CN113064047A - Testing device and testing method for end-to-end protection between electronic control units - Google Patents
Testing device and testing method for end-to-end protection between electronic control units Download PDFInfo
- Publication number
- CN113064047A CN113064047A CN202110246238.2A CN202110246238A CN113064047A CN 113064047 A CN113064047 A CN 113064047A CN 202110246238 A CN202110246238 A CN 202110246238A CN 113064047 A CN113064047 A CN 113064047A
- Authority
- CN
- China
- Prior art keywords
- upper computer
- module
- message
- tested
- counter value
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000012360 testing method Methods 0.000 title claims abstract description 92
- 238000004891 communication Methods 0.000 claims abstract description 62
- 238000012545 processing Methods 0.000 claims abstract description 11
- 238000000034 method Methods 0.000 claims description 26
- 238000012795 verification Methods 0.000 claims description 20
- 230000002159 abnormal effect Effects 0.000 claims description 18
- 230000005540 biological transmission Effects 0.000 claims description 10
- 230000007274 generation of a signal involved in cell-cell signaling Effects 0.000 claims description 10
- 238000010998 test method Methods 0.000 claims description 4
- 238000012986 modification Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 230000003068 static effect Effects 0.000 description 2
- 238000007792 addition Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000002347 injection Methods 0.000 description 1
- 239000007924 injection Substances 0.000 description 1
- 238000004801 process automation Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01R—MEASURING ELECTRIC VARIABLES; MEASURING MAGNETIC VARIABLES
- G01R31/00—Arrangements for testing electric properties; Arrangements for locating electric faults; Arrangements for electrical testing characterised by what is being tested not provided for elsewhere
- G01R31/28—Testing of electronic circuits, e.g. by signal tracer
- G01R31/2801—Testing of printed circuits, backplanes, motherboards, hybrid circuits or carriers for multichip packages [MCP]
- G01R31/281—Specific types of tests or tests for a specific type of fault, e.g. thermal mapping, shorts testing
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01R—MEASURING ELECTRIC VARIABLES; MEASURING MAGNETIC VARIABLES
- G01R31/00—Arrangements for testing electric properties; Arrangements for locating electric faults; Arrangements for electrical testing characterised by what is being tested not provided for elsewhere
- G01R31/28—Testing of electronic circuits, e.g. by signal tracer
- G01R31/282—Testing of electronic circuits specially adapted for particular applications not provided for elsewhere
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0208—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
- G05B23/0213—Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Computer Hardware Design (AREA)
- Microelectronics & Electronic Packaging (AREA)
- Test And Diagnosis Of Digital Computers (AREA)
Abstract
The invention discloses an end-to-end protection testing device between electronic control units, which comprises an upper computer and is characterized in that the upper computer also comprises a mainboard signal receiving module, an analog signal generating module connected with the mainboard signal receiving module, a test result display module connected with a device to be tested and a processing module; the mainboard signal receiving module, the analog signal generating module and the test result display module are all connected with the processing module in the upper computer, and all modules start to operate after the device to be tested is in communication connection with the upper computer. The automatic test effectively reduces the workload and the test difficulty of test workers, improves the efficiency of test work and has strong practicability; by adopting a closed loop structure, dynamic data and check codes can be obtained, the data part in the message can be flexibly modified according to the test case, and the flexibility is high; and a small part of data fluctuation can also obtain a check code result in real time, so that the safety of the whole vehicle system is ensured.
Description
Technical Field
The present invention relates to the field of electronic component testing, and in particular, to a testing apparatus and a testing method for end-to-end protection between electronic control units.
Background
In the vehicle control device, the security of the device depends on the integrity and correctness of data, and then the data exchange between the sending end and the receiving end affects the security of the device. According to the definition in ISO26262, there may be failure modes such as repeated transmission of information, information loss, information delay, and information sequence error during data exchange. End-to-end protection is a security-related exchange of data that is protected at runtime to eliminate the effects of possible failures in the communication link. In the prior art, an open-loop structure is adopted, an upper computer sends static data messages in a circulating manner in a predefined manner, and when the content of a data part needs to be changed, a lookup table needs to be recalculated and defined, so that the process is complicated and not flexible enough, a tester needs to know the specific calculation process of a redundancy check code, and the requirement on the tester is high; in addition, for data signals with dynamic fluctuation, such as cell voltage, the fluctuation is 2 to 3 mv, and the predefined table lookup method cannot meet the test requirement.
Disclosure of Invention
The invention aims to overcome the problems that in the prior art, when the content of a data part needs to be changed, a lookup table needs to be recalculated and defined, and the process is complicated; the specific calculation process of the redundancy check code needs to be known by a tester, and the flexibility is not high; for data signals which can fluctuate dynamically, such as cell voltage, the fluctuation of 2-3 millivolts can occur, and the precision is not enough, the device for testing end-to-end protection between electronic control units is provided, the device adopts a closed loop structure, an upper computer receives messages and then modifies Id to send back to an ECU mainboard again, dynamic data sending is achieved, flexibility is improved, testers do not need to know a specific calculation process, the process is simple, check code results can be obtained in real time even if only a small part of data fluctuates, and 100% coverage of testing conditions can be achieved.
In order to realize the purposes of simple process, high flexibility, high precision and low requirement on testers, the invention adopts the following technical scheme:
an end-to-end protection testing device between electronic control units comprises an upper computer, and is characterized in that the upper computer also comprises a mainboard signal receiving module, an analog signal generating module connected with the mainboard signal receiving module, a test result display module connected with a device to be tested, and a processing module; the main board signal receiving module, the analog signal generating module and the test result display module are all connected with a processing module in the upper computer, and after the device to be tested is in communication connection with the upper computer, each module starts to operate;
an upper computer: receiving a signal sent from a device to be tested, processing the signal and performing feedback display on a test result;
mainboard signal receiving module: the device is internally arranged in the upper computer, receives the message sent by the device to be tested and forwards the message to the analog signal generating module;
the analog signal generating module: the upper computer is arranged in the main board, receives the message sent by the main board signal receiving module and forwards the message to the device to be tested;
the test result display module: the device is built in the upper computer, and receives and displays the verification result sent by the device to be tested;
the device to be tested: the device comprises an ECU mainboard which is a test object of the device and is connected with a mainboard signal receiving module, an analog signal generating module and a test result display module in an upper computer.
The device adopts a closed loop structure, the device to be tested is usually an ECU mainboard, when the capability of end-to-end protection of the ECU mainboard is tested in practical application, the ECU mainboard is firstly in communication connection with an upper computer, at the moment, the ECU mainboard CAN continuously send messages to the upper computer in real time through a CAN bus, after a mainboard signal receiving module of the upper computer receives the messages, the messages are processed and forwarded to an analog signal generating module, the analog signal generating module retransmits the received messages to the ECU mainboard, the ECU mainboard compares and processes counter values in the retransmitted messages, finally, redundancy check codes are obtained, the redundancy check codes are compared with the redundancy check codes in the received messages, the results are fed back to the upper computer, a test result display module in the upper computer receives and displays the results, namely, the whole device is in a complete closed loop structure, compared with the open loop structure of the traditional method, the flexibility ratio is higher, in addition at whole in-process, need not the tester and operate, whole process automation handles, and the process is simple, and the tester also need not to know the computational process of redundant check code, and the degree of requirement to the tester reduces, and when ECU mainboard and host computer begin to communicate, the ECU mainboard just constantly, sends data signal to the host computer in real time, and this kind of mode just only has the fluctuation of the data of small part also can obtain the check code result in real time, can realize testing 100% of operating mode and cover. The device disclosed by the invention is strong in practicability, can be used for rapidly testing different types of ECU mainboards, can judge whether normal communication can be carried out, and can judge the type of abnormal communication if normal communication cannot be carried out, and the result is displayed to a user through the feedback of the upper computer.
An end-to-end protection test method between electronic control units adopts the test device, which is characterized in that: the method comprises the following steps:
a. the device to be tested is in communication connection with the upper computer, and constantly sends a check message to the upper computer in real time through a CAN bus;
b. after capturing a message sent by the device to be tested, a mainboard signal receiving module in the upper computer modifies the Id of the message and forwards the message to the analog signal generating module;
c. the analog signal generation module is a virtual node in the upper computer, and retransmits the message to the device to be tested after receiving the message for modifying the Id;
d. the CAN bus of the device to be tested receives the message from the analog signal generating module and then stores the message, the running program of the device to be tested compares an expected counter value with a counter value in the received message, and if the expected counter value is equal to the received counter value, the expected counter value is calculated and fed back to the upper computer;
the method comprises the steps of firstly sending a message to an upper computer through an ECU mainboard of a device to be tested, compared with the traditional technical scheme that a predefined static data signal is directly sent to the ECU mainboard to be tested by an upper computer, the process is simpler, a tester does not need to perform table look-up work, all the test processes are automatic, as long as the ECU mainboard of the device to be tested starts to establish communication connection with the upper computer, the upper computer can automatically perform the test work, and a test result display module in the upper computer displays the test result, even if only small data change exists, the message is continuously sent to the upper computer in real time through the ECU mainboard, and small fluctuation can be timely checked and displayed.
As a preferable aspect of the above, the calculation operation in step d includes:
comparing the expected counter value with the counter value in the received message by the ECU mainboard, and calculating the expected counter value and the data part in the received message to obtain a redundancy check code;
d2. comparing the redundant check code with the check code in the received message to obtain a check result;
d3. and feeding back the checking result to the upper computer.
In an ECU mainboard of the device to be tested, the ECU mainboard can automatically carry out subsequent operation according to the message which is sent back from the analog signal generation module and is subjected to Id modification, if the counter value expected by the device to be tested is the same as the counter value in the received message, the ECU mainboard and the data part in the received message are calculated to obtain a redundancy check code, the calculated redundancy check code is compared with the check code in the received message, a check result is returned, and the result is fed back to an upper computer; and if the counter value expected by the device to be tested is different from the counter value in the received message, directly returning a verification result, feeding the result back to the upper computer, and displaying that the communication state is abnormal communication.
As a preferable scheme of the foregoing scheme, the step of feeding back the result to the upper computer in step d3 further includes: and a test result display module of the upper computer displays communication state information according to the check result received by the upper computer, wherein the communication state information comprises a normal communication state and an abnormal communication state. And the upper computer judges whether the communication state is a normal communication state or an abnormal communication state according to a result E2ECOT _ Pdu _ ChkStatus corresponding to a state structure variable E2ECOT _ PdiRx _ Info in an IDE interface in the test result display module. When the ECU mainboard of the device to be tested is compared with data, the result can be fed back to the upper computer, the test result display module of the upper computer can display whether the ECU mainboard is in a normal communication state or an abnormal communication state, if the ECU mainboard is in the abnormal communication state, the error type of the abnormal communication state can be displayed, and a user is reminded to take corresponding measures.
As a preferred scheme of the above scheme, the test result display module of the upper computer displays that the communication state information is in a normal communication state according to the verification result received by the upper computer: after the redundant verification code is verified to be matched with the verification code in the received message, the analog signal generation module of the upper computer modifies the Id of the message received from the main board signal receiving module and transmits the modified Id to the device to be tested, the verification of the receiving end is judged to be passed, and the test result display module displays the normal communication state. And the normal communication state comprises that an analog signal generation module of the upper computer modifies the Id of the message received from the mainboard signal receiving module and then forwards the message to the device to be tested, the upper computer judges that the verification of the receiving end passes according to the E2ECOT _ STATUS _ OK displayed in the result E2ECOT _ Pdu _ ChkStatus in the state structure body, and the received data can be used for controlling the system for normal communication. When the communication test is carried out, if no abnormity exists in the message received from the ECU mainboard of the device to be tested, and no tampering is carried out at the analog signal generating module, the verification of the receiving end can pass, and the fact that the ECU mainboard of the device to be tested is in normal communication is proved.
As a preferable mode of the above, the abnormal communication state includes: repeated transmission, information loss, information tampered.
As a preferred scheme of the above scheme, the step of displaying, by a test result display module of the upper computer, communication state information as information repeatedly transmitted according to the verification result received by the upper computer includes: the EDU main board receives the same counter value sent repeatedly. After the upper computer receives the message, the mainboard signal receiving module modifies the Id and forwards the Id to the analog signal generating module, the analog signal generating module changes the value of a counter in the message to be fixed to be any value between 0 and 15 and forwards the value to the device to be tested and carries out subsequent operation, and the upper computer displays E2ECOT _ STATUS _ REPEATED according to the result of E2ECOT _ Pdu _ ChkStatus in the state structure body and judges that the abnormal communication state is information REPEATED transmission;
as an optimal scheme of the above scheme, the displaying, by the test result display module of the upper computer, communication state information as information loss according to the verification result received by the upper computer includes: the counter value in the received message is not equal to the expected counter value. The test method is that the upper computer changes a sending sequence, a mainboard signal receiving module of the upper computer subtracts 2 from a counter value in a received message, then the Id is modified and forwarded to an analog signal generating module, the analog signal generating module forwards to a device to be tested, and the upper computer displays E2ECOT _ STATUS _ OKSOMELOST according to an E2ECOT _ Pdu _ ChkStatus result in a state structure body and judges that an abnormal communication state is an information loss error.
As a preferable scheme of the above scheme, the displaying, by the test result display module of the upper computer, the communication state information as information tampered according to the verification result received by the upper computer includes: the counter value in the received message is equal to the expected counter value, but the redundant check code does not match the check code in the received message. The test method comprises the following steps: after the upper computer receives the message, the mainboard signal receiving module modifies the Id and forwards the Id to the analog signal generating module, the analog signal generating module modifies the CRC code in the message and forwards the modified message to the device to be tested and performs subsequent operation, and the upper computer displays E2ECOT _ STATUS _ WRONGCRC according to the result of E2ECOT _ Pdu _ ChkStatus in the state structure body and judges that the abnormal communication state is tampered in the information transmission process;
by injecting errors into the analog signal generation module, modifying the counter value in the message, modifying the CRC check code and changing the transmitted sequence, the repeated transmission of information, namely the repeated transmission of the same counter value, is simulated, so that the repeated transmission and the information tampering of the information are simulated, namely the counter value of the data message is kept correct, and three abnormal communication results, namely the check code error and the information loss, namely the injection of the error, of which the counter value is not consistent with the expected value of the receiving end, prove the feasibility of the method, further explain the reason of the error occurrence, and can be used as the basis for error checking.
Therefore, the invention has the following beneficial effects: (1) the invention can realize automatic test without requiring a tester to know the redundancy check code to a high degree, effectively reduces the workload and the test difficulty of the tester, improves the efficiency of the test work and has strong practicability; (2) the device adopts a closed loop structure, can obtain dynamic data and check codes, flexibly modifies the data part in the message according to the test case, and has high flexibility; (3) for dynamically fluctuating data signals, such as cell voltage, fluctuation of 2-3 millivolts can be generated, check code results can be obtained in real time even if only a small part of data fluctuates, the coverage of test conditions is high, the precision is high, the accuracy is high, and further the safety of a whole vehicle system is ensured.
Drawings
Fig. 1 is a schematic diagram of a testing apparatus for end-to-end protection between electronic control units.
Fig. 2 is a flow chart of a method for testing end-to-end protection between electronic control units.
In the figure: 1. the device comprises an upper computer 2, a processing module 11, a mainboard signal receiving module 12, an analog signal generating module 13 and a test result display module.
Detailed Description
The technical scheme of the invention is further specifically described by the following embodiments and the accompanying drawings.
Example (b):
as shown in fig. 1 and 2, a testing apparatus and a testing method for end-to-end protection between electronic control units includes an upper computer 11, a motherboard signal receiving module 1111, an analog signal generating module 1212 connected to the motherboard signal receiving module 11, and a testing result display module 1313 connected to a device under test are sequentially built in the upper computer 1, the motherboard signal receiving module 11, the analog signal generating module 12, and the testing result display module 13 are all connected to a processing module 22 in the upper computer 1, and each module starts to operate after the device under test establishes communication connection with the upper computer 1.
An upper computer 1: receiving a signal sent from a device to be tested, processing the signal and performing feedback display on a test result;
motherboard signal receiving module 11: the device is internally arranged in the upper computer 1, receives messages sent by a device to be tested and forwards the messages to the analog signal generating module 12;
the analog signal generation module 12: the upper computer 1 is internally arranged for receiving the message sent by the mainboard signal receiving module 11 and forwarding the message to the device to be tested;
the test result display module 13: the device is built in the upper computer 1, and receives and displays the verification result sent by the device to be tested;
the device to be tested: the device comprises an ECU mainboard which is a test object of the device and is connected with a mainboard signal receiving module 11, an analog signal generating module 12 and a test result display module 13 in an upper computer 1.
In practical application, if a communication test needs to be performed on an ECU motherboard, the device of the present embodiment CAN be used for performing the test, the ECU motherboard is regarded as the ECU motherboard to be tested, firstly, the ECU motherboard establishes a communication connection with the upper computer 1 in the upper computer 1 through a CAN bus built in the ECU motherboard, at this time, the ECU motherboard continuously sends a message to the upper computer 1 in real time, a motherboard signal receiving module 11 in the upper computer 1 is specially used for receiving the message sent from the ECU motherboard to be tested, after receiving the message sent from the ECU motherboard in real time, the motherboard signal receiving module 11 forwards the message modified Id to an analog signal generating module 12 in the upper computer 1, the analog signal generating module 12 is a virtual node, receives the message modified Id from the motherboard signal receiving module 11, and regards the message as a new message generated by the analog signal generating module 12, the message is retransmitted to the ECU motherboard, after the CAN bus of the ECU motherboard receives the message sent by the analog signal generation module 12, the ECU motherboard will automatically start running the program, compare the expected counter value with the counter value in the received message, if the expected value is equal to the received value, the ECU motherboard will calculate based on the counter value and the received data part to obtain the redundancy check code, compare with the check code in the received message, return the check result, and feed the result back to the test result display module 13 in the upper computer 1; and if the expected values are not equal, directly feeding the result back to the test result display module 13 in the upper computer 1, displaying abnormal communication, displaying the type of the abnormal communication, and reminding a tester to take corresponding measures.
An observation variable E2ECOT _ PduRx _ Info is added to the IDE interface on the test result display module 13 to observe the test result, which is a state structure for E2E communication, and is used to store the check result of the latest received message. The communication test results are divided into normal communication tests and abnormal communication tests.
And (3) normal communication test: and the upper computer 1 modifies the Id of the received message and forwards the modified Id to the ECU mainboard. And E2ECOT _ Pdu _ ChkStatus in the STATUS structure body is displayed as E2ECOT _ STATUS _ OK, which indicates that the receiving end passes the verification and the communication is normal, and the received data can be used for the control system.
Abnormal communication tests are divided into three types:
1. after receiving the message, the mainboard signal receiving module 11 of the upper computer 1 modifies the Id, the analog signal generating module 12 changes the counter value in the message, fixes the counter value to any value of 0-15 and then forwards the value to the device to be tested, namely, the same counter value is repeatedly sent to simulate the REPEATED sending of the information, and the condition that the E2ECOT _ Pdu _ ChkStatus in the STATUS structure of the receiving end is E2ECOT _ STATUS _ replied can be seen in the debugging IDE window, which indicates that the information is repeatedly sent incorrectly.
2. After the host computer 1 mainboard signal receiving module 11 receives the message modification Id, the analog signal generating module 12 changes the CRC check code in the message and forwards the CRC check code back to the device to be tested, i.e. the counter value of the data message is kept correct, the check code is incorrect, so as to simulate the falsification in the information transmission process, and the state of E2ECOT _ Pdu _ ChkStatus in the debugging IDE window is E2ECOT _ STATUS _ WRONGCRC, which indicates the falsified error in the information transmission process.
3. The upper computer 1 changes the sending sequence, the mainboard signal receiving module 11 subtracts 2 from the counter value in the received message, then modifies Id, forwards the Id to the analog signal generating module 12, and forwards the Id back to the ECU mainboard to be tested, that is, errors that the counter value does not accord with the receiving end expected value are injected, at this time, the E2ECOT _ Pdu _ ChkStatus of the debugging IDE window is E2ECOT _ STATUS _ oksost, which indicates that the information loss error is detected.
The specific embodiments described herein are merely illustrative of the spirit of the invention. Various modifications or additions may be made to the described embodiments or alternatives may be employed by those skilled in the art without departing from the spirit or ambit of the invention as defined in the appended claims.
Although terms such as upper computer, ECU motherboard, CAN bus, status structure, CRC check code, dut, etc. are used more often herein, the possibility of using other terms is not excluded. These terms are used merely to more conveniently describe and explain the nature of the present invention; they are to be construed as being without limitation to any additional limitations that may be imposed by the spirit of the present invention.
Claims (9)
1. An end-to-end protection testing device between electronic control units comprises an upper computer (1) and is characterized in that the upper computer (1) further comprises a mainboard signal receiving module (11), an analog signal generating module (12) connected with the mainboard signal receiving module (11), a testing result display module (13) connected with a device to be tested and a processing module (2); the mainboard signal receiving module (11), the analog signal generating module (12) and the test result display module (13) are all connected with the processing module (2) in the upper computer (1), and each module starts to operate after the device to be tested is in communication connection with the upper computer (1);
upper computer (1): receiving a signal sent from a device to be tested, processing the signal and performing feedback display on a test result;
motherboard signal reception module (11): the device is internally arranged in the upper computer (1), receives the message sent by the device to be tested and forwards the message to the analog signal generating module (12);
analog signal generation module (12): the device is internally arranged in the upper computer (1), receives the message sent by the mainboard signal receiving module (11) and forwards the message to the device to be tested;
test result display module (13): the device is internally arranged in the upper computer (1), and receives and displays the verification result sent by the device to be tested;
the device to be tested: the device comprises an ECU mainboard which is a test object of the device and is connected with a mainboard signal receiving module (11), an analog signal generating module (12) and a test result display module (13) in an upper computer (1).
2. An end-to-end protection test method between electronic control units, which adopts the test device in claim 1, characterized by comprising the following steps:
a. the device to be tested is in communication connection with the upper computer (1), and constantly sends a check message to the upper computer (1) in real time through a CAN bus;
b. after capturing a message sent by a device to be tested, a mainboard signal receiving module (11) in the upper computer (1) modifies the Id of the message and forwards the modified Id to an analog signal generating module (12);
c. the analog signal generation module (12) is a virtual node in the upper computer (1), and retransmits the message to the device to be tested after receiving the message for modifying the Id;
d. the CAN bus of the device to be tested receives the message from the analog signal generating module (12) and then stores the message, the running program of the device to be tested compares an expected counter value with a counter value in the received message, and if the expected counter value is equal to the received counter value, the device to be tested performs calculation operation and then feeds the counter value back to the upper computer (1).
3. The method for testing end-to-end protection between electronic control units according to claim 2, wherein the step d of performing the calculation operation and feeding back the calculation operation to the upper computer (1) comprises the following steps:
comparing the expected counter value with the counter value in the received message by the ECU mainboard, and calculating the expected counter value and the data part in the received message to obtain a redundancy check code;
d2. comparing the redundant check code with the check code in the received message to obtain a check result;
d3. and feeding back the checking result to the upper computer (1).
4. The method for testing end-to-end protection between electronic control units according to claim 3, wherein the step of feeding back the result to the upper computer (1) in step d3 further comprises: the test result display module (13) of the upper computer (1) displays communication state information according to the check result received by the upper computer (1), wherein the communication state information comprises a normal communication state and an abnormal communication state.
5. The method for end-to-end protection testing between electronic control units according to claim 4, wherein the test result display module (13) of the upper computer (1) displays that the communication state information is in a normal communication state according to the verification result received by the upper computer (1): after the redundant verification code is verified to be matched with the check code in the received message, the analog signal generation module (12) of the upper computer (1) modifies the Id of the message received from the mainboard signal receiving module (11) and transmits the modified Id to the device to be tested, the verification of the receiving end is judged to be passed, and the test result display module (13) displays the normal communication state.
6. The method for testing end-to-end protection between electronic control units according to claim 4 or 5, wherein the abnormal communication state comprises: repeated transmission of information, tampering of information, and loss of information.
7. The method for end-to-end protection testing between electronic control units according to claim 6, wherein the step of repeatedly sending the information, in which the test result display module (13) of the upper computer (1) displays the communication state information according to the verification result received by the upper computer (1), comprises: the EDU main board receives the same counter value sent repeatedly.
8. The method for end-to-end protection testing between electronic control units according to claim 6, wherein the step of displaying communication state information as information loss by the test result display module (13) of the upper computer (1) according to the verification result received by the upper computer (1) comprises: the counter value in the received message is not equal to the expected counter value.
9. The method for end-to-end protection testing between electronic control units according to claim 6, wherein the step of displaying communication state information as information tampered by the test result display module (13) of the upper computer (1) according to the verification result received by the upper computer (1) comprises the steps of: the counter value in the received message is equal to the expected counter value, but the redundant check code does not match the check code in the received message.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110246238.2A CN113064047B (en) | 2021-03-05 | 2021-03-05 | Testing device and testing method for end-to-end protection between electronic control units |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110246238.2A CN113064047B (en) | 2021-03-05 | 2021-03-05 | Testing device and testing method for end-to-end protection between electronic control units |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113064047A true CN113064047A (en) | 2021-07-02 |
| CN113064047B CN113064047B (en) | 2024-03-08 |
Family
ID=76559798
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110246238.2A Active CN113064047B (en) | 2021-03-05 | 2021-03-05 | Testing device and testing method for end-to-end protection between electronic control units |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113064047B (en) |
Citations (26)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JPH04336791A (en) * | 1991-05-13 | 1992-11-24 | Mitsubishi Electric Corp | Electronic meter automatic inspection system |
| CN1839357A (en) * | 2003-10-10 | 2006-09-27 | 三菱电机株式会社 | Control system using serial communication |
| CN101174921A (en) * | 2007-10-29 | 2008-05-07 | 北京佳讯飞鸿电气股份有限公司 | Dynamic message encoding method of train control system |
| KR20100014995A (en) * | 2008-08-04 | 2010-02-12 | 이원찬 | The security technology of internet on encrypted transmission data |
| CN103095524A (en) * | 2012-12-25 | 2013-05-08 | 南京国电南自电网自动化有限公司 | Automatic testing method of reply type electric power communication protocol based on configuration |
| CN103581168A (en) * | 2013-08-02 | 2014-02-12 | 中国科学技术大学苏州研究院 | Hidden information communication method based on IP fragmentation camouflage technology |
| CN103616592A (en) * | 2013-11-28 | 2014-03-05 | 国家电网公司 | Relay protection real-time digital dynamic simulation test system based on IEC 61850 |
| CN103856288A (en) * | 2012-12-04 | 2014-06-11 | 北汽福田汽车股份有限公司 | CAN communication signal verification and transmission method and system for automobile |
| CN103969055A (en) * | 2013-01-30 | 2014-08-06 | 重庆长安汽车股份有限公司 | Device and method for testing automotive active safety systems on bench |
| CN104639568A (en) * | 2015-03-12 | 2015-05-20 | 成都金本华科技股份有限公司 | Data transmission method based on UDP (user datagram protocol) |
| CN104734911A (en) * | 2015-02-10 | 2015-06-24 | 重庆邮电大学 | CAN bus network management test system and method |
| CN104836832A (en) * | 2014-12-10 | 2015-08-12 | 北汽福田汽车股份有限公司 | Vehicle CAN signal transmission safety and verification method |
| CN105365579A (en) * | 2015-11-16 | 2016-03-02 | 中联重科股份有限公司 | Power system, safety testing method and device thereof, and electric vehicle |
| CN107508655A (en) * | 2017-07-19 | 2017-12-22 | 西南交通大学 | A kind of adaptive end to end network coding and transmission method |
| CN207440601U (en) * | 2017-04-25 | 2018-06-01 | 安徽江淮汽车集团股份有限公司 | A kind of CAN bus message dropping test system of automobile instrument |
| CN108400978A (en) * | 2018-02-07 | 2018-08-14 | 深圳壹账通智能科技有限公司 | Leak detection method, device, computer equipment and storage medium |
| CN108566313A (en) * | 2018-01-25 | 2018-09-21 | 北京交通大学 | Train control on board equipment based on hardware in loop interconnects test interface method |
| CN109240277A (en) * | 2018-11-13 | 2019-01-18 | 重庆长安汽车股份有限公司 | Control system diagnostic function real steering vectors automate platform and test method |
| CN109491371A (en) * | 2018-12-07 | 2019-03-19 | 天津津航计算技术研究所 | A kind of device for On-board ATC system testing |
| CN109725629A (en) * | 2018-12-29 | 2019-05-07 | 一汽-大众汽车有限公司 | A kind of entire car controller refresh testing system |
| CN110113777A (en) * | 2019-04-29 | 2019-08-09 | 深圳广熵科技有限公司 | A kind of collecting method |
| CN110213018A (en) * | 2019-05-09 | 2019-09-06 | 北京汽车股份有限公司 | Data communications method, device and the vehicle of vehicle bus |
| CN110413507A (en) * | 2019-06-21 | 2019-11-05 | 平安科技（深圳）有限公司 | System detection method, device, computer equipment and storage medium |
| CN111055685A (en) * | 2019-11-29 | 2020-04-24 | 合肥国轩高科动力能源有限公司 | Interactive simulation charging test system and test method |
| CN112003773A (en) * | 2020-07-15 | 2020-11-27 | 东风汽车集团有限公司 | End-to-end checking method and system for CAN bus safety data |
| CN113572658A (en) * | 2021-07-23 | 2021-10-29 | 上海英恒电子有限公司 | Vehicle control signal testing method and device, electronic equipment and storage medium |
-
2021
- 2021-03-05 CN CN202110246238.2A patent/CN113064047B/en active Active
Patent Citations (26)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JPH04336791A (en) * | 1991-05-13 | 1992-11-24 | Mitsubishi Electric Corp | Electronic meter automatic inspection system |
| CN1839357A (en) * | 2003-10-10 | 2006-09-27 | 三菱电机株式会社 | Control system using serial communication |
| CN101174921A (en) * | 2007-10-29 | 2008-05-07 | 北京佳讯飞鸿电气股份有限公司 | Dynamic message encoding method of train control system |
| KR20100014995A (en) * | 2008-08-04 | 2010-02-12 | 이원찬 | The security technology of internet on encrypted transmission data |
| CN103856288A (en) * | 2012-12-04 | 2014-06-11 | 北汽福田汽车股份有限公司 | CAN communication signal verification and transmission method and system for automobile |
| CN103095524A (en) * | 2012-12-25 | 2013-05-08 | 南京国电南自电网自动化有限公司 | Automatic testing method of reply type electric power communication protocol based on configuration |
| CN103969055A (en) * | 2013-01-30 | 2014-08-06 | 重庆长安汽车股份有限公司 | Device and method for testing automotive active safety systems on bench |
| CN103581168A (en) * | 2013-08-02 | 2014-02-12 | 中国科学技术大学苏州研究院 | Hidden information communication method based on IP fragmentation camouflage technology |
| CN103616592A (en) * | 2013-11-28 | 2014-03-05 | 国家电网公司 | Relay protection real-time digital dynamic simulation test system based on IEC 61850 |
| CN104836832A (en) * | 2014-12-10 | 2015-08-12 | 北汽福田汽车股份有限公司 | Vehicle CAN signal transmission safety and verification method |
| CN104734911A (en) * | 2015-02-10 | 2015-06-24 | 重庆邮电大学 | CAN bus network management test system and method |
| CN104639568A (en) * | 2015-03-12 | 2015-05-20 | 成都金本华科技股份有限公司 | Data transmission method based on UDP (user datagram protocol) |
| CN105365579A (en) * | 2015-11-16 | 2016-03-02 | 中联重科股份有限公司 | Power system, safety testing method and device thereof, and electric vehicle |
| CN207440601U (en) * | 2017-04-25 | 2018-06-01 | 安徽江淮汽车集团股份有限公司 | A kind of CAN bus message dropping test system of automobile instrument |
| CN107508655A (en) * | 2017-07-19 | 2017-12-22 | 西南交通大学 | A kind of adaptive end to end network coding and transmission method |
| CN108566313A (en) * | 2018-01-25 | 2018-09-21 | 北京交通大学 | Train control on board equipment based on hardware in loop interconnects test interface method |
| CN108400978A (en) * | 2018-02-07 | 2018-08-14 | 深圳壹账通智能科技有限公司 | Leak detection method, device, computer equipment and storage medium |
| CN109240277A (en) * | 2018-11-13 | 2019-01-18 | 重庆长安汽车股份有限公司 | Control system diagnostic function real steering vectors automate platform and test method |
| CN109491371A (en) * | 2018-12-07 | 2019-03-19 | 天津津航计算技术研究所 | A kind of device for On-board ATC system testing |
| CN109725629A (en) * | 2018-12-29 | 2019-05-07 | 一汽-大众汽车有限公司 | A kind of entire car controller refresh testing system |
| CN110113777A (en) * | 2019-04-29 | 2019-08-09 | 深圳广熵科技有限公司 | A kind of collecting method |
| CN110213018A (en) * | 2019-05-09 | 2019-09-06 | 北京汽车股份有限公司 | Data communications method, device and the vehicle of vehicle bus |
| CN110413507A (en) * | 2019-06-21 | 2019-11-05 | 平安科技（深圳）有限公司 | System detection method, device, computer equipment and storage medium |
| CN111055685A (en) * | 2019-11-29 | 2020-04-24 | 合肥国轩高科动力能源有限公司 | Interactive simulation charging test system and test method |
| CN112003773A (en) * | 2020-07-15 | 2020-11-27 | 东风汽车集团有限公司 | End-to-end checking method and system for CAN bus safety data |
| CN113572658A (en) * | 2021-07-23 | 2021-10-29 | 上海英恒电子有限公司 | Vehicle control signal testing method and device, electronic equipment and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113064047B (en) | 2024-03-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Pecht et al. | Evaluation of built-in test | |
| EP1826641B1 (en) | Safety controller providing rapid recovery of safety program data | |
| US20190250210A1 (en) | System Architecture Method and Apparatus for Adaptive Hardware Fault Detection with Hardware Metrics Subsystem | |
| CN109672470B (en) | Method and system for ground test verification of software uploading and reconstruction on small satellite | |
| CN116489043A (en) | CAN communication automatic test method | |
| CN109947078A (en) | Direct fault location unit and its board, real time fail method for implanting, device and equipment | |
| CN111552584B (en) | Testing system, method and device for satellite primary fault diagnosis isolation and recovery function | |
| Voas et al. | Tolerant software interfaces: can COTS-based systems be trusted without them? | |
| CN113064047B (en) | Testing device and testing method for end-to-end protection between electronic control units | |
| CN110850354B (en) | Metering fault recognition module detection method, device, system and storage medium | |
| CN102567174B (en) | Microprocessor operation monitoring system | |
| CN115757132A (en) | Satellite interface testing method and device, electronic equipment and storage medium | |
| CN111044826B (en) | Detection method and detection system | |
| US7900093B2 (en) | Electronic data processing system and method for monitoring the functionality thereof | |
| US20090204952A1 (en) | Method of securing a computer program. and corresponding device, method of updating and update server | |
| CN111786842B (en) | Data processing method and hardware-in-the-loop test system | |
| RU2819156C1 (en) | Controller area network interface device development method | |
| Varshney et al. | Automated Testing of Faults of an Automotive System | |
| KR102419119B1 (en) | Test device for generating graphic user interface according to interface control document and operation mehtod of the same | |
| CN113535547B (en) | Test method based on functional safety | |
| Anusha et al. | Development of automatic test script generation (ATSG) tool for active safety software validation | |
| CN116048871A (en) | Automatic verification method and device for SSD equipment, computer equipment and storage medium | |
| CN118068754A (en) | Automobile instrument software testing method, device, equipment and storage medium | |
| CN115905015A (en) | Reliability testing system and method | |
| CN117110733A (en) | Automatic diagnosis method and device for battery management system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20211112 Address after: 311215 No. 855, Jianshe Second Road, economic and Technological Development Zone, Xiaoshan District, Hangzhou City, Zhejiang Province Applicant after: Wanxiang A123 Co.,Ltd. Address before: 311215 No. 855, Jianshe Second Road, Xiaoshan Economic and Technological Development Zone, Xiaoshan District, Hangzhou City, Zhejiang Province Applicant before: Wanxiang A123 Co.,Ltd. Applicant before: WANXIANG GROUP Co.,Ltd. |
|
| TA01 | Transfer of patent application right | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |