Security chip and automobile TBOX security protection method based on security chip implantation

Abstract

The invention discloses a security chip and an automobile TBOX security protection method based on security chip implantation, and relates to the technical field of automobile security. The method comprises the following steps: implanting a security chip into a TBOX, linking the TBOX with the security chip through an existing bus of the TBOX, and accessing the security chip to a CAN bus network of a whole vehicle; after the automobile is started, the safety chip carries out identity authentication with all ECUs in the automobile through a CAN bus network, and when authentication of all the ECUs is successful, the automobile works normally; when an automobile needs to be remotely operated, an operation instruction is sent to the cloud through the mobile phone APP, the cloud sends the operation instruction to the TBOX, the TBOX carries out preliminary authentication on the operation instruction of the cloud, the instruction is sent to the security chip after the authentication is passed, and the security chip carries out protection authentication on the operation instruction of the cloud. And after the protection authentication is passed, performing identity authentication on the ECU in the vehicle corresponding to the instruction through a CAN bus network, and executing the instruction by the ECU after the authentication is passed.

Description

Technical Field

[0001] The present invention relates to the field of automobile safety technology, and in particular to a safety chip and an automobile TBOX safety protection method based on the safety chip implantation. Background Art

[0002] With the rise of smart network cars, cars can be easily operated remotely, such as remote start, remote door opening, remote control of on-board equipment, etc. This operation is generally controlled by the on-board TBOX.

[0003] Automotive TBOX is a device in the Internet of Vehicles system, the full name of which is Telematics Box (T-BOX), which is mainly used for remote monitoring and control of vehicle information. TBOX communicates with the vehicle through a mobile phone APP or background system to achieve functions such as remote control and data collection.

[0004] Currently, most car companies do not provide security protection for TBOX, so there may be a risk of being attacked by hackers. Summary of the invention

[0005] The present invention provides a security chip, including: a communication module, a data transceiver module, a network protection module, and an authentication module;

[0006] The communication module is used to connect the security chip to the existing bus of the TBOX mainboard after the security chip is implanted into the TBOX mainboard to achieve communication with the TBOX mainboard; and to connect to the vehicle CAN bus network to achieve communication with all ECUs in the vehicle;

[0007] Data transceiver module, used to receive data packets sent by TBOX from the cloud;

[0008] The network protection module includes a resource configuration module and an instruction protection module; the resource configuration module is used to configure the encryption private key and certificate paired with the cloud; the instruction protection module is used to authenticate and protect the cloud instructions;

[0009] The authentication module is used to perform identity authentication with the vehicle ECU through the CAN bus network. When the vehicle is started, the authentication module receives the identity authentication request sent by all the ECUs of the vehicle through the CAN bus network. When all ECUs are successfully authenticated, the vehicle starts to work normally. When remote operation is required, the authentication module performs identity authentication with the corresponding in-vehicle ECU through the CAN bus network based on the instructions that have successfully passed the network protection module. When the corresponding ECU is successfully authenticated, the instruction operation is executed.

[0010] A security chip as described above, wherein the communication module also includes directly communicating with the cloud via a 4G / 5G network.

[0011] A security chip as described above, wherein the data packet sent by TBOX from the cloud is received, specifically: controlled by the mobile phone APP, sent to the cloud through the mobile phone APP, and then sent from the cloud to TBOX, for remote control of the car.

[0012] In the security chip as described above, the instruction protection module is specifically used to configure relevant protection rules for cloud instructions, filter the passing data packets, and intercept the messages that violate the rules.

[0013] A security chip as described above, wherein the security chip also includes: a TBOX host monitoring module, which is used to start a daemon process to monitor the security chipset of the mainboard's TBOX, regularly receive heartbeat data from the TBOX security chip, and when the heartbeat data disappears for more than or equal to a certain period of time, control the output voltage of the GPIO interface, connect and control a power relay through the GPIO interface, and after adjusting the output voltage of the GPIO interface, control the opening and closing of the power relay to restart the TBOX mainboard.

[0014] The present invention also provides a vehicle TBOX safety protection method based on security chip implantation, comprising:

[0015] Implant the security chip into TBOX, connect it with the security chip through the existing bus of TBOX, and connect the security chip to the CAN bus network of the whole vehicle;

[0016] When the car is started, the security chip authenticates all ECUs in the car through the CAN bus network. When all ECUs are authenticated successfully, the vehicle starts to work normally.

