Starting method, control device, vehicle and medium

Abstract

The embodiment of the invention provides a starting method, a control device, a vehicle and a medium. The starting method comprises the steps that a first chip and a second chip are started; the first chip executes safety verification to verify the in-vehicle infotainment system, and the second chip executes initialization to start the in-vehicle infotainment system; the second chip sends a security service request to the first chip; the first chip interrupts security verification and responds to the security service request; and after the execution of the security service request is finished, the first chip continues to execute security verification. According to the starting method, safety verification of the vehicle-mounted terminal system and starting of the vehicle-mounted terminal system can be executed at the same time or within the same time period, in the starting process, if a safety service request is generated, the first chip responds to the safety service request firstly, safety verification continues to be executed after execution of the safety service request is finished, and the safety verification of the vehicle-mounted terminal system is completed. The starting process can be guaranteed to be smoothly carried out, the starting time consumption of the vehicle machine system is effectively shortened, and the driving experience of a user is improved.

Description

Technical Field

[0001] This invention relates to the field of vehicle safety start technology, and in particular to a start method, control device, vehicle, and medium. Background Technology

[0002] Secure boot of the vehicle infotainment system is a security mechanism designed to ensure that the system is not tampered with by unauthorized software during the boot process. It is of great significance in preventing the loading of malicious software, ensuring the integrity of the operating system, and protecting firmware security.

[0003] In related technologies, the safe startup of vehicle infotainment systems mostly adopts the method of vehicle infotainment system verification and vehicle infotainment system startup serialization. After the vehicle infotainment system verification is completed and the absolute security of the vehicle infotainment system is ensured, the vehicle infotainment system startup is then performed. This startup method has a high degree of security.

[0004] However, since the verification process of the vehicle's infotainment system takes approximately 300ms to 400ms, while ensuring high security during startup, it results in a slower startup time, impacting the user's driving experience. In situations involving high-speed driving, if the infotainment system restarts unexpectedly, the slow restart speed could seriously endanger the user's safety. Summary of the Invention

[0005] This invention provides a startup method, control device, vehicle, and medium to solve the problem of slow startup of vehicle infotainment systems in related technologies.

[0006] In a first aspect, the present invention provides a startup method, the method comprising:

[0007] Start the first and second chips;

[0008] The first chip performs security checks to verify the vehicle infotainment system, and the second chip performs initialization to start the vehicle infotainment system;

[0009] The second chip sends a security service request to the first chip;

[0010] The first chip interrupts the security verification and responds to the security service request;

[0011] After the security service request is completed, the first chip continues to perform the security verification. Optionally, the method further includes:

[0012] Determine whether the security check was successful;

[0013] If the security verification is successful, the first chip sends a first signal to the second chip, and the second chip responds to the first signal to run the vehicle system;

[0014] If the security verification fails, the first chip sends a second signal to the second chip, and the second chip responds to the second signal by re-performing initialization to restart the vehicle system.

[0015] Optionally, during the security verification process performed by the first chip, the method further includes:

[0016] The second chip sends a security service request to the first chip;

[0017] The first chip interrupts the security verification and responds to the security service request;

[0018] After the security service request is completed, the first chip continues to perform the security verification.

[0019] Optionally, the completion of the security service request includes:

[0020] The first chip generates security service information and feeds it back to the second chip. The security service information includes the execution result of the security service request.

[0021] Optionally, the security service request includes verifying the code of the vehicle system, performing hash calculations on the vehicle system, and performing random number generation on the vehicle system.

[0022] Optionally, the first chip is the security service chip of the vehicle system, and the second chip is the operating chip of the vehicle system.

[0023] Optionally, the step of activating the first chip and the second chip includes:

[0024] Upon receiving the user's first input, the first chip triggers startup in response to the first input;

[0025] The first chip sends a startup command to the second chip, and the second chip triggers startup in response to the startup command.

[0026] Optionally, after the second chip triggers startup in response to the startup command, the method further includes:

[0027] The first chip acquires the startup information of the second chip and determines whether the second chip has successfully started based on the startup information;

[0028] If the second chip successfully boots up, the first chip performs a security check, and the second chip performs initialization.

