ECU (Electronic Control Unit) program tampering monitoring method, system, equipment and medium

Abstract

The invention provides an ECU program tampering monitoring method, system and device and a medium, and belongs to the technical field of vehicle safety detection. The method comprises the steps that after the ECU is powered on, whether a fault diagnosis process is started or not is judged by identifying a current calibration identification number and a verification code; after the fault diagnosis process is started, when the starting time of the ECU is larger than a time calibration value t1, whether the temperature value of an SCR upstream temperature sensor is larger than a first temperature calibration value T1 or not is judged; if yes, whether the ECU program is tampered or not is recognized by checking the working state of the nitrogen oxide sensor; if not, whether the ECU program is tampered or not is recognized by verifying the water temperature of the SCR upstream engine; if the ECU program is not tampered, the fault diagnosis process is completed; if the ECU program is tampered, the rotating speed and torque output of the engine are limited, and the fault diagnosis process is completed. According to the invention, the accuracy and reliability of ECU program tampering detection are improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of vehicle safety detection, and more specifically relates to a monitoring method, system, device and medium for ECU program tampering. Background Art

[0002] With the increasing global environmental awareness, the emission standards of diesel engine vehicles are facing more stringent challenges. In order to meet this challenge, diesel engine vehicles are generally equipped with urea injection systems, which significantly reduce nitrogen oxide emissions by precisely controlling the injection amount of urea, making a positive contribution to global environmental protection.

[0003] However, in the process of pursuing economic benefits, some individuals or companies have chosen to modify the engine ECU (electronic control unit) data for the sake of reducing costs. This modification behavior causes the urea injection system to not work properly, resulting in nitrogen oxide emissions far exceeding the standard level, seriously damaging the vehicle's emission performance, and also causing significant pollution to the atmospheric environment.

[0004] What is more serious is that after the ECU data is modified, its original monitoring and alarm functions will be seriously affected. Under normal circumstances, the ECU will monitor the vehicle status based on real-time data and promptly alarm when abnormalities are found so that the owner or maintenance personnel can take prompt measures. However, once the ECU data is modified, this monitoring and alarm function will fail, resulting in the vehicle not being able to be dealt with in a timely manner even when emissions exceed the standard or a fault occurs. This not only increases the risk of environmental pollution, but may also pose a potential threat to road traffic safety.

[0005] At present, the identification technology for ECU program modification in the market mainly relies on the verification method of CALID (calibration identifier) ​​and CVN (calibration verification number). This method compares the CALID and CVN in the ECU with the original data provided by the manufacturer to determine whether the ECU program has been modified. However, the identification robustness of this method is relatively low, because CALID and CVN themselves may have certain security vulnerabilities and can be easily cracked or forged by technical means.

[0006] In addition, even if existing technical solutions can identify that the ECU program has been modified, they can only simply mark or record the vehicle, lacking an effective supervision and recovery mechanism. This means that once the ECU data is modified, the vehicle is likely to continue to operate in a state of excessive emissions, and it is difficult for relevant departments to detect and take corrective measures in a timely manner. Summary of the invention

[0007] In view of the above problems, the purpose of the present invention is to provide a monitoring method, system, device and medium for ECU program tampering, which improves the accuracy and reliability of ECU program tampering detection and can effectively prevent improper operations using tampered ECU programs.

[0008] In order to achieve the above object, the present invention is implemented through the following technical solutions: In a first aspect, an embodiment of the present application provides a method for monitoring ECU program tampering, comprising: After the ECU is powered on, it determines whether to start the fault diagnosis process by identifying the current calibration identification number and verification code; After starting the fault diagnosis process, when the startup time of the ECU is greater than the time calibration value t1, it is determined whether the temperature value of the SCR upstream temperature sensor is greater than the first temperature calibration value T1; If so, the working status of the nitrogen oxide sensor is verified to identify whether the ECU program has been tampered with; If not, the ECU program is identified to see if it has been tampered with by checking the engine water temperature upstream of the SCR; If the ECU program has not been tampered with, the fault diagnosis process is completed; If the ECU program has been tampered with, the engine speed and torque output are limited according to the set values, and the fault diagnosis process is completed.

