A safety monitoring system, implementation method, computer device and storage medium

Abstract

The application relates to a safety monitoring system, an implementation method, computer equipment and a storage medium, wherein the safety monitoring system comprises an input interface, an output interface and a monitoring component; the monitoring component is decoupled from a monitoring module according to different monitoring function objects, wherein the monitoring component is combined based on the safety levels of the objects to obtain a first combination, and the first combination is integrated into the monitoring module according to address segments; when the safety levels change, the monitoring component obtains a second combination based on the changed safety levels, and the second combination is integrated into the monitoring module according to address segments; the safety monitoring system can improve the high coupling degree of the monitoring software in the prior art.

Description

Technical Field

[0001] This application relates to the field of software technology, and in particular to a security monitoring system, implementation method, computer device, and storage medium. Background Technology

[0002] With the rapid popularization of automotive intelligence and electrification technologies, there are more and more in-vehicle controllers and various electronic components. All kinds of electronic components are at risk of systemic failure and random hardware failure. Therefore, the corresponding automotive functional safety is becoming increasingly important, and the safety monitoring software for functional safety also needs to meet increasingly higher requirements.

[0003] Taking the monitoring of torque system functional safety as an example, including pedal monitoring, vehicle speed monitoring, gear monitoring, torque monitoring and high voltage monitoring, the existing safety monitoring software integrates the above parts into the same ASWC (Atomic Software Component), which makes the software highly coupled. This implementation method means that when functional safety requirements change, the entire atomic software component needs to be recompiled, which is prone to program errors. Summary of the Invention

[0004] Based on this, a security monitoring system, implementation method, computer equipment, and storage medium are provided to improve the problem of high coupling of monitoring software in the prior art.

[0005] On the one hand, a security monitoring system is provided, the security monitoring system comprising:

[0006] Input interface;

[0007] Output interface;

[0008] A monitoring component is obtained by decoupling the monitoring module according to different monitoring function objects. The monitoring component is combined based on the security level of the object to obtain a first combination. The first combination is integrated into the monitoring module according to address range.

[0009] The input and output interfaces are uniformly named based on the objects monitored. The security monitoring system receives the message information to be processed for the corresponding objects through the input interface and calls the first combination for monitoring. The output interface outputs logs. When the security level changes, the monitoring component obtains a second combination based on the changed security level and integrates the second combination into the monitoring module according to the address range.

[0010] On the other hand, a method for implementing a security monitoring system is provided, which includes:

[0011] Based on the monitoring function of the object, the input and output interfaces are uniformly named, and the monitoring module is decoupled to obtain the monitoring component corresponding to the object;

[0012] Based on the security level of the object, the monitoring components corresponding to the security level are combined to obtain a first combination, and the first combination is integrated into the monitoring module according to the address range, so as to receive the message information to be processed of the corresponding object through the input interface, call the first combination to perform monitoring, and output logs through the output interface.

[0013] When the security level changes, a second combination is obtained based on the changed security level, and the second combination is integrated into the monitoring module according to the address range.

[0014] In one embodiment, the step of integrating the first combination into the monitoring module according to address ranges further includes:

[0015] When the monitoring component changes, a third combination is obtained based on the changed monitoring component, and the third combination is integrated into the monitoring module according to the address range.

[0016] In one embodiment, the first combination is integrated into the monitoring module according to address ranges, including:

[0017] The integrated address of the monitoring module is divided according to the number of security levels to obtain the corresponding number of address segments;

[0018] The monitoring components corresponding to the same security level are integrated into the same address segment.

[0019] In one embodiment, the step of combining monitoring components corresponding to the security level of the object to obtain a first combination includes:

[0020] The security level of the monitoring component under different fault events is determined based on security association parameters, including severity parameters, exposure parameters, and controllability parameters.

[0021] The monitoring components corresponding to the same security level fault event are combined to obtain the first combination.

[0022] In one embodiment, based on the security level of the object, monitoring components corresponding to the security level are combined to obtain a first combination, which further includes:

[0023] Based on the security level, the corresponding security processing operation for the monitoring component is determined; wherein the security processing operation is configured to at least: limit vehicle speed, limit power, interrupt power, or a combination thereof.

[0024] In one embodiment, the security processing operation is further configured to configure different limiting parameters for the same security processing operation based on the different security levels.

