Vehicle controller UDS service security execution method and system, electronic equipment and computer readable medium

Abstract

The invention provides a vehicle controller UDS service safety execution method and system, and belongs to the field of automobiles, the controller flashing status bit B is judged according to conversion logic, after the controller receives a service signal ui, whether a precondition pi needs to be executed or not is judged according to the flashing status bit B, and if yes, the precondition pi is executed. In this way, the situation that the controller misjudges passing of the precondition due to communication loss in a non-flashing scene is avoided, then UDS service which is not matched with the actual state of the vehicle is executed, and the safety and reliability of vehicle operation are guaranteed. Meanwhile, the situation of signal missing needs to be reasonably processed in specific modes such as a flashing scene, and normal execution of services is ensured.

Description

Technical Field

[0001] This invention relates to the field of automotive technology, and in particular to a method, system, electronic device, and computer-readable medium for secure execution of vehicle controller UDS services. Background Technology

[0002] UDS services are widely used in vehicle diagnostics and control. Some UDS services (such as services 11 and 28) have information security requirements. Before executing these services, the controller needs to determine whether prerequisites such as vehicle speed and gear position are met. Only when these prerequisites are met will the controller execute the corresponding service to ensure the safety and stability of vehicle operation.

[0003] However, in controller flashing scenarios, situations may arise where signals related to vehicle speed, gear position, etc., are not received. The current common solution is to default to allowing the condition to pass and directly execute the corresponding UDS service when the controller does not receive the corresponding signal. While this approach ensures service execution during flashing, it poses security risks.

[0004] In non-flashing scenarios, if the controller fails to receive signals such as vehicle speed and gear position due to communication loss, the vehicle's actual state may not meet the prerequisites for executing relevant UDS services. However, according to conventional solutions, the controller will still execute the corresponding service based on the conditions, which may lead to abnormal vehicle operation and safety accidents. For example, the vehicle may incorrectly perform a reset operation while traveling at high speed, or perform communication control operations in an inappropriate gear. Summary of the Invention

[0005] This invention aims to solve at least one of the technical problems existing in the prior art, and proposes a method and system for secure execution of vehicle controller UDS services.

[0006] In a first aspect, this application provides a method for securely executing vehicle controller UDS services, which includes the following steps:

[0007] The controller's write status bit B is determined based on the conversion logic;

[0008] After receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B.

[0009] In some embodiments, determining the controller write status bit B based on the conversion logic includes the following steps:

[0010] The controller received the flash mode entry signal L start Or O start If so, the write status bit B is set to 1, and timer t is started;

[0011] The controller received the flash mode exit signal L end Or O end If t > T, then the write status bit B is set to 0, and the timer t is cleared; where:

[0012] L start Signal L is used to enter flash mode. start L end This is the exit signal for flash mode;

[0013] O start OTA mode entry signal O start ;O end This is the signal to exit OTA mode;

[0014] T is the timeout period after the controller receives the flash mode entry signal but does not receive the mode exit signal.

[0015] In some embodiments, after receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B, including the following steps:

[0016] After the controller receives the UI:

[0017] If B=1, then execute the ui, and it will definitely respond.

[0018] If B=0, and the controller can receive all the signals involved in pi, and if all the conditions in pi are met, then execute ui and reply with a positive response.

[0019] In some embodiments, after receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B, including the following steps:

[0020] If B=0, and the controller can receive all the signals involved in pi, if any condition in pi is not met, then ui will not be executed, and a negative response will be sent.

[0021] If B=0, and the controller cannot receive all the signals involved in pi, then ui will not be executed, and a negative response will be sent.

[0022] In some embodiments, the following steps are also included:

[0023] Input U and P, where: the set of service signals requiring information security is U = {ui}, and the set of preconditions that need to be judged before executing the service in U is P = {pi}.

[0024] Secondly, this application provides a vehicle controller UDS service security execution system, comprising:

[0025] The write unit is used to execute the switching logic of the controller's write status bit B;

[0026] The judgment unit is used to determine whether the precondition pi needs to be executed based on the write status bit B after the controller receives the service signal ui.

