Gear information display control method and device, electronic equipment and vehicle

Abstract

The invention relates to the field of vehicle control, and provides a gear information display control method and device, electronic equipment and a vehicle. The method applied to a host controller comprises the following steps: receiving gear information sent by a gearbox controller through a main link of a gateway, and judging whether the gear information is tampered or not in the transmission process of the main link to obtain a first judgment result; and in response to determining that the first judgment result is tampered, prohibiting receiving the gear information transmitted by the main link, starting to receive the gear information sent by the gearbox controller through the direct connection link, and controlling whether to display the gear information or not. When it is found that the main link is tampered, the main link is directly forbidden and the standby direct-connection link is started to ensure driving safety, gear information is transmitted through the direct-connection link, whether the gear information is displayed or not is controlled, the risk that the gear information transmitted by the main link is tampered, and consequently wrong gear information is displayed is avoided, and the driving safety is improved. The driving safety is improved.

Description

Technical Field

[0001] The present application relates to the field of vehicle control technology, and in particular to a method, device, electronic equipment and vehicle for displaying and controlling gear information. Background Art

[0002] The vehicle is provided with a display screen for various parameters, on which various parameters of the vehicle can be displayed, including gear information.

[0003] Vehicles generally display the gear information directly, but if the gear information is maliciously tampered with, the displayed gear information may be incorrect, affecting the driver's driving safety. Summary of the invention

[0004] In view of this, the purpose of the present application is to propose a display control method, device, electronic device and vehicle for gear information, so as to solve the current problem of gear information display error caused by gear information tampering.

[0005] Based on the above purpose, the present application provides a display control method for gear information, which is applied to a host controller, and the method includes:

[0006] Receiving the gear information sent by the gearbox controller through the main link of the gateway, determining whether the gear information is tampered with during the transmission of the main link, and obtaining a first determination result;

[0007] In response to determining that the first judgment result has been tampered with, receiving the gear information transmitted by the main link is prohibited, receiving the gear information sent by the transmission controller through the direct link is started, and whether to display the gear information is controlled.

[0008] Based on the same inventive concept, the present application also provides a display control device for gear information, which is arranged in a host controller and includes:

[0009] The main link transmission judgment module is configured to receive the gear information sent by the gearbox controller through the main link of the gateway, judge whether the gear information is tampered with during the main link transmission process, and obtain a first judgment result;

[0010] The direct link enabling module is configured to, in response to determining that the first judgment result has been tampered with, prohibit receiving the gear information transmitted by the main link, start receiving the gear information sent by the transmission controller through the direct link, and control whether to display the gear information.

[0011] Based on the same inventive concept, the present application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable by the processor, wherein the processor implements the method as described above when executing the computer program.

[0012] Based on the same inventive concept, the present application also provides a vehicle, comprising the device as described above or the electronic device as described above.

[0013] From the above description, it can be seen that the display control method, device, electronic device and vehicle of the gear information provided by the present application will prepare at least two transmission links for transmitting gear information in advance, one is that the gearbox controller sends the gear information to the host controller through the main link of the gateway, and the other is that the gearbox controller sends the gear information to the host controller through the direct link. Under normal circumstances, the main link is enabled to transmit the gear information, and the direct link is suspended as a standby; during the process of enabling the main link, the gear information transmitted by the main link will be judged. If it is found that the gear information transmitted by the main link is tampered with, it is determined that the main link has been tampered with by a malicious attack. In order to avoid the tampered gear information affecting driving safety, the main link will be disabled and the standby direct link will be enabled. In this way, the gear information can be transmitted through the direct link, and whether the gear information is displayed can be controlled, thereby avoiding the risk of displaying erroneous gear information due to tampering with the gear information transmitted by the main link, thereby improving driving safety. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the technical solutions in the present application or related technologies, the drawings required for use in the embodiments or related technical descriptions are briefly introduced below. Obviously, the drawings described below are only embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0015] Figure 1 A flowchart of a method for controlling the display of gear information according to an embodiment of the present application;

[0016] Figure 2 A schematic diagram of the connection of the main link of an embodiment of the present application;

[0017] Figure 3 A connection diagram of a direct link according to an embodiment of the present application;

[0018] Figure 4 A structural block diagram of a display control device for gear information according to an embodiment of the present application;

[0019] Figure 5 A schematic diagram of the structure of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0020] In order to make the objectives, technical solutions and advantages of the present application more clearly understood, the present application is further described in detail below in combination with specific embodiments and with reference to the accompanying drawings.

[0021] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present application should be the usual meanings understood by people with ordinary skills in the field to which the present application belongs. The "first", "second" and similar words used in the embodiments of the present application do not represent any order, quantity or importance, but are only used to distinguish different components. "Including" or "comprising" and similar words mean that the elements or objects appearing in front of the word cover the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0022] Glossary:

[0023] TCU: Transmission Control Unit, transmission controller.

[0024] GW: gateway.

