Data transmission method, device and equipment between vehicle controllers and vehicle

Abstract

The invention discloses a data transmission method and device between vehicle controllers, equipment and a vehicle, and relates to the technical field of vehicles, and the data transmission method between the vehicle controllers comprises the steps: carrying out the bidirectional authentication of the communication between the vehicle controllers through a safety communication protocol in a vehicle machine engineering mode, and then carrying out the data transmission between the vehicle controllers under the condition that the bidirectional authentication is passed. And performing identity verification on the data service, the data service including a data transmission service, and finally, controlling the vehicle controller to perform data transmission through the data transmission service. By executing the operation, the data transmission safety of the vehicle end system can be improved.

Description

Technical Field

[0001] The present application relates to the field of vehicle technology, and in particular to a method, device, equipment and vehicle for data transmission between vehicle controllers. Background Art

[0002] With the continuous development of the Internet of Vehicles, in order to better serve users and improve their driving experience in terms of reliability and safety, the security of the vehicle-side system in troubleshooting, configuration data, and transmission of sensitive information is becoming increasingly important. The transmission of sensitive data requires continuous improvement in security protection to ensure data security and reliability.

[0003] In the related technology, the data transmission of the vehicle-side system is carried out by means of the Hypertext Transfer Protocol (HTTP). However, due to some characteristics of HTTP itself, sensitive information may be easily leaked and tampered with during the transmission of the vehicle-side system, thereby affecting the security of the data transmission of the vehicle-side system. Summary of the invention

[0004] The main purpose of the embodiments of the present application is to provide a method, device, equipment and vehicle for data transmission between vehicle controllers, aiming to improve the security of data transmission in the vehicle-side system.

[0005] To achieve the above object, one aspect of an embodiment of the present application provides a method for data transmission between vehicle controllers, comprising the following steps:

[0006] In the vehicle engineering mode, bidirectional authentication is performed on the communication between the vehicle controllers through a secure communication protocol;

[0007] In the case where the two-way authentication is passed, identity authentication is performed on the data service, the data service includes a data transmission service;

[0008] Control the vehicle controller to perform data transmission through the data transmission service.

[0009] In some embodiments, the secure communication protocol includes a secure hypertext transfer protocol, and the two-way authentication of the communication between the vehicle controllers through the secure communication protocol includes:

[0010] Bidirectional certificate authentication is performed on the communication between the vehicle controllers through the secure hypertext transfer protocol, wherein the certificate is an agreed certificate.

[0011] In some embodiments, the data service further includes a data display service, and the data transmission method between vehicle controllers further includes:

[0012] The vehicle controller is controlled to display the transmitted data through the data display service.

[0013] In some embodiments, authenticating the data service includes:

[0014] Obtain account and password information;

[0015] Authentication is performed on the data service based on the account information and the password information.

[0016] In some embodiments, the password information is generated by the following steps:

[0017] Randomly generate the password information through a security tool;

[0018] Wherein, the password information is stored in an encrypted manner.

[0019] In some embodiments, authenticating the data service further includes:

[0020] In case of authentication failure, the number of consecutive authentication failures is recorded;

[0021] Setting an authentication delay time according to the number of consecutive authentication failures;

[0022] The delay time increases exponentially with the number of consecutive identity authentication failures.

[0023] In some embodiments, controlling the vehicle controller to transmit data via the data transmission service includes:

[0024] Acquire whitelist information of the vehicle controller as a server, wherein the whitelist information includes information of a client having permission to perform data transmission with the server, wherein the client is the vehicle controller requesting data transmission;

[0025] The client is controlled to perform data transmission through the data transmission service according to the whitelist information.

[0026] In some embodiments, controlling the vehicle controller to transmit data via the data transmission service includes:

[0027] Get the preset time limit for data transmission service;

[0028] In a case where the service time of the data transmission service is greater than or equal to the preset time limit of the data transmission service, the data transmission service is controlled to interrupt the data transmission between the vehicle controllers.

[0029] To achieve the above object, another aspect of an embodiment of the present application provides a data transmission device between vehicle controllers, the data transmission device between vehicle controllers comprising:

[0030] A two-way authentication module, used to perform two-way authentication on the communication between the vehicle controllers through a secure communication protocol in a vehicle engineering mode;

[0031] An identity authentication module, used for authenticating the data service if the two-way authentication passes, the data service including the data transmission service;

[0032] The data transmission module is used to control the vehicle controller to perform data transmission through the data transmission service.

[0033] To achieve the above-mentioned purpose, another aspect of an embodiment of the present application proposes an electronic device, which includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the steps of the data transmission method between vehicle controllers of the above-mentioned embodiment are implemented.