[0027] In some embodiments, the conversion logic includes:

[0028] The controller received the flash mode entry signal L start Or O start If so, the write status bit B is set to 1, and timer t is started;

[0029] The controller received the flash mode exit signal L end Or O end If t > T, then the write status bit B is set to 0, and the timer t is cleared; where:

[0030] L start Signal L is used to enter flash mode. start L end This is the exit signal for flash mode;

[0031] O start OTA mode entry signal O start ;O end This is the signal to exit OTA mode;

[0032] T is the timeout period after the controller receives the flash mode entry signal but does not receive the mode exit signal.

[0033] In some embodiments, an input unit is also included for inputting U and P;

[0034] Where U is the set of information security service signals, U = {ui}, and P is the set of preconditions that need to be judged before executing the service in U, P = {pi}.

[0035] Thirdly, this application also provides an electronic device, including:

[0036] One or more processors;

[0037] Memory, used to store one or more programs;

[0038] When the one or more programs are executed by the one or more processors, the one or more processors implement any of the methods.

[0039] Fourthly, this application also provides a computer-readable medium storing a computer program that, when executed by a processor, implements the steps of any of the methods described.

[0040] The present invention provides a method for securely executing UDS services for vehicle controllers. The method includes a logic for transitioning the controller's status bit B during the write process. Upon receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B. This avoids situations where communication loss in non-write scenarios leads to the controller misjudging the precondition as passed and thus executing a UDS service that does not match the actual vehicle state, ensuring the safety and reliability of vehicle operation. Simultaneously, the method appropriately handles signal loss in specific modes such as write scenarios to ensure normal service execution. Attached Figure Description

[0041] Figure 1 This is a flowchart illustrating an embodiment of the vehicle controller UDS service secure execution method of the present invention;

[0042] Figure 2 This is a flowchart illustrating an embodiment of the vehicle controller UDS service secure execution method of the present invention.

[0043] Figure 3 This is a structural block diagram of an embodiment of the UDS service security execution system for vehicle controllers of the present invention;

[0044] Figure 4 This is a schematic diagram of the structure of an embodiment of the electronic device of the present invention. Detailed Implementation

[0045] To enable those skilled in the art to better understand the technical solutions of the present invention, exemplary embodiments of the present invention are described below in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to aid understanding. These should be considered merely exemplary. Therefore, those skilled in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and brevity, descriptions of well-known functions and structures are omitted in the following description.

[0046] Where there is no conflict, the various embodiments of the present invention and the features thereof may be combined with each other.

[0047] As used herein, the term “and / or” includes any and all combinations of one or more related enumerated entries.

[0048] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the invention. As used herein, the singular forms “a” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will also be understood that when the terms “comprising” and / or “made of” are used in this specification, the presence of the stated feature, integral, step, operation, element, and / or component is specified, but the presence or addition of one or more other features, integrals, steps, operations, elements, components, and / or groups thereof is not excluded. Terms such as “connected” or “linked” are not limited to physical or mechanical connections but can include electrical connections, whether direct or indirect.

[0049] Unless otherwise specified, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having the meaning consistent with their meaning in the context of the relevant art and the invention, and will not be interpreted as having an idealized or overly formal meaning unless expressly so defined herein.

[0050] In the technical solution of this invention, the collection, storage, use, processing, transmission, provision, and disclosure of user personal information all comply with relevant laws and regulations and do not violate public order and good morals. The use of user data in this technical solution follows relevant national laws and regulations (e.g., the "Information Security Technology - Personal Information Security Specification"). For example: appropriate measures are taken for personal information access control; restrictions are imposed on the display of personal information; the purpose of using personal information does not exceed the scope of direct or reasonable association; and explicit identity targeting is eliminated when using personal information to avoid precisely locating a specific individual.

[0051] In related technologies, the controller will still perform corresponding services according to the conditions, which may lead to abnormal vehicle operation and cause safety accidents, such as the vehicle mistakenly performing a reset operation while driving at high speed, or performing communication control operation in an inappropriate gear.

[0052] The relevant technical terms used in this application are as follows:

[0053] UDS: Unified Diagnostic Services, is a standard protocol in the automotive electronics field used for communication between diagnostic equipment and vehicle electronic control units (ECUs), enabling functions such as fault diagnosis, parameter setting, and program flashing.

[0054] ECU: Electronic Control Unit, which is the controller in a vehicle. It is responsible for controlling the operation of different systems in the vehicle and receiving and processing various signals.

[0055] OTA: Over-the-Air, refers to remotely updating the software of a vehicle's ECU via a wireless network.

[0056] 11 Service: A specific service in the UDS protocol, usually related to ECU reset operations, which must meet certain information security requirements and preconditions before execution.

[0057] 28 Service: Another specific service in the UDS protocol, which generally involves communication control functions and is subject to information security and preconditions during execution.

[0058] To address at least one of the technical problems existing in the aforementioned related technologies, the present invention provides a method for secure execution of vehicle controller UDS services. Figure 1 This is a schematic diagram of a vehicle controller UDS service secure execution method provided in an embodiment of the present invention.

[0059] like Figure 1 as well as Figure 2 As shown, the vehicle controller UDS service security execution method includes the following steps:

[0060] Step S10: Determine the controller's write status bit B based on the conversion logic.

[0061] In this embodiment, the controller's write status bit B has two status bits. When the controller is in write mode, B is set to 1, and when the controller is not in write mode, B is set to 0. Based on this, the transition logic of the controller's write status bit B specifically includes the following steps:

[0062] The controller received the flash mode entry signal L start Or O start If so, the write status bit B is set to 1, and timer t is started;

[0063] The controller received the flash mode exit signal L end Or O end If t > T, then the write status bit B is set to 0, and the timer t is cleared; where:

[0064] L start L end Signals sent from the host computer, production line diagnostic equipment, and after-sales diagnostic equipment to the controller requiring local flashing: Local flashing mode entry signal L start Local flashing mode exit signal L end ;

[0065] O start O end: Signals sent by the OTA master controller to the controllers that require OTA: OTA mode entry signal O start OTA mode exit signal O end ;

[0066] T is the timeout period after the controller receives the flash mode entry signal but does not receive the mode exit signal; the flash mode entry signal includes L start Or O star t, mode exit signal includes L end Or O end .

[0067] It is understood that this embodiment adopts different processing methods for UDS services with information security requirements depending on whether the controller is in test, local diagnostic, or OTA mode. That is, no condition check is performed in the test mode, but condition check is performed in the non-test mode, which enhances the system flexibility. In specific modes such as non-flashing, strict condition check is performed to avoid misoperation caused by communication loss, reduce the risk of vehicle safety accidents, and protect the life and property safety of drivers and passengers.

[0068] Step S20: After receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B.

[0069] In this implementation, the step of determining whether to execute the precondition pi based on the write status bit B after the controller receives the service signal ui includes the following steps:

[0070] After the controller receives the UI:

[0071] If B=1, then execute the ui, and it will definitely respond.

[0072] If B=0, and the controller can receive all the signals involved in pi, and if all the conditions in pi are met, then execute ui and reply with a positive response;

[0073] If B=0, and the controller can receive all the signals involved in pi, if any condition in pi is not met, then ui will not be executed, and a negative response will be sent.

[0074] If B=0, and the controller cannot receive all the signals involved in pi, then ui will not be executed, and a negative response will be sent.

[0075] It is understood that in this embodiment, when a flashing condition exit signal is received, the controller can promptly exit the special processing mode. Through a clear condition exit mechanism, the system can ensure that it can respond to the flashing condition exit signal in a timely manner, restore the normal operation process, avoid inconvenience to users due to untimely mode switching, and improve user satisfaction with the vehicle system.

[0076] In some embodiments, the following steps are also included:

[0077] Input U and P, where: the set of services requiring information security is U = {ui}, and the set of preconditions that need to be judged before executing the services in U is P = {pi}.

[0078] The present invention provides a secure execution method for vehicle controller UDS services. The method includes a logic for transitioning the controller's status bit B during the write process. Upon receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B. This avoids situations where communication loss in non-write scenarios leads to the controller mistakenly determining that the condition has been met, thus preventing the execution of UDS services that do not meet the actual vehicle state and ensuring the safety and reliability of vehicle operation. Furthermore, the method appropriately handles signal loss in specific modes such as write scenarios to ensure normal service execution.

[0079] Based on the same inventive concept, the present invention also provides a vehicle controller UDS service security execution system. Figure 3 This invention provides a structural block diagram of a variable lane vehicle alert system, which is applied to the vehicle controller UDS service security execution method provided in the above embodiments, and specifically includes:

[0080] The write unit is used to execute the switching logic of the controller's write status bit B.