[0025] HUT: Head Unit Terminal, host controller (vehicle terminal or vehicle controller).

[0026] In the related art, the transmission controller on the vehicle will send the gear information (for example, the current gear) to the gateway, and then the gateway will forward the gear information to the host controller, so that the host controller will control the gear information to be displayed on the display screen.

[0027] If the gear information is maliciously attacked and tampered with in the transmission link from the transmission control to the gateway, and / or the transmission link from the gateway to the host controller, the gear information transmitted to the host controller will be wrong, and the gear information displayed on the display screen will also be wrong, which will have a serious impact on the driver and affect driving safety during driving.

[0028] For example, if the current gear information is D gear information, if the transmission controller to the gateway, or the gateway to the host controller is tampered with, the D gear information will be maliciously tampered with to P gear information, so the host controller will control the display to show P gear. In other words, the vehicle is running in D gear, but the display shows P gear, and the gear display is wrong, which will have a very bad impact on the driver and even affect personal safety.

[0029] Based on the above situation, the embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0030] The embodiment of the present application describes a display control method for gear information, which is applied to a host controller.

[0031] In a specific implementation, there are at least two transmission links between the host controller and the gearbox controller for transmitting gear information, one of which is the main link of the gearbox controller through the gateway (ie, Figure 2 As shown, the transmission controller sends the gear information to the host controller through a transmission link connected to the gateway and the host controller. Second, the transmission controller sends the gear information to the host controller through a direct link (ie, Figure 3 As shown in FIG. 1 , the transmission link directly connected to the host controller by the gearbox controller directly sends the gear information to the host controller. Under normal circumstances, the main link is enabled and the direct link is disabled.

[0032] If the main link is enabled, Figure 1 As shown, the method includes:

[0033] Step 101, receiving the gear information sent by the gearbox controller through the main link of the gateway, determining whether the gear information is tampered with during the transmission of the main link, and obtaining a first determination result.

[0034] During specific implementation, the transmission controller and the gateway are communicated with each other (including: wired communication connection or wireless communication connection), the gateway and the host controller are communicated with each other (including: wired communication connection or wireless communication connection), and the communication connection link between the transmission controller, the gateway and the host controller is the main link.

[0035] After receiving the gear change, the gearbox controller generates the gear information after the change, and sends the gear information to the host controller through the main link of the gateway. In this way, after receiving the gear information, the host controller can identify and process the received gear information, determine whether the received gear information has been tampered with, and then obtain a first judgment result. The first judgment result includes: not tampered with or tampered with.

[0036] In specific implementation, in response to determining that the first judgment result is not tampered, the host controller will display the gear information received from the main link. The specific display process is: the host controller extracts the gear content from the gear information transmitted by the main link, and converts the gear content into a gear symbol (including: D gear, P gear, N gear or R gear), and renders the gear symbol on the display screen and displays it superimposed with other display content on the display screen.

[0037] However, the main link may be attacked by hackers and the gear information may be tampered with. In this case, the following step 102 is performed.

[0038] Step 102, in response to determining that the first judgment result has been tampered with, prohibiting the reception of the gear information transmitted by the main link, starting to receive the gear information sent by the transmission controller through the direct link, and controlling whether to display the gear information.

[0039] In specific implementation, if the first judgment result is that it has been tampered with, it proves that the main link has been maliciously attacked and there is a security risk. At this time, the host controller will disable the main link and delete the gear information transmitted by the main link without displaying it. Then, in order to ensure the normal transmission of the gear information, the host controller enables the direct link. Since the direct link transmits at a faster speed, it is not easy for hackers to intercept and tamper with it. Therefore, the direct link is more reliable and has higher security for the transmission of gear information.

[0040] However, the direct link may be intercepted and tampered by hackers. If it is determined that the gear information sent by the direct link has been tampered with, in order to avoid the wrong gear information affecting the driver's judgment, the gear information will not be displayed directly. If it is determined that it has not been tampered with, the gear information will be displayed directly.

[0041] Through the above scheme, the vehicle will prepare at least two transmission links for transmitting gear information in advance, one is that the transmission controller sends the gear information to the host controller through the main link of the gateway, and the other is that the transmission controller sends the gear information to the host controller through the direct link. Under normal circumstances, the main link is enabled to transmit the gear information, and the direct link is suspended as a standby; during the process of enabling the main link, the gear information transmitted by the main link will be judged. If it is found that the gear information transmitted by the main link is tampered with, it is determined that the main link has been tampered with by malicious attacks. In order to avoid the tampered gear information affecting driving safety, the main link will be disabled and the standby direct link will be enabled. In this way, the gear information can be transmitted through the direct link, and whether the gear information is displayed can be controlled, thereby avoiding the risk of displaying incorrect gear information due to tampering with the gear information transmitted by the main link, thereby improving driving safety.

[0042] In some embodiments, step 101 includes:

[0043] Step 1011: receiving the gear information encrypted by the main link and sent by the main link, and performing main link decryption on the gear information encrypted by the main link to obtain the gear information decrypted by the main link.

