A method and device for recovering T-BOX data of new energy vehicles

By analyzing the structural characteristics of T-BOX national standard data, a deleted data recovery method based on the characteristics of T-BOX national standard data is proposed, which solves the problem of immature T-BOX data recovery in the existing technology and realizes the recovery of T-BOX data as much as possible when the data is not overwritten.

CN115586991BActive Publication Date: 2025-09-16XIAMEN MEIYA PICO INFORMATION CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202211261422.5
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-10-14
Publication Date
2025-09-16
Estimated Expiration
2042-10-14

AI Technical Summary

Technical Problem

In the existing technology, the T-BOX deleted data recovery technology is immature and cannot meet the needs of automobile forensic security and new energy vehicle accident analysis.

Method used

By analyzing the structural characteristics, field length, and value range of T-BOX national standard data, a deleted data recovery method based on the characteristics of T-BOX national standard data is proposed. The method involves obtaining unallocated cluster data from the target disk, searching for the field position of the PG start delimiter in the data packet, performing validity judgment and verification, and ultimately recovering the deleted data.

Benefits of technology

It achieves the maximum possible recovery of T-BOX data without overwriting the data, meeting the needs of automobile forensic safety and new energy vehicle accident analysis.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN115586991B_ABST
    Figure CN115586991B_ABST
Patent Text Reader

Abstract

The present invention proposes a method for recovering data of a new energy vehicle T-BOX, comprising: obtaining unallocated cluster data of a target disk; searching for the field position of a data packet PG start character and recording it as PG(1); offsetting 20 bytes from the PG(1) to the position of the data unit length, extracting 2 bytes of the data unit length data, performing a validity judgment and recording it as DUL; if the DUL judgment result is abnormal, offsetting 2 bytes from the PG1 and jumping to step S2; if normal, continuing; extracting data of a data packet PG according to the DUL length, and verifying it using an XOR check method; parsing all data packets PG in the D set according to the national standard data format, and recovering deleted data. The present invention utilizes the characteristics of the national standard data format and the mechanism of garbage collection, and achieves the purpose of recovering data as much as possible when the data is not overwritten by checking the header and tail of the data packet, as well as the specific characteristics of the length and value range of the national standard data.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention belongs to the technical field of automobile forensic security, and specifically relates to a method and device for recovering T-BOX data of a new energy vehicle. Background Art

[0002] The T-BOX module is an on-board electronic module that must be installed in new energy vehicles. According to the national standard "GB-T-32960", it stores various vehicle status and vehicle driving data. These data are of great significance for analyzing the causes of new energy vehicle accidents.

[0003] T-BOX modules are widely used as "black boxes" in new energy vehicles. With the development of connected vehicle technology, the recovery of deleted data from these modules is a hot topic in the fields of automotive safety and network information security. Currently, T-BOX-based deleted data recovery technology is immature, with limited relevant literature, and cannot meet the urgent needs of automotive forensics and new energy vehicle accident analysis.

[0004] In view of this, it is very meaningful to propose a method and device for recovering T-BOX data of new energy vehicles. Summary of the Invention

[0005] In order to solve the problem that the existing T-BOX deleted data recovery technology is still immature and cannot meet the urgent needs of the automotive forensic safety field and new energy vehicle accident analysis, the present invention provides a new energy vehicle T-BOX data recovery method and device to solve the above-mentioned technical defects.

[0006] In a first aspect, the present invention provides a method for recovering data from a T-BOX of a new energy vehicle, the method comprising the following steps:

[0007] S1. Obtain unallocated cluster data of the target disk;

[0008] S2. Search the field position of the PG start character of the data packet and record it as PG(1);

[0009] S3, offset 20 bytes from the PG (1) to the position of the data unit length, extract the 2-byte data of the data unit length, make a validity judgment and record it as DUL;

[0010] S4. If the DUL judgment result is abnormal, offset 2 bytes from PG1 and jump to step S2; if normal, proceed to the next step;

[0011] S5. Extract data of a data packet PG according to the DUL length, perform verification using an XOR check method, and record the verified value as CKS;

[0012] S6. Compare the value of CKS with PG(n). If the values ​​are equal and the validity of PG is verified, put PG into the D set.

