Signal processing system of vehicle and vehicle comprising signal processing system

Abstract

The invention relates to a signal processing system of a vehicle and the vehicle comprising the signal processing system. A signal processing apparatus according to an embodiment of the present invention comprises: a signal processing apparatus including an integrated intrusion detection processing unit that, if a first message based on a first communication method is received, performs intrusion detection of a first type based on the first message, and if a second message based on a second communication method is received, performs intrusion detection of a second type based on the second message; if yes, intrusion detection of the second message is executed; and a second signal processing device including a first intrusion detection processing section that, if a first message based on the first communication method is received, performs intrusion detection based on a second type of the first message; if a first message based on a second communication mode is received from the outside, an integrated intrusion detection processing unit in the signal processing apparatus performs intrusion detection of a first type based on the first message after checking a header and a payload based on the second communication mode. Therefore, false detection of the received message can be reduced.

Description

Technical Field

[0001] The present invention relates to a vehicle signal processing system and a vehicle including the same, and more particularly, to a vehicle signal processing system capable of effectively performing intrusion detection on a received message and a vehicle including the same. Background Art

[0002] A vehicle is a device that allows a user to move in a desired direction, and a representative example is a car.

[0003] On the other hand, for the convenience of users of vehicles, a vehicle signal processing device is mounted inside the vehicle.

[0004] In particular, sensing signals from various sensor devices inside the vehicle are transmitted to at least one signal processing device via CAN (Controller Area Network) communication.

[0005] On the other hand, CAN messages are transmitted for CAN communication, but for intrusion detection of CAN messages, the signal processing device needs to analyze all received CAN messages, which increases the burden on the processor.

[0006] Furthermore, there is the problem of false detection being performed on CAN messages over Ethernet communication. Summary of the Invention

[0007] Problems to be solved by the invention

[0008] An object of the present invention is to provide a vehicle signal processing system capable of reducing false detection of received messages and a vehicle including the signal processing system.

[0009] On the other hand, another object of the present invention is to provide a signal processing system for a vehicle capable of effectively performing intrusion detection on a received message and a vehicle including the signal processing system.

[0010] On the other hand, another object of the present invention is to provide a vehicle signal processing system capable of effectively performing intrusion detection and intrusion prevention on a received first message and a vehicle including the signal processing system.

[0011] Technical solutions to the problem

[0012] A signal processing system for a vehicle of an embodiment of the present invention for achieving the stated purpose and a vehicle including the signal processing system, the signal processing system comprising: a signal processing device comprising an integrated intrusion detection processing unit, the integrated intrusion detection processing unit performing a first type of intrusion detection based on the first message when receiving a first message based on the first communication method, and performing intrusion detection on the second message when receiving a second message based on the second communication method; and a second signal processing device comprising a first intrusion detection processing unit, the first intrusion detection processing unit performing a second type of intrusion detection based on the first message when receiving a first message based on the first communication method; the integrated intrusion detection processing unit in the signal processing device performing a first type of intrusion detection based on the first message after checking a header and a payload based on the second communication method when receiving a first message based on the second communication method from the outside.

[0013] On the other hand, when the integrated intrusion detection processing unit in the signal processing device receives the first message through the second communication method, it can transmit the first message that completes the intrusion detection and the timing abnormality message related to the first message to the second signal processing device.

[0014] On the other hand, the first intrusion detection processing unit in the second signal processing device can perform the second type of intrusion detection based on the format or timing of the received first message. When the first intrusion detection processing unit in the second signal processing device receives a timing abnormality message from the signal processing device, it can determine that the timing of the first message is normal when performing the second type of intrusion detection.

[0015] On the other hand, the second signal processing device may further include a second intrusion detection processing unit, which performs intrusion detection on the second message when receiving the second message based on the second communication method.

[0016] On the other hand, the second signal processing device can receive a first message including a sensor signal within the vehicle based on the first communication method, and perform intrusion detection on the first message, and the second signal processing device can transmit the first message that completes the intrusion detection to the signal processing device based on the second communication method.

[0017] On the other hand, the signal processing device may be controlled to transmit the first message based on the second communication method received from the second signal processing device to the external server.

[0018] On the other hand, the second signal processing device may perform intrusion detection based on syntax based on the format or timing of the first message, and the signal processing device may perform intrusion detection based on semantics of the first message.

[0019] On the other hand, the signal processing device may perform intrusion detection based on semantics based on a correlation relationship between a plurality of first messages received from a plurality of second signal processing devices.

[0020] On the other hand, the second signal processing device can detect whether an intrusion of the first message is detected based on the message identity identification number, data length, signal range or generation cycle of the first message. The signal processing device can detect whether an intrusion of the first message is detected based on the message sequence in the first message, the increase or decrease range of the signal, the state of the signal or the correlation between the signals.

[0021] On the other hand, the second signal processing device may detect that the vehicle speed range in the first message exceeds the permitted value as intrusion detection based on the second type.

[0022] On the other hand, when the increase / decrease range of the vehicle speed in the first message exceeds the permissible increase / decrease range, the signal processing device may detect it as intrusion detection based on the first type.

[0023] On the other hand, the second signal processing device may further include: a first accelerator to accelerate the processing of the first message; and a second accelerator to accelerate the processing of the second message.

[0024] On the other hand, the integrated intrusion detection processing unit or the first intrusion detection processing unit may control the first message or the second message to be discarded when an intrusion in the first message or the second message is detected.

[0025] Another embodiment of the present invention relates to a signal processing system for a vehicle and a vehicle including the signal processing system, wherein the signal processing system includes: a signal processing device including an integrated intrusion detection processing unit, wherein the integrated intrusion detection processing unit performs a first type of intrusion detection based on the first message when receiving a first message based on the first communication method, and performs intrusion detection of the second message when receiving a second message based on the second communication method; and a second signal processing device including a first intrusion detection processing unit, wherein the first intrusion detection processing unit performs a second type of intrusion detection based on the first message when receiving a first message based on the first communication method; the second signal processing device receives the first message including a sensor signal in the vehicle based on the first communication method, performs intrusion detection of the first message, and the second signal processing device transmits the first message on which the intrusion detection is completed to the signal processing device based on the second communication method.

[0026] On the other hand, the signal processing device may be controlled to transmit the first message based on the second communication method received from the second signal processing device to the external server.

[0027] On the other hand, the first intrusion detection processing unit in the second signal processing device can perform the second type of intrusion detection based on the format or timing of the received first message. When the first intrusion detection processing unit in the second signal processing device receives a timing abnormality message from the signal processing device, it can determine that the timing of the first message is normal when performing the second type of intrusion detection.

[0028] On the other hand, the second signal processing device may further include a second intrusion detection processing unit, which performs intrusion detection on the second message when receiving the second message based on the second communication method.

[0029] Effects of the Invention

[0030] A vehicle signal processing system according to an embodiment of the present invention and a vehicle including the signal processing system, wherein the signal processing system includes: a signal processing device including an integrated intrusion detection processing unit that performs a first type of intrusion detection based on a first message based on a first communication method upon receiving a first message based on a first communication method, and performs intrusion detection for a second message based on a second communication method upon receiving a second message based on a second communication method; and a second signal processing device including a first intrusion detection processing unit that performs a second type of intrusion detection based on the first message upon receiving a first message based on the first communication method; the integrated intrusion detection processing unit in the signal processing device performs the first type of intrusion detection based on the first message after checking a header and a payload based on the second communication method upon receiving a first message based on the second communication method from the outside. Thus, false detection of received messages can be reduced.

[0031] On the other hand, the integrated intrusion detection processing unit within the signal processing device, upon receiving the first message via the second communication method, can transmit the first message on which intrusion detection has been completed and a timing anomaly message related to the first message to the second signal processing device. This can reduce false detections of received messages.

[0032] On the other hand, the first intrusion detection processing unit within the second signal processing device can perform intrusion detection based on the format or timing of the received first message. If a message with abnormal timing is received from the signal processing device, the first message timing can be determined to be normal when performing the second type of intrusion detection. This can prevent errors when performing intrusion detection on the first message received using the second communication method.

[0033] On the other hand, the second signal processing device may further include a second intrusion detection processing unit configured to perform intrusion detection on the second message when receiving the second message based on the second communication method.

[0034] On the other hand, the second signal processing device may receive a first message including a sensor signal within the vehicle based on the first communication method, perform intrusion detection on the first message, and transmit the first message on which intrusion detection has been completed to the signal processing device based on the second communication method. In this way, intrusion detection may be performed on the received first message.

[0035] On the other hand, the signal processing device can be controlled to transmit the first message received from the second signal processing device using the second communication method to the external server. In this way, the first message that completes the intrusion detection can be stably transmitted to the outside.