[0034] To achieve the above-mentioned purpose, another aspect of an embodiment of the present application provides a vehicle, which includes a data transmission device between vehicle controllers of the above-mentioned embodiment or an electronic device of the above-mentioned embodiment.

[0035] The embodiments of the present application include at least the following beneficial effects:

[0036] The present application provides a method, device, equipment and vehicle for data transmission between vehicle controllers. In an embodiment of the present application, first, in the vehicle-machine engineering mode, bidirectional authentication is performed on the communication between vehicle controllers through a secure communication protocol. Then, if the bidirectional authentication passes, the data service is authenticated, and the data service includes a data transmission service. Finally, the vehicle controller is controlled to transmit data through the data transmission service. In an embodiment of the present application, since the transmission of data in the vehicle-side system is all carried out in the vehicle-machine engineering mode, the security of data transmission can be guaranteed. Furthermore, by using a secure communication protocol to perform bidirectional authentication on the communication between vehicle controllers, and if the authentication passes, the data service needs to be authenticated, which further guarantees the security of data transmission in the vehicle-side system. Therefore, the vehicle controller in the vehicle-side system transmits data through the data transmission service, which can improve the security of data transmission in the vehicle-side system.

[0037] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0039] Figure 1is a flow chart of a method for data transmission between vehicle controllers provided in some embodiments of the present application;

[0040] Figure 2 is another flow chart of a method for data transmission between vehicle controllers provided in some embodiments of the present application;

[0041] Figure 3 is a schematic block diagram of a module of a data transmission device between vehicle controllers provided in some embodiments of the present application;

[0042] Figure 4 It is a schematic diagram of the hardware structure of an electronic device provided in some embodiments of the present application. DETAILED DESCRIPTION

[0043] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the reference to "embodiment" in this article means that the specific features, structures or characteristics described in conjunction with the embodiment may be included in at least one embodiment of the present application. The appearance of this phrase in various positions in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the embodiments of the present application. They are only examples of devices and methods consistent with some aspects of the embodiments of the present application as detailed in the attached claims.

[0044] It is understood that the terms "first", "second", etc. used in this application can be used to describe various concepts in this article, but unless otherwise specified, these concepts are not limited by these terms. These terms are only used to distinguish one concept from another concept. For example, without departing from the scope of the embodiment of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the words "if" and "if" as used herein can be interpreted as "at the time of" or "when" or "in response to determination".

[0045] The terms "at least one", "multiple", "each", "any", etc. used in this application, at least one includes one, two or more, multiple includes two or more, each refers to each of the corresponding multiple, and any refers to any one of the multiple.

[0046] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0047] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0048] In order to make the inventive concept of the present application easy to understand, before describing the embodiments of the present application in detail, the English abbreviations (terms) / related concepts involved in the embodiments of the present application are first described. The English abbreviations (terms) / related concepts involved in the embodiments of the present application are subject to the following explanations.

[0049] Webservice: WebService is a Web-based service that uses standards such as XML, SOAP, WSDL, and UDDI to allow communication and data exchange between different operating systems and programming languages. Web service is a software system designed to support interactive operations across the network. Web services are self-contained, self-describing, callable applications that can be used to facilitate interaction between machines.

[0050] HTTP: HTTP (Hypertext Transfer Protocol) is an application layer protocol for distributed, collaborative and hypermedia information systems. It is mainly used to transfer data between browsers and servers.

[0051] HTTPS: HTTPS (Hypertext Transfer Protocol Secure) is a secure version of HTTP. It adds a security layer to the traditional HTTP protocol, encrypting data through SSL (Secure Sockets Layer) or its successor TLS (Transport Layer Security) protocol to ensure privacy and integrity during data transmission.

[0052] With the continuous development of the Internet of Vehicles, in order to better serve users and improve their driving experience in terms of reliability and safety, the security of the vehicle-side system in troubleshooting, configuration data, and transmission of sensitive information is becoming increasingly important. The transmission of sensitive data requires continuous improvement in security protection to ensure data security and reliability.

[0053] In the related art, the data transmission of the vehicle-side system is carried out by means of the Hypertext Transfer Protocol (HTTP). The HTTP protocol usually has the following problems:

[0054] 1. The HTTP protocol uses plain text to transmit data during the communication process. Attackers can steal, tamper with or forge data through network sniffing, man-in-the-middle attacks, etc., and then obtain sensitive information between users and services.

[0055] 2. The HTTP protocol does not support any form of identity authentication and cannot guarantee that the server the user is connected to is a legitimate server. It is vulnerable to man-in-the-middle attacks. The HTTP protocol is also vulnerable to DDOS (distributed denial of service) attacks, which can cause the service to be unable to run normally and stably.

