
Claims (9)
1. A vehicle control system, characterized by comprising:
the communication unit is used for receiving a control message from a base station in the Internet of vehicles through communication connection with the base station;
the vehicle-mounted unit is electrically connected with the communication unit and used for generating a control instruction according to the control message received by the communication unit;
the vehicle control unit is electrically connected with the vehicle-mounted unit and used for executing the control command;
the safety control unit is electrically connected with the vehicle-mounted unit, the communication unit and the vehicle control unit and used for carrying out safety verification on the control message, and if the safety verification fails, the electric connection between the vehicle-mounted unit and the vehicle control unit is disconnected;
the safety control unit is specifically configured to determine whether safety verification passes according to whether the control message includes a preset abnormal instruction.
2. The vehicle control system of claim 1, wherein the safety control unit includes a processor, a fuse, and a fuse;
the processor is electrically connected with the vehicle-mounted unit and the communication unit and used for carrying out safety verification on the control message and sending the control instruction to the vehicle control unit when the safety verification is passed;
the fuse is connected with the processor and used for fusing the fuse when the safety verification fails;
the fuse is electrically connected with the vehicle control unit and the vehicle-mounted unit and used for transmitting the control command between the vehicle control unit and the vehicle-mounted unit.
3. The vehicle control system according to claim 2,
the fuse is specifically used for loading voltage at two ends of the fuse when the fuse is fused, and the voltage difference between the two ends is larger than a preset threshold value.
4. The vehicle control system according to claim 2,
the fuse is detachably connected with the vehicle control unit and the vehicle-mounted unit.
5. The vehicle control system according to any one of claims 1 to 4, characterized in that the on-board unit includes: the system comprises an on-board controller, a central control screen and a driving auxiliary device;
the vehicle-mounted controller is used for converting the control message into a corresponding control instruction, acquiring vehicle operation data sent by the vehicle control unit and sending the vehicle operation data to the communication unit;
the central control screen is used for displaying according to the control instruction and/or the vehicle operation data sent by the vehicle control unit;
the driving auxiliary device, the central control screen and the vehicle-mounted controller are used for generating auxiliary driving information according to the vehicle operation data and sensing data acquired by a vehicle-mounted sensor; and controlling the central control screen to display according to the driving assisting information, or controlling the vehicle control unit according to the driving assisting information.
6. The vehicle control system according to any one of claims 1 to 4, characterized in that the vehicle control unit includes a plurality of Electronic Control Units (ECUs);
and the vehicle-mounted unit is electrically connected with each ECU through a vehicle bus.
7. A vehicle control method applied to a vehicle control system including an on-board unit for generating a control instruction from a control message of an internet of vehicles, and a vehicle control unit for executing the control instruction, the method comprising:
acquiring a control message of the Internet of vehicles;
performing security verification on the control message;
if the safety verification fails, the electrical connection between the vehicle-mounted unit and the vehicle control unit is disconnected;
if the safety verification is passed, the control message is sent to the vehicle-mounted unit, so that the vehicle-mounted unit generates a control instruction for controlling the vehicle control unit according to the control message;
the performing security verification on the control message includes:
and determining whether the safety verification is passed according to whether the control message contains a preset abnormal instruction.
8. A safety control unit is characterized in that the safety control unit is applied to a vehicle control system, the vehicle control system comprises an on-board unit and a vehicle control unit, the on-board unit is used for generating a control instruction according to a control message of an internet of vehicles, and the vehicle control unit is used for executing the control instruction;
the safety control unit is electrically connected with the vehicle-mounted unit and the vehicle control unit;
the safety control unit includes: memory, processor and computer program stored on the memory and executable on the processor, which when executed by the processor implements the vehicle control method as claimed in claim 7.
