Method for protecting an electronic device
By setting time windows and verification failure states in electronic devices, the problem of repeated password attacks on electronic devices is solved, achieving high security and low cost access protection.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-12
- Publication Date
- 2026-03-13
AI Technical Summary
In the existing technology, vehicle electronic devices are vulnerable to unauthorized access and tampering by attackers through repeated password attempts, affecting their functionality and security.
By setting a time window, password verification is only performed when the timeout period is within the set range, and access is allowed if the verification is successful; otherwise, the system enters a verification failure state, thus preventing repeated password attempts.
It increases the difficulty for attackers to crack passwords, improves the security of electronic devices, prevents unauthorized access, and achieves low-cost protection without the need for high-cost hardware encryption chips.
Smart Images
Figure CN121659367A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the fields of vehicles and electronics, and more particularly, to a method for protecting electronic devices. Background Technology
[0002] In existing technologies, vehicle electronic devices, such as the ECU (Electronic Control Unit), are typically protected by passwords. External devices can only access the electronic device after successful password verification. However, attackers can exploit this vulnerability by repeatedly trying different passwords. If an attacker succeeds, they can access the electronic device and illegally obtain or tamper with its internal software code, data, and operating parameters, thereby compromising its functionality and security. Summary of the Invention
[0003] The starting point of this invention is to provide a method for protecting electronic devices, thereby solving the aforementioned problems in the prior art.
[0004] Embodiments of the present invention provide a method for protecting electronic devices, characterized in that the method includes:
[0005] When the electronic device enters the verification state, the timer starts;
[0006] If the electronic device receives a password verification command from an external device while the timing duration is within the set time window, it performs password verification, and if the verification is successful, the electronic device allows the external device to access the device.
[0007] Optionally, in the unverified state, the electronic device is only allowed to perform password verification.
[0008] Optionally, in the event of verification failure, the electronic device enters a verification failure state.
[0009] Optionally, if the electronic device receives the password verification instruction when the timing duration is less than the minimum time value of the time window, the electronic device enters a verification failure state.
[0010] Optionally, if the duration of the timeout exceeds the maximum time value of the time window, the electronic device enters a verification failure state.
[0011] Optionally, in the case of verification failure, the electronic device is not allowed to access the device and is not allowed to perform password verification.
[0012] Optionally, the electronic device enters a verification state each time it is powered on.
[0013] Optionally, the password may include a random number.
[0014] Optionally, the electronic device includes the vehicle's electronic control unit.
[0015] The method for protecting electronic devices according to embodiments of the present invention has at least the following advantages:
[0016] In this invention, a time window is set. Password verification will only be performed if the time elapsed since the electronic device entered the verification state is within the set time window. Furthermore, external devices are only allowed to access the device if the password verification is successful. This increases the difficulty for attackers to crack the password and improves the access security of the electronic device.
[0017] In this invention, when password verification fails, the electronic device enters a verification failure state where access is not allowed and password verification is not permitted. This prevents attackers from attacking the electronic device by repeatedly trying passwords, thereby improving the access security of the electronic device.
[0018] In this invention, if the timeout period from when the electronic device enters the verification state is less than the minimum time value of the time window, and a password verification command is received from an external device, the electronic device enters a verification failure state where access is not allowed and password verification is not permitted. This prevents attackers from attacking the electronic device by repeatedly trying passwords and improves the access security of the electronic device.
[0019] In this invention, if the timeout period from the start of the electronic device entering the verification state exceeds the maximum time value of the time window, the electronic device enters a verification failure state where access is not allowed and password verification is not permitted. This prevents attackers from attacking the electronic device by repeatedly trying passwords, thereby improving the access security of the electronic device.
[0020] In this invention, the password can include random numbers of any form, thereby further increasing the difficulty for attackers to crack the password and improving the access security of electronic devices.
[0021] In this invention, there is no need for a high-cost chip with hardware encryption function. Instead, the method of this invention can be implemented entirely in software, thus giving the method of the invention a low-cost advantage. Attached Figure Description
[0022] Other details and advantages of the invention will become apparent from the detailed description provided below. It should be understood that the following drawings are merely schematic and not drawn to scale, and therefore should not be considered as limiting the scope of this application. The following detailed description will refer to the drawings, in which:
[0023] Figure 1 A flowchart of a method for protecting electronic devices according to a specific embodiment of the present invention is shown.
[0024] Figure 2 A flowchart of a method for protecting electronic devices according to another specific embodiment of the present invention is shown. Detailed Implementation
[0025] Embodiments of the present invention are described below with reference to the accompanying drawings. In the following description, numerous specific details are set forth to enable those skilled in the art to more fully understand and implement the invention. However, it will be apparent to those skilled in the art that implementation of the invention may not include some of these specific details. Furthermore, it should be understood that the invention is not limited to the specific embodiments described. Rather, the invention can be conceived to be practiced with any combination of the features and elements described below, regardless of whether they relate to different embodiments. Therefore, the following aspects, features, embodiments, and advantages are illustrative only and should not be construed as elements or limitations of the claims unless expressly set forth in the claims.
[0026] Now refer to Figure 1 The diagram illustrates a method flowchart for protecting an electronic device according to a specific embodiment of the present invention. Figure 1 As shown, the method includes:
[0027] Step S101: When the electronic device enters the verification state, start timing.
[0028] Preferably, the electronic device enters a verification state each time it is powered on.
[0029] In step S102, if the electronic device receives a password verification command from an external device while the timing duration is within the set time window, the electronic device performs password verification, and if the verification is successful, the electronic device allows the external device to access the device.