[0009] In an optional implementation, after the ECU is powered on, determining whether to start a fault diagnosis process by identifying a current identification number and a verification code includes: After the ECU is powered on, the current calibration identification number and verification code are read and recorded as CALID2 and CVN2 respectively; Obtain the calibration identification number CALID1 and verification code CVN1 stored in the memory; Determine whether CALID1 and CVN1 are consistent with CALID2 and CVN2, respectively; If yes, the fault diagnosis process is not started; if no, the fault diagnosis process is executed.

[0010] In an optional implementation, the step of identifying whether the ECU program has been tampered with by verifying the working state of the nitrogen oxide sensor includes: Determine whether the current working status of the nitrogen oxide sensor is normal; If the current NOx sensor is in normal working condition, the NOx concentration value N1 upstream of the SCR and the NOx concentration value N2 upstream of the SCR are read once per second in the time period t2 as a data sample; after the data sample collection is completed, the N1 / N2 value is calculated based on each data sample, and the number of data samples with N1 / N2>50% is counted, recorded as a; if a is greater than the preset judgment value b, it is identified whether there is currently a fault information of low SCR efficiency; if so, the ECU program has not been tampered with; if not, the ECU program has been tampered with.

[0011] In an optional implementation, the step of identifying whether the ECU program has been tampered with by verifying the working state of the nitrogen oxide sensor includes: If the current working state of the nitrogen oxide sensor is abnormal, identifying whether there is currently fault information of abnormal nitrogen oxide sensor; If there is currently no fault information of abnormal nitrogen oxide sensor, the ECU program has been tampered with.

[0012] In an optional implementation, the step of identifying whether the ECU program has been tampered with by checking the engine water temperature upstream of the SCR includes: Read the engine water temperature upstream of the SCR in real time as a reference water temperature value, and compare the reference water temperature value with the second temperature calibration value T2; Determine whether the reference water temperature value is greater than the first temperature calibration value T2 and the duration is greater than the calibration value t3; If so, determine whether the ECU program has been tampered with by identifying the fault information of the temperature sensor upstream of the SCR; If not, no fault determination is made and the fault diagnosis process ends directly.

[0013] In an optional implementation, the step of determining whether the ECU program has been tampered with by identifying fault information of the SCR upstream temperature sensor includes: Identify whether there is fault information of the SCR upstream temperature sensor; If yes, the ECU program has not been tampered with; If not, the ECU program has been tampered with.

[0014] In an optional embodiment, the method further comprises: When the fault diagnosis process is completed, the current calibration identification number and verification code are written into the memory.

[0015] In a second aspect, the embodiment of the present application further provides a monitoring system for ECU program tampering, including: The calibration code acquisition module is used to determine whether to start the fault diagnosis process by identifying the current calibration identification number and verification code after the ECU is powered on; A fault diagnosis module is used to determine whether the temperature value of the temperature sensor upstream of the SCR is greater than the first temperature calibration value T1 when the startup time of the ECU is greater than the time calibration value t1; if so, it is used to identify whether the ECU program has been tampered with by checking the working state of the nitrogen oxide sensor; if not, it is used to identify whether the ECU program has been tampered with by checking the engine water temperature upstream of the SCR; The diagnosis result processing module is used to complete the fault diagnosis process if the ECU program has not been tampered with; if the ECU program has been tampered with, limit the engine speed and torque output according to the set value and complete the fault diagnosis process; The storage module is used to write the current calibration identification number and verification code into the memory after the fault diagnosis process is completed.

[0016] In a third aspect, an embodiment of the present application further provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the method for monitoring ECU program tampering as described in any one of the above items are implemented.

[0017] In a fourth aspect, an embodiment of the present application further provides a storage medium on which a computer program is stored, and when the computer program is executed by a processor, the steps of the method for monitoring ECU program tampering as described in any of the above items are implemented.

[0018] It can be seen from the above technical solutions that the present invention has the following advantages: In the monitoring method for ECU program tampering provided by the present application, emission requirements are used as conditions for determining ECU program tampering based on changes in the calibration identification number and verification code, combined with engine operating conditions; the robustness of determination is improved, and the misjudgment rate is effectively reduced. After determining that the ECU program has been tampered with, by limiting the output of engine speed and torque, and thus limiting the normal operation of the vehicle, it is possible to effectively urge the vehicle ECU data to be restored to a normal state, thereby effectively reducing damage to the vehicle and reducing the cost of use.

