Method and device for detecting information safety production consistency of vehicle and electronic equipment
Through the method of key injection and penetration testing, black and white box tests are carried out to verify the status and number of openings of the component debugging port, solving the problem that the existing technology cannot verify the closure of the debugging port, and realizing the production of component information safely consistency.
Patent Information
- Application Number
- CN202411153819.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-21
- Publication Date
- 2024-12-10
- Estimated Expiration
- 2044-08-21
AI Technical Summary
The existing technology cannot effectively verify whether the component debugging port is truly closed, resulting in the inability to ensure the production consistency of component information security.
Through key injection and penetration testing methods, black and white box tests are performed to determine the opening status and number of times of debugging ports, and security testing information is generated to verify the effective closing of debugging ports.
Ensure the production consistency of the security of component information, verify the effective closure of the debugging port through key injection and penetration testing, and solve the problem that cannot be verified in the existing technology.
Smart Images

Figure CN119109818A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of vehicle technology, and in particular to a method, device and electronic equipment for detecting the information safety production consistency of a vehicle. Background Art
[0002] With the in-depth development of Internet of Vehicles and information security technology, various information security attacks occur frequently, and the information security risks faced by vehicles are becoming more and more severe, especially for the debugging ports of various controllers of the whole vehicle, which are easily used as attack entrances for information security attacks, posing great information security risks, thereby reducing the safety of the vehicle. Therefore, a security strategy for the information security debugging ports of components is imperative.
[0003] In the related technologies, most of them use physical removal or software encryption to disable the debug port. However, after mass production, it is impossible to know whether the debug port of the component is truly and effectively closed. Therefore, the production consistency of the component information security cannot be guaranteed, which urgently needs to be solved. Summary of the invention
[0004] The present application provides a method, device and electronic device for detecting the information safety production consistency of a vehicle, so as to solve the problem that the detection method of the related art cannot verify whether the debugging port of the component is effectively closed, and thus cannot ensure the production consistency of the component information safety.
[0005] The first aspect of the present application provides a method for detecting the safety production consistency of vehicle information, comprising the following steps:
[0006] receiving a target component into which first key information is injected;
[0007] Performing a black box test on the target component to obtain the black box test result, and if the black box test result meets the first preset test condition, performing a white box test on the target component to generate the white box test result of the target component;
[0008] It is determined whether the white box test result satisfies a second preset condition, and if the white box test result satisfies the second preset condition, safety test information of the target component is generated.
[0009] According to an embodiment of the present application, if the black box test result satisfies a first preset test condition, it includes:
[0010] Opening the debugging port of the target component based on a preset opening number and using a preset key blasting method;
[0011] If the debugging port of the target component is not opened, it is determined that the black box test result meets the first preset test condition; otherwise, it is determined that the black box test result does not meet the first preset test condition.
[0012] According to an embodiment of the present application, the determining whether the white box test result satisfies a second preset condition includes:
[0013] Using the second key information to open the debugging port of the target component;
[0014] If the debugging port of the target component is opened, it is determined that the white box test result meets the second preset condition; otherwise, it is determined that the white box test result does not meet the second preset test condition.
[0015] According to an embodiment of the present application, determining whether the white box test result satisfies a second preset condition further includes:
[0016] Determine whether a preset opening number of the debugging port of the target component is greater than a preset opening number threshold;
[0017] If the preset opening times is greater than the preset opening times threshold, the opening request of the debug port of the target component is closed, and it is determined that the white box test result meets the second preset condition.
[0018] According to one embodiment of the present application, before receiving the target component injected with the first key information, the method further includes:
[0019] Reading the serial number of the target component;
[0020] The first key information and the second key information of the target component are generated according to the serial number.
[0021] According to the detection method of vehicle information safety production consistency of the embodiment of the present application, a target component injected with the first key information is received, and a black box test is performed on the target component to obtain a black box test result. If the black box test result meets the first preset test condition, a white box test is performed on the target component to generate a white box test result of the target component. If the white box test result meets the second preset condition, the security test information of the target component is generated. Thus, the problem that the detection method of the related art cannot verify whether the debugging port of the component is effectively closed, and thus cannot ensure the production consistency of the component information security is solved. The effective closure of the debugging port is verified by performing key injection and penetration testing on the component, thereby ensuring the production consistency of the component information security.
[0022] A second aspect of the present application provides a device for detecting the safety production consistency of vehicle information, including:
[0023] A receiving module, used for receiving a target component injected with the first key information;
[0024] A testing module, configured to perform a black box test on the target component to obtain the black box test result, and if the black box test result satisfies a first preset test condition, perform a white box test on the target component to generate a white box test result of the target component;
[0025] A generating module is used to determine whether the white box test result meets a second preset condition, and if the white box test result meets the second preset condition, generate safety test information of the target component.
[0026] According to one embodiment of the present application, the test module is specifically used for:
[0027] Opening the debugging port of the target component based on a preset opening number and using a preset key blasting method;
[0028] If the debugging port of the target component is not opened, it is determined that the black box test result meets the first preset test condition; otherwise, it is determined that the black box test result does not meet the first preset test condition.
[0029] According to one embodiment of the present application, the generating module is specifically used for:
[0030] Using the second key information to open the debugging port of the target component;
[0031] If the debugging port of the target component is opened, it is determined that the white box test result meets the second preset condition; otherwise, it is determined that the white box test result does not meet the second preset test condition.
[0032] According to one embodiment of the present application, the generating module is further used to:
[0033] Determine whether a preset opening number of the debugging port of the target component is greater than a preset opening number threshold;
[0034] If the preset opening times is greater than the preset opening times threshold, the opening request of the debug port of the target component is closed, and it is determined that the white box test result meets the second preset condition.
[0035] According to one embodiment of the present application, before receiving the target component injected with the first key information, the receiving module is further used to:
[0036] Reading the serial number of the target component;
[0037] The first key information and the second key information of the target component are generated according to the serial number.
[0038] According to the detection device for the production consistency of vehicle information security of the embodiment of the present application, the target component into which the first key information is injected is received, and a black box test is performed on the target component to obtain a black box test result. If the black box test result meets the first preset test condition, a white box test is performed on the target component to generate a white box test result of the target component. If the white box test result meets the second preset condition, the security test information of the target component is generated. Thus, the problem that the detection method of the related art cannot verify whether the debugging port of the component is effectively closed, and thus cannot ensure the production consistency of the information security of the component is solved. The effective closure of the debugging port is verified by performing key injection and penetration testing on the component, thereby ensuring the production consistency of the information security of the component.
[0039] The third aspect of the present application provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement a method for detecting the information safety production consistency of a vehicle as described in the above embodiment.
[0040] A fourth aspect of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the method for detecting the information safety production consistency of a vehicle as described in the above embodiment.
[0041] A fifth aspect of the present application provides a computer program product, including a computer program, wherein the computer program is executed to implement the vehicle information safety production consistency detection method described in the above embodiment.
[0042] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS
[0043] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:
[0044] Figure 1 A flowchart of a method for detecting the consistency of vehicle information safety production provided according to an embodiment of the present application;
[0045] Figure 2 A specific control diagram of component debugging port safety detection according to an embodiment of the present application;
[0046] Figure 3 This is an example diagram of a detection device for vehicle information safety production consistency according to an embodiment of the present application;
[0047] Figure 4 Schematic diagram of the structure of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION
[0048] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.
[0049] The following describes the detection method, device and electronic device of the information safety production consistency of the vehicle of the embodiment of the present application with reference to the accompanying drawings. In view of the problem that the detection method of the related art mentioned in the above background technology cannot verify whether the debugging port of the component is effectively closed, and thus cannot ensure the production consistency of the information security of the component, the present application provides a detection method of the information safety production consistency of the vehicle, in which a black box test result is obtained, and if the black box test result meets the first preset test condition, a white box test is performed on the target component to generate the white box test result of the target component, and if the white box test result meets the second preset condition, the security test information of the target component is generated. Thus, the problem that the detection method of the related art cannot verify whether the debugging port of the component is effectively closed, and thus cannot ensure the production consistency of the information security of the component is solved, and the effective closure of the debug port is verified by the method of key injection and penetration testing on the component, thereby ensuring the production consistency of the information security of the component.
