WO2017067154A1 - 用于包括多个子网的车载网络的数据通信方法、系统及网关 - Google Patents

用于包括多个子网的车载网络的数据通信方法、系统及网关 Download PDF

Info

Publication number
WO2017067154A1
WO2017067154A1 PCT/CN2016/082074 CN2016082074W WO2017067154A1 WO 2017067154 A1 WO2017067154 A1 WO 2017067154A1 CN 2016082074 W CN2016082074 W CN 2016082074W WO 2017067154 A1 WO2017067154 A1 WO 2017067154A1
Authority
WO
WIPO (PCT)
Prior art keywords
subnet
message
encrypted
security key
packet
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/082074
Other languages
English (en)
French (fr)
Inventor
徐勇
陈昆盛
李文锐
邹禹
李丹
刘鹏
林伟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Le Holdings Beijing Co Ltd
Leauto Intelligent Technology Beijing Co Ltd
Original Assignee
Le Holdings Beijing Co Ltd
Leauto Intelligent Technology Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Le Holdings Beijing Co Ltd, Leauto Intelligent Technology Beijing Co Ltd filed Critical Le Holdings Beijing Co Ltd
Publication of WO2017067154A1 publication Critical patent/WO2017067154A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0464—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/065—Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/068—Network architectures or network communication protocols for network security for supporting key management in a packet data network using time-dependent keys, e.g. periodically changing keys