[0019] This application verifies the calibration identification number and verification code immediately after the ECU is powered on, which can quickly start the fault diagnosis process, realize real-time monitoring of ECU program tampering, and ensure timely discovery and handling of potential program security issues.

[0020] This application combines a variety of diagnostic methods, including verifying the working status of the nitrogen oxide sensor, the engine water temperature upstream of the SCR, etc., which can more accurately identify whether the ECU program has been tampered with and reduce the possibility of false alarms and missed alarms.

[0021] The present application provides different diagnostic paths according to whether the working state of the nitrogen oxide sensor is normal and the different conditions of the engine water temperature upstream of the SCR, showing a high degree of flexibility and adaptability.

[0022] Once it is diagnosed that the ECU program has been tampered with, this application can immediately limit the engine speed and torque output according to the set values, effectively preventing the tampered program from causing further damage to vehicle performance and ensuring driving safety.

[0023] After the fault diagnosis process is completed, this application writes the current calibration identification number and verification code into the memory, which helps to track and record the status changes of the ECU program and provide strong support for subsequent diagnosis and maintenance.

[0024] Through a comprehensive fault diagnosis process, this application can promptly discover and address safety hazards of ECU programs, thereby improving the reliability and stability of the entire vehicle system. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the technical solution of the present invention, the accompanying drawings required for use in the description will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0026] Figure 1 A flowchart of the ECU program tampering monitoring method provided in this application.

[0027] Figure 2 A flowchart of a method for starting and determining a fault diagnosis process provided in this application.

[0028] Figure 3 A schematic diagram of the fault diagnosis process provided for this application.

[0029] Figure 4 A schematic diagram of the structure of the ECU program tampering monitoring system provided in this application.

[0030] Figure 5 A schematic diagram of the structure of the electronic device provided in this application. DETAILED DESCRIPTION

[0031] In the specific steps of the monitoring method for ECU program tampering described in detail below, various embodiments of the present disclosure will be described more fully. The present disclosure may have various embodiments, and adjustments and changes may be made therein. However, it should be understood that there is no intention to limit the various embodiments of the present disclosure to the specific embodiments disclosed herein, but rather the present disclosure should be understood to cover all adjustments, equivalents and / or alternatives that fall within the spirit and scope of the various embodiments of the present disclosure.

[0032] Hereinafter, the terms "include" or "may include" used in various embodiments of the present disclosure indicate the presence of disclosed functions, operations, or elements, and do not limit the addition of one or more functions, operations, or elements. In addition, as used in various embodiments of the present disclosure, the terms "include", "have", and their cognates are intended only to indicate specific features, numbers, steps, operations, elements, components, or a combination of the foregoing, and should not be understood as first excluding the presence of one or more other features, numbers, steps, operations, elements, components, or a combination of the foregoing or the possibility of adding one or more features, numbers, steps, operations, elements, components, or a combination of the foregoing.

[0033] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0034] See also Figure 1 The figure is a flow chart of a method for monitoring ECU program tampering in a specific embodiment, the method comprising: S1: After the ECU is powered on, it determines whether to start the fault diagnosis process by identifying the current calibration identification number and verification code.

[0035] In a specific implementation manner, after the ECU is powered on, the current calibration identification number and verification code are first read, and the current calibration identification number and verification code are recorded as CALID2 and CVN2, respectively.

[0036] Then, the calibration identification number CALID1 and the verification code CVN1 stored in the memory are obtained; and it is determined whether CALID1 and CVN1 are consistent with CALID2 and CVN2 respectively.

[0037] If yes, the fault diagnosis process is not started; if no, the fault diagnosis process is executed.

[0038] In this step, the CALID and CVN before and after tampering are recorded by the ECU, which not only supports remote monitoring to quickly identify program tampering, but also can locate the tampered vehicle using the relevant monitoring platform.

[0039] S2: After starting the fault diagnosis process, when the startup time of the ECU is greater than the time calibration value t1, determine whether the temperature value of the SCR upstream temperature sensor is greater than the first temperature calibration value T1; if so, identify whether the ECU program has been tampered with by verifying the working status of the nitrogen oxide sensor; if not, identify whether the ECU program has been tampered with by verifying the engine water temperature upstream of the SCR.

