Intelligent management and control method and device for integrated security processing unit

Abstract

The invention relates to the field of chip management and control, and discloses an intelligent management and control method and device for an integrated security processing unit, and by implementing the intelligent management and control method and device for the integrated security processing unit, an internal self-checking function for the security processing unit is set, so that the use security of the security processing unit is improved; meanwhile, the security processing unit uses an independent power supply domain, a clock source and a reset source, so that unit faults caused by failure of shared resources are avoided, and the use stability and reliability of the security processing unit are improved; furthermore, after the security processing unit passes the self-inspection and the processing chip configures the target module needing to be supervised by the security processing unit, the integrated and special security processing unit performs state supervision on the target module, and the security processing unit is set to adopt a hardware logic circuit, so that the security processing unit is not required to be supervised, and the security processing unit is not required to be supervised. The processing of the safety signal has higher real-time performance, and the supervision timeliness and reliability of the safety processing unit in the processing chip can be improved.

Description

Technical Field

[0001] The present invention relates to the field of chip control technology, and in particular to an intelligent control method and device for an integrated security processing unit. Background Art

[0002] With the development of automation technology, the popularity and application of automation systems (such as electronic and electrical systems) in safety-related fields (such as the automotive industry and industrial fields) have become relatively widespread. However, during the use of the automation system, due to the influence of many uncontrollable factors, the automation system may fail to control. Therefore, this type of industry that uses automation systems has formulated many strict safety standards for key components used in electronic and electrical systems (such as system-level chips, microcontroller chips, power management chips, etc.). The more common response method is to require that the automation system must be equipped with a special system failure response mechanism or safety mechanism inside or outside, so that the system failure response mechanism or safety mechanism corresponding to the automation system can achieve a diagnostic coverage rate that meets safety requirements. However, in the development of semiconductor chips, in order to make the overall diagnostic coverage of the chip meet the requirements, the conventional method is to add an additional processing chip for the safety mechanism outside the chip, which has the problems of increased production cost, increased chip layout area, and reduced product performance. In addition, due to the setting of the safety mechanism in the prior art, the input signal source used is a shared resource. When a functional module connected to the safety mechanism fails, such as a power input module fails, the safety mechanism will also fail and become unavailable, which greatly reduces the stability and reliability of the safety mechanism. Summary of the invention

[0003] The present invention provides an intelligent management and control method and device for an integrated security processing unit, which can improve the timeliness and stability of security supervision of the security processing unit and reduce the production cost of the security mechanism.

[0004] In order to solve the above technical problems, the first aspect of the present invention discloses an intelligent management and control method of an integrated security processing unit, which is applied to the security processing unit and includes:

[0005] After detecting a startup instruction for the safety processing unit, a unit self-test operation is performed on the safety processing unit to obtain a unit self-test result corresponding to the safety processing unit; the unit self-test operation is used to detect at least one self-test parameter, and the parameter-associated targets of all the self-test parameters include at least one of a signal output component, a redundant detection component, and a control chip; the signal output component only provides a signal for the operation of the safety processing unit;

[0006] After determining that the unit self-test result indicates that the security processing unit has passed the self-test, a unit configuration operation is performed on the security processing unit according to the unit configuration instruction transmitted by the processing chip to obtain a unit configuration result corresponding to the security processing unit, wherein the unit configuration operation includes setting of a module to be supervised and / or on / off control of a module;

[0007] After determining that the unit configuration operation has been executed, a state supervision operation is performed on at least one target module in the security processing unit to obtain a state supervision result corresponding to each target module; the state supervision result corresponding to each target module is used to determine whether to execute module abnormal alarm processing on a certain target module.

[0008] As an optional implementation, in the first aspect of the present invention, the state supervision result corresponding to each of the target modules includes a module operation parameter corresponding to the target module; the module operation parameter includes at least one of a module operation voltage, a module operation current, and a module output signal and a corresponding signal waveform;

[0009] The method further comprises:

[0010] For each of the target modules, determining whether the module operating parameters corresponding to the target module match the reference operating parameters corresponding to the target module, and when the determination result is yes, determining that the target module is in a normal operating state;

[0011] When the judgment result is no, it is determined that the target module is in an abnormal operation state, and at the same time, the target module is updated to a target abnormal module and an alarm information for the target abnormal module is generated;

[0012] According to the alarm information for the target abnormal module, alarm processing is performed on the target abnormal module, and the alarm processing at least includes the output of the alarm information for the target abnormal module; the alarm processing also includes module start / stop state switching and / or module connectivity state switching for the target abnormal module; the module start / stop state switching is used to switch the target abnormal module to a closed state, and the module connectivity state switching is used to cut off the functional interaction between the target abnormal module and other modules except the alarm module; the alarm module is the module that executes the alarm processing.

[0013] As an optional implementation, in the first aspect of the present invention, the security processing unit includes a unit self-test circuit; performing a unit self-test operation on the security processing unit to obtain a unit self-test result corresponding to the security processing unit includes:

[0014] When the startup instruction includes a detection item for an input signal, the unit self-test circuit is controlled to collect signal parameters corresponding to the input signal according to the detection item, the input signal includes an input voltage and / or a clock signal; the signal parameters include a voltage value corresponding to the input voltage and / or a signal feature corresponding to the clock signal, and the signal feature includes at least one of a signal frequency, a signal amplitude, and a signal phase;

[0015] The signal parameter is compared with the standard data corresponding thereto to obtain a comparison result between the signal parameter and the standard data corresponding thereto; and the comparison result is added to the unit self-test result corresponding to the safety processing unit.

[0016] As an optional implementation, in the first aspect of the present invention, the security processing unit includes a unit self-test circuit; the performing a unit self-test operation on the security processing unit to obtain a unit self-test result corresponding to the security processing unit further includes:

[0017] When the startup instruction includes a detection item for a redundant register, two target redundant registers to be compared and initial comparison data are determined according to the detection item; the initial comparison data is a set of data corresponding to the two target redundant registers, and the data content and data recording period of the corresponding records of the set of data are consistent;

[0018] Taking the starting comparison data as the starting point, a bit-by-bit comparison is performed on the recorded data in the two target redundant registers to obtain a bit-by-bit comparison result corresponding to the recorded data in the two target redundant registers, and the bit-by-bit comparison result is added to the unit self-test result corresponding to the security processing unit.

[0019] As an optional implementation manner, in the first aspect of the present invention, the performing a unit self-check operation on the security processing unit to obtain a unit self-check result corresponding to the security processing unit further includes:

[0020] When the startup instruction includes detection items for a preset test mode program, generating a test sequence matching the test mode program and a corresponding test control instruction; and sending the test control instruction to at least one module to be tested;

[0021] The unit self-test circuit acquires module response data, wherein the module response data includes data fed back by each module under test after responding to the test control instruction, and the module response data is used to indicate the module state of the module under test, wherein the module state includes a normal detection state or an abnormal detection state;

[0022] The unit self-check circuit performs safety processing on the module response data that matches the module state, and obtains a safety processing result for the module response data, wherein the safety processing includes a threshold check and a target signal generation, and the target signal generation is used to generate a confirmation signal that matches the normal state of the detection or an alarm signal that matches the abnormal state of the detection; the safety processing result includes a sub-processing result for each of the detected modules;

[0023] Taking a single module under test as a benchmark, the sub-processing results of each module under test are compared with the target test sequence corresponding to the module under test in the test sequence to obtain a sequence comparison result corresponding to each module under test, and the sequence comparison results corresponding to all the modules under test are added to the unit self-test result corresponding to the security processing unit.

