OBD interface protection method and device, computer equipment and storage medium

Abstract

The invention relates to the technical field of communication, and discloses an OBD interface protection method and device, computer equipment and a storage medium, and the method comprises the steps: detecting a transmission demand of a target user for an OBD interface; according to the interface control instruction, a preset prompt window is displayed on a central control screen of the crane network, and a virtual key used for triggering an identity verification mechanism is arranged in the preset prompt window; when the virtual key is triggered, verifying the identity information of the target user based on an identity verification mechanism to obtain a verification result; and controlling a relay between the OBD interface and the crane network to execute corresponding control operation based on the verification result. According to the method, the problems that the existing OBD interface protection measures are single in protection mode, the interface intrusion risk and the gateway isolation still-existing risk are not considered, and increasingly complex network security threats cannot be effectively handled are solved.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a protection method, device, computer equipment and storage medium for an OBD interface. Background Art

[0002] With the rapid development of automobile networking, data interaction between cranes and Internet of Vehicles platforms is becoming more frequent, and the amount of data is growing. This trend has improved the operating efficiency and intelligence level of vehicles, but there are also some intrusion risks. Hackers can attack automobile terminals and Internet of Vehicles platforms through various means, resulting in data leakage and even paralysis of the system from end to end. In addition, the functions of vehicle software are constantly increasing, and automotive software updates (OTA) are becoming more and more common, which puts higher requirements on software security. During the software update process, it is necessary to ensure that the software is not maliciously tampered with to maintain the stable operation of the entire system. In this context, the security protection of the crane's external interface, especially the security protection of the commonly used OBD interface, becomes particularly important.

[0003] However, the current protection measures for the OBD interface have many shortcomings. On the one hand, the protection method is limited to isolating the OBD data from a software perspective. This method is too simple. If the controller responsible for isolation is breached, it is easy for a large amount of malicious data to enter. On the other hand, when the existing technology performs in-vehicle network security detection or electrical system diagnosis through the OBD interface, it does not consider the intrusion risk brought by the OBD interface itself as a data interaction interface; although other technologies isolate the OBD interface based on the gateway, there is still a risk of attacks entering the gateway. All of this shows that the current protection technology for the OBD interface is still imperfect and cannot effectively respond to increasingly complex network security threats. Summary of the invention

[0004] In view of this, the embodiments of the present invention provide an OBD interface protection method, device, computer equipment and storage medium to solve the problems that the existing OBD interface protection measures have a single protection method, do not consider the risk of interface intrusion and the risk of gateway isolation, and cannot effectively respond to increasingly complex network security threats.

[0005] In a first aspect, an embodiment of the present invention provides a method for protecting an OBD interface, the method comprising:

[0006] Detect the target user's transmission requirements for the OBD interface;

[0007] Displaying a preset prompt window on the central control screen of the crane network according to the interface control instruction, wherein a virtual button for triggering an identity authentication mechanism is provided in the preset prompt window;

[0008] When the virtual button is triggered, the identity information of the target user is verified based on the identity authentication mechanism to obtain a verification result;

[0009] A relay between the OBD interface and the crane network is controlled to perform a corresponding control operation based on the verification result.

[0010] Furthermore, the detection of the target user's transmission requirements for the OBD interface includes:

[0011] Detecting a first electrical signal from a central control screen in the crane network;

[0012] Identifying a signal characteristic of the first electrical signal, and determining whether the signal characteristic conforms to a preset signal characteristic of an access device;

[0013] When the signal characteristic meets the preset signal characteristic of the access device, it is determined that the target user has a transmission requirement for the OBD interface.

[0014] Furthermore, the identity information of the target user is verified based on the identity authentication mechanism to obtain a verification result, including:

[0015] Receiving user information input by the target user;

[0016] Reading the network identifier in the crane network, and determining the target user information hit by the network identifier based on the association relationship between the preset network identifier and the preset user information;

[0017] The user information is compared with the target user information. If the user information is consistent with the target user information, the verification result is determined to be a successful verification. Alternatively, if the user information is inconsistent with the target user information, the verification result is determined to be a failed verification.