[0040] In a specific implementation, this step identifies whether the ECU program has been tampered with in two ways. The details are as follows: 1. Identify whether the ECU program has been tampered with by verifying the working status of the nitrogen oxide sensor: First, determine whether the current working status of the nitrogen oxide sensor is normal.

[0041] If the current NOx sensor is in normal working condition, the NOx concentration value N1 upstream of the SCR and the NOx concentration value N2 upstream of the SCR are read once per second in the time period t2 as a data sample; after the data sample collection is completed, the N1 / N2 value is calculated based on each data sample, and the number of data samples with N1 / N2>50% is counted, recorded as a; if a is greater than the preset judgment value b, it is identified whether there is currently a fault information of low SCR efficiency; if so, the ECU program has not been tampered with; if not, the ECU program has been tampered with.

[0042] If the current working state of the nitrogen oxide sensor is abnormal, it is identified whether there is currently fault information of the abnormal nitrogen oxide sensor; at this time, if there is currently no fault information of the abnormal nitrogen oxide sensor, the ECU program has been tampered with.

[0043] In the above judgment process, the ECU calculates the upstream / downstream NO x The conversion rate realizes direct monitoring of vehicle emissions and provides a data basis for the introduction of OBM emission monitoring in the next stage.

[0044] 2. Identify whether the ECU program has been tampered with by checking the engine water temperature upstream of the SCR: First, the engine water temperature upstream of the SCR is read in real time as a reference water temperature value, and the reference water temperature value is compared with the second temperature calibration value T2. Then, it is determined whether the reference water temperature value is greater than the first temperature calibration value T2 and the duration is greater than the calibration value t3.

[0045] If yes, then further identify whether there is fault information of the SCR upstream temperature sensor. If yes, the ECU program has not been tampered with; if no, the ECU program has been tampered with.

[0046] If not, no fault determination is made and the fault diagnosis process ends directly.

[0047] S3: If the ECU program has not been tampered with, the fault diagnosis process is completed; if the ECU program has been tampered with, the engine speed and torque output are limited according to the set values, and the fault diagnosis process is completed. S4: When the fault diagnosis process is completed, the current calibration identification number and verification code are written into the memory.

[0048] In this embodiment, by real-time monitoring of the calibration identification number and verification code of the ECU program, combined with multi-dimensional diagnostic means such as the working status of the nitrogen oxide sensor and the engine water temperature upstream of the SCR, ECU program tampering can be accurately identified and quickly responded to, effectively ensuring vehicle safety and system reliability, while improving the accuracy and efficiency of fault diagnosis.

[0049] In an embodiment of the present invention, based on step S1, a possible embodiment is given below to illustrate its specific implementation scheme in a non-limiting manner.

[0050] refer to Figure 2 As shown, this embodiment discloses a method for starting and determining a fault diagnosis process, which specifically includes: After the ECU is powered on, it first reads the current calibration identification number and verification code, which are recorded as CALID2 and CVN2, and obtains the identification number and verification code stored in the memory, which are recorded as CALID1 and CVN1.

[0051] If CALID1 and CVN1 are consistent with CALID2 and CVN2 respectively, no fault judgment is made; if CALID1 and CVN1 are inconsistent with CALID2 and CVN2, the following fault judgment is performed.

[0052] In an embodiment of the present invention, based on step S2 to step S4, a possible embodiment is given below to illustrate its specific implementation scheme in a non-limiting manner.

[0053] refer to Figure 3 As shown, this embodiment discloses a fault diagnosis process, which is as follows: When the ECU startup time is greater than the calibration value t1, it is determined whether the SCR upstream sensor temperature is greater than the calibration value T1.

[0054] If the temperature of the SCR upstream sensor is greater than the calibration value T1, continue to judge NO X Is the sensor working properly? If NO X The sensor is working properly and is calculated second by second (downstream NO X concentration) / (upstream NO XThe number of samples with concentration > 50% is counted as a; when a> set value b within t2, if the SCR efficiency failure is reported, it means that the ECU program has not been tampered with; if the SCR efficiency failure is not reported, it means that the ECU program has been tampered with; in addition, if NO X The sensor is not working properly but there is no NO X If a sensor-related fault is reported, it also means that the ECU program has been tampered with.