[0024] As an optional implementation, in the first aspect of the present invention, after determining that the unit self-test result indicates that the security processing unit self-test has passed, the method further includes:

[0025] The control chip determines the set initial module to be supervised and obtains the current scene configuration requirements;

[0026] The control chip determines the target module to be supervised that matches the scenario configuration requirement;

[0027] The control chip determines whether the initial module to be supervised is consistent with the target module to be supervised. When it is determined that the initial module to be supervised is consistent with the target module to be supervised, a unit configuration instruction corresponding to all the modules to be supervised is generated, and the execution of the unit configuration instruction transmitted by the processing chip is triggered, and a unit configuration operation is performed on the security processing unit to obtain a unit configuration result corresponding to the security processing unit;

[0028] When it is determined that the initial module to be supervised is inconsistent with the target module to be supervised, the control chip determines module difference information corresponding to the initial module to be supervised and the target module to be supervised, wherein the module difference information includes a newly added module and a deleted module of the target module to be supervised relative to the initial module to be supervised;

[0029] The control chip generates a unit configuration instruction corresponding to the module to be supervised based on the module difference information and the initial module to be supervised, triggers the execution of the unit configuration instruction transmitted by the processing chip, performs a unit configuration operation on the security processing unit, and obtains a unit configuration result corresponding to the security processing unit.

[0030] As an optional implementation manner, in the first aspect of the present invention, the generating, by the control chip, a unit configuration instruction corresponding to the module to be supervised according to the module difference information and the initial module to be supervised includes:

[0031] The control chip adds the newly added module to the initial module to be supervised, so as to perform a first-level update on the initial module to be supervised, thereby obtaining a first module to be supervised;

[0032] The control chip determines, from the first modules to be supervised, a module to be deleted that matches the module to be deleted, and generates an adjustment identifier for the module to be deleted;

[0033] The control chip performs a secondary update on the first module to be supervised according to the adjustment identifier to obtain a second module to be supervised, and switches the module to be deleted to a non-supervisory state according to the adjustment identifier; the non-supervisory state is used to indicate that within a preset detection period, the control chip does not need to transmit the module detection result corresponding to the module to be deleted to the security processing unit;

[0034] The control chip generates a unit configuration instruction for the second module to be supervised.

[0035] A second aspect of the present invention discloses an intelligent management and control device for an integrated security processing unit, the device being applied to the security processing unit, the device comprising:

[0036] A unit self-check module, configured to, after detecting a startup instruction for the safety processing unit, perform a unit self-check operation on the safety processing unit to obtain a unit self-check result corresponding to the safety processing unit; the unit self-check operation is configured to detect at least one self-check parameter, and the parameter-associated targets of all the self-check parameters include at least one of a signal output component, a redundant detection component, and a control chip; the signal output component only provides a signal for the operation of the safety processing unit;

[0037] A unit configuration module, for, when it is determined that the unit self-test result indicates that the security processing unit has passed the self-test, executing a unit configuration operation on the security processing unit according to the unit configuration instruction transmitted by the processing chip, to obtain a unit configuration result corresponding to the security processing unit, wherein the unit configuration operation includes setting of a module to be supervised and / or on / off control of a module;

[0038] The unit supervision module is used to perform a state supervision operation on at least one target module in the security processing unit after determining that the unit configuration operation has been executed, and obtain a state supervision result corresponding to each target module; the state supervision result corresponding to each target module is used to determine whether to execute module abnormal alarm processing on a certain target module.

[0039] As an optional implementation, in the second aspect of the present invention, the state supervision result corresponding to each of the target modules includes a module operation parameter corresponding to the target module; the module operation parameter includes at least one of a module operation voltage, a module operation current, and a module output signal and a corresponding signal waveform;

[0040] The device also includes:

[0041] A first judgment module is used to judge, for each of the target modules, whether the module operation parameters corresponding to the target module match the reference operation parameters corresponding to the target module, and when the judgment result is yes, determine that the target module is in a normal operation state;

[0042] An exception handling module, used for, when the judgment result of the first judgment module is negative, determining that the target module is in an abnormal operation state, updating the target module to a target abnormal module and generating alarm information for the target abnormal module;

[0043] The exception handling module is also used to perform alarm processing on the target exception module according to the alarm information for the target exception module, and the alarm processing at least includes the output of alarm information for the target exception module; the alarm processing also includes module start / stop state switching and / or module connectivity state switching for the target exception module; the module start / stop state switching is used to switch the target exception module to a closed state, and the module connectivity state switching is used to cut off the functional interaction between the target exception module and other modules except the alarm module; the alarm module is a module that executes the alarm processing.

[0044] As an optional implementation, in the second aspect of the present invention, the security processing unit includes a unit self-test circuit; the unit self-test module performs a unit self-test operation on the security processing unit, and a method of obtaining a unit self-test result corresponding to the security processing unit specifically includes:

[0045] When the startup instruction includes a detection item for an input signal, the unit self-test circuit is controlled to collect signal parameters corresponding to the input signal according to the detection item, the input signal includes an input voltage and / or a clock signal; the signal parameters include a voltage value corresponding to the input voltage and / or a signal feature corresponding to the clock signal, and the signal feature includes at least one of a signal frequency, a signal amplitude, and a signal phase;

[0046] The signal parameter is compared with the standard data corresponding thereto to obtain a comparison result between the signal parameter and the standard data corresponding thereto; and the comparison result is added to the unit self-test result corresponding to the safety processing unit.

[0047] As an optional implementation, in the second aspect of the present invention, the security processing unit includes a unit self-test circuit; the unit self-test module performs a unit self-test operation on the security processing unit, and a method of obtaining a unit self-test result corresponding to the security processing unit specifically includes:

[0048] When the startup instruction includes a detection item for a redundant register, two target redundant registers to be compared and initial comparison data are determined according to the detection item; the initial comparison data is a set of data corresponding to the two target redundant registers, and the data content and data recording period of the corresponding records of the set of data are consistent;

[0049] Taking the starting comparison data as the starting point, a bit-by-bit comparison is performed on the recorded data in the two target redundant registers to obtain a bit-by-bit comparison result corresponding to the recorded data in the two target redundant registers, and the bit-by-bit comparison result is added to the unit self-test result corresponding to the security processing unit.

[0050] As an optional implementation, in the second aspect of the present invention, the unit self-check module performs a unit self-check operation on the security processing unit, and a method of obtaining a unit self-check result corresponding to the security processing unit specifically includes:

[0051] When the startup instruction includes detection items for a preset test mode program, generating a test sequence matching the test mode program and a corresponding test control instruction; and sending the test control instruction to at least one module to be tested;

[0052] The unit self-test circuit acquires module response data, wherein the module response data includes data fed back by each module under test after responding to the test control instruction, and the module response data is used to indicate the module state of the module under test, wherein the module state includes a normal detection state or an abnormal detection state;

[0053] The unit self-check circuit performs safety processing on the module response data that matches the module state, and obtains a safety processing result for the module response data, wherein the safety processing includes a threshold check and a target signal generation, and the target signal generation is used to generate a confirmation signal that matches the normal state of the detection or an alarm signal that matches the abnormal state of the detection; the safety processing result includes a sub-processing result for each of the detected modules;

[0054] Taking a single module under test as a benchmark, the sub-processing results of each module under test are compared with the target test sequence corresponding to the module under test in the test sequence to obtain a sequence comparison result corresponding to each module under test, and the sequence comparison results corresponding to all the modules under test are added to the unit self-test result corresponding to the security processing unit.

[0055] As an optional implementation, in the second aspect of the present invention, the device further includes:

[0056] A requirement acquisition module, used for determining the set initial to-be-supervised module by the control chip after determining that the unit self-test result indicates that the safety processing unit self-test has passed, and obtaining the current scenario configuration requirement at the same time;

[0057] A determination module, configured to determine, by the control chip, a target module to be supervised that matches the scenario configuration requirement;

[0058] A second judgment module, configured to use the control chip to judge whether the initial module to be supervised is consistent with the target module to be supervised;

[0059] An instruction generation module, configured to generate unit configuration instructions corresponding to all the modules to be supervised when the second judgment module determines that the initial module to be supervised is consistent with the target module to be supervised, and trigger the unit configuration module to execute the unit configuration instructions transmitted according to the processing chip, perform unit configuration operations on the security processing unit, and obtain a unit configuration result corresponding to the security processing unit;

[0060] The determination module is further configured to determine, by the control chip, module difference information corresponding to the initial module to be supervised and the target module to be supervised when the second judgment module determines that the initial module to be supervised is inconsistent with the target module to be supervised, wherein the module difference information includes a newly added module and a deleted module of the target module to be supervised relative to the initial module to be supervised;

[0061] The instruction generation module is also used for the control chip to generate a unit configuration instruction corresponding to the module to be supervised based on the module difference information and the initial module to be supervised, and trigger the unit configuration module to execute the unit configuration instruction transmitted by the processing chip, perform the unit configuration operation on the security processing unit, and obtain the unit configuration result corresponding to the security processing unit.

[0062] As an optional implementation, in the second aspect of the present invention, the instruction generation module generates a unit configuration instruction corresponding to the module to be supervised by the control chip according to the module difference information and the initial module to be supervised, specifically including:

[0063] The control chip adds the newly added module to the initial module to be supervised, so as to perform a first-level update on the initial module to be supervised, thereby obtaining a first module to be supervised;

[0064] The control chip determines, from the first modules to be supervised, a module to be deleted that matches the module to be deleted, and generates an adjustment identifier for the module to be deleted;

[0065] The control chip performs a secondary update on the first module to be supervised according to the adjustment identifier to obtain a second module to be supervised, and switches the module to be deleted to a non-supervisory state according to the adjustment identifier; the non-supervisory state is used to indicate that within a preset detection period, the control chip does not need to transmit the module detection result corresponding to the module to be deleted to the security processing unit;

[0066] The control chip generates a unit configuration instruction for the second module to be supervised.

[0067] A third aspect of the present invention discloses another intelligent management and control device of an integrated security processing unit, the device comprising:

[0068] A memory storing executable program code;

[0069] a processor coupled to the memory;

[0070] The processor calls the executable program code stored in the memory to execute the intelligent management and control method of the integrated security processing unit disclosed in the first aspect of the present invention.

[0071] The fourth aspect of the present invention discloses a computer storage medium, which stores computer instructions. When the computer instructions are called, they are used to execute the intelligent management and control method of the integrated security processing unit disclosed in the first aspect of the present invention.

[0072] Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

[0073] In an embodiment of the present invention, a smart management and control method for an integrated safety processing unit is provided, and the method includes: It can be seen that the implementation of the present invention sets an internal self-check function for the safety processing unit, and can perform self-check on the safety processing unit within a preset multi-point fault detection time interval to ensure that there are no latent faults, thereby improving the safety of the use of the safety processing unit; at the same time, the input signal used by the safety processing unit uses an independent power domain, clock source and reset source, thereby avoiding unit failure caused by failure of shared resources, which is conducive to improving the stability and reliability of the use of the safety processing unit; further, after the safety processing unit self-checks and the target module that needs to be supervised by the processing chip is configured by the processing chip, the state supervision of the target module is performed by the integrated and dedicated safety processing unit. Since the safety processing unit is set to use a hardware logic circuit, the processing of the safety signal has a higher real-time performance, which is conducive to improving the supervision timeliness and reliability of the safety processing mechanism (the supervision function of the safety processing unit) in the processing chip. BRIEF DESCRIPTION OF THE DRAWINGS

[0074] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0075] Figure 1 It is a flow chart of an intelligent management and control method of an integrated security processing unit disclosed in an embodiment of the present invention;

[0076] Figure 2 It is a flow chart of another intelligent management and control method of an integrated security processing unit disclosed in an embodiment of the present invention;

[0077] Figure 3 It is a structural schematic diagram of an intelligent control device of an integrated security processing unit disclosed in an embodiment of the present invention;

[0078] Figure 4 It is a structural schematic diagram of another intelligent control device of an integrated security processing unit disclosed in an embodiment of the present invention;

[0079] Figure 5 It is a structural schematic diagram of another intelligent control device of an integrated security processing unit disclosed in an embodiment of the present invention;

[0080] Figure 6 It is a schematic diagram of the layout of a security processing unit in a processing chip disclosed in an embodiment of the present invention. DETAILED DESCRIPTION

[0081] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0082] The terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish different objects rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, device, product or end including a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units inherent to these processes, methods, products or ends.

[0083] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0084] The present invention discloses an intelligent management and control method and device of an integrated safety processing unit, which is provided with an internal self-check function for the safety processing unit, and can perform self-check on the safety processing unit within a preset multi-point fault detection time interval to ensure that there are no latent faults, thereby improving the safety of the use of the safety processing unit; at the same time, the input signal used by the safety processing unit uses an independent power domain, clock source and reset source, thereby avoiding unit failure caused by failure of shared resources, which is conducive to improving the stability and reliability of the use of the safety processing unit; further, after the safety processing unit self-checks and the target module that the safety processing unit needs to supervise is configured by the processing chip, the state supervision of the target module is performed by the integrated and dedicated safety processing unit. Since the safety processing unit is set to use a hardware logic circuit, the processing of the safety signal has higher real-time performance, which is conducive to improving the supervision timeliness and reliability of the safety processing mechanism (the supervision function of the safety processing unit) in the processing chip. The following are detailed descriptions.

[0085] Embodiment 1

[0086] See also Figure 1 , Figure 1 1 is a flow chart of an intelligent management and control method of an integrated security processing unit disclosed in an embodiment of the present invention. Figure 1 The intelligent control method of the integrated security processing unit described above can be applied to the security processing unit, and can also be applied to the intelligent control device of the integrated security processing unit, which is not limited in the embodiments of the present invention. Figure 1 As shown, the intelligent management and control method of the integrated security processing unit may include the following operations:

[0087] 101. After a startup instruction for a security processing unit is detected, a unit self-test operation is performed on the security processing unit to obtain a unit self-test result corresponding to the security processing unit.

[0088] In an embodiment of the present invention, the unit self-test operation is used to detect at least one self-test parameter, and the parameter association targets of all self-test parameters include at least one of a signal output component, a redundant detection component, and a control chip; the signal output component only provides a signal for the operation of the safety processing unit.

[0089] In the embodiment of the present invention, please refer to Figure 6 , Figure 6 is a schematic diagram of the layout of a security processing unit in a processing chip disclosed in an embodiment of the present invention; Figure 6 As shown, the security processing unit is set in the processing chip, specifically, the security processing unit is hung on the chip connection bus, and can directly receive the detection results of other industrial modules in the chip.