[0056] 3. The HTTP protocol cannot guarantee data integrity during transmission, and the data can be easily tampered with.

[0057] Therefore, in the data transmission of the vehicle-side system, sensitive information may be easily leaked and tampered with during transmission through the HTTP protocol, which in turn affects the security of the data transmission of the vehicle-side system.

[0058] In view of this, the present application proposes a method, device, equipment and vehicle for data transmission between vehicle controllers. In the vehicle-machine engineering mode, the scheme performs two-way authentication on the communication between vehicle controllers through a secure communication protocol. Then, if the two-way authentication passes, the data service is authenticated, and the data service includes a data transmission service. Finally, the vehicle controller is controlled to perform data transmission through the data transmission service. In the embodiment of the present application, since the transmission of data in the vehicle-side system is all carried out in the vehicle-machine engineering mode, the security of data transmission can be guaranteed. Furthermore, by using a secure communication protocol to perform two-way authentication on the communication between vehicle controllers, and if the authentication passes, the data service needs to be authenticated, which further guarantees the security of data transmission in the vehicle-side system. Therefore, the vehicle controller in the vehicle-side system performs data transmission through the data transmission service, which can improve the security of data transmission in the vehicle-side system.

[0059] The method provided in the embodiment of the present application can be applied to the electronic device provided in the embodiment of the present application, wherein the electronic device can be an electronic control unit (ECU). The electronic control unit can be a gateway controller or a vehicle network gateway.

[0060] Gateway controllers can help protect data transmission in vehicles from malicious attacks, ensuring the reliability of vehicle systems and the safety of passengers.

[0061] The following will describe in detail the implementation steps of a method for data transmission between vehicle controllers provided by an embodiment of the present application in conjunction with the accompanying drawings.

[0062] Please refer to Figure 1 , Figure 1 A flow chart of a data transmission method between vehicle controllers provided for some embodiments of the present application. It should be noted that the steps shown in the flow chart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and, although a logical order is shown in the flow chart, in some cases, the steps shown or described can be executed in a different order than that shown here.

[0063] The method of the embodiment of the present application comprises the following steps:

[0064] Step 101: In the vehicle engineering mode, two-way authentication is performed on the communication between vehicle controllers through a secure communication protocol;

[0065] Step 102: When the two-way authentication is passed, the data service is authenticated, and the data service includes a data transmission service;

[0066] Step 103: Control the vehicle controller to perform data transmission via the data transmission service.

[0067] In the steps 101 to 103 shown in the embodiment of the present application, the data transmission in the vehicle-side system is all carried out in the vehicle-machine engineering mode, so as to ensure the security of data transmission. Furthermore, by using a secure communication protocol to perform two-way authentication on the communication between vehicle controllers, and in the case of successful authentication, the data service needs to be authenticated, which further ensures the security of data transmission in the vehicle-side system. Therefore, the vehicle controller in the vehicle-side system transmits data through the data transmission service, which can improve the security of data transmission in the vehicle-side system.

[0068] The specific implementation methods of the above steps are introduced below.

[0069] In step 101, in the vehicle engineering mode, the communication between vehicle controllers is bidirectionally authenticated through a secure communication protocol.

[0070] In order to improve the reliability and security of data transmission in the vehicle-side system, in an embodiment of the present application, data transmission between vehicle controllers is controlled in the engineering mode of the vehicle computer; further, in order to ensure the security of data transmission between vehicle controllers, the embodiment of the present application also performs two-way authentication of communication between vehicle controllers through a secure communication protocol before the vehicle controller sends or receives data.

[0071] The vehicle engineering mode usually refers to a special operating mode of the in-vehicle infotainment system (IVI) or the vehicle terminal. Since the engineering mode can access sensitive settings of the system, there are usually certain security measures, such as entering a specific password or executing a specific operation sequence to enter. In addition, for ordinary users, the vehicle engineering mode is usually hidden, and entering the engineering mode may require the use of specific hardware tools or software commands to further ensure the security of sensitive data.

[0072] A secure communication protocol generally refers to a protocol and a transmission method that provide data encryption, integrity verification and / or authentication mechanisms to ensure the security of data during transmission. The secure communication protocol may be HTTPS, FTPS (File Transfer Protocol Secure), SFTP (SSH File Transfer Protocol), SCP (Secure Copy), VPN (Virtual Private Network), etc., and this application does not limit this.

[0073] Two-way authentication, also known as two-way verification or mutual authentication, requires both parties in communication to verify each other's identity before establishing a connection. This authentication process ensures that both parties involved in the communication are verified legal entities, thereby improving the security of the communication process.

