An operation method of an in-vehicle communication firewall system based on a vehicle-mounted gateway

Abstract

This invention discloses an in-vehicle communication firewall system and method based on an in-vehicle gateway, which protects the information security of car owners, avoids attacks from external networks due to vulnerabilities in the vehicle's in-vehicle network, and thus affects driving safety. The in-vehicle communication firewall system and method based on an in-vehicle gateway can protect the communication between the in-vehicle network and the communication in-vehicle network, and better help the car realize the functions of the whole vehicle.

Description

Technical Field

[0001] The present invention relates to the field of vehicle-mounted communication technology, and in particular to an operation method of an in-vehicle communication firewall system based on a vehicle-mounted gateway. Background Art

[0002] In the new situation, automobiles, like mobile phones and computers, face serious challenges in information security. With the gradual penetration of the Internet into automobiles, vulnerabilities in the vehicle-mounted network can easily lead to attacks from external networks and thus affect driving safety. Vehicle-mounted network communication is an important information transmission channel for vehicles to realize the functions of the entire vehicle. The current vehicle-mounted information protection system cannot protect the vehicle-mounted network and communication, leaving hidden dangers to the information security of the vehicle. Summary of the invention

[0003] The purpose of the present invention is to solve the above problems and provide an operating method of an in-vehicle communication firewall system based on a vehicle-mounted gateway to protect the information security of the car owner, avoid the loopholes in the vehicle-mounted network of the car from being attacked by the external network and thus affecting the driving safety. The operating method of the in-vehicle communication firewall system based on the vehicle-mounted gateway can protect the communication between the vehicle-mounted network and the communication vehicle-mounted network, and better help the car realize the whole vehicle function.

[0004] A method for operating an in-vehicle communication firewall system based on a vehicle-mounted gateway comprises the following steps:

[0005] S1. The external device requests the smart gateway to send the VIN code (vehicle frame number), the smart gateway sends the VIN code, and sends a BC (BaseCode) based on the VIN code and the algorithm and stores it in the smart gateway: The external device requests the smart gateway to send the VIN code, and the smart gateway sends the VIN code to the external device after receiving the request, and simultaneously calculates a BC based on the VIN code and the algorithm and stores it in the gateway security chip;

[0006] S2. After the external device receives the VIN code sent by the smart gateway, the VIN code is calculated as BC according to the same algorithm as step S1;

[0007] S3. The external device sends the calculated BC to the intelligent gateway through the controller local area network message. After receiving the BC sent by the external device, the intelligent gateway compares the received BC with the BC calculated by itself: if the comparison is inconsistent, the intelligent gateway does not respond; if the comparison is consistent, the intelligent gateway randomly sends SC (SeedCode, seed code) to the external device. After sending the SC, the intelligent gateway performs algorithm processing on the SC and BC and calculates KC (KeyCode, key code);

[0008] S4. After receiving the SC sent by the intelligent gateway, the external device also performs algorithm processing on the SC and its own BC, and sends the calculated KC to the intelligent gateway through the controller local area network. The intelligent gateway compares the SC received from the external device with the SC calculated by the intelligent gateway: if the comparison is consistent, a positive response is given to the external device, and the external device access is allowed; if the comparison is inconsistent, a negative response is given to the external device, and the external device access is judged to be illegal. The intelligent gateway feeds back the illegal access information to the cloud background, which is supervised by the cloud background security monitoring personnel and manually processed;

[0009] S5. After the smart gateway and the external device pass the authentication, the smart gateway records the time and date of the authentication and feeds it back to the firewall backend through the Internet of Vehicles system: the external device sends an "online message" to the smart gateway in a 5-second cycle, declaring that it is online. If the 5-second timeout occurs, the external device needs to re-initiate authentication. If the connection is disconnected after the timeout, the smart gateway will record the time and date and report it to the cloud backend to inform the cloud backend of the connection disconnection event.

[0010] Specifically, in step S3, when the external device needs to obtain the message data of the local area network of each controller of the whole vehicle, the external device needs to map the message data of each network segment through routine control. This is to allow the external device to legally obtain the message information of the local area network of the whole vehicle controller and prevent illegal external devices from collecting vehicle information. A routine is to write a relatively independent code into a separate module, which is the concept of a function.

