A protection method and device for an embedded system

Abstract

The application provides a protection method and device of an embedded system, the method comprising: obtaining a group of data corresponding to the embedded system, the group of data corresponding to a same physical feature, the physical feature being related to the security of the embedded system; allocating continuous storage space to the group of data, and storing the group of data to the storage space; performing check calculation on the group of data to obtain a first check value corresponding to the group of data; in response to a service request of the embedded system, reading data from the storage space based on the first address and the last address of the storage space to obtain to-be-used data, performing check calculation on the to-be-used data to obtain a second check value; and protecting the embedded system based on at least the first check value and the second check value.

Description

Technical Field

[0001] This application relates to the field of vehicle power auxiliary components technology, and in particular to a protection method and device for an embedded system. Background Technology

[0002] With the development of computer technology, embedded systems can be applied in a variety of fields (such as automotive electronics, aerospace, etc.).

[0003] However, the complex application environment of embedded systems or the inherent defects of embedded systems may lead to the corruption of embedded system data, affecting the security of embedded systems. Summary of the Invention

[0004] To address the aforementioned technical problems, this application provides a protection method and apparatus for embedded systems, aiming to ensure the safe operation of embedded systems. The technical solution is as follows:

[0005] This application provides a protection method for an embedded system, including:

[0006] Obtain a set of data corresponding to the embedded system, wherein the set of data corresponds to the same physical feature, and the physical feature is related to the security of the embedded system;

[0007] Allocate contiguous storage space for the set of data, and store the set of data in the storage space;

[0008] Perform a verification calculation on the set of data to obtain the first verification value corresponding to the set of data;

[0009] In response to the service request of the embedded system, data is read from the storage space based on the first and last addresses of the storage space to obtain the data to be used, and the data to be used is verified to obtain a second verification value.

[0010] The embedded system is protected based at least on the first check value and the second check value.

[0011] Optionally, allocating contiguous storage space for the set of data and storing the set of data in the storage space includes:

[0012] The set of data is converted into a specified data set, and the specified data set requires contiguous storage space.

[0013] Allocate storage space to the specified data set to meet the storage space requirements;

[0014] Store the specified data set in a storage space that meets the storage requirements.

[0015] Optionally, the embedded system is protected based at least on the first check value and the second check value, including:

[0016] If the first verification value and the second verification value are equal, perform the logical operation corresponding to the business request based on the data to be used;

[0017] Back up the data to be used.

[0018] Optionally, the method further includes:

[0019] If the first verification value and the second verification value are not equal, the logical operation corresponding to the business request is performed based on the backup data or the data substitution value. The backup data comes from the set of data, and the data substitution value is an empirical value that can satisfy the business request of the embedded system.

[0020] Optionally, the method further includes:

[0021] Output a prompt message, which indicates that the first check value and the second check value are not equal;

[0022] The error count is accumulated to obtain a new error count, which is used to represent the number of times the first check value and the second check value are not equal;

[0023] If the new error count value exceeds the set error count threshold, determine whether the number of software resets of the embedded system exceeds the set reset number threshold.

[0024] If not, perform a software reset on the embedded system;

[0025] If so, disable the drivers related to the security of the embedded system.

[0026] Another aspect of this application provides a protection device for an embedded system, comprising:

[0027] An acquisition module is used to acquire a set of data corresponding to the embedded system, wherein the set of data corresponds to the same physical feature, and the physical feature is related to the security of the embedded system.

[0028] A storage module is used to allocate contiguous storage space for the set of data and store the set of data in the storage space;

[0029] The first verification calculation module is used to perform verification calculations on the set of data to obtain the first verification value corresponding to the set of data.

[0030] The second verification calculation module is used to respond to the business request of the embedded system, read data from the storage space based on the first address and the last address of the storage space to obtain the data to be used, perform verification calculation on the data to be used, and obtain a second verification value.

[0031] A protection module is used to protect the embedded system based at least on the first verification value and the second verification value.

[0032] Optionally, the storage module is specifically used for:

[0033] The set of data is converted into a specified data set, and the specified data set requires contiguous storage space.

[0034] Allocate storage space to the specified data set to meet the storage space requirements;

[0035] Store the specified data set in a storage space that meets the storage requirements.

[0036] Optionally, the protection module is specifically used for:

[0037] If the first verification value and the second verification value are equal, perform the logical operation corresponding to the business request based on the data to be used;

[0038] Back up the data to be used.

[0039] Optionally, the protection module is further configured to:

[0040] If the first verification value and the second verification value are not equal, the logical operation corresponding to the business request is performed based on the backup data or the data substitution value. The backup data comes from the set of data, and the data substitution value is an empirical value that can satisfy the business request of the embedded system.

[0041] Optionally, the protection module is further configured to:

[0042] Output a prompt message, which indicates that the first check value and the second check value are not equal;

[0043] The error count is accumulated to obtain a new error count, which is used to represent the number of times the first check value and the second check value are not equal;

[0044] If the new error count value exceeds the set error count threshold, determine whether the number of software resets of the embedded system exceeds the set reset number threshold.

[0045] If not, perform a software reset on the embedded system;

[0046] If so, disable the drivers related to the security of the embedded system.

[0047] In this application, a set of data corresponding to an embedded system is obtained. The set of data corresponds to the same physical feature. A contiguous storage space is allocated for the set of data, and the data is stored in the storage space. Verification calculation is performed on the set of data to obtain a first verification value. This allows the system to read data from the storage space without considering the length of the set of data or the size of the storage space. Instead, it responds to the business request of the embedded system by reading data from the storage space based on the first and last addresses to obtain the data to be used. Verification calculation is then performed on the data to be used to obtain a second verification value, simplifying the verification calculation process. Based on this, at least based on the first and second verification values, the embedded system is protected to ensure its safe operation. Attached Figure Description

[0048] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0049] Figure 1 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 1 of this application;

[0050] Figure 2 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 2 of this application;

[0051] Figure 3 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 3 of this application;

[0052] Figure 4 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 4 of this application;

[0053] Figure 5 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 5 of this application;

[0054] Figure 6 This is a schematic diagram of the structure of a protection device for an embedded system provided in this application. Detailed Implementation

[0055] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0056] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0057] Reference Figure 1 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 1 of this application. Figure 1 As shown, the method may include, but is not limited to, the following steps:

[0058] Step S101: Obtain a set of data corresponding to the embedded system. The set of data corresponds to the same physical feature, and the physical feature is related to the security of the embedded system.

[0059] In this embodiment, a set of data includes one or more data.

[0060] In this embodiment, a set of data corresponds to the same physical feature, which may include, but is not limited to, a set of data that can characterize the same physical feature. For example, an embedded system corresponds to a vehicle engine, the physical feature being the engine's crankshaft speed, and a set of data being the 20 consecutive crankshaft tooth cycles required to calculate the crankshaft speed.

[0061] A set of data corresponds to the same physical characteristic, and may include, but is not limited to, the correlation between a set of data and the same physical characteristic. For example, in an embedded system corresponding to a vehicle engine, the physical characteristic is the duty cycle of the drive pulse signal of the fuel metering unit on the engine. The set of data could be the current battery voltage value, the set current value, and the correction factor used to calculate the duty cycle of the pulse signal.

[0062] Step S102: Allocate contiguous storage space for a set of data and store the set of data in the storage space.

[0063] In this embodiment, a contiguous storage space is allocated to a group of data, and the data is stored in the storage space so that the addresses of the data in the storage space are contiguous. Based on this, the verification algorithm can focus only on the first and last addresses of the storage space, and can ignore the data length and the size of the storage space.

[0064] The size of contiguous storage space can be determined based on the storage space required for a set of data, and the size of contiguous storage space is not less than the storage space required for a set of data.

[0065] Step S103: Perform a verification calculation on a set of data to obtain the first verification value corresponding to the set of data.

[0066] This application does not limit the verification algorithm used to perform verification calculations on a set of data. For example, the verification algorithm may include, but is not limited to, the CRC (Cyclic Redundancy Check) algorithm.

[0067] In this embodiment, the parameters of the CRC algorithm (such as polynomial, initial value, XOR operation value of the result, input flip, output flip) can be configured as needed.

[0068] Step S104: In response to the business request of the embedded system, based on the first and last addresses of the storage space, read data from the storage space to obtain the data to be used, perform verification calculation on the data to be used, and obtain the second verification value.

[0069] The corresponding verification algorithm includes implementations of the CRC algorithm, and step S104 may include, but is not limited to:

[0070] S1041. In response to the business request of the embedded system, based on the first and last addresses of the storage space, data is read from the storage space in 8-bit lengths to obtain the data to be used. The data to be used is then checked using the CRC algorithm to obtain a second check value.

[0071] Step S105: Protect the embedded system based at least on the first check value and the second check value.

[0072] If there are multiple sets of data corresponding to an embedded system, the first and second check values ​​of each set of data can be obtained through steps S101-S104. Then, the embedded system is protected based on the first and second check values ​​of each set of data.

[0073] In this embodiment, a set of data corresponding to the embedded system is obtained. The set of data corresponds to the same physical feature. A contiguous storage space is allocated for the set of data, and the data is stored in the storage space. The set of data is then verified to obtain a first verification value. This allows the system to read data from the storage space without considering the length of the set of data or the size of the storage space. Instead, it responds to the business request of the embedded system by reading data from the storage space based on the first and last addresses of the storage space to obtain the data to be used. The data to be used is then verified to obtain a second verification value, simplifying the verification process. Based on this, at least based on the first and second verification values, the embedded system is protected to ensure its safe operation.

[0074] As another optional embodiment of this application, refer to Figure 2 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 2 of this application. This embodiment mainly refines step S102 in Embodiment 1 above, such as... Figure 2 As shown, step S102 may include, but is not limited to, the following steps:

[0075] Step S1021: Convert a set of data into a specified data set, the storage space requirement of which is to occupy contiguous storage space.

[0076] In this embodiment, for an implementation that corresponds to a set of data representing the same physical feature, step S1021 may include, but is not limited to:

[0077] S10211. Convert a set of data into an array.

[0078] In an implementation that associates a set of data with the same physical feature, step S1021 may include, but is not limited to:

[0079] S10212. Convert a set of data into a structure.

[0080] Step S1022: Allocate storage space that meets the storage space requirements for the specified data set.

[0081] Corresponding to step S10211, step S1022 may include, but is not limited to:

[0082] S10221. Allocate contiguous storage space for the array.

[0083] The corresponding steps S10212 and S1022 may include, but are not limited to:

[0084] S10222: Allocate contiguous storage space for the structure.

[0085] Step S1023: Store the specified data set in a storage space that meets the storage space requirements.

[0086] Corresponding to step S10221, step S1023 may include:

[0087] S10231. Store the array in a contiguous storage space.

[0088] Steps S10222 and S1023 may include:

[0089] S10232. Store the structure values ​​in a contiguous storage space.

[0090] In this embodiment, a set of data is converted into a specified data set, the specified data set requires a contiguous storage space, storage space that meets the storage space requirements is allocated to the specified data set, and the specified data set is stored in the storage space that meets the storage space requirements, thereby realizing the storage of a set of data into a contiguous storage space.

[0091] As another optional embodiment of this application, refer to Figure 3 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 3 of this application. This embodiment mainly refines step S105 in Embodiment 1 above, such as... Figure 3 As shown, step S105 may include, but is not limited to, the following steps:

[0092] Step S1051: Determine whether the first check value and the second check value are equal.

[0093] If so, proceed to step S1052.

[0094] Step S1052: Perform logical operations corresponding to the business request based on the data to be used.

[0095] If the first and second verification values ​​are equal, it means that the data to be used is safe and reliable, and logical operations corresponding to business requests can be performed based on the data to be used.

[0096] Step S1053: Back up the data to be used.

[0097] By backing up the data to be used, the embedded system can use the backed-up data when it is unable to obtain safe and reliable data, thus ensuring the stable operation of the embedded system.

[0098] As another optional embodiment of this application, refer to Figure 4 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 4 of this application. This embodiment mainly refines step S105 in Embodiment 1 above, such as... Figure 4 As shown, step S105 may include, but is not limited to, the following steps:

[0099] Step S1051: Determine whether the first check value and the second check value are equal.

[0100] If yes, proceed to step S1052; otherwise, proceed to step S1054.

[0101] Step S1052: Perform logical operations corresponding to the business request based on the data to be used.

[0102] Step S1053: Back up the data to be used.

[0103] Step S1054: Perform logical operations corresponding to the business request based on the backup data or data substitute value. The backup data comes from a set of data, and the data substitute value is an empirical value that can meet the business request of the embedded system.

[0104] In this embodiment, if the first verification value and the second verification value are not equal, it means that the data to be used is not safe and reliable. Logical operations corresponding to the business request can be performed based on backup data or data substitute values ​​to prevent sudden changes in a set of data from causing unsafe fluctuations in the embedded system and to ensure that the embedded system can operate stably.

