Control device and method, electronic equipment and storage medium

Abstract

The invention discloses a control device and method, electronic equipment and a storage medium. The device comprises a data transceiving module, a processing module and a comparison module, wherein the processing module and the comparison module are configured in a processor; the processor integrates at least two kernels, a processing module is deployed in the same kernel, and the processing module comprises a function control module and / or a security monitoring module; the data transceiving module is used for synchronously transmitting to-be-processed data to the function control module and the safety monitoring module; the function control module is used for processing the to-be-processed data to generate a first result; the security monitoring module is used for processing the to-be-processed data to generate a second result; and the comparison module is used for performing security verification based on the first result and the second result. The problems that in the prior art, monitoring is executed through a plurality of processors, so that the monitoring structure is complex, and the monitoring cost is high are solved, the hardware cost is reduced, meanwhile, the monitoring comprehensiveness and effectiveness are improved, and high safety is achieved.

Description

Technical Field

[0001] The present invention relates to the field of processor technology, and in particular to a control device, method, electronic equipment and storage medium. Background Art

[0002] At present, in order to ensure the safety of medical equipment and avoid problems such as signal transmission failure or failure of software and hardware control modules during equipment operation, a monitoring module is usually configured in the monitoring system for monitoring.

[0003] The existing technical solution is usually to set the control module on one processor and the security monitoring module on another processor, and at the same time, the two modules are connected to communicate, and then the security monitoring module performs security monitoring on the control module. However, the monitoring system of this architecture is not only complex in structure, but also has the problem of high hardware cost. If the control module and the security monitoring module are set on the same processor according to the existing technology, the monitoring security will be low and cannot meet the safety requirements of medical equipment. Summary of the invention

[0004] The present invention provides a control device, method, electronic equipment and storage medium, so as to reduce hardware cost while improving the comprehensiveness and effectiveness of monitoring and achieving high security.

[0005] According to one aspect of the present invention, there is provided a control device, the device comprising:

[0006] A data transceiver module and a processing module and a comparison module configured in a processor; the processor integrates at least two cores, the processing module is deployed in the same core, and the processing module includes a function control module and / or a security monitoring module; wherein,

[0007] The data transceiver module is used to send the data to be processed, determine the function control module and the security monitoring module for synchronous processing, and synchronously transmit the data to be processed to the function control module and the security monitoring module;

[0008] The function control module is used to receive the data to be processed sent by the data transceiver module, process the data to be processed to generate a first result, and send the first result to the comparison module;

[0009] The security monitoring module is used to receive the data to be processed sent by the data transceiver module, process the data to be processed to generate a second result, and send the second result to the comparison module;

[0010] The comparison module is used to receive the first result sent by the function control module and the second result sent by the security monitoring module, and perform security verification based on the first result and the second result.

[0011] According to another aspect of the present invention, a control method is provided, which is applied to a control device, wherein the control device comprises a data transceiver module, a processing module configured in a processor, and a comparison module; the processor integrates at least two cores, the processing module is deployed in the same core, and the processing module comprises a function control module and / or a security monitoring module; the method comprises:

[0012] Based on the data transceiver module sending the data to be processed, and determining the function control module and the security monitoring module for synchronous processing, the data to be processed is synchronously transmitted to the function control module and the security monitoring module;

[0013] Based on the function control module receiving the data to be processed sent by the data transceiver module, processing the data to be processed to generate a first result, and sending the first result to the comparison module;

[0014] Based on the security monitoring module receiving the data to be processed sent by the data transceiver module, processing the data to be processed to generate a second result, and sending the second result to the comparison module;

[0015] Based on the comparison module receiving the first result sent by the function control module and the second result sent by the security monitoring module, a security check is performed based on the first result and the second result.

[0016] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0017] at least one processor; and

[0018] a memory communicatively connected to the at least one processor; wherein,

[0019] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the control method described in any embodiment of the present invention.

[0020] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the control method described in any embodiment of the present invention when executed.

[0021] The technical solution of the embodiment of the present invention receives the data to be processed through the data transceiver module, determines the function control module and the security monitoring module for synchronous processing, and synchronously transmits the data to be processed to the function control module and the security monitoring module; based on the function control module receiving the data to be processed sent by the data transceiver module, processes the data to be processed to generate a first result, and sends the first result to the comparison module; based on the security monitoring module receiving the data to be processed sent by the data transceiver module, processes the data to be processed to generate a second result, and sends the second result to the comparison module; based on the comparison module receiving the first result sent by the function control module and the second result sent by the security monitoring module, performs security verification based on the first result and the second result, which solves the problem that the monitoring is performed by multiple processors in the prior art, resulting in The problems of complex monitoring structure and high monitoring cost are solved by utilizing the multi-core physical characteristics of the processor, deploying function control modules and / or security monitoring modules in multiple cores of the processor, and using the data transceiver module to send the data to be processed to the function control module and security monitoring module for synchronous processing, so that the function control modules and security monitoring modules in different cores or the same core can respectively process the data to be processed to generate processed results, and then use the comparison module to perform security verification on the first result and the second result, and check whether there is an abnormality in the function control module through security verification, so as to utilize the multi-core communication mechanism in a single processor to perform data monitoring between modules, while reducing hardware costs, being able to detect more security checkpoints, improving the comprehensiveness and effectiveness of monitoring, and achieving high security.

[0022] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0024] Figure 1 is a structural schematic diagram of a control device provided according to Embodiment 1 of the present invention;

[0025] Figure 2 A schematic diagram of the structure of a control device provided in Embodiment 1 of the present invention;

[0026] Figure 3 A schematic diagram of the structure of a control device provided in Embodiment 1 of the present invention;

[0027] Figure 4 is a schematic diagram of the structure of a control device provided according to Embodiment 2 of the present invention;

[0028] Figure 5 is a flow chart of a control method provided according to Embodiment 3 of the present invention;

[0029] Figure 6 It is a structural schematic diagram of an electronic device for implementing the control method of an embodiment of the present invention. DETAILED DESCRIPTION

[0030] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0031] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0032] Embodiment 1

[0033] Figure 1 is a schematic diagram of a control device according to the first embodiment of the present invention. This embodiment is applicable to the case where monitoring is performed based on a single processor. Figure 1 The control device provided in this embodiment includes: a data transceiver module 110, a processing module 120 configured in a processor, and a comparison module 130; the processor integrates at least two cores, and the processing module 120 is deployed in the same core, and the processing module 120 includes a function control module 1201 and / or a security monitoring module 1202. The structural composition of the application service system of this embodiment is specifically described below.

[0034] The data transceiver module 110 is used to send the data to be processed, determine the function control module 1201 and the security monitoring module 1202 for synchronous processing, and synchronously transmit the data to be processed to the function control module 1201 and the security monitoring module 1202;

[0035] The function control module 1201 is used to receive the data to be processed sent by the data transceiver module 110, process the data to be processed to generate a first result, and send the first result to the comparison module 130;

[0036] The security monitoring module 1202 is used to receive the data to be processed sent by the data transceiver module 110, process the data to be processed to generate a second result, and send the second result to the comparison module 130;

[0037] The comparison module 130 is used to receive the first result sent by the function control module 1201 and the second result sent by the security monitoring module 1202, and perform a security check based on the first result and the second result.

[0038] In this embodiment, a single processor in the control device can be used to process tasks for functional control and monitoring. This single processor is integrated with at least two cores, and a processing module 120 can be deployed in the same core. The processing module 120 can include a function control module 1201 and a security monitoring module 1202, or only one function control module 1201, or only one security monitoring module 1202. For example, a function control module a1 is deployed in core A, a security monitoring module b1 is deployed in core B, and a function control module a2 and a security monitoring module b2 are deployed in core C. The comparison module 130 can be integrated in a core in the processor, a submodule in the security monitoring module, or any one of the processing modules. With such a configuration, the monitoring function can be realized in a processor, and at the same time, the processing modules are kept physically isolated from each other, thereby increasing the security of functional control.

[0039] In actual application, the data to be processed is received by the data transceiver module 110, and when the data to be processed is received, the function control module 1201 and the security monitoring module 1202 that synchronously perform logic processing on the data are determined, and the determination method can be: according to the data attributes of the data to be processed (for example, data type, task type, processing type, data volume, data format, etc.), the security monitoring module 1202 that is adapted to the data attributes and the function control module 1201 with processing logic monitored by the security monitoring module 1202 are determined; or, the security monitoring module 1202 and the function control module 1201 can be pre-configured. The data transceiver module 110 distributes the data to be processed to the function control module 1201 and the security monitoring module 1202 respectively. After receiving the data to be processed, the function control module 1201 processes the data to be processed according to the preset calculation logic to obtain a first result, and then sends the first result to the comparison module 130. After receiving the data to be processed, the security monitoring module 1202 processes the data to be processed according to the set calculation logic (which may be the same as or different from the calculation logic used by the function control module 1201) to obtain a second result, and then sends the second result to the comparison module 130. After receiving the first result sent by the function control module 1201 and the second result sent by the security monitoring module 1202, the comparison module 130 performs a security check on the first result and the second result to determine whether the function control module functions normally by checking the two results.

[0040] The technical solution of this embodiment utilizes the physical characteristics of multiple physical spaces on a processor to specify the security monitoring module and the function control module to run on the core inside the processor, thereby simplifying the complexity of the hardware architecture while ensuring the independence and effectiveness of security monitoring.

[0041] Based on the above embodiment, the function control module and the security monitoring module for synchronous processing are integrated in the same kernel.

[0042] Exemplary, reference Figure 2 A function control module 1201 and a security monitoring module 1202 are configured in the same core. The data transceiver module 110 sends the data to be processed to the function control module 1201 and the security monitoring module 1202 in core 1 for synchronous processing. The function control module 1201 and the security monitoring module 1202 in core 1 can send the output data to the comparison module in core 3.

[0043] Based on the above embodiments, the function control module and the security monitoring module for synchronization processing may also be integrated in different cores.

[0044] Exemplary, reference Figure 3, a function control module 1201 or a security monitoring module 1202 is configured in the kernel, and the function control module 1201 in kernel 1 and the security monitoring module 1202 in kernel 2 are used for synchronous processing. The data transceiver module 110 sends the data to be processed to the function control module 1201 in kernel 1 and the security monitoring module 1202 in kernel 2, and the function control module 1201 in kernel 1 and the security monitoring module 1202 in kernel 2 can send the output data to the comparison module in kernel 3 respectively.

[0045] Based on the above embodiment, the function control module 1201 is also used to send the first result as the data to be processed to the processing module in the associated core that communicates with the core to which the function control module 1201 belongs, so that the processing module processes the data to be processed when it receives the data to be processed.

[0046] For example, see Figure 2 , the function control module 1201 in the core 1 can send its first result as the data to be processed to the processing module (including the function control module 1201 and the security monitoring module 1202) in the associated core 2 that communicates with the core to which it belongs. The function control module 1201 in the core 2 and the security monitoring module 1202 process the received data to be processed, generate the first result and the second result and send them to the comparison module 130 in the core 3 for security verification.

[0047] Continue to see Figure 3 , the function control module 1201 in the core 1 can send its first result as the data to be processed to the function control module 1201 in the associated core 4 and the security monitoring module 1202 in the core 5 that communicate with the core to which it belongs. Afterwards, the function control module 1201 in the core 4 and the security monitoring module 1202 in the core 5 can process the received data to be processed, generate the first result and the second result and send them to the comparison module 130 in the core 3 for security verification. It should be noted that the marking of the number of cores in the figure is only an example and is not limited in this article.

[0048] The advantage of this setting is that each security monitoring module runs on a single CPU core (kernel) to monitor the corresponding multiple split functional control modules. The data interaction interface between multiple functional control modules can also be monitored by the security monitoring module, realizing data monitoring between multiple functional control modules, achieving more security checkpoints, and achieving higher security.

[0049] On the basis of the above embodiment, the control device further includes: a delay module configured in the processor and communicating with the security monitoring module 1202; wherein,

[0050] The delay module is used to intercept and receive the data to be processed sent to the security monitoring module 1202, and send the data to be processed to the security monitoring module 1202 with a delay.