[0044] In specific implementation, the main link encryption may be the encryption of the gear information by the gearbox controller or the encryption of the gear information by the gateway. The main link decryption at least includes the main link decryption of the gear information after the main link encryption by the host controller.

[0045] The specific process is: the gear information includes: the gear value (for example, P, D, N or R) and the mapping signal (for example, 00 (corresponding to P), 01 (corresponding to D), 02 (corresponding to N) or 03 (corresponding to R)).

[0046] The main link encryption is to encrypt the mapping signal, and the corresponding main link decryption is to decrypt the mapping signal.

[0047] Step 1012, determining whether the gear information after decryption of the main link is wrong, and if it is determined to be wrong, the corresponding first judgment result is that it has been tampered with, or if it is determined to be correct, the corresponding first judgment result is that it has not been tampered with.

[0048] In specific implementation, it is determined whether the gear information decrypted by the main link matches the data corresponding to the real gear information. If the match is determined to be correct, the corresponding first judgment result is that it has not been tampered with. If the match is not determined to be wrong, the corresponding first judgment result is that it has been tampered with.

[0049] Specifically, determine whether the decrypted mapping signal matches the transmitted gear value (for example, determine whether the gear value corresponding to mapping signal 00 is P, determine whether the gear value corresponding to mapping signal 01 is D, determine whether the gear value corresponding to mapping signal 02 is N, and determine whether the gear value corresponding to mapping signal 03 is R). If the match is determined to be correct, the corresponding first judgment result is that it has not been tampered with. If the mismatch is determined to be wrong, the corresponding first judgment result is that it has been tampered with.

[0050] Through the encryption and decryption process of the main link in the above scheme, it is possible to accurately determine whether the gear information of the main link has been tampered with, so that the host controller can disable the main link in time when tampering is found in the main link, avoiding the situation where the wrong gear is displayed to disrupt the driver's driving.

[0051] In some embodiments, the main link encryption includes: a primary encryption process of the gear information by the transmission controller, and a secondary encryption process of the encrypted gear information after the gateway decrypts it once.

[0052] In specific implementation, the main link encryption includes: symmetric encryption and / or asymmetric encryption. This can be: the first encryption process and the second encryption process are both symmetric encryption, or both are asymmetric encryption; the first encryption process can be symmetric encryption and the second encryption process can be asymmetric encryption; the first encryption process can be asymmetric encryption and the second encryption process can be symmetric encryption.

[0053] Among them, symmetric encryption means that the encryption party (for example, transmission controller, gateway) and the decryption party (for example, gateway, host controller) use the same key (KEY); asymmetric encryption means that the encryption party (for example, transmission controller, gateway) uses its own private key, and the decryption party (for example, gateway, host controller) uses the public key for decryption.

[0054] Step 1011 includes:

[0055] The gear information after the primary decryption and the gear information after the secondary encryption fed back through the main link are received, and the gear information after the secondary encryption is secondary decrypted to obtain the gear information after the secondary decryption.

[0056] In specific implementation, the above-mentioned primary encryption / decryption process and secondary encryption / decryption process are both performed on the mapping signal in the gear information, and the gear value in the gear information is not encrypted / decrypted.

[0057] For symmetric encryption:

[0058] The gearbox controller uses the first key to perform an encryption process to obtain the encrypted gear information, and sends the encrypted gear information to the gateway. The gateway uses the first key to decrypt the encrypted gear information to obtain the decrypted gear information, and then uses the second key to perform a secondary encryption process on the decrypted gear information. Since the gateway does not have the analysis capability, the decrypted gear information and the secondary encrypted gear information are sent to the host controller together. The host controller uses the second key to decrypt the secondary encrypted gear information to obtain the secondary decrypted gear information.

[0059] For the case of asymmetric encryption:

[0060] The gearbox controller uses the first private key to perform an encryption process to obtain the encrypted gear information, and sends the encrypted gear information to the gateway. The gateway uses the first public key corresponding to the first private key to decrypt the encrypted gear information to obtain the decrypted gear information, and then uses the second private key to perform a secondary encryption process on the decrypted gear information. Since the gateway does not have the analysis capability, the decrypted gear information and the secondary encrypted gear information are sent to the host controller together. The host controller uses the second public key corresponding to the second private key to decrypt the secondary encrypted gear information to obtain the secondary decrypted gear information.

[0061] Step 1012 includes:

[0062] Determine whether the gear information decrypted once and / or the gear information decrypted twice is wrong. When it is determined that the gear information decrypted once and / or the gear information decrypted twice is wrong, the corresponding first judgment result is that it has been tampered with, or when it is determined that the gear information decrypted once and the gear information decrypted twice is correct, the corresponding first judgment result is that it has not been tampered with.

[0063] In specific implementation, the host controller will analyze and judge the gear information decrypted once and the gear information decrypted twice respectively. If one of them is wrong, the first judgment result will be directly determined to have been tampered with. Only when both are correct will the first judgment result be determined to have not been tampered with.

