Access detection method, detection module, system, equipment and storage medium

Abstract

The invention discloses an access detection method, a detection module, a system, equipment and a storage medium. The method comprises the following steps: monitoring the voltage of a controller area network (CAN) bus of a vehicle at multiple moments; determining voltage characteristic parameters of the CAN bus according to the voltages of the CAN bus at the multiple moments; and determining that the vehicle is accessed to the third-party equipment in response to the condition that the voltage characteristic parameter meets the third-party equipment access condition. Thus, the voltage of the CAN bus is monitored and analyzed, and the fact that the vehicle is connected to the third-party equipment is rapidly identified according to the voltage characteristic parameters, so that the third-party equipment is processed in time, the vehicle safety is ensured, and the risks of user information leakage and remote control are reduced.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to an access detection method, detection module, system, device and storage medium. Background Art

[0002] With the popularization of intelligent connected cars, vehicle network security issues are becoming increasingly prominent. Unauthorized malicious device access is one of the major threats. It may access the vehicle network through physical interfaces, wireless communications, etc. After access, malicious devices will steal data, bringing the risk of user information leakage. After access, malicious devices can also send malicious commands, thereby remotely controlling the vehicle and affecting vehicle safety. Therefore, vehicle malicious device access detection is particularly important. Summary of the invention

[0003] The embodiment of the present application provides an access detection method, detection module, system, device and storage medium. Among them, by monitoring the voltage of the vehicle CAN bus at multiple times, the voltage characteristic parameters of the CAN bus are determined; in response to the voltage characteristic parameters satisfying the third-party device access conditions, the vehicle is quickly identified as being connected to the third-party device, so as to handle the third-party device in time, ensure vehicle safety, and reduce the risk of user information leakage and vehicle remote control.

[0004] The embodiment of the present application provides an access detection method, detection module, system, device and storage medium. When it is determined that a vehicle is connected to a third-party device, a warning signal is sent to the vehicle computer module, so that the vehicle computer module responds to the warning signal to perform security protection processing, thereby ensuring vehicle safety and reducing the risk of user information leakage and remote control.

[0005] The technical solution of this application is implemented as follows:

[0006] In a first aspect, an access detection method is provided, including:

[0007] Monitor the voltage of the vehicle's controller area network CAN bus at multiple times;

[0008] Determine voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple moments;

[0009] In response to the voltage characteristic parameter satisfying the third-party device access condition, it is determined that the vehicle is connected to the third-party device.

[0010] In a second aspect, a detection module is provided, including:

[0011] The analog-to-digital conversion unit is used to collect analog signals of the vehicle's controller area network (CAN) bus at multiple times and convert them into digital signals, obtain the voltage of the CAN bus at multiple times, and send them to the processing unit;

[0012] The processing unit is used to determine the voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple moments; in response to the voltage characteristic parameters satisfying the third-party device access condition, determine that the vehicle is connected to the third-party device.

[0013] In a third aspect, an access detection system is provided, including:

[0014] CAN bus, used to achieve connection and communication between multiple modules / devices in the vehicle;

[0015] A detection module is used to monitor the voltage of the CAN bus of the vehicle at multiple times; determine the voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple times; and determine that the vehicle is connected to the third-party device in response to the voltage characteristic parameters satisfying the third-party device access condition;

[0016] The vehicle computer module is used to execute security protection processing in response to the detection module determining that the vehicle is connected to a third-party device.

[0017] In a fourth aspect, an electronic device is provided, comprising: a processor and a memory configured to store a computer program that can be run on the processor,

[0018] Wherein, when the processor is configured to run a computer program, the steps of the aforementioned method are executed.

[0019] In a fifth aspect, a computer-readable storage medium is provided, on which a computer program is stored, wherein the computer program implements the steps of the aforementioned method when executed by a processor.

[0020] It should be understood that the above general description and the following detailed description are merely exemplary and explanatory, and are not intended to limit the technical solutions of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 A schematic diagram of a first component framework of an access detection system provided in an embodiment of the present application;

[0022] Figure 2 This is a schematic diagram of the first process of the access detection method in an embodiment of the present application;

[0023] Figure 3 A schematic diagram of a CAN bus voltage variation curve in an embodiment of the present application;

[0024] Figure 4 This is a schematic diagram of a second process of the access detection method in an embodiment of the present application;

[0025] Figure 5 A third flow chart of the access detection method in an embodiment of the present application;

[0026] Figure 6 A schematic diagram of a composition framework of a detection module provided in an embodiment of the present application;

[0027] Figure 7 A schematic diagram of a second component framework of an access detection system provided in an embodiment of the present application;

[0028] Figure 8 A schematic diagram of a third component framework of an access detection system provided in an embodiment of the present application;

[0029] Fig. 9 It is a schematic diagram of the composition structure of the electronic device in the embodiment of the present application. DETAILED DESCRIPTION

[0030] In order to enable a more detailed understanding of the features and technical contents of the embodiments of the present application, the implementation of the embodiments of the present application is described in detail below in conjunction with the accompanying drawings. The attached drawings are for reference only and are not used to limit the embodiments of the present application.

