Side information collection system, method, device and medium for vehicle controller

Abstract

The application discloses a side information collection system and method for a vehicle controller, equipment and a medium. The system comprises a side information collection terminal, a gateway, an oscilloscope and a vehicle controller to be tested. The side information collection terminal is used to generate side information generation messages and side information collection messages. The gateway is used to generate messages to be analyzed and send them to the vehicle controller to be tested, and generate at least one collection trigger signal and send it to the oscilloscope. The vehicle controller to be tested is used to run a to-be-tested cryptographic algorithm corresponding to a plaintext file, obtain to-be-processed side information and send it to the oscilloscope. The oscilloscope is used to process the to-be-processed side information, obtain target side information data, and send the target side information data and the at least one collection trigger signal to the side information collection terminal. The side information collection terminal is also used to receive the target side information data and display it on a display interface. The technical scheme realizes the effect of positioning a to-be-tested side information data segment.

Description

Technical Field

[0001] This invention relates to the field of vehicle information technology security technology, and in particular to a side information acquisition system, method, device and medium for vehicle controllers. Background Technology

[0002] In-vehicle intelligent hardware often generates multiple information leaks during operation, including execution time, energy consumption, and electromagnetic radiation. Attacks that exploit these leaks for cryptographic analysis are commonly known as side-channel attacks. OTA firmware upgrades, remote diagnostics, diagnostic flashing, vehicle data acquisition, remote querying and control, and remote upgrades all utilize in-vehicle Ethernet and CAN common standards for communication, ensuring the confidentiality and integrity of firmware and in-vehicle privacy data. Side-channel methods can be used to steal keys, thereby compromising confidentiality, integrity, and availability. Therefore, during the testing phase of in-vehicle intelligent hardware, side-channel information generated during operation can be collected to assess the security of the in-vehicle intelligent hardware.

[0003] Currently, the traditional method of collecting side information usually involves controlling the in-vehicle smart hardware to run identity authentication and secure access algorithms simultaneously. Side information is collected during the algorithm operation. The disadvantage of this method is that the identity authentication algorithm and the secure access algorithm are composed of multiple cryptographic algorithms. When collecting side information, it is impossible to locate the side information data segment of the cryptographic algorithm under test. Summary of the Invention

[0004] This invention provides a side information acquisition system, method, device, and medium for vehicle controllers to acquire electromagnetic or energy side information during the encryption process of vehicle controllers. It also has good compatibility and can be applied to various application scenarios. Furthermore, it achieves the effect of locating the side information data segment to be detected, thereby improving the efficiency of side information acquisition and side channel analysis.

[0005] According to one aspect of the present invention, a side information acquisition system for a vehicle controller is provided, the system comprising: a side information acquisition terminal, a gateway, an oscilloscope, and a vehicle controller under test, wherein,

[0006] The side information acquisition terminal is used to acquire plaintext files, acquisition trigger location information, and side information sampling frequency; and based on the plaintext files and the acquisition trigger location information, generate a side information generation message and send it to the gateway; and based on the side information sampling frequency, generate a side information acquisition message and send it to the oscilloscope.

[0007] The gateway is configured to receive the side information generation message, process the side information generation message to obtain a message to be parsed and send it to the vehicle controller under test, and generate at least one acquisition trigger signal based on the message to be parsed and send it to the oscilloscope.

[0008] The vehicle controller under test is used to receive the message to be parsed, run the cryptographic algorithm under test corresponding to the plaintext file in the message to be parsed, obtain the information to be processed, and send it to the oscilloscope;

[0009] The oscilloscope is used to receive the side information to be processed, process the side information to be processed based on the side information acquisition message and the at least one acquisition trigger signal to obtain target side information data, and send the target side information data and the at least one acquisition trigger signal to the side information acquisition terminal.

[0010] The side information acquisition terminal is also used to receive the target side information data and display it on the display interface.

[0011] According to another aspect of the present invention, a method for acquiring side information for a vehicle controller is provided, the method comprising:

[0012] The system acquires plaintext files, acquisition trigger location information, and side information sampling frequency through a side information acquisition terminal. Based on the plaintext files and the acquisition trigger location information, it generates a side information generation message and sends it to the gateway. It also generates a side information acquisition message based on the side information sampling frequency and sends it to the oscilloscope.

[0013] The gateway receives the side information generation message, processes the side information generation message to obtain the message to be parsed and sends it to the vehicle controller under test; and, based on the message to be parsed, generates at least one acquisition trigger signal and sends it to the oscilloscope.

[0014] The vehicle under test controller receives the message to be parsed, runs the cryptographic algorithm corresponding to the plaintext file in the message to be parsed, obtains the information to be processed, and sends it to the oscilloscope.

[0015] The oscilloscope receives the side information to be processed, and processes the side information based on the side information acquisition message and the at least one acquisition trigger signal to obtain target side information data. The target side information data and the at least one acquisition trigger signal are then sent to the side information acquisition terminal.

[0016] The side information acquisition terminal receives the target side information data and displays it on the display interface.