[0081] In some embodiments, the write unit is used to perform the following steps:

[0082] The controller received the flash mode entry signal L start Or O start If so, the write status bit B is set to 1, and timer t is started;

[0083] The controller received the flash mode exit signal L end Or O end If t > T, then the write status bit B is set to 0, and the timer t is cleared; where:

[0084] L start L end Signals sent from the host computer, production line diagnostic equipment, and after-sales diagnostic equipment to the controller requiring local flashing: Local flashing mode entry signal L start Local flashing mode exit signal L end ;

[0085] O start O end : Signals sent by the OTA master controller to the controllers that require OTA: OTA mode entry signal O start OTA mode exit signal O end ;

[0086] T is the timeout period after the controller receives the flash mode entry signal but does not receive the mode exit signal; the flash mode entry signal includes L start Or O star t, mode exit signal includes L end Or O end .

[0087] It is understood that this embodiment adopts different processing methods for UDS services with information security requirements depending on whether the controller is in test, local diagnostic, or OTA mode. That is, no condition check is performed in the test mode, but condition check is performed in the non-test mode, which enhances the system flexibility. In specific modes such as non-flashing, strict condition check is performed to avoid misoperation caused by communication loss, reduce the risk of vehicle safety accidents, and protect the life and property safety of drivers and passengers.

[0088] The judgment unit is used to determine whether the precondition pi needs to be executed based on the write status bit B after the controller receives the service signal ui.

[0089] In some embodiments, the determining unit is configured to perform the following steps:

[0090] After the controller receives the UI:

[0091] If B=1, then execute the ui, and it will definitely respond.

[0092] If B=0, and the controller can receive all the signals involved in pi, and if all the conditions in pi are met, then execute ui and reply with a positive response;

[0093] If B=0, and the controller can receive all the signals involved in pi, if any condition in pi is not met, then ui will not be executed, and a negative response will be sent.

[0094] If B=0, and the controller cannot receive all the signals involved in pi, then ui will not be executed, and a negative response will be sent.

[0095] It is understood that in this embodiment, when a flashing condition exit signal is received, the controller can promptly exit the special processing mode. Through a clear condition exit mechanism, the system can ensure that it can respond to the flashing condition exit signal in a timely manner, restore the normal operation process, avoid inconvenience to users due to untimely mode switching, and improve user satisfaction with the vehicle system.

[0096] In some embodiments, an input unit is also included, wherein:

[0097] Input U and P, where: the set of services requiring information security is U = {ui}, and the set of preconditions that need to be judged before executing the services in U is P = {pi}.

[0098] The vehicle controller UDS service secure execution system provided by this invention includes a controller write status bit B transition logic. After receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B. This avoids the controller mistakenly judging the condition as passed due to communication loss in non-write scenarios, thus preventing the execution of UDS services that do not meet the actual vehicle state and ensuring the safety and reliability of vehicle operation. Simultaneously, it appropriately handles signal loss situations in specific modes such as write scenarios to ensure normal service execution.

[0099] To further illustrate the above technical solution of this application, in this embodiment, the service ui to be executed by the controller is set to service 11, the UDS instruction to be executed is 11 01 (reset request), and the preconditions pi to be judged are: (1) vehicle speed ≤ 3km / h, (2) gear is p; the timeout time T is 2min.

[0100] The specific implementation steps are as follows:

[0101] (1) The switching logic of the controller's status bit B;

[0102] (2) After receiving the UI, the controller determines whether the condition judgment in pi needs to be executed based on the write status bit B.

[0103] Specifically, (1) includes the following steps:

[0104] (1-1) The controller receives the flash mode entry signal L start Or O start If so, the write status bit B is set to 1, and timer t is started;

[0105] (1-2) The controller receives the flash mode exit signal L end Or O end If t > 5 min, then set the write status bit B to 0 and clear the timer t.

[0106] Specifically, (2) includes the following steps:

[0107] After the controller receives 11 01:

[0108] (2-1) If B=1, then execute 11 01 and reply with a positive response 51 01;

[0109] (2-2) If B=0, and the controller can receive vehicle speed and gear signals, if the vehicle speed is ≤3km / h and the gear is P, then execute 11 01 and reply with a positive response 51 01 (execute reset).