[0013] S7. If the comparison result of step S6 is not equal, then shift 2 bytes from PG(1) and jump to step S2;

[0014] S8. Parse all data packets PG in the D set according to the national standard data format to restore the deleted data.

[0015] Preferably, the method further includes: converting the national standard data stored in a non-hexadecimal format into a hexadecimal format.

[0016] Further preferably, the check range of the XOR check in S5 is data starting from PG(1+2) bytes and ending at PG(n-1) bytes.

[0017] More preferably, before S8 and after S7, the step further includes: further judging whether the search for all data packets PG is completed, if the search is not completed, jumping to step S2, if it is completed, continuing to step S8.

[0018] Preferably, it also includes: PG is a data packet; n is the length of the data packet; DUL is the data unit data length; CKS is the checksum value of the data packet; set D = {D1, D2, D3, ..., D n} is a collection of data packets extracted from the damaged file.

[0019] In a second aspect, the present invention further proposes a device for recovering T-BOX data of a new energy vehicle, comprising:

[0020] Acquisition unit: used to obtain unallocated cluster data of the target disk;

[0021] Processing unit: used to search the field position of the PG start character of the data packet and perform further judgment, verification and comparison processing;

[0022] Restoration unit: used to parse all data packets PG in the D set according to the national standard data format and restore the deleted data.

[0023] In a third aspect, the present invention further proposes a system for recovering T-BOX data of a new energy vehicle, comprising:

[0024] Acquisition module: used to obtain the unallocated cluster data of the target disk;

[0025] Search module: used to search for the field position of the PG start character of the data packet;

[0026] Judgment module: used for judging the validity of the extracted data unit length data;

[0027] A verification module is used to perform an XOR verification on the data of a data packet PG extracted according to the DUL length;

[0028] Comparison module: used to compare the verified CKS value with PG(n);

[0029] Restoration module: used to parse all data packets PG in the D set according to the national standard data format and restore deleted data.

[0030] In a fourth aspect, an embodiment of the present invention provides an electronic device comprising: one or more processors; a storage device for storing one or more programs, wherein when the one or more programs are executed by one or more processors, the one or more processors implement the method described in any implementation manner in the first aspect.

[0031] In a fifth aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method described in any implementation manner in the first aspect.

[0032] Compared with the prior art, the present invention has the following advantages:

[0033] (1) The present invention recovers deleted T-BOX data by comprehensively analyzing the characteristics of the T-BOX national standard data structure, field length, and field value range.

[0034] (2) The technical solution of the present invention utilizes the characteristics of the national standard data format and the garbage collection mechanism. By checking the header and tail of the data packet, as well as the specific characteristics of the length and value range of the national standard data, the purpose of recovering data as much as possible is achieved when the data is not overwritten. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The accompanying drawings are included to provide a further understanding of the embodiments and are incorporated into and constitute a part of this specification. The accompanying drawings illustrate the embodiments and, together with the description, serve to explain the principles of the present invention. Other embodiments and many of the expected advantages of the embodiments will be readily apparent as they become better understood by reference to the following detailed description. The elements of the drawings are not necessarily to scale with respect to each other. Like reference numerals designate corresponding similar parts.

[0036] Figure 1 1 is a flow chart of a method for recovering data from a new energy vehicle T-BOX according to an embodiment of the present invention;

[0037] Figure 2This is a flow chart of a method for recovering data from a new energy vehicle T-BOX according to an embodiment of the present invention;

[0038] Figure 3 This is a diagram of the T-BOX national standard data structure in the method for recovering T-BOX data for new energy vehicles according to an embodiment of the present invention;

[0039] Figure 4 A schematic diagram of using Winhex to create a disk image in a method for recovering data from a new energy vehicle T-BOX according to an embodiment of the present invention;

[0040] Figure 5 A schematic diagram of unallocated cluster data in the T-BOX national standard data structure diagram according to an embodiment of the present invention;

[0041] Figure 6 This is a diagram showing the T-BOX data recovery result in the T-BOX national standard data structure diagram according to an embodiment of the present invention;