[0090] In the embodiment of the present invention, it should be noted that the security processing unit uses a power domain, clock source and reset source that are different from other functional modules, which can avoid the security processing unit being unable to normally perform its exception handling function due to the failure of the three types of shared resources.

[0091] In the embodiment of the present invention, the security processing unit is composed of basic combinational logic circuits and sequential logic circuits, and does not rely on additional security processors to perform security management on the chip (such as IP fault processing, security state switching, etc.). Compared with the security island that requires many hardware resources, the chip area required is smaller and the development difficulty is lower.

[0092] 102. After determining that the unit self-test result indicates that the security processing unit has passed the self-test, perform a unit configuration operation on the security processing unit according to the unit configuration instruction transmitted by the processing chip to obtain a unit configuration result corresponding to the security processing unit.

[0093] In the embodiment of the present invention, the unit configuration operation includes setting of the module to be supervised and / or on / off control of the module.

[0094] 103. After determining that the unit configuration operation is completed, perform a state supervision operation on at least one target module in the security processing unit to obtain a state supervision result corresponding to each target module.

[0095] In the embodiment of the present invention, the state monitoring result corresponding to each target module is used to determine whether to execute module abnormality alarm processing for a certain target module.

[0096] It can be seen that implementation Figure 1 The described intelligent management and control method of the integrated safety processing unit is provided with an internal self-check function for the safety processing unit, which can perform self-check on the safety processing unit within a preset multi-point fault detection time interval to ensure that there are no latent faults, thereby improving the safety of the use of the safety processing unit; at the same time, the input signal adopted by the safety processing unit uses an independent power domain, clock source and reset source, thereby avoiding unit failure caused by failure of shared resources, which is beneficial to improving the stability and reliability of the use of the safety processing unit; further, after the safety processing unit passes the self-check and after the processing chip configures the target module that needs to be supervised by the safety processing unit, the integrated and dedicated safety processing unit performs status supervision on the target module. Since the safety processing unit is set to use a hardware logic circuit, the processing of the safety signal has a higher real-time performance, which is beneficial to improving the supervision timeliness and reliability of the safety processing mechanism (the supervision function of the safety processing unit) in the processing chip.

[0097] In an optional embodiment, the state supervision result corresponding to each target module includes a module operation parameter corresponding to the target module; the module operation parameter includes at least one of a module operation voltage, a module operation current, and a module output signal and a corresponding signal waveform;

[0098] The method further includes:

[0099] For each target module, determining whether the module operation parameters corresponding to the target module match the reference operation parameters corresponding to the target module, and when the determination result is yes, determining that the target module is in a normal operation state;

[0100] When the judgment result is no, it is determined that the target module is in an abnormal operation state, and at the same time, the target module is updated to a target abnormal module and an alarm information for the target abnormal module is generated;

[0101] According to the alarm information for the target abnormal module, alarm processing is performed on the target abnormal module, and the alarm processing at least includes the output of the alarm information for the target abnormal module; the alarm processing also includes module start / stop state switching and / or module connectivity state switching for the target abnormal module; the module start / stop state switching is used to switch the target abnormal module to the closed state, and the module connectivity state switching is used to cut off the functional interaction between the target abnormal module and other modules except the alarm module; the alarm module is the module that executes the alarm processing.

[0102] In this optional embodiment, if Figure 6 As shown, the security processing unit is mounted on the chip connection bus and can obtain the detection signal / detection result for the target module itself fed back by the test program of the target module response processing chip, and then the security processing module performs abnormal analysis on each target module, and for abnormal detection results, the target abnormal module in the abnormal operation state generates corresponding alarm information and performs alarm processing.

[0103] In this optional embodiment, the module operating parameters corresponding to each target module are correspondingly provided with a matching benchmark operating parameter, and the benchmark operating parameter may refer to a standard value or a standard value range determined when the module operating parameter operates normally, such as the rated output voltage of a battery; by judging whether the values ​​of the module operating parameter and the benchmark operating parameter are consistent, or whether the difference between the two is within the allowable error range, or whether the module operating parameter is within the value range of the benchmark operating parameter, it is then judged whether the two match.

[0104] It can be seen that in this optional embodiment, through the integrated and dedicated security processing unit, real-time status supervision can be performed intelligently on the supervised target module, thereby improving the timeliness of the status supervision on the target module; for the target abnormal module with abnormal detection results, alarm information generation and alarm processing can also be performed in a timely manner, thereby improving the alarm information generation speed and alarm processing efficiency for the target abnormal module.

[0105] In another optional embodiment, the security processing unit includes a unit self-test circuit; the above step 101 performs a unit self-test operation on the security processing unit, and the method of obtaining a unit self-test result corresponding to the security processing unit specifically includes:

[0106] When the start instruction includes a detection item for an input signal, the self-test circuit of the control unit collects signal parameters corresponding to the input signal according to the detection item, the input signal includes an input voltage and / or a clock signal; the signal parameter includes a voltage value corresponding to the input voltage and / or a signal feature corresponding to the clock signal, and the signal feature includes at least one of a signal frequency, a signal amplitude, and a signal phase;

[0107] The signal parameter is compared with the standard data corresponding thereto to obtain a comparison result between the signal parameter and the standard data corresponding thereto; and the comparison result is added to the unit self-test result corresponding to the safety processing unit.

[0108] It can be seen that in this optional embodiment, a self-check process for the input signal is set up for the security processing unit. The input signal is used to maintain the basic operating function of the security processing unit. The detection is performed from the basic operating level of the unit, which is beneficial to improving the operating reliability of the security processing unit.

[0109] In this optional embodiment, the security processing unit includes a unit self-test circuit; the above step 101 performs a unit self-test operation on the security processing unit, and the method of obtaining a unit self-test result corresponding to the security processing unit specifically includes:

[0110] When the start instruction includes a detection item for a redundant register, two target redundant registers to be compared and starting comparison data are determined according to the detection item; the starting comparison data is a set of data corresponding to the two target redundant registers, and the data content and data recording period of the corresponding records of the set of data are consistent;

[0111] Taking the initial comparison data as the starting point, a bit-by-bit comparison is performed on the recorded data in the two target redundant registers to obtain a bit-by-bit comparison result corresponding to the recorded data in the two target redundant registers, and the bit-by-bit comparison result is added to the unit self-test result corresponding to the security processing unit.

[0112] In this optional embodiment, in a computer system, register redundancy comparison is one of the important means to ensure data integrity and system stability. This comparison usually involves comparing data in redundant registers to detect possible errors or inconsistencies.

[0113] It can be seen that in this optional embodiment, a detection mechanism for redundant registers is set up. By detecting whether the comparison results of the data recorded by the two redundant registers are consistent to make error judgments, self-checking of the security processing unit is realized from the data recording level, thereby improving the detection precision of the security processing unit. In addition, the detection of the redundant registers can perform error correction on erroneous data in a timely manner, which is beneficial to improving the overall stability and reliability of the security processing unit and its corresponding processing chip.

[0114] In yet another optional embodiment, the above step 101 performs a unit self-check operation on the security processing unit, and the method of obtaining a unit self-check result corresponding to the security processing unit specifically includes:

[0115] When the startup instruction includes detection items for a preset test mode program, a test sequence matching the test mode program and a corresponding test control instruction are generated; and the test control instruction is sent to at least one module to be tested;

[0116] The module response data is obtained by the unit self-test circuit. The module response data includes data fed back by each tested module after responding to the test control instruction. The module response data is used to indicate the module status of the tested module. The module status includes a normal detection status or an abnormal detection status.