[0017] When the car needs to be operated remotely, the operation instructions are sent to the cloud through the mobile phone APP. The cloud sends the operation instructions to TBOX. TBOX performs preliminary authentication on the cloud operation instructions. After the authentication is passed, the instructions are sent to the security chip. The security chip performs protection authentication on the cloud operation instructions. After the protection authentication is passed, the identity authentication is performed with the in-vehicle ECU corresponding to the instruction through the CAN bus network. After the authentication is passed, the ECU executes the instruction.

[0018] As described above, a method for protecting automobile TBOX security based on implantation of a security chip is described, wherein, when a vehicle needs to be remotely operated, a command is sent to the cloud through a mobile phone APP, the cloud encrypts the command, generates an encrypted message and sends it to the TBOX; the TBOX decrypts and authenticates the encrypted message to ensure that the message has not been tampered with; then the TBOX sends a message to the ECU through the CAN bus network, and the message first passes through the security chip during transmission, and the security chip performs secondary authentication on the message based on the encrypted private key and certificate paired with the cloud. If the authentication is successful, it means that the cloud message has not been tampered with, and then an authentication interaction with the ECU is initiated. At this time, the ECU is the operation object determined by TBOX after parsing the message. After the ECU is authenticated successfully, TBOX confirms that the ECU identity is legal, and then sends the cloud command to the corresponding ECU, and the ECU executes the command action.

[0019] The present invention also provides a computer storage medium, comprising: at least one memory and at least one processor;

[0020] The memory is used to store one or more program instructions;

[0021] The processor is used to run one or more program instructions to execute any of the above-mentioned automotive TBOX safety protection methods based on security chip implantation.

[0022] The beneficial effects achieved by the present invention are as follows: the present invention can complete the secure interaction process between TBOX, ECU and the cloud without adding any independent equipment, which can greatly save costs. By implanting a security chip, the hardware cost of the firewall can be saved, and the function of the firewall can be completed. Compared with the current use of the netfilter firewall, the function is more powerful, and it is independent of the main CPU of TBOX and does not occupy its resources. The entire mainboard can be restarted by monitoring the status of the TBOX CPU, ensuring that TBOX has a means of recovery when an abnormality occurs. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0024] Figure 1 This is a schematic diagram of a security chip provided in Example 1 of the present application;

[0025] Figure 2 This is a flow chart of a vehicle TBOX safety protection method based on security chip implantation provided in Embodiment 2 of the present invention. DETAILED DESCRIPTION

[0026] The following is a clear and complete description of the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0027] Embodiment 1

[0028] like Figure 1 As shown, a first embodiment of the present invention provides a security chip, which is implanted in the TBOX mainboard. The security chip is linked to the existing bus (such as CAN, SPI bus) of the TBOX mainboard and connected to the vehicle CAN bus network to achieve communication with all ECUs in the vehicle.

[0029] The security chip includes: a communication module 11, a data transceiver module 12, a network protection module 13, an authentication module 14 and a TBOX host monitoring module 15;

[0030] The communication module 11 is used to implant the security chip into the TBOX mainboard, and then connect the security chip to the existing bus of the TBOX mainboard to achieve communication with the TBOX mainboard, thereby receiving data packets forwarded by the TBOX mainboard from the cloud; optionally, the communication module can also directly communicate with the cloud through the 4G / 5G network. In addition, the security chip is connected to the vehicle CAN bus network to achieve communication with all ECUs in the vehicle.

[0031] The data transceiver module 12 is used to receive data packets from TBOX. The data packets may be operation instructions from the cloud. The operation instructions are controlled by the mobile phone APP and sent to the cloud through the mobile phone APP to remotely control the car.

[0032] The network protection module 13 includes a resource configuration module 131 and an instruction protection module 132; the resource configuration module is used to configure the encryption private key, certificate, etc. paired with the cloud; the instruction protection module is used to configure relevant protection rules for cloud instructions, filter the passing data packets, and intercept the messages that violate the rules.

[0033] The authentication module 14 is used to perform identity authentication with the vehicle ECU through the CAN bus network. When the vehicle is started, the authentication module receives the identity authentication request sent by all the ECUs of the vehicle through the CAN bus network. When all the ECUs are successfully authenticated, the vehicle starts to work normally. When remote operation is required, the authentication module performs identity authentication with the in-vehicle ECU corresponding to the instruction through the CAN bus network according to the instruction successfully passed by the network protection module. When the corresponding ECU is successfully authenticated, the instruction operation is executed.

