Electric bicycle communication test system
Through the comparison and analysis of the camouflage request and response traffic of the electric bicycle communication test system, the problem that the existing technology cannot detect multiple wireless communication methods of electric bicycles is solved, and the detection and protection of the communication security of electric bicycles is realized, ensuring the safety of user data sex.
Patent Information
- Application Number
- CN202411258714.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-09
- Publication Date
- 2024-12-17
AI Technical Summary
Existing communication testing and evaluation products cannot effectively detect the various wireless communication methods of electric bicycles and cannot realize true safety detection functions, resulting in insufficient communication safety of electric bicycles.
An electric bicycle communication testing system was designed, including the node of the equipment under test, the camouflage communication node and the communication node. Through the comparison and analysis of camouflage request and response traffic, the communication security of the electric bicycle is detected, and data analysis and calibration are carried out when the attack fails. Verify to ensure data integrity.
It realizes accurate detection and protection of the communication safety of electric bicycles, improves the communication safety protection capabilities of electric bicycles, and ensures the security and privacy of user data.
Smart Images

Figure CN119155084A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of communication testing, and in particular, to an electric bicycle communication testing system. Background Art
[0002] At present, with the development of networking technology, electric bicycles have also added a large number of IoT application scenarios. These electric bicycles use Bluetooth, WiFi and other wireless transmission methods to transmit data. However, due to the limitations of electric bicycles, protection measures are limited, and they are easily interfered with or even disguised. In addition, there are many security weaknesses in various communication protocols. Criminals can inject malicious information into the wireless network to make the electric bicycle ineffective or manipulated. In the use environment of electric bicycles, the security of electric bicycle communications is the cornerstone of the entire protection system. However, electric bicycles on the current market often overemphasize cost-effectiveness and ease of operation, while ignoring the importance of their safety performance. This results in the electric bicycle being extremely vulnerable to illegal intrusion and manipulation once its communications are cracked. Therefore, in order to ensure the security of electric bicycles during the communication process, a comprehensive network security capability assessment must be conducted before the electric bicycles are put into use; The above-mentioned existing technical solutions have the following defects: the current communication test and evaluation products are aimed at PC and switch products, which are far from the actual situation of electric bicycles, and the communication means are relatively limited, which is inconsistent with the various wireless communication methods of electric bicycles. The traditional testing methods cannot truly realize the safety detection function. Summary of the invention
[0003] In order to make up for the above shortcomings, the present application provides an electric bicycle communication test system, which aims to improve the problem that the existing means are not compatible with the various wireless communication methods of electric bicycles and cannot achieve safety detection functions.
[0004] The present application embodiment provides an electric bicycle communication test system, comprising: The device node under test obtains the transceiver traffic of the device node under test in a normal communication environment; and analyzes and classifies the transceiver traffic to finally obtain requests and responses for various operations; Disguise the communication node, forge a fake request by disguising the communication node, and obtain the response traffic in real time after sending the fake request; The communication node compares and analyzes the response traffic of the communication node and the disguised communication through an algorithm to complete the communication security detection of the electric bicycle to be tested; if the comparison is consistent, it is judged that the attack of the disguised communication node on the electric bicycle to be tested is successful, and the disguised communication node and communication data are stored in the vulnerability library; if the comparison is inconsistent or there is no response, it is judged that the attack of the disguised communication node on the electric bicycle to be tested has failed.
[0005] By comparing and analyzing the response traffic of the communication node and the disguised communication, the communication security of the electric bicycle under test can be accurately detected. If the response of the disguised communication node is consistent with the real communication, the attack is judged to be successful, and the disguised communication node and communication data are stored in the vulnerability library for subsequent tracking and repair. If the comparison is inconsistent or there is no response, the attack fails, and the system can promptly remind and protect the electric bicycle under test from potential threats. This method effectively improves the communication security protection capability of electric bicycles and ensures the security and privacy of user data.
[0006] In a preferred embodiment of the present invention, if it is determined that the attack on the disguised communication node has failed, the communication data is parsed and analyzed, and a data tampering tool is used to modify the data for re-verification. At the same time, the transmission data is delayed and interrupted to confirm that the communication data has a communication integrity verification mechanism to achieve integrity protection of data transmission.
[0007] A specific security mechanism is used to determine whether the attack of disguising the communication node has failed. If the attack fails, the system will start the parsing and analysis process of the communication data. The system uses data tampering tools to modify the data for re-verification, and implements data delay and interruption processing to ensure the integrity and accuracy of the communication data. These measures together constitute a communication integrity verification mechanism, which effectively protects the integrity of data transmission, thereby improving the security protection capabilities of the entire communication network.
[0008] In a preferred embodiment of the present invention, it also includes a processor, at least one processor, and at least one communication-connected memory; the memory stores a computer program executed by the processor, and the computer program is executed by the processor so that the processor can perform electric bicycle communication safety detection.
[0009] The processor interacts with the memory through a communication connection. The memory stores a computer program, which is executed by the processor and is used to implement communication security detection of electric bicycles. By executing the program, the processor can detect whether there are security risks in the communication system of the electric bicycle, such as data encryption, communication protocol consistency, etc., thereby verifying the security of the electric bicycle during the network communication process, which can effectively improve the safety of the use of the electric bicycle.
[0010] In a preferred embodiment of the present invention, a device access gateway node is further included, the device node under test maintains connection with the device access gateway node, transmits data packets of the device node under test, and the user initiates a query request to the device server under test through the communication node.
[0011] The device node under test maintains a stable connection with the device access gateway node to ensure smooth transmission of data packets. During the transmission process, the communication node serves as the hub of data transmission and is responsible for receiving and forwarding query requests from the user end. When the user initiates a query request to the device server under test through the communication node, the device server under test will respond quickly and provide the required information. This design enables users to easily obtain real-time data of the device node under test, thereby realizing real-time monitoring and remote management of the device status.
[0012] In a preferred embodiment of the present invention, the device node under test is equipped with a power supply module and a networking module, the networking module is connected to a gateway, and the data information uploaded by the device node under test is transmitted via a wireless access node gateway.
[0013] The device node under test has power supply and networking functions. The power supply module ensures stable operation, and the networking module is wirelessly connected to the gateway. The node can upload data information to the gateway and use wireless access technology to connect to the external network, thereby completing remote data transmission and monitoring.
[0014] In a preferred embodiment of the present invention, it also includes a traffic mirroring node, which obtains the data packet through the mirroring gateway traffic; after the disguised communication node obtains the legal access authentication information through the communication node, it disguises itself as the communication node and accesses the network to receive the request.
[0015] The traffic mirror node is responsible for obtaining data packets through the mirror gateway. It can capture and mirror all data packets passing through its gateway, thereby achieving comprehensive monitoring of traffic. The disguised communication node first obtains legal access authentication information through the communication node in order to obtain legal network access rights. After obtaining this information, the disguised communication node will disguise itself as a communication node and then access the network to conduct various communication activities. This mechanism allows the disguised communication node to freely access and manipulate network resources without arousing suspicion, which facilitates subsequent data processing and analysis.
[0016] In a preferred embodiment of the present invention, after the disguised communication node successfully accesses the network, it intercepts the messages transmitted in the communication, replays the intercepted messages and the specific stage of the gateway communication protocol of the device accessing the gateway node, or tampers with the variable fields in the message, thereby affecting the accuracy of the database monitoring data, thereby realizing the testing of the electric bicycle.
[0017] After successfully accessing the network, the camouflaged node will secretly intercept messages transmitted through the network. These messages should be sent directly to the gateway to maintain normal communication between the gateway and the database. The camouflaged node replays the intercepted messages at a specific stage, causing the information received by the gateway to differ from the original information sent, thereby interfering with the accurate communication between the gateway and the database. At the same time, the camouflaged node also has the ability to tamper with the variable fields in the intercepted messages, and further artificially adjust the message content, aiming to destroy the integrity and authenticity of the data, causing deviations in the data monitored by the database, and thus facilitating the testing of electric bicycles. In this covert way, the camouflaged node successfully affected the accuracy of the database monitoring data without being noticed.
[0018] In a preferred embodiment of the present invention, the traffic mirroring node obtains the data packet through the mirroring gateway traffic, and implements the data encryption and decryption function through software.
[0019] The node has the data encryption and decryption function implemented by software, and can encrypt or decrypt the received data packets. In this way, the traffic mirroring node not only realizes the effective mirroring of gateway traffic, but also ensures the security and privacy of data during transmission; making the traffic mirroring node applicable to scenarios where data transmission security needs to be protected.
[0020] In a preferred embodiment of the present invention, the device node under test is connected to the communication node, and the device node under test is accessed through a normal authorized communication device and user, and is recorded and stored at the same time. The communication node accesses a third-party certificate to obtain transmission data, and pre-processes the obtained data information so that the operator can understand the content of the transmission data in a timely manner. Other information that fails to obtain the transmission data is similarly operated and associated with the data packet, and the data is marked and transmitted to the disguised communication node for processing.