9. A non-transitory computer-readable storage medium having stored thereon a computer program, characterized in that the program, when executed by a processor, implements the vehicle control method according to claim 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810718061.XA CN108924835B (en) | 2018-06-29 | 2018-06-29 | Vehicle control system, method and safety control unit |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810718061.XA CN108924835B (en) | 2018-06-29 | 2018-06-29 | Vehicle control system, method and safety control unit |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108924835A CN108924835A (en) | 2018-11-30 |
| CN108924835B true CN108924835B (en) | 2021-08-17 |
Family
ID=64423409
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810718061.XA Active CN108924835B (en) | 2018-06-29 | 2018-06-29 | Vehicle control system, method and safety control unit |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108924835B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111726774B (en) * | 2020-06-28 | 2023-09-05 | 阿波罗智联(北京)科技有限公司 | Method, device, equipment and storage medium for defending attack |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110636135A (en) * | 2019-09-30 | 2019-12-31 | 深圳市英博超算科技有限公司 | Intelligent networking automobile system |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102722968A (en) * | 2012-06-29 | 2012-10-10 | 山东电力集团公司电力科学研究院 | Electric automobile safety prewarning protection system and method based on cloud service vehicle-mounted terminal |
| CN105743902A (en) * | 2016-03-08 | 2016-07-06 | 江苏大学 | Auxiliary driving vehicle gateway for multi-CPU hard isolation of intelligent interconnection |
| WO2016108961A1 (en) * | 2014-12-30 | 2016-07-07 | Battelle Memorial Institute | Anomaly detection for vehicular networks for intrusion and malfunction detection |
| CN106094823A (en) * | 2016-06-29 | 2016-11-09 | 北京奇虎科技有限公司 | The processing method of vehicle hazard driving behavior and system |
| CN106184068A (en) * | 2016-06-30 | 2016-12-07 | 北京奇虎科技有限公司 | Automotive interior network security detection method and device, automobile |
| CN107194248A (en) * | 2017-04-21 | 2017-09-22 | 百度在线网络技术（北京）有限公司 | Crack down upon evil forces objective abduction method, device, equipment and the storage medium of automatic driving vehicle |
| CN108173856A (en) * | 2017-12-28 | 2018-06-15 | 北京奇虎科技有限公司 | Vehicle communication data safety detection method, device and car-mounted terminal |
| CN109067771A (en) * | 2018-09-06 | 2018-12-21 | 北京长城华冠汽车科技股份有限公司 | Security protection system, method and the vehicle of vehicle |
-
2018
- 2018-06-29 CN CN201810718061.XA patent/CN108924835B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102722968A (en) * | 2012-06-29 | 2012-10-10 | 山东电力集团公司电力科学研究院 | Electric automobile safety prewarning protection system and method based on cloud service vehicle-mounted terminal |
| WO2016108961A1 (en) * | 2014-12-30 | 2016-07-07 | Battelle Memorial Institute | Anomaly detection for vehicular networks for intrusion and malfunction detection |
| CN105743902A (en) * | 2016-03-08 | 2016-07-06 | 江苏大学 | Auxiliary driving vehicle gateway for multi-CPU hard isolation of intelligent interconnection |
| CN106094823A (en) * | 2016-06-29 | 2016-11-09 | 北京奇虎科技有限公司 | The processing method of vehicle hazard driving behavior and system |
| CN106184068A (en) * | 2016-06-30 | 2016-12-07 | 北京奇虎科技有限公司 | Automotive interior network security detection method and device, automobile |
| CN107194248A (en) * | 2017-04-21 | 2017-09-22 | 百度在线网络技术（北京）有限公司 | Crack down upon evil forces objective abduction method, device, equipment and the storage medium of automatic driving vehicle |
| CN108173856A (en) * | 2017-12-28 | 2018-06-15 | 北京奇虎科技有限公司 | Vehicle communication data safety detection method, device and car-mounted terminal |
| CN109067771A (en) * | 2018-09-06 | 2018-12-21 | 北京长城华冠汽车科技股份有限公司 | Security protection system, method and the vehicle of vehicle |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111726774B (en) * | 2020-06-28 | 2023-09-05 | 阿波罗智联(北京)科技有限公司 | Method, device, equipment and storage medium for defending attack |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108924835A (en) | 2018-11-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US20200059383A1 (en) | In-vehicle gateway device and communication restriction method | |
| US20210344700A1 (en) | Vehicle security monitoring apparatus, method and non-transitory computer readable medium | |
| US9401923B2 (en) | Electronic system for detecting and preventing compromise of vehicle electrical and control systems | |
| EP3136193B1 (en) | Security monitor for vehicle | |
| US20190182267A1 (en) | Vehicle security manager | |
| CN111142500B (en) | Permission setting method and device for vehicle diagnosis data and vehicle-mounted gateway controller | |
| US20200215930A1 (en) | Control apparatus, control method, and computer program | |
| US11784871B2 (en) | Relay apparatus and system for detecting abnormalities due to an unauthorized wireless transmission | |
| JP6808595B2 (en) | In-vehicle device, incident monitoring method | |
| CN110612527A (en) | Information processing apparatus and abnormality coping method | |
| CN108924835B (en) | Vehicle control system, method and safety control unit | |
| KR101960400B1 (en) | Braking system | |
| CN110753905A (en) | Control device, control method, and computer program | |
| CN111032438A (en) | Control apparatus, control method, and computer program | |
| EP3932722A1 (en) | Vehicle battery management apparatus and method thereof | |
| JP2012195996A (en) | Power supply control device and method, and power management system | |
| CN113631430B (en) | Vehicle-mounted computer, computer execution method and computer program | |
| KR20130065353A (en) | Method and apparatus for fault diagnosis network of car using can communication | |
| JP2017060057A (en) | Communication control device and communication system | |
| WO2021025061A1 (en) | Battery management system, battery device, battery management method, and computer program | |
| CN112685731A (en) | Electronic device intrusion detection | |
| CN116686258A (en) | Vehicle-mounted device and updating method | |
| CN104054048A (en) | Determining the operating status of an electrical system having a system controller and an actuator controller | |
| JP2020096320A (en) | Illegal signal processing device | |
| WO2015165987A1 (en) | Method for setting an image sensor of a vehicle camera of a motor vehicle into an image capturing state, camera system as well as motor vehicle |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |