CN110515371A - Detection method, the first controller and the ECU that ECU data is distorted - Google Patents
Detection method, the first controller and the ECU that ECU data is distorted Download PDFInfo
- Publication number
- CN110515371A CN110515371A CN201910884802.6A CN201910884802A CN110515371A CN 110515371 A CN110515371 A CN 110515371A CN 201910884802 A CN201910884802 A CN 201910884802A CN 110515371 A CN110515371 A CN 110515371A
- Authority
- CN
- China
- Prior art keywords
- ecu
- check information
- controller
- data
- check
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0218—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterised by the fault detection method dealing with either existing or incipient faults
- G05B23/0224—Process history based detection method, e.g. whereby history implies the availability of large amounts of data
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24065—Real time diagnostics
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Combined Controls Of Internal Combustion Engines (AREA)
Abstract
The embodiment of the present invention provides a kind of detection method that ECU data is distorted, the first controller and ECU, and this method includes that the first controller receives the first check information that electronic control unit ECU is sent；First check information is that ECU is generated according to the data to be verified being locally stored by preset algorithm；First check information is compared by the first controller with the second check information prestored, obtains comparison result；Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU；First controller determines the first check results of ECU data according to the comparison result；If first check results are verification failure, the first controller takes corresponding measure.The embodiment of the present invention participates in the safety check of ECU by using other controllers on vehicle, can effectively improve the safety of ECU data, and can find in time after ECU data is tampered, and avoids increasing and lose.
Description
Technical field
The present embodiments relate to technical field of data processing more particularly to a kind of detection methods that ECU data is distorted,
One controller and ECU.
Background technique
Engine electronic control unit (Electronic Control Unit, ECU) factory related data is usually basis
The demand configuration of client, which carries out solidifying when engine is offline and vehicle is offline, on job number writes with a brush dipped in Chinese ink, different functional configuration,
The price of vehicle is different.But vehicle has been sold currently on the market and the case where many ECU datas are distorted has occurred, such as by more
Change ECU data to promote engine power output, be turned on or off part whole vehicle functions, modification discharge and mounted automatic diagnosis
System (On-Board Diagnostics, OBD) related data, close post-processing urea injection etc., it is such the occurrence of it is tight
The modification for compromising the interests while partial data of dealer or main engine plants again can cause regulation and security risk.
In the prior art, checking algorithm is generally had secure access to by ECU to be encrypted, to prevent the data of ECU
It is write with a brush dipped in Chinese ink by improper.
However, above-mentioned technical proposal only realizes the encryption inside ECU, it is easier to be cracked, safety is very low.
Summary of the invention
The embodiment of the present invention provides a kind of detection method that ECU data is distorted, the first controller and ECU, to improve ECU number
According to safety, prevent from being tampered.
In a first aspect, the embodiment of the present invention provides a kind of detection method that ECU data is distorted, comprising:
First controller receives the first check information that electronic control unit ECU is sent；First check information is ECU
It is generated according to the data to be verified being locally stored by preset algorithm；
First check information is compared by the first controller with the second check information prestored, obtains comparing knot
Fruit；Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU；
First controller determines the first check results of ECU data according to the comparison result；
If first check results are verification failure, the first controller takes corresponding measure.
In a kind of possible design, first check information is ECU periodicity sending；First controller connects
Before the first check information for receiving ECU transmission, further includes:
First controller adds up the number for the first check information for not receiving ECU transmission on time, is added up
Number；
First controller determines the second check results of ECU data according to the cumulative number；
If first check results are verification failure, the first controller takes corresponding measure, comprising:
If first check results are verification failure and/or second check results are verification failure, the first control
Device processed takes corresponding measure.
In a kind of possible design, first controller takes corresponding measure, comprising:
First controller carries out downgrade processing.
In a kind of possible design, before first controller receives the first check information that ECU is sent, also wrap
It includes:
First controller receives the second check information and stores second check information to local.
Second aspect, the embodiment of the present invention provide a kind of detection method that ECU data is distorted, comprising:
ECU generates the first check information by preset algorithm according to the data to be verified being locally stored；
First check information is sent to the first controller by ECU, so that first controller is by first school
It tests information to be compared with the second check information prestored, obtains comparison result, and result judges that ECU data is based on this comparison
It is no to verify successfully；Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU.
In a kind of possible design, first check information is sent to the first controller by the ECU, comprising:
First check information is sent periodically to CAN network by ECU, so that the first controller is connect by CAN network
Receive first check information.
The third aspect, the embodiment of the present invention provide a kind of detection device that ECU data is distorted, comprising:
Receiving module, for receiving the first check information of ECU transmission；First check information is ECU according to local
What the data to be verified of storage were generated by preset algorithm；
Comparison module is compared for first check information to be compared with the second check information prestored
As a result；Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU；
First determining module, for determining the first check results of ECU data according to the comparison result；
Execution module, for taking corresponding measure when first check results are verification failure.
Fourth aspect, the embodiment of the present invention provide a kind of detection device that ECU data is distorted, comprising:
Generation module, for generating the first check information by preset algorithm according to the data to be verified being locally stored；
Sending module, for first check information to be sent to the first controller, so that first controller will
First check information is compared with the second check information prestored, obtains comparison result, and result is sentenced based on this comparison
Whether disconnected ECU data verifies success；Second check information is that configuration data is answered to generate only by preset algorithm according to ECU
One mark.
5th aspect, the embodiment of the present invention provide a kind of first controller, comprising: at least one processor and memory；
The memory stores computer executed instructions；
At least one described processor executes the computer executed instructions of memory storage so that it is described at least one
Processor executes method described in the various possible designs of first aspect and first aspect as above.