[0042] Figure 7 This is a schematic diagram of a device for recovering data from a new energy vehicle T-BOX according to an embodiment of the present invention;

[0043] Figure 8 This is a schematic diagram of a system for recovering data from a new energy vehicle T-BOX according to an embodiment of the present invention;

[0044] Figure 9 It is a schematic structural diagram of a computer device suitable for implementing an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0045] In the following detailed description, reference is made to the accompanying drawings, which form a part of the detailed description and are illustrated by illustrative specific embodiments in which the present invention may be practiced. To this end, directional terms, such as "top," "bottom," "left," "right," "up," "down," etc., are used with reference to the orientation of the figures being described. Because the components of the embodiments may be positioned in several different orientations, directional terms are used for illustrative purposes and are in no way limiting. It should be understood that other embodiments may be utilized or logical changes may be made without departing from the scope of the present invention. Therefore, the following detailed description should not be adopted in a limiting sense, and the scope of the present invention is defined by the appended claims.

[0046] Currently, T-BOX deleted data recovery technology is immature, with limited literature, and cannot meet the urgent needs of automotive forensics and safety and new energy vehicle accident analysis. This paper proposes a method for recovering deleted data based on the data structure and data field characteristics of T-BOX national standard data. This method comprehensively analyzes the data structure, field length, and field value range of T-BOX national standard data to recover deleted T-BOX data.

[0047] Figure 1 The embodiment of the present invention discloses a method for recovering data of a new energy vehicle T-BOX. Figure 1 and Figure 2 As shown, the method includes the following steps:

[0048] S1. Obtain unallocated cluster data of the target disk;

[0049] S2. Search the field position of the PG start character of the data packet and record it as PG(1);

[0050] Specifically, it also includes: converting national standard data stored in non-hexadecimal format into hexadecimal format;

[0051] S3, offset 20 bytes from the PG (1) to the position of the data unit length, extract the 2-byte data of the data unit length, make a validity judgment and record it as DUL;

[0052] S4. If the DUL judgment result is abnormal, offset 2 bytes from PG1 and jump to step S2; if normal, proceed to the next step;

[0053] S5. Extract data of a data packet PG according to the DUL length, perform verification using an XOR check method, and record the verified value as CKS;

[0054] Specifically, the XOR check range in S5 is the data starting from PG(1+2) bytes to PG(n-1) bytes;

[0055] S6. Compare the value of CKS with PG(n). If the values ​​are equal and the validity of PG is verified, put PG into the D set.

[0056] S7. If the comparison result of step S6 is not equal, then shift 2 bytes from PG(1) and jump to step S2;

[0057] S8, further determine whether all data packets PG search is complete, if not, jump to step S2, if it is complete, continue to step S9;

[0058] S9. Parse all data packets PG in the D set according to the national standard data format to restore the deleted data.

[0059] Next, we will briefly introduce the national standard data of T-BOX to elaborate on the technical ideas of the technical solution of the present invention.

[0060] like Figure 3 This is the T-BOX data structure diagram specified in the national standard "GB-T-32960". A complete data packet should consist of a start character, a command unit, a vehicle identification number (VIN), a data encryption method, a data unit length, a data unit, and a check code.

[0061] Data unit type values ​​of 0x02 and 0x03 represent real-time information reporting and re-issuance information reporting commands. Their primary function is to collect and report vehicle data, which is also the key content to be recovered. This data unit also contains n information bodies, and the information body types are defined in Table 1.

[0062] Table 1: Definition of information body data type

[0063]

[0064]

[0065] The national standard specifies the data format of various information bodies, including the data name, data length, minimum unit of measurement, and value range. Based on the national standard data structure and format definitions, T-BOX national standard data can be parsed. The parsed results include: vehicle data, drive motor data, fuel cell data, engine data, vehicle location data, extreme value data, alarm data, and terminal data.

[0066] Furthermore, a brief introduction to the recovery principle is given:

[0067] As shown in Table 2, each data packet has a start character at the header, with a value of '##' (0x23 0x23). The packet also has a byte checksum at the end. Using the BCC method, the checksum range starts at the first byte of the command unit and ends at the byte before the checksum, with an exclusive-OR check. This is crucial for deletion recovery. When a file containing national standard data is deleted, the file content remains in the unallocated cluster space until it is completely overwritten. By searching for T-BOX data format characteristics within the disk's unallocated clusters, deleted T-BOX national standard data packets can be filtered out from the unallocated cluster space.