[0021] In a preferred embodiment of the present invention, when the communication data of the disguised communication node is abnormal, it is marked and the abnormal data is transmitted to the communication disguised node, and further analysis is performed to determine the cause according to the abnormal situation, and communication is attempted again. When the communication abnormality of the disguised communication node is detected, the communication disguised node gives various prompts according to different abnormal situations, and the user can modify the communication message according to the set rules, or manually intervene to modify the communication message, and prompt the user to handle the abnormal communication according to different situations. Beneficial Effects
[0022] The present invention establishes an electric bicycle test environment to form an environment in which all communications are completely analyzable. Through testing in this environment, the communication data features of the tested electric bicycle can be further classified and extracted, thereby achieving the ability to distinguish the tested signal features in a complex wireless communication environment.
[0023] The present invention adopts a system of multiple communication monitoring to implement network access authentication, communication security and transmission integrity tests. It is a more advanced and targeted security assessment method to meet the special safety needs of electric bicycles, thereby effectively improving the safety of the entire electric bicycle. It normalizes the signal for specific test items, avoiding the uncertainty of fuzzy testing and the situation where it is impossible to determine whether a problem exists. BRIEF DESCRIPTION OF THE DRAWINGS
[0024] In order to more clearly illustrate the technical solutions of the implementation methods of the present application, the drawings required for use in the implementation methods will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.
[0025] Figure 1 It is a schematic diagram of an electric bicycle communication test system provided in an embodiment of the present application. DETAILED DESCRIPTION
[0026] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be directly connected or indirectly connected through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.
[0027] In the present invention, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may include that the first and second features are in direct contact, or may include that the first and second features are not in direct contact but are in contact through another feature between them. Moreover, a first feature being "above", "above" and "above" a second feature includes that the first feature is directly above and obliquely above the second feature, or simply indicates that the first feature is higher in level than the second feature. A first feature being "below", "below" and "below" a second feature includes that the first feature is directly below and obliquely below the second feature, or simply indicates that the first feature is lower in level than the second feature.
[0028] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.
[0029] See also Figure 1 , the present invention provides an electric bicycle communication test system, including a device node under test, a camouflage communication node and a communication node; The receiving and sending traffic of the node of the device under test in a normal communication environment is obtained; at the same time, the receiving and sending traffic is analyzed and classified, and finally the requests and responses of various operations are obtained; a similar pseudo-request is forged by disguising the communication node, and the response traffic is obtained in real time after the pseudo-request is issued, and then the response traffic of the communication node and the disguised communication is automatically compared and analyzed through the algorithm to complete the communication security detection of the electric bicycle under test; if the comparison is consistent, it is judged that the attack of the disguised communication node on the electric bicycle under test is successful, and the disguised communication node and communication data are stored in the vulnerability library; if the comparison is inconsistent or there is no response, it is judged that the attack of the disguised communication node on the electric bicycle under test has failed.
[0030] In a specific embodiment of the present invention, if it is determined that the attack on the disguised communication node has failed, the communication data will be parsed and analyzed, and at the same time, the data will be modified using a data tampering tool for re-verification. At the same time, the transmission data will be delayed and interrupted to confirm that the communication data has a communication integrity verification mechanism to achieve integrity protection of data transmission.
[0031] A specific security mechanism is used to determine whether the attack of disguising the communication node has failed. If the attack fails, the system will start the parsing and analysis process of the communication data. The system uses data tampering tools to modify the data for re-verification, and implements data delay and interruption processing to ensure the integrity and accuracy of the communication data. These measures together constitute a communication integrity verification mechanism, which effectively protects the integrity of data transmission, thereby improving the security protection capabilities of the entire communication network.
[0032] In a specific embodiment of the present invention, it also includes a processor, at least one processor, and at least one memory connected to the processor for communication; the memory stores a computer program executable by the processor, and the computer program is executed by the processor so that the processor can perform electric bicycle communication safety detection.
[0033] The processor interacts with the memory through a communication connection. The memory stores a computer program, which is executed by the processor and is used to implement communication security detection of electric bicycles. By executing the program, the processor can detect whether there are security risks in the communication system of the electric bicycle, such as data encryption, communication protocol consistency, etc., thereby verifying the security of the electric bicycle during the network communication process, which can effectively improve the safety of the use of the electric bicycle.
[0034] In a specific implementation of the present invention, a device access gateway node is also included. The device node under test maintains a connection with the device access gateway node, transmits data packets of the device node under test, and the user initiates a query request to the device server under test through the communication node.