[0050] Specifically, Figure 1 A flowchart of a method for detecting the consistency of vehicle information safety production provided in an embodiment of the present application.
[0051] like Figure 1 As shown, the method for detecting the information safety production consistency of the vehicle includes the following steps:
[0052] In step S101, a target component into which first key information is injected is received.
[0053] According to an embodiment of the present application, before receiving the target component injected with the first key information, it also includes: reading the serial number of the target component; generating the first key information and the second key information of the target component according to the serial number.
[0054] Specifically, in order to improve the safety of vehicles (for example, the development of vehicle functions should be based on regulations first, and meet regulatory requirements such as the EU R155 regulation and domestic GB vehicle information security technical requirements), strengthen the consistency of the production of target vehicle parts (for example, ensure that the target parts produced and installed are compliant parts, and there will be no production consistency non-compliance issues in the after-sales market) and improve the technological sense of vehicle manufacturing (for example, to meet daily needs and ensure driving safety), this application implements a vehicle information security consistency detection scheme, which mainly includes a key injection device, a penetration testing tool (penetration device) and a target component.
[0055] Among them, the key injection device is used to inject keys into the target components on the production line, and supports synchronous transmission of the key information of the target components to the penetration device, and supports information feedback showing the key injection results; the penetration testing tool is mainly used to perform penetration testing on the target components, such as performing key blasting black box testing on the target components, and feeding back the results of the penetration testing. At the same time, it can receive the key information of the target components sent by the key injection device to support white box testing on the target component equipment, and can display the results of the white box testing. At the same time, it supports exiting the penetration testing mode, and the target components exit the debug port mode at the same time. After exiting the penetration testing mode, the collected key information is automatically cleared to ensure the security of the key and prevent it from being leaked; the component (i.e., the target component) is the unit under test for black box testing and white box testing. After the test is completed, the debugging mode of the component debug port can be exited, so that the key authentication needs to be re-performed when entering the debugging mode next time.
[0056] Specifically, if Figure 2 As shown, when the target component of the embodiment of the present application is undergoing a safety production consistency test, first, the target component enters the component key injection station, and the SN (Serial Number) number of the target component is read by the key injection device. The key injection device generates the first key information (private key information) and the second key information (public key information) of the target component through the SN number and the key algorithm. The first key information and the second key information are the unique passwords for the target component test; secondly, the first key information, that is, the private key information, is injected into the target component through the key injection device, and the second key information, that is, the public key information, is encrypted and sent to the penetration testing tool in a secure transmission manner; finally, after receiving the first key information injection request, the target component activates the debug port closing function of the target component. At this time, the debug port of the target component is closed, and after the debug port of the target component is closed, the internal state of the target component is set and the activation information, that is, the second key information, is transmitted to the key injection device and displayed, and the subsequent debug port of the target component requires the second key information to be opened.
[0057] In step S102, a black box test is performed on the target component to obtain a black box test result. If the black box test result meets the first preset test condition, a white box test is performed on the target component to generate a white box test result of the target component.
[0058] According to one embodiment of the present application, if the black box test result meets the first preset test condition, it includes: opening the debug port of the target component based on a preset number of openings and using a preset key blasting method; if the debug port of the target component is not opened, then it is determined that the black box test result meets the first preset test condition, otherwise, it is determined that the black box test result does not meet the first preset test condition.
[0059] Among them, the first preset test condition, the preset key blasting method and the preset number of opening times can all be selected by those skilled in the art according to actual test requirements and are not specifically limited here.
[0060] Specifically, after the penetration testing tool receives the target component injected with the first key information, it is necessary to perform a penetration test on the target component, that is, a black box test (that is, a test based on the external functions of the software). After the target component is subjected to the information security black box test for a preset number of times (for example, 5 times), if the penetration test cannot open the debug port of the target component based on the preset key blasting method, then it means that the information security black box test of the target component is completed, that is, the black box test result meets the first preset test condition, thereby proving that information security measures have been implemented for the debug port of the component at this time; if the penetration test can open the debug port of the target component based on the preset key blasting method, then it is determined that the black box test result does not meet the first preset test condition, that is, the information security black box test of the target component is not completed, which means that there are certain security risks in the debug port, such as unauthorized access, data leakage, malware injection and other risks.