[0029] If the second chip fails to start, the first chip resends the start command to the second chip.

[0030] Secondly, the present invention provides a control device, the control device comprising a first chip and a second chip, the first chip being electrically connected to the second chip.

[0031] Thirdly, the present invention provides a vehicle equipped with the aforementioned control device, wherein the control device executes any of the aforementioned starting methods during the vehicle's start-up process.

[0032] Fourthly, the present invention provides a readable storage medium storing a program that, when executed by a processor, implements the startup method as described in any of the preceding claims.

[0033] The vehicle infotainment system startup method of this invention includes: starting a first chip and a second chip; the first chip performing a security check to verify the vehicle infotainment system, and the second chip performing initialization to start the vehicle infotainment system; the second chip sending a security service request to the first chip; the first chip interrupting the security check and responding to the security service request; and the first chip continuing to perform the security check after the security service request is completed. In this startup method, the security check and startup of the vehicle infotainment system can be performed simultaneously or within the same time period. During startup, if a security service request is generated, the first chip will interrupt the security check, respond to the security service request first, and then continue performing the security check after the security service request is completed. This helps ensure a smooth startup process, effectively shortens the time required for the vehicle infotainment system to start safely, speeds up the startup process, improves the user's driving experience, and helps avoid harm to the user's personal safety when the vehicle is traveling at high speed, thereby improving the vehicle's safety performance. Attached Figure Description

[0034] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0035] Figure 1 This is a flowchart of the steps of a vehicle infotainment system startup method provided in an embodiment of the present invention;

[0036] Figure 2 This is a flowchart of another method for starting a vehicle infotainment system provided in an embodiment of the present invention;

[0037] Figure 3This is a flowchart illustrating the steps for starting a first chip and a second chip according to an embodiment of the present invention;

[0038] Figure 4 This is a schematic diagram of the interaction between the first chip and the second chip provided in an embodiment of the present invention;

[0039] Figure 5 This is a structural diagram of the control device provided in an embodiment of the present invention. Detailed Implementation

[0040] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0041] This invention provides a method for starting a vehicle infotainment system, applied to a control device 1 of the system. The control device 1 can employ a microcontroller unit (MCU) chip. An MCU chip is a highly integrated semiconductor chip that integrates a central processing unit (CPU), memory, input / output (I / O) interfaces, and various peripheral devices. It can execute program code to control the startup of the vehicle infotainment system. Furthermore, for some MCU chips with high circuit integration and rich functionality, the MCU chip can also control and monitor other vehicle systems, such as the body electronic system and the in-vehicle infotainment system. The MCU chip includes serial communication interfaces, such as a Universal Synchronous / Asynchronous Receiver / Transmitter (USART) interface, a Serial Peripheral Interface (SPI), and a two-wire serial bus (Inter-Integrated Circuit). 2C) Interfaces, including parallel communication interfaces such as General Purpose Input Output (GPIO) interfaces, and special communication interfaces such as Controller Area Network (CAN) bus, Local Interconnect Network (LIN) bus, and Analog-to-Digital Converter (ADC) and other communication interfaces, can perform effective communication with various devices in the vehicle in different application scenarios and realize information exchange between various systems of the vehicle.

[0042] In addition, compared with the system-on-chip (SoC) of a vehicle, the control device 1 in the embodiments of the present invention has a simpler integrated circuit structure and lower design and manufacturing costs.

[0043] In related technologies, to alleviate the impact of slow vehicle system startup on users, some vehicles are equipped with Bluetooth keys. When the Bluetooth key approaches the vehicle, the vehicle automatically unlocks and starts. The time from system startup to the user actually sitting in the car is generally sufficient for the system to complete startup completely, thus achieving a seamless startup effect for the user. However, this method essentially avoids the user's usage scenario and cannot fundamentally solve the problem of slow system startup. Imagine a vehicle traveling at high speed, such as on a highway. If the system restarts due to an unexpected reason, the security verification and system startup still need to be performed sequentially during the restart process. The 300ms to 400ms time spent during startup can easily cause traffic accidents, seriously endangering the personal safety of users.

