CN112989431A - System file detection method and device of vehicle-mounted equipment and vehicle-mounted equipment - Google Patents

System file detection method and device of vehicle-mounted equipment and vehicle-mounted equipment Download PDF

Info

Publication number
CN112989431A
CN112989431A CN201911294818.8A CN201911294818A CN112989431A CN 112989431 A CN112989431 A CN 112989431A CN 201911294818 A CN201911294818 A CN 201911294818A CN 112989431 A CN112989431 A CN 112989431A
Authority
CN
China
Prior art keywords
vehicle
system file
mounted device
application
condition
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201911294818.8A
Other languages
Chinese (zh)
Inventor
蒋兴
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing CHJ Automobile Technology Co Ltd
Original Assignee
Beijing CHJ Automobile Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing CHJ Automobile Technology Co Ltd filed Critical Beijing CHJ Automobile Technology Co Ltd
Priority to CN201911294818.8A priority Critical patent/CN112989431A/en
Publication of CN112989431A publication Critical patent/CN112989431A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/64Protecting data integrity, e.g. using checksums, certificates or signatures
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B60VEHICLES IN GENERAL
    • B60RVEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/023Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
    • B60R16/0231Circuits relating to the driving or the functioning of the vehicle

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • General Health & Medical Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Mechanical Engineering (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Traffic Control Systems (AREA)

Abstract

The embodiment of the invention provides a method and a device for detecting a system file of vehicle-mounted equipment and the vehicle-mounted equipment, relates to the technical field of vehicle safety, and aims to solve the problem that whether the system file of the vehicle-mounted equipment is tampered or not cannot be detected in time in the prior art. The method comprises the following steps: under the condition that the vehicle-mounted equipment is in a starting state, judging whether a condition for detecting a system file of the vehicle-mounted equipment is met; if the condition for detecting the system file of the vehicle-mounted device is met, detecting the system file of the vehicle-mounted device to confirm whether the system file of the vehicle-mounted device is the same as a pre-stored system file. The embodiment of the invention is used for detecting the system file of the vehicle-mounted equipment.

Description

System file detection method and device of vehicle-mounted equipment and vehicle-mounted equipment
Technical Field
The invention relates to the technical field of vehicle safety, in particular to a system file detection method and device of vehicle-mounted equipment and the vehicle-mounted equipment.
Background
In recent years, with the rapid change of mobile internet technology, smart vehicle technology is also being developed vigorously. In an intelligent vehicle, vehicle-mounted equipment is an important component, and safe driving of the vehicle and stability and reliability of the vehicle-mounted equipment are not separated. The vehicle-mounted equipment comprises electronic equipment which is arranged in a vehicle and used for realizing vehicle auxiliary control and independent use in a vehicle-mounted environment, wherein the electronic equipment comprises an electronic fuel injection system, an anti-lock brake control system, an auxiliary steering device, a running computer, a vehicle-mounted sound box and the like. Under normal conditions, each vehicle-mounted device can stably and reliably operate under the control of the corresponding system file, however, if the system file of the vehicle-mounted device is maliciously tampered, the vehicle-mounted device cannot operate according to the preset system file, and further the vehicle control is disordered or out of control. For example: under normal conditions, the auxiliary steering device can output the steering assistance in the corresponding direction when a user controls the vehicle to steer, and if a system file of the auxiliary steering device is maliciously tampered, the auxiliary steering device may fail to output the steering assistance in the corresponding direction when the user controls the vehicle to steer, or even lift the steering assistance in the opposite direction when the user controls the vehicle to steer, so that the vehicle is out of control in steering. In order to improve the safety of the vehicle, the system file of the vehicle-mounted device needs to be detected, so that the tampering of the system file of the vehicle-mounted device can be timely found.
In the prior art, a method for detecting a system file of a vehicle-mounted device is as follows: when the vehicle-mounted equipment is restarted, the system file of the vehicle-mounted equipment is detected, and therefore whether the system file of the vehicle-mounted equipment is tampered or not is judged. However, in order to reduce the power consumption of the battery after the ignition switch of the vehicle is turned off and reduce the power consumption of the battery when a control unit in the CAN multi-path data transmission system fails, the conventional vehicle system generally adopts a sleep technology rather than a restart technology. That is, in the case where the user controls the engine of the vehicle to be turned off, the vehicle system enters a state in which the power consumption is very small after the engine is turned off for a certain period of time, instead of being directly turned off, and the vehicle system terminates the sleep mode, instead of being restarted, when the user vehicle controls the engine of the vehicle to be turned on again.
The existing vehicle system generally adopts a dormancy technology instead of a restarting technology, and only when the vehicle-mounted equipment is restarted, the system file of the vehicle-mounted equipment can be detected, so that the system file of the vehicle-mounted equipment cannot be detected in time in the prior art, and further whether the system file of the vehicle-mounted equipment is tampered or not cannot be detected in time.
Disclosure of Invention
In view of this, embodiments of the present invention provide a method and an apparatus for detecting a system file of a vehicle-mounted device, and the vehicle-mounted device, so as to solve a problem in the prior art that it is not possible to timely detect whether a system file of the vehicle-mounted device is tampered.
In order to achieve the above object, the embodiments of the present invention provide the following technical solutions:
in a first aspect, an embodiment of the present invention provides a method for detecting a system file of a vehicle-mounted device, where the method includes:
under the condition that the vehicle-mounted equipment is in a starting state, judging whether a condition for detecting a system file of the vehicle-mounted equipment is met;
if the condition for detecting the system file of the vehicle-mounted device is met, detecting the system file of the vehicle-mounted device to confirm whether the system file of the vehicle-mounted device is the same as a pre-stored system file.
As an optional implementation manner of the embodiment of the present invention, the condition that the system file of the vehicle-mounted device is detected includes:
the first application set does not contain the application which is currently installed;
or;
the time length of the current time from the time of last detection of the system file of the vehicle-mounted equipment is greater than the time length of a threshold value;
or;
and the use proportion of the CPU and/or the memory of the vehicle-mounted equipment is smaller than the threshold proportion.
As an optional implementation manner of the embodiment of the present invention, the method further includes:
if the system file is different from the prestored system file, acquiring an identifier of an application sending a remote control instruction when the remote control instruction is received;
judging whether a preset application identifier set contains the identifier of the application sending the remote control instruction or not;
and if the preset application identification set does not contain the identification of the application sending the remote control instruction, refusing to execute the remote control instruction.
As an optional implementation manner of the embodiment of the present invention, after refusing to execute the remote control instruction, the method further includes:
sending the state of the vehicle to which the vehicle-mounted equipment belongs to the cloud equipment;
receiving indication information sent by a cloud device, wherein the indication information is sent to the vehicle by the cloud device under the condition that the state of the vehicle meets the condition that the vehicle stops running;
and controlling the vehicle to stop running based on the indication information.
As an optional implementation manner of the embodiment of the present invention, the sending, to a cloud device, a state of a vehicle to which the vehicle-mounted device belongs includes:
and sending whether the person is in the vehicle and whether the gear of the vehicle is in a parking gear to cloud equipment.
As an optional implementation manner of the embodiment of the present invention, if the preset application identifier set includes an identifier of an application that sends the remote control instruction, the remote control instruction is executed.
As an optional implementation manner of the embodiment of the present invention, the detecting the system file of the vehicle-mounted device includes:
and detecting the system file of the vehicle-mounted equipment by a device mapping program verification DM-verify technology.
As an optional implementation manner of the embodiment of the present invention, the method further includes:
when the vehicle-mounted equipment is started, detecting whether applications in a second application set are installed in the vehicle-mounted equipment;
and if the applications in the second application set are installed in the vehicle-mounted equipment, confirming that the system file of the vehicle-mounted equipment is different from the prestored system file.
In a second aspect, an embodiment of the present invention provides a system file detection apparatus for a vehicle-mounted device, including:
the processing unit is used for judging whether a condition for detecting a system file of the vehicle-mounted equipment is met or not under the condition that the vehicle-mounted equipment is in a starting state;
the detection unit is used for detecting the system file of the vehicle-mounted device under the condition that the condition for detecting the system file of the vehicle-mounted device is met so as to confirm whether the system file of the vehicle-mounted device is the same as a pre-stored system file.
As an optional implementation manner of the embodiment of the present invention, the condition that the system file of the vehicle-mounted device is detected includes:
the first application set does not contain the application which is currently installed;
or;
the time length of the current time from the time of last detection of the system file of the vehicle-mounted equipment is greater than the time length of a threshold value;
or;
and the use ratio of a Central Processing Unit (CPU) and/or a memory of the vehicle-mounted equipment is smaller than a threshold value ratio.
As an optional implementation manner of the embodiment of the present invention, the apparatus further includes:
the acquisition unit is used for acquiring an identifier of an application sending the remote control instruction under the condition that the detection unit confirms that the system file is different from the pre-stored system file and receives the remote control instruction;
the judging unit is used for judging whether the preset application identifier set contains the identifier of the application for sending the remote control instruction or not;
and the execution unit is used for refusing to execute the remote control instruction under the condition that the preset application identification set does not contain the identification of the application sending the remote control instruction.
As an optional implementation manner of the embodiment of the present invention, the apparatus further includes:
the sending unit is used for sending the state of the vehicle to which the vehicle-mounted device belongs to the cloud device after the execution unit refuses to execute the remote control instruction;
the receiving unit is used for receiving indication information sent by a cloud device, and the indication information is sent to the vehicle by the cloud device under the condition that the state of the vehicle meets the vehicle stop operation condition;
and the control unit is used for controlling the vehicle to stop running based on the indication information.
As an optional implementation manner of the embodiment of the present invention, the sending unit is specifically configured to send, to a cloud device, whether there is a person in the vehicle and whether a gear of the vehicle is in a parking gear.
As an optional implementation manner of the embodiment of the present invention, the execution unit is further configured to execute the remote control instruction when the determination unit determines that the preset application identifier set includes an identifier of an application that sends the remote control instruction.
As an optional implementation manner of the embodiment of the present invention, the detection unit is specifically configured to detect a system file of the vehicle-mounted device through a DM-verify technology.
As an optional implementation manner of the embodiment of the present invention, the detecting unit is further configured to detect whether an application in a second application set is installed in the vehicle-mounted device when the vehicle-mounted device is started, and confirm that the system file of the vehicle-mounted device is different from the pre-stored system file when the application in the second application set is installed in the vehicle-mounted device.
In a third aspect, an embodiment of the present invention provides an on-vehicle device, including: a memory for storing a computer program and a processor; the processor is configured to execute the method for detecting the system file of the vehicle-mounted device according to the first aspect or any embodiment of the first aspect when the computer program is called.
In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements the system file detection method for the vehicle-mounted device according to the first aspect or any implementation manner of the first aspect.
Compared with the prior art that the system file of the vehicle-mounted device is detected only when the vehicle-mounted device is started, the system file detection method of the vehicle-mounted device provided by the embodiment of the invention can detect the system file of the vehicle-mounted device when the vehicle-mounted device is in the starting state, so as to realize the dynamic detection of the system file of the vehicle-mounted device, therefore, the embodiment of the invention can detect whether the system file of the vehicle-mounted equipment is tampered or not in time.
Drawings
Fig. 1 is a flowchart illustrating a step of a method for detecting a system file of a vehicle-mounted device according to an embodiment of the present invention;
FIG. 2 is a schematic structural diagram of a hash tree according to an embodiment of the present invention;
fig. 3 is a second flowchart illustrating a system file detection method of a vehicle-mounted device according to an embodiment of the present invention;
fig. 4 is a third flowchart illustrating steps of a system file detection method for a vehicle-mounted device according to an embodiment of the present invention;
FIG. 5 is a schematic structural diagram of a system file detection apparatus of a vehicle-mounted device according to an embodiment of the present invention;
fig. 6 is a schematic structural diagram of a system file detection apparatus of an on-board device according to another embodiment of the present invention;
fig. 7 is a schematic diagram of a hardware structure of the vehicle-mounted device according to the embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The term "and/or" herein is merely an association describing an associated object, meaning that three relationships may exist, e.g., a and/or B, may mean: a exists alone, A and B exist simultaneously, and B exists alone. In addition, the character "/" herein generally indicates that the former and latter related objects are in an "or" relationship; in the formula, the character "/" indicates that the preceding and following related objects are in a relationship of "division". The term "plurality" herein means two or more, unless otherwise specified.
For the convenience of clearly describing the technical solutions of the embodiments of the present invention, in the embodiments of the present invention, the terms "first" and "second" are used to distinguish the same items or similar items with basically the same functions or actions, and those skilled in the art can understand that the terms "first" and "second" are not limited to the quantity and execution order.
In the embodiments of the present invention, words such as "exemplary" or "for example" are used to mean serving as examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "e.g.," an embodiment of the present invention is not necessarily to be construed as preferred or advantageous over other embodiments or designs. Rather, use of the word "exemplary" or "such as" is intended to present concepts related in a concrete fashion. In the embodiments of the present invention, the meaning of "a plurality" means two or more unless otherwise specified.
An embodiment of the present invention provides a system file detection method of a vehicle-mounted device, and specifically, referring to fig. 1, the system file detection method of the vehicle-mounted device includes the following steps S11 and S12.
And S11, judging whether the system file detection condition of the vehicle-mounted equipment is met or not when the vehicle-mounted equipment is in the starting state.
Specifically, the vehicle-mounted device in the embodiment of the present invention may be a vehicle electronic control apparatus, for example: electronic fuel injection systems, anti-lock brake control, anti-skid control, traction control, electronically controlled suspensions, electronically controlled automatic transmissions, auxiliary steering devices, and the like; it may also be an in-vehicle electronic device, for example: vehicle information system (such as driving computer), navigation system, vehicle-mounted sound and video entertainment system, vehicle-mounted communication system and network equipment. The embodiment of the invention does not limit the type of the vehicle-mounted equipment.
As an optional implementation manner of the embodiment of the present invention, determining whether a condition for detecting a system file of the vehicle-mounted device is satisfied may be implemented by:
in a first way,
Confirming whether the first application set contains the application which is currently installed;
and if the first application set does not contain the application which is currently installed, confirming that the condition for detecting the system file of the vehicle-mounted equipment is met.
Wherein, the first application set can be set by a network administrator or a user according to requirements.
The first application set in the embodiment of the invention is equivalent to a white list of an application program, when it is detected that the vehicle-mounted device is installing an application except the white list, the system file of the vehicle-mounted device is likely to be tampered, and at this time, the system file of the vehicle-mounted device needs to be detected timely, so that if the first application set does not contain the application which is currently installed, it is determined that the condition for detecting the system file of the vehicle-mounted device is met.
The second way,
Determining whether the time length of the current time from the last time of detecting the system file of the vehicle-mounted equipment is greater than a threshold time length;
and if the time length from the current time to the last time of detecting the system file of the vehicle-mounted equipment is greater than the threshold time length, determining that the condition for detecting the system file of the vehicle-mounted equipment is met.
Specifically, the threshold time length may be set by a user according to a requirement, for example, the threshold time length may be 1 hour, 2 hours, and the like.
In addition, a timer may be provided in the vehicle-mounted device, and the timer may be set to a threshold time length, and when the vehicle-mounted device is in an activated state, the timer may once time out, and it may be confirmed that a condition for detecting a system file of the vehicle-mounted device is satisfied.
The third method,
Confirming whether the use ratio of a Central Processing Unit (CPU) and/or a memory of the vehicle-mounted equipment is smaller than a threshold value ratio;
and if the use ratio of a Central Processing Unit (CPU) and/or a memory of the vehicle-mounted equipment is smaller than a threshold ratio, determining that the condition for detecting the system file of the vehicle-mounted equipment is met.
Also, the threshold ratio can be set by the user according to the requirement, and for example, the threshold time length can be 50%, 40%, and the like.
In the embodiment, when it is determined whether the usage ratio of a Central Processing Unit (CPU) and/or a memory of the vehicle-mounted device is smaller than the threshold ratio, it is determined that the condition for detecting the system file of the vehicle-mounted device is satisfied, and the detection of the system file of the vehicle-mounted device is started, so that the embodiment can prevent the system file of the vehicle-mounted device from detecting and occupying too much CPU and/or memory, thereby affecting the vehicle-mounted device to implement other services.
In the above step S11, if the condition for detecting the system file of the vehicle-mounted device is satisfied, the following step S12 is executed.
As described above, the application currently being installed may not be included in the first set of applications; or the time length of the current time from the time of last detection of the system file of the vehicle-mounted equipment is greater than the time length of the threshold value; or the usage ratio of the central processing unit CPU and/or the memory of the vehicle-mounted device is smaller than the threshold ratio, the following step S12 is executed.
And S12, detecting the system file of the vehicle-mounted device to confirm whether the system file of the vehicle-mounted device is the same as a pre-stored system file.
Specifically, the pre-stored system file in the embodiment of the present invention refers to a system file stored in the vehicle-mounted device when the vehicle-mounted device performs system installation, or a modified system file obtained by modifying the system file of the vehicle-mounted device when modification is allowed. For example: in the process of upgrading the system of the vehicle-mounted equipment, the vehicle-mounted equipment receives an update package for modifying the system file, updates the system file according to the update package, and after the update is completed, the prestored system file is the system file updated according to the update package.
As an optional embodiment of the present invention, the detecting a system file of the vehicle-mounted device includes:
and detecting the system file of the vehicle-mounted equipment by using a device-map-verify (DM-verify) technology.
In particular, the DM-verify technique is a technique for verifying the integrity of a disk partition and preventing the disk partition from being modified. The principle of the DM-verify technology is as follows: taking a file to be detected (a system file of a vehicle-mounted device in the embodiment of the present invention) as a whole, dividing the file with a preset size into file blocks, compiling the file blocks, generating a unique hash value for each file block, storing the hash values in a hash tree, and encrypting a root hash value (root hash) of the hash tree by using a key. When the file is verified, the hash value of each file block is generated in the same mode, then the hash value of the file block is compared with the hash value in a pre-stored hash tree, and whether the detected file is modified or not compared with the file corresponding to the hash tree is confirmed according to the comparison result.
Further, data involved in the process of detecting the system file of the vehicle-mounted device by the DM-verify technology will be described below.
The data involved in the process of detecting the system file of the vehicle-mounted equipment by the DM-verify technology comprises the following data: img, system files (system), hash trees (verify tree), signature data (verify table), and error correction data (fec).
Img is a pre-stored system file of the vehicle-mounted device, namely a pre-stored system file.
The hash tree is generated according to a pre-stored system file. Illustratively, the hash tree of the pre-stored system file can be as shown in fig. 2, and fig. 2 illustrates that the tree with the size of each file block of 4K, hash includes 3 layers (a first layer, a second layer and a third layer).
The context-table is a string that describes a hash tree.
For example: table ` 1/dev/sda1/dev/sda 1409640962144262144 sha 2564392712 ba01368 eff 14b05c76f9e4df0d53664630b5d48632ed17a137f 390761 2342340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Wherein the first parameter (1) is a version number; the second and third parameters (/ dev/sda1) describe the protected disk partition; the protected disk partition in the above-mentioned version-table is/dev/sda 1; the fourth parameter (4096) and the fifth parameter (4096) describe the size of each file block (block) of the protected disk partition; that is, the size of the leaf node of the hash tree, and the size of the leaf node in the above-mentioned preference table is 4096(4k), that is, the file block is divided by 4 k. The sixth parameter (262144) and the seventh parameter (262144) describe how many blocks in total, i.e. how many leaf nodes the hash tree has. The eighth argument (sha256) describes the hash encryption algorithm, and the encryption algorithm used in the above example is the sha256 algorithm. The ninth parameter (4392712ba01368 effdf 14b05c76f9e4df0d53664630b5d48632ed17a137f39076) is the root hash value (root hash) of the hash tree. The tenth parameter is the encryption algorithm plus salt value (1234000000000000000000000000000000000000000000000000000000000000).
The fec data is used for searching the modified data in the disk partition where the system file is located after confirming that the system file is modified.
Compared with the prior art that the system file of the vehicle-mounted device is detected only when the vehicle-mounted device is started, the system file detection method of the vehicle-mounted device provided by the embodiment of the invention can detect the system file of the vehicle-mounted device when the vehicle-mounted device is in the starting state, so as to realize the dynamic detection of the system file of the vehicle-mounted device, therefore, the embodiment of the invention can detect whether the system file of the vehicle-mounted equipment is illegally modified or not more timely.
Further, referring to fig. 3, if it is detected in step S12 that the system file is different from the pre-stored system file, the method for detecting a system file of a vehicle-mounted device according to an embodiment of the present invention further includes:
and S31, acquiring the identifier of the application sending the remote control instruction when the remote control instruction is received.
Specifically, the application identifier may specifically be an application name, an icon, an Identity Document (ID), and the like, and the embodiment of the present invention does not limit the type of the application identifier, so that the application that sends the remote control instruction can be uniquely identified.
S32, judging whether the preset application identification set contains the identification of the application sending the remote control instruction.
Specifically, the preset application identifier set may be a set formed by identifiers of applications configured for the vehicle-mounted device and allowing the vehicle-mounted device to send the remote control instruction.
In the step S32, if the preset application identifier set does not include the identifier of the application sending the remote control instruction, the following step S33 is executed; if the preset application identifier set includes an identifier of an application that sends the remote control instruction, the following step S34 is executed.
And S33, refusing to execute the remote control command.
And S34, executing the remote control instruction.
That is, when the system file is different from the pre-stored system file and the remote control instruction is received, the received remote control instruction is executed only when the application sending the remote control instruction is an application allowing the remote control instruction to be sent to the vehicle-mounted device, and otherwise, the received remote control instruction is rejected to be executed. Since the above embodiment only executes the remote control instruction sent by the application that allows the remote control instruction to be sent to the vehicle-mounted device after confirming that the system file is different from the pre-stored system file, the above embodiment can avoid executing the remote control instruction sent by the malicious software to the vehicle-mounted device after the system file of the vehicle-mounted device is tampered.
Still further, referring to fig. 4, after step S33 (rejecting execution of the remote control instruction), the method for detecting a system file of a vehicle-mounted device according to an embodiment of the present invention further includes:
and S41, sending the state of the vehicle to which the vehicle-mounted device belongs to the cloud device.
As an optional implementation manner of the embodiment of the present invention, the sending, to a cloud device, a state of a vehicle to which the vehicle-mounted device belongs includes:
and sending whether the person is in the vehicle and whether the gear of the vehicle is in a parking gear to cloud equipment.
The embodiment of the invention does not limit the implementation mode of detecting whether a person is in the vehicle, and exemplarily, whether a person is in the vehicle can be detected through an infrared sensor, an oxygen sensor, an image sensor and the like.
In addition, whether the gear that sends the vehicle to high in the clouds equipment is in the parking shelves specifically can be: and sending 0 or 1, wherein 0 represents that the gear of the vehicle is not in the parking gear, 1 represents that the gear of the vehicle is in the parking gear, and the gear of the current vehicle can be directly sent to the cloud device.
And S42, receiving the indication information sent by the cloud equipment.
And the cloud end equipment sends the indication information to the vehicle when the state of the vehicle meets the condition that the vehicle stops running.
That is, after receiving the vehicle state sent by the vehicle-mounted device, the cloud device first determines whether the vehicle state meets the vehicle stop operation condition, and only if the vehicle state meets the vehicle stop operation condition, the cloud device sends the indication information to the vehicle-mounted device.
And S43, controlling the vehicle to stop running based on the indication information.
On one hand, the embodiment firstly judges whether the vehicle state meets the vehicle stop operation condition, and the vehicle is controlled to stop operation only if the vehicle state meets the vehicle stop operation condition, so that the embodiment of the invention can control the vehicle to stop operation on the premise of ensuring the driving safety of the vehicle.
On the other hand, compare in high in the clouds equipment, the mobile unit is invaded easily, and above-mentioned embodiment will confirm whether the vehicle satisfies vehicle stop operation condition processing process and put in high in the clouds equipment and carry out, consequently can avoid the mobile unit authority too big, and then avoids causing serious incident when the mobile unit is invaded.
As an optional implementation manner of the embodiment of the present invention, before the step S43 (controlling the vehicle to stop running based on the indication information), the method provided by the embodiment of the present invention further includes:
and receiving a confirmation operation input by a user, wherein the confirmation operation is used for confirming and controlling the vehicle to stop running.
For example, the user input confirmation operation may be performed in the following manner: a user sends a confirmation operation to the vehicle-mounted equipment through terminal equipment (such as a mobile phone and the like); or the user sends the confirmation operation to the cloud equipment through the terminal equipment, and the confirmation operation is sent to the vehicle-mounted equipment through the cloud equipment.
Namely, before the vehicle is controlled to stop running, the embodiment of the invention also adds the step flow of user confirmation, and the driving safety of the vehicle can be further ensured by adding the step.
As an optional embodiment, the method for detecting a system file of a vehicle-mounted device according to an embodiment of the present invention further includes:
when the vehicle-mounted equipment is started, detecting whether applications in a second application set are installed in the vehicle-mounted equipment;
and if the applications in the second application set are installed in the vehicle-mounted equipment, confirming that the system file of the vehicle-mounted equipment is different from the prestored system file.
The second application set is a set formed by applications which do not allow the vehicle-mounted device to be installed, and is equivalent to a blacklist of the applications, and the second application set can be set by a user according to requirements.
In the embodiment, when the vehicle-mounted device is started, whether the application in the second application set is installed in the vehicle-mounted device is detected, and when the application in the second application set is installed in the vehicle-mounted device, it is determined that the system file of the vehicle-mounted device is different from the pre-stored system file, and the system file of the vehicle-mounted device is tampered, so that the embodiment can find that the system file of the vehicle-mounted device is tampered more timely.
According to the method, the terminal device and the like can be divided into the functional modules. For example, the functional blocks may be divided for the respective functions, or two or more functions may be integrated into one block. The integrated module can be realized in a hardware mode, and can also be realized in a software functional module mode. It should be noted that, in the embodiment of the present application, the division of the module is schematic, and is only one logic function division, and there may be another division manner in actual implementation.
In the case of using an integrated unit, fig. 5 shows a schematic diagram of a possible structure of the system file detection apparatus of the vehicle-mounted device according to the above embodiment, and the system file detection apparatus 500 of the vehicle-mounted device includes:
the processing unit 51 is used for judging whether a condition for detecting a system file of the vehicle-mounted equipment is met or not under the condition that the vehicle-mounted equipment is in a starting state;
a detecting unit 52, configured to, if a condition for detecting the system file of the vehicle-mounted device is satisfied, detect the system file of the vehicle-mounted device to confirm whether the system file of the vehicle-mounted device is the same as a pre-stored system file.
As an optional implementation manner of the embodiment of the present invention, the condition that the system file of the vehicle-mounted device is detected includes:
the first application set does not contain the application which is currently installed;
or;
the time length of the current time from the time of last detection of the system file of the vehicle-mounted equipment is greater than the time length of a threshold value;
or;
and the use ratio of a Central Processing Unit (CPU) and/or a memory of the vehicle-mounted equipment is smaller than a threshold value ratio.
As an optional implementation manner of the embodiment of the present invention, referring to fig. 6, the apparatus 800 further includes:
an obtaining unit 53, configured to obtain an identifier of an application that sends a remote control instruction when the detecting unit determines that the system file is different from the pre-stored system file and receives the remote control instruction;
a determining unit 54, configured to determine whether a preset application identifier set includes an identifier of the application that sends the remote control instruction;
an executing unit 55, configured to refuse to execute the remote control instruction when the preset application identifier set does not include an identifier of an application that sends the remote control instruction.
As an alternative implementation manner of the embodiment of the present invention, referring to fig. 6, the apparatus 500 further includes:
a sending unit 56, configured to send, to a cloud device, a state of a vehicle to which the vehicle-mounted device belongs after the execution unit refuses to execute the remote control instruction;
the receiving unit 57 is configured to receive indication information sent by a cloud device, where the indication information is sent to the vehicle by the cloud device when a state of the vehicle meets a vehicle stop operation condition;
and a control unit 58 for controlling the vehicle to stop running based on the instruction information.
As an optional implementation manner of the embodiment of the present invention, the sending unit 56 is specifically configured to send, to a cloud device, whether there is a person in the vehicle and whether a gear of the vehicle is in a parking gear.
As an optional implementation manner of the embodiment of the present invention, the executing unit 55 is further configured to execute the remote control instruction when the determining unit determines that the preset application identifier set includes an identifier of an application that sends the remote control instruction.
As an optional implementation manner of the embodiment of the present invention, the detecting unit 52 is specifically configured to detect a system file of the vehicle-mounted device through a DM-verify technology.
As an optional implementation manner of the embodiment of the present invention, the detecting unit 52 is further configured to detect whether an application in a second application set is installed in the vehicle-mounted device when the vehicle-mounted device is started, and confirm that the system file of the vehicle-mounted device is different from the pre-stored system file when the application in the second application set is installed in the vehicle-mounted device.
The system file detection device of the vehicle-mounted equipment provided by the embodiment of the invention comprises: a processing unit and a detection unit; wherein the processing unit is used for judging whether a condition for detecting the system file of the vehicle-mounted equipment is met or not when the vehicle-mounted equipment is in a starting state, the detection unit is used for judging whether the condition for detecting the system file of the vehicle-mounted equipment is met or not when the condition for detecting the system file of the vehicle-mounted equipment is met, detecting the system file of the vehicle-mounted device to confirm whether the system file of the vehicle-mounted device is the same as a pre-stored system file, and then determining that the system file of the vehicle-mounted device is tampered, compared with the prior art that the system file of the vehicle-mounted device is detected only when the vehicle-mounted device is started, the embodiment of the invention can determine that the system file of the vehicle-mounted device is tampered, the system file of the vehicle-mounted equipment is detected, the dynamic detection of the system file of the vehicle-mounted equipment is realized, therefore, the embodiment of the invention can detect whether the system file of the vehicle-mounted equipment is illegally modified or not more timely.
Based on the same inventive concept, the embodiment of the invention also provides vehicle-mounted equipment. Fig. 7 is a schematic structural diagram of a system file detection apparatus of an in-vehicle device according to an embodiment of the present invention, and as shown in fig. 7, the in-vehicle device includes: a memory 71 and a processor 72, the memory 71 being for storing computer programs; the processor 72 is configured to execute the system file detection method of the vehicle-mounted device according to any one of the above embodiments when the computer program is called.
Specifically, the vehicle device provided in the embodiment of the present invention may be any type of vehicle device, for example: electronic fuel injection system, anti-lock brake control, anti-skid control, traction control, electronic control suspension, electronic control automatic transmission, auxiliary steering, vehicle information system (such as driving computer), navigation system, vehicle audio and video entertainment system, vehicle-mounted communication system, internet equipment and the like; the embodiment of the present invention does not limit the type of the vehicle device, and the system file detection apparatus including the vehicle device provided in the above embodiment is used as a standard.
Since the vehicle device provided by the embodiment of the present invention includes the system file detection apparatus of the vehicle device provided by the above embodiment, and can execute the system file detection method of the vehicle device provided by the above method embodiment, the technical effect of my can be achieved similar to that of the above embodiment, and details are not described here.
The embodiment of the invention also provides a computer-readable storage medium, wherein a computer program is stored on the computer-readable storage medium, and when being executed by a processor, the computer program realizes the system file detection method of the vehicle-mounted device in the embodiment of the method.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media having computer-usable program code embodied in the medium.
The Processor may be a Central Processing Unit (CPU), other general purpose Processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), an off-the-shelf Programmable Gate Array (FPGA) or other Programmable logic device, discrete Gate or transistor logic, discrete hardware components, etc. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The memory may include forms of volatile memory in a computer readable medium, Random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM). The memory is an example of a computer-readable medium.
Computer readable media include both permanent and non-permanent, removable and non-removable storage media. Storage media may implement information storage by any method or technology, and the information may be computer-readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.
Finally, it should be noted that: the above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.

Claims (15)

1. A system file detection method of vehicle-mounted equipment is characterized by comprising the following steps:
under the condition that the vehicle-mounted equipment is in a starting state, judging whether a condition for detecting a system file of the vehicle-mounted equipment is met;
if the condition for detecting the system file of the vehicle-mounted device is met, detecting the system file of the vehicle-mounted device to confirm whether the system file of the vehicle-mounted device is the same as a pre-stored system file.
2. The method according to claim 1, wherein the condition for detecting the system file of the vehicle-mounted device is satisfied and comprises:
the first application set does not contain the application which is currently installed;
or;
the time length of the current time from the time of last detection of the system file of the vehicle-mounted equipment is greater than the time length of a threshold value;
or;
and the use ratio of a Central Processing Unit (CPU) and/or a memory of the vehicle-mounted equipment is smaller than a threshold value ratio.
3. The method of claim 1, further comprising:
if the system file is different from the prestored system file, acquiring an identifier of an application sending a remote control instruction when the remote control instruction is received;
judging whether a preset application identifier set contains the identifier of the application sending the remote control instruction or not;
and if the preset application identification set does not contain the identification of the application sending the remote control instruction, refusing to execute the remote control instruction.
4. The method of claim 3, wherein after denying execution of the remote control instruction, the method further comprises:
sending the state of the vehicle to which the vehicle-mounted equipment belongs to the cloud equipment;
receiving indication information sent by a cloud device, wherein the indication information is sent to the vehicle by the cloud device under the condition that the state of the vehicle meets the condition that the vehicle stops running;
and controlling the vehicle to stop running based on the indication information.
5. The method of claim 4, wherein the sending the state of the vehicle to which the vehicle-mounted device belongs to a cloud device comprises:
and sending whether the person is in the vehicle and whether the gear of the vehicle is in a parking gear to cloud equipment.
6. The method according to claim 3, wherein the remote control instruction is executed if the preset application identifier set includes an identifier of an application that sends the remote control instruction.
7. The method according to any one of claims 1-6, wherein the detecting a system file of the vehicle-mounted device comprises:
and detecting the system file of the vehicle-mounted equipment by a device mapping program verification DM-verify technology.
8. The method according to any one of claims 1-6, further comprising:
when the vehicle-mounted equipment is started, detecting whether applications in a second application set are installed in the vehicle-mounted equipment;
and if the applications in the second application set are installed in the vehicle-mounted equipment, confirming that the system file of the vehicle-mounted equipment is different from the prestored system file.
9. A system file detection device of a vehicle-mounted device is characterized by comprising:
the processing unit is used for judging whether a condition for detecting a system file of the vehicle-mounted equipment is met or not under the condition that the vehicle-mounted equipment is in a starting state;
the detection unit is used for detecting the system file of the vehicle-mounted device under the condition that the condition for detecting the system file of the vehicle-mounted device is met so as to confirm whether the system file of the vehicle-mounted device is the same as a pre-stored system file.
10. The apparatus according to claim 9, wherein the condition for detecting the system file of the vehicle-mounted device is satisfied includes:
the first application set does not contain the application which is currently installed;
or;
the time length of the current time from the time of last detection of the system file of the vehicle-mounted equipment is greater than the time length of a threshold value;
or;
and the use ratio of a Central Processing Unit (CPU) and/or a memory of the vehicle-mounted equipment is smaller than a threshold value ratio.
11. The apparatus of claim 9, further comprising:
the acquisition unit is used for acquiring an identifier of an application sending the remote control instruction under the condition that the detection unit confirms that the system file is different from the pre-stored system file and receives the remote control instruction;
the judging unit is used for judging whether the preset application identifier set contains the identifier of the application for sending the remote control instruction or not;
and the execution unit is used for refusing to execute the remote control instruction under the condition that the preset application identification set does not contain the identification of the application sending the remote control instruction.
12. The apparatus of claim 11, further comprising:
the sending unit is used for sending the state of the vehicle to which the vehicle-mounted device belongs to the cloud device after the execution unit refuses to execute the remote control instruction;
the receiving unit is used for receiving indication information sent by a cloud device, and the indication information is sent to the vehicle by the cloud device under the condition that the state of the vehicle meets the vehicle stop operation condition;
and the control unit is used for controlling the vehicle to stop running based on the indication information.
13. The apparatus according to any one of claims 9-12, wherein the detecting unit is further configured to detect whether an application in a second set of applications is installed in the vehicle-mounted device when the vehicle-mounted device is started, and to confirm that the system file of the vehicle-mounted device is different from the pre-stored system file in a case that the application in the second set of applications is installed in the vehicle-mounted device.
14. An in-vehicle apparatus comprising: a memory for storing a computer program and a processor; the processor is used for executing the system file detection method of the vehicle-mounted device according to any one of claims 1-8 when the computer program is called.
15. A computer-readable storage medium on which a computer program is stored, the computer program, when executed by a processor, implementing the system file detection method of the in-vehicle apparatus according to any one of claims 1 to 8.
CN201911294818.8A 2019-12-16 2019-12-16 System file detection method and device of vehicle-mounted equipment and vehicle-mounted equipment Pending CN112989431A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911294818.8A CN112989431A (en) 2019-12-16 2019-12-16 System file detection method and device of vehicle-mounted equipment and vehicle-mounted equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201911294818.8A CN112989431A (en) 2019-12-16 2019-12-16 System file detection method and device of vehicle-mounted equipment and vehicle-mounted equipment

Publications (1)

Publication Number Publication Date
CN112989431A true CN112989431A (en) 2021-06-18

Family

ID=76343361

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201911294818.8A Pending CN112989431A (en) 2019-12-16 2019-12-16 System file detection method and device of vehicle-mounted equipment and vehicle-mounted equipment

Country Status (1)

Country Link
CN (1) CN112989431A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114084168A (en) * 2021-10-27 2022-02-25 北京百度网讯科技有限公司 Automatic driving system control method and device, electronic equipment and readable storage medium
CN114084168B (en) * 2021-10-27 2024-06-25 北京百度网讯科技有限公司 Automatic driving system control method, device, electronic equipment and readable storage medium

Citations (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2007265223A (en) * 2006-03-29 2007-10-11 Toyota Motor Corp Vehicle information communication system, management server, on-vehicle terminal, and vehicle information communication method
JP2014151720A (en) * 2013-02-06 2014-08-25 Toyota Motor Corp Tampering detection system and electronic control unit
CN105279421A (en) * 2014-06-19 2016-01-27 移威视信公司 Information safety detection system and method based on car networking accessing OBD II
CN106170953A (en) * 2014-04-17 2016-11-30 松下电器(美国)知识产权公司 Vehicle netbios, abnormal detection electronic control unit and abnormal detection method
JP2017167916A (en) * 2016-03-17 2017-09-21 株式会社デンソー Information processing system
CN107428294A (en) * 2015-01-20 2017-12-01 松下电器(美国)知识产权公司 Abnormal detected rule update method, abnormal detection electronic control unit and vehicle netbios
JP2018023023A (en) * 2016-08-04 2018-02-08 株式会社Subaru Vehicle control system
CN110017082A (en) * 2018-01-08 2019-07-16 比亚迪股份有限公司 Train switch door control method, device and system
CN110134412A (en) * 2019-03-25 2019-08-16 北京车和家信息技术有限公司 Oftware updating method, device, vehicle and computer readable storage medium
CN110226310A (en) * 2017-12-01 2019-09-10 松下电器(美国)知识产权公司 Electronic control unit, improper detection service device, vehicle netbios, In-vehicle networking monitoring system and In-vehicle networking monitor method
CN110276201A (en) * 2019-06-18 2019-09-24 广州小鹏汽车科技有限公司 A kind of safety detection method of onboard system, system and service equipment
CN114244596A (en) * 2021-12-10 2022-03-25 上海交通大学 Vehicle-mounted CAN (controller area network) anomaly detection method and system based on HTM (hyper text transport protocol)

Patent Citations (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2007265223A (en) * 2006-03-29 2007-10-11 Toyota Motor Corp Vehicle information communication system, management server, on-vehicle terminal, and vehicle information communication method
JP2014151720A (en) * 2013-02-06 2014-08-25 Toyota Motor Corp Tampering detection system and electronic control unit
CN106170953A (en) * 2014-04-17 2016-11-30 松下电器(美国)知识产权公司 Vehicle netbios, abnormal detection electronic control unit and abnormal detection method
CN105279421A (en) * 2014-06-19 2016-01-27 移威视信公司 Information safety detection system and method based on car networking accessing OBD II
CN107428294A (en) * 2015-01-20 2017-12-01 松下电器(美国)知识产权公司 Abnormal detected rule update method, abnormal detection electronic control unit and vehicle netbios
JP2017167916A (en) * 2016-03-17 2017-09-21 株式会社デンソー Information processing system
JP2018023023A (en) * 2016-08-04 2018-02-08 株式会社Subaru Vehicle control system
CN110226310A (en) * 2017-12-01 2019-09-10 松下电器(美国)知识产权公司 Electronic control unit, improper detection service device, vehicle netbios, In-vehicle networking monitoring system and In-vehicle networking monitor method
CN110017082A (en) * 2018-01-08 2019-07-16 比亚迪股份有限公司 Train switch door control method, device and system
CN110134412A (en) * 2019-03-25 2019-08-16 北京车和家信息技术有限公司 Oftware updating method, device, vehicle and computer readable storage medium
CN110276201A (en) * 2019-06-18 2019-09-24 广州小鹏汽车科技有限公司 A kind of safety detection method of onboard system, system and service equipment
CN114244596A (en) * 2021-12-10 2022-03-25 上海交通大学 Vehicle-mounted CAN (controller area network) anomaly detection method and system based on HTM (hyper text transport protocol)

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
CHRISTOPHER GUTIERREZ,MARCIO JULIATO,SHABBIR AHMED,MANOJ SASTRY: "Detecting Attacks Against Safety-Critical ADAS Based on In-Vehicle Network Message Patterns", 《2019 49TH ANNUAL IEEE/IFIP INTERNATIONAL CONFERENCE ON DEPENDABLE SYSTEMS AND NETWORKS – INDUSTRY TRACK》, pages 9 - 12 *
武晨旭: "面向车联网的车辆内部网络安全关键技术研究", 《中国优秀硕士学位论文全文数据库 信息科技辑》, no. 05, pages 035 - 415 *
王瑞云: "高安全等级车载安全网关设计的关键技术研究", 《中国优秀硕士学位论文全文数据库 工程科技Ⅱ辑》, no. 12, pages 035 - 147 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114084168A (en) * 2021-10-27 2022-02-25 北京百度网讯科技有限公司 Automatic driving system control method and device, electronic equipment and readable storage medium
CN114084168B (en) * 2021-10-27 2024-06-25 北京百度网讯科技有限公司 Automatic driving system control method, device, electronic equipment and readable storage medium

Similar Documents

Publication Publication Date Title
US11914712B1 (en) Blockchain based secure naming and update verification
CN102630320B (en) Information processing device and method for preventing unauthorized application cooperation
JP2021184253A (en) Specially programmed computing system with associated device configured to implement secure lockdown and method of use thereof
US20160306624A1 (en) Vehicle control storage methods and systems
JP6009622B1 (en) Update manager and in-vehicle software update system using the same
JP2013060047A (en) Vehicle network system, and method of processing vehicle information
CN109871225B (en) Electronic control unit ECU upgrading method and ECU
JPWO2018079004A1 (en) Control device, program update method, and computer program
US9710290B2 (en) Device for the reliable integration of a software component into a motor vehicle
EP2744244A1 (en) Method for managing charge security and mobile terminal
CN107323423B (en) Vehicle anti-theft method and system
CN110324806B (en) Control device, recording medium, and control method
CN113407911A (en) Validating software residing on a remote computing device
JP6962258B2 (en) Control devices, programs for control devices, and control methods
US20210064734A1 (en) Cross authentication method for computer system security
EP3313041A1 (en) Application download method and device
WO2021111681A1 (en) Information processing device, control method, and program
CN112600839A (en) Method and device for constructing security threat association view based on Internet of vehicles platform
CN112989431A (en) System file detection method and device of vehicle-mounted equipment and vehicle-mounted equipment
US20240073037A1 (en) Internal certificate authority for electronic control unit
CN115391277A (en) Method, device, equipment and medium for detecting directory capacity quota
CN114372255A (en) Identity authentication method and device based on application software fingerprint
US20220219560A1 (en) Transport energy transfer
CN111369246B (en) Calling authentication method and device of intelligent contract, electronic equipment and storage medium
JP6698778B2 (en) Control system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination