A security isolation system, a vehicle safety control method and related devices

Abstract

The present invention discloses a security isolation system, a vehicle safety control method and related devices. The system includes: a communication protocol module, which is used to provide API interfaces of a specific protocol for third-party applications, receive request instructions sent by the above-mentioned third-party applications, and determine whether to send the above-mentioned request instructions to the service interface proxy module according to the security verification result of the security detection module; a security detection module, which is used to detect whether the request instructions sent by third-party applications are secure and feedback the security verification result to the above-mentioned communication protocol module; a service interface proxy module, which is used to convert vehicle-side service interfaces into specific API interfaces for the above-mentioned third-party applications to call. The security isolation system proposed in this application can ensure that the vehicle safety attributes and user privacy data are not leaked, and can also maximize the expansion of the application scenarios of vehicle-side services and interfaces, contributing to the sustainable development of the automotive software ecosystem.

Description

Technical Field

[0001] This specification relates to the field of vehicle safety. More specifically, the present invention relates to a safety isolation system, a vehicle safety control method, and related devices. Background Art

[0002] The current automotive industry is undergoing profound changes. With the development of the "Four Modernizations" in the automotive industry and the prevalence of emerging technologies such as intelligent networking technology, autonomous driving technology, and 5G, more and more ICT (Information Communication Technology) technologies are being applied to the automotive field. Users are no longer satisfied with highly homogeneous vehicle models on the market. Especially high-end users and young users are increasingly eager to own a unique vehicle to demonstrate their taste and personality. Separating software and hardware functions, reconfiguring services according to the concept of software-oriented SOA (Service-Oriented Architecture), quickly customizing and developing complex software functions and personalized functions through the combined application of different services, and updating vehicle software functions through OTA (Over-the-Air Technology) online upgrade methods to meet users' personalized needs and keep the vehicle fresh are the key paths to solve the problem of product homogeneity and an important development trend in the automotive industry. The automotive software ecosystem will thus develop towards the mobile application ecosystem, and more and more third-party developers will participate, which will affect the safety of vehicles.

[0003] At the same time, as an important Internet of Things terminal and automotive transportation tool, when the current vehicle-side services and interfaces are called by third-party applications, if the third party is an illegal intruder, it is very easy to control the vehicle, seriously affecting the driving safety of the vehicle. Summary of the Invention

[0004] A series of simplified concepts are introduced in the Summary of the Invention section, which will be further elaborated in the Detailed Description section. The Summary of the Invention section of the present invention does not mean to attempt to define the key features and essential technical features of the claimed technical solution, nor does it mean to attempt to determine the protection scope of the claimed technical solution.

[0005] In a first aspect, the present invention provides a safety isolation system, which includes:

[0006] A communication protocol module, configured to provide API interfaces of a specific protocol for third-party applications, receive request instructions sent by the third-party applications, and determine whether to send the request instructions to a service interface proxy module according to the security verification result of a security detection module;

[0007] A security detection module, configured to detect whether a request instruction sent by a third-party application is secure and feedback the security verification result to the above-mentioned communication protocol module;

[0008] A service interface proxy module, configured to convert the vehicle-side service interface into a specific API interface for the above-mentioned third-party application to call.

[0009] Optionally, the above-mentioned security detection module further includes:

[0010] A security authentication component, configured to detect whether the third-party application corresponding to the above-mentioned request instruction is a trustworthy application;

[0011] An access permission management component, configured to determine whether the sender corresponding to the request instruction has the corresponding control permission when the above-mentioned third-party application is a trustworthy application;

[0012] A context environment detection component, configured to detect whether the request instruction exceeds a preset threshold to determine the security of the above-mentioned request instruction when the above-mentioned control permission meets the preset requirements.

[0013] Optionally, the above-mentioned service interface proxy module includes:

[0014] A version management component, configured to manage the version of the vehicle-side service;

[0015] A compatibility management component, configured to manage the compatibility between different versions of the above-mentioned vehicle-side services;

[0016] A variant management component, configured to implement variant management of the vehicle-side service interface to distinguish vehicle-side services provided by different vehicle models and configurations.

[0017] Optionally, the above-mentioned communication protocol module includes:

[0018] A protocol conversion component, configured to implement communication protocol conversion between the third-party service and the vehicle-side service;

[0019] An API interface component, configured to provide an API interface with a specific protocol for the third-party application.

[0020] In a second aspect, the present application proposes a vehicle safety control method for a security isolation system as described in any one of the first aspects. The method includes:

[0021] Receiving a request message sent by a third-party application;

[0022] Sending the above-mentioned request message to the above-mentioned security detection module and obtaining a security verification result;

[0023] In the case that the above security verification result is a safe result, send the above request message to the above service interface proxy module to call the corresponding vehicle-side service.

[0024] Optionally, the above method further includes:

[0025] In the case that the above security verification result is a dangerous result, obtain the type of the above third-party application;

[0026] In the case that the above third-party application type is a vehicle driving application, immediately upload the dangerous result to the cloud;

[0027] Remind the user on the vehicle side to enter the manual driving mode.

[0028] Optionally, the above method further includes:

[0029] In the case that the above third-party application type is an auxiliary service application, obtain the number of dangerous results of the above third-party application within a preset time;

[0030] In the case that the above number of dangerous results exceeds a preset threshold, cut off the service provided by the above third-party application.

[0031] Thirdly, the present invention further provides a vehicle safety control device for performing any one of the above vehicle safety control methods in the second aspect, including:

[0032] A receiving unit for receiving a request message sent by a third-party application;

[0033] An obtaining unit for sending the above request message to the above security detection module and obtaining a security verification result;

[0034] A control unit for, in the case that the above security verification result is a safe result, sending the above request message to the above service interface proxy module to call the corresponding vehicle-side service.

[0035] Fourthly, an electronic device includes: a memory, a processor, and a computer program stored in the above memory and executable on the above processor. When the processor executes the computer program stored in the memory, it implements the steps of the vehicle safety control method according to any one of the above first aspects.

[0036] Fifthly, the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the above computer program is executed by a processor, it implements the vehicle safety control method according to any one of the above first aspects.

[0037] In summary, the security isolation system of the embodiments of the present application includes: a communication protocol module, which is used to provide API interfaces of specific protocols for third-party applications, receive request instructions sent by the above third-party applications, and determine whether to send the above request instructions to the service interface proxy module according to the security verification results of the security detection module; a security detection module, which is used to detect whether the request instructions sent by the third-party applications are secure and feedback the security verification results to the above communication protocol module; a service interface proxy module, which is used to convert the vehicle-side service interfaces into specific API interfaces for the above third-party applications to call. The security isolation system proposed in the present application provides API interfaces of specific protocols for third-party applications through the communication protocol module, which facilitates the docking of third-party applications with the vehicle side. The security detection module conducts multi-level security evaluations on the request information sent by the third-party applications, ensuring the legality of the third-party application requests entering the vehicle side. The service interface proxy module converts the vehicle-side service interfaces and third-party service interfaces, ensuring the privacy and security of the vehicle-side service interfaces and enhancing the security of the vehicle-side services. The system proposed in the present application can ensure that the vehicle's security attributes and user privacy data are not leaked, and can also maximize the expansion of the application scenarios of the vehicle-side services and interfaces, contribute to the sustainable development of the automotive software ecosystem, build a new business model for software service products, and ultimately form a business form similar to a mobile application store.

[0038] The vehicle safety control method of the present invention, other advantages, objectives and features of the present invention will be partially reflected by the following description, and partially will be understood by those skilled in the art through the research and practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] By reading the detailed description of the preferred embodiments below, various other advantages and benefits will become clear to those of ordinary skill in the art. The drawings are only for the purpose of showing the preferred embodiments and are not considered to limit this specification. Moreover, throughout the drawings, the same reference numerals are used to represent the same components. In the drawings:

[0040] Figure 1 It is a schematic structural diagram of a security isolation system provided by an embodiment of the present application;

[0041] Figure 2 It is a schematic structural diagram of a security detection module in a security isolation system provided by an embodiment of the present application;

[0042] Figure 3 It is a schematic structural diagram of a service interface proxy module in a security isolation system provided by an embodiment of the present application;

[0043] Figure 4 It is a schematic structural diagram of a communication protocol module in a security isolation system provided by an embodiment of the present application;

[0044] Figure 5 Schematic flow chart of a vehicle safety control method provided by an embodiment of the present application;

[0045] Figure 6 Schematic flow chart of another vehicle safety control method provided by an embodiment of the present application;

[0046] Figure 7 Schematic diagram of the structure of another safety isolation system provided by an embodiment of the present application;

[0047] Figure 8 Schematic diagram of the structure of a vehicle safety control device provided by an embodiment of the present application;

[0048] Figure 9 Schematic diagram of the structure of a vehicle safety control electronic device provided by an embodiment of the present application. Detailed implementation manners

[0049] The safety isolation system proposed in the present application provides API interfaces of specific protocols for third-party applications through the communication protocol module, which facilitates the docking of third-party applications with the vehicle side. The safety detection module conducts multi-level security evaluations on the request information sent by third-party applications, ensuring the legality of the third-party application requests entering the vehicle side. The service interface proxy module converts the vehicle-side service ports and third-party service ports, ensuring the privacy and security of the vehicle-side service ports and enhancing the security of the vehicle-side services. The system proposed in the present application can ensure that the vehicle safety attributes and user privacy data are not leaked, and can also maximize the expansion of the application scenarios of vehicle-side services and interfaces, contribute to the sustainable development of the automotive software ecosystem, build a new business model for software service products, and ultimately form a business form similar to a mobile application store.

[0050] Terms such as "first", "second", "third", "fourth", etc. (if any) in the specification, claims and above-mentioned drawings of the present application are used to distinguish similar objects and do not necessarily need to be used to describe a specific order or sequence. It should be understood that such data can be interchanged under appropriate circumstances so that the embodiments described herein can be implemented in an order different from that shown or described herein. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device comprising a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices. The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments.

[0051] Please refer to Figure 1 , which is a schematic structural diagram of a security isolation system provided by an embodiment of the present application. Specifically, it may include:

[0052] The communication protocol module 10 is used to provide an API interface of a specific protocol for a third-party application, receive a request instruction sent by the above third-party application, and determine whether to send the above request instruction to the service interface proxy module according to the security verification result of the security detection module;

[0053] The security detection module 20 is used to detect whether the request instruction sent by the third-party application is secure and feedback the security verification result to the above communication protocol module;

[0054] The service interface proxy module 30 is used to convert the vehicle-side service interface into a specific API interface for the above third-party application to call.

[0055] Exemplarily, the security isolation system proposed in the present application includes a communication protocol module, a security detection module, and a service interface proxy module. The communication protocol module provides a specific protocol according to the protocol required by the third-party application. There are multiple services in the same vehicle, and multiple services need to be dispatched to different third parties for targeted design. The services designed by different third parties may be generated based on different protocols. The communication protocol module provides an API (Application Programming Interface) interface that meets the protocol requirements of the specified third-party application, and at the same time converts the protocol of the third-party application into a protocol type available in the vehicle, so as to meet the requirement of compatibility between the vehicle side and the third-party application. After receiving the request instruction of the third-party application, the communication protocol module sends the request instruction to the security detection module. The security detection module judges the legality of the third-party application of the request instruction, such as judging whether the application is legal, whether the authority of the application issuer meets the requirements, whether the adjustment range corresponding to the request instruction meets the threshold requirements, etc. After the security detection module detects that the request instruction is qualified, it notifies the communication protocol module that the request instruction can be sent to the service interface proxy module. The service interface proxy module has a specific API interface. In the service interface proxy module, the third-party service interface and the vehicle-side service interface can be converted according to the established logic, and only a specific API interface is provided for the third-party application. The vehicle-side service interface is connected to the corresponding ECU (Electronic Control Unit) that executes the service on the vehicle side. After the interface conversion by the service interface proxy module, the vehicle-side service interface will not be exposed to the manufacturers of third-party applications, fundamentally improving the security of the vehicle.