[0068] In addition, since unallocated cluster space can be re-used, it is possible that data may be partially overwritten or incomplete. For such situations, the structural characteristics of the data unit and information body must be re-verified. For vehicle data with an information body type of 0x01, the data length is fixed at 20 bytes. Further verification can be performed based on different field characteristics (such as vehicle speed values ​​ranging from 0 km / h to 220 km / h). Finally, the data packets, data units, and information body data confirmed by the above algorithm are parsed according to the national standard data format to achieve data recovery.

[0069] Table 2: Data packet structure and definition table

[0070]

[0071] Furthermore, assume that PG is a data packet; assume that n is the length of the data packet; assume that DUL is the length of the data unit; assume that CKS is the checksum value of the data packet; assume that the set D={D1,D2,D3,…,D n} is a collection of data packets extracted from the damaged file.

[0072] Since the data length of each information body in the data unit is fixed: the information body length of 0x01 (vehicle data) is 20, the information body length of 0x02 (drive electronics data) is 13, and so on. At the same time, the values ​​of multiple fields in the information body have specific values ​​or fixed value ranges. These data features can be used to verify the validity of PG data.

[0073] The judgment rules are as follows:

[0074] 1) The data length of the information body is a fixed value: the data length of the information body of 0x01 (vehicle data) is 20, the data length of the information body of 0x02 (drive electronic data) is 13, etc.

[0075] 2) Field data in the message body has specific values ​​or fixed ranges: The vehicle status, charging status, and operating mode in message body 0x01 (vehicle data) all use specific numerical definitions, as defined in Table 3. The positioning status data in message body 0x05 (vehicle position data) has a range of 0 to 7. The converted longitude and latitude data has a range of -180 to 180 degrees for longitude and -90 to 90 degrees for latitude, as defined in Table 4.

[0076] 3) Other information field data also have the above characteristics and will not be elaborated on here.

[0077] Table 3: Vehicle data information definition table

[0078]

[0079] Table 4: Vehicle location data information definition table

[0080]

[0081] Furthermore, the standard national standard format data recovery method process includes:

[0082] Since each data packet has a fixed '##' (0x23 0x23) start character at the head, and the last bit of the data packet contains a check bit that can be used for data packet verification, this becomes the basis for data recovery. (The following process is for national standard data stored in hexadecimal format. If it is actually in other formats, you need to convert the format first and then follow the following process to recover the data.)

[0083] like Figure 2 As shown, the main recovery process steps are as follows:

[0084] 1) Get the unallocated cluster data of the disk;

[0085] 2) Search for the field position of the PG start character and record it as PG(1);

[0086] 3) Starting from PG (1), offset 20 bytes to the data unit length position, extract the 2-byte data unit length data, make a validity check and record it as DUL;

[0087] 4) If the DUL judgment result is abnormal, it will offset 2 bytes from PG(1) and jump to step 2; if normal, it will continue to the next step;

[0088] 5) Extract a PG data based on the DUL length (if it is not hexadecimal data, convert it to hexadecimal first) and use the BCC (exclusive OR check) method to check: the check range starts from PG (1+2) bytes and ends at PG (n-1) bytes. The data after the check is XOR checked and the value after the check is recorded as CKS;

[0089] 6) Compare the value of CKS with PG(n). If the values ​​are equal and the validity of PG is verified, put PG into the D set.

[0090] 7) If the comparison result in step 6 is not equal, offset 2 bytes from PG(1) and jump to step 2;

[0091] 8) Determine whether all PG searches are complete. If not, jump to step 2. If not, proceed to the next step.

[0092] 9) Parse all PGs in the D set according to the national standard data format and restore deleted data;

[0093] 10) End this process.