[0117] The unit self-check circuit performs safety processing on the module response data that matches the module state, and obtains a safety processing result for the module response data, wherein the safety processing includes a threshold check and a target signal generation, and the target signal generation is used to generate a confirmation signal that matches the normal state of the detection or an alarm signal that matches the abnormal state of the detection; the safety processing result includes a sub-processing result for each module under inspection;

[0118] Taking a single module under test as a benchmark, the sub-processing results of each module under test are compared with the target test sequence corresponding to the module under test in the test sequence to obtain the sequence comparison results corresponding to each module under test, and the sequence comparison results corresponding to all modules under test are added to the unit self-test results corresponding to the security processing unit.

[0119] In this optional embodiment, the call of the test mode program is used to detect whether the detection path of the security processing unit SPU is working normally, including its ability to receive signals, process signals and generate alarm signals.

[0120] In this optional embodiment, the test sequence includes "normal detection" and "abnormal detection" signals; these signals can be simulated sensor readings or specific data packets; correspondingly, the test control instructions include simulated "normal" or "abnormal" conditions, such as temperature, pressure, current and other sensor readings.

[0121] In this optional embodiment, the security processing also includes filtering processing, noise removal processing, etc.

[0122] It can be seen that in this optional embodiment, by setting up a detection program for the test mode program, the test mode program from the CPU can be effectively executed to verify whether the detection path of the SPU (security processing unit) is working normally, which is crucial to ensuring the security and reliability of the security processing unit and the processing chip, and further improving the stability, security and reliability of the use of the security processing unit.

[0123] Embodiment 2

[0124] See also Figure 2 , Figure 21 is a flow chart of another intelligent management and control method of an integrated security processing unit disclosed in an embodiment of the present invention. Figure 2 The intelligent control method of the integrated security processing unit described above can be applied to an intelligent control device of the integrated security processing unit, and the embodiments of the present invention are not limited thereto. Figure 2 As shown, the intelligent management and control method of the integrated security processing unit may include the following operations:

[0125] 201. After a startup instruction for a security processing unit is detected, a unit self-check operation is performed on the security processing unit to obtain a unit self-check result corresponding to the security processing unit.

[0126] 202. After determining that the unit self-test result indicates that the safety processing unit self-test has passed, the control chip determines the set initial module to be supervised and obtains the current scene configuration requirements.

[0127] 203. The control chip determines a target module to be supervised that matches the scenario configuration requirement.

[0128] 204. The control chip determines whether the initial module to be supervised is consistent with the target module to be supervised.

[0129] 205. When it is determined that the initial module to be supervised is consistent with the target module to be supervised, a unit configuration instruction corresponding to all modules to be supervised is generated, and step 207 is triggered to perform a unit configuration operation on the security processing unit according to the unit configuration instruction transmitted by the processing chip, and obtain a unit configuration result corresponding to the security processing unit.

[0130] 206. When it is determined that the initial module to be supervised is inconsistent with the target module to be supervised, the control chip determines module difference information corresponding to the initial module to be supervised and the target module to be supervised.

[0131] In the embodiment of the present invention, the module difference information includes newly added modules and deleted modules of the target module to be supervised relative to the initial module to be supervised.

[0132] 207. The control chip generates a unit configuration instruction corresponding to the module to be supervised according to the module difference information and the initial module to be supervised, and triggers the execution step 207 to perform a unit configuration operation on the security processing unit according to the unit configuration instruction transmitted by the processing chip, and obtains a unit configuration result corresponding to the security processing unit.

[0133] 208. Execute a unit configuration operation on the security processing unit according to the unit configuration instruction transmitted by the processing chip to obtain a unit configuration result corresponding to the security processing unit.

[0134] 209. After determining that the unit configuration operation is completed, perform a state supervision operation on at least one target module in the security processing unit to obtain a state supervision result corresponding to each target module.

[0135] In the embodiment of the present invention, for other descriptions of step 201, and step 208-step 209, please refer to other specific descriptions of step 101, and step 102-step 103 in embodiment 1, and the embodiment of the present invention will not be repeated here.

[0136] It can be seen that implementation Figure 2 The described intelligent management and control method of the integrated security processing unit sets up a verification process for the target module to be supervised before configuring the actual module to be supervised of the security processing module through the processing chip. The verification process determines whether the initial module to be supervised is consistent with the target module to be supervised that matches the scene configuration requirements of the current scene. If they are inconsistent, the module difference information is automatically determined and then a precisely adapted unit configuration instruction is generated based on the module difference information. That is, through this verification process, developers can select the signals that need to be supervised according to the product acceptance criteria and application scenarios, and better balance the performance, power consumption and failure control capabilities of the chip; it is beneficial to improve the generation accuracy of the unit configuration instructions and the current scene configuration requirements, thereby avoiding the security processing unit supervising the deleted modules that do not need to be supervised, and improving the supervision accuracy of the security processing unit.

[0137] In an optional embodiment, the method of generating, by the control chip, a unit configuration instruction corresponding to the module to be supervised according to the module difference information and the initial module to be supervised specifically includes:

[0138] The control chip adds the new module to the initial module to be supervised, so as to perform a first-level update on the initial module to be supervised, thereby obtaining a first module to be supervised;

[0139] The control chip determines a to-be-determined deletion module that matches the deletion module from the first to-be-supervised module, and generates an adjustment identifier for the to-be-determined deletion module;

[0140] The control chip performs a secondary update on the first module to be supervised according to the adjustment identifier to obtain a second module to be supervised, and at the same time switches the module to be deleted to a non-supervisory state according to the adjustment identifier; the non-supervisory state is used to indicate that within a preset detection period, the control chip does not need to transmit the module detection result corresponding to the module to be deleted to the security processing unit;

[0141] The control chip generates a unit configuration instruction for the second module to be supervised.

[0142] It can be seen that in this optional embodiment, in response to the inconsistency between the initial module to be supervised and the target supervision module, the new module can be intelligently added to the initial module to be supervised, and the module to be deleted can be deleted from the initial supervision module, and the module to be deleted can be marked at the same time, so that the adjustment mark can be used to accurately determine that the module to be deleted is not necessary, thereby further improving the generation accuracy of the unit configuration instructions and reducing the situation where the security processing unit incorrectly supervises the module to be deleted.

[0143] In another optional embodiment, the method in which the control chip determines the module difference information corresponding to the initial module to be supervised and the target module to be supervised in step 205 specifically includes:

[0144] The control chip compares the initial module to be supervised with the target module to be supervised, and obtains the newly added modules and deleted modules of the target module to be supervised relative to the initial module to be supervised;

[0145] The control chip determines whether the self-test result of the unit includes an alarm signal, and when it is determined that the self-test result of the unit includes an alarm signal, determines an alarm module that matches the alarm signal;

[0146] The deleted module is updated according to the alarm module, and the newly added module and the updated deleted module are determined as the module difference information corresponding to the initial module to be supervised and the target module to be supervised.

[0147] It can be seen that in this optional embodiment, when determining module difference information, in addition to the basic difference module determination between the initial module to be supervised and the target module to be supervised, it is also possible to perform a judgment on the existence of an alarm module, and update the alarm module to the deletion module when it exists, thereby improving the accuracy and completeness of the determination of the deletion module.

