A control method for debugging software, computer equipment and electronic control unit

By creating an independent debug partition in the electronic control unit and performing signature verification, the risk of debugging software being maliciously exploited in the main partition and the problem that debugging software cannot be installed when diagnosing service abnormalities is detected, achieving system security and stability.

CN119759740APending Publication Date: 2025-04-04DALIAN JOYSON PREH INTELLIGENT VEHICLE CO LTD
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202411880194.9
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-12-19
Publication Date
2025-04-04

AI Technical Summary

Technical Problem

In the existing electronic control unit, the debugging software runs directly in the main partition of the system, and there is a risk of malicious use, and the debugging software cannot be installed when diagnosing service abnormalities.

Method used

Create a debug partition independent of the primary partition to store and run the debug software, and ensure the legality and security of the debug software through signature verification. After the debugging work is finished, clear all contents in the debug partition.

Benefits of technology

Ensure that the debugging process will not affect the normal operation of the main system, improve the security and stability of the system, prevent the debugging software from being maliciously exploited, and can install the debugging software normally when diagnosing service abnormalities.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119759740A_ABST
    Figure CN119759740A_ABST
Patent Text Reader

Abstract

The present application provides a control method for debugging software, a computer device, and an electronic control unit, wherein the control method for debugging software includes: creating a debugging partition independent of the main partition, the debugging partition is used to store and run the debugging software; obtaining the signature file of the debugging software; when the signature file is successfully verified, installing the debugging software to the debugging partition, and controlling the debugging software to perform a predetermined debugging task; after the debugging task is completed, clearing the debugging software and the debugging work-related data and configuration information stored in the debugging partition. The present application solves the problem of how to use the debugging software without affecting the system program, and the impact of the debugging software data on the system after debugging.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the technical field of software control, and in particular to a control method for debugging software, a computer device, and an electronic control unit. Background Art

[0002] With the continuous development of science and technology, due to the large production batch of Electronic Control Unit (ECU), efficient debugging software is needed to support product function debugging, such as Android debug bridge (adb), secure shell (ssh) protocol client, etc. These tools usually have higher permissions and can receive host computer instructions to configure system functions and set parameters. In current electronic control units, the usual way to handle debugging software is to install the debugging software in the main partition, but these debugging software run directly in the main partition of the system, which has a greater risk of being maliciously exploited. Summary of the invention

[0003] The technical problem that the present application intends to solve is to achieve the use of debugging software without affecting the original system program, to avoid the debugging software being maliciously used to damage the system after debugging, and to prevent the debugging software from being unable to be installed when the diagnostic service is abnormal.

[0004] A first aspect of the present application provides a method for controlling debugging software, which is applied to a computer device. The method for controlling debugging software includes: creating a debugging partition independent of a main partition, the debugging partition being used to store and run debugging software; obtaining a signature file of the debugging software; when the signature file is successfully verified, installing the debugging software to the debugging partition, and controlling the debugging software to perform a predetermined debugging task; after the debugging task is completed, clearing the debugging software and data and configuration information related to the debugging task stored in the debugging partition.

[0005] The technical effect achieved after adopting this technical solution is: by creating a debugging partition independent of the main partition to store and run the debugging software, it is ensured that the debugging process will not affect the normal operation of the main system, thereby improving the security and stability of the system; after the debugging work is completed, all data in the original partition is restored to prevent the leakage of debugging information, thereby protecting user privacy and system security.

[0006] In one possible design, the main partition is set in the memory of the electronic control unit ECU, and a debug partition independent of the main partition is created, including: allocating space in the memory of the ECU for storing and running debug software as a debug partition, and the debug partition is independent of the main partition.

[0007] The technical effect achieved after adopting this technical solution is: rationally divide the space in the memory of the electronic control unit as a debugging partition, fully utilize the hardware resources, and avoid additional hardware costs.

[0008] In one possible design, a diagnostic module is provided in the main partition; when the signature file is successfully verified, before the debugging software is installed into the debugging partition, the method further includes: sending the signature file to the diagnostic module so that the diagnostic module verifies the signature file; when the signature file is successfully verified, installing the debugging software into the debugging partition, including: when the signature file is successfully verified, sending the debugging software to the diagnostic module so that the diagnostic module burns the debugging software into the debugging partition.

[0009] The technical effect achieved after adopting this technical solution is: the diagnostic module is responsible for verifying the signature, which enhances the professionalism and reliability of the verification process.

[0010] In one possible design, the debugging software control method further includes: when the signature file verification fails, receiving verification failure information from the diagnostic module, and controlling the debugging software to stop burning.

[0011] The technical effect achieved after adopting this technical solution is: once the signature file verification fails, the subsequent operations are stopped immediately and the relevant personnel are notified, which effectively prevents illegal or wrong versions of situational software from entering the system and maintains the integrity and security of the system.

[0012] In a possible design, obtaining the signature file of the debugging software includes: sending the debugging software to be verified to a signature server to request a signature; and receiving the signature file returned by the signature server after the signature server signs the debugging software.

[0013] The technical effect achieved after adopting this technical solution is: by requesting a signature from a professional signature service, the authenticity and legality of the debugging software is guaranteed, and the degree of discretion is increased; each debugging software has a unique signature record, which is easy to track and manage.

[0014] In a possible design, a flashing tool is installed in the computer device; the signature file of the debugging software is a signature file obtained by signing the image file of the debugging software; when the signature file is successfully verified, before the debugging software is installed to the debugging partition, the method also includes: directly burning the signed image file of the debugging software to the debugging partition through the flashing tool; sending the signature file to the ECU so that the ECU verifies the signature file; when the signature file is successfully verified, installing the debugging software to the debugging partition, including: when the signature file is successfully verified, starting the debugging work through the ECU.

[0015] The technical effect achieved after adopting this technical solution is: using the flashing tool, the signed debugging software image file can be quickly burned directly into the debugging partition, reducing the intermediate links and speeding up the debugging preparation speed.

[0016] In one possible design, the method further includes: when the signature file verification fails, receiving verification failure information from the ECU, and erasing the debug partition.

[0017] The technical effect achieved after adopting this technical solution is: if the signature file verification fails, the debugging partition is immediately erased to prevent the potential risk from spreading and keep the system clean.

[0018] In one possible design, obtaining the signature file of the debugging software includes: sending the image file of the debugging software to be verified to the signature server to request a signature; and receiving the signature file returned by the signature server after the signature server signs the image file of the debugging software.

[0019] The technical effect achieved after adopting this technical solution is: by signing the image file of the debugging software, the consistency and integrity from development to actual application are ensured; directly signing the image file simplifies the signing process, while ensuring the validity and convenience of the signature.

[0020] A second aspect of the present application provides a computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of any of the above methods when executing the computer program.

[0021] The technical effect achieved after adopting this technical solution is: the computer equipment integrates all the above functions to form a complete debugging control system, which is convenient for users to manage and use.

[0022] The third aspect of the present application provides an electronic control unit, comprising: a main partition and a debugging partition, the debugging partition being independent of the main partition, and the debugging partition being used to store and run debugging software; the electronic control unit being configured to: when the signature file of the debugging software is successfully verified, install the debugging software into the debugging partition and control the debugging software to perform predetermined debugging work; after the debugging work is completed, clear the debugging software and data and configuration information related to the debugging work stored in the debugging partition.

[0023] The technical effect achieved after adopting this technical solution is: after debugging, all relevant data are automatically cleared, which not only protects sensitive information but also saves storage space, which is conducive to long-term maintenance and management.

[0024] In summary, the above-mentioned technical solutions of the present application may have one or more of the following advantages or beneficial effects: i) The security, reliability and efficiency of the debugging process are significantly improved. ii) The debugging preparation work is simplified and the probability of error is reduced. iii) The diagnostic module participates in the signature verification. When the verification is successful, the debugging software is automatically sent to the diagnostic module for burning, which simplifies the manual intervention steps and improves efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 A schematic diagram of an implementation flow of a control method for debugging software provided in an embodiment of the present application; Figure 2 A detailed flow chart of burning the debugging software into the debugging partition through the diagnostic module in the debugging software control method in the embodiment of the present application; Figure 3 It is a detailed flow chart of burning the debugging software into the debugging partition by using a flashing tool in the debugging software control method in the embodiment of the present application; Figure 4 A schematic diagram of the structure of a control device for debugging software provided in an embodiment of the present application; Figure 5 A schematic diagram of the structure of a computer device provided in an embodiment of the present application; Figure 6 A schematic diagram of the structure of an electronic control unit provided in an embodiment of the present application. DETAILED DESCRIPTION

[0026] Currently, there are three main methods for handling debugging software: one is that the debugging software remains in the main partition and is only encrypted; the second is that the user version does not install the debugging software, and the debugging software can be installed in the main partition through the diagnostic module; the third is that the user version does not install the debugging software, and debugging is performed by burning the debugging version.