[0030] Preferably, in the pending verification state, the electronic device only allows password verification. If verification fails, the electronic device enters a verification failure state.
[0031] In addition, electronic devices will enter a verification failure state in the following three situations:
[0032] 1. Password verification failed;
[0033] 2. If the timing duration is less than the minimum time value of the time window, the electronic device receives a password verification command;
[0034] 3. The timing duration is greater than the maximum time value of the time window.
[0035] Preferably, in the case of verification failure, the electronic device is not allowed to access the device and is not allowed to perform password verification.
[0036] Preferably, the password may include a random number. Those skilled in the art will understand that the specific form of the random number (e.g., the length of the random number) can be set according to actual circumstances, and these variations do not exceed the scope of protection of this invention.
[0037] Those skilled in the art will understand that the method of the present invention can be used to protect any suitable electronic device, such as an electronic control unit of a vehicle, and these variations do not exceed the scope of protection of this disclosure.
[0038] By means of the method of the present invention, only legitimate external devices that know the access password and time window of the electronic device in advance can successfully access the electronic device, thereby improving the access security of the electronic device.
[0039] based on Figure 1 The principle of a method for protecting electronic equipment according to a specific embodiment of the present invention is as follows: Figure 2 A flowchart illustrating a method for protecting an electronic device according to another specific embodiment of the present invention is shown schematically. Figure 2 As shown:
[0040] First, each time the electronic device is powered on, it enters a verification state and begins timing.
[0041] If the timing duration t is less than the minimum time value T1 of the time window, and the electronic device receives a password verification command, the electronic device enters a verification failure state.
[0042] If the timing duration t is within the time window (i.e., the timing duration t is greater than or equal to the minimum time value T1 of the time window and less than or equal to the maximum time value T2 of the time window), and a password verification command is received from an external device, the electronic device performs password verification. If the verification is successful, the electronic device enters a successful verification state, thereby allowing the external device to access the device. If the verification fails, the electronic device enters a failed verification state.
[0043] If the timing duration t is greater than the maximum time value T2 of the time window, the electronic device enters the verification failure state.
[0044] Compared with the prior art, the method for protecting electronic devices according to embodiments of the present invention has at least the following advantages:
[0045] In this invention, a time window is set. Password verification will only be performed if the time elapsed since the electronic device entered the verification state is within the set time window. Furthermore, external devices are only allowed to access the device if the password verification is successful. This increases the difficulty for attackers to crack the password and improves the access security of the electronic device.
[0046] In this invention, when password verification fails, the electronic device enters a verification failure state where access is not allowed and password verification is not permitted. This prevents attackers from attacking the electronic device by repeatedly trying passwords, thereby improving the access security of the electronic device.
[0047] In this invention, if the timeout period from when the electronic device enters the verification state is less than the minimum time value of the time window, and a password verification command is received from an external device, the electronic device enters a verification failure state where access is not allowed and password verification is not permitted. This prevents attackers from attacking the electronic device by repeatedly trying passwords and improves the access security of the electronic device.
[0048] In this invention, if the timeout period from the start of the electronic device entering the verification state exceeds the maximum time value of the time window, the electronic device enters a verification failure state where access is not allowed and password verification is not permitted. This prevents attackers from attacking the electronic device by repeatedly trying passwords, thereby improving the access security of the electronic device.
[0049] In this invention, the password can include random numbers of any form, thereby further increasing the difficulty for attackers to crack the password and improving the access security of electronic devices.
[0050] In this invention, there is no need for a high-cost chip with hardware encryption function. Instead, the method of this invention can be implemented entirely in software, thus giving the method of the invention a low-cost advantage.
[0051] It should be noted that the above description is merely illustrative and not intended to limit the invention. In other embodiments of the invention, the method may have more, fewer, or different steps, and the order, inclusion, and functional relationships between the steps may differ from those described and illustrated. For example, multiple steps may typically be combined into a single step, or a single step may be split into multiple steps. For those skilled in the art, variations in the order of the steps are also within the scope of protection of this invention without inventive effort.
[0052] The technical solution of the present invention, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) or processor or microcontroller to execute all or part of the steps of the methods described in the various embodiments of the present invention.
[0053] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.
[0054] While the present invention has been disclosed above with reference to preferred embodiments, it is not limited thereto. Any modifications and alterations made by those skilled in the art without departing from the spirit and scope of the invention should be included within the scope of protection of the invention. Therefore, the scope of protection of the invention should be determined by the scope defined in the claims.
Claims
1. A method for protecting electronic equipment, characterized in that, The method includes: When the electronic device enters the verification state, the timer starts; If the electronic device receives a password verification command from an external device while the timing duration is within the set time window, it performs password verification, and if the verification is successful, the electronic device allows the external device to access the device.
2. The method according to claim 1, wherein, In the pending verification state, the electronic device only allows password verification.
3. The method according to claim 1, wherein, If the verification fails, the electronic device enters a verification failure state.
4. The method according to claim 1, wherein, If the electronic device receives the password verification command when the timing duration is less than the minimum time value of the time window, the electronic device enters a verification failure state.
5. The method according to claim 1, wherein, If the duration of the timeout exceeds the maximum time value of the time window, the electronic device enters a verification failure state.
6. The method according to any one of claims 3 to 5, wherein, In the state of verification failure, the electronic device is not allowed to access the device and is not allowed to perform password verification.
7. The method according to claim 1, wherein, Each time the electronic device is powered on, it enters a verification state.
8. The method according to claim 1, wherein, The password includes random numbers.
9. The method according to claim 1, wherein, The electronic device includes the vehicle's electronic control unit.