[0148] Embodiment 3

[0149] See also Figure 3 , Figure 3 1 is a schematic diagram of the structure of an intelligent control device of an integrated security processing unit disclosed in an embodiment of the present invention. The intelligent control device of the integrated security processing unit is applied to the security processing unit, which is not limited in the embodiment of the present invention. Figure 3 As shown, the intelligent management and control device of the integrated security processing unit may include a unit self-check module 301, a unit configuration module 302 and a unit supervision module 303, wherein:

[0150] The unit self-test module 301 is used to perform a unit self-test operation on the safety processing unit after detecting a startup instruction for the safety processing unit, and obtain a unit self-test result corresponding to the safety processing unit; the unit self-test operation is used to detect at least one self-test parameter, and the parameter-associated targets of all self-test parameters include at least one of a signal output component, a redundant detection component, and a control chip; the signal output component only provides a signal for the operation of the safety processing unit.

[0151] The unit configuration module 302 is used to perform unit configuration operations on the security processing unit according to the unit configuration instructions transmitted by the processing chip after determining that the unit self-test result indicates that the security processing unit has passed the self-test, and obtain a unit configuration result corresponding to the security processing unit. The unit configuration operation includes the setting of the module to be supervised and / or the on-off control of the module.

[0152] The unit supervision module 303 is used to perform a state supervision operation on at least one target module in the security processing unit after determining that the unit configuration operation has been completed, and obtain a state supervision result corresponding to each target module; the state supervision result corresponding to each target module is used to determine whether to perform module abnormal alarm processing on a certain target module.

[0153] It can be seen that implementation Figure 3 The described intelligent control device of the integrated safety processing unit is provided with an internal self-check function for the safety processing unit, and can perform self-check on the safety processing unit within a preset multi-point fault detection time interval to ensure that there are no latent faults, thereby improving the safety of the use of the safety processing unit; at the same time, the input signal adopted by the safety processing unit uses an independent power domain, clock source and reset source, thereby avoiding unit failure caused by failure of shared resources, which is beneficial to improving the stability and reliability of the use of the safety processing unit; further, after the safety processing unit passes the self-check, and after the processing chip configures the target module that needs to be supervised by the safety processing unit, the integrated and dedicated safety processing unit performs status supervision on the target module. Since the safety processing unit is set to use a hardware logic circuit, the processing of the safety signal has a higher real-time performance, which is beneficial to improving the supervision timeliness and reliability of the safety processing mechanism (the supervision function of the safety processing unit) in the processing chip.

[0154] In an optional embodiment, the state supervision result corresponding to each target module includes a module operation parameter corresponding to the target module; the module operation parameter includes at least one of a module operation voltage, a module operation current, and a module output signal and a corresponding signal waveform;

[0155] See also Figure 4 , Figure 4is a structural schematic diagram of another intelligent control device of an integrated security processing unit disclosed in an embodiment of the present invention; Figure 4 As shown, the device also includes a first judgment module 304 and an exception handling module 305, wherein:

[0156] The first judgment module 304 is used to judge, for each target module, whether the module operation parameters corresponding to the target module match the reference operation parameters corresponding to the target module, and when the judgment result is yes, determine that the target module is in a normal operation state;

[0157] The exception handling module 305 is used to determine that the target module is in an abnormal operation state when the judgment result of the first judgment module 304 is no, and at the same time update the target module to a target abnormal module and generate alarm information for the target abnormal module;

[0158] The exception handling module 305 is also used to perform alarm processing on the target exception module according to the alarm information of the target exception module, and the alarm processing at least includes the output of the alarm information for the target exception module; the alarm processing also includes the module start / stop state switching and / or module connectivity state switching for the target exception module; the module start / stop state switching is used to switch the target exception module to the closed state, and the module connectivity state switching is used to cut off the functional interaction between the target exception module and other modules except the alarm module; the alarm module is the module that performs alarm processing.

[0159] It can be seen that in this optional embodiment, through the integrated and dedicated security processing unit, real-time status supervision can be performed intelligently on the supervised target module, thereby improving the timeliness of the status supervision on the target module; for the target abnormal module with abnormal detection results, alarm information generation and alarm processing can also be performed in a timely manner, thereby improving the alarm information generation speed and alarm processing efficiency for the target abnormal module.

[0160] In another optional embodiment, the security processing unit includes a unit self-check circuit; the unit self-check module 301 performs a unit self-check operation on the security processing unit, and a method of obtaining a unit self-check result corresponding to the security processing unit specifically includes:

[0161] When the start instruction includes a detection item for an input signal, the self-test circuit of the control unit collects signal parameters corresponding to the input signal according to the detection item, the input signal includes an input voltage and / or a clock signal; the signal parameter includes a voltage value corresponding to the input voltage and / or a signal feature corresponding to the clock signal, and the signal feature includes at least one of a signal frequency, a signal amplitude, and a signal phase;

[0162] The signal parameter is compared with the standard data corresponding thereto to obtain a comparison result between the signal parameter and the standard data corresponding thereto; and the comparison result is added to the unit self-test result corresponding to the safety processing unit.

[0163] It can be seen that in this optional embodiment, a self-check process for the input signal is set up for the security processing unit. The input signal is used to maintain the basic operating function of the security processing unit. The detection is performed from the basic operating level of the unit, which is beneficial to improving the operating reliability of the security processing unit.

[0164] In this optional embodiment, the security processing unit includes a unit self-check circuit; the unit self-check module 301 performs a unit self-check operation on the security processing unit, and a method of obtaining a unit self-check result corresponding to the security processing unit specifically includes:

[0165] When the start instruction includes a detection item for a redundant register, two target redundant registers to be compared and starting comparison data are determined according to the detection item; the starting comparison data is a set of data corresponding to the two target redundant registers, and the data content and data recording period of the corresponding records of the set of data are consistent;

[0166] Taking the initial comparison data as the starting point, a bit-by-bit comparison is performed on the recorded data in the two target redundant registers to obtain a bit-by-bit comparison result corresponding to the recorded data in the two target redundant registers, and the bit-by-bit comparison result is added to the unit self-test result corresponding to the security processing unit.

[0167] It can be seen that in this optional embodiment, a detection mechanism for redundant registers is set up. By detecting whether the comparison results of the data recorded by the two redundant registers are consistent to make error judgments, self-checking of the security processing unit is realized from the data recording level, thereby improving the detection precision of the security processing unit. In addition, the detection of the redundant registers can perform error correction on erroneous data in a timely manner, which is beneficial to improving the overall stability and reliability of the security processing unit and its corresponding processing chip.

[0168] In yet another optional embodiment, the unit self-check module 301 performs a unit self-check operation on the security processing unit, and a method of obtaining a unit self-check result corresponding to the security processing unit specifically includes:

[0169] When the startup instruction includes detection items for a preset test mode program, a test sequence matching the test mode program and a corresponding test control instruction are generated; and the test control instruction is sent to at least one module to be tested;

[0170] The module response data is obtained by the unit self-test circuit. The module response data includes data fed back by each tested module after responding to the test control instruction. The module response data is used to indicate the module status of the tested module. The module status includes a normal detection status or an abnormal detection status.

[0171] The unit self-check circuit performs safety processing on the module response data that matches the module state, and obtains a safety processing result for the module response data, wherein the safety processing includes a threshold check and a target signal generation, and the target signal generation is used to generate a confirmation signal that matches the normal state of the detection or an alarm signal that matches the abnormal state of the detection; the safety processing result includes a sub-processing result for each module under inspection;

[0172] Taking a single module under test as a benchmark, the sub-processing results of each module under test are compared with the target test sequence corresponding to the module under test in the test sequence to obtain the sequence comparison results corresponding to each module under test, and the sequence comparison results corresponding to all modules under test are added to the unit self-test results corresponding to the security processing unit.