[0074] Two-way authentication usually includes initiating authentication, that is, one party of the communication (usually referred to as the client, which may refer to the vehicle controller that initiates the data transmission request in the embodiment of the present application) initiates a connection request to the other party (usually referred to as the server, which may refer to the vehicle controller that receives the data transmission request in the embodiment of the present application). After that, the server provides its identity proof to the client, usually a digital certificate. The client needs to verify the validity of this certificate, including confirming that the certificate is issued by a trusted certificate authority (CA), whether the certificate has expired, and whether the certificate has been revoked. The client also needs to provide its identity proof to the server, also through a digital certificate or other form of identity authentication. The server will verify the client's certificate. Once the identities of both parties are verified, they can exchange keys to establish session keys for encrypted communication. Using the exchanged keys, the two parties establish an encrypted communication channel and begin secure data exchange.

[0075] By adopting a secure communication protocol, the communication between vehicle controllers implements a two-way authentication mechanism, which not only verifies the identity of the sender, but also confirms the legitimacy of the receiver. This is done to prevent unauthorized access and data tampering, ensure the integrity of the vehicle system and the safety of passengers, significantly improve the security of the vehicle's internal network, effectively resist network attacks, protect user privacy from being leaked, and ensure the normal operation and driving safety of the vehicle.

[0076] In some embodiments of the present application, the secure communication protocol includes a secure hypertext transfer protocol, and the secure hypertext transfer protocol can be used to perform two-way certificate authentication on the communication between vehicle controllers, wherein the certificate is an agreed certificate.

[0077] The secure hypertext transfer protocol (HTTPS) is used as the basis for communication. This communication method can realize two-way certificate authentication to ensure the confidentiality, integrity and reliability of data transmission.

[0078] Exemplarily, a communication module supporting the HTTPS protocol can be configured in the vehicle controller of the vehicle-side system. The module can handle encryption and decryption operations to ensure the security of data during transmission. The certificates used by the vehicle controller are agreement certificates, which can be issued by an authoritative certificate authority (CA). The CA can be pre-designated by the vehicle manufacturer or related industry organizations and is specifically responsible for issuing trust certificates for vehicle control systems. During the manufacturing process of the vehicle controller, the agreement certificate can be pre-installed in the trust storage of each controller. These certificates contain the unique identification information of the controller and the public key used for encrypted communication.

[0079] Exemplarily, the process of two-way certificate authentication may be:

[0080] Step 1: Initialize the connection: When vehicle controller A tries to establish communication with controller B, they first initiate a connection via the HTTPS protocol.

[0081] Step 2: Server authentication: Controller B acts as a server and provides its agreement certificate to Controller A. Controller A verifies the validity of the certificate, including the certificate signature, validity period, certificate chain, and whether it has been revoked.

[0082] Step 3: Client authentication: Controller A also acts as a client and provides its agreement certificate to controller B. Controller B performs a similar authentication process.

[0083] Step 4: Key exchange: After both parties verify that the certificate is correct, they conduct a secure key exchange and generate a session key for subsequent encrypted communications.

[0084] After two-way certificate authentication, the communication between vehicle controllers A and B is encrypted and protected, and any unauthorized third party cannot decrypt or tamper with the transmitted data.

[0085] The embodiment provided in the present application performs two-way certificate authentication on the communication between vehicle controllers through the secure hypertext transfer protocol, effectively preventing unauthorized access and data leakage, and ensuring the stable operation of the vehicle electronic system and driving safety.

[0086] In step 102, when the two-way authentication is passed, identity authentication is performed on the data service, where the data service includes a data transmission service.

[0087] When two-way authentication is passed, the data service can also be authenticated to further ensure the security and integrity of data transmission.

[0088] For example, when a vehicle controller as a server receives a request from a vehicle controller of a client, it needs to verify the identity of the client to ensure that only authorized clients can access the data service. Before sending a request, the client also needs to verify the identity of the server to prevent establishing a connection with a fake server. Once the identity authentication is passed, the data service will implement access control based on the client's permissions and roles to ensure that only authorized data can be accessed.

[0089] Through two-way authentication and identity verification of data services, the integrity and non-repudiation of data can be ensured, that is, the data has not been tampered with during transmission, and the sender cannot deny the data that has been sent.

[0090] In some implementations of the present application, authenticating the data service includes obtaining account information and password information, and then authenticating the data service based on the account information and password information.

[0091] For example, an account and password are set for a vehicle controller using data services. The account may include basic information of the vehicle controller and can identify the identity of the vehicle controller. The password should be sufficiently complex to enhance the security of the account.