[0105] As another optional embodiment of this application, refer to Figure 5 This is a flowchart illustrating a protection method for an embedded system provided in Embodiment 5 of this application. This embodiment mainly refines step S105 in Embodiment 1 above, such as... Figure 5 As shown, step S105 may include, but is not limited to, the following steps:

[0106] Step S1051: Determine whether the first check value and the second check value are equal.

[0107] If yes, proceed to step S1052; otherwise, proceed to step S1054.

[0108] Step S1052: Perform logical operations corresponding to the business request based on the data to be used.

[0109] Step S1053: Back up the data to be used.

[0110] Step S1054: Perform logical operations corresponding to the business request based on the backup data or data substitute value. The backup data comes from a set of data, and the data substitute value is an empirical value that can meet the business request of the embedded system.

[0111] Step S1055: Output a prompt message. The prompt message is used to indicate that the first check value and the second check value are not equal.

[0112] Step S1056: Accumulate the error count value to obtain a new error count value. The error count value is used to represent the number of times the first check value and the second check value are not equal.

[0113] Step S1057: If the new error count value exceeds the set error count threshold, determine whether the number of software resets of the embedded system exceeds the set reset number threshold.

[0114] The error count threshold and the reset count threshold can be set as needed, and are not restricted in this application.

[0115] If not, proceed to step S1058; if yes, proceed to step S1059.

[0116] Step S1058: Perform a software reset on the embedded system.

[0117] Step S1059: Disable drivers related to the security of the embedded system.

[0118] After disabling the drivers related to the security of the embedded system, the embedded system can enter a safe state.

[0119] In this embodiment, if the first checksum and the second checksum are not equal, it indicates that the data to be used is not secure and reliable. Logical operations corresponding to the business request can be performed based on backup data or data substitutes to prevent sudden changes in a set of data from causing insecure fluctuations in the embedded system. An alert message is then output, allowing for timely maintenance of the embedded system. Furthermore, if the new error count exceeds a set error count threshold, a software reset can be performed to attempt fault recovery. If the number of software resets exceeds a set reset count threshold, drivers related to embedded system security can be disabled to ensure a smooth transition to a secure state for the embedded system.

[0120] The following section describes a protection device for an embedded system provided in this application. The protection device for the embedded system described below can be referred to in correspondence with the protection method for the embedded system described above.

[0121] Please see Figure 6 The protection device for the embedded system includes: an acquisition module 100, a storage module 200, a first verification module 300, a second verification module 400, and a protection module 500.

[0122] The acquisition module 100 is used to acquire a set of data corresponding to the embedded system. The set of data corresponds to the same physical feature, and the physical feature is related to the security of the embedded system.

[0123] Storage module 200 is used to allocate contiguous storage space for a set of data and store the set of data in the storage space.

[0124] The first verification calculation module 300 is used to perform verification calculations on a set of data to obtain the first verification value corresponding to the set of data.

[0125] The second verification calculation module 400 is used to respond to the business request of the embedded system, read data from the storage space based on the first and last addresses of the storage space, obtain the data to be used, perform verification calculation on the data to be used, and obtain the second verification value.

[0126] The protection module 500 is used to protect the embedded system based on at least a first check value and a second check value.

[0127] Storage module 200 can be used specifically for:

[0128] Transform a set of data into a specified data set, where the storage space requirement for the specified data set is to occupy contiguous storage space;

[0129] Allocate storage space to a specified data set to meet its storage requirements;

[0130] Store the specified data set in a storage space that meets the storage requirements.

[0131] Protection module 500 can be used specifically for:

[0132] If the first check value and the second check value are equal, perform the logical operation corresponding to the business request based on the data to be used;

[0133] Back up the data to be used.

[0134] The protection module 500 can also be used for:

[0135] If the first check value and the second check value are not equal, the logical operation corresponding to the business request is performed based on the backup data or the data substitute value. The backup data comes from a set of data, and the data substitute value is an empirical value that can meet the business request of the embedded system.

[0136] The protection module 500 can also be used for:

[0137] Output a prompt message indicating that the first checksum and the second checksum are not equal.

[0138] The error count is accumulated to obtain a new error count, which is used to represent the number of times the first check value and the second check value are not equal;

[0139] If the new error count exceeds the set error count threshold, determine whether the number of software resets of the embedded system has exceeded the set reset number threshold.

[0140] If not, perform a software reset of the embedded system;

[0141] If so, disable drivers related to the security of the embedded system.

[0142] It should be noted that each embodiment focuses on describing the differences from other embodiments, and the same or similar parts between the embodiments can be referred to accordingly. For the device embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiments.

[0143] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0144] For ease of description, the above devices are described in terms of function, divided into various modules. Of course, in implementing this application, the functions of each module can be implemented in one or more software and / or hardware.

[0145] As can be seen from the above description of the embodiments, those skilled in the art can clearly understand that this application can be implemented by means of software plus necessary general-purpose hardware platforms. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in various embodiments or some parts of the embodiments of this application.

[0146] The above provides a detailed description of the protection method and apparatus for an embedded system provided in this application. Specific examples have been used to illustrate the principles and implementation methods of this application. The description of the above embodiments is only for the purpose of helping to understand the method and core ideas of this application. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of this application. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. A protection method for an embedded system, characterized in that, include: Obtain a set of data corresponding to the embedded system, wherein the set of data corresponds to the same physical feature, and the physical feature is related to the security of the embedded system; Allocate contiguous storage space for the set of data, and store the set of data in the storage space; Perform a verification calculation on the set of data to obtain the first verification value corresponding to the set of data; In response to the service request of the embedded system, data is read from the storage space based on the first and last addresses of the storage space to obtain the data to be used, and the data to be used is verified to obtain a second verification value. The embedded system is protected based at least on the first check value and the second check value.

2. The method according to claim 1, characterized in that, Allocating contiguous storage space for the set of data and storing the set of data in the storage space includes: The set of data is converted into a specified data set, and the specified data set requires contiguous storage space. Allocate storage space to the specified data set to meet the storage space requirements; Store the specified data set in a storage space that meets the storage requirements.

3. The method according to claim 1, characterized in that, The embedded system is protected based at least on the first check value and the second check value, including: If the first verification value and the second verification value are equal, perform the logical operation corresponding to the business request based on the data to be used; Back up the data to be used.

4. The method according to claim 3, characterized in that, The method further includes: If the first verification value and the second verification value are not equal, the logical operation corresponding to the business request is performed based on the backup data or the data substitution value. The backup data comes from the set of data, and the data substitution value is an empirical value that can satisfy the business request of the embedded system.

5. The method according to claim 4, characterized in that, The method further includes: Output a prompt message, which indicates that the first check value and the second check value are not equal; The error count is accumulated to obtain a new error count, which is used to represent the number of times the first check value and the second check value are not equal; If the new error count value exceeds the set error count threshold, determine whether the number of software resets of the embedded system exceeds the set reset number threshold. If not, perform a software reset on the embedded system; If so, disable the drivers related to the security of the embedded system.

6. A protection device for an embedded system, characterized in that, include: An acquisition module is used to acquire a set of data corresponding to the embedded system, wherein the set of data corresponds to the same physical feature, and the physical feature is related to the security of the embedded system. A storage module is used to allocate contiguous storage space for the set of data and store the set of data in the storage space; The first verification calculation module is used to perform verification calculations on the set of data to obtain the first verification value corresponding to the set of data. The second verification calculation module is used to respond to the business request of the embedded system, read data from the storage space based on the first address and the last address of the storage space to obtain the data to be used, perform verification calculation on the data to be used, and obtain a second verification value. A protection module is used to protect the embedded system based at least on the first verification value and the second verification value.

7. The apparatus according to claim 6, characterized in that, The storage module is specifically used for: The set of data is converted into a specified data set, and the specified data set requires contiguous storage space. Allocate storage space to the specified data set to meet the storage space requirements; Store the specified data set in a storage space that meets the storage requirements.

8. The apparatus according to claim 6, characterized in that, The protection module is specifically used for: If the first verification value and the second verification value are equal, perform the logical operation corresponding to the business request based on the data to be used; Back up the data to be used.

9. The apparatus according to claim 8, characterized in that, The protection module is also used for: If the first verification value and the second verification value are not equal, the logical operation corresponding to the business request is performed based on the backup data or the data substitution value. The backup data comes from the set of data, and the data substitution value is an empirical value that can satisfy the business request of the embedded system.

10. The apparatus according to claim 9, characterized in that, The protection module is also used for: Output a prompt message, which indicates that the first check value and the second check value are not equal; The error count is accumulated to obtain a new error count, which is used to represent the number of times the first check value and the second check value are not equal; If the new error count value exceeds the set error count threshold, determine whether the number of software resets of the embedded system exceeds the set reset number threshold. If not, perform a software reset on the embedded system; If so, disable the drivers related to the security of the embedded system.

Images