[0017] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0018] At least one processor; and

[0019] A memory communicatively connected to the at least one processor; wherein,

[0020] The memory stores a computer program that can be executed by the at least one processor, which enables the at least one processor to perform the side information acquisition method for vehicle controllers according to any embodiment of the present invention.

[0021] According to another aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions for causing a processor to execute and implement the side information acquisition method for a vehicle controller according to any embodiment of the present invention.

[0022] This embodiment provides a side information acquisition system for a controller, including a side information acquisition terminal, a gateway, an oscilloscope, and a vehicle controller under test (VDT). The side information acquisition terminal is used to acquire a plaintext file, acquisition trigger location information, and a side information sampling frequency; based on the plaintext file and acquisition trigger location information, it generates a side information generation message and sends it to the gateway; and based on the side information sampling frequency, it generates a side information acquisition message and sends it to the oscilloscope. The gateway is used to receive the side information generation message, process it to obtain a message to be parsed and send it to the VDT; and based on the message to be parsed, it generates at least one acquisition trigger signal and sends it to the oscilloscope. The VDT is used to receive the message to be parsed and run the corresponding plaintext file in the message to be parsed. The system acquires the side information to be processed from the cryptographic algorithm under test and sends it to an oscilloscope. The oscilloscope receives the side information and processes it based on the side information acquisition message and at least one acquisition trigger signal to obtain target side information data. The target side information data and at least one acquisition trigger signal are then sent to the side information acquisition terminal. The side information acquisition terminal also receives the target side information data and displays it on the display interface. This solves the problem of being unable to locate the side information data segment of the cryptographic algorithm under test in the prior art. It realizes the acquisition of electromagnetic or energy side information in the encryption process of the vehicle controller. At the same time, it has good compatibility and can be applied to a variety of application scenarios. Furthermore, it achieves the effect of locating the side information data segment to be tested, thereby improving the side information acquisition efficiency and side channel analysis efficiency.

[0023] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0024] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0025] Figure 1 This is a schematic diagram of the structure of a side information acquisition system for a vehicle controller according to Embodiment 1 of the present invention;

[0026] Figure 2 This is a schematic diagram of the structure of a side information acquisition terminal in a side information acquisition system for vehicle controllers provided in Embodiment 1 of the present invention;

[0027] Figure 3 This is a schematic diagram of the gateway structure in a side information acquisition system for a vehicle controller provided in Embodiment 1 of the present invention;

[0028] Figure 4 This is a schematic diagram of the structure of a vehicle controller under test in a side information acquisition system for vehicle controllers provided in Embodiment 1 of the present invention;

[0029] Figure 5 This is a flowchart of a side information acquisition method for a vehicle controller according to Embodiment 2 of the present invention;

[0030] Figure 6 This is a schematic diagram of the structure of an electronic device that implements the side information acquisition method for vehicle controllers according to embodiments of the present invention. Detailed Implementation

[0031] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0032] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0033] Example 1

[0034] Figure 1 This is a schematic diagram of a side information acquisition system for a vehicle controller provided in Embodiment 1 of the present invention. This embodiment is applicable to situations where side information generated during the execution of a cryptographic algorithm by the vehicle controller is collected, such as... Figure 1 As shown, the side information acquisition system for vehicle controllers provided in this embodiment includes: a side information acquisition terminal 1, a gateway 2, an oscilloscope 3, and a vehicle controller under test 4. The structural composition of the side information acquisition system for vehicle controllers in this embodiment will be described in detail below.

[0035] The system includes a side information acquisition terminal 1, which acquires the side information sampling frequency, plaintext file, and acquisition trigger location information. Based on the side information sampling frequency, it generates a side information acquisition message and sends it to the oscilloscope 3. It also generates a side information generation message based on the plaintext file and acquisition trigger location information and sends it to the gateway 2. The gateway 2 receives the side information generation message and sends the plaintext file from the message to the vehicle controller 4 under test. It also generates at least one acquisition trigger signal based on the acquisition trigger location information in the message and sends it to the oscilloscope 3. The vehicle controller 4 receives the plaintext file from the message and sends it to the oscilloscope 3. The plaintext file is processed, and the corresponding cryptographic algorithm is run to generate the side information to be processed and sent to the oscilloscope 3. The oscilloscope is used to receive the side information to be processed and to acquire the side information to be processed based on the side information acquisition message and at least one acquisition trigger signal to obtain at least one segment of target side information. The oscilloscope then sends at least one acquisition trigger signal and at least one segment of target side information to the side information acquisition terminal 1. The side information acquisition terminal 1 is also used to receive at least one segment of target side information and display it on the display interface, and to store at least one segment of target side information and at least one acquisition trigger signal based on pre-acquired storage parameters.