[0036] On the other hand, the second signal processing device can perform intrusion detection based on the syntax of the format or timing of the first message, and the signal processing device can perform intrusion detection based on the semantics of the first message. This allows for efficient intrusion detection on received messages. In particular, processing of the first message can be shared between the signal processing device and the second signal processing device, enabling efficient intrusion detection on the first message. Furthermore, the load on the second signal processing device can be reduced.

[0037] On the other hand, the signal processing device can perform intrusion detection based on semantics based on the correlation between the plurality of first messages received from the plurality of second signal processing devices, thereby enabling efficient intrusion detection on the received first messages.

[0038] On the other hand, the second signal processing device can detect whether an intrusion is detected in the first message based on the message identification number, data length, signal range, or generation period of the first message. The signal processing device can detect whether an intrusion is detected in the first message based on the message sequence within the first message, the increase or decrease range of the signal, the state of the signal, or the correlation between the signals. In this way, intrusion detection can be effectively performed on the received first message.

[0039] On the other hand, when the vehicle speed range in the first message exceeds the permitted value, the second signal processing device can detect it as intrusion detection based on the second type. In this way, intrusion detection can be effectively performed on the received first message.

[0040] On the other hand, if the increase or decrease range of the vehicle speed in the first message exceeds the allowable increase or decrease range, the signal processing device can detect it as intrusion detection based on the first type. In this way, intrusion detection can be effectively performed on the received first message.

[0041] On the other hand, the second signal processing device may further include: a first accelerator for accelerating the processing of the first message; and a second accelerator for accelerating the processing of the second message. Thus, the processing of the message can be accelerated.

[0042] On the other hand, the integrated intrusion detection processing unit or the first intrusion detection processing unit can be controlled to discard the first message or the second message when an intrusion in the first message or the second message is detected. This enables stable message management.

[0043] Another embodiment of the present invention relates to a vehicle signal processing system and a vehicle including the signal processing system, wherein the signal processing system includes: a signal processing device including an integrated intrusion detection processing unit that performs a first type of intrusion detection based on a first message based on a first communication method upon receipt of a first message based on a first communication method, and performs intrusion detection for the second message upon receipt of a second message based on a second communication method; and a second signal processing device including a first intrusion detection processing unit that performs a second type of intrusion detection based on the first message upon receipt of a first message based on the first communication method; the second signal processing device receives a first message including a sensor signal within the vehicle based on the first communication method, performs intrusion detection on the first message, and transmits the first message on which the intrusion detection has been completed to the signal processing device based on the second communication method. Thus, intrusion detection can be effectively performed on the received message. In particular, intrusion detection can be effectively performed on the received first message.

[0044] On the other hand, the signal processing device can be controlled to transmit the first message received from the second signal processing device using the second communication method to the external server. In this way, the first message that completes the intrusion detection can be stably transmitted to the outside.

[0045] On the other hand, the first intrusion detection processing unit within the second signal processing device can perform intrusion detection based on the format or timing of the received first message. If a message with abnormal timing is received from the signal processing device, the first message timing can be determined to be normal when performing the second type of intrusion detection. This can prevent errors when performing intrusion detection on the first message received using the second communication method.

[0046] On the other hand, the second signal processing device may further include a second intrusion detection processing unit configured to perform intrusion detection on the second message when receiving the second message based on the second communication method. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 FIG. 1 is a diagram showing an example of a vehicle exterior and a vehicle interior.

[0048] Figures 2a to 2c It is a diagram showing various architectures of a vehicle communication gateway according to an embodiment of the present invention.

[0049] Figure 3 yes Figure 2a An example of an internal block diagram of a signal processing device.

[0050] Figure 4a FIG. 1 is a diagram showing an example of the arrangement of a vehicle display device inside a vehicle according to an embodiment of the present invention.

[0051] Figure 4b FIG. 1 is a diagram showing another example of the arrangement of the vehicle display device inside the vehicle according to the embodiment of the present invention.

[0052] Figure 5 yes Figure 4b An example of an internal block diagram of a vehicle display device.

[0053] Figure 6 This is an example of an internal block diagram of a vehicle communication device.

[0054] Figure 7 This is another example of an internal block diagram of a vehicle communication device.

[0055] Figure 8 This is an example of an internal block diagram of a vehicle signal processing system related to the present invention.

[0056] Figure 9 This is an example of an internal block diagram of a vehicle signal processing system according to an embodiment of the present invention.

[0057] Figures 10a to 15 yes Figure 9 Figures referred to in the description. DETAILED DESCRIPTION

[0058] Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

[0059] The suffixes "module" and "unit" used in the following description for components are simply given for the convenience of writing the specification and do not have any particularly important meaning or function. Therefore, "module" and "unit" can be used interchangeably.

[0060] Figure 1 FIG. 1 is a diagram showing an example of a vehicle exterior and a vehicle interior.

[0061] 1 , the vehicle 200 is moved by a plurality of wheels 103FR, 103FL, 103RL and a steering wheel 150 . The plurality of wheels 103FR, 103FL, 103RL are rotated by a power source, and the steering wheel 150 is used to adjust the traveling direction of the vehicle 200 .

[0062] On the other hand, the vehicle 200 may further include a camera 195 or the like for acquiring an image in front of the vehicle.

[0063] On the other hand, the vehicle 200 may be provided with a plurality of displays 180 a and 180 b for displaying images, information, and the like inside the vehicle 200 .

[0064] exist Figure 1 In the embodiment, the plurality of displays 180a and 180b are exemplified by a cluster display 180a and an AVN (Audio Video Navigation) display 180b. Alternatively, a HUD (Head Up Display) or the like may be used.

[0065] On the other hand, the AVN (Audio Video Navigation) display 180b may also be named a center information display (Center Information Display).

[0066] Meanwhile, the vehicle 200 described in this specification conceptually encompasses a vehicle having an engine as a power source, a hybrid vehicle having an engine and an electric motor as power sources, an electric vehicle having an electric motor as a power source, and the like.

[0067] Figures 2a to 2c It is a diagram showing various architectures of a vehicle communication gateway according to an embodiment of the present invention.

[0068] first, Figure 2a FIG. 1 is a diagram showing a first architecture of a vehicle communication gateway according to an embodiment of the present invention.

[0069] Referring to the drawings, the first architecture 300 a may correspond to a zone-based architecture.

[0070] Thus, sensor devices and processors inside the vehicle can be respectively arranged in the plurality of zones Z1 to Z4, and a signal processing device 170a including a vehicle communication gateway GWDa can be arranged in the central area of ​​the plurality of zones Z1 to Z4.

[0071] On the other hand, in addition to the vehicle communication gateway GWDa, the signal processing device 170a may further include an autonomous driving control module ACC and a cockpit control module CPG.

[0072] The vehicle communication gateway GWDa in the signal processing device 170 a may be an HPC (High Performance Computing) gateway.

[0073] That is, the signal processing device 170a of FIG. 2 can function as an integrated HPC to exchange data with an external communication module (not shown) or processors (not shown) within a plurality of zones Z1 to Z4.

[0074] Figure 2b FIG. 1 is a diagram showing a second architecture of a vehicle communication gateway according to an embodiment of the present invention.

[0075] Referring to the drawings, the second architecture 300b may correspond to a domain-integrated architecture.

[0076] Therefore, the body chassis control module BSG, the power control module PTG, the ADAS (Advanced Driver Assistance System) control module ADG, and the cab control module CPG can be connected in parallel to the gateway GWDb, and each module BSG, PTG, ADG, and CPG can be electrically connected to multiple processors (ECU: Electronic Control Unit).

[0077] On the other hand, each processor (ECU) can be integrated and connected to the gateway GWDb.

[0078] On the other hand, including Figure 2b The signal processing device 170 of the gateway GWDb serves as a domain-integrated signal processing device.

[0079] Figure 2c FIG. 1 is a diagram showing a third architecture of the vehicle communication gateway according to the embodiment of the present invention.

[0080] Referring to the drawings, the third architecture 300c may correspond to a distributed architecture.

[0081] Therefore, the body chassis control module BSG, the power control module PTG, the ADAS control module ADG, and the cab control module CPG can be connected in parallel to the gateway GWDc. In particular, the multiple processors (ECUs) in each control module can be connected in parallel to the gateway GWDb.

[0082] and Figure 2b In comparison, the difference of the third architecture is that each processor (ECU) is directly connected to the gateway GWDb without having to be connected to other modules.

[0083] On the other hand, including Figure 2c The signal processing device 170 of the gateway GWDc serves as a distributed signal processing device.

[0084] Figure 3 yes Figure 2a An example of an internal block diagram of a signal processing device.

[0085] Referring to the accompanying drawings, the signal processing device 170 of an embodiment of the present invention includes a first processor 732a that receives a first message including a sensor signal within a vehicle based on a first communication method and performs signal processing, and a second processor 732b that receives a second message including a communication message received from the outside based on a second communication method and performs signal processing on the received second message.

[0086] At this time, the second communication method may have a faster communication speed or a wider bandwidth than the first communication method.

[0087] For example, the second communication mode may be an Ethernet communication mode, and the first communication mode may be a CAN communication mode. Thus, the first message may be a CAN message, and the second message may be an Ethernet message.

[0088] On the other hand, the signal processing device 170 according to the embodiment of the present invention further includes a first memory 320 having an IPC channel and a second memory 330 storing sensor data including vehicle speed data.

[0089] For example, the first memory 320 may be an SRAM (Static RAM; static random access memory), and the second memory 330 may be a DDR memory. In particular, the second memory 330 may be a DDR SDRAM (Double data rate synchronous dynamic random access memory; double data rate synchronous dynamic random access memory).

[0090] On the other hand, the signal processing apparatus 170 according to the embodiment of the present invention includes a shared memory 508 for transmitting the first message or the second message between the first processor 732a and the second processor 732b.

[0091] As described above, during communication between the first processor 732a and the second processor 732b, inter-processor communication is performed using the shared memory 508, so that during the inter-processor communication, delay can be reduced and high-speed data transmission can be performed. Data transmission can be performed.

[0092] On the other hand, the shared memory 508 is preferably provided in the first memory 320. Thus, during communication between processors, delay can be reduced and high-speed data transmission can be performed.

[0093] On the other hand, the first processor 732a may include a plurality of processor cores 317o, 317a, and 317b therein.

[0094] On the other hand, the first processor 732a may also be provided with an interface 319 for receiving CAN messages from external vehicle sensors.

[0095] For example, the first processor core 317 o within the first processor 732 a may execute a plurality of application programs, or may execute the first AUTomotive Open System Architecture (AUTOSAR) 312 .

[0096] In particular, the first processor core 317 o may execute the inter-processor communication handler (IPC Handler) 314 by executing the second AOSA 312 .

[0097] On the other hand, the inter-processor communication handler (IPC Handler) 314 may exchange data with the first memory 320 or may exchange IPC data with an application program executed in the first processor core 317 o .

[0098] On the other hand, the inter-processor communication handler (IPC Handler) 314 may exchange interrupt signals through the IPC driver 348 within the second processor 732 b .

[0099] On the other hand, the second processor core 317 a within the first processor 732 a may execute the IDS and receive the CAN data from the second memory 330 .

[0100] On the other hand, the third processor core 317 b in the first processor 732 a may store the CAN data received through the interface 319 in the second memory 330 by executing logging.

[0101] On the other hand, the third processor core 317 b within the first processor 732 a may exchange inter-processor communication (IPC) data with the first memory 320 by executing an IPC module 318 .

[0102] On the other hand, the third processor core 317b within the first processor 732a may transmit an interrupt signal to the IPC driver 348 within the second processor 732b.

[0103] The first memory 320 may exchange IPC data with the inter-processor communication handler (IPC Handler) 314 or the IPC module 318 .

[0104] On the other hand, the second processor 732b can execute an application program 343, an IPC handler 345, an IPC daemon 346, an IPC driver 348, and the like.

[0105] On the other hand, the second processor 732 b may also execute a service-oriented architecture (SOA) adapter 341 , a diagnostic server 342 , and a second automotive open system architecture 347 .

[0106] The second automotive open system architecture 347 may be an adaptive automotive open system architecture (AdaptiveAUTOSAR), and the first automotive open system architecture 312 may be a classic automotive open system architecture (ClassicAUTOSAR).

[0107] The IPC daemon 34 can exchange interrupt signals with the SOA adapter 341 , the diagnostic server 342 , the IPC handler 345 , the IPC driver 348 , and the like.

[0108] On the other hand, the first storage 320 may exchange IPC data with the SOA adapter 341 , the diagnostic server 342 , the IPC handler 345 , and the like.

[0109] on the other hand, Figure 3 The IPC data described in the description can be a CAN message or an Ethernet message.

[0110] On the other hand, the IPC processing program 345 can be used as a service provider to provide data such as diagnosis, firmware upgrade, and system information based on the second automotive open system architecture 347.

[0111] on the other hand, Figure 3 Although not shown in the figure, the first processor 732a can execute a message router (not shown), and the message router can be controlled to convert the frame of the first message of the incoming CAN message into the frame format of the second message of the incoming Ethernet message and transmit it to the second processor 732b.

[0112] on the other hand, Figure 3 Although not shown in the figure, the first processor 732a can also execute a CAN driver (not shown) and a CAN interface (not shown).

[0113] For example, the CAN interface (not shown) may be implemented using a total of 16 channels, with the fourth processor core (not shown) and the fifth processor core (not shown) within the first processor 732a each having 8 channels.

[0114] At this time, the first CAN interface (not shown) executed in the fourth processor core (not shown) can correspond to the first queue PTb (queue) during inter-processor communication, and the second CAN interface (not shown) executed in the fifth processor core (not shown) can correspond to the second queue PTa during inter-processor communication with a higher priority than the first queue PTb.

[0115] Figure 4a FIG. 1 is a diagram showing an example of the arrangement of a vehicle display device inside a vehicle according to an embodiment of the present invention.

[0116] 1 , an instrument cluster display 180 a , an AVN (Audio Video Navigation) display 180 b , rear seat entertainment (Rear Seat Entertainment) displays 180 c and 180 d , a rearview mirror display (not shown), and the like may be installed inside the vehicle.

[0117] Figure 4b FIG. 1 is a diagram showing another example of the arrangement of the vehicle display device inside the vehicle according to the embodiment of the present invention.

[0118] The vehicle display device 100 according to the embodiment of the present invention may include a plurality of displays 180 a - 180 b and a signal processing device 170 that performs signal processing for displaying images, information, etc. on the plurality of displays 180 a - 180 b .

[0119] The first display 180a of the plurality of displays 180a-180b may be an instrument cluster display 180a for displaying driving status, action information, etc., and the second display 180b may be an AVN (Audio Video Navigation) display 180b for displaying vehicle driving information, navigation maps, various entertainment information or images.

[0120] The signal processing device 170 may be internally provided with a processor 175 , and may execute first to third virtual machines (not shown) on a hypervisor (not shown) within the processor 175 .

[0121] The second virtual machine (not shown) may operate for the first display 180 a , and the third virtual machine (not shown) may operate for the second display 180 b .

[0122] On the other hand, the first virtual machine (not shown) in the processor 175 can be controlled to set the shared memory 508 based on the hypervisor 505 to transmit the same data to the second virtual machine (not shown) and the third virtual machine (not shown). In this way, the first display 180a and the second display 180b in the vehicle can synchronously display the same information or the same image.

[0123] On the other hand, to share data processing, a first virtual machine (not shown) within processor 175 shares at least a portion of data with a second virtual machine (not shown) and a third virtual machine (not shown). This allows data processing to be shared among multiple virtual machines used for multiple displays within the vehicle.

[0124] On the other hand, a first virtual machine (not shown) within processor 175 can receive and process the vehicle's wheel speed sensor data and transmit the processed wheel speed sensor data to at least one of a second virtual machine (not shown) and a third virtual machine (not shown). Thus, the vehicle's wheel speed sensor data can be shared with at least one virtual machine.

[0125] On the other hand, the vehicle display device 100 according to the embodiment of the present invention may further include a rear seat entertainment (RSE) display 180 c for displaying driving status information, simplified navigation information, various entertainment information, or images.

[0126] In addition to the first to third virtual machines (not shown), the signal processing device 170 may further control the RSE display 180 c by additionally executing a fourth virtual machine (not shown) on a hypervisor (not shown) within the processor 175 .

[0127] Thus, one signal processing device 170 can be used to control various displays 180 a to 180 c .

[0128] On the other hand, some of the plurality of displays 180 a to 180 c may operate based on a Linux OS (Linux operating system), while other parts may operate based on an Internet OS (Web OS).

[0129] The signal processing device 170 according to the embodiment of the present invention can control the displays 180 a to 180 c operating under various operating systems (OS) to synchronously display the same information or the same image.

[0130] on the other hand, Figure 4b The example shows that a vehicle speed indicator 212a and a vehicle interior temperature indicator 213a are displayed on the first display 180a, a main screen 222 including multiple applications and the vehicle speed indicator 212b and the vehicle interior temperature indicator 213b is displayed on the second display 180b, and a second main screen 222b including multiple applications and the vehicle interior temperature indicator 213c is displayed on the third display 180c.

[0131] Figure 5 yes Figure 4b An example of an internal block diagram of a vehicle display device.