[0031] With the popularization of intelligent connected cars, vehicle network security issues are becoming increasingly prominent. Unauthorized malicious device access is one of the major threats. It may access the vehicle network through physical interfaces, wireless communications, etc. After access, malicious devices will steal data, bringing the risk of user information leakage. After access, malicious devices can also send malicious commands, thereby remotely controlling the vehicle and affecting vehicle safety. Therefore, vehicle malicious device access detection is particularly important.

[0032] At present, when a malicious device is connected to the vehicle body CAN network, there is a lack of dedicated access detection methods at the hardware level. This makes it difficult for the vehicle system to quickly detect and respond to potential intrusion devices that are directly connected through the hardware interface, thereby increasing the risk of physical attacks on the vehicle system.

[0033] The present application embodiment provides an access detection system, Figure 1 The first component framework diagram of an access detection system provided in an embodiment of the present application, the detection system 100 includes but is not limited to: a CAN bus 110 and a detection module 120, wherein:

[0034] CAN bus 110, used to realize the connection and communication between multiple modules / devices in the vehicle;

[0035] The detection module 120 is connected to the CAN bus 110 to monitor the voltage of the CAN bus and determine whether a third-party device is connected to the CAN bus based on the voltage of the CAN bus at multiple moments.

[0036] based on Figure 1An access detection system is provided. An embodiment of the present application provides an access detection method, which is applied to a detection module to determine the voltage characteristic parameters of the CAN bus by monitoring the voltage of the vehicle CAN bus at multiple moments; based on the voltage characteristic parameters, it is quickly identified whether the vehicle is connected to a third-party device, so as to handle the third-party device in a timely manner, ensure vehicle safety, and reduce the risk of user information leakage and remote control of the vehicle.

[0037] Figure 2 Schematic diagram of the first process of the access detection method in the embodiment of the present application. Figure 2 As shown, the method may specifically include:

[0038] Step 201: monitoring the voltage of the controller area network (CAN) bus of the vehicle at multiple times;

[0039] Step 202: determining voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple moments;

[0040] Step 203: In response to the voltage characteristic parameter satisfying the third-party device access condition, it is determined that the vehicle is connected to the third-party device.

[0041] It should be noted that after the third-party device is connected, the capacitance of the third-party device itself will affect the capacitance on the CAN bus, and thus the voltage on the CAN bus will be affected. The embodiment of the present application detects the voltage of the vehicle CAN bus at multiple times, analyzes and processes the voltage, and determines the voltage characteristic parameters of the CAN bus; in response to the voltage characteristic parameters satisfying the third-party device access conditions, the vehicle is quickly identified as being connected to the third-party device, thereby promptly processing the third-party device, ensuring vehicle safety, and reducing the risk of user information leakage and remote control of the vehicle.

[0042] Third-party devices refer to devices provided by a third party other than the vehicle user and manufacturer, and can be connected to the CAN bus. Third-party devices can also be called third-party CAN devices. Third-party devices include but are not limited to unauthorized malicious devices. Malicious devices connected to the CAN bus will steal data, bringing the risk of user information leakage. Malicious devices can also send malicious commands after access, thereby remotely controlling the vehicle and affecting vehicle safety. Third-party devices also include other unauthorized non-malicious devices.

[0043] In some embodiments, the third-party device access condition includes: the absolute difference between the voltage characteristic parameter and the reference value is greater than a preset threshold value. In other words, by judging whether the fluctuation degree of the voltage characteristic parameter compared to the reference value exceeds the preset threshold value, it is determined whether the vehicle is connected to the third-party device.

[0044] In some embodiments, the voltage of the CAN bus includes at least one of the following: a voltage between a high bit line of the CAN bus and ground, a voltage between a low bit line of the CAN bus and ground, and a voltage between a high bit line and a low bit line.

[0045] The CAN bus includes a high-bit line (CAN High, CANH) and a low-bit line (CAN Low, CANL). CANH is usually understood as a signal line / interface connected to a high level. During data transmission, CANH is responsible for transmitting the positive half of the data. CANL is usually understood as a signal line / interface connected to a low level. During data transmission, CANL is responsible for transmitting the negative half of the data. These two lines transmit data via differential signals, that is, the voltage between CANH and CANL is used to represent different data bits. This differential signal transmission method not only improves the anti-interference ability of data transmission, but also enables the CAN bus to work stably in complex electromagnetic environments.

[0046] In one example, when the voltage of the CAN bus is the voltage between the high-order line of the CAN bus and the ground, the first pin of the detection module is connected to the high-order line to collect the voltage of the high-order line at multiple moments.

[0047] In another example, when the voltage of the CAN bus is the voltage between the low-order line of the CAN bus and the ground, the second pin of the detection module is connected to the low-order line to collect the voltage of the low-order line at multiple moments.

[0048] In another example, when the voltage of the CAN bus is the voltage between the high line and the low line, the first pin of the detection module is connected to the high line, and the voltage of the high line at multiple moments is collected; the second pin of the detection module is connected to the low line, and the voltage of the low line at multiple moments is collected; the voltage between the high line and the low line is determined based on the voltage of the high line and the voltage of the low line at multiple moments.