[0064] Through the above scheme, the main link is encrypted and decrypted twice, and the two decryption results are judged. In this way, as long as there is an error, it proves that the main link has been tampered with by malicious attacks, and the main link is unreliable, which further improves the analysis ability of the tampering of the main link and ensures the security and reliability of the main link.

[0065] In some embodiments, in step 102, the starting to receive the gear information sent by the gearbox controller through the direct link and controlling whether to display the gear information includes:

[0066] Step 1021, receiving the gear information sent by the gearbox controller through the direct link, determining whether the gear information transmitted by the direct link is tampered with, and obtaining a second determination result.

[0067] Step 1022: In response to the second judgment result that the device has not been tampered with, display the gear information.

[0068] Alternatively, in step 1023, in response to the second judgment result being tampered with, stop displaying the gear information.

[0069] In specific implementation, the direct link may also be intercepted and tampered by hackers, so the host controller will make a second judgment on the gear information sent by the direct link. If it is determined after the judgment that the gear information sent by the direct link has not been tampered with, the gear information will be directly displayed. The specific display process is: the host controller extracts the gear content from the gear information transmitted by the direct link, and converts the gear content into a gear symbol (including: D gear, P gear, N gear or R gear), and renders the gear symbol on the display screen and superimposes it with other display content on the display screen for display.

[0070] If it is determined that the gear information sent by the direct link has been tampered with, in order to prevent the wrong gear information from affecting the driver's judgment, the gear information is not displayed directly.

[0071] Through the above scheme, the gear information of the direct link can be judged. If it is found that the direct link is also intercepted and tampered with by hackers, the gear information will not be displayed directly to avoid the display of the wrong gear causing driving interference to the driver and affecting the driving safety of the vehicle.

[0072] In some embodiments, step 1021 includes:

[0073] Step 10211: receiving the gear information encrypted by the direct link from the gearbox controller, and performing direct link decryption on the gear information encrypted by the direct link to obtain the gear information after direct link decryption.

[0074] In specific implementation, direct link encryption includes: symmetric encryption or asymmetric encryption.

[0075] Symmetric encryption: The gearbox controller uses the third key to encrypt the gear information encrypted by the direct link and sends it to the host controller. The host controller uses the third key to decrypt the gear information encrypted by the direct link to obtain the gear information decrypted by the direct link.

[0076] Asymmetric encryption: The gearbox controller uses the third private key to encrypt the gear information encrypted by the direct link and sends it to the host controller. The host controller uses the third public key corresponding to the third private key to decrypt the gear information encrypted by the direct link to obtain the gear information decrypted by the direct link.

[0077] The gear information includes: a gear value (for example, P, D, N or R) and a mapping signal (for example, 00 (corresponding to P), 01 (corresponding to D), 02 (corresponding to N) or 03 (corresponding to R)). The above direct link encryption / decryption process is performed on the mapping signal, and the gear value in the gear information is not encrypted / decrypted by the direct link.

[0078] Step 10212, determine whether the gear information after decryption of the direct link is correct, if it is correct, the second judgment result is that it has not been tampered with, if it is wrong, the second judgment result is that it has been tampered with.

[0079] In specific implementation, it is determined whether the gear information after decryption of the direct link matches the data corresponding to the real gear information. If the match is determined to be correct, the corresponding second judgment result is that it has not been tampered with. If the match is not determined to be wrong, the corresponding second judgment result is that it has been tampered with.

[0080] Specifically, determine whether the mapping signal after decryption of the direct link matches the transmitted gear value (for example, determine whether the gear value corresponding to the mapping signal 00 is P, determine whether the gear value corresponding to the mapping signal 01 is D, determine whether the gear value corresponding to the mapping signal 02 is N, and determine whether the gear value corresponding to the mapping signal 03 is R). If the match is determined to be correct, the corresponding second judgment result is that it has not been tampered with. If the mismatch is determined to be wrong, the corresponding second judgment result is that it has been tampered with.

[0081] Through the above solution, it is possible to accurately determine whether the gear information transmitted by the direct link has been tampered with, thereby ensuring the accuracy of the direct link transmission.

[0082] In some embodiments, step 1023 includes:

[0083] Step 10231, in response to the second judgment result being tampered with, the second judgment result is marked and recorded, and the gear information is stopped from being displayed.

[0084] Step 10232, in response to the power-off operation, the marking record is deleted.

[0085] In specific implementation, when the power is turned on, once the second judgment result is found to have been tampered with, it proves that both the main link and the direct link have been hacked and the gear information has been tampered with. In order to ensure the normal power-on, the second judgment result will be marked and recorded, and then in the subsequent time of the power-on, the marked record will be kept, and then the gear information will be stopped from being displayed according to the marked record. If the driver's power-off operation is received, in order to ensure the normal display of the gear information at the next power-on, the marked record will be deleted, so that the gear information will not be stopped from being displayed when the marked record does not exist after the next power-on.