[0110] (2-3) If B=0, and the controller can receive vehicle speed and gear signals, if the vehicle speed is greater than 3km / h or the gear is not p, then 11 01 will not be executed, and a negative response 7F 11 22 will be returned (condition not met).

[0111] (2-4) If B=0 and the controller cannot receive the vehicle speed or gear signal, then do not execute 11 01 and reply with a negative response 7F 11 22.

[0112] Based on the same inventive concept, embodiments of the present invention also provide an electronic device. Figure 4 This is a structural block diagram of an electronic device provided in an embodiment of the present invention. Figure 4 As shown, an embodiment of the present invention provides an electronic device including: one or more processors 101, a memory 102, and one or more I / O interfaces 103. The memory 102 stores one or more programs, which, when executed by the one or more processors, cause the one or more processors to implement any of the intelligent in-vehicle multimedia recommendation methods described in the above embodiments; the one or more I / O interfaces 103 are connected between the processor and the memory, configured to enable information interaction between the processor and the memory.

[0113] The processor 101 is a device with data processing capabilities, including but not limited to a central processing unit (CPU); the memory 102 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), and flash memory (FLASH); the I / O interface (read / write interface) 103 is connected between the processor 101 and the memory 102, and can realize information interaction between the processor 101 and the memory 102, including but not limited to a data bus (Bus).

[0114] In some embodiments, the processor 101, memory 102, and I / O interface 103 are interconnected via bus 104, and thus connected to other components of the computing device.

[0115] In some embodiments, the one or more processors 101 include a field-programmable gate array.

[0116] This invention also provides a computer-readable medium. The computer-readable medium stores a computer program, which, when executed by a processor, implements the steps of any of the vehicle controller UDS service secure execution methods described in the above embodiments. The computer-readable storage medium can be volatile or non-volatile.

[0117] This invention also provides a computer program product, including computer-readable code, or a non-volatile computer-readable storage medium carrying computer-readable code. When the computer-readable code is run in the processor of an electronic device, the processor in the electronic device executes the above-described vehicle controller UDS service secure execution method.

[0118] Those skilled in the art will understand that all or some of the steps, systems, and apparatuses disclosed above, and their functional modules / units, can be implemented as software, firmware, hardware, or suitable combinations thereof. In hardware implementations, the division between functional modules / units mentioned above does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed collaboratively by several physical components. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit (ASIC). Such software can be distributed on a computer-readable storage medium, which may include computer storage media (or non-transitory media) and communication media (or transient media).

[0119] As is known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information, such as computer-readable program instructions, data structures, program modules, or other data. Computer storage media includes, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), static random access memory (SRAM), flash memory or other memory technologies, portable compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical disc storage, magnetic cartridges, magnetic tape, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and is accessible to a computer. Furthermore, it is known to those skilled in the art that communication media typically contain computer-readable program instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transmission mechanisms, and may include any information delivery medium.

[0120] The computer-readable program instructions described herein can be downloaded from computer-readable storage media to various computing / processing devices, or downloaded via a network, such as the Internet, local area network, wide area network, and / or wireless network, to an external computer or external storage device. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers, and / or edge servers. A network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards them to the computer-readable storage media in the respective computing / processing device.

[0121] The computer program instructions used to perform the operations of this invention may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk, C++, etc., and conventional procedural programming languages ​​such as the "C" language or similar programming languages. The computer-readable program instructions may be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or may be connected to an external computer (e.g., via the Internet using an Internet service provider). In some embodiments, electronic circuitry, such as programmable logic circuitry, field-programmable gate arrays (FPGAs), or programmable logic arrays (PLAs), is personalized by utilizing state information from the computer-readable program instructions. This electronic circuitry can execute the computer-readable program instructions to implement various aspects of the invention.

[0122] The computer program product described herein can be implemented specifically through hardware, software, or a combination thereof. In one alternative embodiment, the computer program product is specifically embodied in a computer storage medium; in another alternative embodiment, the computer program product is specifically embodied in a software product, such as a software development kit (SDK), etc.

[0123] Various aspects of the present invention are described herein with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer-readable program instructions.