[0061] It should be noted that the preset key blasting method adopted in this application is an anti-blasting attack mode. To ensure the testing safety of the debug port, when the number of penetration tests on the target component reaches the preset number of opening times, the target component will no longer be able to make debug port opening requests within a short period of time, and will need to wait until the time limit is reached before making another opening request.
[0062] Among them, the key injection equipment and penetration testing tools need to maintain a certain interval, because when the anti-explosion mechanism of the target component is triggered, a certain time interval is required for the anti-explosion mechanism to reset.
[0063] Furthermore, after the black box test results of the embodiment of the present application meet the first preset test conditions, white box testing is performed on the target component (i.e., allowing test engineers to check the internal logic and structure of the software to ensure that all code paths are executed correctly) to generate white box test results for the target component.
[0064] In step S103, it is determined whether the white box test result meets the second preset condition. If the white box test result meets the second preset condition, safety test information of the target component is generated.
[0065] According to one embodiment of the present application, determining whether a white box test result satisfies a second preset condition includes: using second key information to open a debug port of a target component; if the debug port of the target component is opened, determining that the white box test result satisfies the second preset condition; otherwise, determining that the white box test result does not satisfy the second preset test condition.
[0066] According to one embodiment of the present application, determining whether a white box test result satisfies a second preset condition further includes: determining whether a preset number of opening times of the debug port of the target component is greater than a preset number of opening times threshold; if the preset number of opening times is greater than the preset number of opening times threshold, closing the opening request of the debug port of the target component, and determining that the white box test result satisfies the second preset condition.
[0067] Among them, the second preset condition and the preset opening times threshold can be selected by those skilled in the art according to actual test requirements and are not specifically limited here.
[0068] Specifically, in an embodiment of the present application, after the black box test of the information security of the target component is completed, the white box test of the information security of the target component is performed. First, the debugging port function of the target component is enabled by the penetration testing tool using the second key information transmitted by the key injection device, and the white box test of the information security of the target component is performed. If the debugging port of the target component is opened, it means that the white box test of the information security of the target component is successful, that is, the white box test result meets the second preset condition, and the security test information of the target component is generated, and the opening information is returned to the key injection device. If the debugging port of the target component is not opened, it is determined that the white box test result does not meet the second preset test condition.
[0069] Optionally, since the target component of the embodiment of the present application is designed with an anti-explosion attack mode, when the number of component penetration tests, that is, the preset number of opening times of the debug port reaches a preset opening number threshold, the target component will no longer be able to make a debug port opening request within a short period of time, and will need to make an opening request again after the time limit is reached. After triggering the preset opening number threshold, the penetration testing tool cannot try again, and the white box test is then determined to be successful, that is, the white box test result meets the second preset condition.
[0070] Furthermore, in the embodiment of the present application, after the white box test of the target component is successful, the target component exits the penetration test mode. At this time, the component debugging port is closed, and at the same time, the penetration test equipment deletes the second key information of the target component, that is, deletes the public key information, so that after the information security production consistency test is successful, the target component can enter the subsequent production and testing links.
[0071] It should be noted that the key injection device used in the embodiment of the present application needs to be isolated from the external network to ensure that the key information will not be communicated with the external network, thereby ensuring the security of key transmission. At the same time, the key needs to be securely stored and transmitted in encrypted form to ensure that the key information cannot be easily read.
[0072] According to the detection method of vehicle information safety production consistency of the embodiment of the present application, a target component injected with the first key information is received, and a black box test is performed on the target component to obtain a black box test result. If the black box test result meets the first preset test condition, a white box test is performed on the target component to generate a white box test result of the target component. If the white box test result meets the second preset condition, the security test information of the target component is generated. Thus, the problem that the detection method of the related art cannot verify whether the debugging port of the component is effectively closed, and thus cannot ensure the production consistency of the component information security is solved. The effective closure of the debugging port is verified by performing key injection and penetration testing on the component, thereby ensuring the production consistency of the component information security.