Definitions

  • Embodiments of the present invention relate to in-vehicle network communication technologies, and in particular, to a data communication method, system, and gateway for an in-vehicle network including a plurality of subnets.
  • the car consists of four systems: the engine, the chassis, the body and the electrical appliances. Each system contains multiple communication devices, each with an electronic control unit (ECU).
  • ECU electronice control unit
  • the ECU is a car-specific microcomputer controller, also known as a car-specific microcontroller. Communication between ECUs is required and depends on various bus protocols. Therefore, there are various bus protocols inside the car, such as Controller Area Network (CAN) bus protocol, Local Interconnect Network (LIN) bus protocol, Media Oriented System Transport (MOST). Bus protocol, FLEXRAY bus protocol, Ethernet (ETHERNET) bus protocol, etc.
  • CAN Controller Area Network
  • LIN Local Interconnect Network
  • MOST Media Oriented System Transport
  • Bus protocol FLEXRAY bus protocol
  • Ethernet (ETHERNET) bus protocol etc.
  • FIG. 1 is a diagram showing one of exemplary diagrams of an in-vehicle network in the prior art
  • FIG. 2 is a second schematic diagram showing an in-vehicle network in the prior art.
  • the central node of the in-vehicle network is an in-vehicle gateway.
  • the vehicle gateway has a variety of interfaces that can be connected to multiple networks for protocols such as CAN, LIN, MOST. Each bus protocol forms a separate subnet (such as subnet 1), and each subnet contains a certain number of the above communication devices.
  • the purpose of the present application is to provide a data communication method, system and gateway for an in-vehicle network including a plurality of subnets, so that packets transmitted between subnets are communicated in cipher text, which is safer and more stable for driving. Network environment.
  • an embodiment of the present application provides a data communication method for an in-vehicle network including a plurality of subnets, including: acquiring a first encryption sent from a communication device of a first subnet to a second subnet. Transmitting the first encrypted message by using a predetermined first subnet security key to obtain first message data; converting the first message data into a second communication protocol conforming to the second subnet communication protocol Message data; encrypting the second packet data by using a predetermined second subnet security key to obtain a second encrypted packet; and sending the second encrypted packet to a corresponding one of the second subnets communication device.
  • the predetermined first subnet security key is different from the predetermined second subnet security key.
  • the decrypting the first encrypted message by using a predetermined first subnet security key, and obtaining the first message data comprises: using symmetric encryption according to the predetermined first subnet security key
  • the algorithm decrypts the first encrypted packet to obtain the first packet data
  • the second packet security data is encrypted by using the predetermined second subnet security key
  • the processing of obtaining the second encrypted packet includes: And encrypting the second packet data according to the predetermined second subnet security key by using a symmetric encryption algorithm to obtain a second encrypted packet.
  • the symmetric encryption algorithm is a data encryption standard DES algorithm or an advanced encryption standard AES algorithm.
  • the method further includes: updating the first subnet security key according to a preset key update algorithm; and transmitting the updated first subnet security key to the communication device in the first subnet .
  • the sending the updated first subnet security key to the first subnet Processing of the communication device includes: encrypting the key update message using the current first subnet security key, the key update message including the updated first subnet security key; the encrypted key The update message is sent to the communication device in the first subnet.
  • the method is performed on a gateway of an in-vehicle network.
  • An embodiment of the present application further provides a gateway for an in-vehicle network, including: a packet obtaining module, configured to acquire a first encrypted packet sent from a communication device of a first subnet to a second subnet; and a packet decryption module Decrypting the first encrypted message with a predetermined first subnet security key to obtain first message data; and a communication protocol conversion module, configured to convert the first message data into a second a second packet data of the subnet communication protocol; a packet encryption module, configured to encrypt the second packet data by using a predetermined second subnet security key to obtain a second encrypted packet; and a message sending module, And sending the second encrypted message to a corresponding communication device in the second subnet.
  • a packet obtaining module configured to acquire a first encrypted packet sent from a communication device of a first subnet to a second subnet
  • a packet decryption module Decrypting the first encrypted message with a predetermined first subnet security key to obtain first message data
  • a communication protocol conversion module
  • the predetermined first subnet security key is different from the predetermined second subnet security key.
  • the message decryption module is configured to decrypt the first encrypted message according to the predetermined first subnet security key by using a symmetric encryption algorithm to obtain first message data; the message encryption The module is configured to encrypt the second packet data according to the predetermined second subnet security key by using a symmetric encryption algorithm to obtain a second encrypted packet.
  • the symmetric encryption algorithm is a data encryption standard DES algorithm or an advanced encryption standard AES algorithm.
  • the gateway further includes: a key update module, configured to obtain an updated first subnet security key according to a preset key update algorithm; and a key sending module, configured to: use the first sub-update A network security key is sent to the communication device in the first subnet.
  • a key update module configured to obtain an updated first subnet security key according to a preset key update algorithm
  • a key sending module configured to: use the first sub-update A network security key is sent to the communication device in the first subnet.
  • the key sending module includes: a key update message encrypting unit, configured to encrypt the key update message by using a current first subnet security key, where the key update message includes the update The first subnet security key; the key update message sending unit is configured to send the encrypted key update message to the communication device in the first subnet.
  • a key update message encrypting unit configured to encrypt the key update message by using a current first subnet security key, where the key update message includes the update The first subnet security key
  • the key update message sending unit is configured to send the encrypted key update message to the communication device in the first subnet.
  • An embodiment of the present application further provides a data communication system for an in-vehicle network, comprising: a plurality of subnets and a gateway of the in-vehicle network as described in the foregoing embodiments, wherein each of the subnets comprises a plurality of communication devices,
  • the communication device is configured to receive the encrypted first message from the gateway, decrypt the first message, and encrypt the second message sent to the gateway, and encrypt the second message.
  • the text is sent to the gateway.
  • An embodiment of the present application further provides a gateway for an in-vehicle network, including:
  • the processor, the memory, and the communication interface complete communication with each other through the bus;
  • the communication interface is used for information transmission between the gateway and a communication device of the vehicle;
  • the processor is configured to invoke logic instructions in the memory to perform the following methods:
  • An embodiment of the present application also provides a computer program, including program code, for performing the following operations:
  • Embodiments of the present application also provide a storage medium for storing a computer program as described above.
  • the data communication method, system and gateway for the in-vehicle network including multiple subnets provided by the embodiments of the present application can automatically and quickly encrypt the packets transmitted between the two subnet communication devices performing data communication. And decryption processing to interact more securely and reliably.
  • the subnet security key greatly ensures the security and stability of the interaction between the subnet communication devices, and greatly improves the user driving experience.
  • FIG. 1 is a diagram showing an exemplary schematic diagram of an in-vehicle network in the prior art
  • FIG. 2 is a second schematic diagram showing an in-vehicle network in the prior art
  • FIG. 3 is a schematic view showing one example reflecting the general inventive concept of the present application.
  • FIG. 4 is a flowchart showing a data communication method for an in-vehicle network including a plurality of subnets according to Embodiment 1 of the present application;
  • FIG. 5 is a logic block diagram showing a gateway of an in-vehicle network according to Embodiment 2 of the present application.
  • FIG. 6 is a logic block diagram showing a data communication system of an in-vehicle network according to Embodiment 3 of the present application;
  • FIG. 7 is a structural block diagram showing a gateway of an in-vehicle network according to Embodiment 4 of the present application.
  • the basic idea of the present application is to provide a technical solution for encrypting and decrypting a message transmitted between two subnets for performing data communication based on a security key, and then transmitting a message, thereby making the communication device of the subnet Communicate more securely and reliably.
  • FIG. 3 is a schematic view showing one example reflecting the general inventive concept of the present application.
  • the corresponding key of each subnet exists in the in-vehicle gateway.
  • the encrypted packet of subnet 1 may be encrypted with subnet 2.
  • the communication protocol used is different.
  • the in-vehicle gateway receives the ciphertext message P(1)K(1) from the subnet 1, and parses the ciphertext message P(1)K(1) by using the key K(1) of the subnet 1.
  • the message data P(1) is then converted into a communication protocol of a different subnet for the message data P(1), converted into message data P(2) conforming to the communication protocol of the subnet 2, and finally using the subnet 2
  • the key K(2) encrypts the message data P(2) converted by the communication protocol to obtain the ciphertext message P(2)K(2), and sends the ciphertext message P(2)K(2). Go to subnet 2.
  • the messages are transmitted in the form of cipher text, and the message in the form of cipher text has the advantage of being difficult to be intercepted and cracked. Therefore, data communication in the cipher text form in the in-vehicle network can ensure the security and stability of interaction between the sub-network communication devices, improve driving safety, and thereby improve the user driving experience.
  • FIG. 4 is a flow chart showing a data communication method for an in-vehicle network including a plurality of subnets according to Embodiment 1 of the present application.
  • the method can be performed, for example, on a gateway of an in-vehicle network.
  • step S410 a first encrypted message sent from the communication device of the first subnet to the second subnet is obtained.
  • the communication device of the first subnet when the communication device of the first subnet needs to perform data communication with the communication device of the second subnet, the communication device of the first subnet encrypts the message data by using the pre-stored predetermined first subnet security key.
  • the first encrypted message is sent and the first encrypted message is placed on the bus for transmission.
  • the gateway of the in-vehicle network obtains the first encrypted message from the bus.
  • the length of the subnet security key may be 128 bits or 256 bits.
  • step S420 the first encrypted message is decrypted by using a predetermined first subnet security key to obtain first message data.
  • the predetermined first subnet security key may be pre-stored in the gateway of the in-vehicle network and the communication device of the first subnet, and may be directly acquired during use, or may be securely stored from each subnet.
  • the server of the key is downloaded, or copied directly from a storage device such as a USB flash drive.
  • the same implementation can be applied to the security keys of other subnets.
  • step S430 the first message data is converted into second message data conforming to the second subnet communication protocol.
  • step S440 the second packet data is encrypted by using a predetermined second subnet security key to obtain a second encrypted message.
  • step S450 the second encrypted message is sent to a corresponding communication device in the second subnet.
  • the data communication method for the in-vehicle network including multiple subnets in the embodiment of the present application receives the encrypted message sent by the communication initiator, and further performs decryption, communication protocol conversion, and encryption processing on the encrypted message, thereby automatically and quickly Sending encrypted packets suitable for the communication receiver greatly ensures the security, fluency and stability of the interaction between the communication devices on the subnet, and improves the user experience.
  • the symmetric encryption algorithm is relatively simple and has low system overhead, and is suitable for encrypting and decrypting a large amount of data.
  • step S420 the first encrypted message is decrypted according to the predetermined first subnet security key using a symmetric encryption algorithm to obtain first message data.
  • step S440 the second packet data is encrypted according to the predetermined second subnet security key using a symmetric encryption algorithm to obtain a second encrypted message.
  • symmetric encryption algorithm in the embodiment of the present invention may be implemented not only by software but also by hardware.
  • the symmetric encryption algorithm may be a data encryption standard DES algorithm or an advanced encryption standard AES algorithm, thereby further optimizing the adopted encryption algorithm.
  • the data encryption standard DES algorithm runs faster, and is suitable for encrypting large amounts of data.
  • the advanced encryption standard AES algorithm is the next generation encryption algorithm standard, which runs faster than the data encryption standard DES algorithm and has a high security level. .
  • the predetermined first subnet security key is different from the predetermined second subnet security key.
  • the second encrypted message is sent to the bus of the second subnet for delivery.
  • the corresponding communication device in the second subnet can be obtained from the bus. Even if the second encrypted message is intercepted by the illegal node, since the node does not have the key of the second subnet, the node data cannot be parsed, and the meaning of each field in the message cannot be reversed. Thus, the second encrypted message that is monitored has no value.
  • each subnet uses a different security key.
  • These security keys are used as the initial key in the gateway of the in-vehicle network and the ECU in the communication device for the first time before the car leaves the factory. The chances of a key leak inside the car factory are small, thus ensuring the security of the initial key.
  • the security keys used by different subnets need to be regularly updated, and the update process is managed by the gateway of the in-vehicle network.
  • the gateway needs to send a key update message to the subnet, and the key update message carries a new key.
  • the transmission of the key update message also needs to be transmitted in cipher text, and the key update message can be encrypted by using the old key, and then sent to the subnet bus by, for example, broadcasting.
  • the ECU in the communication device in the subnet obtains the key update message from the bus of the subnet to which it belongs, and then uses the old key.
  • the key update message is decrypted to obtain a new key, and the new key can be further stored.
  • the gateway sequentially performs the above key update processing on different subnets one by one.
  • the method may further include: updating the first subnet security key according to a preset key update algorithm; and transmitting the updated first subnet security key to the communication in the first subnet device.
  • the updated first subnet security key is obtained by using a key update algorithm; secondly, the key update message may be encrypted using the current first subnet security key, the key update message including the The updated first subnet security key; the encrypted key update message is sent to the communication device in the first subnet.
  • FIG. 5 is a logic block diagram showing a gateway of an in-vehicle network according to Embodiment 2 of the present application. It can be used to perform the method steps of the embodiment shown in FIG.
  • the gateway of the in-vehicle network includes a message acquisition module 510, a message decryption module 520, a communication protocol conversion module 530, a message encryption module 540, and a message transmission module 550.
  • the packet obtaining module 510 is configured to obtain the first encrypted packet sent by the communication device of the first subnet to the second subnet.
  • the message decryption module 520 is configured to decrypt the first encrypted message by using a predetermined first subnet security key to obtain first message data.
  • the message decryption module 520 is configured to decrypt the first encrypted message according to the predetermined first subnet security key by using a symmetric encryption algorithm to obtain first message data.
  • the symmetric encryption algorithm may be a data encryption standard DES algorithm or an advanced encryption standard AES algorithm.
  • the communication protocol conversion module 530 is configured to convert the first message data into second message data that conforms to the second subnet communication protocol.
  • the message encryption module 540 is configured to encrypt the second message data by using a predetermined second subnet security key to obtain a second encrypted message.
  • the packet encryption module 540 is configured to encrypt the second packet data according to the predetermined second subnet security key by using a symmetric encryption algorithm to obtain a second encrypted packet.
  • the message sending module 550 is configured to send the second encrypted message to a corresponding communication device in the second subnet.
  • the predetermined first subnet security key and the predetermined second subnet security key different.
  • the gateway may further include: a key update module (not shown), configured to obtain an updated first subnet security key according to a preset key update algorithm; a key sending module (not shown) And for transmitting the updated first subnet security key to the communication device in the first subnet.
  • a key update module (not shown), configured to obtain an updated first subnet security key according to a preset key update algorithm
  • a key sending module (not shown) And for transmitting the updated first subnet security key to the communication device in the first subnet.
  • the key sending module may include: a key update message encrypting unit (not shown) for encrypting the key update message using the current first subnet security key, the key The update message includes the updated first subnet security key; a key update message sending unit (not shown) for transmitting the encrypted key update message to the communication in the first subnet device.
  • the gateway of the in-vehicle network provided by the embodiment of the present application can decrypt the encrypted packet sent by the subnet security key of the communication device of the communication initiator, and then convert the packet data to the communication protocol, and use the communication.
  • the subnet security key of the receiving device's communication device encrypts the converted message data and sends it to the communication device of the communication receiver, thereby making the interaction process more secure and reliable.
  • the subnet security key greatly ensures the security and stability of the interaction between the communication devices of the subnet, and improves the user experience.
  • FIG. 6 is a logic block diagram showing a data communication system of an in-vehicle network according to a third embodiment of the present application.
  • the data communication system includes a plurality of subnets 610 and a gateway 620 of the in-vehicle network as in the foregoing second embodiment, wherein each of the subnets 610 includes a plurality of communication devices 630.
  • the communication device 630 is configured to receive the encrypted first packet from the gateway, decrypt the first packet, and encrypt the second packet sent to the gateway, and send the encrypted second packet to the Said gateway.
  • the data communication system of the in-vehicle network may be a communication device that transmits data to the gateway automatically and quickly to the communication initiator of the two subnets performing data communication, and the message transmitted by the gateway to the communication receiver.
  • the text is encrypted and decrypted to provide a safer and more reliable data communication environment for the gateway and multiple subnets of the in-vehicle network, greatly improving the user experience.
  • FIG. 7 is a structural block diagram showing a gateway of an in-vehicle network according to Embodiment 4 of the present application.
  • the gateway includes:
  • processor 101 a processor 101, a memory 102, a communication interface 103, and a bus 104;
  • the processor 101, the memory 102, and the communication interface 103 complete communication with each other through the bus 104;
  • the communication interface 103 is used for information transmission between the gateway and a communication device of the vehicle;
  • the processor 101 is configured to invoke logic instructions in the memory 102 to perform the following methods;
  • the embodiment discloses a computer program, including program code, where the program code is used to perform the following operations:
  • This embodiment discloses a storage medium for storing a computer program as described in the foregoing embodiments.
  • the foregoing program may be stored in a computer readable storage medium, and the program is executed when executed.
  • the foregoing steps include the steps of the foregoing method embodiments; and the foregoing storage medium includes: a medium that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Small-Scale Networks (AREA)