[0049] For another example, when the voltage is the voltage between the high line and the low line, the first pin of the detection module is connected to the high line, the second pin of the detection module is connected to the low line, and the voltage between the high line and the low line is collected at multiple moments.

[0050] It should be noted that in order to obtain the reference value of the CAN bus voltage characteristic parameter when the CAN devices in the vehicle communicate normally (that is, when no third device is connected), a large amount of electrical signal sampling and collection of the CAN bus voltage can be performed when the CAN devices are communicating, and then analyzed to obtain the reference value of the voltage characteristic parameter.

[0051] The reference value of the voltage characteristic parameter includes at least one of the following: a reference value of the voltage characteristic parameter between the high line of the CAN bus and the ground, a reference value of the voltage characteristic parameter between the low line of the CAN bus and the ground, and a reference value of the voltage characteristic parameter between the high line and the low line.

[0052] In some embodiments, the voltage characteristic parameters include but are not limited to at least one of the following: change time, change amplitude.

[0053] For example, the voltage characteristic parameter includes: the time it takes for the voltage to change from a first voltage threshold to a second voltage threshold. Correspondingly, the third-party device access condition includes: the absolute difference between the change time and the change time reference value is greater than the first threshold.

[0054] The change time reference value is determined based on the average change time of the CAN bus voltage at historical moments, or the change time reference value is pre-configured. The average change time can be the average value of the change time of a preset number of times in a recent period of time, and the average change time is continuously updated as time goes by.

[0055] In some embodiments, the first voltage threshold is greater than the second voltage threshold, the first voltage threshold is M times the maximum voltage, the second voltage threshold is N times the maximum voltage, M is greater than N, and M and N are less than or equal to 1 and greater than or equal to 0.

[0056] In other embodiments, the first voltage threshold is less than the second voltage threshold, the first voltage threshold is M times the maximum voltage, the second voltage threshold is N times the maximum voltage, M is greater than N, and M and N are less than or equal to 1 and greater than or equal to 0.

[0057] When the voltage is between the high-bit line and the ground, the maximum voltage refers to the upper limit of the voltage between the high-bit line and the ground. When the voltage is between the low-bit line and the ground, the maximum voltage refers to the upper limit of the voltage between the low-bit line and the ground. When the voltage is between the high-bit line and the low-bit line, the maximum voltage refers to the upper limit of the voltage between the high-bit line and the low-bit line.

[0058] Exemplarily, both M and N are less than 1 and greater than 0. For example, M is 0.8 and N is 0.2. For another example, M is 0.9 and N is 0.1. For another example, M is 0.7 and N is 0.3.

[0059] Exemplarily, the value of M may also be 1, and the value of N may also be 0. That is, the voltage change time refers to the change time of the CAN bus voltage from the maximum voltage to the minimum voltage or from the minimum voltage to the maximum voltage.

[0060] Figure 3 Schematic diagram of the CAN bus voltage variation curve in the embodiment of the present application, Figure 3The solid line in the middle is the voltage change curve of the CAN bus when there is no third-party device connected, and the dotted line is the voltage change curve of the CAN bus when there is a third-party device connected. It can be seen that when there is no third-party device connected, the change time △t from the high voltage V1 to the low voltage V2 of the CAN bus is t2-t1, and when there is a third-party device connected, the change time △t changes significantly.

[0061] In some embodiments, the voltage characteristic parameter includes: the voltage change amplitude of the CAN bus voltage within a preset time, and the third-party device access condition includes: the absolute difference between the change amplitude and the change amplitude reference value is greater than a second threshold.

[0062] The change amplitude reference value is determined based on the average change amplitude of the voltage of the CAN bus at historical moments, or the change amplitude reference value is pre-configured. The average change amplitude can be the average value of the change amplitudes of a preset number of times in a recent period of time, and the average change amplitude is continuously updated over time.

[0063] It should be noted that after a third-party device is connected, the capacitance of the third-party device itself will affect the capacitance on the CAN bus, thereby affecting the changing speed (changing time or changing amplitude) of the CAN bus voltage. At this time, the changing speed of the CAN bus voltage from the first voltage threshold to the second voltage threshold will change. If the absolute difference between the changing speed and the reference value exceeds the threshold, it is considered that a malicious device is connected to the vehicle body CAN bus.

[0064] By adopting the above technical solution, the voltage of the vehicle CAN bus is monitored at multiple times to determine the voltage characteristic parameters of the CAN bus. In response to the voltage characteristic parameters satisfying the access conditions of the third-party device, the vehicle is quickly identified as being connected to the third-party device, so that the third-party device is handled in time, ensuring the safety of the vehicle and reducing the risk of user information leakage and remote control of the vehicle.