[0011] Specifically, in step S5, when the external device has legal access, the external device can access all controller modules of the vehicle through the module diagnostic communication ID (module diagnostic communication identifier) ​​and routing via the intelligent gateway; each module is assigned a unique module diagnostic communication ID. After the intelligent gateway identifies the relevant module diagnostic communication ID, it will automatically route to the relevant gateway, shield illegal message IDs (illegal message identifiers), and protect the vehicle network.

[0012] Specifically, in step S5, the intelligent gateway is responsible for monitoring the baud rate, application message ID and diagnostic communication ID of the five-way network segment. If it is found that the baud rate fluctuates abnormally, an illegal message ID appears on the controller area network bus, the message cycle persists abnormally for a long time, or the controller area network is severely disturbed and a large number of error frames appear, the intelligent gateway will upload the abnormal conditions to the cloud background through the signal generation module and report them. The security monitoring personnel of the cloud background will be responsible for investigating and sending them to the monitoring background at the same time. This can effectively monitor the abnormalities of the vehicle network and ensure the security of the entire vehicle network.

[0013] The present invention also provides an in-vehicle communication firewall system based on a vehicle-mounted gateway, comprising: an external device, an on-board self-diagnosis system interface, an intelligent gateway, a power controller local area network, a chassis controller local area network, a body controller local area network, a remote controller local area network, a hybrid controller local area network, a signal generating module, a cloud background, and a monitoring background; the external device exchanges information with the intelligent gateway by connecting to the on-board self-diagnosis system; the intelligent gateway controls five controller local area networks, including: a power controller local area network, a chassis controller local area network, a body controller local area network, a remote controller local area network, and a hybrid controller local area network; the intelligent gateway is connected to the signal generating module to upload the firewall's operation record to the cloud background; the monitoring background reads the firewall operation record in the cloud background.

[0014] The beneficial effects of the present invention are:

[0015] The present invention provides an operation method of an in-vehicle communication firewall system based on an on-board gateway, which protects the information security of the car owner, avoids the vulnerability of the on-board network of the car causing the car to be attacked by the external network and thus affects the driving safety. The operation method of the in-vehicle communication firewall system based on the on-board gateway can protect the communication between the on-board network and the communication on-board network, and better help the car realize the whole vehicle function. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 It is a flow chart of an operation method of an in-vehicle communication firewall system based on a vehicle-mounted gateway;

[0017] Figure 2 A schematic diagram of an operation method of an in-vehicle communication firewall system based on a vehicle-mounted gateway;

[0018] Figure 3 This is a structural diagram of an in-vehicle communication firewall system based on a vehicle gateway. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0020] See also Figure 1 As shown, a method for operating an in-vehicle communication firewall system based on a vehicle-mounted gateway comprises the following steps:

[0021] S1. The external device requests the smart gateway to send the VIN code, the smart gateway sends the VIN code, and sends a BC based on the VIN code and the algorithm to be stored in the smart gateway: The external device requests the smart gateway to send the VIN code, and the smart gateway sends the VIN code to the external device after receiving the request, and simultaneously calculates a BC based on the VIN code and the algorithm, and stores it in the smart gateway security chip; the VIN code is unique for the same vehicle and can identify the identity of the car. The calculated BC is generally 4 bytes in size, so the BC calculated based on the VIN code is also unique.

[0022] S2. After receiving the VIN code sent by the smart gateway, the external device calculates the VIN code as BC according to the same algorithm as step S1;

[0023] S3. The external device sends the calculated BC to the intelligent gateway through the controller local area network message. After receiving the BC sent by the external device, the intelligent gateway compares the received BC with the BC calculated by the intelligent gateway itself: if the comparison is inconsistent, the intelligent gateway does not respond; if the comparison is consistent, the intelligent gateway randomly sends SC to the external device. After sending the SC, the intelligent gateway performs algorithm processing on the SC and BC and calculates KC; this is mainly to ensure that the external device agrees on the calculation method before the first visit to the vehicle, and that the calculated BCs are consistent under the same VIN code. Otherwise, if the calculated BCs are inconsistent, the external device will not have the authority to access the vehicle's on-board self-diagnosis system.