Abstract

本发明的实施例提供一种用于包括多个子网的车载网络的数据通信方法、系统及网关。其中，用于包括多个子网的车载网络的数据通信方法包括：获取自第一子网的通信设备发送给第二子网的第一加密报文；利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；将所述第二加密报文发送给所述第二子网中的相应通信设备。本申请实施例的用于包括多个子网的车载网络的数据通信方法、系统及网关，能够使子网间传递的报文以密文形式进行通信，从而提高了车载网络的安全性。

Description

用于包括多个子网的车载网络的数据通信方法、系统及网关
交叉引用
本申请引用于2015年10月21日提交的专利名称为“用于包括多个子网的车载网络的数据通信方法、系统及网关”的第201510689773X号中国专利申请，其通过引用被全部并入本申请。
技术领域
本发明的实施例涉及车载网络通信技术，尤其涉及一种用于包括多个子网的车载网络的数据通信方法、系统及网关。
背景技术
众所周知，汽车由发动机、底盘、车身和电器共四个系统组成。每个系统都包含多个通信设备，每个通信设备内置电子控制单元(Electronic Control Unit，ECU)。从用途上讲，ECU是汽车专用微机控制器，也称汽车专用单片机。ECU之间需要通信，并且依赖于各种不同的总线协议。因此，汽车内部具有多种总线协议，例如控制器局域网(Controller Area Network，CAN)总线协议、局部互联网络(Local Interconnect Network，LIN)总线协议、面向媒体的系统传输(Media Oriented System Transport，MOST)总线协议、FLEXRAY总线协议、以太网(ETHERNET)总线协议等。
图1是示出现有技术中车载网络的示例性示意图之一，图2是示出现有技术中车载网络的示例性示意图之二。参照图1和图2，车载网络的中心节点是车载网关。车载网关具有多种接口，可连接适用例如CAN、LIN、MOST等协议的多重网络。每种总线协议构成一个独立的子网(如子网1)，每个子网内包含一定数量的上述通信设备。
随着人们对汽车安全的关注度的不断提高，信息安全问题是车载网络中尚未得到很好解决的问题。基于上述车载网络拓扑结构，如图1所示，当子网1中的报文传递到子网2时，需要在网关进行一次转发。其 过程中报文P(n)全部以明文形式传递。然而，明文形式的报文很容易被监听和被破解，从而给行车带来安全隐患。
发明内容
本申请的目的在于，提供一种用于包括多个子网的车载网络的数据通信方法、系统及网关，以使子网间传递的报文以密文形式进行通信，为行车建立更加安全、稳定的网络环境。
为实现上述发明目的，本申请的实施例提供了一种用于包括多个子网的车载网络的数据通信方法，包括：获取自第一子网的通信设备发送给第二子网的第一加密报文；利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；将所述第二加密报文发送给所述第二子网中的相应通信设备。
优选地，所述预定的第一子网安全密钥和所述预定的第二子网安全密钥不同。
优选地，所述利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据的处理包括：根据所述预定的第一子网安全密钥使用对称加密算法对所述第一加密报文进行解密，得到第一报文数据；所述利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文的处理包括：根据所述预定的第二子网安全密钥使用对称加密算法对所述第二报文数据进行加密，得到第二加密报文。
优选地，所述对称加密算法是数据加密标准DES算法或高级加密标准AES算法。
优选地，所述方法还包括：根据预设的密钥更新算法更新第一子网安全密钥；将所述更新的第一子网安全密钥发送给所述第一子网中的通信设备。
优选地，所述将所述更新的第一子网安全密钥发送给所述第一子网中 的通信设备的处理包括：使用当前的第一子网安全密钥将密钥更新报文加密，所述密钥更新报文包括所述更新的第一子网安全密钥；将加密的密钥更新报文发送至所述第一子网中的通信设备。
优选地，在车载网络的网关上执行所述方法。
本申请的实施例还提供了一种车载网络的网关，包括：报文获取模块，用于获取自第一子网的通信设备发送给第二子网的第一加密报文；报文解密模块，用于利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；通信协议转换模块，用于将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；报文加密模块，用于利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；报文发送模块，用于将所述第二加密报文发送给所述第二子网中的相应通信设备。
优选地，所述预定的第一子网安全密钥和所述预定的第二子网安全密钥不同。
优选地，所述报文解密模块用于根据所述预定的第一子网安全密钥使用对称加密算法对所述第一加密报文进行解密，得到第一报文数据；所述报文加密模块用于根据所述预定的第二子网安全密钥使用对称加密算法对所述第二报文数据进行加密，得到第二加密报文。
优选地，所述对称加密算法是数据加密标准DES算法或高级加密标准AES算法。
优选地，所述网关还包括：密钥更新模块，用于根据预设的密钥更新算法获得更新的第一子网安全密钥；密钥发送模块，用于将所述更新的第一子网安全密钥发送给所述第一子网中的通信设备。
优选地，所述密钥发送模块包括：密钥更新报文加密单元，用于使用当前的第一子网安全密钥将密钥更新报文加密，所述密钥更新报文包括所述更新的第一子网安全密钥；密钥更新报文发送单元，用于将加密的密钥更新报文发送至所述第一子网中的通信设备。
本申请的实施例还提供了一种车载网络的数据通信系统，包括：多个子网和如前述实施例所述的车载网络的网关，其中，每个所述子网包括多个通信设备，所述通信设备用于从所述网关接收加密的第一报文，将所述第一报文解密，并且将发送给所述网关的第二报文加密，将加密的第二报 文发送给所述网关。
本申请的实施例还提供了一种车载网络的网关，包括：
处理器、存储器、通信接口和总线；其中，
所述处理器、存储器、通信接口通过所述总线完成相互间的通信；
所述通信接口用于该网关与车辆的通信设备之间的信息传输；
所述处理器用于调用所述存储器中的逻辑指令，以执行如下方法：