[0044] Figure 5 This is a structural diagram of the control device provided in an embodiment of the present invention, as shown below. Figure 5 As shown, the control device 1 of this embodiment includes a first chip 11 and a second chip 12. The first chip 11 and the second chip 12 are electrically connected. Both the first chip 11 and the second chip 12 are processing units on the control device 1 responsible for executing instructions and processing data. It should be noted that the first chip 11 and the second chip 12 in this embodiment can refer to two different chips or two different processor cores in the same chip. The number of processor cores on the chip determines the data processing capability and functions of the chip. The more processor cores there are, the more powerful the data processing capability and the richer the functions of the chip.

[0045] In this embodiment of the invention, the first chip 11 can be a security service chip for the vehicle infotainment system, and the second chip 12 is the operating chip for the vehicle infotainment system. The security service chip for the vehicle infotainment system ensures the security of the vehicle infotainment system, its connected networks, data, and user privacy. It integrates cryptographic algorithms and a physical anti-attack design, making it one of the hardware chips for vehicle infotainment system security. It also integrates a hardware security module to protect and manage the vehicle infotainment system's keys and sensitive data, ensuring the security and reliability of the vehicle infotainment system when processing sensitive information and performing security authentication. The operating chip for the vehicle infotainment system ensures its normal and stable operation, providing users with the necessary infotainment, navigation, security monitoring, data interaction, and cloud services. It typically uses a high-performance processor as its operating chip, possessing powerful computing capabilities and low power consumption, meeting the real-time and stability requirements of the vehicle infotainment system. Furthermore, the operating chip supports various hardware devices and interfaces, such as the central control screen, instrument panel, navigation module, and Bluetooth module, thereby providing the vehicle infotainment system with rich functions and interaction methods through these hardware devices and interfaces.

[0046] Figure 1 This is a flowchart of the steps of a vehicle infotainment system startup method provided in an embodiment of the present invention, as shown below. Figure 1 As shown, the method includes:

[0047] Step 101: Start the first chip 11 and the second chip 12.

[0048] It is understandable that the first chip 11 and the second chip 12 can only execute the corresponding tasks after they are started.

[0049] Step 102: The first chip 11 performs a security check to verify the vehicle system, and the second chip 12 performs initialization to start the vehicle system.

[0050] In this step, with both the first chip 11 and the second chip 12 activated, the first chip 11 performs a security check to verify the vehicle system. The security check of the vehicle system aims to prevent security threats such as unauthorized access, data leakage, and malicious attacks, and to ensure the integrity, availability, and confidentiality of the vehicle system. By implementing strict security check measures, the overall security of the vehicle can be improved, and the privacy and property security of the vehicle owner can be protected.

[0051] The first chip 11 performs security checks, primarily including checks on the following programs and firmware: Bootloader verification: Verifies and loads the operating system or firmware, performing signature verification to confirm code integrity. Secure boot verification: Ensures the system only loads authorized, tamper-proof firmware or operating system. Firmware integrity verification: Verifies the firmware's hash value or digital signature to detect malicious modifications. Permission and identity verification: Ensures only authenticated components or users can access system functions. Dynamic protection verification: Monitors and protects the system from attacks during runtime, ensuring real-time security.

[0052] Security verification can employ data encryption technology to encrypt sensitive data in the system, such as user personal information and vehicle location information, to prevent data theft or tampering during transmission or storage. It can also utilize secure communication protocols and encryption algorithms to ensure secure communication between the vehicle system and other devices or servers. Alternatively, it can use methods such as passwords, fingerprints, or facial recognition to authenticate users, ensuring that only authorized users can access the vehicle system. As technology continues to develop and security threats evolve, the security verification measures for vehicle systems are constantly being updated and improved. This embodiment does not limit the specific security verification measures.

[0053] The second chip 12 performs initialization to start the vehicle infotainment system. Initialization of the vehicle infotainment system is a critical step to ensure its normal operation. During the initialization process of the second chip 12, it performs self-tests on the system power and related firmware, such as self-tests on the central processing unit, memory, display screen, input / output devices, etc., as well as initializing operating system services, such as network services, database services, system monitoring, etc., loading the main applications of the vehicle infotainment system, such as navigation, entertainment, communication, etc., to ensure that they can run normally, initializing user interface components, such as graphical interface, menus, buttons, etc., to ensure that users can perform interactive operations, and loading and applying system configuration files, such as system settings, user preferences, etc.

