ECU program tamper-proofing method and device, electronic equipment and storage medium

By screening and splicing the engine running track spectrum fragments, the NOx emission average value is determined, and OBD faults are tracked and judged, which solves the problem of OBD diagnosis failure after the ECU program is tampered, and the accurate tamper-proof and timely diagnosis of NOx emission faults is achieved.

CN119830351APending Publication Date: 2025-04-15WEICHAI POWER CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202311329050.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2023-10-13
Publication Date
2025-04-15

AI Technical Summary

Technical Problem

After the ECU program is tampered with, the OBD diagnosis technology fails, resulting in the inability to diagnose NOx emission failure in time.

Method used

The ECU identification and screening of the engine operating path spectrum segment that meets the SCR inlet temperature setting conditions is used to splice and obtain the target operating path spectrum segment, determine its corresponding NOx emission average value, and track and determine whether an OBD failure occurs when the NOx emission threshold is above, thereby determining whether the ECU program has been tampered with and limiting the engine torque during tampering.

Benefits of technology

It realizes accurate identification and prevention when the ECU program is tampered with, ensures timely diagnosis of NOx emission faults, and improves the emission compliance capabilities of diesel vehicles.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119830351A_ABST
    Figure CN119830351A_ABST
Patent Text Reader

Abstract

The invention discloses an ECU program tamper-proofing method and device, electronic equipment and a storage medium. The ECU program tamper-proofing method comprises the following steps: within a first accumulated operation time length interval of an engine, identifying and screening out at least one engine operation road spectrum fragment through the ECU, and splicing to obtain a target operation road spectrum fragment; an NOx specific emission average value corresponding to the target operation road spectrum fragment is determined according to the target operation road spectrum fragment, and when the NOx specific emission average value is larger than or equal to an NOx specific emission threshold value, it is tracked and judged that whether an OBD fault affecting NOx specific emission occurs or not in the second time duration interval and the third time duration interval of engine accumulative operation; and determining whether the ECU program is tampered or not according to the judgment result so as to start to limit the engine torque to the target torque at the next driving cycle when the ECU program is tampered. According to the method, the accuracy of identifying that the ECU program is tampered is ensured, and the ECU program is effectively prevented from being tampered.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of ECU program tamper-proofing, and in particular to an ECU program tamper-proofing method, device, electronic equipment and storage medium. Background Art

[0002] SCR (Selective Catalytic Reduction) decomposes urea into NH3 by spraying, and then reacts with NOx to purify the NOx emission in the exhaust gas. The SCR reaction device is on the engine exhaust pipe, and the exhaust temperature must reach above 200°C to have good catalytic reaction activity. The NOx emissions of diesel vehicles are at risk of being tampered with, especially the tamper-proofing of the engine ECU program, which is a difficult point to prevent tampering. There are few relevant anti-tampering strategies in the current industry. Tampering with the ECU program, on the one hand, to reduce or stop the injection of urea, leads to increased NOx emissions; on the other hand, tampering with the OBD system, when NOx emissions exceed the standard, causes the torque limit, speed limit and other functions of the OBD system to fail.

[0003] At present, the diesel engine ECU integrates OBD diagnostic strategy to diagnose whether there are faults such as NOx emissions exceeding the standard, related system component faults, etc. If there are related faults and they are not repaired for a long time, the engine torque and vehicle speed will be further limited, so as to urge users to repair them in time to ensure that NOx emissions meet the standards. However, OBD diagnosis works within a certain range of conditions, and the relevant conditions are preset and calibrated in the ECU program. Once the ECU program is tampered with, the OBD diagnostic technology will fail. Summary of the invention

[0004] The present invention provides an ECU program anti-tampering method, device, electronic device and storage medium to solve the problem that the current ECU program is tampered with, the OBD diagnostic technology becomes invalid, and further leads to the inability to timely diagnose NOx emission faults.

[0005] According to one aspect of the present invention, a method for preventing tampering of an ECU program is provided, the method comprising:

[0006] In the first time interval of the engine cumulative operation, at least one engine operation spectrum segment that meets the SCR inlet temperature setting condition is selected through ECU identification, and the engine operation spectrum segments are spliced ​​to obtain a target operation spectrum segment;

[0007] Determine a corresponding NOx emission average value according to the target running road spectrum segment, and when the NOx emission average value is greater than or equal to a NOx emission threshold, track and determine whether the ECU has identified an OBD fault that affects the NOx emission within a second time length interval and a third time length interval of the engine's cumulative running;

[0008] Based on the result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio, it is determined whether the ECU program has been tampered with, so as to limit the engine torque to the target torque starting from the next driving cycle when the ECU program is tampered with.