[0036] The side information acquisition terminal 1 can be a terminal device with a side information acquisition program installed. Optionally, it can be a mobile terminal device supporting USB (Universal Serial Bus) and / or network interfaces, such as a smartphone or tablet, or a fixed terminal device such as a computer. For example, the side information acquisition terminal can be a computer with an application program installed to implement side information acquisition. The gateway 2 can be used to forward communication data between the side information acquisition terminal 1 and the vehicle controller under test. It can also send the side information acquisition trigger signal to the oscilloscope. The oscilloscope 3 is a widely used electronic measuring instrument that can transform invisible electrical signals into visible images, facilitating the study of various electrical phenomena. Using the oscilloscope 3, one can observe the waveform curves of various signal amplitudes changing over time, and it can also be used to test various electrical quantities, such as voltage, current, frequency, phase difference, and modulation amplitude. The vehicle controller under test 4 can be an on-board controller that requires testing of safety protection functions. In practical applications, when a vehicle controller runs any encryption algorithm, it generates various information such as energy consumption and electromagnetic radiation. This information can be used as side information. When any device receives the side information, it can analyze the data to crack the encryption algorithm run by the vehicle controller. Therefore, in order to test the security protection capability of any vehicle controller, the side information generated by the vehicle controller when running the corresponding encryption algorithm can be collected. Furthermore, the security protection capability of the vehicle controller can be analyzed based on the collected side information. At this time, the vehicle controller can be used as the vehicle controller under test 4.

[0037] Optionally, the side information acquisition terminal 1 is connected to the gateway 2 via an in-vehicle Ethernet; the side information acquisition terminal 1 is connected to the oscilloscope 3 via USB; and the gateway 2 is connected to the vehicle controller 4 under test via an in-vehicle Ethernet or an in-vehicle CAN bus.

[0038] In this embodiment, the side information sampling frequency can be the number of samples extracted from continuous side information and used to form a discrete signal per unit time, that is, the number of sampling points acquired per unit time when sampling side information. Generally, the higher the side information sampling frequency, the more sampling points are acquired per unit time, and the denser the distribution of sampling points; the lower the side information sampling frequency, the fewer sampling points are acquired per unit time, and the sparser the distribution of sampling points. The side information sampling frequency can be the system default setting or a custom setting based on user needs. The plaintext file can be a file storing plaintext. Those skilled in the art should understand that plaintext refers to unencrypted text or strings, which may be bitstreams in a communication system, such as text, bitmaps, digitized voice, or digitized video images. After a certain encryption algorithm is applied to the plaintext, the resulting text is called ciphertext. The acquisition trigger location information can be information that limits the side information acquisition location, used to characterize the start time of the side information acquisition process. The side information acquisition message can be protocol data generated based on the corresponding network protocol, and this protocol data can also be used to execute the side information acquisition process. Correspondingly, the side information generation message can be protocol data generated based on the corresponding network protocol, and this protocol data can be used to execute the side information generation process.

[0039] Figure 2 This is a schematic diagram of the structure of a side information acquisition terminal in a controller-oriented side information acquisition system provided by an embodiment of the present invention. For example... Figure 2 As shown, the side information acquisition terminal 1 includes a human-computer interaction interface module 11, a parameter parsing module 12, a command generation module 13, and a protocol stack module 14. The human-computer interaction interface module 11 is used to collect plaintext files, collection trigger location information, and side information sampling frequency when the target user's parameter input operation on the display interface is detected, and send them to the parameter parsing module 12. The parameter parsing module 12 is used to receive plaintext files, collection trigger location information, and side information sampling frequency, and parse the plaintext files and collection trigger location information to obtain generation configuration information, and parse the side information sampling frequency to obtain collection configuration information, and send the collection configuration information and generation configuration information to the command generation module 13. The command generation module 13 is used to receive the generation configuration information and collection configuration information, and generate side information generation control commands based on the generation configuration information, and generate side information collection control commands based on the collection configuration information. The protocol stack module 14 is used to generate side information generation messages based on the first preset diagnostic protocol and the side information generation control commands and send them to the gateway 2, and generate side information collection messages based on the second preset diagnostic protocol and the side information collection control commands and send them to the oscilloscope 3.

[0040] In this embodiment, the human-machine interface module 11 can be a module that collects relevant parameters based on the interaction between the user and the system. The parameter parsing module 12 can be a module that parses the received parameters. The command generation module 13 can be a module that generates corresponding control commands based on the parsed information. The protocol stack module 14 can be a module that includes multiple diagnostic protocols, optionally including Ethernet diagnostic protocols, CAN diagnostic protocols, and TCP / IP diagnostic protocols, etc.

[0041] In this embodiment, the target user can be a tester performing the vehicle controller testing process. In practical applications, multiple controls for executing different parameter configurations can be pre-developed. When a trigger operation by the target user on any control is detected, the corresponding parameter configuration page can be displayed in the area surrounding the control or the user can be redirected to the parameter configuration page corresponding to that control. Furthermore, when a user inputs parameters on the parameter configuration page, the parameter information input by the target user can be collected, namely, plaintext files, collection trigger location information, and side information sampling frequency.