[0051] In this embodiment, when each module sends the data to be processed to the security monitoring module, the data to be processed can be first received by the delay module communicating with the security monitoring module 1202, that is, the delay module acts as an intermediate delay module, and then sends the data to be processed to the security monitoring module 1202 with a delay. For example, the delay module receives the data A to be processed at time T1, delays 3S at time T1, and sends the data A to be processed to the security monitoring module at time (T1+3). The subsequent processing is the same as the previous embodiment, and the security monitoring module finally outputs the second result, and then compares the first result with the second result. It can be understood that the second result obtained by the security monitoring module processing the delayed data to be processed is different from the first result obtained by the function control module monitored by the security monitoring module, and there is a certain difference in time, so that it is more effective to monitor whether the function control module is wrong and achieve high security.

[0052] Optionally, the delay module can be integrated in a core that communicates with the core to which the security monitoring module 1202 belongs. In one embodiment, the delay module is set on the path in front of the security monitoring module. Before each module sends the data to be processed to the security monitoring module, the data to be processed will be received by the delay module, and the delay module will send the data to be processed to the security monitoring module after delay.

[0053] Optionally, the delay module can also be integrated into the security monitoring module. In one embodiment, after the security monitoring module receives the data to be processed, the delay module performs a delay, and then the security monitoring module processes the data to be processed. Figure 4, the comparison module is integrated in the security monitoring module of the CPU0 core. At T0, the CPU0 security monitoring module and the CPU2 functional control module simultaneously receive the data A to be processed. The delay module delays the T0 moment (such as T0+3S), and then sends the data A to be processed to the CPU0 security monitoring module for processing. At T1, the CPU0 security monitoring module and the CPU1 functional control module receive the data B to be processed. The delay module delays the T1 moment (such as T1+3S), and then sends the data B to be processed to the CPU0 security monitoring module for comparison processing and safety verification. At T2, the CPU0 security monitoring module receives the data C to be processed sent by the CPU1 functional control module. The delay module delays the T2 moment (such as T2+3S), and then sends the data C to be processed to the CPU0 security monitoring module for comparison processing and safety verification. There can be more than two functional control modules in the above embodiment, which is not limited here. In the above embodiment, a separate security monitoring module can also be set to monitor the CPU1 functional control module.

[0054] The benefit of setting the delay module is that by setting the timing of data transmitted to each core, the effectiveness of data transmission, processing, and detection can be guaranteed. Time-sharing operation can be used to ensure the anti-interference of each module during operation, further improving the accuracy of safety monitoring. The input and output data of different or the same function control modules can also be checked simultaneously within the operating time slice of the safety monitoring module to improve the comprehensiveness of data inspection.

[0055] Based on the above embodiment, the data transceiver module 110 further includes: a control bus.

[0056] The control bus is used to receive the target output data sent by the processing module and output a function control signal corresponding to the target output data.

[0057] In this embodiment, the control bus may be an IPC (Inter-Process Communication) control bus. The processing module may access the IPC communication control bus and output the output data as target output data, so that the control bus outputs a function control signal corresponding to the target output data to perform function control.

[0058] On the basis of the above embodiment, the comparison module 130 is used to perform a safety check based on the first result and the second result according to preset inspection conditions, determine the check result, and when it is detected that the check result is unsafe, generate an early warning prompt information for feedback or generate a prohibition work signal to control the function control module to stop working.

[0059] The preset inspection conditions include at least one of checking whether the first result is consistent with the second result, whether the logical processing results of the first result and the second result are consistent, and whether the fusion processing result of the first result and the second result is within the preset result range. The early warning prompt information can be a voice prompt, a text message prompt, or an abnormal signal prompt, without limitation.