[0009] Optionally, before determining the corresponding average NOx emission ratio according to the target running road spectrum segment, the method further includes:

[0010] Determine whether the accumulated duration of the target running road spectrum segment is greater than or equal to the set segment duration. If so, perform NOx emission calculation. If not, continue to identify and filter the engine running road spectrum segment through ECU.

[0011] Optionally, after determining the corresponding average NOx emission ratio according to the target running road spectrum segment, the method further includes:

[0012] If the NOx emission ratio average value is less than the NOx emission ratio threshold value, the determined corresponding NOx emission ratio average value is stored, and the engine operation road spectrum segments are continuously identified and screened through the ECU.

[0013] Optionally, the determining whether the ECU program has been tampered with according to the result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio, includes:

[0014] If it is determined that the ECU has identified an OBD fault that affects the NOx emission ratio, and the OBD fault that affects the NOx emission ratio exists, and the cumulative time length of the OBD fault that affects the NOx emission ratio reaches the cumulative time length threshold, and the engine torque limit and vehicle speed limit are not triggered, then it is determined that the ECU program has been tampered with.

[0015] Optionally, the determining whether the ECU program has been tampered with according to the result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio, includes:

[0016] If it is determined that the ECU has not identified an OBD fault that affects the NOx emission ratio, then it is determined whether the ECU program has been tampered with based on historical results of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio.

[0017] Optionally, determining whether the ECU program has been tampered with according to historical results of determining whether the ECU has identified an OBD fault that affects NOx emission, includes:

[0018] If the historical result of judging whether the ECU has identified an OBD fault that affects the NOx emission ratio is that there has been no OBD fault that affects the NOx emission ratio, it is determined that the ECU program has been tampered with;

[0019] If the historical result of determining whether the ECU has identified an OBD fault that affects the NOx specific emission is that an OBD fault that affects the NOx specific emission has occurred, the operation of determining whether the ECU program has been tampered with is re-executed.

[0020] Optionally, the SCR inlet temperature setting condition includes that the SCR inlet temperature is within a set inlet temperature range, and the duration of the SCR inlet temperature being within the set inlet temperature range is greater than or equal to a set time length threshold;

[0021] During the first, second and third time intervals of the engine's cumulative running, the engine water temperature is greater than or equal to the set water temperature threshold, the NOx sensor is in normal working condition, the ambient atmospheric pressure is greater than or equal to the set pressure threshold, and the ambient temperature is within the set ambient temperature range.

[0022] According to another aspect of the present invention, there is provided an ECU program tamper-proof device, the ECU program tamper-proof device comprising:

[0023] A road spectrum segment acquisition module is used to perform, within a first cumulative engine operation time interval, to identify and filter out at least one engine operation road spectrum segment that meets the SCR inlet temperature setting condition through ECU identification, and to splice the engine operation road spectrum segments to obtain a target operation road spectrum segment;

[0024] a fault identification module, configured to determine a corresponding NOx emission average value according to the target running road spectrum segment, and when the NOx emission average value is greater than a NOx emission threshold, track and determine whether an OBD fault affecting the NOx emission has occurred in the second and third time intervals of the engine's cumulative running;

[0025] The anti-tampering judgment module is used to determine whether the ECU program has been tampered with based on the result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio, so as to limit the engine torque to the target torque starting from the next driving cycle when the ECU program is tampered with.

[0026] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0027] at least one processor; and

[0028] a memory communicatively connected to the at least one processor; wherein,

[0029] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the ECU program anti-tampering method described in any embodiment of the present invention.

[0030] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the ECU program anti-tampering method described in any embodiment of the present invention when executed.