[0042] Furthermore, the acquired plaintext file, acquisition trigger location information, and side information sampling frequency can be sent to the parameter parsing module 12. The parameter parsing module 12 parses the received parameter information to obtain generation configuration information and acquisition configuration information. This generation configuration information and acquisition configuration information are then sent to the command generation module 13. The command generation module 13 processes the generation configuration information to generate a side information generation control command. Simultaneously, the command generation module 13 processes the acquisition configuration information to generate a side information acquisition control command. Finally, since the side information acquisition terminal 1 and the gateway 2 communicate via a vehicle... Since communication is via Ethernet, after receiving the side information generation control command, the protocol stack module 14 can be invoked to package the side information generation control command according to the first preset diagnostic protocol, thereby obtaining a side information generation message and sending it to the gateway 2. Similarly, since the side information acquisition terminal 1 and the oscilloscope are connected via USB to achieve communication between them, after receiving the side information generation control command, the protocol stack module 14 can be invoked to package the side information generation control command according to the second preset diagnostic protocol, thereby obtaining a side information acquisition message and sending it to the oscilloscope 3. The first preset diagnostic protocol can be a diagnostic protocol used to achieve communication between the side information acquisition terminal 1 and the gateway 2; for example, the first preset diagnostic protocol can be an Ethernet diagnostic protocol. The second preset diagnostic protocol can be a diagnostic protocol used to achieve communication between the side information acquisition terminal 1 and the oscilloscope; for example, the second preset diagnostic protocol can be a TCP / IP diagnostic protocol.

[0043] Based on the above technical solutions, continue to refer to Figure 2 As shown, the side information acquisition terminal 1 further includes: a side information storage module 15, wherein the human-computer interaction interface module 11 is also used to acquire side information storage path parameters and side information storage format parameters when the target user's parameter input operation on the display interface is detected, and send them to the parameter parsing module 12; the parameter parsing module 12 is used to receive the side information storage path parameters and side information storage format parameters, and parse the side information storage path parameters and side information storage format parameters to obtain side information storage configuration information and send it to the side information storage module 15; the side information storage module 15 is used to receive the side information storage configuration information so that when the target side information data and at least one acquisition trigger signal are received, the target side information data and at least one acquisition trigger signal are stored based on the side information configuration information, and a corresponding storage file is generated.

[0044] In this embodiment, the side information storage path parameter can characterize the storage path set when storing the received side information data. The side information storage format parameter can characterize the storage format used when storing the received side information data. For example, the side information storage format can be a CSV file format.

[0045] In practical applications, when the human-computer interaction interface module 11 detects that the target user has input parameters on the display interface, it can collect the side information storage path parameters and side information storage format parameters, and send the collected parameters to the parameter parsing module 12. Furthermore, the parameter parsing module 12 parses the side information storage path parameters and side information storage format parameters to obtain the side information storage configuration information and sends it to the side information storage module 15. Finally, when the side information storage module 15 receives the target side information data and at least one acquisition trigger signal sent by the oscilloscope, it can store the target side information and at least one acquisition trigger signal as a file in a preset storage format based on the side information storage configuration information, and store the file in a preset storage path based on the side information storage configuration information.

[0046] It should be noted that the advantage of storing the acquisition trigger signal together with the target side information data is that the target side information data can be located based on the acquisition trigger signal during subsequent side information data analysis.

[0047] Figure 3 This is a schematic diagram of the gateway structure in a controller-oriented side information acquisition system provided by an embodiment of the present invention. Figure 3As shown, gateway 2 includes an Ethernet protocol stack module 21, a diagnostic service parsing module 22, and a trigger signal generation module 23. The Ethernet protocol stack module 21 receives side-information generation messages, processes them based on a third preset diagnostic protocol to obtain a message to be parsed, and sends it to the diagnostic service parsing module 22 and the vehicle controller 4 under test. The diagnostic service parsing module 22 receives the message to be parsed, parses it, and when it detects a message corresponding to a preset diagnostic service in the parsed message, sends the message to be parsed to the trigger signal generation module 23. The trigger signal generation module 23 receives the message to be parsed, generates at least one acquisition trigger signal based on the acquisition trigger location information in the message to be parsed, and sends it to the oscilloscope 3.

[0048] Gateway 2 can be a device with both CAN and Ethernet interfaces. Ethernet protocol stack module 21 is a module for implementing protocol conversion. Diagnostic service parsing module 22 is a module for parsing diagnostic messages and determining whether to generate a data acquisition trigger signal based on the parsing results. Trigger signal generation module 23 is the module for generating the data acquisition trigger signal.

[0049] In this embodiment, the third preset diagnostic protocol can be the diagnostic protocol used for communication between gateway 2 and the controller of the vehicle under test. For example, the third preset diagnostic protocol can be the CAN diagnostic protocol. The preset diagnostic service can be a diagnostic service used to determine whether side information can be collected. Optionally, the preset diagnostic service can be ISO 14229-129, 27, or 84. In practical applications, authentication, secure access, and data confidentiality for various functions such as over-the-air (OTA) firmware upgrades and remote diagnostics are achieved through these three services: ISO 14229-129, 27, or 84. Therefore, when the gateway receives messages from these three services, it can trigger the side information collection process. The collection trigger signal can be a high-level signal, or it can be understood as a signal different from the signal corresponding to the side information.

[0050] In practical applications, the side information generated can first be received by the Ethernet protocol stack module 21 and processed according to the third preset diagnostic protocol to realize the protocol conversion of the side information generated message, obtain the message to be parsed and send it to the diagnostic service parsing module 22 and the vehicle controller 4 under test. Then, the message to be parsed is parsed by the diagnostic service parsing module 22 to determine whether there is a message corresponding to the preset diagnostic service in the parsed message. If there is, the message to be parsed can be sent to the trigger signal generation module 23. Furthermore, when the trigger signal generation module 23 receives the message to be parsed, it can generate at least one acquisition trigger signal according to the acquisition trigger position information in the message to be parsed and send it to the oscilloscope 3.

[0051] Figure 4 This is a schematic diagram of the structure of a vehicle controller in a controller-oriented side information acquisition system provided by an embodiment of the present invention. Figure 4 As shown, the vehicle controller under test 4 includes a cryptographic algorithm execution module 41 and a side information acquisition module 42. The cryptographic algorithm execution module 41 receives the message to be parsed, determines the corresponding cryptographic algorithm to be tested based on the plaintext file in the message, and executes it. The side information acquisition module 42 collects side information to be processed during the execution of the cryptographic algorithm under test and sends it to the oscilloscope 3.

[0052] In this embodiment, the cryptographic algorithm to be tested can be an algorithm that encrypts the plaintext corresponding to the plaintext in the plaintext file. The information to be processed can be the energy consumption signal or electromagnetic signal generated during the operation of the cryptographic algorithm.

[0053] In practical applications, when a message to be parsed is sent to the vehicle controller 4 under test, the cryptographic algorithm running module 41 in the vehicle controller 4 under test can receive the message to be parsed and, based on the plaintext file in the message to be parsed, retrieve the cryptographic algorithm to be tested corresponding to the plaintext file from a number of cryptographic algorithms to be selected pre-deployed in the vehicle controller under test, and run the cryptographic algorithm to be tested. Furthermore, during the operation of the cryptographic algorithm to be tested, the side information acquisition module 42 collects the side information to be processed generated during the algorithm operation and sends the side information to be processed to the oscilloscope 3.

[0054] Furthermore, when the oscilloscope 3 receives the side information to be processed, it can convert the side information into a continuous digital signal that can realize the acquisition process. Then, based on at least one acquisition trigger signal, the starting position of the acquisition is determined, and the continuous digital signal is acquired based on the side information sampling frequency in the side information acquisition message. Thus, the target side information data is obtained. At this time, the target side information data may include at least one segment of side information data, and the starting point of each segment of side information data corresponds to the corresponding acquisition trigger signal. Finally, the target side information data and at least one acquisition trigger signal are sent to the side information acquisition terminal 1 so that the side information acquisition terminal 1 can store the target side information data and at least one acquisition trigger signal. At the same time, the target side information data can also be displayed based on the human-computer interaction interface module 11 in the side information acquisition terminal 1.

[0055] Optionally, the vehicle controller 4 under test is also used to generate a reply message and send it to the gateway 2; the gateway 2 is also used to send the reply message to the side information acquisition terminal 1.

[0056] Optionally, the human-machine interface 11 is also used to collect a side information collection quantity parameter when a target user is detected to input parameters on the display interface, so as to determine the number of times the side information collection system for the vehicle controller is run based on the side information collection quantity parameter.

[0057] This embodiment provides a side information acquisition system for a controller, including a side information acquisition terminal, a gateway, an oscilloscope, and a vehicle controller under test (VDT). The side information acquisition terminal is used to acquire a plaintext file, acquisition trigger location information, and a side information sampling frequency; based on the plaintext file and acquisition trigger location information, it generates a side information generation message and sends it to the gateway; and based on the side information sampling frequency, it generates a side information acquisition message and sends it to the oscilloscope. The gateway is used to receive the side information generation message, process it to obtain a message to be parsed and send it to the VDT; and based on the message to be parsed, it generates at least one acquisition trigger signal and sends it to the oscilloscope. The VDT is used to receive the message to be parsed and run the corresponding plaintext file in the message to be parsed. The system acquires the side information to be processed from the cryptographic algorithm under test and sends it to an oscilloscope. The oscilloscope receives the side information and processes it based on the side information acquisition message and at least one acquisition trigger signal to obtain target side information data. The target side information data and at least one acquisition trigger signal are then sent to the side information acquisition terminal. The side information acquisition terminal also receives the target side information data and displays it on the display interface. This solves the problem of being unable to locate the side information data segment of the cryptographic algorithm under test in the prior art. It realizes the acquisition of electromagnetic or energy side information in the encryption process of the vehicle controller. At the same time, it has good compatibility and can be applied to a variety of application scenarios. Furthermore, it achieves the effect of locating the side information data segment to be tested, thereby improving the side information acquisition efficiency and side channel analysis efficiency.

[0058] Example 2

[0059] Figure 5 This is a flowchart of a side information acquisition method for a vehicle controller provided in Embodiment 2 of the present invention. This method can be applied to the side information acquisition system for a vehicle controller provided in the above embodiments. (See also...) Figure 5 As shown, the method includes the following steps:

[0060] S210. Obtain plaintext files, acquisition trigger location information, and side information sampling frequency through the side information acquisition terminal; generate a side information generation message and send it to the gateway based on the plaintext files and acquisition trigger location information; and generate a side information acquisition message and send it to the oscilloscope based on the side information sampling frequency.

[0061] S220. Receive side information through the gateway to generate a message, process the side information generated message to obtain the message to be parsed and send it to the vehicle controller under test, and generate at least one acquisition trigger signal based on the message to be parsed and send it to the oscilloscope.

[0062] S230. Receive the message to be parsed through the vehicle under test controller, run the cryptographic algorithm to be tested corresponding to the plaintext file in the message to be parsed, obtain the information to be processed, and send it to the oscilloscope.

[0063] S240. Receive the side information to be processed through an oscilloscope, process the side information to be processed based on the side information acquisition message and at least one acquisition trigger signal to obtain target side information data, and send the target side information data and the at least one acquisition trigger signal to the side information acquisition terminal.

[0064] S250: Receive target side information data through the side information acquisition terminal and display it on the display interface.

[0065] The technical solution of this invention involves acquiring a plaintext file, acquisition trigger location information, and side information sampling frequency through a side information acquisition terminal. Based on the plaintext file and acquisition trigger location information, a side information generation message is generated and sent to a gateway. Additionally, based on the side information sampling frequency, a side information acquisition message is generated and sent to an oscilloscope. Then, the gateway receives the side information generation message and sends the plaintext file from the side information generation message to the vehicle controller under test. Furthermore, based on the acquisition trigger location information in the side information generation message, at least one acquisition trigger signal is generated and sent to the oscilloscope. Further, the vehicle controller under test receives the message to be parsed and runs a cryptographic algorithm corresponding to the plaintext file in the message to be parsed to obtain the side information to be processed and send it to... The oscilloscope then receives the side information to be processed and processes it based on the side information acquisition message and the at least one acquisition trigger signal to obtain target side information data. The target side information data and the at least one acquisition trigger signal are then sent to the side information acquisition terminal. Finally, the target side information data is received by the side information acquisition terminal and displayed on the display interface. This solves the problem in the prior art of being unable to locate the side information data segment of the cryptographic algorithm under test, and realizes the acquisition of electromagnetic or energy side information in the vehicle controller encryption process. It also has good compatibility and can be applied to various application scenarios. Furthermore, it achieves the effect of locating the side information data segment to be detected, thereby improving the efficiency of side information acquisition and side channel analysis.

[0066] Optionally, the side information acquisition terminal includes a human-computer interaction interface module, a parameter parsing module, a protocol stack module, and a command generation module. Correspondingly, when a target user's parameter input operation on the system interface is detected, the human-computer interaction interface module acquires a plaintext file, acquisition trigger location information, and side information sampling frequency, and sends them to the parameter parsing module. It is also used to display the target side information data. The parameter parsing module receives the plaintext file, acquisition trigger location information, and side information sampling frequency, parses the plaintext file and acquisition trigger location information to obtain generation configuration information, and parses the side information sampling frequency to obtain acquisition configuration information. The acquisition configuration information and the generation configuration information are then sent to the command generation module.

[0067] The command generation module receives the generation configuration information and the acquisition configuration information, and generates a side information generation control command and a side information acquisition control command based on the generation configuration information and the acquisition configuration information. The protocol stack module generates a side information generation message and sends it to the gateway based on the first preset diagnostic protocol and the side information generation control command, and generates a side information acquisition message and sends it to the oscilloscope based on the second preset diagnostic protocol and the side information acquisition control command.

[0068] Optionally, the side information acquisition terminal further includes a side information storage module; correspondingly, when a parameter input operation by a target user on the display interface is detected, the side information storage path parameters and side information storage format parameters are acquired through the human-computer interaction interface module and sent to the parameter parsing module; the side information storage path parameters and side information storage format parameters are received through the parameter parsing module, and the side information storage path parameters and side information storage format parameters are parsed to obtain the side information storage configuration information and sent to the side information storage module; the side information storage module receives the side information storage configuration information so that when the target side information data and the at least one acquisition trigger signal are received, the target side information data and the at least one acquisition trigger signal are stored based on the side information configuration information, and a corresponding storage file is generated.

[0069] Optionally, the acquisition trigger signal is used to locate the target-side information data.

[0070] Optionally, the gateway includes a trigger signal generation module, a diagnostic service parsing module, and an Ethernet protocol stack module. Correspondingly, the Ethernet protocol stack module receives the side information generation message, processes it based on a third preset diagnostic protocol to obtain a message to be parsed, and sends it to the diagnostic service parsing module and the vehicle controller under test. The diagnostic service parsing module receives the message to be parsed and parses it. When it detects that a message corresponding to a preset diagnostic service exists in the parsed message, it sends the message to be parsed to the trigger signal generation module. The trigger signal generation module receives the message to be parsed and, based on the acquisition trigger location information in the message to be parsed, generates at least one acquisition trigger signal and sends it to the oscilloscope.

[0071] Optionally, the vehicle controller under test includes a cryptographic algorithm execution module and a side information acquisition module. Accordingly, the cryptographic algorithm execution module receives the message to be parsed, and determines and runs the cryptographic algorithm to be tested corresponding to the plaintext file based on the plaintext file in the message to be parsed; the side information acquisition module collects the side information to be processed during the operation of the cryptographic algorithm under test and sends it to the oscilloscope.

[0072] Optionally, a response message is generated by the vehicle controller under test and sent to the gateway; the gateway is also used to send the response message to the side information acquisition terminal.

[0073] Optionally, the side information acquisition terminal is connected to the gateway via an in-vehicle Ethernet; the side information acquisition terminal is connected to the oscilloscope via USB; and the gateway is connected to the vehicle controller under test via an in-vehicle Ethernet or an in-vehicle CAN bus.

[0074] Optionally, when the human-machine interface module detects that the target user has input parameters on the display interface, it collects a side information collection quantity parameter to determine the number of times the side information collection system for the vehicle controller is run based on the side information collection quantity parameter.

[0075] Example 3

[0076] Figure 6A schematic diagram of an electronic device 10 that can be used to implement embodiments of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0077] like Figure 6 As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 may also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0078] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0079] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as side information acquisition methods for vehicle controllers.

[0080] In some embodiments, the side-by-side information acquisition method for a vehicle controller may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the side-by-side information acquisition method for a vehicle controller described above may be performed. Alternatively, in other embodiments, processor 11 may be configured to perform the side-by-side information acquisition method for a vehicle controller by any other suitable means (e.g., by means of firmware).

[0081] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0082] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0083] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0084] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0085] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0086] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0087] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0088] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A side information collection system for a vehicle controller, characterized by, include: The components include a side-side information acquisition terminal, a gateway, an oscilloscope, and the vehicle controller under test. The side information acquisition terminal is used to acquire plaintext files, acquisition trigger location information, and side information sampling frequency, and based on the plaintext files and the acquisition trigger location information, generate a side information generation message and send it to the gateway, and based on the side information sampling frequency, generate a side information acquisition message and send it to the oscilloscope. The gateway is configured to receive the side information generation message, process the side information generation message to obtain a message to be parsed and send it to the vehicle controller under test, and generate at least one acquisition trigger signal based on the message to be parsed and send it to the oscilloscope. The vehicle controller under test is used to receive the message to be parsed, run the cryptographic algorithm under test corresponding to the plaintext file in the message to be parsed, obtain the information to be processed, and send it to the oscilloscope; The oscilloscope is used to receive the side information to be processed, process the side information to be processed based on the side information acquisition message and the at least one acquisition trigger signal to obtain target side information data, and send the target side information data and the at least one acquisition trigger signal to the side information acquisition terminal. The side information acquisition terminal is also used to receive the target side information data and display it on the display interface; The side information acquisition terminal includes a human-computer interaction interface module, a parameter parsing module, a protocol stack module, and a command generation module, wherein... The human-computer interaction interface module is used to collect plaintext files, collect trigger location information and side information sampling frequency when it detects that the target user has performed parameter input operations on the system interface, and send them to the parameter parsing module. It is also used to display the target side information data. The parameter parsing module is used to receive the plaintext file, the acquisition trigger location information, and the side information sampling frequency, and to parse the plaintext file and the acquisition trigger location information to obtain the generation configuration information, and to parse the side information sampling frequency to obtain the acquisition configuration information, and to send the acquisition configuration information and the generation configuration information to the command generation module. The command generation module is used to receive the generation configuration information and the acquisition configuration information, and generate a side information generation control command based on the generation configuration information, and generate a side information acquisition control command based on the acquisition configuration information. The protocol stack module is used to generate a side information generation message and send it to the gateway based on a first preset diagnostic protocol and the side information generation control command, and to generate a side information acquisition message and send it to the oscilloscope based on a second preset diagnostic protocol and the side information acquisition control command. The side information acquisition terminal further includes: a side information storage module, wherein... The human-computer interaction interface module is further configured to collect side information storage path parameters and side information storage format parameters when a target user is detected to input parameters on the display interface, and send them to the parameter parsing module; wherein, the side information storage format is a CSV file format; The parameter parsing module is used to receive the side information storage path parameters and the side information storage format parameters, and parse the side information storage path parameters and the side information storage format parameters to obtain the side information storage configuration information and send it to the side information storage module. The side information storage module is used to receive the side information storage configuration information, so that when the target side information data and the at least one acquisition trigger signal are received, the module stores the target side information data and the at least one acquisition trigger signal based on the side information configuration information, and generates a corresponding storage file.

2. The system according to claim 1, characterized in that, The acquisition trigger signal is used to locate the target-side information data.

3. The system according to claim 1, characterized in that, The gateway includes a trigger signal generation module, a diagnostic service parsing module, and an Ethernet protocol stack module, wherein... The Ethernet protocol stack module is used to receive the side information generation message, process the side information generation message based on the third preset diagnostic protocol to obtain the message to be parsed, and send it to the diagnostic service parsing module and the vehicle controller under test. The diagnostic service parsing module is used to receive the message to be parsed and parse the message to be parsed. When it is detected that there is a message corresponding to a preset diagnostic service in the parsed message to be parsed, the message to be parsed is sent to the trigger signal generation module. The trigger signal generation module is used to receive the message to be parsed, and based on the acquisition trigger position information in the message to be parsed, generate at least one acquisition trigger signal and send it to the oscilloscope.

4. The system according to claim 1, characterized in that, The vehicle controller under test includes a cryptographic algorithm execution module and a side information acquisition module, wherein... The cryptographic algorithm execution module is used to receive the message to be parsed, and based on the plaintext file in the message to be parsed, determine the cryptographic algorithm to be tested corresponding to the plaintext file and run it; The side information acquisition module is used to acquire the side information to be processed and send it to the oscilloscope during the operation of the cryptographic algorithm under test.

5. The system according to claim 1, characterized in that, The vehicle controller under test is also used to generate a response message and send it to the gateway; The gateway is also used to send the reply message to the side information collection terminal.

6. The system according to claim 1, characterized in that, The side information acquisition terminal is connected to the gateway via vehicle Ethernet; the side information acquisition terminal is connected to the oscilloscope via USB; the gateway is connected to the vehicle controller under test via vehicle Ethernet or vehicle CAN bus.

7. The system according to claim 1, characterized in that, The human-machine interface module is also used to collect a side information collection quantity parameter when a target user is detected to input parameters on the display interface, so as to determine the number of times the side information collection system for the vehicle controller is run based on the side information collection quantity parameter.

8. A side-channel information acquisition device, characterized in that, include: The system acquires plaintext files, acquisition trigger location information, and side information sampling frequency through a side information acquisition terminal. Based on the plaintext files and the acquisition trigger location information, it generates a side information generation message and sends it to the gateway. It also generates a side information acquisition message based on the side information sampling frequency and sends it to the oscilloscope. The gateway receives the side information generation message, processes the side information generation message to obtain the message to be parsed and sends it to the vehicle controller under test; and, based on the message to be parsed, generates at least one acquisition trigger signal and sends it to the oscilloscope. The vehicle under test controller receives the message to be parsed, runs the cryptographic algorithm corresponding to the plaintext file in the message to be parsed, obtains the information to be processed, and sends it to the oscilloscope. The oscilloscope receives the side information to be processed, and processes the side information based on the side information acquisition message and the at least one acquisition trigger signal to obtain target side information data. The target side information data and the at least one acquisition trigger signal are then sent to the side information acquisition terminal. The target side information data is received by the side information acquisition terminal and displayed on the display interface; The side information acquisition terminal includes a human-computer interaction interface module, a parameter parsing module, a protocol stack module, and a command generation module; When a target user's parameter input operation on the system interface is detected, the system collects plaintext files, trigger location information, and side information sampling frequency through the human-computer interaction interface module, and sends them to the parameter parsing module. The system is also used to display the target side information data. The parameter parsing module receives the plaintext file, the acquisition trigger location information, and the side information sampling frequency, and parses the plaintext file and the acquisition trigger location information to obtain the generation configuration information. It also parses the side information sampling frequency to obtain the acquisition configuration information, and sends the acquisition configuration information and the generation configuration information to the command generation module. The command generation module receives the generation configuration information and the acquisition configuration information, and generates a side information generation control command based on the generation configuration information, and generates a side information acquisition control command based on the acquisition configuration information. The protocol stack module generates a side information generation message based on the first preset diagnostic protocol and the side information generation control command, and sends it to the gateway; and generates a side information acquisition message based on the second preset diagnostic protocol and the side information acquisition control command, and sends it to the oscilloscope. The side information acquisition terminal also includes: a side information storage module; When a target user's parameter input operation on the display interface is detected, the side information storage path parameters and side information storage format parameters are collected through the human-computer interaction interface module and sent to the parameter parsing module; wherein, the side information storage format is CSV file format; The parameter parsing module receives the side information storage path parameters and the side information storage format parameters, parses the side information storage path parameters and the side information storage format parameters to obtain the side information storage configuration information and sends it to the side information storage module. The side information storage module receives the side information storage configuration information so that when the target side information data and the at least one acquisition trigger signal are received, the target side information data and the at least one acquisition trigger signal are stored based on the side information configuration information, and a corresponding storage file is generated.

Images