[0060] In this embodiment, when the comparison module 130 receives the first result and the second result after synchronously processing the same data, it can perform a security check on the first result and the second result through a preset inspection condition to check whether the two results meet the security requirements, and then obtain the verification result. For example, if the first result is consistent with the second result, it means that the verification result is safe; if the first result is inconsistent with the second result, it means that the verification result is unsafe, that is, abnormal. It is also possible to use a preset logical calculation function to perform logical processing on the first result and the second result respectively, generate a logical processing result, and judge whether the two logical processing results are consistent. If they are consistent, it means that the verification result is safe, and if they are inconsistent, it means that the verification result is unsafe; or, it is also possible to use a fusion function to perform fusion processing on the first result and the second result, and judge whether the result after fusion processing is within the preset result range. If it is, it means that the verification result is safe, and if it is not, it means that the verification result is unsafe. In the case of detecting that the verification result is unsafe, it indicates that there is an abnormality in the function control module when processing data, and an early warning prompt information can be generated to be fed back to the data transceiver module 110, so that the data transceiver module 110 responds to the fault based on the early warning prompt information. For example, the data transceiver module 110 determines the fault response mechanism corresponding to the fault anomaly, and handles the fault based on the fault response mechanism. The fault response mechanism can be understood as a response method for handling the fault, for example, it can be shutdown and restart, downloading a patch package to repair, or calling a repair logic program to repair, etc., which is related to the fault that occurred, and different faults can correspond to different fault response mechanisms. Alternatively, a prohibition work signal is generated to control the function control module to stop working to ensure safety. On the basis of the above embodiment, the early warning prompt information can be directly fed back to the corresponding function control module to stop the function control module from working.

[0061] The technical solution of this embodiment receives the data to be processed through the data transceiver module, determines the function control module and the security monitoring module for synchronous processing, and synchronously transmits the data to be processed to the function control module and the security monitoring module; based on the function control module receiving the data to be processed sent by the data transceiver module, the data to be processed is processed to generate a first result, and the first result is sent to the comparison module; based on the security monitoring module receiving the data to be processed sent by the data transceiver module, the data to be processed is processed to generate a second result, and the second result is sent to the comparison module; based on the comparison module receiving the first result sent by the function control module and the second result sent by the security monitoring module, a security check is performed based on the first result and the second result, which solves the problem of performing monitoring through multiple processors, resulting in complex monitoring structure and hardware cost. The problem of high security is solved by utilizing the multi-core physical characteristics of the processor, deploying function control modules and / or security monitoring modules in multiple cores of the processor, using the data transceiver module to send the data to be processed to the function control module and security monitoring module for synchronous processing, so that the function control modules and security monitoring modules under different cores or the same core respectively process the data to be processed to generate processed results, and then use the comparison module to perform security verification on the first result and the second result, and then use the security verification to check whether there is an abnormality in the function control module, so as to utilize the multi-core communication mechanism in a single processor to perform data monitoring between modules, while reducing the hardware cost, it can detect more security checkpoints, improve the comprehensiveness and effectiveness of monitoring, achieve high security, and meet the security requirements of medical equipment.

[0062] Embodiment 2

[0063] As an optional embodiment of the above embodiment, in order to make those skilled in the art further understand the technical solution of the embodiment of the present invention, a specific application scenario example is given. For details, please refer to the following specific content.

[0064] In practical applications, the technical solution of the embodiment of the present invention can be implemented based on a control device, wherein the control device includes a multi-core processor, and utilizes the physical characteristics of the multi-core processor to specify the security monitoring module to run on one of the fixed cores inside the processor, while prohibiting other processes from using the core, wherein the selection of the processor core depends on the actual physical design architecture of the processor.

[0065] In order to ensure the effectiveness of data transmission, processing, and detection, the timing of data transmission to each core can be set, and time-sharing operation can be used to ensure the anti-interference performance of each module during operation. For example, see Figure 4, the processor (CPU) includes CPU0 core, CPU1 core and CPU2 core. The security monitoring module is deployed in the CPU0 core, a function control module is deployed in the CPU1 core, and a function control module is deployed in the CPU2 core. The security monitoring logic (executed on the security monitoring module) communicates with the independent security controller hardware, and all inter-module communications can be connected to a watchdog. The heartbeat mechanism ensures the mutual monitoring of the software security monitoring module and the hardware security monitoring module and the transmission monitoring. The security signal is sent through the security controller hardware, that is, the security controller hardware acts as the executor of the security action. For example, the comparison module is integrated in the security monitoring module of the CPU0 core, and the data to be processed is synchronously sent to the security monitoring module in the CPU0 core and the function control module in the CPU1 core at T0, and the delay is based on T0, so that the security monitoring module in the CPU0 core processes the data to be processed again after the delay. At T1, the security monitoring module in the CPU0 core and the function control module in the CPU1 core receive the data to be processed, and the security monitoring module in the CPU0 core after T1 delays the data to be processed again. At time T2, the output data of the CPU2 function control module is sent to the security monitoring module and IPC communication control bus in the CPU0 core. After delaying time T2, the security monitoring module in the CPU0 core performs comparison processing and security verification on the data to be processed.