[0056] In summary, the proposed security isolation system in this application provides API interfaces of specific protocols for third-party applications through the communication protocol module, facilitating the docking of third-party applications with the vehicle side. The security detection module conducts multi-level security evaluations on the request information sent by third-party applications, ensuring the legality of the third-party application requests entering the vehicle side. The service interface proxy module converts the vehicle-side service ports and third-party service ports, ensuring the privacy and security of the vehicle-side service ports and enhancing the security of vehicle-side services. The system proposed in this application can ensure that the vehicle's safety attributes and user privacy data are not leaked, and can also maximize the expansion of the application scenarios of vehicle-side services and interfaces, contributing to the sustainable development of the automotive software ecosystem, building a new business model for software service products, and ultimately forming a business form similar to a mobile application store.

[0057] In some examples, the above security detection module 20 further includes:

[0058] A security authentication component 201 for detecting whether the third-party application corresponding to the above request instruction is a trustworthy application;

[0059] An access permission management component 202 for determining whether the sender corresponding to the request instruction has the corresponding control permission in the case where the above third-party application is a trustworthy application;

[0060] A context environment detection component 203 for detecting whether the request instruction exceeds a preset threshold to determine the security of the above request instruction in the case where the above control permission meets the preset requirements.

[0061] Exemplarily, the security detection module includes a security authentication component, an access permission management component, and a context environment detection component. When performing security detection, specifically as Figure 6 shown:

[0062] S610. The communication protocol module sends the request instruction sent by the third-party application server to the security detection module;

[0063] S620. The security authentication component first verifies whether the third-party application is a trustworthy application. The trustworthy applications can be managed in the form of a whitelist, and the trustworthy applications are known third-party applications. If the third-party application is an illegal application, it jumps to step S670 and executes S680;

[0064] S630. If the third-party application is a trusted application, detect the requested permissions of the third-party application. For example, if the third-party application is an entertainment interaction application that provides entertainment information such as audio-visual images for the vehicle, the request instructions it issues can only be for audio-visual devices such as the central control screen and the audio system. However, if it is detected that the application has issued a vehicle lane change request instruction, then this request instruction does not match the permissions corresponding to the application, and it jumps to step S670 and executes S680;

[0065] S640. If the permissions of the application meet the requirements, perform context message environment detection. Context environment monitoring refers to refining context environment monitoring rules from aspects such as scenario requirements, functional logic, whether the changes in key parameters are reasonable, and attack characteristics in combination with the business application scenario, and performing security isolation when the context environment rules are violated. Detect whether the request value corresponding to the request instruction meets the requirements of the preset value. For example, if the user has set the maximum speed of the vehicle to 120 km / h, and the lane change and overtaking application issues a request instruction of 140 km / h, since 140 km / h has exceeded the requirement of the 120 km / h threshold, at this time, it jumps to step S670 and executes S680;

[0066] S650. Determine whether the service request value is reasonable

[0067] S660. If the service request is reasonable, that is, the request value corresponding to the request instruction meets the threshold requirement, execute the service corresponding to the request instruction;

[0068] S670. Reject the access service corresponding to the request instruction;

[0069] S680. Record the fault code and upload the fault code to the cloud.

[0070] In summary, the security isolation system proposed in the embodiment of the present application, through the security authentication component, access permission management component, and context environment detection component in the security detection module, performs security detection on the request instructions of the third-party service at three levels of application, permission, and request threshold, and can perform security screening on the request instructions issued by the third-party application to ensure the safety of vehicle driving.