[0018] Further, the controlling the relay between the OBD interface and the crane network to perform a corresponding control operation based on the verification result includes:

[0019] When the verification result is that the verification is passed, a connection instruction is sent to the relay, wherein the relay is respectively connected to the central control screen and the network gateway in the crane network;

[0020] The connection instruction is used to control the first contact of the relay to close with the OBD interface, and the second contact of the relay to close with the network gateway, so that data transmission is performed between the OBD interface and the network gateway.

[0021] Further, the controlling the relay between the OBD interface and the crane network to perform a corresponding control operation based on the verification result includes:

[0022] When the verification result is a verification failure, obtaining a current connection state of the relay, wherein the current connection state includes a first state of the first contact and a second state of the second contact;

[0023] A corresponding isolation strategy is determined according to the first state and the second state, and the relay is controlled to perform a corresponding control operation according to the isolation strategy.

[0024] Further, determining a corresponding isolation strategy according to the first state and the second state, and controlling the relay to perform a corresponding control operation according to the isolation strategy, includes:

[0025] If the first state or the second state is a disconnected state, the current connection state of the relay is maintained; or, if the first state and the second state are both connected states, a disconnection instruction is sent to the relay, and the disconnection instruction is used to control the first contact of the relay to be disconnected from the OBD interface, and the second contact of the relay to be disconnected from the network gateway, so as to isolate the data between the OBD interface and the network gateway.

[0026] Furthermore, the method further comprises:

[0027] When the relay is in a connected state, monitoring the data flow transmitted between the OBD interface and a network gateway in the crane network;

[0028] Identifying abnormal features in the data traffic, and analyzing the abnormal features to obtain analysis results;

[0029] Based on the analysis result, a relay between the OBD interface and the crane network is controlled to perform a corresponding control operation.

[0030] In a second aspect, an embodiment of the present invention provides a protective device for an OBD interface, the device comprising:

[0031] A detection module, used to detect the target user's transmission requirements for the OBD interface;

[0032] A display module, used for displaying a preset prompt window on a central control screen of the crane network according to the interface control instruction, wherein a virtual button for triggering an identity authentication mechanism is provided in the preset prompt window;

[0033] A verification module, configured to verify the identity information of the target user based on the identity authentication mechanism when the virtual key is triggered, and obtain a verification result;

[0034] A control module is used to control the relay between the OBD interface and the crane network to perform a corresponding control operation based on the verification result.

[0035] In a third aspect, an embodiment of the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the method of the first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0036] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the method of the first aspect or any corresponding embodiment thereof.

[0037] The method provided in the embodiment of the present application has the following beneficial effects:

[0038] The method provided in the embodiment of the present application detects the first electrical signal and its characteristics on the central control screen of the crane network, determines whether it meets the preset requirements, determines the target user's transmission requirements for the OBD interface, and realizes the startup of subsequent security processes only when there is a demand, thereby improving the operating efficiency of the system. The preset prompt window containing the virtual button for triggering identity authentication is displayed on the central control screen, which not only facilitates the user's control operation, but also strengthens the system security. In the identity authentication link, the user input information is compared with the target information determined based on the network identification, illegal users are identified, the hacker intrusion path is cut off, and the security of data transmission is guaranteed. If the verification is passed, the control relay connects the OBD interface and the network gateway, which meets the data interaction requirements of the legitimate user and balances the security and efficiency of data interaction. If the verification fails, an isolation strategy is adopted based on the state of the relay contact to prevent illegal data acquisition and tampering. During data transmission, the data flow is monitored in real time, abnormal characteristics are identified and analyzed, the system security is dynamically guaranteed, and abnormal data transmission is blocked in time to protect the crane network security. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0040] Figure 1 is a flow chart of a protection method for an OBD interface according to an embodiment of the present invention;

[0041] Figure 2 is a structural block diagram of a protection system architecture of an OBD interface according to an embodiment of the present invention;

[0042] Figure 3 is a working principle diagram of the protection system of the OBD interface according to an embodiment of the present invention;

[0043] Figure 4 is a structural block diagram of a protection device for an OBD interface according to an embodiment of the present invention;

[0044] Figure 5 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0045] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0046] According to an embodiment of the present invention, a protection method, apparatus, computer device and storage medium for an OBD interface are provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0047] In this embodiment, a protection method for an OBD interface is provided. Figure 1 : is a flow chart of a protection method for an OBD interface according to an embodiment of the present invention, such as Figure 1 As shown, the process includes the following steps:

[0048] Step S11, detecting the target user's transmission requirements for the OBD interface.