[0027] The above existing solutions have some problems. Although retaining the debugging software facilitates factory testing and subsequent after-sales debugging, these software run directly in the main partition of the system. Once tampered with, it will be difficult to effectively detect and protect, and there is a risk of the debugging software being maliciously used; installing the debugging software only through the diagnostic module has the risk of not being able to install the debugging software when the diagnostic module is abnormal, affecting after-sales analysis; when debugging is required, the software is upgraded to the debugging version, such as backing up the original user version in [CN118152183A], upgrading the device to the debugging version, and restoring the original user version in the backup partition when the system is abnormal or the recovery strategy is triggered, and separating the process that executes the strategy. Although this practice minimizes the impact of burning the debugging version on the system, the operation of burning the version may cause occasional problems that no longer recur after burning, affecting after-sales analysis.

[0028] In view of this, the purpose of the present application is to provide a control method for debugging software, a computer device and an electronic control unit, which are used to achieve the effect of not affecting the original system program when using the debugging software, avoiding the debugging software from being maliciously used to damage the system after debugging, and preventing the debugging software from being unable to be installed when the diagnostic service is abnormal.

[0029] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the specific embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0030] Embodiment 1 See also Figure 1 As shown, the control method of debugging software provided in Embodiment 1 is applied to a computer device, and includes: 101, creating a debugging partition independent of the main partition, where the debugging partition is used to store and run debugging software; 102, obtaining the signature file of the debugging software; 103, when the signature file is successfully verified, installing the debugging software into the debugging partition, and controlling the debugging software to perform a predetermined debugging task; 104. After the debugging work is completed, the debugging software and the data and configuration information related to the debugging work stored in the debugging partition are cleared.

[0031] This embodiment proposes to create an independent partition in the computer device specifically for storing and running debugging software. This partition is separated from the main system partition, which means that the debugging software no longer runs directly in the main operating system environment. For the debugging software to be installed in the debugging partition, its signature file needs to be obtained first. The signature file is a mechanism used to verify the legitimacy and integrity of the source of the debugging software. After confirming the validity of the signature file, the debugging software is allowed to be installed in the debugging partition and started to perform the specified debugging task. Once the debugging work is completed, all contents in the debugging partition are immediately cleared, including but not limited to the debugging software itself and any temporary data or settings generated by it.

[0032] In some embodiments, the main partition is located in the memory of the electronic control unit ECU, and the creation of a debug partition independent of the main partition may include: dividing a space in the memory of the ECU for storing and running debug software as a debug partition, which is independent of the main partition. The main partition is mainly responsible for storing and running the system's regular operating programs and data. This main partition is the core part of the ECU, ensuring that the main functions of the vehicle or other device where the ECU is located operate normally.

[0033] Specifically, the primary partition is mainly used to store and execute the system's core programs, user applications, and configuration information and data related to these, that is, the primary partition contains all the necessary software to enable the device to work as expected.

[0034] In some implementations, the debugging software can be installed in the debugging partition in two ways: one is to install the debugging software in the debugging partition through the diagnostic module set in the main partition, and the other is to install the debugging software in the debugging partition through the flashing tool in the computer device. Of course, the debugging software can also be installed in the debugging partition in other ways, which are not limited in this application.

[0035] In the first method, a diagnostic module is provided in the main partition. When the signature software is successfully verified, before the debugging software is installed into the debugging partition, the method may further include: sending the signature file to the diagnostic module so that the diagnostic module verifies the signature file; accordingly, when the signature file is successfully verified, installing the debugging software into the debugging partition may include: when the signature file is successfully verified, sending the debugging software to the diagnostic module so that the diagnostic module burns the debugging software into the debugging partition.

[0036] Furthermore, when the signature file verification fails, verification failure information can be received from the diagnosis module, and the debugging software can be controlled to stop burning.

[0037] In this way, obtaining the signature file of the debugging software may include: sending the debugging software to be verified to a signature server to request a signature; and receiving the signature file returned by the signature server after the signature server signs the debugging software.