[0071] In some examples, the above service interface proxy module 30 includes:

[0072] A version management component 301 for managing the version of the vehicle-side service;

[0073] A compatibility management component 302 for managing the compatibility between different versions of the above vehicle-side services;

[0074] A variant management component 303 for implementing variant management of the vehicle-side service interface to distinguish the vehicle-side services provided for different vehicle models and configurations.

[0075] Exemplarily, the service interface proxy module includes a version management component, a compatibility component, and a variant management component. The version management component is used to manage the version of the vehicle-side service, and update the version of the vehicle-side service based on the upgraded service provided by a third party. During the process of upgrading the services on the vehicle side and the service side, there may be two cases where the version information is inconsistent, resulting in incompatible services. The compatibility management component may include the service of the previous version and the service of the updated version to solve the compatibility problem. The variant management component is used to implement the variant management of the vehicle-side service interface to distinguish the vehicle-side services that can be provided by different vehicle models and configurations, so as to prevent a third-party application from maliciously controlling the vehicle and causing potential safety hazards to the vehicle after knowing the vehicle-side interface service interface.

[0076] In summary, the security isolation system provided by the embodiments of the present application can smoothly upgrade the services between the vehicle side and the third-party application side through the service interface proxy module. At the same time, by performing interface conversion between the vehicle-side service and the third-party application-side service, it is avoided that the vehicle-side service and interface are directly visible to the third-party application, thereby improving the security of the vehicle.

[0077] In some examples, the above communication protocol module 10 includes:

[0078] A protocol conversion component 101 for implementing the communication protocol conversion between the third-party service and the vehicle-side service;

[0079] An API interface component 102 for providing an API interface with a specific protocol for the third-party application.

[0080] Exemplarily, the communication protocol module includes a protocol conversion component and an API interface component. Through the protocol conversion module, the protocol conversion between the vehicle side and the third-party service side can be realized, and the API interface component provides the API interface with the corresponding protocol for the third-party service, which is convenient for the third-party application to communicate and control with the vehicle side.

[0081] In summary, the security isolation system provided by the embodiments of the present application can provide an API interface with a specific protocol for different third-party applications through the communication protocol module, which is convenient for the third party to communicate with the vehicle side.

[0082] Second aspect, as Figure 5 shown, the present application proposes a vehicle safety control method for the security isolation system according to any one of the first aspects above. The method includes:

[0083] S510. Receive a request message sent by a third-party application;

[0084] Exemplarily, the communication protocol module establishes connections with different third-party applications through the API interfaces of specific protocols to achieve communication. When a third-party application sends a request message, the communication protocol module first receives it. The request messages include vehicle driving control request messages, vehicle environment control request messages, etc.

[0085] S520. Send the above request message to the above security detection module and obtain the security verification result;

[0086] Exemplarily, the communication protocol module sends the received request message to the security detection module. The security detection module judges the legality of the third-party application of the request instruction, such as judging whether the application is legal, whether the permissions of the application issuer meet the requirements, whether the adjustment range corresponding to the request instruction meets the threshold requirements, etc. And feedback the security verification result to the communication protocol module.

[0087] S530. In the case that the above security verification result is a security result, send the above request message to the above service interface proxy module to call the corresponding vehicle-side service.

[0088] Exemplarily, after the security detection module detects that the request instruction is qualified, it notifies the communication protocol module that the request instruction can be sent to the service interface proxy module. The service interface proxy module has third-party service interfaces and vehicle-side service interfaces. In the service interface proxy module, the conversion between the third-party service interface and the vehicle-side service interface can be realized according to the established logic. Only the third-party service interface is provided to the third-party application, while the vehicle-side service interface is connected to the corresponding ECU (Electronic Control Unit) that executes the service on the vehicle side. After the interface conversion by the service interface proxy module, the vehicle-side service interface will not be exposed to the manufacturers of third-party applications, which fundamentally improves the security of the vehicle. As Figure 7 shown, the service interface proxy module converts the vehicle-side service interface A into interface B for the third-party application to call through the protocol conversion module; the communication protocol conversion module encapsulates interface B into an API interface of a specific protocol with a specific protocol. Among them, interface A is the vehicle-side interface, and interface B is the interface provided to the third-party application.