[0054] In this embodiment of the invention, the security verification action of the first chip 11 and the initialization action of the second chip 12 can be executed simultaneously or within the same time period. That is, the vehicle system can start up while the vehicle system is performing security verification. With both actions executed simultaneously, the vehicle system startup takes approximately 200ms. After the vehicle system security verification is completed, the vehicle system may have already started up. Compared to the serial execution of verification and startup actions in related technologies, the method of this embodiment can effectively shorten the time required for the vehicle system to start up safely, thus improving the user's driving experience. In situations where vehicles are traveling at high speeds, if the vehicle system restarts due to unexpected reasons, a faster restart speed also helps to avoid harm to the user's personal safety, thereby improving the vehicle's safety performance.

[0055] Step 103: The second chip 12 sends a security service request to the first chip 11.

[0056] In this step, security service requests include, but are not limited to, requests to verify the vehicle infotainment system code during secure startup, requests to perform hash calculations on the vehicle infotainment system code, and requests to generate random numbers for the vehicle infotainment system. These requests are triggered by the code logic of the vehicle infotainment system. Since the tasks of the second chip 12 starting the vehicle infotainment system and the first chip 11 verifying the vehicle infotainment system are executed simultaneously, security service requests may be generated during the process of the second chip 12 starting the vehicle infotainment system. After a security service request is generated, the second chip 12 will immediately send the security service request to the first chip 11.

[0057] Step 104: The first chip 11 interrupts the security verification and responds to the security service request.

[0058] In this step, upon receiving a security service request, the first chip 11 immediately interrupts the vehicle system's security verification and responds to the security service request first. The interruption of security verification is executed by the computational logic of the first chip 11, prioritizing the security service request task over the security verification task. Upon receiving the security service request, the first chip 11 temporarily suspends the execution of the security verification task and instead processes the higher-priority security service request. The security service request signal sent by the second chip 12 to the first chip 11 is typically implemented through hardware circuitry or software mechanisms. For example, a program specifically designed to handle interrupt requests such as security service requests can be programmed into the first chip 11. This program is invoked when an interrupt occurs and is responsible for handling the interrupt source, i.e., the security service request.

[0059] Step 105: After the security service request is completed, the first chip continues to perform the security verification.

[0060] In this step, after the first chip 11 completes the processing of the security service request task, it can directly continue to execute the security verification task based on the saved context. Specifically, after processing the security service request task, the first chip 11 can generate security service information, which includes the execution result of the security service request and may also include the execution process of the security service request. The first chip 11 feeds back the security service information to the second chip 12, which then modifies or confirms the vehicle system's program code, the vehicle system's hash calculation result, and the generated random number based on the security service information.

[0061] The vehicle infotainment system startup method in this embodiment includes: starting a first chip 11 and a second chip 12; the first chip 11 performing a security check to verify the vehicle infotainment system, and the second chip 12 performing initialization to start the vehicle infotainment system; the second chip 12 sending a security service request to the first chip 11; the first chip 11 interrupting the security check and responding to the security service request; and after the security service request is completed, the first chip 11 continuing to perform the security check. In this startup method, the security check and startup of the vehicle infotainment system can be performed simultaneously or within the same time period. During startup, if a security service request is generated, the first chip 11 will interrupt the security check, respond to the security service request first, and then continue performing the security check after the security service request is completed. This helps ensure a smooth startup process, effectively shortens the time required for the vehicle infotainment system to start safely, speeds up the startup process, improves the user's driving experience, and helps avoid harm to the user's personal safety when the vehicle is traveling at high speed, thereby improving the vehicle's safety performance.

[0062] Figure 2 This is a flowchart of another method for starting a vehicle infotainment system provided in an embodiment of the present invention, as shown below. Figure 2 As shown, in some optional embodiments of the present invention, after step 105, the method further includes:

[0063] Step 106: Determine whether the security verification was successful.