[0086] Through the above scheme, the gear information can be stopped from being displayed according to the marking record, and the marking record can be cleared in time when the power is turned off, thereby ensuring the function of normally displaying the gear information after the next power-on.

[0087] In some embodiments, after step 102, the method further includes:

[0088] Step 103: Issue a main link tampering prompt and repair the main link.

[0089] In specific implementation, the corresponding main link tampering prompt is used to remind the driver that the main link is at risk of being attacked and needs to be repaired. In this way, the driver or maintenance personnel repair the main link.

[0090] Step 104: in response to determining that the main link is repaired, receiving the test gear information sent by the main link, and determining whether the test gear information transmitted by the main link is tampered with to obtain a third determination result.

[0091] In specific implementation, if the main link is powered off directly after being repaired, the process of step 10232 will continue to be executed. Then, after being powered on again, the main link resumes normal use.

[0092] If the main link is repaired and not powered off directly, the gearbox controller will generate test gear information (including: test gear value and test mapping signal), and transmit the test gear information to the host controller through the main link. The host controller will replace the gear information with the test gear information according to the judgment process of the main link on the gear information in step 101 above, and then execute it to obtain a third judgment result. The third judgment result includes: not tampered or tampered.

[0093] Among them, the test gear information includes: a test gear value and a test mapping signal. The corresponding judgment process is to encrypt the test mapping signal during the main link transmission, and then use the host controller to decrypt it to determine whether the decrypted test mapping signal matches the test gear value transmitted by the main link. If the match is determined to be correct, the corresponding third judgment result is that it has not been tampered with. If the mismatch is determined to be wrong, the corresponding third judgment result is that it has been tampered with.

[0094] Step 105: in response to determining that the third judgment result is not tampered with, prohibiting the reception of the gear information sent by the direct link, starting to receive the gear information transmitted by the main link, and controlling the display of the gear information.

[0095] In specific implementation, if the third judgment result is that it has been tampered with, the gear information is kept transmitted using the direct link, or the state of stopping the display of the gear information is kept. If the third judgment result is that it has not been tampered with, proving that the main link has returned to normal, the power supply for the gear information transmission of the direct link will be disabled, and the function of transmitting the gear information of the main link will be enabled.

[0096] Through the above solution, the main link can be repaired, and after the repair is successful, the main link transmission gear information can be re-enabled, thereby ensuring the normal operation of the main link.

[0097] The following is a specific embodiment to describe the display control method of the gear information of the present application, and the specific process is as follows:

[0098] A link with at least two transmission gears is provided on the vehicle:

[0099] Main link: Transmission Controller Unit (TCU) - Gateway (GW) - Host Controller Unit (HUT), direct link: TCU - HUT. Under normal circumstances, the main link is enabled and the direct link is suspended for standby.

[0100] 1. First, a symmetric key KEY is preset on the gateway (GW) and the host controller (HUT). And in the gear information including the gear value, a mapping signal of the gear value is added. The function of the mapping signal is to represent the current gear. P, D, N, R correspond to 00, 01, 02, 03 respectively.

[0101] KEY is used to encrypt the mapping signal. The gateway (GW) encrypts with this key KEY, and the host controller (HUT) decrypts with this key KEY.

[0102] 2. When the gear signal is transmitted from the transmission controller (TCU) to the gateway (GW), if the current gear value is P, when the gateway (GW) routes this signal to the host controller (HUT), it will not only send the current gear value P, but also generate a corresponding mapping signal 00, and encrypt the mapping signal 00 with KEY, and send the gear value P + the mapping signal 00 encrypted with KEY (i.e. the gear information encrypted by the main link in the above embodiment) to the host controller (HUT).

[0103] 3. After the host controller (HUT) receives the signal, it will first use the local KEY to decrypt the mapping signal, and then compare the decrypted mapping information with the actual value of the gear value. Because the mapping signal is encrypted, it cannot be tampered with (unless the KEY is obtained by a leak). If the main link between the gateway (GW) and the host controller (HUT) is attacked and the gear value is tampered with, the decrypted mapping signal will not match the gear value. This indicates that there is a problem with the current link, and the current incorrect gear information needs to be discarded to enter a safe state.

[0104] For example, the gear value P transmitted to the host controller (HUT) is tampered with into the gear value D. The mapping signal decrypted by the host controller (HUT) using KEY is 00, so the mapping signal 00 should correspond to P, so the mapping signal 00 after decryption does not correspond to the actually received gear value D. This set of "gear value P + mapping signal 00 encrypted with KEY" gear information is discarded and enters a safe state.

[0105] 4. The safety state is to disable the main link because the main link is no longer safe. Enable the direct link from the transmission controller (TCU) to the host controller (HUT) to transmit the gear information, that is, abandon the gateway (GW) as a relay and transmit directly.