[0031] The technical solution of the embodiment of the present invention is to select at least one engine operation spectrum segment that meets the SCR inlet temperature setting condition through ECU identification within the first time length interval of the engine cumulative operation, and splice the engine operation spectrum segments to obtain the target operation spectrum segment; determine the corresponding NOx emission average value according to the target operation spectrum segment, and when the NOx emission average value is greater than or equal to the NOx emission threshold, track and judge whether the ECU has identified an OBD fault that affects the NOx emission within the second time length interval and the third time length interval of the engine cumulative operation; determine whether the ECU program has been tampered with according to the result of judging whether the ECU has identified an OBD fault that affects the NOx emission, so as to limit the engine torque to the target torque at the beginning of the next driving cycle when the ECU program is tampered. The present invention solves the problem that the current ECU program is tampered with, the OBD diagnostic technology fails, and then the NOx emission fault cannot be diagnosed in time, and ensures the accuracy of identifying the ECU program being tampered with, effectively prevents the ECU program from being tampered with, and diagnoses the NOx emission fault in time, and has strong versatility.

[0032] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0034] Figure 1is a flow chart of an ECU program tamper-proof method provided according to Embodiment 1 of the present invention;

[0035] Figure 2 is a flow chart of an ECU program tamper-proof method provided according to Embodiment 2 of the present invention;

[0036] Figure 3 1 is a schematic diagram of the structure of an ECU program anti-tampering device provided according to Embodiment 3 of the present invention;

[0037] Figure 4 It is a structural schematic diagram of an electronic device for implementing the ECU program anti-tampering method of an embodiment of the present invention. DETAILED DESCRIPTION

[0038] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0039] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0040] Embodiment 1

[0041] Figure 1 A flowchart of an ECU program anti-tampering method is provided for the first embodiment of the present invention. This embodiment is applicable to the case of ECU program anti-tampering in diesel vehicles. The ECU program anti-tampering method can be executed by an ECU program anti-tampering device. The ECU program anti-tampering device can be implemented in the form of hardware and / or software. The ECU program anti-tampering device can be configured in an electronic device or an electronic device related to diesel vehicle fault diagnosis. Figure 1 As shown, the ECU program anti-tampering method includes:

[0042] S110. Within a first cumulative running time interval of the engine, at least one engine running spectrum segment that meets the SCR inlet temperature setting condition is selected through ECU identification, and the engine running spectrum segments are spliced ​​to obtain a target running spectrum segment.

[0043] Among them, within the first time interval of the engine's cumulative operation, the engine water temperature is greater than or equal to the set water temperature threshold, the NOx sensor is in a normal working state, the ambient atmospheric pressure is greater than or equal to the set pressure threshold, and the ambient temperature is within the set ambient temperature range.

[0044] The water temperature threshold, the pressure threshold, and the ambient temperature range can be set to different values ​​according to different application scenarios and engineering tests, and this embodiment does not impose any restrictions on this. For example, the water temperature threshold can be set to, but not limited to, 70°C, the pressure threshold can be set to, but not limited to, 76kPa, and the ambient temperature range can be set to, but not limited to, -5°C to 38°C. In this embodiment, within the first cumulative running time interval of the engine, it is required that the engine water temperature is greater than or equal to 70°C, the NOx sensor is in a normal working state, the ambient atmospheric pressure is greater than or equal to 76kPa, and the ambient temperature is between -5°C and 38°C.

[0045] It can be understood that the engine water temperature, ambient atmospheric pressure and ambient temperature can all be collected by using existing corresponding sensors or other means, and the engine water temperature, ambient atmospheric pressure and ambient temperature can all be average values ​​within the first time length interval of the engine's cumulative operation, that is, after the engine has accumulated for the first time length interval, the engine water temperature, ambient atmospheric pressure and ambient temperature that can be obtained meet the above conditions; they can also be values ​​that can be reached in real time within the first time length interval of the engine's cumulative operation, that is, after the engine has accumulated for the first time length interval, the engine water temperature, ambient atmospheric pressure and ambient temperature collected in real time at this time meet the above conditions.

[0046] The SCR inlet temperature setting condition includes that the SCR inlet temperature is within a set inlet temperature range, and the duration of the SCR inlet temperature being within the set inlet temperature range is greater than or equal to a set time length threshold. The set temperature range and the set time length threshold can be set to different values ​​according to different application scenarios and engineering tests, and this embodiment does not impose any limitation on this.