[0064] In this step, during the security verification process, the first chip 11 can also determine whether the security verification was successful. The first chip 11 will generate different signals depending on whether the security verification is successful or failed, and the second chip 12 will perform different actions upon receiving the signals. Specifically, if there are no threats such as malicious software modification, malicious code tampering, or firmware attacks by external devices during the security verification process, the security verification can be determined to be successful. If threats such as malicious software modification, malicious code tampering, or firmware attacks by external devices are detected during the security verification process, the security verification can be determined to be unsuccessful.

[0065] Step 107: If the security verification is successful, the first chip 11 sends a first signal to the second chip 12, and the second chip 12 responds to the first signal to run the vehicle system.

[0066] In this step, a successful security check indicates that all software, code, and firmware of the vehicle infotainment system are in a secure state and there is no threat. At this time, the first chip 11 generates a first signal and sends a first signal to the second chip 12. The first signal can be any type of electrical signal. After receiving the first signal, the second chip 12 confirms that the vehicle infotainment system has been safely started and can immediately start running the vehicle infotainment system to achieve normal vehicle start-up and driving.

[0067] Step 108: If the security verification fails, the first chip 11 sends a second signal to the second chip 12, and the second chip 12 responds to the second signal by re-performing initialization to restart the vehicle system.

[0068] In this step, a successful security check indicates that some software, code, or firmware in the vehicle system is under security threat, such as malicious modification of the software or code, or an attack on the firmware. At this time, the first chip 11 generates a second signal and sends it to the second chip 12. The second signal can also be any type of electrical signal. After receiving the second signal, the second chip 12 re-executes initialization to restart the vehicle system.

[0069] Figure 3 This is a flowchart illustrating the steps for starting a first chip and a second chip according to an embodiment of the present invention; in some optional embodiments of the present invention, step 101, starting the first chip 11 and the second chip 12, specifically includes:

[0070] Step 1011: Receive the user's first input, and the first chip 11 is triggered to start in response to the first input.

[0071] In this step, the first input can be the input performed by the user pressing the start button of the vehicle when the vehicle is unlocked, or the input performed by the Bluetooth key approaching the vehicle when the vehicle is unlocked, or the user performing voice input, fingerprint recognition input, face recognition input, password input, etc. when the vehicle is unlocked. After the user performs the first input, a corresponding signal is generated, which acts on the first chip 11, causing the first chip 11 to be woken up and started.

[0072] Assuming the first input is the input executed by the user pressing the vehicle's start button when the vehicle is unlocked, the signal generated by the first input can be a digital signal. For example, control device 1 is electrically connected to the vehicle's start button. When the vehicle is not started, the level of the corresponding pin of control device 1 is low. When the user presses the start button, the level of the corresponding pin of control device 1 is switched to high. This high-low level transition generates a start signal, which triggers the first chip 11 to start. Alternatively, the signal generated by the first input can be a control signal. For example, control device 1 is electrically connected to the vehicle's start button via a CAN bus. When the user presses the start button, control device 1 receives the start signal via the CAN bus, thereby triggering the first chip 11 to start.

[0073] After the first chip 11 is started, it can perform related operations such as instruction execution and decoding, logical operations, data processing and analysis.

[0074] Step 1012: The first chip 11 sends a start command to the second chip 12, and the second chip 12 triggers startup in response to the start command.

[0075] In this step, after the first chip 11 starts up, it immediately generates a startup instruction for the second chip 12. The startup instruction can be an assignment instruction. After the first chip 11 starts up, it assigns a new value to the code stored in the second chip 12, thereby triggering the startup of the second chip 12. After the second chip 12 starts up, it can perform related operations such as instruction execution and decoding, logical operations, data processing and analysis.

[0076] In some optional embodiments of the present invention, after step 1012, the method further includes:

[0077] Step 1013: The first chip 11 obtains the startup information of the second chip 12.

[0078] In this step, since the startup process of the first chip 11 and the second chip 12 is a complex process involving the precise control of multiple signals and timing, startup failure may occur. Therefore, after the second chip 12 starts in response to the startup command sent by the first chip 11, the first chip 11 can determine whether the second chip 12 has started successfully by obtaining the startup information of the second chip 12.

[0079] Step 1014: The first chip 11 determines whether the second chip 12 has successfully started based on the startup information.

[0080] In this step, it can be understood that when the second chip 12 is successfully started, the second chip 12 generates current and voltage; when the second chip 12 is not successfully started, the second chip 12 does not generate current and voltage. Therefore, the startup information of the second chip 12 can include information such as the current and voltage of the second chip 12. If the first chip 11 obtains the current or voltage of the second chip 12, it is determined that the second chip 12 has been successfully started; if the first chip 11 cannot obtain the current or voltage of the second chip 12, it is determined that the second chip 12 has not been successfully started.

[0081] Step 1015: If the second chip 12 is successfully started, the first chip 11 performs a security check and the second chip 12 performs initialization.

[0082] In this step, when the first chip 11 determines that the second chip 12 has successfully started, the first chip 11 performs a security check and the second chip 12 performs initialization. The execution method is the same as or similar to the implementation method of the aforementioned step 102, and will not be described again in this embodiment.

[0083] Step 1016: If the second chip 12 fails to start, the first chip 11 resends the start command to the second chip 12.

[0084] In this step, if the first chip 11 determines that the second chip 12 has failed to start, the first chip 11 resends a start command to the second chip 12 to trigger a restart. Then, steps 1013 and 1014 are executed to determine whether the second chip 12 has started successfully. It should be noted that if the first chip 11 sends start commands to the second chip 12 multiple times, and the second chip 12 still fails to start successfully, the start operation needs to be stopped, and the circuit structure of the control device 1 and its connected communication components need to be inspected and tested.

[0085] like Figure 5As shown in the figure, this embodiment of the invention also provides a control device 1, which includes a first chip 11 and a second chip 12, electrically connected. The first chip 11 is used to perform security verification to verify the vehicle infotainment system, and the second chip 12 is used to perform initialization to start the vehicle infotainment system. During the process of the second chip 12 starting the vehicle infotainment system, the second chip 12 is also used to send a security service request to the first chip 11. The first chip 11 can interrupt the security verification upon receiving the security service request and respond to the security service request. After the security service request is executed, the first chip 11 continues to perform the security verification. The first chip 11 can be a security service chip for the vehicle infotainment system, and the second chip 12 can be a running chip for the vehicle infotainment system. The first chip 11 can send the context of the already executed security verification task to a memory for storage to ensure that the security verification task can continue to be executed normally after the interruption is handled.

[0086] In this embodiment of the invention, the control device 1 further includes a memory, which can be flash memory (Flash), whose data will not be lost after power failure; it can also be non-volatile flash memory (Data Flash, DFlash), whose data is still retained after power failure and supports fast writing and reading, and can protect critical data through programming and erasing operations; it can also be a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), etc., and the specific type is not limited in this embodiment.

[0087] This invention also provides a vehicle equipped with the control device 1 described in the foregoing embodiments. The control device 1 executes the starting method described in the foregoing embodiments during vehicle startup. The control device 1 may employ an MCU chip, which integrates a CPU, memory, I / O interfaces, and various peripheral devices. It can execute program code to control the startup of the vehicle's infotainment system.

[0088] This invention also provides a readable storage medium storing a computer program. When the computer program is executed by a processor, it implements the startup method described in the foregoing embodiments. The processor can be a first chip 11 and a second chip 12 of the control device 1.

[0089] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0090] The algorithms and displays provided herein are not inherently related to any particular computer, virtual system, or other device. Various general-purpose systems can also be used in conjunction with the teachings herein. The required structure for constructing such systems is apparent from the above description. Furthermore, this invention is not directed to any particular programming language. It should be understood that the contents of the invention described herein can be implemented using various programming languages, and the above description of specific languages ​​is for the purpose of disclosing the best mode of implementation of the invention.

[0091] Numerous specific details are set forth in the specification provided herein. However, it will be understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure the understanding of this specification.