6th aspect, the embodiment of the present invention provide a kind of ECU, comprising: at least one processor and memory；
The memory stores computer executed instructions；
At least one described processor executes the computer executed instructions of memory storage so that it is described at least one
Processor executes method described in the various possible designs of second aspect and second aspect as above.
7th aspect, the embodiment of the present invention provide a kind of computer readable storage medium, the computer-readable storage medium
Computer executed instructions are stored in matter, when processor execute the computer executed instructions when, realize first aspect as above with
And method described in the various possible designs of first aspect.
Eighth aspect, the embodiment of the present invention provide a kind of computer readable storage medium, the computer-readable storage medium
Computer executed instructions are stored in matter, when processor execute the computer executed instructions when, realize second aspect as above with
And method described in the various possible designs of second aspect.
Detection method, the first controller and the ECU that ECU data provided in this embodiment is distorted, this method pass through the first control
Device processed receives the first check information that electronic control unit ECU is sent；First check information is ECU according to being locally stored
Data to be verified are generated by preset algorithm；First controller is by first check information and the second check information for prestoring
It is compared, obtains comparison result；Second check information is that configuration data is answered to generate only by preset algorithm according to ECU
One mark；First controller determines the first check results of ECU data according to the comparison result；If first check results
For verification failure, then the first controller takes corresponding measure.Detection method provided in this embodiment, by using on vehicle other
Controller participates in the safety check of ECU, can effectively improve the safety of ECU data, and can after ECU data is tampered
Discovery in time is avoided increasing and be lost.
Detailed description of the invention
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below
There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is this hair
Bright some embodiments for those of ordinary skill in the art without any creative labor, can be with
It obtains other drawings based on these drawings.
Fig. 1 is the structural schematic diagram of an application scenarios of the invention；
Fig. 2 is the flow diagram for the detection method that the ECU data that one embodiment of the invention provides is distorted；
Fig. 3 is the flow diagram for the detection method that the ECU data that further embodiment of this invention provides is distorted；
Fig. 4 is the flow diagram for the detection method that the ECU data that further embodiment of this invention provides is distorted；
Fig. 5 is the flow diagram for the detection method that the ECU data that further embodiment of this invention provides is distorted；
Fig. 6 is the structural schematic diagram for the first controller that further embodiment of this invention provides；
Fig. 7 is the structural schematic diagram for the first controller that further embodiment of this invention provides；
Fig. 8 is the structural schematic diagram for the ECU that further embodiment of this invention provides；
Fig. 9 is the hardware structural diagram for the first controller that further embodiment of this invention provides；
Figure 10 is the hardware structural diagram for the ECU that further embodiment of this invention provides.
Specific embodiment
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention
In attached drawing, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is
A part of the embodiment of the present invention, instead of all the embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art
Every other embodiment obtained without creative efforts, shall fall within the protection scope of the present invention.
Description and claims of this specification and term " first ", " second ", " third ", " in above-mentioned attached drawing
The (if present)s such as four " are to be used to distinguish similar objects, without being used to describe a particular order or precedence order.It should manage
The data that solution uses in this way are interchangeable under appropriate circumstances, so that the embodiment of the present invention described herein for example can be to remove
Sequence other than those of illustrating or describe herein is implemented.In addition, term " includes " and " having " and theirs is any
Deformation, it is intended that cover it is non-exclusive include, for example, containing the process, method of a series of steps or units, system, production
Product or equipment those of are not necessarily limited to be clearly listed step or unit, but may include be not clearly listed or for this
A little process, methods, the other step or units of product or equipment inherently.
Technical solution of the present invention is described in detail with specifically embodiment below.These specific implementations below
Example can be combined with each other, and the same or similar concept or process may be repeated no more in some embodiments.
Hereinafter, the part term in the application is explained, in order to those skilled in the art understand that:
1) message: the data cell of exchange and transmission in a kind of network, the message that each controller is sent have the controller
Corresponding ID, to identify its uniqueness.
2) ABS: anti-blocking brake system (Antilock Brake System, ABS) one kind is monitored and is controlled during braking
The electronic control unit of car speed processed.
3) TCU: gear box control unit (Transmission Control Unit, TCU) is for realizing fluid drive control
System makes to drive simpler.
4) ECU: electronic control unit (Electronic Control Unit, ECU) is for realizing engine and vehicle function
It can control.
5) RCU: retarder control unit (Retarde Control Unit, RCU) is for controlling retarder.
6) BCU: vehicle body control unit (Body of car Contrion Unit, BCU) is for controlling non-on vehicle start
The relevant electric component of machine, such as various turn signals, rain brush, glass lifting etc..
7) IMMO: anti-theft locking system of engine (Immobilizer) utilizes the password and starting electric switch of chip in key
In password matched to control the starting of engine, it is antitheft to achieve the purpose that.
8) EEPROM: electrically erasable programmable read-only memory (Electrically Erasable Programmable
Read only memory, EEPROM), refer to the band Electrically Erasable Programmable Read-Only Memory that data are not lost after power down.