[0047] In one embodiment, for example, the inlet temperature range may be set to, but not limited to, 240°C to 400°C, and the time length threshold may be set to, but not limited to, 3 minutes. In this embodiment, the engine operation spectrum segments where the SCR inlet temperature is between 240°C and 400°C and the duration of the SCR inlet temperature between 240°C and 400°C is greater than or equal to 3 minutes are screened out through ECU identification.

[0048] It is understandable that the SCR inlet temperature and the duration that the SCR inlet temperature is within the set inlet temperature range can be collected using existing corresponding sensors or other means.

[0049] The road spectrum, i.e., the power spectrum density of the road surface roughness, is a statistical characteristic of the road surface roughness as the vibration input of the vehicle. The engine operation road spectrum segment in this embodiment can be collected and measured by the existing road spectrum collection method.

[0050] Specifically, within the first time length interval of the engine's cumulative operation, all engine operation spectrum segments that meet the SCR inlet temperature setting conditions are screened out through ECU identification. The engine operation spectrum segments may include one, two or more segments. The specific number of engine operation spectrum segments is determined by the actual test situation. All engine operation spectrum segments are spliced ​​together in sequence to obtain target operation spectrum segments. The target operation spectrum segments include all engine operation spectrum segments within the first time length interval of the engine's cumulative operation.

[0051] S120. Determine the corresponding average NOx emission ratio value according to the target operating road spectrum segment, and when the average NOx emission ratio value is greater than or equal to the NOx emission ratio threshold, track and determine whether the ECU identifies an OBD fault that affects the NOx emission ratio during the second time length interval and the third time length interval of the engine's cumulative operation.

[0052] Among them, the NOx specific emission can be calculated by existing means. In this embodiment, the corresponding NOx specific emission is calculated for all engine operating road spectrum segments contained in the target operating road spectrum segment, and the corresponding NOx specific emissions calculated for all engine operating road spectrum segments are averaged to obtain the average NOx specific emission value corresponding to the target operating road spectrum segment.

[0053] Further, determine whether the NOx emission ratio average value is greater than or equal to the NOx emission ratio threshold value. If so, continue to track and determine the fault conditions within the second time length interval and the third time length interval of the engine's cumulative operation. If not, store the determined corresponding NOx emission ratio average value, and continue to identify and filter the engine operation road spectrum fragments through the ECU.

[0054] It is understandable that the NOx emission threshold can be set to different values ​​according to different application scenarios and engineering tests. This embodiment does not impose any limitation on this. Optionally, the NOx emission threshold can be but is not limited to 4g / kWh.

[0055] On the basis of the above, during the second time length interval and the third time length interval of the engine's cumulative operation, the engine water temperature is greater than or equal to the set water temperature threshold, the NOx sensor is in normal working condition, the ambient atmospheric pressure is greater than or equal to the set pressure threshold, and the ambient temperature is within the set ambient temperature range.

[0056] Among them, the first time length interval, the second time length interval, and the third time length interval can all be set to different values ​​according to different application scenarios and engineering tests, and this embodiment does not impose any restrictions on this. The first time length interval, the second time length interval, and the third time length interval can be the same value or different values. Optionally, the first time length interval can be but not limited to 50 hours, the second time length interval can be but not limited to 100 hours, and the third time length interval can be but not limited to 50 hours.

[0057] In this embodiment, when the NOx emission ratio average value is greater than or equal to the NOx emission ratio threshold value, the engine's cumulative running time within the second time length interval will be tracked and judged, and then the engine's cumulative running time within the third time length interval will be tracked and judged, that is, the engine's cumulative running time within the second time length interval and the third time length interval, the ECU identifies whether an OBD fault that affects the NOx emission ratio has occurred.

[0058] S130. Determine whether the ECU program has been tampered with based on the result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio, so as to limit the engine torque to the target torque starting from the next driving cycle when the ECU program is tampered with.

[0059] In one embodiment, if it is determined that the ECU has identified an OBD fault that affects the NOx emission ratio, and the OBD fault that affects the NOx emission ratio exists, and the cumulative time length of the OBD fault that affects the NOx emission ratio reaches the cumulative time length threshold, and the engine torque limit and vehicle speed limit are not triggered, then it is determined that the ECU program has been tampered with.

[0060] Specifically, if it is determined that the ECU has identified an OBD fault that affects NOx emission, the ECU memory is read to determine whether the accumulated time of the fault has triggered a torque limit or a vehicle speed limit, and the torque limit or the vehicle speed limit is executed.

[0061] When an OBD fault that affects the NOx emission ratio exists and the cumulative time length of the OBD fault that affects the NOx emission ratio reaches the cumulative time length threshold, but the engine torque limit and the vehicle speed limit are not triggered, it is determined that the ECU program has been tampered with, and at the beginning of the next driving cycle, the engine torque is limited to the target torque (optionally, the target torque can be but is not limited to 50%). The restriction can only be lifted after being handled by professional maintenance personnel in this field.

[0062] If the OBD fault affecting the NOx emission ratio does not exist, or the cumulative time length of the OBD fault affecting the NOx emission ratio does not reach the cumulative time length threshold, or the engine torque limit and vehicle speed limit have been triggered, the torque limit will not be executed.

[0063] The cumulative time length threshold can be set to different values ​​according to different application scenarios and engineering tests, and this embodiment does not impose any limitation on this.

[0064] In one embodiment, if it is determined that the ECU has not identified an OBD fault that affects the NOx emission ratio, then it is determined whether the ECU program has been tampered with based on historical results of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio.

[0065] Among them, the historical result of judging whether the ECU has identified an OBD fault that affects the NOx emission ratio may be the result of the last judgment whether the ECU has identified an OBD fault that affects the NOx emission ratio, and the last judgment is the last tracking judgment that the ECU has identified no OBD fault that affects the NOx emission ratio within the second time length interval and the third time length interval of the engine's cumulative running.

[0066] Specifically, if the historical result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio is that there has been no OBD fault that affects the NOx emission ratio, then it is determined that the ECU program has been tampered with; if the historical result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio is that there has been an OBD fault that affects the NOx emission ratio, then the operation of determining whether the ECU program has been tampered with is re-executed.

[0067] It should be noted that if the historical result of judging whether the ECU has identified an OBD fault that affects the NOx emission ratio is that there has been no OBD fault that affects the NOx emission ratio, combined with the current judgment that the ECU has identified no OBD fault that affects the NOx emission ratio, that is, it is judged twice in a row that the ECU has identified no OBD fault that affects the NOx emission ratio, it is determined that the ECU program has been tampered with.

[0068] It is understandable that here we can also consider determining that the ECU program has been tampered with only after it is determined that the ECU has identified no OBD fault that affects the NOx emission for three or more consecutive times, so as to ensure the accuracy of identifying that the ECU program has been tampered with, thereby effectively preventing tampering of the ECU program.

[0069] Further, based on the above, after determining that the ECU program has been tampered with, the engine torque will be limited to the target torque starting from the next driving cycle. At the same time, the restriction can only be lifted after being processed by professional maintenance personnel in this field.

[0070] The technical solution of the embodiment of the present invention is to select at least one engine operation spectrum segment that meets the SCR inlet temperature setting condition through ECU identification within the first time length interval of the engine cumulative operation, and splice the engine operation spectrum segments to obtain the target operation spectrum segment; determine the corresponding NOx emission average value according to the target operation spectrum segment, and when the NOx emission average value is greater than or equal to the NOx emission threshold, track and judge whether the ECU has identified an OBD fault that affects the NOx emission within the second time length interval and the third time length interval of the engine cumulative operation; determine whether the ECU program has been tampered with according to the result of judging whether the ECU has identified an OBD fault that affects the NOx emission, so as to limit the engine torque to the target torque at the beginning of the next driving cycle when the ECU program is tampered. The present invention solves the problem that the current ECU program is tampered with, the OBD diagnostic technology fails, and then the NOx emission fault cannot be diagnosed in time, and ensures the accuracy of identifying the ECU program being tampered with, effectively prevents the ECU program from being tampered with, and diagnoses the NOx emission fault in time, and has strong versatility.

[0071] Embodiment 2

[0072] Figure 2 This is a flowchart of an ECU program anti-tampering method provided in Embodiment 2 of the present invention. This embodiment provides an optional implementation method based on the above embodiment. Figure 2 As shown, the ECU program anti-tampering method includes:

[0073] S210. Within the first cumulative running time interval of the engine, select at least one engine running spectrum segment that meets the SCR inlet temperature setting condition through ECU identification, and splice the engine running spectrum segments to obtain a target running spectrum segment.

[0074] S220. Determine whether the accumulated duration of the target running route spectrum segment is greater than or equal to the set segment duration. If so, execute step S230; if not, execute step S210.

[0075] The segment duration may be set to different values ​​according to different application scenarios and engineering tests, and this embodiment does not impose any restrictions on this. Optionally, the segment duration may be set to, but is not limited to, 10 hours.

[0076] In this embodiment, it is determined whether the cumulative duration of the target operating road spectrum segment is greater than or equal to 10 hours. If it is greater than or equal to 10 hours, step S230 is executed. If it is less than 10 hours, the engine operation is continued to be monitored, and the engine operating road spectrum segments that meet the conditions are cumulatively identified and screened out until the cumulative duration of the target operating road spectrum segment is greater than or equal to the set segment duration.

[0077] S230. Determine the corresponding average NOx emission ratio according to the target operating road spectrum segment.

[0078] S240, determine whether the NOx emission ratio average value is greater than or equal to the NOx emission ratio threshold value, if so, execute step S250, if not, execute step S210.

[0079] S250, tracking and judging whether the ECU has identified an OBD fault affecting NOx emission ratio during the second and third cumulative running time intervals of the engine, if so, executing step S260, if not, executing step S270.

[0080] S260. If it is determined that an OBD fault affecting NOx emission ratio exists, and the cumulative time length of the OBD fault affecting NOx emission ratio reaches the cumulative time length threshold, and the engine torque limit and vehicle speed limit are not triggered, it is determined that the ECU program has been tampered with, and step S290 is executed.

[0081] S270, determine whether the ECU has identified a history of OBD faults that affect NOx emission ratios. If so, execute step S210; if not, execute step S280.

[0082] It can be understood that the historical result of judging whether the ECU has identified an OBD fault that affects the NOx emission ratio is that an OBD fault that affects the NOx emission ratio has occurred, that is, the last tracking judgment was that the ECU identified an OBD fault that affects the NOx emission ratio within the second time length interval and the third time length interval of the engine's cumulative operation, then the result of this tracking judgment that the ECU identified no OBD fault that affects the NOx emission ratio within the second time length interval and the third time length interval of the engine's cumulative operation will be stored, so that after executing steps S210 to S250 again, it will be used as the historical result of a new execution of step S270.

[0083] S280: If it is determined that the ECU program has been tampered with, execute step S290.

[0084] S290: Starting to limit the engine torque to the target torque in the next driving cycle when the ECU program is tampered with.

[0085] The current industry anti-tampering measures are almost all aimed at preventing tampering of components such as sensors, and there is a lack of measures to prevent tampering of ECU programs. The technical solution of the embodiment of the present invention focuses on solving the problem of ECU program tampering, and associates multiple condition parameters such as atmospheric pressure, ambient temperature, exhaust temperature, etc., thereby ensuring the accuracy of identifying tampering. At the same time, the logic and numerical values ​​are highly versatile and can be implemented in the underlying program of the ECU, which is not easily tampered with and improves the anti-tampering effect of the ECU program.

[0086] Embodiment 3

[0087] Figure 3 This is a schematic diagram of the structure of an ECU program anti-tampering device provided in Embodiment 3 of the present invention. Figure 3 As shown, the ECU program anti-tampering device includes:

[0088] A road spectrum segment acquisition module 310 is used to perform, within a first cumulative engine operation time interval, to select, through ECU identification, at least one engine operation road spectrum segment that meets the SCR inlet temperature setting condition, and to splice the engine operation road spectrum segments to obtain a target operation road spectrum segment;

[0089] a fault identification module 320, configured to determine a corresponding NOx emission average value according to the target running road spectrum segment, and when the NOx emission average value is greater than a NOx emission threshold, track and determine whether an OBD fault affecting NOx emission has occurred in the second and third time intervals of the engine's cumulative running;

[0090] The anti-tampering judgment module 330 is used to determine whether the ECU program has been tampered with based on the result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio, so as to limit the engine torque to the target torque starting from the next driving cycle when the ECU program is tampered with.

[0091] Optionally, the ECU program tamper-proof device further includes:

[0092] The duration judgment module is used to determine whether the cumulative duration of the target operating road spectrum segment is greater than or equal to the set segment duration. If so, the NOx emission ratio calculation is performed; if not, the engine operating road spectrum segment is continuously screened through ECU identification.

[0093] Optionally, the ECU program tamper-proof device further includes:

[0094] The NOx emission ratio judgment module is used to execute if the NOx emission ratio average value is less than the NOx emission ratio threshold, then store the determined NOx emission ratio average value corresponding thereto, and continue to identify and filter the engine operation road spectrum fragments through the ECU.

[0095] Optionally, the anti-tampering judgment module 330 is specifically used for:

[0096] If it is determined that the ECU has identified an OBD fault that affects the NOx emission ratio, and the OBD fault that affects the NOx emission ratio exists, and the cumulative time length of the OBD fault that affects the NOx emission ratio reaches the cumulative time length threshold, and the engine torque limit and vehicle speed limit are not triggered, then it is determined that the ECU program has been tampered with.

[0097] Optionally, the anti-tampering judgment module 330 is specifically used for:

[0098] If it is determined that the ECU has not identified an OBD fault that affects the NOx emission ratio, then it is determined whether the ECU program has been tampered with based on historical results of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio.

[0099] Optionally, the determining whether the ECU program has been tampered with based on the historical result of judging whether the ECU has identified an OBD fault that affects the NOx emission is specifically used for:

[0100] If the historical result of judging whether the ECU has identified an OBD fault that affects the NOx emission ratio is that there has been no OBD fault that affects the NOx emission ratio, it is determined that the ECU program has been tampered with;

[0101] If the historical result of determining whether the ECU has identified an OBD fault that affects the NOx specific emission is that an OBD fault that affects the NOx specific emission has occurred, the operation of determining whether the ECU program has been tampered with is re-executed.

[0102] Optionally, the SCR inlet temperature setting condition includes that the SCR inlet temperature is within a set inlet temperature range, and the duration of the SCR inlet temperature being within the set inlet temperature range is greater than or equal to a set time length threshold;

[0103] During the first, second and third time intervals of the engine's cumulative running, the engine water temperature is greater than or equal to the set water temperature threshold, the NOx sensor is in normal working condition, the ambient atmospheric pressure is greater than or equal to the set pressure threshold, and the ambient temperature is within the set ambient temperature range.

[0104] The ECU program anti-tampering device provided in the embodiment of the present invention can execute the ECU program anti-tampering method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects for executing the ECU program anti-tampering method.

[0105] Embodiment 4

[0106] Figure 4 A schematic diagram of an electronic device 410 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0107] like Figure 4 As shown, the electronic device 410 includes at least one processor 411, and a memory connected to the at least one processor 411 in communication, such as a read-only memory (ROM) 412, a random access memory (RAM) 413, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 411 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 412 or the computer program loaded from the storage unit 418 to the random access memory (RAM) 413. In the RAM 413, various programs and data required for the operation of the electronic device 410 can also be stored. The processor 411, the ROM 412, and the RAM 413 are connected to each other via a bus 414. An input / output (I / O) interface 415 is also connected to the bus 414.

[0108] Multiple components in the electronic device 410 are connected to the I / O interface 415, including: an input unit 416, such as a keyboard, a mouse, etc.; an output unit 417, such as various types of displays, speakers, etc.; a storage unit 418, such as a disk, an optical disk, etc.; and a communication unit 419, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 419 allows the electronic device 410 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0109] Processor 411 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of processor 411 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. Processor 411 performs the various methods and processes described above, such as the ECU program anti-tampering method.

[0110] In some embodiments, the ECU program anti-tampering method can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 418. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 410 via the ROM 412 and / or the communication unit 419. When the computer program is loaded into the RAM 413 and executed by the processor 411, one or more steps of the ECU program anti-tampering method described above can be performed. Alternatively, in other embodiments, the processor 411 can be configured to execute the ECU program anti-tampering method by any other appropriate means (e.g., by means of firmware).

[0111] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0112] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0113] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0114] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0115] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0116] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0117] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0118] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. An ECU program anti-tampering method, characterized in that: include: In the first time interval of the engine cumulative operation, at least one engine operation spectrum segment that meets the SCR inlet temperature setting condition is selected through ECU identification, and the engine operation spectrum segments are spliced ​​to obtain a target operation spectrum segment; Determine a corresponding NOx emission average value according to the target running road spectrum segment, and when the NOx emission average value is greater than or equal to a NOx emission threshold, track and determine whether the ECU has identified an OBD fault that affects the NOx emission within a second time length interval and a third time length interval of the engine's cumulative running; Based on the result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio, it is determined whether the ECU program has been tampered with, so as to limit the engine torque to the target torque starting from the next driving cycle when the ECU program is tampered with.

2. The ECU program anti-tampering method according to claim 1, characterized in that: Before determining the corresponding NOx emission average value according to the target operation road spectrum segment, the method further includes: Determine whether the accumulated duration of the target running road spectrum segment is greater than or equal to the set segment duration. If so, perform NOx emission calculation. If not, continue to identify and filter the engine running road spectrum segment through ECU.

3. The ECU program anti-tampering method according to claim 1, characterized in that: After determining the corresponding NOx emission average value according to the target operating road spectrum segment, the method further includes: If the NOx emission ratio average value is less than the NOx emission ratio threshold value, the determined corresponding NOx emission ratio average value is stored, and the engine operation road spectrum segments are continuously identified and screened through the ECU.

4. The ECU program anti-tampering method according to claim 1, characterized in that: The determining whether the ECU program has been tampered with according to the result of judging whether the ECU has identified an OBD fault that affects the NOx emission ratio, includes: If it is determined that the ECU has identified an OBD fault that affects the NOx emission ratio, and the OBD fault that affects the NOx emission ratio exists, and the cumulative time length of the OBD fault that affects the NOx emission ratio reaches the cumulative time length threshold, and the engine torque limit and vehicle speed limit are not triggered, then it is determined that the ECU program has been tampered with.

5. The ECU program anti-tampering method according to claim 1, characterized in that: The determining whether the ECU program has been tampered with according to the result of judging whether the ECU has identified an OBD fault that affects the NOx emission ratio, includes: If it is determined that the ECU has not identified an OBD fault that affects the NOx emission ratio, then it is determined whether the ECU program has been tampered with based on historical results of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio.

6. The ECU program anti-tampering method according to claim 5, characterized in that: The determining whether the ECU program has been tampered with according to the historical result of judging whether the ECU has identified an OBD fault that affects the NOx emission ratio, includes: If the historical result of judging whether the ECU has identified an OBD fault that affects the NOx emission ratio is that there has been no OBD fault that affects the NOx emission ratio, it is determined that the ECU program has been tampered with; If the historical result of determining whether the ECU has identified an OBD fault that affects the NOx specific emission is that an OBD fault that affects the NOx specific emission has occurred, the operation of determining whether the ECU program has been tampered with is re-executed.

7. The ECU program anti-tampering method according to claim 1, characterized in that: The SCR inlet temperature setting condition includes that the SCR inlet temperature is within the set inlet temperature range, and the duration of the SCR inlet temperature being within the set inlet temperature range is greater than or equal to a set time length threshold; During the first, second and third time intervals of the engine's cumulative running, the engine water temperature is greater than or equal to the set water temperature threshold, the NOx sensor is in normal working condition, the ambient atmospheric pressure is greater than or equal to the set pressure threshold, and the ambient temperature is within the set ambient temperature range.

8. An ECU program anti-tampering device, characterized in that: include: A road spectrum segment acquisition module is used to perform, within a first cumulative engine operation time interval, to identify and filter out at least one engine operation road spectrum segment that meets the SCR inlet temperature setting condition through ECU identification, and to splice the engine operation road spectrum segments to obtain a target operation road spectrum segment; a fault identification module, configured to determine a corresponding NOx emission average value according to the target running road spectrum segment, and when the NOx emission average value is greater than a NOx emission threshold, track and determine whether an OBD fault affecting the NOx emission has occurred in the second and third time intervals of the engine's cumulative running; The anti-tampering judgment module is used to determine whether the ECU program has been tampered with based on the result of determining whether the ECU has identified an OBD fault that affects the NOx emission ratio, so as to limit the engine torque to the target torque starting from the next driving cycle when the ECU program is tampered with.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the ECU program anti-tampering method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the ECU program anti-tampering method according to any one of claims 1 to 7 when executed.