[0038] In the second method, a flashing tool is installed in the computer device, and the signature file of the debugging software is the signature file after signing the image file of the debugging software; when the signature file is verified successfully, before the debugging software is installed to the debugging partition, it can also include: directly burning the signed image file of the debugging software to the debugging partition through the flashing tool; sending the signature file to the ECU so that the ECU verifies the signature file; correspondingly, when the signature file is verified successfully, installing the debugging software to the debugging partition can include: when the signature file is verified successfully, starting the debugging work through the ECU.

[0039] Furthermore, when the signature file verification fails, verification failure information may be received from the ECU, and the debugging partition may be erased.

[0040] In this way, obtaining the signature file of the debugging software may include: sending the image file of the debugging software to be verified to the signature server to request a signature; and receiving the signature file returned by the signature server after the signature server signs the image file of the debugging software.

[0041] In order to explain in detail the two ways of installing the debugging software into the debugging partition in the debugging software control method of the first embodiment, further description is given below in combination with the second embodiment and the third embodiment.

[0042] Embodiment 2 See also Figure 2 As shown, Embodiment 2 provides a method for installing debugging software into a debugging partition through a diagnostic module set in a main partition. In this embodiment, the computer device takes a PC as an example, and the method includes: The PC creates an independent debugging partition in the ECU for storing and running debugging software; the PC sends the debugging software to the signature server, which signs the debugging software and returns the signature file to the PC; the PC sends the signature file to the diagnostic module in the main partition of the ECU, and the diagnostic module verifies the signature file; when the signature file is successfully verified, the PC sends the debugging software to the diagnostic module, and the diagnostic module burns the debugging software to the debugging partition; after the debugging work is completed, the diagnostic module clears the debugging software and the data and configuration information related to the debugging work stored in the debugging partition; when the signature file verification fails, the verification failure information is received from the diagnostic module, and the debugging software is controlled to stop burning.

[0043] Embodiment 3 See also Figure 3 As shown, Embodiment 3 provides a method for installing debugging software to a debugging partition by using a flashing tool in a computer device. In this embodiment, the computer device is a PC as an example, and the method includes: The PC creates an independent debugging partition in the ECU for storing and running debugging software; the PC creates an image file of the debugging software and sends the image file of the debugging software to the signature server, which signs the image file of the debugging software and returns the signature file to the PC; the PC sends the signature file to the ECU, which verifies the signature file; when the signature file is successfully verified, the PC directly burns the signed image file of the debugging software to the debugging partition through the flashing tool, and starts the debugging work through the ECU; after the debugging work is completed, the PC clears the debugging software and the data and configuration information related to the debugging work stored in the debugging partition; when the signature file verification fails, the PC receives the verification failure information from the ECU and erases the debugging partition.

[0044] The above embodiments 1 to 3 mainly illustrate the solution of the present application from the perspective of method. Figures 4 to 6 The solution of the present application is described in detail from the perspective of the device. It should be noted that, for the sake of brevity, the same or corresponding contents between the various embodiments of the present application can be referenced to each other and will not be repeated in the following.

[0045] Embodiment 4 See also Figure 4 As shown, Embodiment 4 provides a control device for debugging software, which includes a functional module capable of implementing each step of the method described in Embodiments 1 to 3. Specifically, the control device for debugging software includes: A creation module is used to create a debugging partition independent of the main partition, where the debugging partition is used to store and run debugging software; Acquisition module, used to obtain the signature file of the debugging software; A control module, used for installing the debugging software into the debugging partition when the signature file is successfully verified, and controlling the debugging software to perform a predetermined debugging task; The clearing module is used to clear the debugging software and the data and configuration information related to the debugging work stored in the debugging partition after the debugging work is completed.

[0046] Embodiment 5 See also Figure 5 As shown, Embodiment 5 provides a computer device, which includes a memory and a processor, wherein the memory is used to store computer programs and data, and the processor is used to execute the computer programs stored in the memory to complete the processes of Embodiments 1, 2, and 3. Through these steps, the computer device ensures the security and reliability of the debugging software, and simplifies the management and maintenance of the debugging process.

[0047] Embodiment 6 See also Figure 6As shown, embodiment 6 provides an electronic control unit, which is provided with a main partition and a debug partition. The main partition is the core part of the ECU, which is used to store and run the main system software, is responsible for the main functional operation of the device, and ensures the normal operation of the system; the debug partition is independent of the main partition, and is used to store and run the debug software to ensure that the debug process does not affect the normal operation of the main system. In some embodiments, a backup partition may also be provided in the electronic control unit to store backup data to ensure that the system or data can be restored when a problem occurs in the main partition or the debug partition. When debugging software such as adb and ssh needs to be installed, the debugging software will first be sent to the signature server to request a signature, and the returned signature file will be received. Then, the ECU will verify the signature file to ensure that the debugging software has not been tampered with and the source is reliable. If the signature verification is successful, the debugging software will be installed to the debugging partition through the diagnostic module in the main partition of the ECU or the flashing tool in the computer device. Once the debugging software is successfully installed and verified, the ECU can start the predetermined debugging task, allowing the debugging software to run in a controlled environment. After debugging is completed, the ECU will automatically clear all debugging software and its associated data and configuration information stored in the debugging partition to ensure that no residual high-privilege code remains in the system, thereby protecting user privacy and system security.

[0048] Although the present application is disclosed as above, the present application is not limited thereto. Any person skilled in the art can make various changes and modifications without departing from the spirit and scope of the present application. Therefore, the protection scope of the present application shall be subject to the scope defined by the claims.

Claims

1. A control method for debugging software, characterized in that: Applied to computer equipment, the control method of the debugging software includes: Creating a debugging partition independent of the main partition, wherein the debugging partition is used to store and run the debugging software; Obtaining a signature file of the debugging software; When the signature file is successfully verified, the debugging software is installed into the debugging partition, and the debugging software is controlled to perform a predetermined debugging task; After the debugging work is finished, the debugging software and data and configuration information related to the debugging work stored in the debugging partition are cleared.

2. The control method for debugging software according to claim 1, characterized in that: The main partition is set in the memory of the electronic control unit ECU, and the creation of a debugging partition independent of the main partition includes: A space for storing and running the debugging software is divided in the memory of the ECU as the debugging partition, and the debugging partition is independent of the main partition.

3. The control method for debugging software according to claim 1, characterized in that: The main partition is provided with a diagnostic module; When the signature file is successfully verified, before installing the debugging software into the debugging partition, the method further includes: Sending the signature file to the diagnostic module so that the diagnostic module verifies the signature file; When the signature file is successfully verified, installing the debugging software into the debugging partition includes: When the signature file is successfully verified, the debugging software is sent to the diagnostic module, so that the diagnostic module burns the debugging software into the debugging partition.

4. The control method for debugging software according to claim 3, characterized in that: The method further comprises: When the signature file verification fails, verification failure information is received from the diagnosis module, and the debugging software is controlled to stop burning.

5. The control method for debugging software according to claim 3 or 4, characterized in that: The step of obtaining the signature file of the debugging software includes: Send the debugging software to be verified to the signature server to request a signature; The signature file returned by the signature server after the signature server signs the debugging software is received from the signature server.

6. The control method for debugging software according to claim 2, characterized in that: The computer device is installed with a flashing tool; the signature file of the debugging software is a signature file after signing the image file of the debugging software; When the signature file is successfully verified, before installing the debugging software into the debugging partition, the method further includes: Burn the signed image file of the debugging software directly to the debugging partition by using the flashing tool; Sending the signature file to the ECU so that the ECU verifies the signature file; When the signature file is successfully verified, installing the debugging software into the debugging partition includes: When the signature file is successfully verified, the debugging work is started through the ECU.

7. The control method for debugging software according to claim 6, characterized in that: The method further comprises: When verification of the signature file fails, verification failure information is received from the ECU, and the debug partition is erased.

8. The control method for debugging software according to claim 6 or 7, characterized in that: The step of obtaining the signature file of the debugging software includes: Send the image file of the debugging software to be verified to the signature server to request a signature; The signature file returned by the signature server after the signature server signs the image file of the debugging software is received from the signature server.

9. A computer device, characterized in that: The method comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the method according to any one of claims 1 to 8 when executing the computer program.

10. An electronic control unit, characterized in that: It includes: a main partition and a debugging partition, wherein the debugging partition is independent of the main partition and is used to store and run debugging software; The electronic control unit is configured to: when the signature file of the debugging software is successfully verified, install the debugging software into the debugging partition and control the debugging software to perform a predetermined debugging task; After the debugging work is finished, the debugging software and data and configuration information related to the debugging work stored in the debugging partition are cleared.

Citation Information

Patent Citations

  • Debugging version control method and device, electronic equipment and storage medium

    CN118152183A