[0025] In one embodiment, decoupling the monitoring module to obtain a monitoring component corresponding to the object includes:

[0026] Configure a security status module, which is used to store the mapping relationship between the security level and the security processing operation.

[0027] In another aspect, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the method.

[0028] A computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements the steps of the method.

[0029] The aforementioned security monitoring system, implementation method, computer equipment, and storage medium decouple the monitoring module to obtain monitoring components corresponding to different objects. The monitoring components corresponding to the security level are combined to obtain a first combination. When the security level changes, only the changed part needs to be modified and the code regenerated for integration, reducing the risk of errors when generating code from the model. Attached Figure Description

[0030] Figure 1 This is a structural block diagram of a security monitoring system in one embodiment;

[0031] Figure 2 This is a flowchart illustrating the implementation method of a security monitoring system in one embodiment;

[0032] Figure 3 This is a block diagram of a security monitoring system in another embodiment;

[0033] Figure 4 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0034] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0035] Currently, traditional vehicle controller safety monitoring systems typically integrate the monitoring of multiple objects. For example, pedal monitoring, vehicle speed monitoring, gear monitoring, torque monitoring, and high-voltage monitoring strategies are all integrated into a single ASWC. This results in high software coupling within the system. Any modification to any monitoring component requires modification of the entire ASWC software, recompiling the model code to generate C code, and then integrating it with the underlying software. This makes software updates and maintenance difficult, and errors caused by compilation tools are also prone to occur during the compilation process.

[0036] The security monitoring system implementation method of this application adopts decoupling, and the monitoring module is further broken down into corresponding modular ASWCs, which improves the problems of high coupling, difficulty in maintenance and easy compilation errors in the existing security monitoring system.

[0037] In one embodiment, such as Figure 1 As shown, a security monitoring system is provided, including: an input interface, an output interface, and a monitoring component. The monitoring component is obtained by decoupling the monitoring module according to different monitoring function objects. The monitoring component is combined based on the security level of the object to obtain a first combination, and the first combination is integrated into the monitoring module according to address ranges. The input interface and output interface are uniformly named based on the monitoring function objects. The security monitoring system receives the message information to be processed for the corresponding object through the input interface and calls the first combination for monitoring, while the output interface outputs logs. Furthermore, when the security level changes, the monitoring component obtains a second combination based on the changed security level and integrates the second combination into the monitoring module according to address ranges.

[0038] The security monitoring system provided in this application decouples the monitoring module to obtain monitoring components corresponding to different objects. The monitoring components corresponding to the security level are combined to obtain a first combination. When the security level changes, only the changed part can be modified and the code can be regenerated for integration, reducing the risk of errors when generating code from the model.

[0039] In one embodiment, when the monitoring component changes, the security monitoring system obtains a third combination based on the changed monitoring component, and integrates the third combination into the monitoring module of the monitoring system according to address ranges.

[0040] The integrated address of the security monitoring system is divided according to the number of security levels to obtain a corresponding number of address segments. For example, it is divided into 4 segments according to the ASIL level, and the corresponding security component changes are integrated into the corresponding address segment.

[0041] In one embodiment, the monitoring components in the security monitoring system have different security levels under different fault events, and the first combination is obtained by combining the monitoring components corresponding to the same security level fault event.

[0042] In one embodiment, the system further includes a security status module, which stores a mapping relationship between security levels and security processing operations.

[0043] Different safety levels correspond to different safety handling operations, which include at least limiting vehicle speed, limiting power or interrupting power, or a combination thereof.

[0044] When configuring safety processing operations for the safety level, the same safety processing operation can be configured with different limiting parameters. For example, for the safety processing operation of limiting vehicle speed, different safety levels can be configured with different values ​​for limiting vehicle speed.

[0045] The various modules and components in the aforementioned security monitoring system can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of a computer device in hardware form or independent of it, or stored in the memory of the computer device in software form, so that the processor can call and execute the corresponding operations of each module.

[0046] In one embodiment, a method for implementing a security monitoring system is provided, such as... Figure 2 As shown, the method includes the following steps:

[0047] Step 101: Based on the object with monitoring function, uniformly name the input interface and output interface, and decouple the monitoring module to obtain the monitoring component corresponding to the object.