Fig. 1 is the structural schematic diagram of an application scenarios of the invention, as shown in Figure 1, ECU data tampering detection system includes
ECU101 and the first controller 102.ECU101 is connect with the first controller 102, for generating the first check information, and should
First check information is sent to the first controller 102.First controller 102 receives first check information, and to this first
Check information is verified, and vehicle normally starts if verifying successfully, if verification failure, can take corresponding measure (such as
Close the partial function of the first controller 102).Optionally, ECU101 can be passed through the first check information in the form of message
CAN network is sent to the first controller 102.Optionally, which can also include connecting with ECU101
CAN instrument 103, the operating parameter of vehicle and engine can be checked by the CAN instrument 103.The CAN instrument 103 may be used also
In data check to participate in ECU101.Specifically, CAN instrument 103 can be written in the second verification data, CAN instrument 103 exists
After vehicle launch, the first verification data that ECU101 is sent are received, and the first verification data and the second verification data are carried out pair
Than, and check results are obtained according to comparing result, and take corresponding measure (for example, CAN instrument 103, drops in verification failure
Grade processing).Optionally, the first controller 102 can be at least one of following: anti-blocking brake system ABS, gearbox control
Unit TCU, retarder control unit RCU, vehicle body control unit BCU or anti-theft locking system of engine IMMO.
During specific implementation, other controllers are needed to participate in the information (of anti-tamper verification ECU when vehicle is offline
Two check informations) write-in the first controller (can be anti-blocking brake system ABS, gear box control unit TCU, retarder control
Unit R CU processed, vehicle body control unit BCU and anti-theft locking system of engine IMMO) in, using the first controller on vehicle with
Carry out safety check, Engine ECU periodicity sending " verification in the form of broadcast after T15 is powered on are interactively communicated between ECU
Message " (the first check information), the first controller that anti-tamper verification is participated on vehicle receive the message and parse, with the first control
Second check information of device internal preset processed is proofreaded, and quotes failure in the first controller if inconsistent.Using upper
Detection method is stated, so that other controllers participate in the safety check of ECU on vehicle, the safety of ECU data can be effectively improved,
And it can be found in time after ECU data is tampered, avoid increasing and lose.
How to be solved with technical solution of the specifically embodiment to technical solution of the present invention and the application below above-mentioned
Technical problem is described in detail.These specific embodiments can be combined with each other below, for the same or similar concept
Or process may repeat no more in certain embodiments.Below in conjunction with attached drawing, the embodiment of the present invention is described.
Fig. 2 is the flow diagram for the detection method that the ECU data that one embodiment of the invention provides is distorted.As shown in Fig. 2,
This method comprises:
201, the first controller receives the first check information that electronic control unit ECU is sent；First check information
It is that ECU is generated according to the data to be verified being locally stored by preset algorithm.
In practical application, which can be one or more that any and ECU in vehicle in addition to the ecu be communicated
A controller, such as can be at least one of following: anti-blocking brake system ABS, gear box control unit TCU, retarder
Control unit RCU, vehicle body control unit BCU or anti-theft locking system of engine IMMO.
Specifically, the first controller receives what ECU was generated by preset algorithm according to data to be verified after T15 is powered on
First check information.The preset algorithm can there are many, such as can be hash algorithm or MD5 Message Digest 5.This implementation
Example does not limit this.
202, first check information is compared by the first controller with the second check information prestored, is compared
As a result；Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU.
Optionally, the first controller first check information is compared with the second check information prestored including,
Judge whether the first check information is consistent with the second check information.
Specifically, needing other controllers to participate in the information of anti-tamper verification (i.e. according to ECU ECU when vehicle is offline
The second check information for inside answering configuration data to generate by preset algorithm) it is written in the first controller, which is
ECU answers the unique identification of configuration data.After T15 is powered on, the first controller is by the first check information received and second school
It tests information and carries out consistency check and correction.
203, the first controller determines the first check results of ECU data according to the comparison result.
In the present embodiment, the comparison result that the first controller obtains may include the first check information and the second check information
Consistent or the first check information and the inconsistent two kinds of results of the second check information.When comparison result is the first check information and the
When two check informations are consistent, the first check results of ECU data are to verify successfully.When comparison result is the first check information and the
When two check informations are inconsistent, the first check results of ECU data are verification failure.
If 204, first check results are verification failure, the first controller takes corresponding measure.
Optionally, first controller takes corresponding measure, comprising:
First controller carries out downgrade processing；First controller is at least one of following: anti-blocking brake system
ABS, gear box control unit TCU, retarder control unit RCU, vehicle body control unit BCU, anti-theft locking system of engine
IMMO。
The detection method that ECU data provided in this embodiment is distorted receives electronic control unit ECU by the first controller
The first check information sent；First check information is that ECU according to the data to be verified being locally stored passes through preset algorithm
It generates；First check information is compared by the first controller with the second check information prestored, obtains comparison result；
Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU；First controller according to
The comparison result determines the first check results of ECU data；If first check results are verification failure, the first control
Device takes corresponding measure.Detection method provided in this embodiment participates in the safe school of ECU by using other controllers on vehicle
It tests, the safety of ECU data can be effectively improved, and can be found in time after ECU data is tampered, avoid increasing and damage
It loses.
Fig. 3 is the flow diagram for the detection method that the ECU data that further embodiment of this invention provides is distorted.Such as Fig. 3 institute
Show, this method comprises:
301, the first controller receives the second check information and stores second check information to local；Described second
Check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU.
Specifically, needing other controllers to participate in the information of anti-tamper verification (i.e. according to ECU ECU when vehicle is offline
The second check information for inside answering configuration data to generate by preset algorithm) it is written in the first controller, which is
ECU answers the unique identification of configuration data.First controller receives second check information and stores to local.
302, first check information is ECU periodicity sending；First controller is sent to ECU is not received on time
The number of the first check information added up, obtain cumulative number.
