Vehicle-mounted communication system and automobile
By introducing data and power switch modules into the vehicle, the power and data supply to the external communication module is cut off, solving the problem of vulnerability of the external communication system to attacks and realizing secure communication and normal driving in extreme scenarios.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-01-06
- Publication Date
- 2026-04-07
AI Technical Summary
Vehicles' external communication systems are vulnerable to threats from extreme scenarios such as cyberattacks, ransomware, and unauthorized data uploads, which can affect driving safety and user privacy.
An in-vehicle communication system was designed, including an external communication module, a data switch module, and a local power supply switch module. The control module enables communication under normal conditions and cuts off the power supply and data supply to the external communication module in extreme scenarios, thereby achieving a highly isolated external communication function.
Protect vehicle data in extreme scenarios, prevent external communication modules from being hijacked, ensure normal in-vehicle communication, achieve the control effect of "only disconnecting the network, not locking the power", and ensure driving safety and privacy protection.
Smart Images
Figure CN121814802A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of automotive technology, and in particular to an in-vehicle communication system and an automobile. Background Technology
[0002] The environment in which a car is used is highly variable, and the situations encountered while driving are often unpredictable. In order for a car to be able to respond promptly to the complex situations brought about by the changing environment, it needs to transmit data with the outside world to achieve information sharing between the car and the outside world, which is conducive to the realization of car intelligence and energy conservation and environmental protection.
[0003] To enable data transmission between vehicles and the outside world, external communication systems are installed in cars. However, this also creates opportunities for extreme scenarios such as cyberattacks, ransomware, and unauthorized data uploads. For example, criminals could send malicious programs to the car's external communication system. When such malicious programs are executed, the car's functional components will malfunction, potentially even endangering driving safety. Criminals could also manipulate the car's external communication system to upload unwanted data such as real-time location information and driving recording videos, violating user privacy. Summary of the Invention
[0004] In view of at least one of the above-mentioned technical problems, the purpose of the present invention is to provide an in-vehicle communication system and an automobile.
[0005] On one hand, embodiments of the present invention include a vehicle-mounted communication system, the vehicle-mounted communication system comprising: External communication module; the external communication module is used to enable communication between the vehicle and the outside world; Communication bus; A data switch module is connected between the external communication module and the communication bus. The data switch module is configured to switchably operate in a first state or a second state. In the first state, the data switch module sends a first outgoing message from the communication bus to the external communication module. In the second state, the data switch module intercepts the first outgoing message from the communication bus from the external communication module. Power supply line; A local power supply switch module is connected between the external communication module and the power supply line. The local power supply switch module is used to switchably operate in a third state or a fourth state. In the third state, the local power supply switch module connects the power supply line to supply power to the external communication module, and in the fourth state, the local power supply switch module disconnects the power supply line from supplying power to the external communication module.
[0006] Furthermore, the vehicle communication system also includes: Control module; the control module is used to control the operating status of the data switch module and the local power supply switch module.
[0007] Furthermore, controlling the operating state of the data switch module and the local power supply switch module includes: Detect trigger events; the trigger events include a first trigger event and a second trigger event; When the second triggering event is not detected, or when the first triggering event is detected, the data switch module is controlled to operate in the first state, and the local power supply switch module is controlled to operate in the third state; When the second trigger event is detected, the data switch module is controlled to operate in the second state, and the local power supply switch module is controlled to operate in the fourth state.
[0008] Furthermore, the detection trigger event includes: Detect user operation commands or commands sent from the cloud; When the user operation command or the cloud-issued command is detected, it is determined that the second triggering event has been detected; After the second triggering event is detected, a timer is executed to obtain a dynamically accumulated time value; When the timing value reaches the timing threshold, it is determined that the first triggering event has been detected.
[0009] Further, the interception of the first outgoing message in the communication bus by the external communication module includes: Receive the first outgoing message from the communication bus; Discard the first outgoing message.
[0010] Furthermore, the vehicle communication system also includes: Multiple internal communication nodes; each internal communication node is mounted on the communication bus, and the internal communication nodes communicate with each other and with the external communication module through the communication bus.
[0011] Further, the interception of the first outgoing message in the communication bus by the external communication module includes: Receive the first outgoing message from the communication bus; Multiple internal communication nodes are invoked to perform distributed storage of the first outgoing message.
[0012] Furthermore, the step of invoking multiple internal communication nodes to perform distributed storage of the first outgoing message includes: The first outgoing message is processed into data blocks to obtain multiple first data blocks; Establish a one-to-one correspondence between each of the first data blocks and each of the internal communication nodes; Each of the first data blocks is sent back to the communication bus and then transmitted to a corresponding internal communication node via the communication bus.
[0013] Furthermore, the data switch module is also used for: When switching from the second state to the first state, the second data block of the distributed storage is used as the query target to traverse and query each of the internal communication nodes. For the internal communication node where the second data block is found, the second data block is read from the internal communication node through the communication bus; The read second data blocks are merged to obtain the second outgoing message; The second outgoing message is sent to the external communication module.