[0048] For example, the monitoring component can be an atomic software component ASWC. Taking torque monitoring for functional safety of range-extended electric vehicles as an example, the decoupling includes dividing the monitoring module into input modules, pedal monitoring, gear monitoring, vehicle speed monitoring, torque monitoring, high-voltage monitoring, ..., output modules, etc., to obtain the corresponding ASWC. Furthermore, each monitoring component can be further subdivided into more specialized monitoring components. For example, the torque monitoring component can be subdivided into ACC (Adaptive Cruise Control) monitoring components, APA (Auto Parking Assist) monitoring components, CRBS (Cooperative Regenerative Brake Systems) monitoring components, accelerator pedal monitoring components, crawl monitoring components, front motor torque monitoring components, rear motor torque monitoring components, etc. The high-voltage monitoring combination can be further subdivided into BMS (Battery Management System) high-voltage interlock, MCU (Motor Control Unit) high-voltage interlock, OBC (Onboard Charger) high-voltage interlock, etc.

[0049] Step 102: Based on the security level of the object, combine the monitoring components corresponding to the security level to obtain a first combination, and integrate the first combination into the monitoring module according to the address range, so as to receive the message information to be processed of the corresponding object through the input interface, call the first combination for monitoring, and output logs through the output interface.

[0050] It is understood that the safety level of the object can be classified according to the functional safety requirements (FSR) of the vehicle. The functional safety of a car is defined as "the absence of unreasonable risks caused by hazards related to the failure behavior of the electrical and electronic systems". Currently, the Automotive Safety Integrity Level (ASIL) is used to assess the probability of hazard and tolerance of automotive components so that automotive parts meet relevant standards.

[0051] Generally, vehicle safety levels include four levels: ASILA, ASILB, ASILC, and ASILD. QM is also included but is not required here.

[0052] In this embodiment, ASWCs are further divided and combined according to their respective security levels ASIL.

[0053] It is understood that the security monitoring system in this embodiment uses a separate kernel, and during integration, the corresponding level of ASWC is integrated into the same address segment of the kernel.

[0054] Step 103: When the security level changes, a second combination is obtained based on the changed security level, and the second combination is integrated into the kernel of the monitoring module according to the address range.

[0055] When security requirements change, the security level corresponding to ASWC may change. The implementation method of the security monitoring system in this application allows only the changed ASWC to be modified when security requirements change, and then the code is regenerated and integrated with the underlying layer.

[0056] The security monitoring system implementation method provided in this application breaks down the monitoring module into corresponding modular ASWCs. When the security level of the monitoring component changes, only the changed part needs to be modified and recompiled, thereby reducing the workload of compilation and avoiding unknown errors caused by compilation tools.

[0057] In one embodiment, when the monitoring component changes, a third combination is obtained based on the changed monitoring component, and the third combination is integrated into the kernel of the monitoring module according to address ranges.

[0058] When new requirements arise or requirements change, you only need to add or modify the corresponding monitoring components according to the requirements. Then, the monitoring component is compiled and code is generated separately from the model and integrated separately. This eliminates the need for the monitoring components that have not changed to be generated from the model at the same time, thereby reducing errors in the compilation process.

[0059] In actual implementation, when requirements change, the monitoring components and security levels may change simultaneously or separately. When both change simultaneously, the corresponding modified ASWC will also be integrated with the underlying layer (the corresponding security level will be integrated into the corresponding address range).

[0060] In one embodiment, the first combination is integrated into the kernel of the monitoring module according to address segments, including dividing the integration address of the monitoring module into 4 segments according to the ASIL level, for integrating the monitoring components corresponding to the same security level into the same address segment.

[0061] When security requirements change, the modified ASWC will be integrated into the changed address range to achieve precise deployment.

[0062] In one embodiment, the method further includes a step of dividing the processing measures (or safety processing operations, safety states) corresponding to the safety level into equivalent categories. For example, since personal safety is involved, the corresponding safety states of functional safety are divided into: limiting vehicle speed, limiting power, or power interruption; or, the safety processing operations corresponding to a certain safety level are a combination of multiple of these.

[0063] In this embodiment, safety processing operations are divided according to safety levels. When the monitoring component is triggered, fine-grained processing is achieved, avoiding the problem of one-size-fits-all measures, thereby improving the user's driving experience.