[0173] It can be seen that in this optional embodiment, by setting up a detection program for the test mode program, the test mode program from the CPU can be effectively executed to verify whether the detection path of the SPU is working properly, which is crucial to ensuring the security and reliability of the security processing unit and the processing chip, and further improving the stability, security and reliability of the use of the security processing unit.

[0174] In another optional embodiment, Figure 4 As shown, the device also includes a demand acquisition module 306, a determination module 307, a second judgment module 308 and an instruction generation module 309, wherein:

[0175] The requirement acquisition module 306 is used to determine the set initial to-be-supervised module by the control chip after determining that the unit self-test result indicates that the safety processing unit self-test has passed, and to obtain the current scenario configuration requirement;

[0176] A determination module 307, configured to determine, by the control chip, a target module to be supervised that matches the scenario configuration requirement;

[0177] The second judgment module 308 is used for the control chip to judge whether the initial module to be supervised is consistent with the target module to be supervised;

[0178] The instruction generation module 309 is used to generate unit configuration instructions corresponding to all modules to be supervised when the second judgment module 308 judges that the initial module to be supervised is consistent with the target module to be supervised, and trigger the unit configuration module 302 to execute the unit configuration instructions transmitted according to the processing chip, perform the unit configuration operation on the security processing unit, and obtain the unit configuration result corresponding to the security processing unit;

[0179] The determination module 307 is further configured to determine, by the control chip, module difference information corresponding to the initial module to be supervised and the target module to be supervised when the second determination module 308 determines that the initial module to be supervised is inconsistent with the target module to be supervised, wherein the module difference information includes a newly added module and a deleted module of the target module to be supervised relative to the initial module to be supervised;

[0180] The instruction generation module 309 is also used for the control chip to generate unit configuration instructions corresponding to the module to be supervised based on the module difference information and the initial module to be supervised, and trigger the unit configuration module 302 to execute the unit configuration instructions transmitted by the processing chip, perform unit configuration operations on the security processing unit, and obtain a unit configuration result corresponding to the security processing unit.

[0181] It can be seen that in this optional embodiment, before the actual module to be supervised by the security processing module is configured through the processing chip, a verification process is set for the target module to be supervised. Through this verification process, it is determined whether the initial module to be supervised is consistent with the target module to be supervised that matches the scene configuration requirements of the current scene. If they are inconsistent, the module difference information is automatically determined and then a precisely adapted unit configuration instruction is generated based on the module difference information, thereby improving the generation accuracy of the unit configuration instruction and the current scene configuration requirements, thereby avoiding the security processing unit supervising the deleted modules that do not need to be supervised, thereby improving the supervision accuracy of the security processing unit.

[0182] In this optional embodiment, the instruction generation module 309 generates the unit configuration instruction corresponding to the module to be supervised by the control chip according to the module difference information and the initial module to be supervised, specifically including:

[0183] The control chip adds the new module to the initial module to be supervised, so as to perform a first-level update on the initial module to be supervised, thereby obtaining a first module to be supervised;

[0184] The control chip determines a to-be-determined deletion module that matches the deletion module from the first to-be-supervised module, and generates an adjustment identifier for the to-be-determined deletion module;

[0185] The control chip performs a secondary update on the first module to be supervised according to the adjustment identifier to obtain a second module to be supervised, and at the same time switches the module to be deleted to a non-supervisory state according to the adjustment identifier; the non-supervisory state is used to indicate that within a preset detection period, the control chip does not need to transmit the module detection result corresponding to the module to be deleted to the security processing unit;

[0186] The control chip generates a unit configuration instruction for the second module to be supervised.

[0187] It can be seen that in this optional embodiment, in response to the inconsistency between the initial module to be supervised and the target supervision module, the new module can be intelligently added to the initial module to be supervised, and the module to be deleted can be deleted from the initial supervision module, and the module to be deleted can be marked at the same time, so that the adjustment mark can be used to accurately determine that the module to be deleted is not necessary, thereby further improving the generation accuracy of the unit configuration instructions and reducing the situation where the security processing unit incorrectly supervises the module to be deleted.

[0188] Embodiment 4

[0189] See also Figure 5 , Figure 5 FIG. 1 is a schematic diagram of the structure of another intelligent control device of an integrated security processing unit disclosed in an embodiment of the present invention. Figure 5 As shown, the intelligent management and control device of the integrated security processing unit may include:

[0190] A memory 401 storing executable program codes;

[0191] a processor 402 coupled to the memory 401;

[0192] The processor 402 calls the executable program code stored in the memory 401 to execute the steps of the intelligent management and control method of the integrated security processing unit described in the first embodiment of the present invention or the second embodiment of the present invention.

[0193] Embodiment 5

[0194] An embodiment of the present invention discloses a computer storage medium, which stores computer instructions. When the computer instructions are called, they are used to execute the steps in the intelligent management and control method of the integrated security processing unit described in Embodiment 1 or Embodiment 2 of the present invention.

[0195] Embodiment 6

[0196] An embodiment of the present invention discloses a computer program product, which includes a non-transitory computer storage medium storing a computer program, and the computer program is operable to enable a computer to execute the steps in the intelligent management and control method of an integrated security processing unit described in Embodiment 1 or Embodiment 2.

[0197] The device embodiments described above are only illustrative, wherein the modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, i.e., they may be located in one place, or they may be distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Those of ordinary skill in the art may understand and implement it without creative work.

[0198] Through the specific description of the above embodiments, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on such an understanding, the above technical solution can be essentially or partly contributed to the prior art in the form of a software product, and the computer software product can be stored in a computer storage medium, and the storage medium includes a read-only memory (ROM), a random access memory (RAM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), a one-time programmable read-only memory (OTPROM), an electronically erasable rewritable read-only memory (EEPROM), a compact disc (CD-ROM) or other optical disc storage, magnetic disk storage, magnetic tape storage, or any other computer-readable medium that can be used to carry or store data.

[0199] Finally, it should be noted that the intelligent management and control method and device of an integrated security processing unit disclosed in the embodiment of the present invention discloses only the preferred embodiments of the present invention, which are only used to illustrate the technical solution of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments can still be modified, or some of the technical features therein can be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims

1. An intelligent management and control method for an integrated security processing unit, characterized in that: The method is applied to a security processing unit, and the method comprises: After detecting a startup instruction for the safety processing unit, a unit self-test operation is performed on the safety processing unit to obtain a unit self-test result corresponding to the safety processing unit; the unit self-test operation is used to detect at least one self-test parameter, and the parameter-associated targets of all the self-test parameters include at least one of a signal output component, a redundant detection component, and a control chip; the signal output component only provides a signal for the operation of the safety processing unit; After determining that the unit self-test result indicates that the security processing unit has passed the self-test, a unit configuration operation is performed on the security processing unit according to the unit configuration instruction transmitted by the processing chip to obtain a unit configuration result corresponding to the security processing unit, wherein the unit configuration operation includes setting of a module to be supervised and / or on / off control of a module; After determining that the unit configuration operation has been executed, a state supervision operation is performed on at least one target module in the security processing unit to obtain a state supervision result corresponding to each target module; the state supervision result corresponding to each target module is used to determine whether to execute module abnormal alarm processing on a certain target module.