[0066] On the basis of the above scheme, the security monitoring module can also be connected to the IPC communication control bus, and the communication data between the control main logic processes can also be used as the input parameters of the security monitoring module to improve the effectiveness of security monitoring. The control device can also adopt a shared memory communication method to ensure the bandwidth and real-time performance of data transmission.

[0067] Embodiment 3

[0068] Figure 5 is a flow chart of a control method provided according to embodiment 3 of the present invention, which method can be applied to the control device provided in the above embodiment, wherein the control device includes a data transceiver module and a processing module and a comparison module configured in a processor; the processor integrates at least two cores, and the processing module is deployed in the same core, and the processing module includes a function control module and / or a security monitoring module; reference Figure 5 , the method may include the following steps:

[0069] S210, sending the data to be processed based on the data transceiver module, and determining the function control module and the security monitoring module for synchronous processing, and synchronously transmitting the data to be processed to the function control module and the security monitoring module.

[0070] S220, based on the function control module receiving the data to be processed sent by the data transceiver module, processing the data to be processed to generate a first result, and sending the first result to the comparison module.

[0071] S230, based on the security monitoring module receiving the data to be processed sent by the data transceiver module, processing the data to be processed to generate a second result, and sending the second result to the comparison module.

[0072] S240, based on the comparison module receiving the first result sent by the function control module and the second result sent by the security monitoring module, perform a security check based on the first result and the second result.

[0073] On the basis of the above technical solution, optionally, the function control module and the security monitoring module for synchronous processing are integrated in the same kernel, or in different kernels.

[0074] On the basis of the above technical solution, optionally, the function control module is also used to send the first result as data to be processed to a processing module in an associated kernel that communicates with the kernel to which the function control module belongs, so that the processing module processes the data to be processed when it receives the data to be processed.

[0075] On the basis of the above technical solution, optionally, it further includes: a delay module configured in the processor and communicating with the security monitoring module; wherein,

[0076] The delay module is used to intercept and receive the data to be processed sent to the security monitoring module, and delay sending the data to be processed to the security monitoring module.

[0077] On the basis of the above technical solution, optionally, the delay module is integrated in a core that communicates with the core to which the security monitoring module belongs, or is integrated in the security monitoring module.

[0078] On the basis of the above technical solution, optionally, the comparison module is used to perform a safety check based on the first result and the second result according to a preset inspection condition, determine the check result, and when it is detected that the check result is unsafe, generate an early warning prompt information for feedback or generate a prohibition work signal to control the function control module to stop working;

[0079] Among them, the preset verification conditions include verifying whether the first result is consistent with the second result, whether the logical processing results of the first result and the second result are consistent, and whether the fusion processing result of the first result and the second result is within a preset result range.

[0080] On the basis of the above technical solution, optionally, the comparison module is integrated into a core of the processor, a sub-module of the security monitoring module or any one of the processing modules.

[0081] The technical solution of this embodiment receives the data to be processed through the data transceiver module, determines the function control module and the security monitoring module for synchronous processing, and synchronously transmits the data to be processed to the function control module and the security monitoring module; based on the function control module receiving the data to be processed sent by the data transceiver module, the data to be processed is processed to generate a first result, and the first result is sent to the comparison module; based on the security monitoring module receiving the data to be processed sent by the data transceiver module, the data to be processed is processed to generate a second result, and the second result is sent to the comparison module; based on the comparison module receiving the first result sent by the function control module and the second result sent by the security monitoring module, a security check is performed based on the first result and the second result, which solves the problem of performing monitoring through multiple processors, resulting in a monitoring structure. The problems of complex and high monitoring costs are solved by utilizing the multi-core physical characteristics of the processor, deploying function control modules and / or security monitoring modules in multiple cores of the processor, and using the data transceiver module to send the data to be processed to the function control module and security monitoring module for synchronous processing, so that the function control modules and security monitoring modules in different cores or the same core can respectively process the data to be processed to generate processed results, and then use the comparison module to perform security verification on the first result and the second result, and then use the security verification to check whether there is an abnormality in the function control module, so as to utilize the multi-core communication mechanism in a single processor to perform data monitoring between modules, while reducing hardware costs, it can detect more security checkpoints, improve the comprehensiveness and effectiveness of monitoring, and achieve high security.