[0092] When accessing the data service, the controller will be required to enter the account information and password information to initiate a login request. After the server receives the account information and password submitted by the controller, it will check with the information stored in the database. It should be understood that the server can store the hash value of the password instead of the plain text password. During the verification process, the server will hash the password submitted by the controller and then compare it with the hash value stored in the database. If the account information and password information are successfully verified, the controller will be granted access to the data service. If the information verification fails, the controller will be denied access and may receive an error prompt requiring re-enter the correct information.

[0093] Through such an authentication process, data services can effectively control access to sensitive information, ensure the security of controller data, and prevent unauthorized access and potential data leakage risks.

[0094] In some implementations, the password information may be randomly generated by a security tool and stored in an encrypted manner.

[0095] The security tool can be a professional password manager that can randomly generate complex passwords containing uppercase and lowercase letters, numbers, and special characters according to the preset password policy.

[0096] Among them, the security tool can be GPG (GNU Privacy Guard) encryption software, which is an open source standard encryption signature tool, which can usually be used for encryption and digital signature. In the embodiment of the present application, GPG can be used to encrypt the login password to ensure the security of the password during transmission and storage. Among them, the password can contain letters, numbers and special characters. The longer the password is, the more difficult it is to crack.

[0097] Optionally, when storing the password, an encryption method may be used, such as using AES (Advanced Encryption Standard) or SHA-256 (Secure Hash Algorithm 256-bit) to encrypt the password.

[0098] Optionally, a randomly generated salt is added during the encryption process to increase the complexity of the password hash. Even if two users have the same password, their stored hash values ​​will be different due to different salt values.

[0099] Optionally, the controller password can be hashed with a salt value, and the resulting hash value will be stored in the database instead of the plaintext password.

[0100] The embodiments provided in the present application can effectively prevent the risks of password leakage and cracking by using security tools to randomly generate and store passwords in an encrypted manner, thereby ensuring the security of user accounts and data.

[0101] In some embodiments, authenticating a data service may further include, in the event of an authentication failure, recording the number of consecutive authentication failures, and setting an authentication delay time based on the number of consecutive authentication failures, wherein the delay time increases exponentially with the number of consecutive authentication failures.

[0102] In the event of a controller authentication failure, the number of consecutive authentication failures is recorded, and a delay time for authentication is set based on the number of failures, and the delay time may increase exponentially with the number of consecutive authentication failures.

[0103] For example, the system will record each failed authentication attempt in real time, whether it is due to a wrong password or other authentication information mismatch, and these failed attempts will be accumulated to form a record of the number of consecutive failures. Once an authentication failure occurs, the system will immediately implement a delay strategy to increase the time interval for the controller's next login attempt. As the number of consecutive authentication failures increases, the delay time will increase exponentially. For example, the delay is 5 seconds after the first failure, 25 seconds after the second failure, 125 seconds after the third failure, and so on. This exponentially increasing delay time can effectively slow down the attacker's attempts and increase the difficulty of their attack.

[0104] When the number of consecutive failures reaches a certain threshold, the system may pop up a security notification to remind you that there may be a security risk to your account. If the number of consecutive failures exceeds the preset maximum allowed number of attempts, the system will automatically lock the account to prevent further illegal access attempts.

[0105] Through the above strategies, not only can the controller account be protected from automated attacks, but the security of the controller account can also be gradually enhanced.

[0106] In step 103 , the vehicle controller is controlled to perform data transmission via a data transmission service.

[0107] In the vehicle engineering mode, after two-way authentication of communication between vehicle controllers and identity authentication of data services, data transmission between vehicle controllers is carried out through the data transmission service in the data service.

[0108] In some embodiments, when controlling a vehicle controller to perform data transmission through a data transmission service, whitelist information of the vehicle controller serving as the server can be obtained, the whitelist information including information of a client that has permission to perform data transmission with the server, and the client is a vehicle controller requesting data transmission. The client is controlled to perform data transmission through the data transmission service based on the whitelist information.

[0109] In the data transmission of vehicle controllers, in order to ensure that only authorized clients can exchange data with the server vehicle controller, a sophisticated whitelist mechanism can be designed. The whitelist information is a predefined list of client vehicle controllers that are allowed to transmit data with the server vehicle controller. This list contains the unique identification information of each client controller, such as hardware address, serial number or specific authentication credentials.

[0110] The server-side vehicle controller regularly updates and maintains the whitelist information to reflect the actual status of the client controllers in the system, including adding authorized controllers, removing controllers that are no longer authorized, or updating the information of existing controllers.