[0106] When the safe state is enabled and the direct link is used for transmission: the transmission controller (TCU) also needs to preset the same KEY in advance, so that the transmission controller (TCU) encrypts the mapping signal in the gear information, combines the gear value + the encrypted mapping signal into the gear information encrypted by the direct link and sends it to the host controller (HUT); the host controller (HUT) decrypts the encrypted mapping signal using the KEY to obtain the decrypted mapping information (i.e. the gear information decrypted by the direct link). Generally, the transmission controller (TCU)-host controller (HUT) link is a direct CAN, and the possibility of being attacked is not very high.

[0107] If the gear value + encrypted mapping signal transmitted by the transmission controller (TCU), where the encrypted mapping signal does not match the corresponding transmitted gear value after being decrypted by the host controller (HUT), it means that there is a problem with the direct link between the transmission controller (TCU) and the host controller (HUT), so the current direct link is no longer credible, and the gear information transmission will enter the next security state.

[0108] 5. The next safe state is: because the gear information corresponding to the main link and the direct link has been tampered with, for safety reasons, the host controller (HUT) can only disable both the main link and the direct link, and the host controller (HUT) controls the display screen not to display the gear. Because it is better not to display the gear than to display the wrong gear, so as to avoid disturbing the driver and causing driving accidents, and further ensure the driver's driving safety. After powering off, power on again to restore the normal gear display function.

[0109] It should be noted that the method of the embodiment of the present application can be performed by a single device, such as a computer or server. The method of this embodiment can also be applied to a distributed scenario and completed by multiple devices cooperating with each other. In the case of such a distributed scenario, one of the multiple devices can only perform one or more steps in the method of the embodiment of the present application, and the multiple devices will interact with each other to complete the described method.

[0110] It should be noted that the above describes some embodiments of the present application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the above embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0111] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, the present application also provides a display control device for gear information.

[0112] refer to Figure 4 , the display control device of the gear information comprises:

[0113] The main link transmission judgment module is configured to receive the gear information sent by the gearbox controller through the main link of the gateway, judge whether the gear information is tampered with during the main link transmission process, and obtain a first judgment result;

[0114] The direct link enabling module is configured to, in response to determining that the first judgment result has been tampered with, prohibit receiving the gear information transmitted by the main link, start receiving the gear information sent by the transmission controller through the direct link, and control whether to display the gear information.

[0115] In some embodiments, the main link transmission determination module includes:

[0116] The first decryption unit is configured to receive the gear information encrypted by the main link and sent by the main link, and perform main link decryption on the gear information encrypted by the main link to obtain the gear information decrypted by the main link;

[0117] The first judgment unit is configured to judge whether the gear information after the main link decryption is wrong, and if it is wrong, the corresponding first judgment result is that it has been tampered with, or if it is correct, the corresponding first judgment result is that it has not been tampered with.

[0118] In some embodiments, the main link encryption includes: a primary encryption process of the gear information by the gearbox controller, and a secondary encryption process of the primary encrypted gear information after the gateway decrypts the primary encrypted gear information;

[0119] The first decryption unit is specifically configured as follows:

[0120] receiving the gear information after primary decryption and the gear information after secondary encryption fed back through the main link, performing secondary decryption on the gear information after secondary encryption to obtain the gear information after secondary decryption;

[0121] The determining whether the gear information after the main link decryption is wrong, and determining that the first judgment result corresponding to the error is that it has been tampered with, or determining that the first judgment result corresponding to the correctness is that it has not been tampered with, includes:

[0122] Determine whether the gear information decrypted once and / or the gear information decrypted twice is wrong. When it is determined that the gear information decrypted once and / or the gear information decrypted twice is wrong, the corresponding first judgment result is that it has been tampered with, or when it is determined that the gear information decrypted once and the gear information decrypted twice is correct, the corresponding first judgment result is that it has not been tampered with.

[0123] In some embodiments, the direct link enabling module includes:

[0124] A second judgment unit is configured to receive the gear information sent by the gearbox controller through the direct link, judge whether the gear information transmitted by the direct link is tampered with, and obtain a second judgment result;

[0125] The gear display control unit is configured to display the gear information in response to the second judgment result being that the gear information has not been tampered with; or, in response to the second judgment result being that the gear information has been tampered with, stop displaying the gear information.

[0126] In some embodiments, the second determination unit is specifically configured to:

[0127] Receiving the gear information encrypted by the direct link from the gearbox controller, and performing direct link decryption on the gear information encrypted by the direct link to obtain the gear information decrypted by the direct link;

[0128] It is determined whether the gear information after decryption of the direct link is correct. If it is correct, the second determination result is that it has not been tampered with. If it is wrong, the second determination result is that it has been tampered with.

[0129] In some embodiments, the gear display control unit is specifically configured as follows:

[0130] In response to the second judgment result being tampered with, marking and recording the second judgment result, and stopping displaying the gear position information;

[0131] In response to a power-off operation, the mark record is deleted.

[0132] In some embodiments, the apparatus further comprises: a repair module configured to:

[0133] In response to determining that the first judgment result has been tampered with, prohibiting the reception of the gear information transmitted by the main link, starting to receive the gear information sent by the gearbox controller through the direct link, and controlling whether to display the gear information, issuing a main link tampering prompt, and repairing the main link;

[0134] In response to determining that the main link is repaired, receiving the test gear information sent by the main link, and determining whether the test gear information transmitted by the main link is tampered with to obtain a third determination result;

[0135] In response to determining that the third judgment result is not tampered with, the gear information sent by the direct link is prohibited from being received, the gear information transmitted by the main link is started to be received, and the gear information is controlled to be displayed.

[0136] For the convenience of description, the above device is described in terms of functions divided into various modules. Of course, when implementing the present application, the functions of each module can be implemented in the same or multiple software and / or hardware.

[0137] The device of the above embodiment is used to implement the corresponding method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be described in detail here.

[0138] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments and methods, the present application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method described in any of the above embodiments when executing the program.

[0139] Figure 5 A more specific schematic diagram of the hardware structure of an electronic device provided in this embodiment is shown, and the device may include: a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040 are connected to each other through the bus 1050 in the device.

[0140] The processor 1010 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0141] The memory 1020 may be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 1020 may store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program codes are stored in the memory 1020 and are called and executed by the processor 1010.

[0142] The input / output interface 1030 is used to connect the input / output module to realize information input and output. The input / output module can be configured in the device as a component (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, etc.

[0143] The communication interface 1040 is used to connect a communication module (not shown) to realize communication interaction between the device and other devices. The communication module can realize communication through a wired mode (such as USB, network cable, etc.) or a wireless mode (such as mobile network, WIFI, Bluetooth, etc.).

[0144] The bus 1050 includes a path that transmits information between the various components of the device (eg, the processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040).

[0145] It should be noted that, although the above device only shows the processor 1010, the memory 1020, the input / output interface 1030, the communication interface 1040 and the bus 1050, in the specific implementation process, the device may also include other components necessary for normal operation. In addition, it can be understood by those skilled in the art that the above device may also only include the components necessary for implementing the embodiments of the present specification, and does not necessarily include all the components shown in the figure.

[0146] The electronic device of the above embodiment is used to implement the corresponding method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be described in detail here.

[0147] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments, the present application also provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the method described in any of the above embodiments.

[0148] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0149] The computer instructions stored in the storage medium of the above embodiments are used to enable the computer to execute the method described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0150] Based on the same concept, corresponding to any of the above-mentioned embodiment methods, the present application also provides a computer program product, including computer program instructions. When the computer program instructions are run on a computer, the computer executes the method described in any of the above embodiments, which has the beneficial effects of the corresponding method embodiments and will not be repeated here.

[0151] Based on the same inventive concept, the present application also provides a vehicle, including the device described in the above embodiment or the electronic device described in the above embodiment. The beneficial effects of the embodiments with the corresponding device or electronic device are not described in detail here.

[0152] It is understandable that before using the technical solutions of each embodiment of the present application, the type, scope of use, usage scenarios, etc. of the personal information involved will be informed to the user in an appropriate manner, and the user's authorization will be obtained.

[0153] For example, in response to receiving an active request from a user, a prompt message is sent to the user to clearly remind the user that the operation requested to be performed will require obtaining and using the user's personal information. Thus, the user can independently choose whether to provide personal information to the electronic device, application, server, storage medium or other software or hardware that performs the operation of the technical solution of the present application according to the prompt message.

[0154] As an optional but non-limiting implementation, in response to receiving the user's active request, the prompt information may be sent to the user in the form of a pop-up window, in which the prompt information may be presented in text form. In addition, the pop-up window may also carry a selection control for the user to choose "agree" or "disagree" to provide personal information to the electronic device.

[0155] It is understandable that the above notification and the process of obtaining user authorization are merely illustrative and do not constitute a limitation on the implementation method of this application. Other methods that meet relevant laws and regulations may also be applied to the implementation method of this application.

[0156] A person skilled in the art should understand that the discussion of any of the above embodiments is merely illustrative and is not intended to imply that the scope of the present application is limited to these examples. In line with the concept of the present application, the technical features in the above embodiments or different embodiments may be combined, the steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present application as described above, which are not provided in detail for the sake of simplicity.

[0157] In addition, to simplify the description and discussion, and in order not to make the embodiments of the present application difficult to understand, the known power supply / ground connection with the integrated circuit (IC) chip and other components may or may not be shown in the provided drawings. In addition, the device can be shown in the form of a block diagram to avoid making the embodiments of the present application difficult to understand, and this also takes into account the fact that the details of the implementation of these block diagram devices are highly dependent on the platform to be implemented in the embodiments of the present application (that is, these details should be fully within the scope of understanding of those skilled in the art). In the case of elaborating specific details (e.g., circuits) to describe exemplary embodiments of the present application, it is obvious to those skilled in the art that the embodiments of the present application can be implemented without these specific details or when these specific details are changed. Therefore, these descriptions should be considered to be illustrative rather than restrictive.