[0082] Embodiment 4

[0083] Figure 6 Schematic diagram of the structure of an electronic device that implements the control method of an embodiment of the present invention. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0084] like Figure 6As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0085] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0086] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the control method.

[0087] In some embodiments, the control method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the control method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the control method in any other appropriate manner (e.g., by means of firmware).

[0088] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0089] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0090] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0091] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0092] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0093] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0094] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0095] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A control device, characterized in that: include: A data transceiver module and a processing module and a comparison module configured in a processor; the processor integrates at least two cores, the processing module is deployed in the same core, and the processing module includes a function control module and / or a security monitoring module; wherein, The data transceiver module is used to send the data to be processed, determine the function control module and the security monitoring module for synchronous processing, and synchronously transmit the data to be processed to the function control module and the security monitoring module; The function control module is used to receive the data to be processed sent by the data transceiver module, process the data to be processed to generate a first result, and send the first result to the comparison module; The security monitoring module is used to receive the data to be processed sent by the data transceiver module, process the data to be processed to generate a second result, and send the second result to the comparison module; The comparison module is used to receive the first result sent by the function control module and the second result sent by the security monitoring module, and perform security verification based on the first result and the second result.

2. The device according to claim 1, characterized in that The function control module and the security monitoring module for synchronous processing are integrated in the same kernel, or in different kernels.

3. The device according to claim 1, characterized in that The function control module is further used to send the first result as data to be processed to a processing module in an associated core that communicates with the core to which the function control module belongs, so that the processing module processes the data to be processed when receiving the data to be processed.

4. The device according to claim 1, characterized in that Also includes: a delay module configured in the processor and communicating with the security monitoring module; The delay module is used to intercept and receive the data to be processed sent to the security monitoring module, and delay sending the data to be processed to the security monitoring module.

5. The device according to claim 4, characterized in that The delay module is integrated in a core that communicates with the core to which the security monitoring module belongs, or is integrated in the security monitoring module.

6. The device according to claim 1, characterized in that The comparison module is used to perform a safety check based on the first result and the second result according to preset inspection conditions, determine the check result, and when it is detected that the check result is unsafe, generate an early warning prompt information for feedback or generate a prohibition work signal to control the function control module to stop working.

7. The device according to claim 1, characterized in that The comparison module is used to perform a security check based on the first result and the second result according to preset verification conditions, and the preset verification conditions include verifying whether the first result is consistent with the second result, whether the logical processing results of the first result and the second result are consistent, and whether the fusion processing result of the first result and the second result is within a preset result range.

8. The device according to any one of claims 1 to 7, characterized in that The comparison module is integrated into a core of the processor, a submodule of the security monitoring module or any one of the processing modules.

9. A control method, characterized in that: include: A data transceiver module and a processing module and a comparison module configured in a processor; the processor integrates at least two cores, the processing module is deployed in the same core, and the processing module includes a function control module and / or a security monitoring module; the method includes: Based on the data transceiver module sending the data to be processed, and determining the function control module and the security monitoring module for synchronous processing, the data to be processed is synchronously transmitted to the function control module and the security monitoring module; Based on the function control module receiving the data to be processed sent by the data transceiver module, processing the data to be processed to generate a first result, and sending the first result to the comparison module; Based on the security monitoring module receiving the data to be processed sent by the data transceiver module, processing the data to be processed to generate a second result, and sending the second result to the comparison module; Based on the comparison module receiving the first result sent by the function control module and the second result sent by the security monitoring module, a security check is performed based on the first result and the second result.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the control method of claim 9 when executed.

Images