[0049] It should be noted that if Figure 2As shown in the figure, the protection system architecture of the OBD interface includes the following main components: OBD interface, which is the interface of the on-board diagnostics system (OBD); relay, which connects the OBD interface and the network gateway to control the circuit on and off; network gateway, which connects the relay and the central control screen, which is used to forward data between different network segments, and also connects two network segments (segment 1 and segment 2); the central control screen is the control center of the entire system, which is connected to the crane network and communicates with other network segments through the network gateway; the crane network includes the entire crane network system. The working principle is: the OBD interface is connected to the network gateway through the relay, and the network gateway forwards the data to the central control screen, and the central control screen finally interacts with the crane network.

[0050] In the embodiments of the present application, Figure 3 As shown in FIG. 1 , the working principle of the protection system of the OBD interface includes: starting from the central control screen, first enter the OBD interface control interface. After entering the interface, the system will determine whether to perform identity authentication: if you choose not to perform identity authentication, then return to the OBD interface control interface; if you choose to perform identity authentication, the system will further determine whether the identity authentication is passed. If it is passed, the OBD interface is connected, the relay control contact is closed, and the controllable operation link is entered; if the identity authentication is not passed, the OBD interface is disconnected, the relay control contact is disconnected, and then the control interface of the OBD interface is returned.

[0051] In the embodiment of the present application, step S11 includes the following steps A1-A3:

[0052] Step A1, detecting a first electrical signal from a central control screen in the crane network.

[0053] Specifically, in the crane network environment, the electrical signal emitted by the central control screen can be sensed through a specific detection device or program. In the OBD interface protection system, the central control screen is the key interactive terminal for initiating control commands, and detecting this signal is the starting point for judging the user's operating intention. Implementation methods may include: in hardware detection, high-precision voltage or current sensors are installed on the connection line between the central control screen and the OBD interface protection system to sense the changes in electrical signals in real time and convert them into digital signals for analysis by the protection system processor; in software detection, the crane network system driver is used to monitor the output port of the central control screen in real time, and a specific monitoring mechanism is set through the software. Once an electrical signal in a specific format is output, the subsequent process is triggered.

[0054] Step A2: Identify the signal characteristics of the first electrical signal, and determine whether the signal characteristics conform to the preset signal characteristics of the access device.

[0055] Specifically, different electrical signals have different characteristics such as frequency, amplitude, and waveform. For the first electrical signal detected, it is necessary to extract its characteristics and compare them with the preset access device signal characteristics. Only when the two match can it be identified as a legal OBD interface transmission demand signal. One way to judge is to establish a signal feature library to store the preset characteristics of legal access devices. After obtaining the first electrical signal, extract key features such as frequency, amplitude, and phase, and search in the library. If the match or similarity exceeds the threshold, it is determined to be compliant. Another way is to use a neural network to collect and annotate a large number of legal and illegal OBD interface-related electrical signal samples, train the model, and use the trained model to perform feature recognition and judgment on the first electrical signal acquired in real time to determine whether it meets the preset characteristics.

[0056] Step A3: when the signal characteristics meet the preset signal characteristics of the access device, it is determined that the target user has a transmission requirement for the OBD interface.

[0057] Specifically, when it is determined that the signal characteristics meet the preset characteristics, it can be determined that the target user wants to initiate an operation on the OBD interface through the central control screen and has a need for data transmission. This step is a confirmation of the previous detection and judgment results, providing a basis for subsequent operations. In addition, in addition to signal feature matching, other confirmation methods can also be introduced. For example, record the habitual patterns of different users' operations on the OBD interface, such as operation time, operation frequency, etc. When the signal characteristics meet the preset characteristics, further analyze whether the current operation meets the operating habits of the target user.