[0094] In this embodiment, we conducted the following experiments to verify the correctness of this solution:

[0095] The experimental process is as follows:

[0096] 1. Prepare an SD card with T-BOX national standard data and delete some national standard data in the file;

[0097] 2. Use Winhex image tool to create a disk image, such as Figure 4 As shown;

[0098] 3. Get the unallocated cluster data of the disk image, view the unallocated cluster in hexadecimal format, and find the target data. The result is as follows: Figure 5 As shown;

[0099] 4. Use this solution to analyze the image and recover the deleted T-BOX data. The analysis results are as follows: Figure 6 shown.

[0100] From the above, it can be seen that the technical solution of the present invention utilizes the characteristics of the national standard data format and the garbage collection mechanism, and through the packet header and tail verification, as well as the specific characteristics such as the length and value range of the national standard data, achieves the purpose of recovering data as much as possible when the data is not overwritten.

[0101] In the second aspect, the embodiment of the present invention also proposes a device for recovering T-BOX data of a new energy vehicle, referring to Figure 7 ,include:

[0102] Acquisition unit 71: used for acquiring unallocated cluster data of a target disk;

[0103] Processing unit 72: used to search the field position of the PG start character of the data packet and perform further judgment, verification and comparison processing;

[0104] The recovery unit 73 is configured to parse all data packets PG in the set D according to the national standard data format and recover the deleted data.

[0105] In the third aspect, the embodiment of the present invention also proposes a new energy vehicle T-BOX data recovery system, referring to Figure 8 ,include:

[0106] Acquisition module 81: used for acquiring unallocated cluster data of the target disk;

[0107] Search module 82: used to search for the field position of the PG start character of the data packet;

[0108] Judgment module 83: used for judging the validity of the extracted data unit length data;

[0109] Verification module 84: configured to perform an XOR check on the data of a data packet PG extracted according to the DUL length;

[0110] Comparison module 85: used to compare the verified CKS value with PG(n);

[0111] Restoring module 86: used for parsing all data packets PG in the D set according to the national standard data format to restore the deleted data.

[0112] Reference below Figure 9 , which shows an electronic device (eg Figure 1 A schematic structural diagram of a computer device 600 (a server or terminal device as shown). Figure 9 The electronic device shown is only an example and should not limit the functions and scope of use of the embodiments of the present invention.

[0113] like Figure 9 As shown, the computer device 600 includes a central processing unit (CPU) 601 and a graphics processing unit (GPU) 602, which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM) 603 or the program loaded from the storage part 609 to the random access memory (RAM) 606. Various programs and data required for the operation of the device 600 are also stored in the RAM 604. The CPU 601, GPU 602, ROM 603 and RAM 604 are connected to each other via a bus 605. An input / output (I / O) interface 606 is also connected to the bus 605.

[0114] The following components are connected to the I / O interface 606: an input section 607 including a keyboard, a mouse, and the like; an output section 608 including a display such as a liquid crystal display (LCD), a speaker, and the like; a storage section 609 including a hard disk and the like; and a communication section 610 including a network interface card such as a LAN card or a modem. The communication section 610 performs communication processing via a network such as the Internet. A drive 611 may also be connected to the I / O interface 606 as needed. A removable medium 612, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, and the like, is installed in the drive 611 as needed, so that a computer program read therefrom can be installed into the storage section 609 as needed.

[0115] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through the communication part 610, and / or installed from a removable medium 612. When the computer program is executed by the central processing unit (CPU) 601 and the graphics processing unit (GPU) 602, the above-mentioned functions defined in the method of the present invention are performed.

[0116] It should be noted that the computer-readable medium described in the present invention may be a computer-readable signal medium or a computer-readable medium, or any combination thereof. Computer-readable media may be, for example, but not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor devices, apparatuses, or components, or any combination thereof. More specific examples of computer-readable media may include, but are not limited to, an electrical connection having one or more conductors, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present invention, a computer-readable medium may be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution device, apparatus, or component. In the present invention, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable medium that can transmit, propagate, or transport a program for use by or in conjunction with an instruction execution apparatus, device, or device. Program code embodied on a computer-readable medium may be transmitted using any suitable medium, including but not limited to wireless, wireline, optical cable, RF, or any suitable combination thereof.