[0111] When a client vehicle controller requests data transfer, the server controller first queries the whitelist information to verify the identity and permissions of the requester. If the client controller exists in the whitelist and meets all the conditions for data transfer with the server, the server will allow the data transfer connection to be established. If the client controller is not in the whitelist or its permissions do not meet the requirements, the server will reject the data transfer request and may log the security event for further analysis.

[0112] In this way, the whitelist mechanism not only improves the security of data transmission between vehicle controllers, but also provides flexible permission management, making the maintenance and upgrade of vehicle systems more controllable and secure.

[0113] In some embodiments, when controlling a vehicle controller to transmit data through a data transmission service, a preset time limit of the data transmission service can be obtained. When the service time of the data transmission service is greater than or equal to the preset time limit of the data transmission service, the data transmission service is controlled to interrupt the data transmission between the vehicle controllers.

[0114] For example, when the vehicle controller transmits data through the data transmission service, the system will first obtain the preset time limit of the data transmission service, which can be flexibly preset according to the specific controller and the type of data transmitted. The preset time limit of the data transmission service can be fixed or dynamically adjusted to adapt to different operating environments and conditions.

[0115] During the data transmission process, the system will continuously monitor the service time of the data transmission service to ensure that it does not exceed the preset time limit. When the service time of the data transmission service reaches or exceeds the preset time limit, the system will immediately start the interruption process to control the data transmission service to stop the data transmission between the vehicle controllers; it can also issue an alarm or notification to prompt the system administrator or vehicle user about the timeout of the data transmission service; further, record relevant event logs, including the reason for the timeout, duration, controllers involved, etc., to facilitate subsequent analysis and troubleshooting.

[0116] Optionally, after the data transmission service is interrupted, the controller may attempt to re-request the data transmission service, or execute a fault recovery procedure to ensure the normal operation of the vehicle controller.

[0117] Through the above-mentioned method, it is possible to prevent the data transmission service from occupying network resources for a long time or the data transmission from being out of control due to certain faults.

[0118] In some implementations, the data service further includes a data display service, which can control the vehicle controller to display the transmitted data through the data display service.

[0119] The data display service is an important interface for the vehicle controller to interact with the user. It can present the transmitted data in an intuitive and easy-to-understand way. The data display service allows the vehicle controller to display the transmitted data to the user through the vehicle's display screen (such as the instrument panel, central touch screen, etc.). In the engineering mode of the vehicle computer, the displayed data can be a log file. Users or administrators can troubleshoot the fault information of the vehicle-side system based on the displayed log file.

[0120] The following is a detailed description and explanation of the solution of the embodiment of the present invention in conjunction with a specific application example:

[0121] In an embodiment of the present application, a method for data transmission between vehicle controllers is provided, which is used to securely control the transmission of data between vehicle controllers, thereby improving the security of data transmission in a vehicle-side system.

[0122] See also Figure 2 As shown, Figure 2In the process of logging in through the vehicle engineering mode, you can enter the Webservice service. To log in to the vehicle engineering mode, you need to perform login verification. If the login verification is successful, you can enter the Webservice service. If the login verification is unsuccessful, you will return to re-verify. After entering the Webservice service, perform HTTPS bidirectional authentication on the controller communication. The bidirectional authentication certificate is the certificate pre-negotiated by the service. After the bidirectional authentication is passed, use the account password to log in to the data service. The password is randomly generated. The GPG standard encryption signature tool can be used to randomly generate a high-strength random password. After the password is generated, it is encrypted for secure storage. If the bidirectional authentication fails, return to re-perform bidirectional authentication. If the account password login verification is passed, data transmission and display of the transmitted data are performed between the controllers. You can also set a preset time limit for data transmission. When the data transmission exceeds the preset time limit, the data transmission of the terminal controller is terminated. If the account password login verification fails, the number of consecutive login failures can be recorded, and the login delay time can be set according to the number of failures. The delay time can increase exponentially. When the login fails continuously, the user will be forced to wait for an exponentially increasing delay to prevent the password from being blasted and leaked, and to ensure the security and confidentiality of the password. When data transmission, problem troubleshooting and display are completed, exit the data service, Webservice service and vehicle engineering mode.

[0123] The embodiments provided in this application can build a multi-level, comprehensive data service security architecture through the above operations, thereby improving the security, reliability, integrity and confidentiality of vehicle-side system data transmission.

[0124] The above is an introduction to an embodiment of the data transmission method between vehicle controllers provided in this application.

[0125] The implementation of the data transmission device between vehicle controllers provided in the embodiment of the present application will be described in detail below with reference to the accompanying drawings.