[0132] Referring to the accompanying drawings, the vehicle display device 100 according to an embodiment of the present invention may include an input unit 110, a communication unit 120 for communicating with an external device, a plurality of communication modules EMa to EMd for internal communication, a memory 140, a signal processing device 170, a plurality of displays 180a to 180c, an audio output unit 185, and a power supply unit 190.

[0133] For example, the plurality of communication modules EMa to EMd may be respectively arranged at Figure 2a There are multiple zones Z1~Z4.

[0134] On the other hand, an Ethernet switch 736 b for data communication with each of the communication modules EM1 to EM4 may be provided inside the signal processing device 170 .

[0135] Each of the communication modules EM1 to EM4 can perform data communication with a plurality of sensor devices SN or an ECU (Electronic Control Unit) 770 .

[0136] On the other hand, the plurality of sensor devices SN may include a camera 195 , a lidar 196 , a radar 197 , or a position sensor 198 .

[0137] The input unit 110 may be provided with physical keys, a tablet, etc. for key input, touch input, etc.

[0138] On the other hand, the input unit 110 may be provided with a microphone (not shown) for the user to input voice.

[0139] The communication unit 120 may exchange data with the mobile terminal 800 or the server 900 in a wireless manner.

[0140] In particular, the communication unit 120 can exchange data with the vehicle driver's mobile terminal in a wireless manner. As a wireless data communication method, various data communication methods such as Bluetooth, WiFi (Wireless High Fidelity), WiFi Direct, and APiX can be used.

[0141] The communication unit 120 may receive weather information and road traffic status information, such as TPEG (Transport Protocol Expert Group) information, from the mobile terminal 800 or the server 900. To this end, the communication unit 120 may include a mobile communication module (not shown).

[0142] The plurality of communication modules EM1 to EM4 can receive sensor information and the like from the ECU 770 or the sensor device SN, and transmit the received information to the signal processing device 170 .

[0143] Here, the sensor information may include at least one of vehicle direction information, vehicle position information (GPS information), vehicle angle information, vehicle speed information, vehicle acceleration information, vehicle inclination information, vehicle forward / backward information, battery information, fuel information, tire information, headlight information, vehicle interior temperature information, and vehicle interior humidity information.

[0144] Such sensor information may be obtained from a heading sensor, a yaw sensor, a gyro sensor, a position module, a vehicle forward / reverse sensor, a wheel sensor, a vehicle speed sensor, a vehicle body tilt sensing sensor, a battery sensor, a fuel sensor, a tire sensor, a steering sensor based on steering wheel rotation, a vehicle interior temperature sensor, and a vehicle interior humidity sensor, etc.

[0145] On the other hand, the positioning module may include a GPS module or a position sensor 198 for receiving GPS (Global Positioning System) information.

[0146] On the other hand, at least one of the plurality of communication modules EM1 to EM4 may transmit position information data detected by the GPS module or the position sensor 198 to the signal processing device 170 .

[0147] On the other hand, at least one of the multiple communication modules EM1~EM4 can receive vehicle front image data, vehicle side image data, vehicle rear image data, vehicle surrounding obstacle distance information, etc. from the camera 195 or the laser radar 196 or the radar 197, and transmit the received information to the signal processing device 170.

[0148] The memory 140 can store various data used for the overall operation of the vehicle display device 100 , such as programs used for processing or control of the signal processing device 170 .

[0149] For example, the memory 140 may store data regarding a hypervisor and first to third virtual machines for execution within the processor 175 .

[0150] The audio output unit 185 converts the electric signal from the signal processing device 170 into an audio signal and outputs the audio signal. For this purpose, a speaker or the like may be provided.

[0151] The power supply unit 190 can supply power required for the operation of each component under the control of the signal processing device 170. In particular, the power supply unit 190 can receive power from a battery or the like inside the vehicle.

[0152] The signal processing device 170 controls the overall operation of each unit in the vehicle display device 100 .

[0153] For example, the signal processing device 170 may include a processor 175 that performs signal processing for the vehicle displays 180 a , 180 b .

[0154] The processor 175 may execute first to third virtual machines (not shown) on a hypervisor (not shown) within the processor 175 .

[0155] The first virtual machine (not shown) among the first to third virtual machines (not shown) may be named a server virtual machine (Server Virtual Machine), and the second to third virtual machines (not shown) may be named a guest virtual machine (Guest Virtual Machine).

[0156] For example, the first virtual machine (not shown) within the processor 175 can receive sensor data from multiple sensor devices, such as vehicle sensor data, location information data, camera image data, audio data, or touch input data, and process or process the data before outputting it.

[0157] As described above, by executing most of the data processing in the first virtual machine (not shown), 1:N data sharing can be achieved.

[0158] As another example, the first virtual machine (not shown) may directly receive and process CAN (Controller Area Network) data, Ethernet data, audio data, radio data, USB data, and wireless communication data for the second to third virtual machines.

[0159] In addition, the first virtual machine (not shown) may transmit processed data to the second to third virtual machines 530 to 540 .

[0160] Thus, by allowing only the first virtual machine (not shown) among the first to third virtual machines (not shown) to receive sensor data, communication data, or external input data from multiple sensor devices and perform signal processing, the signal processing burden in other virtual machines can be reduced, 1:N data communication can be achieved, and synchronization can be achieved during data sharing.

[0161] On the other hand, the first virtual machine (not shown) may be controlled to store data in the shared memory 508 and share the same data with the second virtual machine (not shown) and the third virtual machine (not shown).

[0162] For example, the first virtual machine (not shown) can be controlled to record the vehicle sensor data, the location information data, the camera image data, or the touch input data in the shared memory 508, and share the same data with the second virtual machine (not shown) and the third virtual machine (not shown). In this way, 1:N data sharing can be achieved.

[0163] Finally, by executing most of the data processing in the first virtual machine (not shown), 1:N data sharing can be achieved.

[0164] On the other hand, the first virtual machine (not shown) in the processor 175 may be controlled to configure the shared memory 508 based on the hypervisor 505 to transmit the same data to the second virtual machine (not shown) and the third virtual machine (not shown).

[0165] On the other hand, the signal processing device 170 can process various signals such as audio signals, image signals, data signals, etc. To this end, the signal processing device 170 can be implemented in the form of a system on chip (SOC).

[0166] on the other hand, Figure 5 The signal processing device 170 in the display device 100 can be connected to Figure 7 The signal processing device 170 of the vehicle communication device 700 is the same as that of the vehicle communication device 700.

[0167] Figure 6 This is an example of an internal block diagram of a vehicle communication device.

[0168] 1. Referring to the drawings, a vehicle communication device 600x according to the present invention includes a first communication gateway 630a and a second communication gateway 630b.

[0169] The first communication gateway 630a may have a body module 610, a chassis module 614, a CAN communication diagnostic device 616, a CAN transceiver 636a for exchanging CAN signals with at least one CAN communication ECU 618 via CAN communication, and a first processor 632a for performing signal processing on the CAN signals received from the CAN transceiver 636a.

[0170] On the other hand, the first processor 632a may have an IPC manager 634a for performing inter-processor communication with the second processor 632b within the second communication gateway 630b.

[0171] The second communication gateway 630b can have a telematics control module 620, a head module 622, an Ethernet communication diagnostic device 624, an Ethernet switch 636b for exchanging Ethernet messages with at least one Ethernet communication ECU 626 via Ethernet communication, and a second processor 632b for signal processing of Ethernet messages received from the Ethernet switch 636b.

[0172] On the other hand, the second processor 632b may have an IPC manager 634b for performing inter-processor communication with the first processor 632a within the first communication gateway 630a.

[0173] On the other hand, the IPC manager 634a within the first processor 632a and the IPC manager 634b within the second processor 632b may perform inter-processor communication based on Ethernet communication.

[0174] This approach facilitates high-speed transmission of large data using Ethernet's high bandwidth, but has the disadvantage of latency in communication between the protocol stack and the physical layer (PHY).

[0175] Therefore, the present invention discloses a method for reducing latency and performing high-speed data transmission during inter-processor communication. Figure 7 and subsequent drawings for explanation.

[0176] Figure 7 This is another example of an internal block diagram of a vehicle communication device.

[0177] Referring to the accompanying drawings, the vehicle communication device 700 of an embodiment of the present invention includes a first processor 732a that receives a first message including a sensor signal within the vehicle and performs signal processing based on a first communication gateway 730a, a second communication gateway 730b and a first communication method, a second processor 732b that receives a second message including a communication message received from the outside and performs signal processing on the received second message based on a second communication method, and a shared memory 508 for transmitting the first message or the second message between the first processor 732a and the second processor 732b.

[0178] and Figure 6 Compared to the communication device 600x, the shared memory 508 is used for inter-processor communication (IPC) between the first processor 732a and the second processor 732b, thereby reducing latency during the inter-processor communication and performing high-speed data transmission.