[0024] S4. After receiving the SC sent by the smart gateway, the external device performs algorithm processing on the SC and the external device's own BC, and sends the calculated KC to the smart gateway through the controller local area network. The smart gateway compares the SC received from the external device with the SC calculated by the smart gateway. If the comparison is consistent, a positive response is given to the external device, and the external device access is allowed; if the comparison is inconsistent, a negative response is given to the external device, and the external device access is determined to be illegal. The smart gateway feeds back the illegal access information to the cloud background, which is supervised by the cloud background security monitoring personnel and manually processed; since the vehicle contains the owner's personal belongings and personal information, illegal external access can easily cause personal information loss, and in severe cases, property losses. If the external device accesses the vehicle, but the access fails, it is not the owner who operates it. At this time, it is necessary to leave an access record for the owner to query and inspect the vehicle to avoid unnecessary losses.

[0025] S5. After the smart gateway and external device pass the authentication, the smart gateway records the time and date of the authentication and feeds it back to the firewall backend through the Internet of Vehicles system; the external device sends an "online message" to the gateway in a 5-second cycle, stating that it is online. If the 5-second timeout occurs, the external device needs to re-initiate authentication. If the connection is disconnected after the timeout, the gateway will record the time and date and report it to the cloud backend to inform the cloud backend of the disconnection event. Continuous detection prevents the owner from forgetting to close the access to the external device after accessing the vehicle, so that the firewall is always open and cannot play the due protective role.

[0026] See also Figure 2 As shown, when an external device needs to obtain the message data of the local area network of each controller of the whole vehicle, the external device needs to map out the message data of each network segment separately through routine control. This allows the external device to legally obtain the message information of the local area network of the whole vehicle controller and prevents illegal external devices from collecting vehicle information.

[0027] When an external device legally accesses a vehicle, it can access all controller modules of the vehicle through the module diagnostic communication ID and routing via the intelligent gateway; each module is assigned a unique diagnostic communication ID. After the intelligent gateway identifies the relevant diagnostic communication ID, it will automatically route to the relevant gateway, shield illegal message IDs, and protect the vehicle network.

[0028] The external device instructs the intelligent gateway to route the data of the power controller local area network to the external device through the instruction $31 $01 $68 $00 $01, and closes the routing through the instruction $31 $02 $68 $00 $01.

[0029] The external device uses the $31 $01 $68 $00 $02 instruction to let the intelligent gateway route the data of the chassis controller local area network to the external device for reception, and uses the $31 $02 $68 $00 $02 instruction to close the routing.

[0030] The external device uses the $31 $01 $68 $00 $03 instruction to let the intelligent gateway route the data of the body controller area network to the external device for reception, and uses the $31 $02 $68 $00 $03 instruction to close the routing.

[0031] The external device uses the $31 $01 $68 $00 $04 command to let the intelligent gateway route the data of the remote controller local area network to the external device for reception, and uses the $31 $02 $68 $00 $04 command to close the routing.

[0032] The external device uses the $31 $01 $68 $00 $05 instruction to let the intelligent gateway route the data of the hybrid power controller local area network to the external device for reception, and uses the $31 $02 $68 $00 $05 instruction to close the routing.

[0033] The intelligent gateway is responsible for monitoring the baud rate, application message ID and diagnostic communication ID of the above five network segments. If it finds abnormal fluctuations in the baud rate, illegal message IDs on the bus, abnormal message cycles that last for a long time, or severe interference with the controller area network, the intelligent gateway will upload the abnormal conditions to the cloud background through the signal generation module and report them. The security monitoring personnel of the cloud background will be responsible for investigating and sending the abnormal conditions to the monitoring background, including the security monitoring personnel and the owner's mobile phone communication software. This can effectively monitor vehicle network abnormalities and ensure the security of the entire vehicle network.

[0034] See also Figure 3 As shown, the present invention provides an in-vehicle communication firewall system based on a vehicle-mounted gateway, including: external devices, a vehicle-mounted self-diagnosis system interface, an intelligent gateway, a power controller local area network, a chassis controller local area network, a body controller local area network, a remote controller local area network, a hybrid controller local area network, a signal generating module, a cloud background, and a monitoring background; the external devices exchange information with the intelligent gateway by connecting to the vehicle-mounted self-diagnosis system; the intelligent gateway controls five controller local area networks, including: a power controller local area network, a chassis controller local area network, a body controller local area network, a remote controller local area network, and a hybrid controller local area network; the intelligent gateway is connected to the signal generating module to upload the firewall's operation record to the cloud background; the monitoring background reads the firewall operation record in the cloud background.