[0035] The device node under test maintains a stable connection with the device access gateway node to ensure smooth transmission of data packets. During the transmission process, the communication node serves as the hub of data transmission and is responsible for receiving and forwarding query requests from the user end. When the user initiates a query request to the device server under test through the communication node, the device server under test will respond quickly and provide the required information. This design enables users to easily obtain real-time data of the device node under test, thereby realizing real-time monitoring and remote management of the device status.
[0036] In a specific implementation of the present invention, the device node under test is equipped with a power supply module and a networking module, the networking module is connected to a gateway, and the data information uploaded by the device node under test is transmitted through the wireless access node gateway.
[0037] The device node under test has power supply and networking functions. The power supply module ensures stable operation, and the networking module is wirelessly connected to the gateway. The node can upload data information to the gateway and use wireless access technology to connect to the external network, thereby completing remote data transmission and monitoring.
[0038] In a specific implementation of the present invention, it also includes a traffic mirroring node, which obtains data packets through mirroring gateway traffic; after the disguised communication node obtains legal access authentication information through the communication node, it disguises itself as a communication node and accesses the network to receive requests.
[0039] The traffic mirror node is responsible for obtaining data packets through the mirror gateway. It can capture and mirror all data packets passing through its gateway, thereby achieving comprehensive monitoring of traffic. The disguised communication node first obtains legal access authentication information through the communication node in order to obtain legal network access rights. After obtaining this information, the disguised communication node will disguise itself as a communication node and then access the network to conduct various communication activities. This mechanism allows the disguised communication node to freely access and manipulate network resources without arousing suspicion, which facilitates subsequent data processing and analysis.
[0040] In a specific embodiment of the present invention, after the disguised communication node successfully accesses the network, the message transmitted in the communication is intercepted, and the intercepted message is replayed through a specific stage of the gateway communication protocol of the device accessing the gateway node, or the variable fields in the message are tampered with, thereby affecting the accuracy of the database monitoring data, thereby realizing the testing of the electric bicycle.
[0041] After successfully accessing the network, the camouflaged node will secretly intercept messages transmitted through the network. These messages should be sent directly to the gateway to maintain normal communication between the gateway and the database. The camouflaged node replays the intercepted messages at a specific stage, causing the information received by the gateway to differ from the original information sent, thereby interfering with the accurate communication between the gateway and the database. At the same time, the camouflaged node also has the ability to tamper with the variable fields in the intercepted messages, and further artificially adjust the message content, aiming to destroy the integrity and authenticity of the data, causing deviations in the data monitored by the database, and thus facilitating the testing of electric bicycles. In this covert way, the camouflaged node successfully affected the accuracy of the database monitoring data without being noticed.
[0042] In a specific implementation of the present invention, the traffic mirroring node obtains data packets through the mirroring gateway traffic and implements data encryption and decryption functions through software.
[0043] The node has the data encryption and decryption function implemented by software, and can encrypt or decrypt the received data packets. In this way, the traffic mirroring node not only realizes the effective mirroring of gateway traffic, but also ensures the security and privacy of data during transmission; making the traffic mirroring node applicable to scenarios where data transmission security needs to be protected.
[0044] In a specific embodiment of the present invention, the device node under test is connected to the communication node, and the device node under test is accessed through a normal authorized communication device and user, and is recorded and stored at the same time. The communication node accesses a third-party certificate to obtain transmission data, and pre-processes the obtained data information so that the operator can understand the content of the transmission data in a timely manner. For other information that fails to obtain the transmission data, similar operations are performed to associate the data packet, and the data is marked and transmitted to the disguised communication node for processing.
[0045] In a specific embodiment of the present invention, when the communication data of the disguised communication node is abnormal, it is marked and the abnormal data is transmitted to the communication disguised node, and further analysis is performed according to the abnormal situation to determine the cause, and communication is attempted again. When the communication abnormality of the disguised communication node is detected, the communication disguised node gives various prompts according to different abnormal situations, and the user can modify the communication message according to the set rules, or manually intervene to modify the communication message, and prompt the user to handle the abnormal communication according to different situations.
[0046] Furthermore, the device node under test is used to supply power to the electric bicycle and connect all power facilities on the electric bicycle to fully meet all the connection means possessed by the electric bicycle; In this solution, by analyzing and correlating different types of electric bicycles, the device node under test can more accurately identify complex attack chains, access the firewall in transparent mode and provide protection alerts. When a potential security threat is detected, a prompt will be given to check the response of the electric bicycle under test.