[0089] In summary, the vehicle safety control method proposed in the embodiments of the present application receives a request instruction through a communication protocol module and sends the request instruction to a security detection module. The security detection module performs multi-level security evaluation on the request information sent by a third-party application, ensuring the legality of the third-party application requests entering the vehicle terminal. The service interface proxy module converts the vehicle terminal service port and the third-party service port, ensuring the privacy and security of the vehicle terminal service port, enhancing the security of the vehicle terminal service, being able to protect the vehicle safety attributes and user privacy data from being leaked, and also being able to maximize the expansion of the application scenarios of the vehicle terminal services and interfaces, contributing to the sustainable development of the automotive software ecosystem.

[0090] In some examples, the above method further includes:

[0091] In the case where the above security verification result is a dangerous result, obtain the type of the above third-party application;

[0092] In the case where the above third-party application type is a vehicle driving application, immediately upload the dangerous result to the cloud;

[0093] Remind the user on the vehicle terminal to enter the manual driving mode.

[0094] Exemplarily, when the security verification result is a dangerous result, the request instruction sent by the third-party application is a dangerous instruction. At this time, the type of the third-party application is identified. If it is identified that the third-party application corresponds to a vehicle driving application, the autonomous driving or assisted driving function of the vehicle is likely to be illegally invaded. If assisted driving continues at this time, it is easy to generate danger. The user driving the vehicle should be immediately reminded to enter the manual driving mode to avoid danger caused by the driver relying on assisted driving.

[0095] In summary, the vehicle safety control method proposed in the embodiments of the present application, in the case where the security verification result of the request message is a dangerous result, obtains the type of the third-party application. In the case where the third-party application is a vehicle driving application, immediately notify the user to enter the manual driving mode to avoid vehicle safety accidents.

[0096] In some examples, the above method further includes:

[0097] In the case where the above third-party application type is an auxiliary service application, obtain the number of dangerous result times of the above third-party application within a preset time;

[0098] In the case where the above number of dangerous result times exceeds a preset threshold, cut off the service provided by the above third-party application.

[0099] Exemplarily, if a dangerous result occurs in the case of an auxiliary service application, such as services like audio-visual entertainment service and air-conditioning automatic temperature control service, these services do not affect the driving safety of the vehicle and can be given a certain tolerance space. The result of counting the number of dangerous occurrences within a preset time is obtained. For example, if 5 errors occur within 10 minutes and the set preset threshold is 4 times, then the preset threshold is exceeded. At this time, the service provided by the third-party application is cut off to avoid affecting the driving experience of the driver.

[0100] In summary, for the vehicle safety control method proposed in the embodiment of the present application, in the case where the application corresponding to the request instruction is an auxiliary service application, it is determined whether to cut off the service by counting the number of dangerous occurrences within a preset time, providing a certain tolerance space for the auxiliary service, and controlling it so as not to affect the driving experience of the driver.

[0101] In some examples, the third-party application client makes a service call with the security detection module through the communication protocol module. If the security authentication is passed and the corresponding service access permission is available, then monitoring is performed according to the pre-refined context environment monitoring rules. If the service request conforms to the security monitoring rules, the communication protocol module accesses and executes the vehicle-side service through the service interface proxy module; if the service request does not conform to the security monitoring rules, the communication protocol module refuses to access the vehicle-side service through the service interface proxy module and records the corresponding fault code. For example, in hot summer weather with an outdoor temperature of 35°, when the air-conditioning function is turned on during vehicle driving, if the third-party application requests to set the interior temperature to 20° at this time, this situation meets the cooling and comfort requirement of the business scenario, then the service request is responded to and executed; if the third-party application requests to set the interior temperature to 32° at this time, this situation does not meet the cooling and comfort requirement of the business scenario, then the vehicle air-conditioning service is refused to be called and the fault code is recorded.