[0126] Regarding the data transmission method between vehicle controllers provided in the above embodiment, the present application embodiment also provides a data transmission device between vehicle controllers for implementing the above method, such as Figure 3 As shown, Figure 3 This is a schematic block diagram of a module of a data transmission device between vehicle controllers according to an embodiment of the present application. The data transmission device 300 between vehicle controllers includes:

[0127] A two-way authentication module 301 is used to perform two-way authentication on the communication between vehicle controllers through a secure communication protocol in the vehicle engineering mode;

[0128] An identity authentication module 302 is used to authenticate the data service when the two-way authentication is passed, and the data service includes a data transmission service;

[0129] The data transmission module 303 is used to control the vehicle controller to perform data transmission through the data transmission service.

[0130] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0131] like Figure 4 As shown, the embodiment of the present application further provides an electronic device 400, the electronic device 400 includes a memory 401, one or more processors 402 ( Figure 4 Only one is shown) and a computer program stored in the memory 401 and executable on the processor 402. Among them: the memory 401 is used to store software programs and units, and the processor 402 executes various functional applications and data processing by running the software programs and units stored in the memory 401 to obtain the resources corresponding to the above-mentioned preset events. Optionally, the processor 402 implements the above-mentioned data transmission method between vehicle controllers by running the above-mentioned computer program stored in the memory 401.

[0132] The memory 401, as a non-transitory computer-readable medium, can be used to store non-transitory software programs and non-transitory computer executable programs. In addition, the memory 401 may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one disk storage device, a flash memory device, or other non-transitory solid-state storage device. In some embodiments, the memory 401 may optionally include a memory remotely arranged relative to the processor, and these remote memories may be connected to the processor 402 via a network.

[0133] It can be understood that the contents of the above method embodiments are all applicable to the electronic device embodiment, the functions specifically implemented by the electronic device embodiment are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0134] The embodiment of the present application also provides a vehicle, which includes the above-mentioned data transmission device between vehicle controllers or the above-mentioned electric drive assembly of the electronic device. Specifically, the vehicle can be a private car, such as a sedan, SUV, MPV or pickup truck. The vehicle can also be an operating vehicle, such as a van, bus, small truck or large trailer. The vehicle can be a gasoline vehicle or a new energy vehicle. When the vehicle is a new energy vehicle, it can be a hybrid vehicle or a pure electric vehicle.

[0135] It can be understood that the contents of the above method embodiments are all applicable to the present vehicle embodiment, the functions specifically implemented by the present vehicle embodiment are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0136] An embodiment of the present application also provides a computer program product, which includes a computer program. When the computer program is executed by one or more processors, it can implement the steps of the data transmission method between vehicle controllers.

[0137] It can be understood that the contents of the above method embodiments are all applicable to the present computer program product, the functions specifically implemented by the present computer program product embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0138] The data transmission method, device, electronic device, vehicle and computer program product between vehicle controllers provided in the embodiment of the present application, in the vehicle engineering mode, performs two-way authentication on the communication between vehicle controllers through a secure communication protocol, and then, if the two-way authentication passes, authenticates the data service, which includes a data transmission service, and finally controls the vehicle controller to transmit data through the data transmission service. In the embodiment of the present application, through HTTPS two-way authentication encrypted communication, account high-strength password login, random password generation and secure storage, and service access restrictions, the integrity, security and confidentiality of the data transmission display between controllers can be effectively guaranteed, and the security of vehicle-side system data transmission is improved.

[0139] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0140] Although specific embodiments are described herein, those of ordinary skill in the art will recognize that many other modifications or alternative embodiments are also within the scope of the present disclosure. For example, any of the functions and / or processing capabilities described in conjunction with a particular device or component may be performed by any other device or component. In addition, although various exemplary implementations and architectures have been described according to embodiments of the present disclosure, those of ordinary skill in the art will recognize that many other modifications to the exemplary implementations and architectures described herein are also within the scope of the present disclosure.

[0141] Some aspects of the present disclosure are described above with reference to the block diagram and flow chart of the system, method, system and / or computer program product according to the exemplary embodiments.It should be understood that the combination of one or more blocks in the block diagram and the flow chart and the blocks in the block diagram and the flow chart can be realized by executing computer executable program instructions respectively.Equally, according to some embodiments, some blocks in the block diagram and the flow chart may not need to be executed in the order shown, or may not need to be executed in full.In addition, additional components and / or operations beyond those components and / or operations shown in the blocks in the block diagram and the flow chart may be present in certain embodiments.

[0142] Therefore, the blocks in the block diagrams and flow charts support the combination of devices for performing the specified functions, the combination of elements or steps for performing the specified functions, and the program instruction devices for performing the specified functions. It should also be understood that each block in the block diagrams and flow charts and the combination of blocks in the block diagrams and flow charts can be implemented by a special-purpose hardware computer system or a combination of special-purpose hardware and computer instructions that performs a specific function, element or step.