[0158] Although the present application has been described in conjunction with specific embodiments of the present application, many replacements, modifications and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may use the embodiments discussed.

[0159] The embodiments of the present application are intended to cover all such substitutions, modifications and variations that fall within the broad scope of the present application. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present application should be included in the protection scope of the present application.

Claims

1. A method for controlling the display of gear information, characterized in that: Applied to a host controller, the method comprises: Receiving the gear information sent by the gearbox controller through the main link of the gateway, determining whether the gear information is tampered with during the transmission of the main link, and obtaining a first determination result; In response to determining that the first judgment result has been tampered with, receiving the gear information transmitted by the main link is prohibited, receiving the gear information sent by the transmission controller through the direct link is started, and whether to display the gear information is controlled.

2. The method according to claim 1, characterized in that The receiving gear information sent by the gearbox controller through the main link of the gateway, determining whether the gear information is tampered with during the transmission of the main link, and obtaining a first determination result, includes: Receiving the gear information encrypted by the main link from the main link, and performing main link decryption on the gear information encrypted by the main link to obtain the gear information decrypted by the main link; It is determined whether the gear information after the main link decryption is wrong, and when it is determined to be wrong, the corresponding first judgment result is that it has been tampered with, or when it is determined to be correct, the corresponding first judgment result is that it has not been tampered with.

3. The method according to claim 2, characterized in that The main link encryption includes: a primary encryption process of the gear information by the gearbox controller, and a secondary encryption process of the encrypted gear information after the gateway decrypts it once; The receiving the gear information encrypted by the main link and decrypting the gear information encrypted by the main link to obtain the gear information decrypted by the main link includes: receiving the gear information after primary decryption and the gear information after secondary encryption fed back through the main link, performing secondary decryption on the gear information after secondary encryption to obtain the gear information after secondary decryption; The determining whether the gear information after the main link decryption is wrong, and determining that the first judgment result corresponding to the error is that it has been tampered with, or determining that the first judgment result corresponding to the correctness is that it has not been tampered with, includes: Determine whether the gear information decrypted once and / or the gear information decrypted twice is wrong. When it is determined that the gear information decrypted once and / or the gear information decrypted twice is wrong, the corresponding first judgment result is that it has been tampered with, or when it is determined that the gear information decrypted once and the gear information decrypted twice is correct, the corresponding first judgment result is that it has not been tampered with.

4. The method according to claim 1, characterized in that: The starting of receiving the gear information sent by the gearbox controller through the direct link and controlling whether to display the gear information includes: receiving the gear information sent by the gearbox controller through the direct link, determining whether the gear information transmitted by the direct link has been tampered with, and obtaining a second determination result; In response to the second judgment result being that the gear position information has not been tampered with, displaying the gear position information; or, In response to the second judgment result being tampered with, the gear position information is stopped from being displayed.

5. The method according to claim 4, characterized in that The receiving gear information sent by the gearbox controller through the direct link, determining whether the gear information transmitted by the direct link has been tampered with, and obtaining a second determination result includes: Receiving the gear information encrypted by the direct link from the gearbox controller, and performing direct link decryption on the gear information encrypted by the direct link to obtain the gear information decrypted by the direct link; It is determined whether the gear information after decryption of the direct link is correct. If it is correct, the second determination result is that it has not been tampered with. If it is wrong, the second determination result is that it has been tampered with.

6. The method according to claim 4, characterized in that In response to the second judgment result being tampered, stopping displaying the gear position information includes: In response to the second judgment result being tampered with, marking and recording the second judgment result, and stopping displaying the gear position information; In response to a power-off operation, the mark record is deleted.

7. The method according to claim 1, characterized in that After the method for prohibiting receiving the gear information transmitted by the main link in response to determining that the first judgment result has been tampered with, starting to receive the gear information sent by the gearbox controller through the direct link, and controlling whether to display the gear information, further includes: Sending a main link tampering prompt and repairing the main link; In response to determining that the main link is repaired, receiving the test gear information sent by the main link, and determining whether the test gear information transmitted by the main link is tampered with to obtain a third determination result; In response to determining that the third judgment result is not tampered with, the gear information sent by the direct link is prohibited from being received, the gear information transmitted by the main link is started to be received, and the gear information is controlled to be displayed.

8. A display control device for gear information, characterized in that: Set in the host controller, including: The main link transmission judgment module is configured to receive the gear information sent by the gearbox controller through the main link of the gateway, judge whether the gear information is tampered with during the main link transmission process, and obtain a first judgment result; The direct link enabling module is configured to, in response to determining that the first judgment result has been tampered with, prohibit receiving the gear information transmitted by the main link, start receiving the gear information sent by the transmission controller through the direct link, and control whether to display the gear information.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that: When the processor executes the program, the method according to any one of claims 1 to 7 is implemented.

10. A vehicle, characterized in that: Includes the device according to claim 8 or the electronic device according to claim 9.

Images