[0065] Figure 4 Schematic diagram of the second process of the access detection method in the embodiment of the present application. Figure 4 As shown, the method may specifically include:

[0066] Step 401: monitoring the voltage of the controller area network (CAN) bus of the vehicle at multiple times;

[0067] Step 402: determining voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple moments;

[0068] Step 403: In response to the voltage characteristic parameter satisfying the third-party device access condition, determining that the vehicle is connected to the third-party device;

[0069] In some embodiments, the voltage of the CAN bus includes: a voltage between a high bit line of the CAN bus and ground, a voltage between a low bit line of the CAN bus and ground, and a voltage between the high bit line and the low bit line.

[0070] In some embodiments, the voltage characteristic parameters include: the time it takes for the voltage of the CAN bus to change from a first voltage threshold to a second voltage threshold, and the third-party device access condition includes: the absolute difference between the change time and the change time reference value is greater than the first threshold.

[0071] In some embodiments, the change time reference value is determined based on an average change time of the voltage of the CAN bus at historical moments, or the change time reference value is preconfigured.

[0072] In some embodiments, the voltage characteristic parameter includes: the voltage change amplitude of the CAN bus voltage within a preset time, and the third-party device access condition includes: the absolute difference between the change amplitude and the change amplitude reference value is greater than a second threshold.

[0073] Step 404: In response to the voltage characteristic parameter satisfying the third-party device access condition, generating a warning signal;

[0074] Step 405: Sending a warning signal to the vehicle computer module via the first communication path, so that the vehicle computer module stops transmitting data with the first CAN device via the CAN bus in response to the warning signal.

[0075] The first communication path is based on a communication path of other communication protocols, and the other communication protocols are different from the CAN bus protocol. The other communication protocols include but are not limited to: Inter-Integrated Circuit (I2C) bus, Local Interconnect Network (LIN) bus, Ethernet communication, wireless communication, etc.

[0076] It should be noted that when it is determined that the vehicle is connected to a third-party device, there is a risk of information leakage when using the CAN bus for communication. Therefore, sending a warning signal to the vehicle module through a separate first communication path can avoid the third-party device and ensure the security of the warning signal transmission.

[0077] The first CAN device includes but is not limited to a device in the vehicle that communicates with the vehicle module via the CAN bus. For example, the first CAN device includes at least one of the following: an engine control unit, a transmission control unit, an infotainment system control unit, one or more sensors, one or more actuators, a telematics processor, etc.

[0078] The vehicle-machine module stops transmitting data with the first CAN device via the CAN bus in response to the warning signal, including but not limited to: the vehicle-machine module stops transmitting specific data and / or specific control instructions with the first CAN device via the CAN bus. The specific data may be user privacy data, such as user driving habits, routes, addresses, videos, audios, and other data. The characteristic control instructions may be control instructions that affect driving safety, such as engine control unit control instructions, transmission control unit control instructions, door control instructions, and the like.

[0079] In some embodiments, the method also includes: generating a warning signal in response to the voltage characteristic parameters satisfying the third-party device access conditions; sending the warning signal to the vehicle computer module through the first communication path, so that the vehicle computer module updates the key in response to the warning signal, and sending the new key to the second CAN device through the second communication path, so that the vehicle computer module and the second CAN device use the new key to encrypt data, and transmit the encrypted data through the CAN bus.

[0080] The communication path between the second CAN device and the vehicle module includes a communication path based on the CAN bus protocol and a second communication path. In the CAN bus communication process, data is transmitted in ciphertext to ensure that vehicle data is not stolen or tampered with during transmission. Once a malicious device is detected to be connected, it indicates that the current key may have been leaked. At this time, the key is updated in time through the second communication path. The second CAN device and the vehicle module communicate through the CAN bus using the new key, which can still ensure the security of data transmission.

[0081] The second communication path is based on a communication path of other communication protocols, which are different from the CAN bus protocol. Other communication protocols include but are not limited to: Inter-Integrated Circuit (I2C) bus, Local Interconnect Network (LIN) bus, Ethernet, etc.

[0082] In some embodiments, the communication protocol of the second communication path is different from that of the first communication path. For example, the first communication path is a communication path based on the I2C bus protocol, and the second communication path is a communication path based on the LIN bus protocol.

[0083] In other embodiments, the second communication path may have the same communication protocol as the first communication path, for example, both the first communication path and the second communication path are communication paths based on the I2C bus protocol. Both the first communication path and the second communication path are communication paths based on the I2C bus protocol.

[0084] In some embodiments, after receiving the warning signal, the vehicle computer module determines that the vehicle is in maintenance mode and ignores the warning signal.

[0085] It should be noted that when the vehicle is in maintenance mode, when a third-party device is detected to be connected, if the third-party device is a known or authorized non-malicious device (also known as a security device), the warning signal can be ignored to avoid affecting the normal operation of the vehicle system.

[0086] In some embodiments, the method further includes at least one of the following: displaying warning information; sending warning information to a mobile terminal to remind the user that the vehicle is connected to a third-party device; reporting the warning information and the vehicle's system log.

[0087] When a vehicle is connected to a malicious device, displaying a warning message can promptly alert the driver or owner, allowing them to detect this potential threat in time and take quick action, such as disconnecting the malicious device, to avoid further damage or safety risks.