[0073] Next, a device for detecting the information safety production consistency of a vehicle proposed in an embodiment of the present application will be described with reference to the accompanying drawings.
[0074] Figure 3 It is a block diagram of a device for detecting the information safety production consistency of a vehicle according to an embodiment of the present application.
[0075] like Figure 3 As shown, the vehicle information safety production consistency detection device 10 includes: a receiving module 100, a testing module 200 and a generating module 300.
[0076] The receiving module 100 is used to receive a target component into which the first key information is injected;
[0077] The testing module 200 is used to perform a black box test on the target component to obtain a black box test result. If the black box test result satisfies a first preset test condition, a white box test is performed on the target component to generate a white box test result of the target component.
[0078] The generating module 300 is used to determine whether the white box test result meets the second preset condition, and if the white box test result meets the second preset condition, generate the safety test information of the target component.
[0079] According to one embodiment of the present application, the test module 200 is specifically used for:
[0080] Open the debugging port of the target component based on a preset opening number and using a preset key blasting method;
[0081] If the debugging port of the target component is not opened, it is determined that the black box test result meets the first preset test condition; otherwise, it is determined that the black box test result does not meet the first preset test condition.
[0082] According to one embodiment of the present application, the generating module 300 is specifically used for:
[0083] Using the second key information to open the debug port of the target component;
[0084] If the debugging port of the target component is turned on, it is determined that the white box test result meets the second preset condition; otherwise, it is determined that the white box test result does not meet the second preset test condition.
[0085] According to one embodiment of the present application, the generating module 300 is further used for:
[0086] Determine whether the preset opening times of the debugging port of the target component is greater than the preset opening times threshold;
[0087] If the preset opening times is greater than the preset opening times threshold, the opening request of the debug port of the target component is closed, and it is determined that the white box test result meets the second preset condition.
[0088] According to one embodiment of the present application, before receiving the target component injected with the first key information, the receiving module 100 is further used to:
[0089] Read the serial number of the target component;
[0090] The first key information and the second key information of the target component are generated according to the serial number.
[0091] According to the detection device for the production consistency of vehicle information security of the embodiment of the present application, the target component into which the first key information is injected is received, and a black box test is performed on the target component to obtain a black box test result. If the black box test result meets the first preset test condition, a white box test is performed on the target component to generate a white box test result of the target component. If the white box test result meets the second preset condition, the security test information of the target component is generated. Thus, the problem that the detection method of the related art cannot verify whether the debugging port of the component is effectively closed, and thus cannot ensure the production consistency of the information security of the component is solved. The effective closure of the debugging port is verified by performing key injection and penetration testing on the component, thereby ensuring the production consistency of the information security of the component.
[0092] Figure 4 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. The electronic device may include:
[0093] Memory 401 , processor 402 , and a computer program stored in the memory 401 and executable on the processor 402 .
[0094] When the processor 402 executes the program, the method for detecting the safety production consistency of the vehicle information provided in the above embodiment is implemented.
[0095] Furthermore, the electronic device further comprises:
[0096] The communication interface 403 is used for communication between the memory 401 and the processor 402 .
[0097] The memory 401 is used to store computer programs that can be executed on the processor 402 .
[0098] The memory 401 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.
[0099] If the memory 401, the processor 402 and the communication interface 403 are implemented independently, the communication interface 403, the memory 401 and the processor 402 can be connected to each other through a bus and communicate with each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 4 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.
[0100] Optionally, in a specific implementation, if the memory 401, the processor 402 and the communication interface 403 are integrated on a chip, the memory 401, the processor 402 and the communication interface 403 can communicate with each other through an internal interface.
[0101] The processor 402 may be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application.
[0102] This embodiment also provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the above-mentioned method for detecting the information safety production consistency of a vehicle is implemented.
[0103] This embodiment also provides a computer program product, including a computer program, which is executed to implement the vehicle information safety production consistency detection method of the above embodiment.