[0117] Computer program code for performing the operations of the present invention may be written in one or more programming languages, or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a stand-alone software package, partially on the user's computer and partially on a remote computer, or entirely on the remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0118] The flowcharts and block diagrams in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the devices, methods and computer program products according to various embodiments of the present invention. In this regard, each box in the flowchart or block diagram can represent a module, program segment, or a part of code, and the module, program segment, or a part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order than that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of the boxes in the block diagram and / or flowchart, can be implemented with a dedicated hardware-based device that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0119] The modules involved in the embodiments of the present invention may be implemented in software or hardware, and may also be set in a processor.

[0120] As another aspect, the present invention further provides a computer-readable medium, which may be included in the electronic device described in the above embodiments, or may exist independently and not incorporated into the electronic device. The computer-readable medium carries one or more programs, and when executed by the electronic device, the electronic device performs the method steps described in the first aspect of the present invention.

[0121] The above description is merely an illustration of the preferred embodiments of the present invention and the technical principles employed. Those skilled in the art should understand that the scope of the invention is not limited to the technical solutions formed by the specific combination of the above-mentioned technical features, but also encompasses other technical solutions formed by any combination of the above-mentioned technical features or their equivalents without departing from the above-mentioned inventive concept. For example, a technical solution formed by replacing the above-mentioned features with (but not limited to) technical features with similar functions disclosed in the present invention.

Claims

1. A method for recovering data from a new energy vehicle T-BOX, characterized in that: The method comprises the following steps: S1. Obtain unallocated cluster data of the target disk; S2. Search the field position of the PG start character of the data packet and record it as PG(1); S3, offset 20 bytes from the PG (1) to the position of the data unit length, extract the 2-byte data of the data unit length, make a validity judgment and record it as DUL; S4. If the DUL judgment result is abnormal, offset 2 bytes from the PG (1) and jump to step S2; if normal, continue to the next step; S5. Extract data of a data packet PG according to the DUL length, perform XOR check on the data, and record the checked value as CKS. The XOR check range is the data starting from PG(1+2) bytes to PG(n-1) bytes. S6. Compare the value of CKS with PG(n). If the values ​​are equal and the validity of PG is verified, put PG into the D set. S7. If the comparison result of step S6 is not equal, then shift 2 bytes from PG(1) and jump to step S2; S8. Parse all data packets PG in the D set according to the national standard data format to restore the deleted data; Among them, n is the length of the data packet; DUL is the data unit data length; CKS is the checksum value of the data packet; set A collection of packets extracted from a corrupted file.

2. The method for recovering T-BOX data of a new energy vehicle according to claim 1, characterized in that: Also includes: Convert national standard data stored in non-hexadecimal format to hexadecimal format.

3. The method for recovering T-BOX data of a new energy vehicle according to claim 1, characterized in that: Before S8 and after S7, the process also includes: further judging whether all data packets PG have been searched for; if not, jumping to step S2; if so, continuing to step S8.

4. A device for recovering T-BOX data of a new energy vehicle, characterized in that: The method according to any one of claims 1 to 3, further comprising: Acquisition unit: used to obtain unallocated cluster data of the target disk; Processing unit: used to search the field position of the PG start character of the data packet and perform further judgment, verification and comparison processing; Restoration unit: used to parse all data packets PG in the D set according to the national standard data format and restore the deleted data.

5. A new energy vehicle T-BOX data recovery system, characterized in that: The method according to any one of claims 1 to 3, further comprising: Acquisition module: used to obtain the unallocated cluster data of the target disk; Search module: used to search for the field position of the PG start character of the data packet; Judgment module: used for judging the validity of the extracted data unit length data; A verification module is used to perform an XOR verification on the data of a data packet PG extracted according to the DUL length; Comparison module: used to compare the verified CKS value with PG(n); Restoration module: used to parse all data packets PG in the D set according to the national standard data format and restore deleted data.

6. An electronic device comprising: one or more processors; a storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 3.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 3 is implemented.

Citation Information

Patent Citations

  • Vehicle-mounted terminal communication protocol analysis method and device

    CN113364732A

  • Vehicle file processing method and device, equipment and storage medium

    CN114979203A