[0124] These computer-readable program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus to produce a machine such that, when executed by the processor of the computer or other programmable data processing apparatus, they create means for implementing the functions / actions specified in one or more blocks of the flowchart and / or block diagram. These computer-readable program instructions can also be stored in a computer-readable storage medium that causes a computer, programmable data processing apparatus, and / or other device to operate in a particular manner; thus, the computer-readable medium storing the instructions comprises an article of manufacture that includes instructions for implementing aspects of the functions / actions specified in one or more blocks of the flowchart and / or block diagram.

[0125] Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to perform the functions / actions specified in one or more boxes of a flowchart and / or block diagram.

[0126] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of an instruction, which contains one or more executable instructions for implementing a specified logical function. In some alternative implementations, the functions marked in the blocks may occur in a different order than those shown in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, may be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0127] Example embodiments have been disclosed herein, and while specific terminology has been used, it is for illustrative purposes only and should be construed as such, and is not intended to be limiting. In some instances, it will be apparent to those skilled in the art that features, characteristics, and / or elements described in conjunction with particular embodiments may be used alone, or in combination with features, characteristics, and / or elements described in conjunction with other embodiments, unless otherwise expressly indicated. Therefore, those skilled in the art will understand that various changes in form and detail may be made without departing from the scope of the invention as set forth in the appended claims.

Claims

1. A method for secure execution of UDS services by a vehicle controller, characterized in that, It includes the following steps: The controller's write status bit B is determined based on the conversion logic; After receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B.

2. The vehicle controller UDS service secure execution method according to claim 1, characterized in that, The step of determining the controller's write status bit B based on the conversion logic includes the following steps: The controller received the flash mode entry signal L start Or O start If so, the write status bit B is set to 1, and timer t is started; The controller received the flash mode exit signal L end Or O end If t > T, then the write status bit B is set to 0, and the timer t is cleared; where: L start Signal L is used to enter flash mode. start L end This is the exit signal for flash mode; O start OTA mode entry signal O start ;O end This is the signal to exit OTA mode; T is the timeout period after the controller receives the flash mode entry signal but does not receive the mode exit signal.

3. The vehicle controller UDS service secure execution method according to claim 1, characterized in that, After receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B, including the following steps: After the controller receives the UI: If B=1, then execute the ui, and it will definitely respond. If B=0, and the controller can receive all the signals involved in pi, and if all the conditions in pi are met, then execute ui and reply with a positive response.

4. The vehicle controller UDS service secure execution method according to claim 1, characterized in that, After receiving the service signal ui, the controller determines whether the precondition pi needs to be executed based on the write status bit B, including the following steps: If B=0, and the controller can receive all the signals involved in pi, if any condition in pi is not met, then ui will not be executed, and a negative response will be sent. If B=0, and the controller cannot receive all the signals involved in pi, then ui will not be executed, and a negative response will be sent.

5. The vehicle controller UDS service secure execution method according to claim 1, characterized in that, It also includes the following steps: Input U and P, where: the set of service signals requiring information security is U = {ui}, and the set of preconditions that need to be judged before executing the service in U is P = {pi}.

6. A vehicle controller UDS service security execution system, characterized in that, include: The write unit is used to execute the switching logic of the controller's write status bit B; The judgment unit is used to determine whether the precondition pi needs to be executed based on the write status bit B after the controller receives the service signal ui.

7. The vehicle controller UDS service security execution system according to claim 6, characterized in that, The conversion logic includes: The controller received the flash mode entry signal L start Or O start If so, the write status bit B is set to 1, and timer t is started; The controller received the flash mode exit signal L end Or O end If t > T, then the write status bit B is set to 0, and the timer t is cleared; where: L start Signal L is used to enter flash mode. start L end This is the exit signal for flash mode; O start OTA mode entry signal O start ;O end This is the signal to exit OTA mode; T is the timeout period after the controller receives the flash mode entry signal but does not receive the mode exit signal.

8. The vehicle controller UDS service security execution system according to claim 5, characterized in that, It also includes an input unit for inputting U and P; Where U is the set of information security service signals, U = {ui}, and P is the set of preconditions that need to be judged before executing the service in U, P = {pi}.

9. An electronic device, characterized in that, include: One or more processors; Memory, used to store one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of claims 1 to 4.

10. A computer-readable medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method as described in any one of claims 1 to 4.

Images