[0058] The method provided in the embodiment of the present application determines the target user's transmission requirements for the OBD interface by detecting the first electrical signal of the central control screen in the crane network and identifying whether its signal characteristics match the preset signal characteristics of the access device. This method provides a basis for judging the transmission requirements. Starting from the underlying data of the electrical signal, it uses the matching of signal characteristics to effectively filter out signals that do not meet the requirements, accurately identify legitimate transmission requirements, and avoid misjudgment, thereby enhancing the accuracy and reliability of the system's detection of OBD interface transmission requirements and ensuring the stable operation of the entire OBD interface protection system.

[0059] Step S12: displaying a preset prompt window on the central control screen of the crane network according to the interface control instruction, wherein a virtual button for triggering an identity authentication mechanism is provided in the preset prompt window.

[0060] In the embodiment of the present application, after the transmission demand is detected, a preset prompt window is displayed on the central control screen of the crane network based on the interface control instruction. This window guides the user to trigger the identity authentication mechanism through virtual buttons to ensure that only legitimate users can perform subsequent operations on the OBD interface. In terms of window design, on the one hand, personalized prompts can be provided according to user roles (such as administrators, ordinary maintenance personnel) or operation scenarios (such as daily diagnosis and fault repair), such as the administrator window is concise and highlights security and authority, and the maintenance personnel window adds operation instructions and Q&A links; on the other hand, the content can be dynamically adjusted according to the real-time status of the crane (running, stopping, etc.) or the use of the OBD interface (whether other devices are connected, etc.), such as emphasizing risks during operation and guiding safe operations. In terms of virtual buttons, one is to optimize the triggering method, add gesture recognition in addition to clicking, and facilitate operation when both hands are inconvenient; the second is to adaptively adjust the position based on the display content of the central control screen or the user's operating habits, such as avoiding important information and intelligently placing it according to the past click distribution. In addition, it can also be integrated with other systems, such as a voice interaction system, which automatically triggers the verification method when the window is displayed, and supports voice command operation; integrated with a remote monitoring system, synchronizes the window display with the operation information, and can intervene remotely in case of abnormality.

[0061] Step S13, when the virtual button is triggered, verify the identity information of the target user based on the identity authentication mechanism to obtain a verification result.

[0062] In the embodiment of the present application, step S13 includes the following steps B1-B3:

[0063] Step B1, receiving user information input by the target user.

[0064] Specifically, when the user triggers the virtual button in the preset prompt window, it waits for and receives relevant information input by the user to prove his or her identity. This information is an important basis for judging whether the user is legitimate. Its content can be set according to actual needs, and may include user name, password, employee number, ID number and other data that can uniquely identify the user's identity. In addition to manually entering text information, voice input can also be supported, using voice recognition technology to convert voice into text for reception. At the same time, for mobile devices or central control screens with fingerprint recognition modules, fingerprint recognition input can also be supported, and users can complete part of the input of identity information by scanning their fingerprints.

[0065] Step B2, reading the network identifier in the crane network, and determining the target user information hit by the network identifier based on the association relationship between the preset network identifier and the preset user information.

[0066] Specifically, the crane network has a unique network identifier, which can be used as a basis for identifying the current network environment and related permissions. Read the identifier of the current crane network, and then find the target user information that matches the network identifier based on the pre-set correspondence between the network identifier and the user information. In addition, as the crane network expands, changes, or user permissions are adjusted, when the preset association between the network identifier and the user information needs to be updated, an association update mechanism can be set. For example, when the network is upgraded and renovated, the correspondence between the network identifier and the user information can be updated through a specific management interface. In addition to the simple association between the network identifier and the user information, more dimensional association factors can be added, such as time period, equipment type, etc. For example, within a specific time period, a network identifier is only associated with the maintenance personnel information of a specific type of crane equipment, further refining the permission management.