[0034] The TBOX host monitoring module 15 is used to start a daemon process to monitor the security chipset of the TBOX of the mainboard, and regularly receive the heartbeat data from the TBOX security chip. When the heartbeat data disappears for more than or equal to a certain period (such as three periods), the output voltage of the GPIO interface is controlled, and a power relay is connected and controlled through the GPIO interface. After adjusting the output voltage of the GPIO interface, the opening and closing of the power relay is controlled to restart the TBOX mainboard.

[0035] Embodiment 2

[0036] like Figure 2 As shown, the second embodiment of the present invention provides a vehicle TBOX safety protection method based on security chip implantation, comprising:

[0037] Step 210: implant a security chip into the TBOX, link the security chip with the existing bus of the TBOX, and connect the security chip to the vehicle CAN bus network.

[0038] The existing bus of TBOX is such as CAN, SPI bus, etc. The security chip is connected to the existing bus of TBOX and connected to the CAN network of the whole vehicle to realize communication with ECU. Therefore, there is no need to modify the existing TBOX hardware components of the vehicle. By implanting the security chip described in the first embodiment, the security protection of the vehicle TBOX is realized.

[0039] Step 220: When the car is started, the security chip performs identity authentication with all ECUs in the car through the CAN bus network. When all ECUs are authenticated successfully, the vehicle starts to work normally.

[0040] The vehicle can only work normally after all ECUs are authenticated successfully. This operation can prevent illegal ECUs from being implanted in the vehicle.

[0041] Step 230: When the car needs to be operated remotely, the operation instruction is sent to the cloud through the mobile phone APP. The cloud sends the operation instruction to TBOX. TBOX performs preliminary authentication on the cloud operation instruction. After the authentication is passed, the instruction is sent to the security chip. The security chip performs protection authentication on the cloud operation instruction. After the protection authentication is passed, the identity authentication is performed with the in-vehicle ECU corresponding to the instruction through the CAN bus network. After the authentication is passed, the ECU executes the instruction.

[0042] Specifically, when the vehicle needs to be operated remotely, instructions are sent to the cloud through the mobile phone APP. The cloud encrypts the instructions, generates an encrypted message and sends it to TBOX. TBOX decrypts and authenticates the encrypted message to ensure that the message has not been tampered with. Then TBOX sends the message to the ECU through the CAN bus network. The message first passes through the security chip during transmission. The security chip performs a secondary authentication on the message based on the encrypted private key and certificate paired with the cloud. If the authentication is successful, it means that the cloud message has not been tampered with. Then an authentication interaction with the ECU is initiated. At this time, the ECU is the operation object determined by TBOX after parsing the message. After the ECU is authenticated successfully, TBOX confirms that the ECU identity is legal, and then sends the cloud instruction to the corresponding ECU. The ECU executes the instruction to complete actions such as opening the car door and starting the engine.

[0043] Corresponding to the above embodiment, an embodiment of the present invention provides a computer storage medium, including: at least one memory and at least one processor;

[0044] The memory is used to store one or more program instructions;

[0045] The processor is used to run one or more program instructions to execute a vehicle TBOX safety protection method based on the implantation of a safety chip.

[0046] Corresponding to the above-mentioned embodiment, an embodiment of the present invention provides a computer-readable storage medium, wherein the computer storage medium contains one or more program instructions, and the one or more program instructions are used by a processor to execute a vehicle TBOX safety protection method based on security chip implantation.

[0047] The embodiment disclosed in the present invention provides a computer-readable storage medium, in which computer program instructions are stored. When the computer program instructions are executed on a computer, the computer executes the above-mentioned automobile TBOX safety protection method based on security chip implantation.

[0048] In the embodiment of the present invention, the processor may be an integrated circuit security chip having the signal processing capability. The processor may be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0049] The methods, steps and logic block diagrams disclosed in the embodiments of the present invention can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present invention can be directly embodied as a hardware decoding processor for execution, or can be executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The processor reads the information in the storage medium and completes the steps of the above method in combination with its hardware.

[0050] The storage medium may be a memory, which may be, for example, a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memory.

[0051] Among them, the non-volatile memory can be a read-only memory (ROM), a programmable ROM (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory.

[0052] The volatile memory may be a random access memory (RAM) which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate synchronous DRAM (DDRSDRAM), enhanced synchronous DRAM (ESDRAM), synchronous link DRAM (SLDRAM), and direct RAM bus DRAM (DRRAM).

[0053] The storage media described in the embodiments of the present invention are intended to include, but are not limited to, these and any other suitable types of memory.