[0035] In summary, the present invention provides an operating method of an in-vehicle communication firewall system based on a vehicle-mounted gateway, which protects the information security of the car owner, avoids the vulnerability of the vehicle-mounted network causing attacks from external networks and further affects driving safety. The operating method of the in-vehicle communication firewall system based on the vehicle-mounted gateway can protect the communication between the vehicle-mounted network and the communication vehicle-mounted network, and better help the car realize the whole vehicle function.

[0036] The above descriptions are merely embodiments of the present invention and are not intended to limit the patent scope of the present invention. Any equivalent transformations made using the contents of the present invention's specification and drawings or directly or indirectly applied in related technical fields are also included in the patent protection scope of the present invention.

Claims

1. A method for operating an in-vehicle communication firewall system based on a vehicle-mounted gateway, characterized in that: The following steps are involved: S1. The external device requests the smart gateway to send the vehicle frame number. The smart gateway sends the vehicle frame number and sends a basic code based on the vehicle frame number and the algorithm and stores it in the smart gateway: The external device requests the smart gateway to send the vehicle frame number. After receiving the request, the smart gateway sends the vehicle frame number to the external device and simultaneously calculates a basic code based on the vehicle frame number and the algorithm and stores it in the gateway security chip. S2. After the external device receives the frame number sent by the intelligent gateway, it calculates the frame number as the base code according to the same algorithm as step S1; S3. The external device sends the calculated basic code to the intelligent gateway through the controller local area network message. After receiving the basic code sent by the external device, the intelligent gateway compares the received basic code with the basic code calculated by itself: if the comparison is inconsistent, the intelligent gateway does not respond; if the comparison is consistent, the intelligent gateway randomly sends a seed code to the external device. After sending the seed code, the intelligent gateway performs algorithm processing on the seed code and the basic code and calculates the key code; S4. After receiving the basic code sent by the intelligent gateway, the external device also performs algorithm processing on the seed code and the basic code of the external device itself, and sends the calculated key code to the intelligent gateway through the controller local area network. The intelligent gateway compares the seed code received from the external device with the seed code calculated by the intelligent gateway: if the comparison is consistent, a positive response is given to the external device, and the external device access is allowed; if the comparison is inconsistent, a negative response is given to the external device, and the external device access is determined to be illegal. The intelligent gateway feeds back the illegal access information to the cloud background, which is supervised by the cloud background security monitoring personnel and manually processed; S5. After the smart gateway and the external device pass the authentication, the smart gateway records the time and date of the authentication and feeds it back to the firewall backend through the Internet of Vehicles system: the external device sends an "online message" to the smart gateway in a 5-second cycle, declaring that it is online. If the 5-second timeout occurs, the external device needs to re-initiate authentication. If the connection is disconnected after the timeout, the smart gateway will record the time and date and report it to the cloud backend to inform the cloud backend of the connection disconnection event.

2. The method for operating the in-vehicle communication firewall system based on the vehicle gateway according to claim 1 is characterized in that: In step S3, when the external device needs to obtain the message data of the controller local area network of the whole vehicle, the external device needs to map out the message data of each network segment respectively through routine control, and the external device legally obtains the message information of the controller local area network of the whole vehicle to prevent illegal external devices from collecting vehicle information.

3. The method for operating the in-vehicle communication firewall system based on the vehicle gateway according to claim 1 is characterized in that: In step S5, when the external device has legal access, the external device can access all controller modules of the vehicle through the module diagnostic communication identifier and the intelligent gateway routing; each module is assigned a unique diagnostic communication identifier, and after the intelligent gateway identifies the relevant diagnostic communication identifier, it will automatically route to the corresponding controller module, shield illegal message identifiers, and protect the vehicle network.

4. The method for operating the in-vehicle communication firewall system based on the vehicle gateway according to claim 1 is characterized in that: In step S5, the intelligent gateway is responsible for monitoring the baud rate, application message identifier and diagnostic communication identifier of the five-way network segment. If it is found that the baud rate has abnormal fluctuations, illegal message identifiers appear on the bus, the message cycle lasts for a long time abnormally, and the controller local area network is seriously disturbed and a large number of error frames appear, the intelligent gateway will upload it to the cloud background through the signal generation module and report these abnormal conditions. The security monitoring personnel of the cloud background will be responsible for investigating and sending them to the monitoring background at the same time. This can well monitor the abnormalities of the vehicle network and ensure the security of the entire vehicle network.

Images