获取自第一子网的通信设备发送给第二子网的第一加密报文；利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；将所述第二加密报文发送给所述第二子网中的相应通信设备。
本申请的实施例还提供了一种计算机程序，包括程序代码，所述程序代码用于执行如下操作：
获取自第一子网的通信设备发送给第二子网的第一加密报文；
利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；
将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；
利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；
将所述第二加密报文发送给所述第二子网中的相应通信设备。
本申请的实施例还提供了一种存储介质，用于存储如前所述的计算机程序。
本申请实施例提供的用于包括多个子网的车载网络的数据通信方法、系统及网关，可为执行数据通信的两个子网的通信设备自动、快速地对二者间传递的报文进行加密和解密处理，从而更安全、可靠地进行交互。其中，子网安全密钥极大地保证了子网的通信设备之间交互的安全性和稳定性，极大地提升了用户行车体验。
附图说明
图1为示出现有技术中车载网络的示例性示意图之一；
图2为示出现有技术中车载网络的示例性示意图之二；
图3为示出反映本申请的总体发明构思的一个示例的示意图；
图4为示出本申请实施例一的用于包括多个子网的车载网络的数据通信方法的流程图；
图5为示出本申请实施例二的车载网络的网关的逻辑框图；
图6为示出本申请实施例三的车载网络的数据通信系统的逻辑框图；
图7为示出本申请实施例四的车载网络的网关的结构框图。
具体实施方式
本申请的基本构思是，提供一种基于安全密钥为进行数据通信的两个子网间传递的报文进行加密和解密处理，再进行报文传输的技术方案，从而使得子网的通信设备之间更安全、可靠地进行交互。
图3是示出反映本申请的总体发明构思的一个示例的示意图。
参照图3，车载网关中存有各个子网相应的密钥，当一个报文需要从子网1传递到子网2上时，子网1的加密报文可能与子网2的加密报文所使用的通信协议不同。
例如，车载网关接收来自子网1的密文报文P(1)K(1)，利用子网1的密钥K(1)解析所述密文报文P(1)K(1)得到报文数据P(1)，然后再对报文数据P(1)做不同子网的通信协议转换，转换成符合子网2的通信协议的报文数据P(2)，最后利用子网2的密钥K(2)将完成通信协议转换的报文数据P(2)加密得到密文报文P(2)K(2)，并将密文报文P(2)K(2)发送到子网2上。
由此可见，在车载网络内部的数据通信过程中，报文皆是以密文形式传递的，密文形式的报文具有不易被监听和被破解的优势。因此，在车载网络中通过密文形式进行数据通信可保证子网的通信设备之间交互的安全性和稳定性，提高行车安全，进而提升用户行车体验。
此外，因子网的通信设备之间采用不同的密钥，即使某个子网被攻破，并不会影响到其他子网，其他子网仍然是安全的。
下面结合附图详细描述本申请实施例的用于包括多个子网的车载网络的数据通信方法、系统及网关。
实施例一
图4是示出本申请实施例一的用于包括多个子网的车载网络的数据通信方法的流程图。可例如在车载网络的网关上执行所述方法。
参照图4，在步骤S410，获取自第一子网的通信设备发送给第二子网的第一加密报文。
具体地，当第一子网的通信设备需要与第二子网的通信设备进行数据通信时，第一子网的通信设备会使用预存的预定第一子网安全密钥将报文数据加密得到第一加密报文，并且将第一加密报文放在总线上进行发送。相应地，车载网络的网关从总线获取第一加密报文。这里，子网安全密钥的长度可以是128比特或256比特。
在步骤S420，利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据。
在具体的实现方式中，预定的第一子网安全密钥可预先存入车载网络的网关及第一子网的通信设备，在使用时直接获取即可，或者从存储有各个子网安全密钥的服务器下载，再或者从如U盘等存储设备直接拷入。同样地，对于包括多个子网的车载网络，其他子网的安全密钥也可运用上述相同的实现方式。
在步骤S430，将所述第一报文数据转换为符合第二子网通信协议的第二报文数据。
在步骤S440，利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文。
在步骤S450，将所述第二加密报文发送给所述第二子网中的相应通信设备。
本申请实施例的用于包括多个子网的车载网络的数据通信方法，接收通信发起方发送的加密报文，进一步对加密报文进行解密、通信协议转换及加密的处理，从而自动、快速地发送适用于通信接收方的加密报文，极大地保证了子网的通信设备之间交互的安全性、流畅性和稳定性，且提升了用户行车体验。
在此基础上，由于在车载网络的设备中，对系统反馈和资源使用具有较高的要求，因此可考虑对使用的加密解密算法进行优化。在加密解密算法中， 对称加密算法相对简单、系统开销小的优点，适合对大量数据进行加解密。
因此，根据本申请的示例性实施例，在步骤S420，根据所述预定的第一子网安全密钥使用对称加密算法对所述第一加密报文进行解密，得到第一报文数据。
同理，根据本申请的示例性实施例，在步骤S440，根据所述预定的第二子网安全密钥使用对称加密算法对所述第二报文数据进行加密，得到第二加密报文。
需要说明的是，本发明实施例中的对称加密算法不仅可以通过软件实现，也可以通过硬件实现。
进一步地，所述对称加密算法可以是数据加密标准DES算法或高级加密标准AES算法，从而进一步对采用的加密算法进行优化。其中，数据加密标准DES算法运行速度较快，适用于加密大量数据的场合，而高级加密标准AES算法是下一代的加密算法标准，运行速度比数据加密标准DES算法还要快，且安全级别高。
此外，根据本申请的优选实施例，所述预定的第一子网安全密钥和所述预定的第二子网安全密钥不同。
举例来说，第二加密报文被发送到第二子网的总线上进行传递。第二子网中的相应通信设备从总线上获取即可。即使第二加密报文被非法的节点监听，但由于该节点没有第二子网的密钥，因此也不能够解析报文数据，更不能反推报文中每个字段的含义。由此，监听到的第二加密报文没有任何价值。
在具体的实现方式中，各个子网使用不同的安全密钥。这些安全密钥作为初始密钥在汽车出厂前，第一次被植入车载网络的网关和通信设备中的ECU。由于汽车厂内部出现密钥泄露的机会很小，从而确保初始密钥的安全性。
但在后续行车过程中安全性存在隐患，因此，需要对不同子网所使用的安全密钥进行定期更新，更新的过程由车载网络的网关管理。例如，在安全密钥到期之后，网关需要向子网发送密钥更新报文，密钥更新报文中携带有新密钥。该密钥更新报文的发送同样需要以密文形式传递，可利用旧密钥对密钥更新报文进行加密，然后通过例如广播的方式发送到子网的总线上。子网内通信设备中的ECU从所属子网的总线获取密钥更新报文，再利用旧密钥 对密钥更新报文进行解密得到新密钥，进一步存储新密钥即可。以此类推，网关依次对不同子网逐个进行上述密钥更新处理过程。
为此，所述方法可还包括：根据预设的密钥更新算法更新第一子网安全密钥；将所述更新的第一子网安全密钥发送给所述第一子网中的通信设备。
具体地，利用密钥更新算法获得更新的第一子网安全密钥；其次，可使用当前的第一子网安全密钥将密钥更新报文加密，所述密钥更新报文包括所述更新的第一子网安全密钥；将加密的密钥更新报文发送至所述第一子网中的通信设备。
实施例二
图5是示出本申请实施例二的车载网络的网关的逻辑框图。可用于执行如图4所示实施例的方法步骤。
参照图5，车载网络的网关包括报文获取模块510、报文解密模块520、通信协议转换模块530、报文加密模块540和报文发送模块550。
报文获取模块510用于获取自第一子网的通信设备发送给第二子网的第一加密报文。
报文解密模块520用于利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据。
具体地，所述报文解密模块520可用于根据所述预定的第一子网安全密钥使用对称加密算法对所述第一加密报文进行解密，得到第一报文数据。
这里，所述对称加密算法可以是数据加密标准DES算法或高级加密标准AES算法。
通信协议转换模块530用于将所述第一报文数据转换为符合第二子网通信协议的第二报文数据。
报文加密模块540用于利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文。
具体地，所述报文加密模块540可用于根据所述预定的第二子网安全密钥使用对称加密算法对所述第二报文数据进行加密，得到第二加密报文。
报文发送模块550用于将所述第二加密报文发送给所述第二子网中的相应通信设备。
优选地，所述预定的第一子网安全密钥和所述预定的第二子网安全密钥 不同。
进一步地，所述网关还可以包括：密钥更新模块(未示出)，用于根据预设的密钥更新算法获得更新的第一子网安全密钥；密钥发送模块(未示出)，用于将所述更新的第一子网安全密钥发送给所述第一子网中的通信设备。
更进一步地，所述密钥发送模块可包括：密钥更新报文加密单元(未示出)，用于使用当前的第一子网安全密钥将密钥更新报文加密，所述密钥更新报文包括所述更新的第一子网安全密钥；密钥更新报文发送单元(未示出)，用于将加密的密钥更新报文发送至所述第一子网中的通信设备。
本申请实施例提供的车载网络的网关，可根据通信发起方的通信设备所属子网安全密钥对其发送的加密报文进行解密，然后对解密得到报文数据进行通信协议转换，并利用通信接收方的通信设备所属子网安全密钥将转换后的报文数据加密，再发送给通信接收方的通信设备，从而使得交互过程更加安全、可靠。尤其是子网安全密钥极大地保证了子网的通信设备之间交互的安全性和稳定性，提升了用户行车体验。
实施例三
图6是示出本申请实施例三的车载网络的数据通信系统的逻辑框图。
参照图6，所述数据通信系统包括：多个子网610和如前述实施例二的车载网络的网关620，其中，每个所述子网610包括多个通信设备630。
通信设备630用于从所述网关接收加密的第一报文，将所述第一报文解密，并且将发送给所述网关的第二报文加密，将加密的第二报文发送给所述网关。
本申请实施例提供的车载网络的数据通信系统，可为执行数据通信的两个子网的通信设备，自动、快速地对通信发起方传递给网关的报文，以及网关传递给通信接收方的报文进行加密和解密处理，从而为车载网络的网关和多个子网提供更加安全、可靠的数据通信环境，极大地提升了用户行车体验。
实施例四
图7是示出本申请实施例四的车载网络的网关的结构框图。
参照图7，所述网关，包括：
处理器(processor)101、存储器(memory)102、通信接口(Communications Interface)103和总线104；其中，
所述处理器101、存储器102、通信接口103通过所述总线104完成相互间的通信；
所述通信接口103用于该网关与车辆的通信设备之间的信息传输；
所述处理器101用于调用所述存储器102中的逻辑指令，以执行如下方法；
获取自第一子网的通信设备发送给第二子网的第一加密报文；利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；将所述第二加密报文发送给所述第二子网中的相应通信设备。
实施例五
参看图4，本实施例公开一种计算机程序，包括程序代码，所述程序代码用于执行如下操作：
获取自第一子网的通信设备发送给第二子网的第一加密报文；
利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；
将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；
利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；
将所述第二加密报文发送给所述第二子网中的相应通信设备。
实施例六
本实施例公开一种存储介质，用于存储如前述实施例所述的计算机程序。
本领域普通技术人员可以理解：实现上述方法实施例的全部或部分步骤可以通过程序指令相关的硬件来完成，前述的程序可以存储于一计算机可读取存储介质中，该程序在执行时，执行包括上述方法实施例的步骤；而前述的存储介质包括：ROM、RAM、磁碟或者光盘等各种可以存储程序代码的介质。
最后应说明的是：以上各实施例仅用以说明本发明的实施例的技术方案，而非对其限制；尽管参照前述各实施例对本发明的实施例进行了详细的说明， 本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分或者全部技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本发明的实施例各实施例技术方案的范围。

Claims (17)

  1. 一种用于包括多个子网的车载网络的数据通信方法，其特征在于，包括：
    获取自第一子网的通信设备发送给第二子网的第一加密报文；
    利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；
    将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；
    利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；
    将所述第二加密报文发送给所述第二子网中的相应通信设备。
  2. 根据权利要求1所述的方法，其特征在于，所述预定的第一子网安全密钥与所述预定的第二子网安全密钥不同。
  3. 根据权利要求2所述的方法，其特征在于，所述利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据的处理包括：
    根据所述预定的第一子网安全密钥使用对称加密算法对所述第一加密报文进行解密，得到第一报文数据；
    所述利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文的处理包括：
    根据所述预定的第二子网安全密钥使用对称加密算法对所述第二报文数据进行加密，得到第二加密报文。
  4. 根据权利要求3所述的方法，其特征在于，所述对称加密算法是数据加密标准DES算法或高级加密标准AES算法。
  5. 根据权利要求1～4中任一所述的方法，其特征在于，所述方法还包括：
    根据预设的密钥更新算法更新第一子网安全密钥；
    将所述更新的第一子网安全密钥发送给所述第一子网中的通信设备。
  6. 根据权利要求5所述的方法，其特征在于，所述将所述更新的第一子网安全密钥发送给所述第一子网中的通信设备的处理包括：
    使用当前的第一子网安全密钥将密钥更新报文加密，所述密钥更新报文包括所述更新的第一子网安全密钥；
    将加密的密钥更新报文发送至所述第一子网中的通信设备。
  7. 根据权利要求6所述的方法，其特征在于，在车载网络的网关上执行所述方法。
  8. 一种车载网络的网关，其特征在于，包括：
    报文获取模块，用于获取自第一子网的通信设备发送给第二子网的第一加密报文；
    报文解密模块，用于利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；
    通信协议转换模块，用于将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；
    报文加密模块，用于利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；
    报文发送模块，用于将所述第二加密报文发送给所述第二子网中的相应通信设备。
  9. 根据权利要求8所述的网关，其特征在于，所述预定的第一子网安全密钥和所述预定的第二子网安全密钥不同。
  10. 根据权利要求9所述的网关，其特征在于，所述报文解密模块用于根据所述预定的第一子网安全密钥使用对称加密算法对所述第一加密报文进行解密，得到第一报文数据；
    所述报文加密模块用于根据所述预定的第二子网安全密钥使用对称加密算法对所述第二报文数据进行加密，得到第二加密报文。
  11. 根据权利要求10所述的网关，其特征在于，所述对称加密算法是数据加密标准DES算法或高级加密标准AES算法。
  12. 根据权利要求8～11中任一所述的网关，其特征在于，所述网关还包括：
    密钥更新模块，用于根据预设的密钥更新算法获得更新的第一子网安全密钥；
    密钥发送模块，用于将所述更新的第一子网安全密钥发送给所述第一子网中的通信设备。
  13. 根据权利要求12所述的网关，其特征在于，所述密钥发送模块 包括：
    密钥更新报文加密单元，用于使用当前的第一子网安全密钥将密钥更新报文加密，所述密钥更新报文包括所述更新的第一子网安全密钥；
    密钥更新报文发送单元，用于将加密的密钥更新报文发送至所述第一子网中的通信设备。
  14. 一种车载网络的数据通信系统，其特征在于，包括：多个子网和如权利要求8～13中任一项所述的车载网络的网关，其中，每个所述子网包括多个通信设备，所述通信设备用于从所述网关接收加密的第一报文，将所述第一报文解密，并且将发送给所述网关的第二报文加密，将加密的第二报文发送给所述网关。
  15. 一种车载网络的网关，其特征在于，包括：
    处理器、存储器、通信接口和总线；其中，
    所述处理器、存储器、通信接口通过所述总线完成相互间的通信；
    所述通信接口用于该网关与车辆的通信设备之间的信息传输；
    所述处理器用于调用所述存储器中的逻辑指令，以执行如下方法；
    获取自第一子网的通信设备发送给第二子网的第一加密报文；利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；将所述第二加密报文发送给所述第二子网中的相应通信设备。
  16. 一种计算机程序，其特征在于，包括程序代码，所述程序代码用于执行如下操作：
    获取自第一子网的通信设备发送给第二子网的第一加密报文；
    利用预定的第一子网安全密钥将所述第一加密报文解密，获得第一报文数据；
    将所述第一报文数据转换为符合第二子网通信协议的第二报文数据；
    利用预定的第二子网安全密钥将所述第二报文数据加密，得到第二加密报文；
    将所述第二加密报文发送给所述第二子网中的相应通信设备。
  17. 一种存储介质，用于存储如权利要求16所述的计算机程序。
PCT/CN2016/082074 2015-10-21 2016-05-13 用于包括多个子网的车载网络的数据通信方法、系统及网关 Ceased WO2017067154A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510689773.X 2015-10-21
CN201510689773.XA CN105897819A (zh) 2015-10-21 2015-10-21 用于包括多个子网的车载网络的数据通信方法、系统及网关

Publications (1)

Publication Number Publication Date
WO2017067154A1 true WO2017067154A1 (zh) 2017-04-27

Family

ID=57002200

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/082074 Ceased WO2017067154A1 (zh) 2015-10-21 2016-05-13 用于包括多个子网的车载网络的数据通信方法、系统及网关

Country Status (3)

Country Link
US (1) US20170118020A1 (zh)
CN (1) CN105897819A (zh)
WO (1) WO2017067154A1 (zh)