303, the first controller determines the second check results of ECU data according to the cumulative number.
In practical application, it can be communicatively coupled by CAN network between the first controller and ECU, it is contemplated that software
The reliability of function is provided with fault tolerant mechanism in the present embodiment.Checking prediction message is not received for due to the accidental time-out of message
Situation, the abnormal fault-tolerant number of setting, the reliability of assurance function.And when cumulative number is greater than preset times then by the second school
It tests result and is determined as verification failure.In addition, can also avoid using by the judgement of the abnormal fault-tolerant number (i.e. cumulative number) of setting
ECU is replaced by malice in family, and perhaps malice setting ECU data stops paying out message or malice disconnects between ECU and the first controller
The modes such as communication connection (such as cutting CAN bus) verify to escape.
In the present embodiment, which can be stored in EEPROM after each driving cycle, next time
The cumulative number of last stored is read when time-count cycle starts from EEPROM.After cumulative number reaches preset times, carry out
It resets, adds up again.
304, the first controller receives the first check information that electronic control unit ECU is sent；First check information
It is that ECU is generated according to the data to be verified being locally stored by preset algorithm.
305, first check information is compared by the first controller with the second check information prestored, is compared
As a result.
306, the first controller determines the first check results of ECU data according to the comparison result；
Step 304 is similar to step 203 with step 201 in above-described embodiment to step 306 in the present embodiment, herein not
It repeats again.
If 307, first check results are verification failure and/or second check results are verification failure, the
One controller takes corresponding measure.
Specifically, the first check results and the second check results are directed to, as long as there is a check results for verification failure,
Corresponding measure is taken to the first controller, which can be for the first controller progress downgrade processing.
As an example it is assumed that the first controller is that (its function of controlling may include turning to vehicle car body controller BCU
Lamp, rain brush, glass lifting etc.) when the first check results or the second check results are verification failure, it can be to the first controller
Carry out downgrade processing, it can its partial function is closed, such as: the turn signal control function and glass liter of the BCU can be closed
Control function drops, to limit the use after ECU is distorted to vehicle.
The detection method that ECU data provided in this embodiment is distorted has comprehensively considered the function of each controller of vehicle, benefit
The anti-tamper function that Engine ECU data are realized with the mode that other controllers on vehicle participate in safety check, effectively improves ECU
The safety of data, and can be found in time after ECU data is tampered, it avoids increasing and lose；And CAN is fully considered
Network fault tolerance mechanism, the case where for checking prediction message is not received due to the accidental time-out of message, the abnormal fault-tolerant number of setting guarantees
The reliability of function.
Fig. 4 is the flow diagram for the detection method that the ECU data that further embodiment of this invention provides is distorted.Such as Fig. 4 institute
Show, this method comprises:
401, ECU generates the first check information by preset algorithm according to the data to be verified being locally stored.
Specifically, the first controller receives what ECU was generated by preset algorithm according to data to be verified after T15 is powered on
First check information.The preset algorithm can there are many, such as can be hash algorithm or MD5 Message Digest 5.This implementation
Example does not limit this.
402, first check information is sent to the first controller by ECU, so that first controller is by described
One check information is compared with the second check information prestored, obtains comparison result, and result judges ECU number based on this comparison
According to whether verifying success；Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU.
Optionally, first check information is sent to the first controller by the ECU, comprising:
First check information is sent periodically to CAN network by ECU, so that the first controller is connect by CAN network
Receive first check information.
Optionally, the first check information can be sent periodically to CAN network in the form of message by ECU.
The detection method that ECU data provided in this embodiment is distorted receives electronic control unit ECU by the first controller
The first check information sent；First check information is that ECU according to the data to be verified being locally stored passes through preset algorithm
It generates；First check information is compared by the first controller with the second check information prestored, obtains comparison result；
Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU；First controller according to
The comparison result determines the first check results of ECU data；If first check results are verification failure, the first control
Device takes corresponding measure.Detection method provided in this embodiment participates in the safe school of ECU by using other controllers on vehicle
It tests, the safety of ECU data can be effectively improved, and can be found in time after ECU data is tampered, avoid increasing and damage
It loses.
Fig. 5 is the flow diagram for the detection method that the ECU data that further embodiment of this invention provides is distorted.Such as Fig. 5 institute
Show, the interactive process between ECU and the first controller be described in detail in the present embodiment on the basis of the above embodiments,
This method comprises:
501, the first controller receives the second check information and stores second check information to local.
502, ECU generates the first check information by preset algorithm according to the data to be verified being locally stored；
503, first check information is sent to the first controller by ECU, so that first controller is by described
One check information is compared with the second check information prestored, obtains comparison result, and result judges ECU number based on this comparison
According to whether verifying success；Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU.
504, the first controller adds up the number for the first check information for not receiving ECU transmission on time, obtains
Cumulative number；
505, the first controller determines the second check results of ECU data according to the cumulative number；
506, the first controller receives the first check information that electronic control unit ECU is sent；
507, first check information is compared by the first controller with the second check information prestored, is compared
As a result；
508, the first controller determines the first check results of ECU data according to the comparison result；
If 509, first check results are verification failure and/or second check results are verification failure, the
One controller takes corresponding measure.
In practical application, (it can be controlled using the first controller on vehicle for anti-blocking brake system ABS, gearbox single
First TCU, retarder control unit RCU, vehicle body control unit BCU and anti-theft locking system of engine IMMO) and ECU between friendship
Mutual communication carries out safety check, Engine ECU periodicity sending " checking prediction message ", vehicle in the form of broadcast after T15 is powered on
Upper the first controller for participating in anti-tamper verification receives the message and parses, the anti-tamper verification with the first controller internal preset
Information is proofreaded, and quotes failure in corresponding controller if inconsistent, meanwhile, if the controller for participating in verification is more
Secondary " checking prediction message " for not receiving ECU, that is, equally quoting failure when receiving abnormal accumulative frequency more than or equal to preset times (should
The abnormal each driving cycle of accumulative frequency only accumulates once, which can store after each driving cycle
In EEPROM, the cumulative number of last stored is read from EEPROM when time-count cycle starts next time.In cumulative number
After reaching preset times, it is zeroed out, adds up again), the first controller carries out downgrade processing, each participation school after failure is quoted
The controller degraded mode tested can be demarcated and be executed according to the function being each responsible for.
The detection method that ECU data provided in this embodiment is distorted has comprehensively considered the function of each controller of vehicle, benefit
The anti-tamper function that Engine ECU data are realized with the mode that other controllers on vehicle participate in safety check, effectively improves ECU
The safety of data, and can be found in time after ECU data is tampered, it avoids increasing and lose；And CAN is fully considered
Network fault tolerance mechanism, the case where for checking prediction message is not received due to the accidental time-out of message, the abnormal fault-tolerant number of setting guarantees
The reliability of function.In addition, user can also be avoided to pass through evil by the judgement of the abnormal fault-tolerant number (i.e. cumulative number) of setting
Meaning replacement ECU, perhaps malice setting ECU data stops paying out message or malice is disconnected and being communicated to connect between ECU and the first controller
Modes such as (such as cutting CAN bus) verify to escape.
Fig. 6 is the structural schematic diagram for the first controller that further embodiment of this invention provides.As shown in fig. 6, first control
Device 60 processed includes: receiving module 601, comparison module 602, the first determining module 603 and execution module 604.
Receiving module 601, for receiving the first check information of ECU transmission；First check information is ECU according to this
What the data to be verified of ground storage were generated by preset algorithm；
Comparison module 602 is compared for first check information to be compared with the second check information prestored
Relatively result；Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU；
First determining module 603, for determining the first check results of ECU data according to the comparison result；
Execution module 604, for taking corresponding measure when first check results are verification failure.
First controller provided in an embodiment of the present invention receives the first verification that ECU is sent by receiving module 601 and believes
Breath；First check information is that ECU is generated according to the data to be verified being locally stored by preset algorithm；Comparison module
602 are compared first check information with the second check information prestored, obtain comparison result；The second verification letter
Breath is the unique identification for being answered configuration data to generate by preset algorithm according to ECU；First determining module 603 is relatively tied according to described
Fruit determines the first check results of ECU data；Execution module 604 takes phase when first check results are verification failure
Answer measure.The safety check that ECU is participated in by using other controllers on vehicle, can effectively improve the safety of ECU data,
And it can be found in time after ECU data is tampered, avoid increasing and lose.
Fig. 7 is the structural schematic diagram for the first controller that further embodiment of this invention provides.As shown in fig. 7, first control
Device 80 processed further include: accumulation module 605, the second determining module 606 and memory module 607.
Optionally, first check information is ECU periodicity sending；The equipment, further includes:
Accumulation module 605, for the first controller to do not receive on time ECU transmission the first check information number into
Row is accumulative, obtains cumulative number；
Second determining module 606 determines that the second verification of ECU data is tied according to the cumulative number for the first controller
Fruit；
Correspondingly, the execution module 604, is specifically used for:
If first check results are verification failure and/or second check results are verification failure, the first control
Device processed takes corresponding measure.
Optionally, the execution module 604 is specifically used for:
Downgrade processing is carried out to the first controller；First controller is at least one of following: braking anti-lock system
Unite ABS, gear box control unit TCU, retarder control unit RCU, vehicle body control unit BCU, anti-theft locking system of engine
IMMO。
Optionally, the equipment further include:
Memory module 607, for receiving the second check information and storing second check information to local.
ECU provided in an embodiment of the present invention can be used for executing above-mentioned using the first controller as the implementation of the method for executing subject
Example, it is similar that the realization principle and technical effect are similar, and details are not described herein again for the present embodiment.
Fig. 8 is the structural schematic diagram for the ECU that further embodiment of this invention provides.As shown in figure 8, the ECU80 includes: to generate
Module 801 and sending module 802.
Generation module 801, for generating the first check information by preset algorithm according to the data to be verified being locally stored；
Sending module 802, for first check information to be sent to the first controller, so that first controller
First check information is compared with the second check information prestored, obtains comparison result, and result based on this comparison
Judge whether ECU data verifies success；Second check information is to answer configuration data to generate by preset algorithm according to ECU
Unique identification.
ECU provided in this embodiment, it is pre- for being passed through according to the data to be verified being locally stored by generation module 801
Imputation method generates the first check information；Sending module 802, for first check information to be sent to the first controller, with
It is compared first controller first check information with the second check information prestored, obtains comparison result,
And result judges whether ECU data verifies success based on this comparison；Second check information is to be answered configuration data logical according to ECU
Cross the unique identification of preset algorithm generation.The safety check that ECU is participated in by using other controllers on vehicle, can effectively mention
The safety of high ECU data, and can be found in time after ECU data is tampered, it avoids increasing and lose.
Optionally, the sending module 802, is specifically used for: first check information is sent periodically to CAN by ECU
Network, so that the first controller receives first check information by CAN network.
ECU provided in an embodiment of the present invention, can be used for executing it is above-mentioned using ECU as the embodiment of the method for executing subject, in fact
Existing principle is similar with technical effect, and details are not described herein again for the present embodiment.
Fig. 9 is the hardware structural diagram for the first controller that further embodiment of this invention provides.As shown in figure 9, this reality
The first controller 90 for applying example offer includes: at least one processor 901 and memory 902.The detection that the ECU data is distorted is set
Standby 90 further include communication component 903.Wherein, processor 901, memory 902 and communication component 903 are connected by bus 904.
During specific implementation, at least one processor 901 executes the computer execution that the memory 902 stores and refers to
It enables, so that at least one processor 901 executes what ECU data performed by the detection device 90 that ECU data as above is distorted was distorted
Detection method.
When the comparison step of the present embodiment is executed by server, the communication component 903 can by the first check information and
Second check information is sent to server.
The specific implementation process of processor 901 can be found in above method embodiment, and it is similar that the realization principle and technical effect are similar,
Details are not described herein again for the present embodiment.
In above-mentioned embodiment shown in Fig. 9, it should be appreciated that processor can be central processing unit (English:
Central Processing Unit, referred to as: CPU), can also be other general processors, digital signal processor (English:
Digital Signal Processor, referred to as: DSP), specific integrated circuit (English: Application Specific
Integrated Circuit, referred to as: ASIC) etc..General processor can be microprocessor or the processor is also possible to
Any conventional processor etc..Hardware processor can be embodied directly in conjunction with the step of invention disclosed method to have executed
At, or in processor hardware and software module combination execute completion.
Memory may include high speed RAM memory, it is also possible to and it further include non-volatile memories NVM, for example, at least one
Magnetic disk storage.
Bus can be industry standard architecture (Industry Standard Architecture, ISA) bus, outer
Portion's apparatus interconnection (Peripheral Component, PCI) bus or extended industry-standard architecture (Extended
Industry Standard Architecture, EISA) bus etc..Bus can be divided into address bus, data/address bus, control
Bus etc..For convenient for indicating, the bus in illustrations does not limit only a bus or a type of bus.
Figure 10 is the hardware structural diagram for the ECU that further embodiment of this invention provides.As shown in Figure 10, the present embodiment mentions
The ECU100 of confession includes: at least one processor 1001 and memory 1002.The detection device 100 that the ECU data is distorted also wraps
Include communication component 1003.Wherein, processor 1001, memory 1002 and communication component 1003 are connected by bus 1004.
During specific implementation, at least one processor 1001 executes the computer that the memory 1002 stores and executes
Instruction, so that at least one processor 1001 executes ECU data performed by the detection device 100 that ECU data as above is distorted and usurps
The detection method changed.
When being executed by server the step of first check information of generation of the present embodiment, which can be incited somebody to action
Data to be verified are sent to server.
The communication component 1003 can be also used for the first check information being sent to the first controller.
The specific implementation process of processor 1001 can be found in above method embodiment, implementing principle and technical effect class
Seemingly, details are not described herein again for the present embodiment.
In above-mentioned embodiment shown in Fig. 10, it should be appreciated that processor can be central processing unit (English:
Central Processing Unit, referred to as: CPU), can also be other general processors, digital signal processor (English:
Digital Signal Processor, referred to as: DSP), specific integrated circuit (English: Application Specific
Integrated Circuit, referred to as: ASIC) etc..General processor can be microprocessor or the processor is also possible to
Any conventional processor etc..Hardware processor can be embodied directly in conjunction with the step of invention disclosed method to have executed
At, or in processor hardware and software module combination execute completion.
Memory may include high speed RAM memory, it is also possible to and it further include non-volatile memories NVM, for example, at least one
Magnetic disk storage.
Bus can be industry standard architecture (Industry Standard Architecture, ISA) bus, outer
Portion's apparatus interconnection (Peripheral Component, PCI) bus or extended industry-standard architecture (Extended
Industry Standard Architecture, EISA) bus etc..Bus can be divided into address bus, data/address bus, control
Bus etc..For convenient for indicating, the bus in illustrations does not limit only a bus or a type of bus.
The application also provides a kind of computer readable storage medium, and calculating is stored in the computer readable storage medium
Machine executes instruction, and when processor executes the computer executed instructions, the ECU data for realizing that the first controller as above executes is usurped
The detection method changed.
The application also provides a kind of computer readable storage medium, and calculating is stored in the computer readable storage medium
Machine executes instruction, and when processor executes the computer executed instructions, realizes the inspection that the ECU data that ECU as above is executed is distorted
Survey method.
Above-mentioned computer readable storage medium, above-mentioned readable storage medium storing program for executing can be by any kind of volatibility or non-
Volatile storage devices or their combination realize that, such as static random access memory (SRAM), electrically erasable is only
It reads memory (EEPROM), Erasable Programmable Read Only Memory EPROM (EPROM), programmable read only memory (PROM) is read-only to deposit
Reservoir (ROM), magnetic memory, flash memory, disk or CD.Readable storage medium storing program for executing can be general or specialized computer capacity
Any usable medium enough accessed.
A kind of illustrative readable storage medium storing program for executing is coupled to processor, to enable a processor to from the readable storage medium storing program for executing
Information is read, and information can be written to the readable storage medium storing program for executing.Certainly, readable storage medium storing program for executing is also possible to the composition portion of processor
Point.Processor and readable storage medium storing program for executing can be located at specific integrated circuit (Application Specific Integrated
Circuits, referred to as: ASIC) in.Certainly, processor and readable storage medium storing program for executing can also be used as discrete assembly and be present in equipment
In.
Those of ordinary skill in the art will appreciate that: realize that all or part of the steps of above-mentioned each method embodiment can lead to
The relevant hardware of program instruction is crossed to complete.Program above-mentioned can be stored in a computer readable storage medium.The journey
When being executed, execution includes the steps that above-mentioned each method embodiment to sequence；And storage medium above-mentioned include: ROM, RAM, magnetic disk or
The various media that can store program code such as person's CD.
Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention., rather than its limitations；To the greatest extent
Pipe present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that: its according to
So be possible to modify the technical solutions described in the foregoing embodiments, or to some or all of the technical features into
Row equivalent replacement；And these are modified or replaceed, various embodiments of the present invention technology that it does not separate the essence of the corresponding technical solution
The range of scheme.
Claims (10)
1. a kind of detection method that ECU data is distorted characterized by comprising
First controller receives the first check information that electronic control unit ECU is sent；First check information be ECU according to
What the data to be verified being locally stored were generated by preset algorithm；
First check information is compared by the first controller with the second check information prestored, obtains comparison result；Institute
Stating the second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU；
First controller determines the first check results of ECU data according to the comparison result；
If first check results are verification failure, the first controller takes corresponding measure.
2. the method according to claim 1, wherein first check information is ECU periodicity sending；Institute
Before the first check information for stating the reception ECU transmission of the first controller, further includes:
First controller adds up the number for the first check information for not receiving ECU transmission on time, obtains cumulative number；
First controller determines the second check results of ECU data according to the cumulative number；
If first check results are verification failure, the first controller takes corresponding measure, comprising:
If first check results are verification failure and/or second check results are verification failure, the first controller
Take corresponding measure.
3. according to the method described in claim 2, it is characterized in that, first controller takes corresponding measure, comprising:
First controller carries out downgrade processing.
4. the method according to claim 1, wherein first controller receives the first verification that ECU is sent
Before information, further includes:
First controller receives the second check information and stores second check information to local.
5. a kind of detection method that ECU data is distorted characterized by comprising
ECU generates the first check information by preset algorithm according to the data to be verified being locally stored；
First check information is sent to the first controller by ECU, so that first controller believes first verification
Cease and be compared with the second check information prestored, obtain comparison result, and based on this comparison result judge ECU data whether school
Test success；Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU.
6. according to the method described in claim 5, it is characterized in that, first check information is sent to first by the ECU
Controller, comprising:
First check information is sent periodically to CAN network by ECU, so that the first controller receives institute by CAN network
State the first check information.
7. a kind of detection device that ECU data is distorted characterized by comprising
Receiving module, for receiving the first check information of ECU transmission；First check information is ECU according to being locally stored
Data to be verified generated by preset algorithm；
Comparison module obtains comparison result for first check information to be compared with the second check information prestored；
Second check information is the unique identification for being answered configuration data to generate by preset algorithm according to ECU；
First determining module, for determining the first check results of ECU data according to the comparison result；
Execution module, for taking corresponding measure when first check results are verification failure.
8. a kind of detection device that ECU data is distorted characterized by comprising
Generation module, for generating the first check information by preset algorithm according to the data to be verified being locally stored；
Sending module, for first check information to be sent to the first controller, so that first controller will be described
First check information is compared with the second check information prestored, obtains comparison result, and result judges ECU based on this comparison
Whether data verify success；Second check information is the unique mark for being answered configuration data to generate by preset algorithm according to ECU
Know.
9. a kind of first controller characterized by comprising at least one processor and memory；
The memory stores computer executed instructions；
At least one described processor executes the computer executed instructions of the memory storage, so that at least one described processing
Device executes the detection method distorted such as the described in any item ECU datas of Claims 1-4.
10. a kind of ECU characterized by comprising at least one processor and memory；
The memory stores computer executed instructions；
At least one described processor executes the computer executed instructions of the memory storage, so that at least one described processing
Device executes the detection method distorted such as the described in any item ECU datas of claim 5 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910884802.6A CN110515371A (en) | 2019-09-19 | 2019-09-19 | Detection method, the first controller and the ECU that ECU data is distorted |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910884802.6A CN110515371A (en) | 2019-09-19 | 2019-09-19 | Detection method, the first controller and the ECU that ECU data is distorted |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN110515371A true CN110515371A (en) | 2019-11-29 |
Family
ID=68632786
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910884802.6A Pending CN110515371A (en) | 2019-09-19 | 2019-09-19 | Detection method, the first controller and the ECU that ECU data is distorted |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110515371A (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112689982A (en) * | 2020-04-15 | 2021-04-20 | 华为技术有限公司 | Data verification method and device |
| CN113268046A (en) * | 2021-04-12 | 2021-08-17 | 延锋伟世通电子科技（上海）有限公司 | Diagnosis networking safety unlocking implementation system under AUTOSAR framework |
| CN113566869A (en) * | 2021-06-29 | 2021-10-29 | 东风电驱动系统有限公司 | Automatic calibration method and system for outgoing signal of vehicle-mounted instrument |
| CN113709101A (en) * | 2021-07-19 | 2021-11-26 | 英博超算(南京)科技有限公司 | Automobile fingerprint safety identification system and method |
| CN114647233A (en) * | 2022-05-18 | 2022-06-21 | 浙江国利网安科技有限公司 | PLC operation configuration monitoring method and device, storage medium and electronic equipment |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103796894A (en) * | 2011-09-12 | 2014-05-14 | 丰田自动车株式会社 | Method and system for vehicle information integrity verification |
| CN103999410A (en) * | 2011-12-22 | 2014-08-20 | 丰田自动车株式会社 | Communication system and communication method |
| CN104320465A (en) * | 2014-10-27 | 2015-01-28 | 青岛金讯网络工程有限公司 | Communication system and mode |
| CN106027260A (en) * | 2016-05-12 | 2016-10-12 | 成都信息工程大学 | Key pre-distribution based automobile ECU integrity authentication and encrypted communication method |
| WO2016189523A1 (en) * | 2015-05-28 | 2016-12-01 | Daniel Cohen | Tamper resistant case |
| CN108248532A (en) * | 2018-01-31 | 2018-07-06 | 北京新能源汽车股份有限公司 | Automobile information verification method, electronic control unit and vehicle-mounted acquisition terminal |
| CN110109690A (en) * | 2019-07-02 | 2019-08-09 | 潍柴动力股份有限公司 | A kind of ECU data writes with a brush dipped in Chinese ink method and system |
-
2019
- 2019-09-19 CN CN201910884802.6A patent/CN110515371A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103796894A (en) * | 2011-09-12 | 2014-05-14 | 丰田自动车株式会社 | Method and system for vehicle information integrity verification |
| CN103999410A (en) * | 2011-12-22 | 2014-08-20 | 丰田自动车株式会社 | Communication system and communication method |
| CN104320465A (en) * | 2014-10-27 | 2015-01-28 | 青岛金讯网络工程有限公司 | Communication system and mode |
| WO2016189523A1 (en) * | 2015-05-28 | 2016-12-01 | Daniel Cohen | Tamper resistant case |
| CN106027260A (en) * | 2016-05-12 | 2016-10-12 | 成都信息工程大学 | Key pre-distribution based automobile ECU integrity authentication and encrypted communication method |
| CN108248532A (en) * | 2018-01-31 | 2018-07-06 | 北京新能源汽车股份有限公司 | Automobile information verification method, electronic control unit and vehicle-mounted acquisition terminal |
| CN110109690A (en) * | 2019-07-02 | 2019-08-09 | 潍柴动力股份有限公司 | A kind of ECU data writes with a brush dipped in Chinese ink method and system |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112689982A (en) * | 2020-04-15 | 2021-04-20 | 华为技术有限公司 | Data verification method and device |
| WO2021207986A1 (en) * | 2020-04-15 | 2021-10-21 | 华为技术有限公司 | Data verification method and apparatus |
| CN112689982B (en) * | 2020-04-15 | 2022-04-29 | 华为技术有限公司 | Data verification method, device and storage medium |
| CN113268046A (en) * | 2021-04-12 | 2021-08-17 | 延锋伟世通电子科技（上海）有限公司 | Diagnosis networking safety unlocking implementation system under AUTOSAR framework |
| CN113566869A (en) * | 2021-06-29 | 2021-10-29 | 东风电驱动系统有限公司 | Automatic calibration method and system for outgoing signal of vehicle-mounted instrument |
| CN113709101A (en) * | 2021-07-19 | 2021-11-26 | 英博超算(南京)科技有限公司 | Automobile fingerprint safety identification system and method |
| CN114647233A (en) * | 2022-05-18 | 2022-06-21 | 浙江国利网安科技有限公司 | PLC operation configuration monitoring method and device, storage medium and electronic equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110515371A (en) | Detection method, the first controller and the ECU that ECU data is distorted | |
| CN108762783B (en) | Software updating method and device for vehicle system and vehicle system | |
| US9401923B2 (en) | Electronic system for detecting and preventing compromise of vehicle electrical and control systems | |
| CN111775864B (en) | Remote debugging method and system and vehicle | |
| CN109788033B (en) | Unmanned vehicle remote debugging method, device and system and storage medium | |
| CN107833321B (en) | Equipment binding and unbinding method, car locking method and related equipment | |
| CN103713527B (en) | Refreshing method, writing apparatus and writing system for automobile electronic controller | |
| US5974351A (en) | Multiplexed electronic control systems | |
| CN110071904A (en) | A kind of detection method of car-mounted terminal and system, server and storage medium | |
| CN113656056B (en) | Charging seat, charging seat upgrading method, device, equipment and storage medium | |
| CN102722171A (en) | Method and system for detecting anomaly of automobile instrument | |
| CN109274307A (en) | Motor rotation becomes initial angle scaling method, device, equipment and system | |
| CN105438125A (en) | Vehicle locking function control method and device | |
| DE102013219100A1 (en) | Methods and devices for authenticating measured data of a battery | |
| DE112010005725B4 (en) | Vehicle data abnormality determination device | |
| CN109407651A (en) | The control method and device of vehicle | |
| CN114827183A (en) | Vehicle diagnosis method, system, device and storage medium | |
| CN112298100A (en) | Vehicle and vehicle control method and device | |
| CN113348110A (en) | Electronic control device and safety verification method for electronic control device | |
| JP7392544B2 (en) | In-vehicle ECU, program and information processing method | |
| CN114338073A (en) | Protection method, system, storage medium and equipment for vehicle-mounted network | |
| CN111994016A (en) | Matching method and device for vehicle fuel pump, vehicle-mounted equipment and storage medium | |
| JP4921947B2 (en) | Vehicle anti-theft system | |
| CN116701177A (en) | Method and device for testing interface pins of vehicle-mounted diagnostic system and electronic equipment | |
| US20240212400A1 (en) | Vehicle remote diagnosis system and method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20191129 |