[0179] In addition, with Figure 6 Compared with the communication device 600x, by implementing the first processor 732a, the second processor 732b and the shared memory 508 as a signal processing device 170 on a chip, it is possible to reduce latency during inter-processor communication and perform high-speed data transmission.

[0180] On the other hand, the second communication method preferably has a wider bandwidth and a faster transmission speed than the first communication method.

[0181] For example, the second communication mode may be an Ethernet communication mode, and the first communication mode may be a CAN communication mode. Thus, the first message may be a CAN message or a CAN signal, and the second message may be an Ethernet message.

[0182] On the other hand, the signal processing device 170 and the vehicle communication device 700 including the signal processing device 170 according to an embodiment of the present invention may further include a transceiver 736a that receives a first message including a sensor signal within the vehicle using a first communication method and transmits the first message to a first processor 732a, and a switch 736b that receives a second message including a communication message received from an external source using a second communication method and transmits the second message to a second processor 732b. Thus, the first message and the second message can be stably transmitted to the first processor 732a and the second processor 732b, respectively.

[0183] The first processor 732a or the transceiver 736a can exchange CAN signals with the body module 610, the chassis module 614, the CAN communication diagnostic device 616, at least one CAN communication ECU 61, etc. through CAN communication.

[0184] On the other hand, the first processor 732a may include a first manager 734a for interprocessor communication (IPC) between the second processor 732b and the first processor 732a. The first manager 734a may also be referred to as an IPC manager.

[0185] On the other hand, the first manager 734a may include a first cache 735a (cache).

[0186] On the other hand, the second processor 732b or the switch 736b can exchange Ethernet messages with the telematics control module 620, the head module 622, the Ethernet communication diagnostic device 624, the at least one Ethernet communication ECU 626, etc. through Ethernet communication. The switch 736b can also be named an Ethernet switch.

[0187] On the other hand, the second processor 732b may include a second manager 734b for interprocessor communication (IPC) between the first processor 732a and the second processor 732b. The second manager 734b may also be called an IPC manager.

[0188] On the other hand, the second manager 734 b may have a second manager 734 b including a second buffer 735 b and a timer 737 .

[0189] On the other hand, the second processor 732 b may receive a periodic subscription request for the first message from the Ethernet processor or the Ethernet communication ECU 626 .

[0190] Thus, the second processor 732b may transmit a periodic subscription request for the first message to the first processor 732a.

[0191] In particular, the second processor 732b may transmit the subscription request via inter-processor communication (IPC), thereby performing inter-processor communication.

[0192] On the other hand, the first processor 732a may periodically receive CAN communication data from at least one CAN communication ECU 618 or the like.

[0193] For example, the first processor 732a may periodically receive a first message predefined in a CAN database (DB) from at least one CAN communication ECU 618 or the like.

[0194] For example, the periodic first message may include vehicle speed information or position information as sensor information.

[0195] As another example, the periodic first message may include at least one of vehicle direction information, vehicle location information (GPS information), vehicle angle information, vehicle acceleration information, vehicle inclination information, vehicle forward / backward information, battery information, fuel information, tire information, headlight information, vehicle interior temperature information, and vehicle interior humidity information.

[0196] On the other hand, the first processor 732a may select to receive the first message of the subscription request from the periodically received CAN communication data or the first message, and transmit the first message of the subscription request to the second processor 732b through inter-processor communication.

[0197] On the other hand, the first processor 732a processes the first message for which no subscription request is received among the periodically received CAN communication data or the first message alone according to an internal action, and does not transmit it to the second processor 732b.

[0198] Specifically, when receiving the first message of the subscription request, the first processor 732a can store or manage the first message in the first cache 735a. When the first message is received, it is compared with the value stored in the first cache 735a. When the difference between the two is greater than the specified value, the first message is transmitted to the second processor 732b through inter-processor communication.

[0199] On the other hand, when receiving the first message of receiving the subscription request, the first processor 732a can store or manage the first message in the first cache 735a. When receiving the first message, it compares it with the value stored in the first cache 735a. When the difference between the two is greater than the specified value, the shared memory 508 is used to transmit the first message to the second processor 732b through inter-processor communication.

[0200] For example, upon receiving the first message, the first processor 732a compares the first message with the value stored in the first cache 735a. If they are not the same, the first processor 732a transmits the first message to the second processor 732b using the shared memory 508 and inter-processor communication.

[0201] As another example, upon receiving the first message, the first processor 732a compares the first message with the value stored in the first cache 735a, and if the first message is the same, the first processor 732a does not transmit the first message to the second processor 732b.

[0202] Thus, it is possible to reduce delays and perform high-speed data transmission during inter-processor communication by minimizing cache occupancy or buffer occupancy of the same data. Thus, it is possible to reduce delays and perform high-speed data transmission during inter-processor communication by minimizing cache occupancy or buffer occupancy of the same data.

[0203] On the other hand, when the first message is received for the first time, the second processor 732b stores the first message in the second cache 735b, and can update the second cache 735b when the first message is received thereafter. This can reduce delays during inter-processor communication and perform high-speed data transmission.

[0204] On the other hand, upon receiving the first message, the second processor 732b generates a thread of the timer 737, and each time the thread terminates, the value of the second buffer 735b can be sent to the Ethernet processor or the Ethernet communication ECU 626. This can reduce delays during inter-processor communication and perform high-speed data transmission.

[0205] On the other hand, during a period when inter-processor communication is not performed and the first message is not received, the second processor 732 b may send the value of the second buffer 735 b to the Ethernet processor or the Ethernet communication ECU 626 .

[0206] That is, when the value of the subscribed first message does not change within a period, the cache value stored in the second processor 732b can be sent to the Ethernet processor 626 without inter-processor communication.

[0207] This minimizes the use of the IPC buffer in the shared memory 508, which operates in FIFO (First Input First Output). Furthermore, by minimizing the use of the IPC buffer, data such as the first message or the second message can be quickly transmitted through inter-processor communication.

[0208] On the other hand, while performing inter-processor communication and receiving the first message, the second processor 732b can send the updated value in the second cache 735b to the Ethernet processor or the Ethernet communication ECU 626. This can reduce delays during inter-processor communication and perform high-speed data transmission.

[0209] On the other hand, during inter-processor communication, the shared memory 508 may transfer data between the first processor 732a and the second processor 732b through the first queue PTb (queue) and the second queue PTa having a higher priority than the first queue PTb.

[0210] In particular, even if the number of events for inter-processor communication increases, the shared memory 508 can transmit only data corresponding to the events assigned to the second queue PTa through the second queue PTa. This ensures real-time transmission of high-priority events during inter-processor communication.

[0211] For example, the first queue PTb may be a normal priority queue (Normal Priority Queue), and the second queue PTa may be a high priority queue (High Priority Queue).

[0212] Specifically, during inter-processor communication, the shared memory 508 may transfer most of the data through the first queue PTb.

[0213] However, the shared memory 508 may transmit only time-sensitive-critical data without delay through the second queue PTa having a higher priority than the first queue PTb.

[0214] For example, time sensitive-critical data may be speed data or position information data.

[0215] That is, the shared memory 508 can transmit speed data or position information data between the first processor 732a and the second processor 732b through the second queue PTa, thereby ensuring real-time transmission of speed data or position information data with higher priority during inter-processor communication.

[0216] On the other hand, the first processor 732a or the second processor 732b may manage a list including application programs that can use the second queue PTa.

[0217] For example, the second processor 732b may include an application for displaying speed information in the second list 738b and manage the application as an application that can use the second queue PTa.

[0218] On the other hand, in order to use the second queue PTa for real-time data transmission, it is preferable to control the operation to be minimal to prevent duplication of scenes or applications.

[0219] As described above, by using the second queue PTa to perform real-time data transmission of time-sensitive critical data, it is possible to ensure real-time transmission of higher priority events during inter-processor communication.

[0220] On the other hand, the shared memory 508 reduces delay during inter-processor communication and performs high-speed data transfer by allocating a minimum of two queues.

[0221] The figure shows that the first manager 734a in the first processor 732a manages the first list 738a as a whitelist, and the second manager 734b in the second processor 732b manages the second list 738b as a whitelist. In this way, real-time transmission of high-priority events can be ensured during inter-processor communication.

[0222] Figure 8 This is an example of an internal block diagram of a vehicle signal processing system related to the present invention.

[0223] Referring to the accompanying drawings, the vehicle signal processing system 800X related to the present invention has a signal processing device 170x, which has a first processor 732a that receives a first message based on a first communication method such as CAN communication and performs signal processing, and a second processor 732b that receives a second message based on a second communication method such as Ethernet communication and processes it.

[0224] on the other hand, Figure 8 The signal processing device 170x further includes an accelerator 819 having a first accelerator 820 for accelerating processing of the first message and a second accelerator 830 for accelerating processing of the second message.

[0225] On the other hand, the first processor 732a includes a CAN (Controller Area Network) IDS (Intrusion Detection System) 814 that performs intrusion detection of the first message and a CAN gateway 811 that performs routing in order to output the first message.

[0226] On the other hand, the second processor 732b includes an Ethernet IDS (Intrusion Detection System) 816 for performing intrusion detection of the second message and a SOA (Service-oriented architecture) adapter and gateway 812 for transmitting the second message.

[0227] Figure 8 The signal processing device 170x can exchange CAN signals with the body ECU 610a, chassis ECU 614a, powertrain system ECU 619a, etc. inside the vehicle through CAN communication.

[0228] on the other hand, Figure 8 The signal processing device 170 x may receive Ethernet data from the ADAS device 621 or the communication module 620 inside the vehicle or transmit Ethernet data to the communication module 620 .

[0229] according to Figure 8 In the signal processing device 170x within the vehicle signal processing system 800X, intrusion detection of CAN messages is performed in the CAN IDS814, and intrusion detection of Ethernet messages is performed in the Ethernet IDS816. However, there is a disadvantage that intrusion detection of CAN messages transmitted through Ethernet communications such as SOA services cannot be performed normally.

[0230] For example, when a control message transmitted via Ethernet communication such as SOA service is transmitted as a CAN message to the body ECU610a, chassis ECU614a or powertrain ECU619a, etc., the CAN IDS814 will judge it as abnormal traffic and will therefore be mistakenly detected as an attack message.

[0231] Therefore, in order to solve this problem, the present invention discloses an integrated intrusion detection processing unit ( Figure 9 900), for this, refer to Figure 9 and subsequent drawings for explanation.

[0232] Figure 9 This is an example of an internal block diagram of a vehicle signal processing system according to an embodiment of the present invention.

[0233] Referring to the accompanying drawings, the vehicle signal processing system 800 of the embodiment of the present invention includes a signal processing device 170a and a second signal processing device 170Za. The signal processing device 170a includes an integrated intrusion detection processing unit 900 that performs a first type of intrusion detection based on the first message when a first message based on the first communication method is received, and performs intrusion detection of the second message when a second message based on the second communication method is received. The second signal processing device 170Za includes a first intrusion detection processing unit 814Za that performs a second type of intrusion detection based on the first message when a first message based on the first communication method is received.

[0234] When receiving a first message based on the second communication method from the outside, the integrated intrusion detection processing unit 900 in the signal processing device 170a checks the header and payload based on the second communication method and performs the first type of intrusion detection based on the first message.

[0235] For example, the first message based on the first communication method may be a CAN message based on CAN communication, and the second message based on the second communication method may be an Ethernet message based on Ethernet communication.

[0236] On the other hand, the first message based on the second communication method may be a CAN message based on the Ethernet communication method.

[0237] On the other hand, the integrated intrusion detection processing unit 900 may internally include an intrusion detection processing unit 905 that performs intrusion detection on the first message and an intrusion detection processing unit 908 that performs intrusion detection on the second message.

[0238] On the other hand, the integrated intrusion detection processing unit 900 in the signal processing device 170a can transmit the first message of completing the intrusion detection and the timing abnormality message related to the first message to the second signal processing device 170Za through the second communication method after receiving the first message.

[0239] On the other hand, the first intrusion detection processing unit 814Za within the second signal processing device 170Za can perform the second type of intrusion detection based on the format or timing of the received first message. If a message with abnormal timing is received from the signal processing device 170a, the first message timing can be determined to be normal when performing the second type of intrusion detection. This prevents errors when performing intrusion detection on a first message received using the second communication method.

[0240] On the other hand, the first type of intrusion detection based on the first message may be semantic-based intrusion detection, and the second type of intrusion detection based on the first message may be syntax-based intrusion detection based on format or timing.

[0241] The signal processing device 170a may be a gateway based on HPC (High Performance Computing), and the second signal processing devices 170Za and 170Zb may be zonal gateways that are configured in multiple zones and receive and process in-vehicle sensor signals from various sensors.

[0242] Here, the sensor signals within the vehicle may include at least one of wheel speed data, vehicle direction data, vehicle position data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle inclination data, vehicle forward / reverse data, battery data, fuel data, tire data, headlight data, vehicle interior temperature data, vehicle interior humidity data, vehicle exterior camera data, vehicle interior camera data, vehicle exterior radar data, and vehicle exterior lidar data.

[0243] On the other hand, as the types of sensor signals in the vehicle increase, the number of first messages that need to be processed by the second signal processing device 170 b also increases, and thus the burden on the second signal processing device 170 b also increases.

[0244] Therefore, in the present invention, the signal processing device 170a performs the first type of intrusion detection based on the first message, and the second signal processing device 170Za performs the second type of intrusion detection based on the first message.

[0245] As described above, the signal processing device 170a and the second signal processing device 170Za share the responsibility of processing the intrusion detection of the first message, thereby enabling efficient execution of intrusion detection on the first message and reducing the load on the second signal processing device 170Za.

[0246] The signal processing device 170 a may further include a SOA (Service-oriented architecture) adapter and gateway 912 , an SOA provider 926 , and SOA consumers 922 and 924 for transmitting the second message.

[0247] On the other hand, the second signal processing device 170Za may further include a second intrusion detection processing unit 816Za that performs intrusion detection on the second message when receiving the second message based on the second communication method, and an SOA adapter and gateway 812Za for transmitting the second message. Thus, intrusion detection or transmission can be performed on the received second message.

[0248] On the other hand, the second signal processing device 170Za may further include a first accelerator 820Za for accelerating the processing of the first message and a second accelerator 830Za for accelerating the processing of the second message.

[0249] That is, the second signal processing device 170Za may further include an accelerator 819Za for message processing, and the accelerator 919Za may include a first accelerator 820Za and a second accelerator 830Za.

[0250] On the other hand, the second signal processing device 170Za may have a first processor 732aZa for first message processing and a second processor 732bZa for second message processing.

[0251] The first processor 732aZa may include a first intrusion detection processing unit 814Za, and the second processor 732bZa may include a second intrusion detection processing unit 816Za, an SOA adapter, and a gateway 812Za.

[0252] The second signal processing device 170Za can exchange CAN signals with the body ECU 610a, the chassis ECU 614a, the powertrain ECU 619a, and the like arranged in the first area inside the vehicle through CAN communication.

[0253] On the other hand, the other second signal processing device 170Zb can exchange CAN signals with the body ECU 610b, the chassis ECU 614b, and the powertrain ECU 619b arranged in the second area inside the vehicle through CAN communication.

[0254] On the other hand, the second signal processing device 170Za can receive the first message including the sensor signal within the vehicle based on the first communication method, perform intrusion detection on the first message, and transmit the first message on which the intrusion detection has been completed to the signal processing device 170a based on the second communication method. In this way, intrusion detection can be performed on the received first message.

[0255] On the other hand, the signal processing device 170a can control the first message based on the second communication method received from the second signal processing device 170Za to be transmitted to the external server 400. In this way, the first message indicating the completion of intrusion detection can be stably transmitted to the outside.

[0256] On the other hand, the second signal processing device 170Za can perform intrusion detection based on the syntax of the format or timing of the first message, and the signal processing device 170a can perform intrusion detection based on the semantics of the first message. In this way, intrusion detection can be effectively performed on the received first message.

[0257] On the other hand, the signal processing device 170a can perform intrusion detection based on semantics based on the correlation between the plurality of first messages received from the plurality of second signal processing devices 170Za and 170Zb, thereby enabling efficient intrusion detection on the received first messages.

[0258] On the other hand, the second signal processing device 170Za can detect whether an intrusion is detected in the first message based on the message identification number, data length, signal range, or generation period of the first message. The signal processing device 170a can detect whether an intrusion is detected in the first message based on the message sequence within the first message, the increase or decrease range of the signal, the state of the signal, or the correlation between the signals. In this way, intrusion detection can be effectively performed on the received first message.

[0259] On the other hand, when the vehicle speed range in the first message exceeds the permitted value, the second signal processing device 170Za can detect that it is intrusion detection based on the second type. In this way, intrusion detection can be effectively performed on the received first message.

[0260] On the other hand, if the increase or decrease range of the vehicle speed in the first message exceeds the allowable increase or decrease range, the signal processing device 170a may detect the first message as an intrusion detection based on the first type, thereby effectively performing intrusion detection on the received first message.

[0261] On the other hand, when intrusion detection of the first message or the second message is detected, the integrated intrusion detection processing unit 900 or the first intrusion detection processing unit 814Za can control to discard the first message or the second message. This enables stable message management.

[0262] Figures 10a to 15 yes Figure 9 Figures referred to in the description.

[0263] Figure 10aVarious examples of the first message transmitted based on the second communication method are shown.

[0264] Figure 10a (a) may be a first message 1010 received from an external server 400 and transmitted based on the second communication method.

[0265] Figure 10a The first message 1010 transmitted based on the second communication method in (a) may have a payload and a header 1020 of the second communication method, and may include a control message 1015 when the payload and the header are extracted.

[0266] Figure 10a (b) may be the first message 1010b transmitted to the external server 400 based on the second communication method.

[0267] Figure 10a The second message 1010b transmitted based on the second communication method in (b) may include a sensor signal inside the vehicle.

[0268] To this end, the first intrusion detection processing unit 814Za within the second signal processing device 170Za can perform intrusion detection on the sensor signal from the sensor within the vehicle, and the SOA adapter (Adaptor) and gateway (Gateway) 812Za can attach the payload and header 1020 of the second communication mode for Ethernet communication and transmit it to the signal processing device 170a.

[0269] on the other hand, Figure 10a The second message 1010b transmitted based on the second communication mode in (b) may include the payload 1016 and header 1018 based on the first communication when the payload and header 1020 are extracted.

[0270] Figure 10b FIG. 4 is a diagram showing the message detection range of the integrated intrusion detection processing unit 900 .

[0271] With reference to the accompanying drawings, in the case of a message using the second communication method, the physical layer L1, data link layer L2, IP (Internet Protocol) layer L3, TCP (Transmission Control Protocol) / UDP (User Datagram Protocol) layer L4, and a portion of SOME / IP (Scalable Service-Oriented Middleware over IP) layers L5 to L7 (L5 and L6) can be processed by an intrusion detection processing unit 908 within the integrated intrusion detection processing unit 900, which performs intrusion detection on the second message. A CAN message, which is another portion of SOME / IP layers L5 to L7, can be processed by an intrusion detection processing unit 905, which performs intrusion detection on the first message. This allows efficient processing of the first message using the second communication method.

[0272] FIG. 10 d is a diagram referred to in the description of the operation of the first message intrusion detection processing unit 1040 .

[0273] Referring to the accompanying drawings, the first message intrusion detection processing unit 1040 can detect whether an intrusion has been detected in the first message based on the message identification number 1042, data length 1044, signal range 1046 of the first message, or the generation period of the first message. This allows for stable intrusion detection of the first message.

[0274] On the other hand, the first message intrusion detection processing unit 1040 may be Figure 9 The intrusion detection processing unit 905 within the integrated intrusion detection processing unit 900 or the first intrusion detection processing unit 814Za within the second signal processing device 170Za.

[0275] Figure 11a 2 is a diagram illustrating transmission of a first message based on the second communication to the external server 400 .

[0276] Referring to the accompanying drawings, the sensor signals at the body module 610a or the chassis module 614a in the vehicle 100 can perform first message intrusion detection in the first accelerator 820Za and the first intrusion detection processing unit 814Za in the second signal processing device 170Za, and the payload and header 1020 based on the second communication method can be attached in the SOA adapter (Adaptor) and the gateway (Gateway) 812Za, and the first message 1010b based on the second communication method can be transmitted to the SOA user (consumer) 922 of the signal processing device 170a according to the path (Path1a) in the accompanying drawings.

[0277] like Figure 10a As shown in (b) of FIG. 1 , the first message 1010 b of the second communication method may have a CAN payload 1016 and a CAN header 1018 therein.

[0278] On the other hand, the SOA consumer 922 of the signal processing device 170 a may transmit a first message 1010 b using the second communication method including the sensor signal to the external server 400 .

[0279] The external server 400 may receive the first message 1010 b in the second communication mode from a data collector 410 , and may analyze the first message 1010 b in the second communication mode in a data analyzer 420 .

[0280] Figure 11b 4 is a diagram showing that the external server 400 receives and processes the first message based on the second communication.

[0281] Referring to the drawing, the external server 400 may transmit a first message 1010 of the second communication method including a control signal to the signal processing device 170 a .

[0282] Correspondingly, the SOA consumer 922 of the signal processing device 170a can receive the first message 1010 of the second communication mode including the control signal and transmit it to the SOA adapter and gateway 812Za in the second signal processing device 170Za according to the path (Path1b) in the figure.

[0283] The SOA adapter and gateway 812Za in the second signal processing device 170Za remove the payload and header of the second communication method and transmit the control signal as the first message to the first intrusion detection processing unit 814Za, and the first intrusion detection processing unit 814Za performs intrusion detection on the control signal as the first message.

[0284] On the other hand, when the control signal serving as the first message is a normal signal, the first message may be transmitted to the body module 610a or the chassis module 614a in the vehicle 100 via the first accelerator 820Za in the second signal processing device 170Za.

[0285] On the other hand, the first intrusion detection processing unit 814Za may periodically receive a sensor signal as a first message from the body module 610a or the chassis module 614a in the vehicle 100 and perform intrusion detection.

[0286] The accompanying drawings show an example in which the first intrusion detection processing unit 814Za receives a sensor signal every 100 ms, and after performing intrusion detection based on the timing of the sensor signal, the control signal 1175 from the external server 400 is received not at a periodic interval of 100 ms, but at a time point after 20 ms.

[0287] In this case, the first intrusion detection processing unit 814Za may mistakenly detect the received control signal as an intrusion message based on the abnormal timing.

[0288] Therefore, in the present invention, the integrated intrusion detection processing unit 900 of the signal processing device 170a receives a first message 1010 of a second communication method including a control signal from an SOA user (consumer) 922, checks and removes the header and payload based on the second communication method, and then performs a first type of intrusion detection based on the first message.

[0289] At this time, the integrated intrusion detection processing unit 900 performs intrusion detection based on the semantics of the first message, rather than the syntax of the first message such as the format or timing, and therefore determines the control signal as a normal message.

[0290] Therefore, when the integrated intrusion detection processing unit 900 completes the intrusion detection on the first message 1010 of the second communication mode including the control signal, it can transmit the first message on which the intrusion detection is completed and the timing abnormality message related to the first message to the second signal processing device 170Za.

[0291] On the other hand, when receiving a timing anomaly message from signal processing device 170a, first intrusion detection processing unit 814Za in second signal processing device 170Za determines that the control signal 1175 is normal even if it is received 20 ms later than the 100 ms period. This prevents false detection of messages due to timing anomalies.

[0292] For example, the control signal may be a door lock signal or a door unlock signal from an external server 400 or a mobile terminal (not shown), and even if the door lock signal or the door unlock signal is received at other time points in non-periodic intervals, it is judged to be normal, thereby enabling the door lock action or the door unlock action in the vehicle to be performed stably.

[0293] As another example, the control signal may be a remote start signal or an air conditioning adjustment signal from an external server 400 or a mobile terminal (not shown), and even if the remote start signal or the air conditioning adjustment signal is received at other time points in a non-periodic interval, it is judged to be normal, thereby enabling the remote start action or the air conditioning adjustment action in the vehicle to be performed stably.

[0294] Figure 12 This is a diagram referred to in the description of the operation of the integrated intrusion detection processing unit 900.

[0295] Referring to the drawing, the signal processing device 170a may receive CAN messages as first messages from a plurality of second signal processing devices 170Za and 170Zb, respectively.

[0296] The plurality of second signal processing devices 170Za and 170Zb respectively include first intrusion detection processing units 814Za and 814Zb and second intrusion detection processing units 816Za and 816Zb.

[0297] When receiving sensor signals from sensor devices in their respective areas, the multiple second signal processing devices 170Za and 170Zb perform intrusion detection based on the syntax such as the format or timing of the first message in the first intrusion detection processing unit 814Za and 814Zb, and the integrated intrusion detection processing unit 900 in the signal processing device 170a performs semantic-based intrusion detection on the multiple sensor signals.

[0298] At this time, the integrated intrusion detection processing unit 900 in the signal processing device 170a can perform semantic-based intrusion detection on a plurality of sensor signals while also analyzing the correlation between the plurality of sensor signals.

[0299] For example, the sensor signals from each of the plurality of second signal processing devices 170Za and 170Zb may be vehicle speed signals, and when the difference in vehicle speed exceeds a reference value, it may be determined that an abnormality has occurred.

[0300] As another example, the sensor signals from the plurality of second signal processing devices 170Za and 170Zb may be vehicle steering signals, and when the difference between the vehicle steering signals exceeds a set value, it may be determined to be abnormal.

[0301] As described above, not only individual sensor signals but also the correlation between a plurality of sensor signals are analyzed, thereby making it possible to perform intrusion detection more accurately.

[0302] Figures 13a to 14b This is a diagram referred to in the description of the operation of the first intrusion detection processing unit 814Za in the second signal processing device 170Za.

[0303] Figure 13a is a diagram illustrating a cluster message as a first message for format-based detection.

[0304] Referring to the accompanying drawings, the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect whether an intrusion of the first message is detected based on the message identification number, data length, signal range or generation cycle of the first message.

[0305] The accompanying drawings show the message identity number, 8-byte data length, 8-byte payload, etc. in the cluster message.

[0306] On the other hand, as shown in the figure, a portion of the 8-byte payload may include a low fuel warning signal.

[0307] Figure 13b It shows Figure 13a A diagram showing the details of a cluster message.

[0308] Referring to the accompanying drawings, it can be confirmed that the message identification number is 50C, the data length is 8, and the signal range is 0 to 3.

[0309] On the other hand, the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect that the message identification number of the first message changes, the data length changes, or the signal range changes as an intrusion detection based on the first type.

[0310] Figure 14a FIG. 1 is a diagram showing changes in the reception interval of the first message for timing-based detection.

[0311] Referring to the accompanying drawings, the receiving interval of the first message is 100ms, but due to the attack message, the receiving intervals are 20ms and 80ms in the middle.

[0312] Thus, the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect whether an intrusion of the first message is detected based on the generation cycle of the first message or the reception cycle of the first message.

[0313] That is, the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect the message received at an interval of 20 ms as an intrusion detection message based on the first type.

[0314] Figure 14b It shows Figure 14a A diagram showing the details of the message.

[0315] With reference to the accompanying drawings, it can be confirmed that the message identification number in the message is 50C and the message cycle time is 100ms.

[0316] On the other hand, the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect that the intrusion detection is based on the first type when the message cycle time is changed.

[0317] Figure 15 is a diagram showing various attack types.

[0318] Referring to the accompanying drawings, regarding the format and timing of the message, the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect whether it is an intrusion detection message based on the second type, and the integrated intrusion detection processing unit 900 in the signal processing device 170a can detect whether it is an intrusion detection message based on the first type based on the semantics of the message.

[0319] Regarding the location, the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect whether it is an intrusion detection message based on the identification number of the message.

[0320] For example, the first intrusion detection processing unit 814Za in the second signal processing device 170Za may detect that an intrusion detection message is an intrusion detection message when an unauthorized CAN ID such as 0x00 that may cause a bus load occurs.

[0321] Regarding the form (Formality), the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect whether it is an intrusion detection message based on the length of the message.

[0322] For example, the first intrusion detection processing unit 814Za in the second signal processing device 170Za may detect a message whose value is changed to a value greater than a specified DLC (Data Length Code) as an intrusion detection message, which may cause a buffer overflow in the ECU.

[0323] Regarding the range, the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect whether it is an intrusion detection message based on the range of the message.

[0324] For example, the first intrusion detection processing unit 814Za in the second signal processing device 170Za may detect the first message as an intrusion detection message when the vehicle speed information in the first message is 300 km / h and the vehicle speed range exceeds the permitted value.

[0325] Regarding the period, the first intrusion detection processing unit 814Za in the second signal processing device 170Za can detect whether it is an intrusion detection message based on the message generation period.

[0326] For example, the first intrusion detection processing unit 814Za in the second signal processing device 170Za may detect that a received first message is an intrusion detection message when a period of the received first message is changed, omitted, or delayed.

[0327] On the other hand, regarding plausibility, the integrated intrusion detection processing unit 900 in the signal processing device 170a can detect whether it is an intrusion detection message based on the plausibility of the message.

[0328] For example, when the vehicle speed changes from 20 km / h to 200 km / h, the integrated intrusion detection processing unit 900 in the signal processing device 170 a may detect it as an intrusion detection message based on plausibility.

[0329] As described above, the signal processing device 170a and the second signal processing device 170Za can share the processing of the first message, thereby enabling efficient intrusion detection on the first message and reducing the load on the second signal processing device 170Za.

[0330] On the other hand, the preferred embodiments of the present invention are illustrated and described above, but the present invention is not limited to the specific embodiments described above. Without departing from the gist of the present invention as claimed in the claims, those skilled in the art can make various modifications, and such modified implementations should not be understood separately from the technical ideas or prospects of the present invention.

Claims

1. A signal processing system, wherein: include: The signal processing device includes an integrated intrusion detection processing unit, wherein the integrated intrusion detection processing unit performs a first type of intrusion detection based on a first message based on a first communication method upon receiving the first message, and performs intrusion detection based on a second message based on a second communication method upon receiving the second message; as well as The second signal processing device includes a first intrusion detection processing unit, which performs a second type of intrusion detection on the first message upon receiving the first message based on the first communication method; If the integrated intrusion detection processing unit in the signal processing device receives a first message based on the second communication method from the outside, it checks the header and payload based on the second communication method and then performs the first type of intrusion detection on the first message.

2. The signal processing system according to claim 1, wherein If the integrated intrusion detection processing unit in the signal processing device receives the first message through the second communication method, it transmits the first message that completes the intrusion detection and the timing abnormality message related to the first message to the second signal processing device.

3. The signal processing system according to claim 1, wherein: The first intrusion detection processing unit in the second signal processing device performs intrusion detection based on the second type based on the format or timing of the received first message. If the first intrusion detection processing unit in the second signal processing device receives a timing abnormality message from the signal processing device, it determines that the timing of the first message is normal when performing the second type of intrusion detection.

4. The signal processing system according to claim 1, wherein: The second signal processing device further includes a second intrusion detection processing unit, Upon receiving the second message using the second communication method, the second intrusion detection processing unit performs intrusion detection on the second message.

5. The signal processing system according to claim 1, wherein The second signal processing device receives a first message including a sensor signal in the vehicle based on the first communication method, and performs intrusion detection on the first message. The second signal processing device transmits the first message of completing the intrusion detection to the signal processing device based on the second communication method. The signal processing system according to claim 5 , wherein: The signal processing device is controlled to transmit the first message based on the second communication method received from the second signal processing device to an external server.

7. The signal processing system according to claim 1, wherein: The second signal processing means performs intrusion detection based on a syntax based on a format or timing of the first message, The signal processing device performs intrusion detection based on the semantics of the first message.

8. The signal processing system according to claim 1, wherein: The signal processing device performs semantic-based intrusion detection based on a correlation relationship between a plurality of first messages received from a plurality of second signal processing devices.

9. The signal processing system according to claim 1, wherein: The second signal processing device detects whether an intrusion of the first message is detected based on the message identification number, data length, signal range or generation period of the first message of the first message, The signal processing device detects whether an intrusion of the first message is detected based on a message sequence in the first message, a signal increase or decrease range, a signal state, or a correlation relationship of the signals.

10. The signal processing system according to claim 1, wherein: If the vehicle speed range in the first message exceeds an allowed value, the second signal processing device detects the intrusion detection as the second type.

11. The signal processing system according to claim 1, wherein: If the increase or decrease range of the vehicle speed in the first message exceeds the allowable increase or decrease range, the signal processing device detects it as an intrusion detection based on the first type.

12. The signal processing system according to claim 4, wherein: The second signal processing device further includes: a first accelerator, configured to accelerate processing of the first message; and The second accelerator accelerates the processing of the second message.

13. The signal processing system according to claim 1, wherein: The integrated intrusion detection processing unit or the first intrusion detection processing unit controls to discard the first message or the second message if an intrusion of the first message or the second message is detected.

14. A signal processing system, wherein: include: The signal processing device includes an integrated intrusion detection processing unit, wherein the integrated intrusion detection processing unit performs a first type of intrusion detection based on a first message based on a first communication method upon receiving the first message, and performs intrusion detection based on a second message based on a second communication method upon receiving the second message; as well as The second signal processing device includes a first intrusion detection processing unit, which performs a second type of intrusion detection on the first message upon receiving the first message based on the first communication method; The second signal processing device receives a first message including a sensor signal in the vehicle based on the first communication method, and performs intrusion detection on the first message. The second signal processing device transmits the first message of completing the intrusion detection to the signal processing device based on the second communication method.

15. The signal processing system according to claim 14, wherein: The signal processing device is controlled to transmit the first message based on the second communication method received from the second signal processing device to an external server.

16. The signal processing system according to claim 14, wherein: The first intrusion detection processing unit in the second signal processing device performs intrusion detection based on the second type based on the format or timing of the received first message. If the first intrusion detection processing unit in the second signal processing device receives a timing abnormality message from the signal processing device, it determines that the timing of the first message is normal when performing the second type of intrusion detection.

17. The signal processing system according to claim 14, wherein: The second signal processing device further includes a second intrusion detection processing unit, Upon receiving the second message using the second communication method, the second intrusion detection processing unit performs intrusion detection on the second message.

18. A vehicle, wherein The signal processing system comprises the signal processing system according to claims 1 to 17.

Images