[0055] If the temperature of the upstream sensor of the SCR is not greater than the calibration value T1, then continue to determine whether the engine water temperature is greater than the calibration value T2 and whether the duration is greater than the calibration value t3. If the duration of the engine water temperature greater than the calibration value T2 exceeds the calibration value t3, if the SCR upstream temperature sensor fault is reported, it means that the ECU program has not been tampered with; if the SCR upstream temperature sensor fault is not reported, it means that the ECU program has been tampered with. If the engine water temperature is greater than the calibration value T2 and the duration is greater than the calibration value t3, it is not determined at the same time, and the fault diagnosis will continue when the ECU is powered on again.

[0056] Furthermore, if the ECU program is tampered with, the engine speed and torque output are limited, thereby limiting the normal operation of the vehicle, and the driver restores the vehicle ECU data to a normal state.

[0057] In addition, after completing the above fault diagnosis process, the current calibration identification number and verification code will be written into the memory regardless of whether the ECU program has been tampered with.

[0058] like Figure 4 As shown, the following is an embodiment of the ECU program tampering monitoring system provided by the embodiment of the present disclosure. The system and the ECU program tampering monitoring method of the above-mentioned embodiments belong to the same inventive concept. For details not described in detail in the embodiment of the ECU program tampering monitoring system, reference can be made to the embodiment of the above-mentioned ECU program tampering monitoring method.

[0059] A monitoring system for ECU program tampering includes: a calibration code acquisition module 1, a fault diagnosis module 2, a diagnosis result processing module 3 and a storage module 4.

[0060] The calibration code acquisition module 1 is used to determine whether to start the fault diagnosis process by identifying the current calibration identification number and verification code after the ECU is powered on.

[0061] Fault diagnosis module 2 is used to determine whether the temperature value of the SCR upstream temperature sensor is greater than the first temperature calibration value T1 when the startup time of the ECU is greater than the time calibration value t1; if so, it is used to identify whether the ECU program has been tampered with by verifying the working state of the nitrogen oxide sensor; if not, it is used to identify whether the ECU program has been tampered with by verifying the engine water temperature upstream of the SCR.

[0062] The diagnosis result processing module 3 is used to complete the fault diagnosis process if the ECU program has not been tampered with; if the ECU program has been tampered with, limit the engine speed and torque output according to the set values ​​and complete the fault diagnosis process.

[0063] The storage module 4 is used to write the current calibration identification number and verification code into the memory after the fault diagnosis process is completed.

[0064] The ECU program tampering monitoring system provided in this embodiment can quickly and accurately identify whether the ECU program has been tampered with by real-time monitoring of the calibration identification number and verification code of the ECU program, combined with multi-dimensional diagnostic means such as the working status of the nitrogen oxide sensor and the engine water temperature upstream of the SCR, and can timely limit the engine performance when tampering is found to protect driving safety, while improving system reliability and subsequent maintenance efficiency.

[0065] Figure 5 A schematic diagram of the hardware structure of an electronic device for implementing various embodiments of the present invention.

[0066] The monitoring method for ECU program tampering provided in the embodiment of the present application can be applied to electronic devices. It can be understood by those skilled in the art that the electronic device structure involved in the embodiment of the present invention does not constitute a limitation on the electronic device, and the electronic device may include more or less components than shown, or combine certain components, or arrange different components. In an embodiment of the present invention, the electronic device includes but is not limited to a laptop computer, a desktop computer, a workbench, a personal digital assistant, a server, a blade server, a mainframe computer, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the embodiments of the present application described and / or required herein.

[0067] The electronic device may include a processor, an external memory interface, an internal memory, a universal serial bus (USB) interface, a charging management module, a power management module, a battery, a wireless communication module, an audio module, a speaker, a microphone, a sensor module, buttons, a camera, a display, and a SIM card interface, etc.

[0068] The processor may include one or more processing units, for example, the processor may include a central processing unit (CPU), an application processor (AP), a modem processor, a graphics processing unit (GPU), an image signal processor (ISP), a controller, a memory, a video codec, a digital signal processor (DSP), a baseband processor, and / or a neural-network processing unit (NPU), etc. Among them, different processing units may be independent devices or integrated into one or more processors.

[0069] The processor can be the nerve center and command center of the electronic device. The controller can generate an operation control signal according to the instruction operation code and timing signal to complete the control of fetching and executing instructions.

[0070] A memory may also be provided in the processor for storing instructions and data. In some embodiments, the memory in the processor is a cache memory. The memory may store instructions or data that the processor has just used or is cyclically used. If the processor needs to use the instruction or data again, it may be directly called from the memory. This avoids repeated access, reduces the waiting time of the processor, and thus improves system efficiency.

[0071] The external memory interface can be used to connect an external memory card, such as a MicroSD card, to expand the storage capacity of the electronic device. The external memory card communicates with the processor through the external memory interface to implement data storage functions. For example, files such as music and videos can be saved in the external memory card.

[0072] The internal memory can be used to store computer executable program codes, which include instructions. The processor executes various functional applications and data processing of the electronic device by running the instructions stored in the internal memory. The internal memory may include a program storage area and a data storage area. The internal memory may include a high-speed random access memory and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, a universal flash storage (UFS), etc.

[0073] The wireless communication function of an electronic device can be realized through an antenna, a wireless communication module, a modem processor, and a baseband processor.

[0074] The wireless communication module can provide wireless communication solutions for electronic devices, including wireless local area networks (WLAN) (such as wireless fidelity (Wi-Fi) networks), Bluetooth (BT), global navigation satellite system (GNSS), frequency modulation (FM), near field communication (NFC), infrared technology (IR), etc.

[0075] Electronic devices can implement audio functions, etc. through audio modules, speakers, receivers, microphones, headphone jacks, and application processors.

[0076] Electronic devices can achieve shooting functions through ISP, camera, video codec, GPU, display and application processor.

[0077] Electronic devices can achieve display functions through GPU, display screen and application processor.

[0078] The GPU is a microprocessor for image processing that connects the display screen and the application processor. The GPU is used to perform mathematical and geometric calculations for graphics rendering. The processor may include one or more GPUs that execute program instructions to generate or change display information.

[0079] The display screen is used to display images, videos, etc. The display screen includes a display panel.

[0080] The electronic device implements the ECU program tampering monitoring method of the present application, and can accurately and quickly identify whether the ECU program has been tampered with by real-time monitoring of the calibration identification number and verification code of the ECU program, combined with the working state of the nitrogen oxide sensor and the verification of the engine water temperature upstream of the SCR, and timely limit the engine performance when tampering is found. The beneficial effect of effectively ensuring driving safety and improving the reliability and stability of the vehicle system is achieved.

[0081] The storage medium provided in the present application stores a program product that can implement a monitoring method for ECU program tampering.

[0082] The monitoring method of ECU program tampering includes: after the ECU is powered on, by identifying the current calibration identification number and verification code, it is determined whether to start the fault diagnosis process. After starting the fault diagnosis process, when the startup time of the ECU is greater than the time calibration value t1, it is determined whether the temperature value of the SCR upstream temperature sensor is greater than the first temperature calibration value T1; if so, it is determined whether the ECU program has been tampered with by verifying the working state of the nitrogen oxide sensor; if not, it is determined whether the ECU program has been tampered with by verifying the engine water temperature upstream of the SCR. If the ECU program has not been tampered with, the fault diagnosis process is completed; if the ECU program has been tampered with, the engine speed and torque output are limited according to the set value, and the fault diagnosis process is completed.

[0083] In some possible embodiments, the ECU program tampering monitoring method disclosed herein can be implemented in the form of a program product, which includes a program code. When the program product is run on a terminal device, the program code is used to enable the terminal device to execute the steps described in the above “Exemplary Method” section of this specification according to various exemplary embodiments of the present disclosure.

[0084] The storage medium of the present disclosure can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can be, for example, but not limited to, a system, device or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0085] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for monitoring ECU program tampering, characterized in that: include: After the ECU is powered on, it determines whether to start the fault diagnosis process by identifying the current calibration identification number and verification code; After starting the fault diagnosis process, when the startup time of the ECU is greater than the time calibration value t1, it is determined whether the temperature value of the SCR upstream temperature sensor is greater than the first temperature calibration value T1; If so, the working status of the nitrogen oxide sensor is verified to identify whether the ECU program has been tampered with; If not, the ECU program is identified to be tampered with by checking the engine water temperature upstream of the SCR; If the ECU program has not been tampered with, the fault diagnosis process is completed; If the ECU program has been tampered with, the engine speed and torque output are limited according to the set values, and the fault diagnosis process is completed.

2. The method for monitoring ECU program tampering according to claim 1, characterized in that: After the ECU is powered on, it determines whether to start the fault diagnosis process by identifying the current identification number and verification code, including: After the ECU is powered on, the current calibration identification number and verification code are read and recorded as CALID2 and CVN2 respectively; Obtain the calibration identification number CALID1 and verification code CVN1 stored in the memory; Determine whether CALID1 and CVN1 are consistent with CALID2 and CVN2, respectively; If yes, the fault diagnosis process is not started; if no, the fault diagnosis process is executed.

3. The method for monitoring ECU program tampering according to claim 1, characterized in that: The step of identifying whether the ECU program has been tampered with by verifying the working state of the nitrogen oxide sensor includes: Determine whether the current working status of the nitrogen oxide sensor is normal; If the current NOx sensor is in normal working condition, the NOx concentration value N1 upstream of the SCR and the NOx concentration value N2 upstream of the SCR are read once per second in the time period t2 as a data sample; after the data sample collection is completed, the N1 / N2 value is calculated based on each data sample, and the number of data samples with N1 / N2>50% is counted, recorded as a; if a is greater than the preset judgment value b, it is identified whether there is currently a fault information of low SCR efficiency; if so, the ECU program has not been tampered with; if not, the ECU program has been tampered with.

4. The method for monitoring ECU program tampering according to claim 3, characterized in that: The step of identifying whether the ECU program has been tampered with by verifying the working state of the nitrogen oxide sensor includes: If the current working state of the nitrogen oxide sensor is abnormal, identifying whether there is currently fault information of abnormal nitrogen oxide sensor; If there is currently no fault information of abnormal nitrogen oxide sensor, the ECU program has been tampered with.

5. The method for monitoring ECU program tampering according to claim 1, characterized in that: The method of identifying whether the ECU program has been tampered with by checking the engine water temperature upstream of the SCR includes: Read the engine water temperature upstream of the SCR in real time as a reference water temperature value, and compare the reference water temperature value with the second temperature calibration value T2; Determine whether the reference water temperature value is greater than the first temperature calibration value T2 and the duration is greater than the calibration value t3; If so, determine whether the ECU program has been tampered with by identifying the fault information of the temperature sensor upstream of the SCR; If not, no fault determination is made and the fault diagnosis process ends directly.

6. The method for monitoring ECU program tampering according to claim 5, characterized in that: The method of determining whether the ECU program has been tampered with by identifying the fault information of the SCR upstream temperature sensor includes: Identify whether there is fault information of the SCR upstream temperature sensor; If yes, the ECU program has not been tampered with; If not, the ECU program has been tampered with.

7. The method for monitoring ECU program tampering according to claim 1, characterized in that: The method further comprises: When the fault diagnosis process is completed, the current calibration identification number and verification code are written into the memory.

8. A monitoring system for ECU program tampering, characterized in that: The system adopts the monitoring method for ECU program tampering as claimed in any one of claims 1 to 7; The system comprises: The calibration code acquisition module is used to determine whether to start the fault diagnosis process by identifying the current calibration identification number and verification code after the ECU is powered on; A fault diagnosis module is used to determine whether the temperature value of the temperature sensor upstream of the SCR is greater than the first temperature calibration value T1 when the startup time of the ECU is greater than the time calibration value t1; if so, it is used to identify whether the ECU program has been tampered with by checking the working state of the nitrogen oxide sensor; if not, it is used to identify whether the ECU program has been tampered with by checking the engine water temperature upstream of the SCR; The diagnosis result processing module is used to complete the fault diagnosis process if the ECU program has not been tampered with; if the ECU program has been tampered with, limit the engine speed and torque output according to the set value and complete the fault diagnosis process; The storage module is used to write the current calibration identification number and verification code into the memory after the fault diagnosis process is completed.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, the steps of the method for monitoring ECU program tampering as described in any one of claims 1 to 7 are implemented.

10. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for monitoring ECU program tampering as claimed in any one of claims 1 to 7 are implemented.

Images