[0092] Similarly, it should be understood that, in order to simplify the invention and aid in understanding one or more of the various inventive aspects, in the above description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof. However, this disclosure should not be construed as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as reflected in the following claims, inventive aspects lie in fewer than all features of a single foregoing disclosed embodiment. Therefore, the claims following the detailed description are hereby expressly incorporated into this detailed description, wherein each claim itself is a separate embodiment of the invention.

[0093] Those skilled in the art will understand that the modules in the device of the embodiments can be adaptively modified and placed in one or more devices different from that embodiment. Modules, units, or components in the embodiments can be combined into a single module, unit, or component, and further, they can be divided into multiple sub-modules, sub-units, or sub-components. Except where at least some of such features and / or processes or units are mutually exclusive, any combination can be performed on all features disclosed in this specification (including the accompanying claims, abstract, and drawings) and all processes or units of any method or device so disclosed. Unless expressly stated otherwise, each feature disclosed in this specification (including the accompanying claims, abstract, and drawings) may be replaced by an alternative feature that serves the same, equivalent, or similar purpose.

[0094] The various component embodiments of the present invention can be implemented as firmware, or as software modules running on one or more processors, or a combination thereof. Those skilled in the art will understand that microprocessors or digital signal processors (DSPs) can be used in practice to implement some or all of the functions of some or all of the components in the sorting device according to the present invention. The present invention can also be implemented as a device or apparatus program for performing part or all of the methods described herein. Such a program implementing the present invention can be stored on a computer-readable medium, or can be in the form of one or more signals. Such signals can be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

[0095] It should be noted that the above embodiments are illustrative of the invention and not restrictive, and that those skilled in the art can devise alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses should not be construed as limiting the claims. The word "comprising" does not exclude the presence of elements or steps not listed in the claims. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of firmware comprising several different elements and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by the same firmware item. The use of the words first, second, and third, etc., does not indicate any order. These words can be interpreted as names.

[0096] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0097] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A startup method, characterized in that, The method includes: Start the first and second chips; The first chip performs security checks to verify the vehicle infotainment system, and the second chip performs initialization to start the vehicle infotainment system; The second chip sends a security service request to the first chip; The first chip interrupts the security verification and responds to the security service request; After the security service request is completed, the first chip continues to perform the security verification.

2. The startup method according to claim 1, characterized in that, The method further includes: Determine whether the security check was successful; If the security verification is successful, the first chip sends a first signal to the second chip, and the second chip responds to the first signal to run the vehicle system; If the security verification fails, the first chip sends a second signal to the second chip, and the second chip responds to the second signal by re-performing initialization to restart the vehicle system.

3. The startup method according to claim 1, characterized in that, The completion of the security service request includes: The first chip generates security service information and feeds it back to the second chip. The security service information includes the execution result of the security service request.

4. The startup method according to claim 1, characterized in that, The security service request includes verifying the code of the vehicle system, performing hash calculations on the vehicle system, and performing random number generation on the vehicle system.

5. The startup method according to claim 1, characterized in that, The first chip is the security service chip of the vehicle system, and the second chip is the operating chip of the vehicle system.

6. The startup method according to claim 1, characterized in that, The startup of the first chip and the second chip includes: Upon receiving the user's first input, the first chip triggers startup in response to the first input; The first chip sends a startup command to the second chip, and the second chip triggers startup in response to the startup command.

7. The startup method according to claim 6, characterized in that, After the second chip triggers startup in response to the startup command, the method further includes: The first chip acquires the startup information of the second chip and determines whether the second chip has successfully started based on the startup information; If the second chip successfully boots up, the first chip performs a security check, and the second chip performs initialization. If the second chip fails to start, the first chip resends the start command to the second chip.

8. A control device, characterized in that, The control device includes a first chip and a second chip, and the first chip and the second chip are electrically connected.

9. A vehicle, characterized in that, The vehicle is equipped with the control device as described in claim 8, and the control device executes the starting method as described in any one of claims 1-7 during the vehicle starting process.

10. A readable storage medium, characterized in that, The readable storage medium stores a computer program that, when executed by a processor, implements the startup method as described in any one of claims 1-7.

Images