2. The intelligent management and control method of the integrated security processing unit according to claim 1, characterized in that: The state supervision result corresponding to each of the target modules includes the module operation parameters corresponding to the target module; the module operation parameters include at least one of the module operation voltage, the module operation current, and the module output signal and its corresponding signal waveform; The method further comprises: For each of the target modules, determining whether the module operating parameters corresponding to the target module match the reference operating parameters corresponding to the target module, and when the determination result is yes, determining that the target module is in a normal operating state; When the judgment result is no, it is determined that the target module is in an abnormal operation state, and at the same time, the target module is updated to a target abnormal module and an alarm information for the target abnormal module is generated; According to the alarm information for the target abnormal module, alarm processing is performed on the target abnormal module, and the alarm processing at least includes the output of the alarm information for the target abnormal module; the alarm processing also includes module start / stop state switching and / or module connectivity state switching for the target abnormal module; the module start / stop state switching is used to switch the target abnormal module to a closed state, and the module connectivity state switching is used to cut off the functional interaction between the target abnormal module and other modules except the alarm module; the alarm module is the module that executes the alarm processing.

3. The intelligent management and control method of the integrated security processing unit according to claim 1 or 2, characterized in that: The safety processing unit includes a unit self-test circuit; the performing a unit self-test operation on the safety processing unit to obtain a unit self-test result corresponding to the safety processing unit includes: When the startup instruction includes a detection item for an input signal, the unit self-test circuit is controlled to collect signal parameters corresponding to the input signal according to the detection item, the input signal includes an input voltage and / or a clock signal; the signal parameters include a voltage value corresponding to the input voltage and / or a signal feature corresponding to the clock signal, and the signal feature includes at least one of a signal frequency, a signal amplitude, and a signal phase; The signal parameter is compared with the standard data corresponding thereto to obtain a comparison result between the signal parameter and the standard data corresponding thereto; and the comparison result is added to the unit self-test result corresponding to the safety processing unit.

4. The intelligent management and control method of the integrated security processing unit according to claim 3, characterized in that: The safety processing unit includes a unit self-test circuit; the unit self-test operation is performed on the safety processing unit to obtain a unit self-test result corresponding to the safety processing unit, and further includes: When the startup instruction includes a detection item for a redundant register, two target redundant registers to be compared and initial comparison data are determined according to the detection item; the initial comparison data is a set of data corresponding to the two target redundant registers, and the data content and data recording period of the corresponding records of the set of data are consistent; Taking the starting comparison data as the starting point, a bit-by-bit comparison is performed on the recorded data in the two target redundant registers to obtain a bit-by-bit comparison result corresponding to the recorded data in the two target redundant registers, and the bit-by-bit comparison result is added to the unit self-test result corresponding to the security processing unit.

5. The intelligent management and control method of the integrated security processing unit according to claim 3 or 4, characterized in that: The performing of a unit self-check operation on the security processing unit to obtain a unit self-check result corresponding to the security processing unit further includes: When the startup instruction includes detection items for a preset test mode program, generating a test sequence matching the test mode program and a corresponding test control instruction; and sending the test control instruction to at least one module to be tested; The unit self-test circuit acquires module response data, wherein the module response data includes data fed back by each module under test after responding to the test control instruction, and the module response data is used to indicate the module state of the module under test, wherein the module state includes a normal detection state or an abnormal detection state; The unit self-check circuit performs safety processing on the module response data that matches the module state, and obtains a safety processing result for the module response data, wherein the safety processing includes a threshold check and a target signal generation, and the target signal generation is used to generate a confirmation signal that matches the normal state of the detection or an alarm signal that matches the abnormal state of the detection; the safety processing result includes a sub-processing result for each of the detected modules; Taking a single module under test as a benchmark, the sub-processing results of each module under test are compared with the target test sequence corresponding to the module under test in the test sequence to obtain a sequence comparison result corresponding to each module under test, and the sequence comparison results corresponding to all the modules under test are added to the unit self-test result corresponding to the security processing unit.

6. The intelligent management and control method of the integrated security processing unit according to claim 1, 2 or 4, characterized in that: After determining that the unit self-test result indicates that the security processing unit self-test has passed, the method further includes: The control chip determines the set initial module to be supervised and obtains the current scene configuration requirements; The control chip determines the target module to be supervised that matches the scenario configuration requirement; The control chip determines whether the initial module to be supervised is consistent with the target module to be supervised. When it is determined that the initial module to be supervised is consistent with the target module to be supervised, a unit configuration instruction corresponding to all the modules to be supervised is generated, and the execution of the unit configuration instruction transmitted by the processing chip is triggered, and a unit configuration operation is performed on the security processing unit to obtain a unit configuration result corresponding to the security processing unit; When it is determined that the initial module to be supervised is inconsistent with the target module to be supervised, the control chip determines module difference information corresponding to the initial module to be supervised and the target module to be supervised, wherein the module difference information includes a newly added module and a deleted module of the target module to be supervised relative to the initial module to be supervised; According to the module difference information and the initial module to be supervised, the control chip generates a unit configuration instruction corresponding to the module to be supervised, and triggers the execution of the unit configuration instruction transmitted by the processing chip, performs a unit configuration operation on the security processing unit, and obtains a unit configuration result corresponding to the security processing unit.

7. The intelligent management and control method of the integrated security processing unit according to claim 6, characterized in that: The control chip generates a unit configuration instruction corresponding to the module to be supervised according to the module difference information and the initial module to be supervised, including: The control chip adds the newly added module to the initial module to be supervised, so as to perform a first-level update on the initial module to be supervised, thereby obtaining a first module to be supervised; The control chip determines, from the first modules to be supervised, a module to be deleted that matches the module to be deleted, and generates an adjustment identifier for the module to be deleted; The control chip performs a secondary update on the first module to be supervised according to the adjustment identifier to obtain a second module to be supervised, and switches the module to be deleted to a non-supervisory state according to the adjustment identifier; the non-supervisory state is used to indicate that within a preset detection period, the control chip does not need to transmit the module detection result corresponding to the module to be deleted to the security processing unit; The control chip generates a unit configuration instruction for the second module to be supervised.

8. An intelligent control device for an integrated security processing unit, characterized in that: The device is applied to a security processing unit, and comprises: A unit self-check module, configured to, after detecting a startup instruction for the safety processing unit, perform a unit self-check operation on the safety processing unit to obtain a unit self-check result corresponding to the safety processing unit; the unit self-check operation is configured to detect at least one self-check parameter, and the parameter-associated targets of all the self-check parameters include at least one of a signal output component, a redundant detection component, and a control chip; the signal output component only provides a signal for the operation of the safety processing unit; A unit configuration module, for, when it is determined that the unit self-test result indicates that the security processing unit has passed the self-test, executing a unit configuration operation on the security processing unit according to the unit configuration instruction transmitted by the processing chip, to obtain a unit configuration result corresponding to the security processing unit, wherein the unit configuration operation includes setting of a module to be supervised and / or on / off control of a module; The unit supervision module is used to perform a state supervision operation on at least one target module in the security processing unit after determining that the unit configuration operation has been executed, and obtain a state supervision result corresponding to each target module; the state supervision result corresponding to each target module is used to determine whether to execute module abnormal alarm processing on a certain target module.

9. An intelligent control device for an integrated security processing unit, characterized in that: The device comprises: A memory storing executable program code; a processor coupled to the memory; The processor calls the executable program code stored in the memory to execute the intelligent management and control method of the integrated security processing unit as described in any one of claims 1-7.

10. A computer storage medium, characterized in that: The computer storage medium stores computer instructions, which, when called, are used to execute the intelligent management and control method of the integrated security processing unit as described in any one of claims 1-7.

Images