[0064] In one embodiment, different limiting parameters are configured for the same security processing operation depending on the different security levels.

[0065] Understandably, the main monitoring strategies of a safety monitoring system, such as pedal monitoring, gear position monitoring, vehicle speed monitoring, torque monitoring, and high-voltage monitoring, do not change frequently. Therefore, the corresponding safety processing operations are managed using standardized parameters; for example, different safety levels correspond to different speed limits. This further enables refined processing when monitoring components are triggered.

[0066] In one embodiment, the same ASWC monitors objects with different fault events, and these different fault events have different severity parameters S, exposure parameters E, and controllability parameters C. Therefore, the security level of the monitoring component under different fault events can be determined based on security association parameters, and monitoring components corresponding to the same security level fault events are combined to obtain the first combination, such as... Figure 3 As shown.

[0067] In some embodiments, decoupling the monitoring module further includes configuring a security status module, which stores the mapping relationship between the security level and the security processing operation.

[0068] When the safety measures corresponding to a certain safety level change, the safety status module can be modified to facilitate adaptation to different vehicle projects.

[0069] On the other hand, decoupling the monitoring module also includes configuring the input and output modules for variable name adaptation, that is, to ensure that the three modules of input, output, and security status change adaptably depending on the project.

[0070] The security monitoring system implementation method provided in this application, on the one hand, refines and breaks down the monitoring module into various monitoring components, which facilitates changes and allows for more flexible responses to different projects, while reducing unknown errors caused by the use of model-generated code or other toolchains. On the other hand, it refines the security levels of security processing operations (processing measures) to solve the problem of a one-size-fits-all approach when security monitoring is triggered. Furthermore, it divides monitoring components of different security levels into different address segments to achieve precise deployment and enable security status to be triggered according to level.

[0071] It should be understood that, although Figure 2 The steps in the flowchart are shown sequentially as indicated by the arrows, but these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order in which these steps are executed, and they can be performed in other orders. Figure 2 At least some of the steps in the process may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least some of the sub-steps or stages of other steps.

[0072] It is understandable that the specific limitations of the security monitoring system can be found in the above-mentioned limitations on the implementation methods of the security monitoring system, which will not be repeated here.

[0073] In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 4 As shown, the computer device includes a processor, memory, network interface, display screen, and input devices connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The network interface is used to communicate with external terminals via a network connection. When the computer program is executed by the processor, it implements a method for implementing a security monitoring system. The display screen can be an LCD screen or an e-ink screen. The input devices can be a touch layer covering the display screen, buttons, a trackball, or a touchpad mounted on the computer device casing, or an external keyboard, touchpad, or mouse.

[0074] Those skilled in the art will understand that Figure 4The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0075] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to perform the following steps:

[0076] Step A: Based on the object with the monitoring function, the input and output interfaces are uniformly named, and the monitoring module is decoupled to obtain the monitoring component corresponding to the object;

[0077] Step B: Based on the security level of the object, the monitoring components corresponding to the security level are combined to obtain a first combination, and the first combination is integrated into the monitoring module according to the address range, so as to receive the message information to be processed of the corresponding object through the input interface, call the first combination for monitoring, and output logs through the output interface.

[0078] Step C: When the security level changes, a second combination is obtained based on the changed security level, and the second combination is integrated into the kernel of the monitoring module according to the address range.

[0079] By decoupling the monitoring module, monitoring components corresponding to different objects are obtained. The monitoring components corresponding to the security level are combined to obtain the first combination. When the security level changes, only the changed part can be modified and the code can be regenerated for integration, reducing the risk of errors when generating code from the model.

[0080] In one embodiment, the processor, when executing a computer program, also performs the following steps:

[0081] When the monitoring component changes, a third combination is obtained based on the changed monitoring component, and the third combination is integrated into the monitoring module according to the address range.

[0082] In one embodiment, the processor, when executing a computer program, also performs the following steps:

[0083] The integrated address of the monitoring module is divided according to the number of security levels to obtain the corresponding number of address segments;

[0084] The monitoring components corresponding to the same security level are integrated into the same address segment.

[0085] In one embodiment, the processor, when executing a computer program, also performs the following steps:

[0086] The security level of the monitoring component under different fault events is determined based on security association parameters, including severity parameters, exposure parameters, and controllability parameters.