[0047] Further, the device access gateway sets a node to connect with the node of the device under test, collects data through the traffic mirror node, and pre-processes it for analysis; In this embodiment, the collected data is preprocessed, including data demodulation, noise removal and gap filling, while duplicate records are removed and errors are corrected, so that when the communication node is subsequently disguised to forge the data, the similarity of the data is guaranteed.
[0048] Furthermore, the communication node and the traffic mirroring node aggregate the collected data and transmit it to the communication camouflage node, and can merge and summarize the collected data and analyze it in real time, quickly identify the different types of sending and response data, and make annotations to facilitate the next step of processing.
[0049] The working principle of the electric bicycle communication test system: By comparing and analyzing the response traffic of the communication node and the disguised communication, the communication security of the electric bicycle to be tested can be accurately detected. If the response of the disguised communication node is consistent with the real communication, the attack is judged to be successful, and the disguised communication node and communication data are stored in the vulnerability library for subsequent tracking and repair. If the comparison is inconsistent or there is no response, the attack fails, and the system can promptly remind and protect the electric bicycle to be tested from potential threats. This method effectively improves the communication security protection capability of electric bicycles and ensures the security and privacy of user data.
[0050] The above are only embodiments of the present application and are not intended to limit the scope of protection of the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings.
Claims
1. An electric bicycle communication test system, It is characterized in that include The device node under test obtains the transceiver traffic of the device node under test in a normal communication environment; and analyzes and classifies the transceiver traffic to finally obtain requests and responses for various operations; Disguise the communication node, forge a fake request by disguising the communication node, and obtain the response traffic in real time after sending the fake request; The communication node compares and analyzes the response flow of the communication node and the camouflaged communication through an algorithm to complete the communication security detection of the electric bicycle to be tested; If the comparison is consistent, it is determined that the attack of the disguised communication node on the electric bicycle to be tested is successful, and the disguised communication node and communication data are stored in the vulnerability library; if the comparison is inconsistent or there is no response, it is determined that the attack of the disguised communication node on the electric bicycle to be tested has failed.
2. An electric bicycle communication test system according to claim 1, It is characterized in that If it is determined that the attack on the disguised communication node fails, the communication data will be parsed and analyzed, and the data will be modified and verified again using a data tampering tool. At the same time, the transmission data will be delayed and interrupted to confirm that the communication data has a communication integrity verification mechanism to achieve integrity protection of data transmission.
3. An electric bicycle communication test system according to claim 1 or 2, It is characterized in that It also includes a processor, at least one of which has at least one communication-connected memory; the memory stores a computer program executed by the processor, and the computer program is executed by the processor so that the processor can perform electric bicycle communication safety detection.
4. An electric bicycle communication test system according to claim 1, It is characterized in that It also includes a device access gateway node, the device node under test keeps connected to the device access gateway node, transmits data packets of the device node under test, and the user initiates a query request to the device server under test through the communication node.
5. An electric bicycle communication test system according to claim 4, It is characterized in that The device node under test is equipped with a power supply module and a networking module, the networking module is connected to a gateway, and the data information uploaded by the device node under test is transmitted through a wireless access node gateway.
6. An electric bicycle communication test system according to claim 5, It is characterized in that It also includes a traffic mirroring node, which obtains the data packet through the mirroring gateway traffic; after the disguised communication node obtains the legal access authentication information through the communication node, it disguises itself as the communication node and accesses the network to receive the request.
7. An electric bicycle communication test system according to claim 6, It is characterized in that After the camouflaged communication node successfully accesses the network, it intercepts the messages transmitted in the communication, replays the intercepted messages and the specific stage of the gateway communication protocol of the device accessing the gateway node, or tampers with the variable fields in the message, thereby affecting the accuracy of the database monitoring data, thereby realizing the testing of the electric bicycle.
8. An electric bicycle communication test system according to claim 6, It is characterized in that The traffic mirroring node obtains the data packet through the mirroring gateway traffic, and implements data encryption and decryption functions through software.
9. An electric bicycle communication test system according to claim 1, It is characterized in that The device node under test is connected to the communication node, and the device node under test is accessed through normal authorized communication equipment and users, and records are stored at the same time.
10. An electric bicycle communication test system according to claim 1, It is characterized in that When the communication data of the masquerading communication node is abnormal, it is marked and the abnormal data is transmitted to the communication masquerading node, and further analysis is performed based on the abnormal situation to determine the cause, and communication is attempted again.