[0143] The program modules, applications, etc. described herein may include one or more software components, including, for example, software objects, methods, data structures, etc. Each such software component may include computer-executable instructions that, in response to execution, cause at least a portion of the functionality described herein (e.g., one or more operations of the illustrative methods described herein) to be performed.

[0144] Software components can be encoded with any of various programming languages. An exemplary programming language can be a low-level programming language, such as an assembly language associated with a specific hardware architecture and / or an operating system platform. The software component comprising assembly language instructions may need to be converted to executable machine code by an assembler before being executed by hardware architecture and / or platform. Another exemplary programming language can be a higher-level programming language, which can be transplanted across multiple architectures. The software component comprising a higher-level programming language may need to be converted to an intermediate representation by an interpreter or a compiler before execution. Other examples of programming languages ​​include but are not limited to macro languages, shells or command languages, job control languages, scripting languages, database queries or search languages ​​or report writing languages. In one or more exemplary embodiments, the software component comprising the instruction of one of the above-mentioned programming language examples can be directly executed by an operating system or other software components, without first being converted into another form.

[0145] Software components may be stored as files or other data storage structures. Software components of similar type or related functions may be stored together, such as in a specific directory, folder, or library. Software components may be static (e.g., preset or fixed) or dynamic (e.g., created or modified at execution time).

[0146] The embodiments of the present application are described in detail above in conjunction with the accompanying drawings, but the present application is not limited to the above embodiments, and various changes can be made within the knowledge scope of ordinary technicians in the relevant technical field without departing from the purpose of the present application.

Claims

1. A data transmission method between vehicle controllers, characterized in that: The following steps are involved: In the vehicle engineering mode, bidirectional authentication is performed on the communication between the vehicle controllers through a secure communication protocol; In the case where the two-way authentication is passed, identity authentication is performed on the data service, the data service includes a data transmission service; Control the vehicle controller to perform data transmission through the data transmission service.

2. The data transmission method between vehicle controllers according to claim 1, characterized in that: The secure communication protocol includes a secure hypertext transfer protocol, and the communication between the vehicle controllers is bidirectionally authenticated by the secure communication protocol, including: Bidirectional certificate authentication is performed on the communication between the vehicle controllers through the secure hypertext transfer protocol, wherein the certificate is an agreed certificate.

3. The data transmission method between vehicle controllers according to claim 1, characterized in that: The data service also includes data display service, and the data transmission method between vehicle controllers also includes: The vehicle controller is controlled to display the transmitted data through the data display service.

4. The data transmission method between vehicle controllers according to claim 1, characterized in that: The authentication of the data service includes: Obtain account and password information; Authentication is performed on the data service based on the account information and the password information.

5. The data transmission method between vehicle controllers according to claim 4, characterized in that: The password information is generated by the following steps: Randomly generate the password information through a security tool; Wherein, the password information is stored in an encrypted manner.

6. The data transmission method between vehicle controllers according to claim 4, characterized in that: The authentication of the data service further includes: In case of authentication failure, the number of consecutive authentication failures is recorded; Setting an authentication delay time according to the number of consecutive authentication failures; The delay time increases exponentially with the number of consecutive identity authentication failures.

7. The data transmission method between vehicle controllers according to claim 1, characterized in that: The controlling the vehicle controller to perform data transmission through the data transmission service comprises: Acquire whitelist information of the vehicle controller as a server, wherein the whitelist information includes information of a client having permission to perform data transmission with the server, wherein the client is the vehicle controller requesting data transmission; The client is controlled to perform data transmission through the data transmission service according to the whitelist information.

8. The method for data transmission between vehicle controllers according to claim 1, characterized in that: The controlling the vehicle controller to perform data transmission through the data transmission service comprises: Get the preset time limit for data transmission service; In a case where the service time of the data transmission service is greater than or equal to the preset time limit of the data transmission service, the data transmission service is controlled to interrupt the data transmission between the vehicle controllers.

9. A data transmission device between vehicle controllers, characterized in that: The device comprises: A two-way authentication module, used for performing two-way authentication on the communication between the vehicle controllers through a secure communication protocol in a vehicle engineering mode; An identity authentication module, used for authenticating the data service if the two-way authentication passes, the data service including the data transmission service; The data transmission module is used to control the vehicle controller to perform data transmission through the data transmission service.

10. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the data transmission method between vehicle controllers as described in any one of claims 1 to 8 when executing the computer program.

11. A vehicle, characterized in that: The vehicle includes the data transmission device between vehicle controllers as claimed in claim 9 or the electronic device as claimed in claim 10.

Images