[0087] The monitoring components corresponding to the same security level fault event are combined to obtain the first combination.

[0088] In one embodiment, the processor, when executing a computer program, also performs the following steps:

[0089] Based on the security level, determine the security processing operation corresponding to the monitoring component.

[0090] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, the computer program performing the following steps when executed by a processor:

[0091] Step A: Based on the object with the monitoring function, the input and output interfaces are uniformly named, and the monitoring module is decoupled to obtain the monitoring component corresponding to the object;

[0092] Step B: Based on the security level of the object, the monitoring components corresponding to the security level are combined to obtain a first combination, and the first combination is integrated into the monitoring module according to the address range, so as to receive the message information to be processed of the corresponding object through the input interface, call the first combination for monitoring, and output logs through the output interface.

[0093] Step C: When the security level changes, a second combination is obtained based on the changed security level, and the second combination is integrated into the kernel of the monitoring module according to the address range.

[0094] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:

[0095] When the monitoring component changes, a third combination is obtained based on the changed monitoring component, and the third combination is integrated into the monitoring module according to the address range.

[0096] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:

[0097] The integrated address of the monitoring module is divided according to the number of security levels to obtain the corresponding number of address segments;

[0098] The monitoring components corresponding to the same security level are integrated into the same address segment.

[0099] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), Rambus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0100] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0101] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the invention patent. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this patent application should be determined by the appended claims.

Claims

1. A security monitoring system, characterized in that, include: Input interface; Output interface; A monitoring component, which is an atomic software component, is obtained by decoupling the monitoring module according to different monitoring function objects. The monitoring component is combined based on the security level of the object to obtain a first combination. The first combination is integrated into the monitoring module according to address range. The input and output interfaces are uniformly named based on the objects monitored. The security monitoring system receives the message information to be processed for the corresponding objects through the input interface and calls the first combination for monitoring. The output interface outputs logs. When the security level changes, the monitoring component obtains a second combination based on the changed security level and integrates the second combination into the monitoring module according to the address range.

2. A method for implementing a security monitoring system, characterized in that, The method for implementing the security monitoring system according to claim 1 includes: Based on the object with monitoring function, the input and output interfaces are uniformly named, and the monitoring module is decoupled to obtain the monitoring component corresponding to the object. The monitoring component is an atomic software component. Based on the security level of the object, the monitoring components corresponding to the security level are combined to obtain a first combination, and the first combination is integrated into the monitoring module according to the address range, so as to receive the message information to be processed of the corresponding object through the input interface, call the first combination to perform monitoring, and output logs through the output interface. When the security level changes, a second combination is obtained based on the changed security level, and the second combination is integrated into the monitoring module according to the address range.

3. The implementation method according to claim 2, characterized in that, The process of integrating the first combination into the monitoring module according to address ranges further includes: When the monitoring component changes, a third combination is obtained based on the changed monitoring component, and the third combination is integrated into the monitoring module according to the address range.

4. The implementation method according to claim 2, characterized in that, The first combination is integrated into the monitoring module according to address ranges, including: The integrated address of the monitoring module is divided according to the number of security levels to obtain the corresponding number of address segments; The monitoring components corresponding to the same security level are integrated into the same address segment.

5. The implementation method according to claim 2, characterized in that, The first combination, based on the security level of the object, combines the monitoring components corresponding to the security level to obtain the first combination, including: The security level of the monitoring component under different fault events is determined based on security association parameters, including severity parameters, exposure parameters, and controllability parameters. The monitoring components corresponding to the same security level fault event are combined to obtain the first combination.

6. The implementation method according to claim 2, characterized in that, Based on the security level of the object, the monitoring components corresponding to the security level are combined to obtain a first combination, which also includes: Based on the security level, the corresponding security processing operation for the monitoring component is determined; wherein the security processing operation is configured to at least: limit vehicle speed, limit power, interrupt power, or a combination thereof.

7. The implementation method according to claim 6, characterized in that, The security processing operation is also configured to: configure different limiting parameters for the same security processing operation according to different security levels.

8. The implementation method according to claim 6, characterized in that, The step of decoupling the monitoring module to obtain a monitoring component corresponding to the object includes: Configure a security status module, which is used to store the mapping relationship between the security level and the security processing operation.

9. A computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 2 to 8.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 2 to 8.

Images