[0088] Sending warning information to the mobile terminal and displaying the warning information on the mobile terminal can promptly remind the driver or car owner when there is no one in the car.

[0089] Report warning information and vehicle system logs. By collecting and analyzing these warning information and system logs, vehicle manufacturers and safety technology providers can continuously improve and optimize safety systems and enhance vehicle protection capabilities.

[0090] By adopting the above technical solution, by monitoring and analyzing the voltage of the CAN bus at multiple times, the voltage characteristic parameters of the CAN bus are determined to quickly identify that the vehicle is connected to a third-party device, so as to deal with the third-party device in a timely manner, ensure vehicle safety, and reduce the risk of user information leakage and vehicle remote control. Furthermore, when it is determined that the vehicle is connected to a third-party device, an early warning signal is sent to the vehicle computer module, so that the vehicle computer module responds to the early warning signal to perform security protection processing, ensure vehicle safety, and reduce the risk of user information leakage and remote control.

[0091] In order to better reflect the purpose of this application, further examples are given based on the above embodiments of this application. Figure 5 As shown, the method specifically includes:

[0092] Step 501: monitor the voltage between CANH and CANL of the CAN bus of the vehicle;

[0093] Step 502: Determine the change time Δt of the voltage between CANH and CANL from the first voltage threshold to the second voltage threshold;

[0094] For example, the first voltage threshold may be 0.8 times the maximum voltage between CANH and CANL, and the second voltage threshold may be 0.2 times the maximum voltage between CANH and CANL. For another example, the first voltage threshold may be 0.2 times the maximum voltage between CANH and CANL, and the second voltage threshold may be 0.8 times the maximum voltage between CANH and CANL.

[0095] Step 503: Compare △t and the average value of the voltage change time t avg Make comparisons;

[0096] Step 504: Δt and t avg The absolute difference is less than the first threshold t e If yes, return to step 501; if no, go to step 505;

[0097] Step 505: Generate an early warning signal and send it to the vehicle computer module, so that the vehicle computer module performs safety protection processing in response to the early warning signal.

[0098] The technical solution provided in the embodiment of the present application, at the hardware level, by monitoring the voltage between CANH and CANL on the vehicle body CAN bus, the vehicle can promptly detect the access of unauthorized devices, then stop transmitting privacy data and prompt the driver with relevant information to ensure vehicle safety.

[0099] Figure 6 A schematic diagram of a composition framework of a detection module provided in an embodiment of the present application, wherein the detection module 600 includes but is not limited to: an analog-to-digital conversion unit 610 and a processing unit 620, wherein:

[0100] The analog-to-digital conversion unit 610 is used to collect analog signals of the controller area network (CAN) bus of the vehicle at multiple times and convert them into digital signals, obtain the voltage of the CAN bus at multiple times, and send them to the processing unit 620;

[0101] The processing unit 620 is used to determine the voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple moments; in response to the voltage characteristic parameters satisfying the third-party device access condition, determine that the vehicle is connected to the third-party device.

[0102] In some embodiments, the voltage characteristic parameters include: the time it takes for the voltage of the CAN bus to change from a first voltage threshold to a second voltage threshold, and the third-party device access condition includes: the absolute difference between the change time and the change time reference value is greater than the first threshold.

[0103] The change time reference value is determined based on an average change time of the voltage of the CAN bus at historical moments, or the change time reference value is preconfigured.

[0104] In some embodiments, the voltage characteristic parameter includes: the voltage change amplitude of the CAN bus voltage within a preset time, and the third-party device access condition includes: the absolute difference between the change amplitude and the change amplitude reference value is greater than a second threshold.

[0105] The variation amplitude reference value is determined based on the average variation amplitude of the voltage of the CAN bus at historical moments, or the variation amplitude reference value is pre-configured.

[0106] In some embodiments, the voltage of the CAN bus includes at least one of the following: a voltage between a high bit line of the CAN bus and ground, a voltage between a low bit line of the CAN bus and ground, and a voltage between a high bit line and a low bit line.

[0107] The detection module includes a first pin and / or a second pin. In one example, when the voltage of the CAN bus is the voltage between the high-bit line of the CAN bus and the ground, the first pin of the detection module is connected to the high-bit line to collect the voltage of the high-bit line at multiple moments.

[0108] In another example, when the voltage of the CAN bus is the voltage between the low-order line of the CAN bus and the ground, the second pin of the detection module is connected to the low-order line to collect the voltage of the low-order line at multiple moments.

[0109] In another example, when the voltage of the CAN bus is the voltage between the high line and the low line, the first pin of the detection module is connected to the high line, and the voltage of the high line at multiple moments is collected; the second pin of the detection module is connected to the low line, and the voltage of the low line at multiple moments is collected; the voltage between the high line and the low line is determined based on the voltage of the high line and the voltage of the low line at multiple moments.

[0110] In some embodiments, the processing unit 620 is also used to generate a warning signal in response to the voltage characteristic parameters satisfying the third-party device access conditions; send the warning signal to the vehicle-machine module through the first communication path, so that the vehicle-machine module stops transmitting data with the first CAN device through the CAN bus in response to the warning signal.

[0111] In some embodiments, the processing unit 620 is also used to generate a warning signal in response to the voltage characteristic parameters satisfying the third-party device access conditions; send the warning signal to the vehicle computer module through the first communication path, so that the vehicle computer module updates the key in response to the warning signal, and send the new key to the second CAN device through the second communication path, so that the vehicle computer module and the second CAN device use the new key to encrypt data, and transmit the encrypted data through the CAN bus.

[0112] In some embodiments, after receiving the warning signal, the vehicle computer module determines that the vehicle is in maintenance mode and ignores the warning signal.

[0113] In some embodiments, the vehicle machine module is used to control the display unit to display warning information in response to the warning signal to remind the user that the vehicle is connected to the third-party device;

[0114] The vehicle computer module is used to respond to the warning signal and send a warning message to the mobile terminal to remind the user that the vehicle is connected to a third-party device;

[0115] The vehicle computer module is used to respond to the warning signal and report the warning information and the vehicle's system log.

[0116] In some embodiments, the detection module 600 further includes a storage unit for storing the voltage of the CAN bus collected by the analog-to-digital conversion unit 610, the processing result of the processing unit 620, and other related information.

[0117] Exemplarily, the analog-to-digital conversion unit may be a high-precision analog-to-digital converter (ADC). The main features of the high-precision ADC are that it can provide high-resolution, high-speed and high-precision analog-to-digital conversion, and has strong noise immunity and linearity.

[0118] Exemplarily, the processing unit may be a microcontroller unit (MCU). MCU has the characteristics of small size, low power consumption and low cost, and simple voltage data processing and analysis can be realized through MCU.

[0119] By adopting the above detection module, the voltage characteristic parameters of the CAN bus are determined by monitoring the voltage of the vehicle's CAN bus at multiple moments; in response to the voltage characteristic parameters satisfying the third-party device access conditions, the vehicle is quickly identified as being connected to a third-party device, so that the third-party device is handled in a timely manner, ensuring vehicle safety and reducing the risk of user information leakage and vehicle remote control.

[0120] Figure 7 A second component framework diagram of an access detection system provided in an embodiment of the present application, wherein the detection system 700 includes but is not limited to: a CAN bus 710, a detection module 720 and a vehicle module 730, wherein the CAN bus 710 is used to realize connection and communication between multiple modules / devices in a vehicle;

[0121] The detection module 720 is used to monitor the voltage of the CAN bus of the vehicle at multiple times; determine the voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple times; and determine that the vehicle is connected to the third-party device in response to the voltage characteristic parameters satisfying the third-party device access condition;

[0122] The vehicle computer module 730 is used to perform security protection processing in response to the detection module 720 determining that the vehicle is connected to a third-party device.

[0123] The detection module 720 is connected to the vehicle module 730 via a first communication path. The first communication path is based on a communication path of other communication protocols, and the other communication protocols are different from the CAN bus protocol. For example, the detection module 720 communicates with the vehicle module 730 via an I2C bus.

[0124] In some embodiments, the detection module 720 is also used to generate a warning signal in response to the voltage characteristic parameters satisfying the third-party device access conditions; send the warning signal to the vehicle computer module 730 through the first communication path; and the vehicle computer module 730 stops transmitting data with the first CAN device through the CAN bus in response to the warning signal.

[0125] In some embodiments, the detection module 720 is also used to generate a warning signal in response to the voltage characteristic parameters satisfying the third-party device access conditions; send the warning signal to the vehicle computer module 730 through the first communication path; the vehicle computer module 730 updates the key in response to the warning signal, and sends the new key to the second CAN device through the second communication path, so that the vehicle computer module and the second CAN device use the new key to encrypt data and transmit the encrypted data through the CAN bus.

[0126] In some embodiments, the vehicle computer module 730 is configured to ignore the warning signal after receiving the warning signal and determining that the vehicle is in a maintenance mode.

[0127] In some embodiments, the vehicle module 730 is used to control the display unit to display a warning message in response to the warning signal to remind the user that the vehicle is connected to a third-party device;

[0128] The vehicle machine module 730 is used to respond to the warning signal and send a warning message to the mobile terminal to remind the user that the vehicle is connected to a third-party device;

[0129] The vehicle computer module 730 is used to respond to the warning signal and report the warning information and the vehicle system log.

[0130] That is, the vehicle module 730 is connected to the CAN bus 710, the vehicle module 730 communicates with the modules / components in the vehicle through the CAN bus 710, and the vehicle module 730 communicates with the detection module 720 through other communication paths. When the detection module 720 detects the access of a third-party device, the detection module 720 communicates with the vehicle module 730, so that the vehicle module 730 performs security processing, for example, stops sending and receiving sensitive data, refuses to respond to the control instructions of the third device, and issues a warning of the access of the third-party device.

[0131] Figure 8A third component framework diagram of an access detection system provided in an embodiment of the present application, the detection system 700 includes but is not limited to: a CAN bus 710, a detection module 720, a vehicle module 730 and a CAN device 740, wherein:

[0132] CAN bus 710, used to realize the connection and communication between multiple modules / devices in the vehicle;

[0133] The detection module 720 is used to monitor the voltage of the CAN bus of the vehicle at multiple times; determine the voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple times; and determine that the vehicle is connected to the third-party device in response to the voltage characteristic parameters satisfying the third-party device access condition;

[0134] The vehicle computer module 730 is used to perform security protection processing in response to determining that the vehicle is connected to a third-party device;

[0135] The CAN device 740 is connected to the CAN bus 710, and communicates with the vehicle module 730 or other CAN devices through the CAN bus 710. The application of the CAN bus in automobiles covers engine control, chassis control, body control, infotainment system and other aspects.

[0136] The detection module 720 at least includes: an analog-to-digital conversion unit 721, a processing unit 722 and a storage unit 723. The units in the detection module 720 cooperate with each other to jointly realize the functions of collecting, processing, storing and managing CAN bus data.

[0137] The analog-to-digital conversion unit 721 is mainly used to collect the analog signals of the vehicle's CAN bus at multiple times and convert them into digital signals to obtain the voltage of the CAN bus at multiple times. In the detection module, the analog-to-digital conversion unit is responsible for receiving analog signals from the CAN bus and converting these continuous analog signals into discrete digital signals for subsequent digital processing and analysis.

[0138] The processing unit 722 is the core processing unit in the detection module. It is responsible for receiving the digital signal from the analog-to-digital conversion unit and performing further processing and analysis. The processing unit can execute various complex algorithms and control strategies to achieve functions such as data filtering, calibration, storage and transmission. The performance and function of the processing unit directly affect the real-time, accuracy and reliability of the detection module.

[0139] The storage unit 723 is responsible for storing the processing results, configuration parameters and other related information from the processing unit. The storage unit can be various types of memory, such as random access memory (RAM), read-only memory (ROM), flash memory, etc. Through the storage unit, the detection module can save historical data, configuration parameters and calibration data, etc., for subsequent analysis and processing.

[0140] The CAN device 740 may include a first CAN device and / or a second CAN device, the first CAN device communicates with the vehicle module via a CAN bus, and the second CAN device communicates with the vehicle module via the CAN bus and other communication paths.

[0141] The detection module is used to generate a warning signal in response to the voltage characteristic parameters satisfying the third-party device access conditions; send the warning signal to the vehicle computer module through the first communication path, so that the vehicle computer module stops transmitting data with the first CAN device through the CAN bus in response to the warning signal.

[0142] The detection module generates a warning signal in response to the voltage characteristic parameters satisfying the third-party device access condition; sends the warning signal to the vehicle computer module through the first communication path, so that the vehicle computer module updates the key in response to the warning signal, and sends the new key to the second CAN device through the second communication path, so that the vehicle computer module and the second CAN device use the new key to encrypt data and transmit the encrypted data through the CAN bus.

[0143] By adopting the above-mentioned access detection system, the voltage of the vehicle CAN bus is monitored at multiple times through the detection module to determine the voltage characteristic parameters of the CAN bus; in response to the voltage characteristic parameters satisfying the access conditions of the third-party device, the vehicle is quickly identified as being connected to the third-party device, so as to promptly notify the vehicle computer module to perform security protection processing, ensure vehicle safety, and reduce the risk of user information leakage and remote control of the vehicle.

[0144] The present application also provides an electronic device, such as Fig. 9 As shown, the electronic device 900 includes: a processor 901 and a memory 902 configured to store a computer program that can be run on the processor;

[0145] The processor 901 is configured to execute the method steps in the aforementioned embodiment when running a computer program.

[0146] Of course, in practical applications, Fig. 9As shown, the various components in the electronic device 900 are coupled together through a bus system 903. It can be understood that the bus system 903 is used to realize the connection and communication between these components. In addition to the data bus, the bus system 903 also includes a power bus, a control bus and a status signal bus. However, for the sake of clarity, various buses are marked as bus system 903 in the figure.

[0147] In practical applications, the processor may be at least one of an application-specific integrated circuit (ASIC), a digital signal processing device (DSPD), a programmable logic device (PLD), a field-programmable gate array (FPGA), a controller, a microcontroller, and a microprocessor. It is understandable that for different devices, the electronic device used to implement the functions of the processor may also be other, and the embodiments of the present application do not specifically limit this.

[0148] The above-mentioned memory can be a volatile memory (volatile memory), such as a random access memory (RAM); or a non-volatile memory (non-volatile memory), such as a read-only memory (ROM), a flash memory, a hard disk (HDD) or a solid-state drive (SSD); or a combination of the above-mentioned types of memory, and provide instructions and data to the processor.

[0149] In an exemplary embodiment, the embodiment of the present application further provides a computer-readable storage medium, such as a memory including a computer program, and the computer program can be executed by a processor of an electronic device to complete the steps of the aforementioned method.

[0150] An embodiment of the present application further provides a computer program product, including a computer program, and when the computer program is executed by a processor, the steps of any one of the methods described in the embodiments of the present application are implemented.

[0151] Optionally, the computer program product can be applied to the electronic device in the embodiments of the present application, and the computer program instructions enable the computer to execute the corresponding processes implemented by the electronic device in the various methods of the embodiments of the present application. For the sake of brevity, they are not repeated here.

[0152] The embodiment of the present application also provides a computer program.

[0153] Optionally, the computer program can be applied to the electronic device in the embodiments of the present application. When the computer program runs on a computer, the computer executes the corresponding processes implemented by the electronic device in the various methods of the embodiments of the present application. For the sake of brevity, they are not described here.

[0154] It should be understood that in the embodiments of the present application, related data such as user information is involved. When the embodiments of the present application are applied to specific products or technologies, user permission or consent is required, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0155] It should be understood that the terms used in the present application are only for the purpose of describing specific embodiments, but are not intended to limit the present application. The singular forms of "a", "said" and "the" used in the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used in this article refers to and includes any or all possible combinations of one or more associated listed items. The expressions "having", "may have", "include" and "include", or "may include" and "may include" in this application can be used to indicate the presence of corresponding features (e.g., elements such as numerical values, functions, operations or components), but the presence of additional features is not excluded.

[0156] It should be understood that although the terms first, second, third, etc. may be used in this application to describe various information, such information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other and are not necessarily used to describe a specific order or sequence. For example, without departing from the scope of the present invention, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information.

[0157] The technical solutions described in the embodiments of the present application can be combined arbitrarily without conflict.

[0158] In the several embodiments provided in the present application, it should be understood that the disclosed methods, systems, modules and electronic devices can be implemented in other ways. The embodiments described above are only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

[0159] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0160] In addition, all functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may be a separate unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0161] The above description is only a specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application.

Claims

1. An access detection method, characterized in that: The method comprises: Monitor the voltage of the vehicle's controller area network CAN bus at multiple times; Determining voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple moments; In response to the voltage characteristic parameter satisfying a third-party device access condition, it is determined that the vehicle is connected to a third-party device.

2. The method according to claim 1, characterized in that: The voltage characteristic parameters include: the change time of the voltage of the CAN bus from the first voltage threshold to the second voltage threshold, The third-party device access condition includes: an absolute difference between the change time and a change time reference value is greater than a first threshold.

3. The method according to claim 2, characterized in that The change time reference value is determined based on an average change time of the voltage of the CAN bus at historical moments, or the change time reference value is preconfigured.

4. The method according to claim 1, characterized in that The voltage characteristic parameter includes: a voltage variation range of the CAN bus voltage within a preset time, and the third-party device access condition includes: an absolute difference between the variation range and a variation range reference value is greater than a second threshold.

5. The method according to claim 1, characterized in that: The method further comprises: In response to the voltage characteristic parameter satisfying a third-party device access condition, generating a warning signal; The warning signal is sent to the vehicle machine module through the first communication path, so that the vehicle machine module stops transmitting data with the first CAN device through the CAN bus in response to the warning signal.

6. The method according to claim 1, characterized in that The method further comprises: In response to the voltage characteristic parameter satisfying a third-party device access condition, generating a warning signal; The warning signal is sent to the vehicle module via the first communication path, so that the vehicle module updates the key in response to the warning signal, and the new key is sent to the second CAN device via the second communication path, so that the vehicle module and the second CAN device use the new key to encrypt data and transmit the encrypted data through the CAN bus.

7. The method according to claim 5 or 6, characterized in that: The method further comprises: After receiving the warning signal, the vehicle machine module determines that the vehicle is in the maintenance mode and ignores the warning signal.

8. The method according to claim 5 or 6, characterized in that: The method further comprises at least one of the following: Displaying a warning message to remind the user that the vehicle is connected to a third-party device; Sending a warning message to a mobile terminal to remind the user that the vehicle is connected to a third-party device; Report warning information and system logs of the vehicle.

9. A detection module, characterized in that: The detection module comprises: An analog-to-digital conversion unit, used to collect analog signals of the vehicle's controller area network (CAN) bus at multiple times and convert them into digital signals, obtain the voltage of the CAN bus at multiple times, and send it to the processing unit; The processing unit is used to determine the voltage characteristic parameters of the CAN bus according to the voltage of the CAN bus at multiple moments; in response to the voltage characteristic parameters satisfying the third-party device access condition, determine that the vehicle is connected to the third-party device.

10. An access detection system, characterized in that: The system comprises: CAN bus, used to achieve connection and communication between multiple modules / devices in the vehicle; A detection module, configured to monitor the voltage of a CAN bus of a vehicle at multiple times; determine a voltage characteristic parameter of the CAN bus according to the voltage of the CAN bus at multiple times; and determine that the vehicle is connected to a third-party device in response to the voltage characteristic parameter satisfying a third-party device access condition; The vehicle computer module is used to perform security protection processing in response to the detection module determining that the vehicle is connected to a third-party device.

11. An electronic device, characterized in that: The electronic device comprises: a processor and a memory configured to store a computer program capable of running on the processor, Wherein, the processor is configured to execute the steps of the method according to any one of claims 1 to 9 when running the computer program.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 9 are implemented.

Images