[0054] Those skilled in the art will appreciate that in one or more of the above examples, the functions described in the present invention can be implemented using a combination of hardware and software. When software is used, the corresponding functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on a computer-readable medium. Computer-readable media include computer storage media and communication media, wherein communication media include any media that facilitates the transmission of computer programs from one place to another. Storage media can be any available media that can be accessed by general or special-purpose computers.

[0055] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made on the basis of the technical solution of the present invention should be included in the scope of protection of the present invention.

Claims

1. A security chip, characterized in that: include: Communication module, data transceiver module, network protection module, authentication module; The communication module is used to connect the security chip to the existing bus of the TBOX mainboard after the security chip is implanted into the TBOX mainboard, so as to realize communication with the TBOX mainboard; And connect to the vehicle CAN bus network to achieve communication with all ECUs in the vehicle; Data transceiver module, used to receive data packets sent by TBOX from the cloud; The network protection module includes a resource configuration module and an instruction protection module; the resource configuration module is used to configure the encryption private key and certificate paired with the cloud; the instruction protection module is used to authenticate and protect the cloud instructions; The authentication module is used to perform identity authentication with the vehicle ECU through the CAN bus network. When the vehicle is started, the authentication module receives the identity authentication request sent by all the ECUs of the vehicle through the CAN bus network. When all ECUs are successfully authenticated, the vehicle starts to work normally. When remote operation is required, the authentication module performs identity authentication with the corresponding in-vehicle ECU through the CAN bus network based on the instructions that have successfully passed the network protection module. When the corresponding ECU is successfully authenticated, the instruction operation is executed.

2. A security chip as claimed in claim 1, characterized in that: The communication module also includes network communication with the cloud directly through the 4G / 5G network.

3. A security chip as claimed in claim 1, characterized in that: Receive data packets from the cloud sent by TBOX, specifically: controlled by the mobile phone APP, sent to the cloud through the mobile phone APP, and then sent from the cloud to TBOX for remote control of the car.

4. A security chip as claimed in claim 1, characterized in that: The instruction protection module is specifically used to configure relevant protection rules for cloud instructions, filter the passing data packets, and intercept the messages that violate the rules.

5. A security chip as claimed in claim 1, characterized in that: The security chip also includes: a TBOX host monitoring module, which is used to start a daemon process to monitor the security chipset of the TBOX of the mainboard, regularly receive heartbeat data from the TBOX security chip, and when the heartbeat data disappears for more than or equal to a certain period of time, control the output voltage of the GPIO interface, connect and control a power relay through the GPIO interface, and after adjusting the output voltage of the GPIO interface, control the opening and closing of the power relay to restart the TBOX mainboard.

6. A method for protecting automobile TBOX safety based on implantation of safety chip, characterized in that: include: Implant the security chip into TBOX, connect it with the security chip through the existing bus of TBOX, and connect the security chip to the CAN bus network of the whole vehicle; When the car is started, the security chip authenticates all ECUs in the car through the CAN bus network. When all ECUs are authenticated successfully, the vehicle starts to work normally. When the car needs to be operated remotely, the operation instructions are sent to the cloud through the mobile phone APP. The cloud sends the operation instructions to TBOX. TBOX performs preliminary authentication on the cloud operation instructions. After the authentication is passed, the instructions are sent to the security chip. The security chip performs protection authentication on the cloud operation instructions. After the protection authentication is passed, the identity authentication is performed with the in-vehicle ECU corresponding to the instruction through the CAN bus network. After the authentication is passed, the ECU executes the instruction.

7. A method for protecting automobile TBOX safety based on implantation of a safety chip as claimed in claim 6, characterized in that: When the vehicle needs to be operated remotely, the command is sent to the cloud through the mobile phone APP. The cloud encrypts the command, generates an encrypted message and sends it to TBOX. TBOX decrypts and authenticates the encrypted message to ensure that the message has not been tampered with. Then TBOX sends the message to the ECU through the CAN bus network. The message first passes through the security chip during transmission. The security chip performs a secondary authentication on the message based on the encrypted private key and certificate paired with the cloud. If the authentication is successful, it means that the cloud message has not been tampered with. Then, an authentication interaction with the ECU is initiated. At this time, the ECU is the operation object determined by TBOX after parsing the message. After the ECU is authenticated successfully, TBOX confirms that the ECU identity is legal, and then sends the cloud command to the corresponding ECU, and the ECU executes the command action.

8. A computer storage medium, characterized in that include: at least one memory and at least one processor; The memory is used to store one or more program instructions; A processor is used to run one or more program instructions to execute a vehicle TBOX safety protection method based on security chip implantation as described in any one of claims 6-7.

Images