[0104] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or N embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.
[0105] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include at least one of the features. In the description of this application, "N" means at least two, such as two, three, etc., unless otherwise clearly and specifically defined.
[0106] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, fragment or portion of code comprising one or more executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.
[0107] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purpose of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or N wirings (electronic devices), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or otherwise processing in a suitable manner if necessary, and then stored in a computer memory.
[0108] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiment, the N steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.
[0109] A person skilled in the art may understand that all or part of the steps in the above-mentioned embodiment method may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, which, when executed, includes one or a combination of the steps of the method embodiment.
[0110] In addition, each functional unit in each embodiment of the present application may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.
[0111] The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present application.
Claims
1. A method for detecting the consistency of vehicle information safety production, characterized in that: The following steps are involved: receiving a target component into which first key information is injected; Performing a black box test on the target component to obtain the black box test result, and if the black box test result meets the first preset test condition, performing a white box test on the target component to generate the white box test result of the target component; It is determined whether the white box test result satisfies a second preset condition, and if the white box test result satisfies the second preset condition, safety test information of the target component is generated.
2. The method according to claim 1, characterized in that If the black box test result meets the first preset test condition, it includes: Opening the debugging port of the target component based on a preset opening number and using a preset key blasting method; If the debugging port of the target component is not opened, it is determined that the black box test result meets the first preset test condition; otherwise, it is determined that the black box test result does not meet the first preset test condition.
3. The method according to claim 1, characterized in that: The determining whether the white box test result satisfies a second preset condition includes: Using the second key information to open the debugging port of the target component; If the debugging port of the target component is opened, it is determined that the white box test result meets the second preset condition; otherwise, it is determined that the white box test result does not meet the second preset test condition.
4. The method according to claim 3, characterized in that The determining whether the white box test result satisfies a second preset condition further includes: Determine whether a preset opening number of the debugging port of the target component is greater than a preset opening number threshold; If the preset opening times is greater than the preset opening times threshold, the opening request of the debug port of the target component is closed, and it is determined that the white box test result meets the second preset condition.
5. The method according to claim 1, characterized in that Before receiving the target component injected with the first key information, the method further includes: Reading the serial number of the target component; The first key information and the second key information of the target component are generated according to the serial number.
6. A detection device for vehicle information safety production consistency, characterized in that: include: A receiving module, used for receiving a target component injected with the first key information; A testing module, configured to perform a black box test on the target component to obtain the black box test result, and if the black box test result satisfies a first preset test condition, perform a white box test on the target component to generate a white box test result of the target component; A generating module is used to determine whether the white box test result meets a second preset condition, and if the white box test result meets the second preset condition, generate safety test information of the target component.
7. The device according to claim 6, characterized in that The test module is specifically used for: Opening the debugging port of the target component based on a preset opening number and using a preset key blasting method; If the debugging port of the target component is not opened, it is determined that the black box test result meets the first preset test condition; otherwise, it is determined that the black box test result does not meet the first preset test condition.
8. The device according to claim 6, characterized in that The generating module is specifically used for: Using the second key information to open the debugging port of the target component; If the debugging port of the target component is opened, it is determined that the white box test result meets the second preset condition; otherwise, it is determined that the white box test result does not meet the second preset test condition.
9. An electronic device, characterized in that: include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement a method for detecting the information safety production consistency of a vehicle as described in any one of claims 1 to 5.
10. A computer-readable storage medium having a computer program stored thereon, characterized in that: The program is executed by a processor to implement a method for detecting the information safety production consistency of a vehicle as described in any one of claims 1 to 5.
Citation Information
Patent Citations
Safety test method and device of automobile information
CN106828362A
Vehicle-mounted network security communication test method and system, electronic equipment and storage medium
CN115576302A
Data security test method and device, vehicle and storage medium
CN117768354A
Network system penetration test method and device
CN118316654A
Pressure sensor using condensation effect
KR102675959B1
Cited By
Chip JTAG debugging port protection method and system, storage medium and electronic equipment
CN119760798A
A method, system, storage medium, and electronic device for protecting a chip's JTAG debug port.
CN119760798B