[0067] Step B3, comparing the user information with the target user information, if the user information is consistent with the target user information, determining the verification result as successful verification, or, if the user information is inconsistent with the target user information, determining the verification result as failed verification.

[0068] Specifically, the user input information is accurately compared with the target user information obtained through the network identification. If all key information matches, the user is deemed to be legally authorized and the verification is successful; if one item does not match, it is deemed to have failed. In certain circumstances, a fuzzy matching mechanism can be introduced, such as allowing certain spelling errors or character order reversals for user names, and setting a reasonable fault tolerance threshold. If the first comparison fails, multiple rounds of verification opportunities can also be provided. For example, when the password is entered incorrectly, a prompt to re-enter the password is given and the difficulty is gradually increased, such as answering preset security questions to assist in verification, taking into account both security and user error correction space.

[0069] The method provided in the embodiment of the present application is based on receiving the information input by the target user, combining the network identifier in the crane network and the preset association relationship to determine the target user information, and obtaining the verification result through comparison. The identity verification process constructs a dual verification mechanism based on the network environment and user-specific information. It not only takes into account the intuitive information input by the user, but also incorporates the environmental information carried by the network identifier, making the identity verification more comprehensive and accurate, preventing illegal users from bypassing the verification through simple means, improving the security and credibility of the identity verification of the target user, and ensuring that only legitimate users can access the OBD interface.

[0070] Step S14: controlling the relay between the OBD interface and the crane network to perform corresponding control operations based on the verification result.

[0071] In the embodiment of the present application, step S14 includes the following steps C1-C2:

[0072] Step C1, when the verification result is verification passed, sending a connection instruction to the relay, wherein the relay is respectively connected to the central control screen and the network gateway in the crane network.

[0073] Specifically, after confirming the legality of the user's identity, in order to meet the transmission needs of the OBD interface, a connection command is sent to the relay connecting the crane network central control screen and the network gateway. After receiving the command, the relay adjusts the state according to the preset to prepare for data transmission. In addition, hierarchical authorization command sending can also be implemented, and different levels of commands can be set for different user levels or operation scenarios. For example, advanced user commands have parameters such as specific data access ranges, and the relay operates according to the command level and parameters to refine the authority management.

[0074] Step C2, using the connection instruction to control the first contact of the relay to close with the OBD interface, and the second contact of the relay to close with the network gateway, so as to enable data transmission between the OBD interface and the network gateway.

[0075] Specifically, after receiving the connection command, the relay controls the internal contacts to perform the corresponding operation, so that the first contact is closed with the OBD interface, and the second contact is closed with the network gateway, and a physical connection channel is established between the OBD interface and the network gateway to meet the user's data transmission needs when obtaining vehicle information or operating through the OBD interface. Sensors can be set at the relay contacts to monitor the closing state in real time and feedback to the system. If the contacts are not closed normally, try to resend the command or check the line, relay status and other faults; after the connection is established, a cache area can also be set at the OBD interface end to cache possible data in advance, quickly respond to network gateway requests, reduce delays, and pre-fetch data based on past transmission modes and user needs.

[0076] When the verification result of the method provided in the embodiment of the present application is passed, a connection instruction is sent to the relay connected to the central control screen and the network gateway in the crane network, thereby controlling the relay contact to close to realize the data transmission between the OBD interface and the network gateway. This design ensures that the data transmission channel can be established after the identity authentication of the authorized user. The specific operation process after the verification is passed is clarified, and the accuracy and timeliness of the system response are guaranteed, which not only meets the needs of legitimate users for OBD interface data transmission, but also maintains the standardization and stability of the connection of each device during the data transmission process, and ensures the smooth progress of data transmission.

[0077] In the embodiment of the present application, step S14 further includes the following steps D1-D2:

[0078] Step D1, when the verification result is verification failure, obtaining the current connection state of the relay, wherein the current connection state includes a first state of the first contact and a second state of the second contact.

[0079] Specifically, when user identity authentication fails, it is necessary to obtain the current connection status of the relay, where the connection status may include the first and second contact states of the relay connecting the OBD interface to the network gateway to reflect the connection status. Make appropriate decisions based on the current connection status to ensure vehicle network security and avoid illegal access risks.

[0080] Step D2, determining a corresponding isolation strategy according to the first state and the second state, and controlling the relay to perform a corresponding control operation according to the isolation strategy.

[0081] The method provided in the embodiment of the present application obtains the current connection status of the relay when the verification result is a failure, and determines the isolation strategy based on this to control the operation of the relay. This mechanism provides an effective response measure for the system when facing illegal access. By understanding the connection status of the relay in real time, different isolation strategies can be adopted in a targeted manner to promptly cut off data connections that may be risky, avoid unauthorized access to the system, enhance the system's ability to prevent illegal access, and effectively protect the secure connection between the OBD interface and the crane network.

[0082] In an embodiment of the present application, step D2 includes: if the first state or the second state is a disconnected state, maintaining the current connection state of the relay; or, if the first state and the second state are both connected states, sending a disconnection command to the relay, and using the disconnection command to control the first contact of the relay to disconnect from the OBD interface, and the second contact of the relay to disconnect from the network gateway, so as to isolate the data between the OBD interface and the network gateway.

[0083] Specifically, if the first state or the second state is a disconnected state, that is, at least one end between the OBD interface and the network gateway is already in a disconnected state, then the disconnected state has played a role in data isolation to a certain extent, so it is chosen to maintain the current connection state of the relay without additional operation to maintain the existing security protection state. If both the first state and the second state are connected states, it means that the OBD interface and the network gateway are in a connected state, and the user identity authentication fails, and there is a risk of unauthorized data interaction. To ensure the security of the vehicle network, a disconnect command is sent to the relay. After receiving the command, the relay will control its first contact to disconnect from the OBD interface and the second contact to disconnect from the network gateway, thereby achieving data isolation between the OBD interface and the network gateway and avoiding the risks brought by illegal access.

[0084] The method provided in the embodiment of the present application further refines the isolation strategy by adopting the strategy of maintaining the current connection state or sending a disconnection command to achieve data isolation according to the different states of the first and second contacts of the relay. This detailed judgment and operation method makes it more flexible when handling the connection state of the relay. Whether one end of the contact is disconnected or both ends are connected, the most appropriate processing can be made, which maximizes the data security between the OBD interface and the network gateway, prevents illegal data interaction, and improves the security and stability of the system.

[0085] In the embodiment of the present application, the method further includes the following steps E1-E3:

[0086] Step E1, when the relay is in a connected state, monitoring the data flow transmitted between the OBD interface and the network gateway in the crane network.

[0087] Specifically, when the relay is in the connected state, that is, after the data transmission channel is established between the OBD interface and the network gateway of the crane network, the data flow through the channel is monitored, and based on this, dynamic conditions such as the amount of data transmitted per unit time are grasped in real time. Continuous monitoring of data flow can provide basic data for subsequent abnormal identification, so as to detect safety hazards or system failures in a timely manner, ensure controllable data transmission, and ensure the stability and security of data interaction between the crane network and the OBD interface.

[0088] Step E2, identifying abnormal features in the data traffic, and analyzing the abnormal features to obtain analysis results.

[0089] Specifically, after obtaining the data flow information between the OBD interface and the network gateway, the abnormal features in the data flow are identified and analyzed. The data flow is reviewed according to preset rules, patterns, or models established through machine learning algorithms. For example, sudden and large fluctuations in data flow, abnormal changes in data transmission rate, abnormal proportions of specific data types, and other features. If these abnormal features are identified, the causes, scope of impact, and potential risks are analyzed to obtain a comprehensive analysis result of the abnormal situation, which provides a basis for subsequent targeted measures, thereby effectively responding to potential data security issues or system abnormalities.

[0090] Step E3, controlling the relay between the OBD interface and the crane network to perform corresponding control operations based on the analysis result.

[0091] Specifically, the relay between the OBD interface and the crane network is controlled accordingly based on the analysis results. If the data flow is abnormal and threatens network security or system stability, the control action is determined according to the type and severity of the abnormality. In case of minor abnormalities, the data transmission rate can be temporarily limited by adjusting the connection status through the relay; in case of serious abnormalities, such as abnormal data transmission caused by malicious attacks, the relay can be controlled to immediately cut off the connection between the OBD interface and the network gateway to prevent the spread of abnormal data and ensure the network security of the crane. This precise control based on the analysis results not only meets the data interaction needs, but also maintains the security and stability of the system to the greatest extent.

[0092] The method provided in the embodiment of the present application monitors the data flow between the OBD interface and the network gateway, identifies and analyzes abnormal features when the relay is connected, and controls the relay operation based on the results, providing real-time monitoring and dynamic adjustment capabilities. By continuously monitoring the data flow, it is possible to promptly discover abnormal situations in the data transmission process, such as abnormal data fluctuations, abnormal data types, etc. By analyzing the abnormal features and taking corresponding control measures, such as adjusting the relay connection status, it is possible to effectively respond to potential security threats and system failures, ensure that data transmission is always in a safe and stable state, and further enhance the safety and reliability of the OBD interface protection system.

[0093] In this embodiment, a protective device for an OBD interface is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0094] This embodiment provides a protective device for an OBD interface, such as Figure 4 As shown, including:

[0095] A detection module 41 is used to detect the transmission requirements of the target user for the OBD interface;

[0096] A display module 42, used to display a preset prompt window on the central control screen of the crane network according to the interface control instruction, wherein a virtual button for triggering an identity authentication mechanism is provided in the preset prompt window;

[0097] A verification module 43, configured to verify the identity information of the target user based on the identity authentication mechanism when the virtual key is triggered, and obtain a verification result;

[0098] The control module 44 is used to control the relay between the OBD interface and the crane network to perform corresponding control operations based on the verification result.

[0099] In an optional embodiment of the present application, the detection module 41 is used to detect a first electrical signal from a central control screen in the crane network; identify a signal characteristic of the first electrical signal, and determine whether the signal characteristic meets a preset signal characteristic of an access device; and when the signal characteristic meets a preset signal characteristic of an access device, determine that the target user has a transmission requirement for an OBD interface.

[0100] In an optional embodiment of the present application, the verification module 43 is used to receive the user information input by the target user; read the network identifier in the crane network, and determine the target user information hit by the network identifier based on the association between the preset network identifier and the preset user information; compare the user information with the target user information, if the user information is consistent with the target user information, then determine that the verification result is a successful verification, or, if the user information is inconsistent with the target user information, then determine that the verification result is a failed verification.

[0101] In an optional embodiment of the present application, the control module 44 includes a first execution submodule and a second execution submodule;

[0102] The first execution submodule is used for sending a connection instruction to the relay when the verification result is verification passed, wherein the relay is respectively connected to the central control screen and the network gateway in the crane network; using the connection instruction to control the first contact of the relay to close with the OBD interface, and the second contact of the relay to close with the network gateway, so as to enable data transmission between the OBD interface and the network gateway.

[0103] The second execution submodule is used to obtain the current connection state of the relay when the verification result is verification failure, wherein the current connection state includes a first state of the first contact and a second state of the second contact; determine a corresponding isolation strategy according to the first state and the second state, and control the relay to perform a corresponding control operation according to the isolation strategy.

[0104] The second execution submodule is used for maintaining the current connection state of the relay if the first state or the second state is a disconnected state; or, if the first state and the second state are both connected states, sending a disconnection instruction to the relay, and using the disconnection instruction to control the first contact of the relay to be disconnected from the OBD interface, and the second contact of the relay to be disconnected from the network gateway, so as to isolate the data between the OBD interface and the network gateway.

[0105] In an optional embodiment of the present application, the device also includes: a monitoring module, which is used to monitor the data traffic transmitted between the OBD interface and the network gateway in the crane network when the relay is in a connected state; identify abnormal features in the data traffic, and analyze the abnormal features to obtain analysis results; based on the analysis results, control the relay between the OBD interface and the crane network to perform corresponding control operations.

[0106] See also Figure 5 , Figure 5 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 5 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system).

[0107] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0108] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0109] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created by the use of a computer device based on the presentation of a small program landing page, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0110] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0111] The computer device further comprises a communication interface 30 for the computer device to communicate with other devices or a communication network.

[0112] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0113] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A protection method for an OBD interface, characterized in that: The method comprises: Detect the target user's transmission requirements for the OBD interface; Displaying a preset prompt window on the central control screen of the crane network according to the interface control instruction, wherein a virtual button for triggering an identity authentication mechanism is provided in the preset prompt window; When the virtual button is triggered, the identity information of the target user is verified based on the identity authentication mechanism to obtain a verification result; A relay between the OBD interface and the crane network is controlled to perform a corresponding control operation based on the verification result.

2. The method according to claim 1, characterized in that The detection target user's transmission requirements for the OBD interface include: Detecting a first electrical signal from a central control screen in the crane network; Identifying a signal characteristic of the first electrical signal, and determining whether the signal characteristic conforms to a preset signal characteristic of an access device; When the signal characteristic meets the preset signal characteristic of the access device, it is determined that the target user has a transmission requirement for the OBD interface.

3. The method according to claim 1, characterized in that The verifying the identity information of the target user based on the identity authentication mechanism to obtain a verification result includes: Receiving user information input by the target user; Reading the network identifier in the crane network, and determining the target user information hit by the network identifier based on the association relationship between the preset network identifier and the preset user information; The user information is compared with the target user information. If the user information is consistent with the target user information, the verification result is determined to be a successful verification. Alternatively, if the user information is inconsistent with the target user information, the verification result is determined to be a failed verification.

4. The method according to claim 3, characterized in that The controlling the relay between the OBD interface and the crane network to perform a corresponding control operation based on the verification result includes: When the verification result is that the verification is passed, a connection instruction is sent to the relay, wherein the relay is respectively connected to the central control screen and the network gateway in the crane network; The connection instruction is used to control the first contact of the relay to close with the OBD interface, and the second contact of the relay to close with the network gateway, so that data transmission is performed between the OBD interface and the network gateway.

5. The method according to claim 3, characterized in that: The controlling the relay between the OBD interface and the crane network to perform a corresponding control operation based on the verification result includes: When the verification result is a verification failure, obtaining a current connection state of the relay, wherein the current connection state includes a first state of the first contact and a second state of the second contact; A corresponding isolation strategy is determined according to the first state and the second state, and the relay is controlled to perform a corresponding control operation according to the isolation strategy.

6. The method according to claim 5, characterized in that The determining a corresponding isolation strategy according to the first state and the second state, and controlling the relay to perform a corresponding control operation according to the isolation strategy, includes: If the first state or the second state is a disconnected state, the current connection state of the relay is maintained; or, if the first state and the second state are both connected states, a disconnection instruction is sent to the relay, and the disconnection instruction is used to control the first contact of the relay to be disconnected from the OBD interface, and the second contact of the relay to be disconnected from the network gateway, so as to isolate the data between the OBD interface and the network gateway.

7. The method according to claim 5, characterized in that The method further comprises: When the relay is in a connected state, monitoring the data flow transmitted between the OBD interface and a network gateway in the crane network; Identifying abnormal features in the data traffic, and analyzing the abnormal features to obtain analysis results; Based on the analysis result, a relay between the OBD interface and the crane network is controlled to perform a corresponding control operation.

8. A protective device for an OBD interface, characterized in that: The device comprises: A detection module, used to detect the target user's transmission requirements for the OBD interface; A display module, used for displaying a preset prompt window on a central control screen of the crane network according to the interface control instruction, wherein a virtual button for triggering an identity authentication mechanism is provided in the preset prompt window; A verification module, configured to verify the identity information of the target user based on the identity authentication mechanism when the virtual key is triggered, and obtain a verification result; A control module is used to control the relay between the OBD interface and the crane network to perform a corresponding control operation based on the verification result.

9. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the method according to any one of claims 1 to 7 by executing the computer instructions.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the method according to any one of claims 1 to 7.

Images