Families Citing this family (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018057321A2 (en) * 2016-09-23 2018-03-29 Kwourz Research Llc Secure communication of network traffic
CN107071010B (zh) * 2017-03-29 2019-08-09 常熟理工学院 一种基于车载云的网络数据通信方法
CN107104868B (zh) * 2017-05-31 2020-07-03 惠州华阳通用电子有限公司 一种车载网络加密通信方法及装置
GB2564435B (en) * 2017-07-10 2020-07-15 Ge Aviat Systems Ltd A network switch for auditing communications on a deterministic network
CN107659494B (zh) * 2017-10-12 2020-07-07 领克汽车科技（台州）有限公司 数据处理方法及智能车载网关
US11240006B2 (en) * 2019-03-25 2022-02-01 Micron Technology, Inc. Secure communication for a key exchange
CN111835627B (zh) * 2019-04-23 2022-04-26 华为技术有限公司 车载网关的通信方法、车载网关及智能车辆
CN110412972B (zh) * 2019-06-12 2021-04-20 广汽丰田汽车有限公司 一种基于汽车的可变并行通讯控制方法、设备及介质
KR102615478B1 (ko) * 2019-10-24 2023-12-19 현대모비스 주식회사 자동차용 센서 통합 모듈
US11563726B2 (en) * 2020-02-11 2023-01-24 Karma Automotive Llc Vehicle security system
CN112087440A (zh) * 2020-09-02 2020-12-15 上海英恒电子有限公司 一种报文传输方法、装置、电子设备及存储介质
CN113300946B (zh) * 2021-05-24 2022-05-10 北京理工大学 一种多核多通信协议网关及其管理调度方法
CN113765900B (zh) * 2021-08-24 2023-09-26 深圳融安网络科技有限公司 协议交互信息输出传输方法、适配器装置及存储介质
CN113794734A (zh) * 2021-09-26 2021-12-14 上汽通用五菱汽车股份有限公司 车载can总线加密通信方法、控制装置和可读存储介质
US12395471B2 (en) * 2021-10-04 2025-08-19 The Regents Of The University Of Michigan Sufficiently secure controller area network
CN114970428B (zh) * 2022-06-08 2026-03-24 西安微电子技术研究所 用于SoC中Flexray总线控制器的验证系统及方法
CN115022059B (zh) * 2022-06-13 2024-11-26 中国银行股份有限公司 一种量子通信方法及装置
CN115208694B (zh) * 2022-09-13 2023-01-13 智己汽车科技有限公司 基于中央计算平台的车载网络通信加密系统及车辆
CN117478762B (zh) * 2023-10-31 2024-05-31 长江量子(武汉)科技有限公司 车联网数据安全高速传输方法及系统
CN118900175B (zh) * 2023-12-13 2025-04-22 国科量子通信网络有限公司 基于量子网络的应用管控方法、安全执行模块及存储介质
CN119696937B (zh) * 2025-02-25 2025-06-06 浙江大华技术股份有限公司 一种数据加密方法、电子设备及计算机可读存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080065289A1 (en) * 2006-09-12 2008-03-13 Spx Corporation Method and apparatus for reading and erasing diagnostic trouble codes from a vehicle
CN102546184A (zh) * 2012-02-17 2012-07-04 北京海联捷讯信息科技发展有限公司 传感网内消息安全传输或密钥分发的方法和系统
CN103067166A (zh) * 2011-10-19 2013-04-24 海尔集团公司 一种智能家庭系统的分级混合加密方法及装置
CN103685000A (zh) * 2012-09-05 2014-03-26 罗伯特·博世有限公司 网关模块、通信系统和在用户之间传输数据的方法

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7234063B1 (en) * 2002-08-27 2007-06-19 Cisco Technology, Inc. Method and apparatus for generating pairwise cryptographic transforms based on group keys
DE102006040836A1 (de) * 2006-08-31 2008-04-10 Bayerische Motoren Werke Ag System aus Steuergeräten in einem Kraftfahrzeug mit geschütztem Diagnosezugriff
US9172686B2 (en) * 2007-09-28 2015-10-27 Alcatel Lucent Facilitating heterogeneous authentication for allowing network access
US9380044B2 (en) * 2014-09-10 2016-06-28 Cisco Technology, Inc. Supporting differentiated secure communications among heterogeneous electronic devices

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080065289A1 (en) * 2006-09-12 2008-03-13 Spx Corporation Method and apparatus for reading and erasing diagnostic trouble codes from a vehicle
CN103067166A (zh) * 2011-10-19 2013-04-24 海尔集团公司 一种智能家庭系统的分级混合加密方法及装置
CN102546184A (zh) * 2012-02-17 2012-07-04 北京海联捷讯信息科技发展有限公司 传感网内消息安全传输或密钥分发的方法和系统
CN103685000A (zh) * 2012-09-05 2014-03-26 罗伯特·博世有限公司 网关模块、通信系统和在用户之间传输数据的方法

Also Published As

Publication number Publication date
US20170118020A1 (en) 2017-04-27
CN105897819A (zh) 2016-08-24

Similar Documents

Publication Publication Date Title
WO2017067154A1 (zh) 用于包括多个子网的车载网络的数据通信方法、系统及网关
CN106664311B (zh) 支持异构电子设备之间差异化的安全通信
CN106899404B (zh) 基于预共享密钥的车载can fd总线通信系统及方法
KR101740957B1 (ko) 차량용 데이터의 인증 및 획득 방법
JP6512023B2 (ja) 通信システム、送信ノード、及び受信ノード
KR101481403B1 (ko) 차량용 데이터의 인증 및 획득 방법
CN106453326B (zh) 一种can总线的认证与访问控制方法
US10735517B2 (en) Communication system and communication method
CN106533655A (zh) 一种车内网ecu安全通信的方法
CN105187376A (zh) 车联网中汽车内部网络的安全通信方法
WO2017080182A1 (zh) 数据发送、接收方法、发送端、接收端和can总线网络
CN113632419B (zh) 用于对要在总线系统（bu）、特别是机动车辆的总线系统中传输的至少一个数据分组进行生成和认证检查的装置和方法
TWI736273B (zh) 網狀網路與雲端伺服器之通訊方法、網狀網路系統及其節點裝置
JP2017168931A (ja) 通信ネットワークシステム、車両、カウンタ値通知ノード、カウンタ値共有方法、及びコンピュータプログラム
JP2016051921A (ja) 通信システム
KR102931115B1 (ko) 양자 기술 기반 가상 사설망의 보안 세션 연결 방법, 장치 및 시스템
WO2011142353A1 (ja) 通信装置および通信方法
CN102045343B (zh) 基于数字证书的通讯加密安全控制方法、服务器及系统
CN105015490B (zh) 发动机防盗单元的认证方法
CN104303452A (zh) 用于产生密码保护的冗余的数据包的方法和设备
KR101705639B1 (ko) 차량 네트워크 시스템에서의 메시지 송수신 방법
CN111245613B (zh) 一种基于身份的车内外网络三级密钥协商方法
CN105162825A (zh) 文件安全传输方法
CN110830243A (zh) 对称密钥分发方法、装置、车辆及存储介质
CN113271586A (zh) 电力设备体域网安全通信方法及系统、存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16856597

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16856597

Country of ref document: EP

Kind code of ref document: A1