[0102] Please refer to Figure 8 , an embodiment of the vehicle safety control device in the embodiment of the present application may include:

[0103] A receiving unit 71, configured to receive a request message sent by a third-party application;

[0104] An obtaining unit 72, configured to send the above request message to the above security detection module and obtain a security verification result;

[0105] A control unit 73, configured to, in the case where the above security verification result is a security result, send the above request message to the above service interface proxy module to call the corresponding vehicle-side service.

[0106] Through the vehicle safety control device provided in this embodiment, by obtaining the working state signal of the vehicle power battery, when the working state signal is a thermal runaway state signal, the rotation speed of the engine cooling fan is controlled to zero, reducing the air flow speed in the front engine compartment, which can effectively prevent the flame propagation speed caused by the fire of the power battery, ensure the escape time of the user, and improve the safety performance of the vehicle.

[0107] As Figure 9 shown, an embodiment of the present application further provides an electronic device 800, including a memory 810, a processor 820, and a computer program 811 stored on the memory 820 and executable on the processor. When the processor 820 executes the computer program 811, it implements the steps of any of the above vehicle safety control methods.

[0108] Since the electronic device introduced in this embodiment is the device used to implement a vehicle safety control device in an embodiment of the present application, based on the method introduced in the embodiment of the present application, those skilled in the art can understand the specific implementation manners and various variations of the electronic device in this embodiment. Therefore, the specific implementation of how this electronic device implements the method in the embodiment of the present application will not be described in detail here. As long as the device used by those skilled in the art to implement the method in the embodiment of the present application belongs to the scope of protection of the present application.

[0109] In the specific implementation process, when the computer program 311 is executed by the processor, it executes the steps of any of the methods Figure 8 shown.

[0110] It should be noted that in the above embodiments, the descriptions of each embodiment have their own emphases. For the parts not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0111] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0112] This application is described with reference to the flowcharts and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, as well as the combination of flows and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded computer, or other programmable data processing devices to generate a machine, such that the instructions executed by the processor of the computer or other programmable data processing devices generate means for implementing the functions specified in one or more of the flows Figure 1 one or more of the flows and / or blocks Figure 1 or means for implementing the functions specified in one or more of the blocks.

[0113] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, such that the instructions stored in the computer-readable memory generate a manufactured article including instruction means that implement the functions specified in one or more of the flows Figure 1 one or more of the flows and / or blocks Figure 1 or means for implementing the functions specified in one or more of the blocks.

[0114] These computer program instructions can also be loaded onto a computer or other programmable data processing device, such that a series of operational steps are executed on the computer or other programmable device to generate a computer-implemented process, so that the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more of the flows Figure 1 one or more of the flows and / or blocks Figure 1 or means for implementing the functions specified in one or more of the blocks.

[0115] Embodiments of the present application also provide a computer program product, which includes computer software instructions. When the computer software instructions run on a processing device, the processing device is caused to execute the process of vehicle safety control as in Figure 8 the corresponding embodiment.

[0116] A computer program product includes one or more computer instructions. When the computer instructions are loaded and executed on a computer, they implement, wholly or partly, the processes or functions in accordance with the embodiments of the present application. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center in a wired manner (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or a wireless manner (such as infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be stored by a computer or a data storage device such as a server or a data center that includes one or more integrated available media. The available medium may be a magnetic medium (such as a floppy disk, a hard disk, or a magnetic tape), an optical medium (such as a DVD), or a semiconductor medium (such as a solid state disk (SSD)).

[0117] Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working processes of the above-described systems, devices, and units can refer to the corresponding processes in the foregoing method embodiments and will not be described herein again.

[0118] In several embodiments provided in the present application, it should be understood that the disclosed systems, devices, and methods may be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of units is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Another point is that the displayed or discussed couplings or direct couplings or communication connections to each other may be through some interfaces, and the indirect couplings or communication connections of devices or units may be in electrical, mechanical, or other forms.

[0119] The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solution of this embodiment.

[0120] In addition, in each embodiment of the present application, each functional unit can be integrated into one processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

[0121] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present application, in essence, or the part that makes a contribution to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods in each embodiment of the present application. The aforementioned storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical discs that can store program codes.

[0122] The above, the above embodiments are only used to illustrate the technical solutions of the present application and are not intended to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or perform equivalent replacements for some of the technical features; and these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of each embodiment of the present application.

Claims

1. A security isolation system for the vehicle side, characterized in that, it includes: A communication protocol module, which is used to provide API interfaces of specific protocols for third-party applications, receive request instructions sent by the third-party applications, and determine whether to send the request instructions to the service interface proxy module according to the security verification results of the security detection module; wherein, the security detection module further includes: a security authentication component, which is used to detect whether the third-party application corresponding to the request instruction is a trustworthy application; an access permission management component, which is used to judge whether the sender corresponding to the request instruction has the corresponding control permission when the third-party application is a trustworthy application; a context environment detection component, which is used to detect whether the request instruction exceeds a preset threshold to determine the security of the request instruction when the control permission meets the preset requirements; A security detection module, which is used to detect whether the request instructions sent by third-party applications are secure and feedback the security verification results to the communication protocol module; A service interface proxy module, which is used to convert the vehicle-side service interface into a specific API interface for the third-party application to call; wherein, the service interface proxy module includes: a version management component, which is used to manage the versions of vehicle-side services; a compatibility management component, which is used to manage the compatibility between different versions of the vehicle-side services; a variant management component, which is used to implement the variant management of the vehicle-side service interface to distinguish the vehicle-side services provided by different vehicle models and configurations.

2. The system according to claim 1, characterized in that, the communication protocol module includes: A protocol conversion component, which is used to implement the communication protocol conversion between third-party services and vehicle-side services; An API interface component, which is used to provide API interfaces of specific protocols for third-party applications.

3. A vehicle safety control method for any one of the security isolation systems according to claims 1-2, characterized in that, it includes: Receiving a request message sent by a third-party application; Sending the request message to the security detection module and obtaining the security verification result; When the security verification result is a security result, sending the request message to the service interface proxy module to call the corresponding vehicle-side service.

4. The method according to claim 3, characterized in that, it further includes: When the security verification result is a dangerous result, obtaining the type of the third-party application; When the type of the third-party application is a vehicle driving application, immediately uploading the dangerous result to the cloud; Reminding the user on the vehicle side to enter the manual driving mode.

5. The method according to claim 3, characterized in that, it further includes: When the type of the third-party application is an auxiliary service application, obtaining the number of dangerous results of the third-party application within a preset time; When the number of dangerous results exceeds the preset threshold, cutting off the service provided by the third-party application.

6. A vehicle safety control device for any one of the vehicle safety control methods according to claims 3-5, characterized in that, it includes: A receiving unit, which is used to receive a request message sent by a third-party application; An acquisition unit, configured to send the request message to the security detection module and acquire a security verification result; A control unit, configured to, when the security verification result is a security result, send the request message to the service interface proxy module to invoke a corresponding vehicle-side service.

7. An electronic device, comprising: A memory and a processor, characterized in that when the processor executes a computer program stored in the memory, the steps of the vehicle safety control method according to any one of claims 3-5 are implemented.

8. A computer-readable storage medium, on which a computer program is stored, characterized in that: When the computer program is executed by a processor, the vehicle safety control method according to any one of claims 3-5 is implemented.

Images