[0014] On the other hand, embodiments of the present invention also include a vehicle, the vehicle including the in-vehicle communication system described in the embodiments.
[0015] The beneficial effects of this invention are as follows: The vehicle communication system in the embodiments, by setting a data switch module that can switch between working in the first or second state, and a local power supply switch module that can switch between working in the third or fourth state, can ensure that the external communication module can communicate with the outside world of the vehicle under normal circumstances. However, in the event of a second triggering event (specifically, extreme scenarios such as network attacks, ransomware, and unauthorized data uploads), the power supply and data supply to the external communication module are cut off, thereby achieving a high degree of disconnection of the external communication module's external communication function. This prevents the external communication module from being hijacked and sending data to the outside world, and also prevents continuous attacks on the external communication module from the outside world. It can effectively meet the needs of protecting vehicle data and resisting network attacks in extreme scenarios, while ensuring the normal operation of communication between in-vehicle components. Users can still drive the car or use the functions of in-vehicle components normally, achieving a fine-grained control effect of "only disconnecting the network, not locking the power". Attached Figure Description
[0016] Figure 1 This is a schematic diagram of the basic structure of the vehicle communication system in the embodiment; Figure 2 This is a schematic diagram illustrating the working state and switching of the vehicle communication system in the embodiment; Figure 3 This is a schematic diagram illustrating the principle that the data switch module operates in the first state and the local power supply switch module operates in the third state in the embodiment. Figure 4 This is a schematic diagram illustrating the principle that the data switch module operates in the second state and the local power supply switch module operates in the fourth state in the embodiment. Figure 5 This is a schematic diagram of the internal communication nodes when the data switch module is working in the second state and the local power supply switch module is working in the fourth state in the embodiment. Figure 6 This is a schematic diagram of the control flow of the vehicle communication system in the embodiment; Figure 7 This is a schematic diagram of the control timing of the vehicle communication system in the embodiment. Detailed Implementation
[0017] This embodiment provides a vehicle-mounted communication system. The basic structure of the vehicle-mounted communication system is as follows: Figure 1 As shown. (Refer to...) Figure 1 The vehicle communication system includes components such as an external communication module, a communication bus, a data switch module, a power supply line, and a local power supply switch module.
[0018] The external communication module is the component that enables communication between the vehicle and the outside world. For example, an external communication module can be a T-BOX (Telematics Box), which includes an antenna and related baseband and power supply circuits. The communication bus is the vehicle's overall communication bus, through which data exchange between various vehicle components occurs. For example, the communication bus can be a CAN (Controller Area Network). When a vehicle component needs to communicate with the outside world, it can send data (the first outgoing message) to the external communication module T-BOX via the CAN bus. The external communication module T-BOX then transmits the data via radio signals, enabling communication between the vehicle and the outside world.
[0019] Reference Figure 1 The external communication module is powered by a power supply line. This power supply line can be either a dedicated line or a busbar, providing a 12V power supply to the external communication module.
[0020] In this embodiment, the data switch module is connected between the external communication module and the communication bus. Specifically, the data switch module can be a CAN firewall. The first outgoing message sent to the data switch module via the CAN communication bus is first received by the data switch module. The data switch module has two operating states, specifically a first state and a second state. The data switch module can switch between operating in the first state and the second state. For example, at any given time, the data switch module is operating in the second state, but can switch to operating in the first state automatically or under external triggering. Specifically, in the first state, the data switch module sends the first outgoing message from the communication bus to the external communication module; in the second state, the data switch module intercepts the first outgoing message from the communication bus for the external communication module.
[0021] In this embodiment, a local power supply switch module is connected between the external communication module and the power supply line. Specifically, the local power supply switch module can be a MOSFET (Metal Oxide Semiconductor Field Effect Transistor) or other component with switching functionality. Specifically, the source of the MOSFET-type local power supply switch module can be connected to the power supply line, the drain to the external communication module, and the gate serves as the control terminal of the local power supply switch module. Depending on the applied level to the gate, the local power supply switch module has two operating states: a third state and a fourth state. The local power supply switch module can switch between operating in the third state and the fourth state. For example, at any given time, the local power supply switch module is operating in the third state, and can automatically switch to operating in the fourth state or be triggered externally. In the third state, the local power supply switch module connects the power supply line to the external communication module; in the fourth state, the local power supply switch module disconnects the power supply line from the external communication module.
[0022] Therefore, the data switch module and the local power supply switch module serve as switches between the external communication module T-BOX and the communication bus CAN and the power supply line, respectively. The data switch module can cut off or connect the data supply to the external communication module T-BOX, and the local power supply switch module can cut off or connect the power supply to the external communication module T-BOX. Since the basic function of the external communication module T-BOX is to enable communication between the vehicle and the outside world, the external communication module T-BOX can only perform its basic function when it receives power from the power supply line and data transmitted from the CAN communication bus. Therefore, the external communication module T-BOX can only operate and enable communication between the vehicle and the outside world when the data switch module is in the first state and the local power supply switch module is in the third state. The external communication module T-BOX cannot operate and enable communication between the vehicle and the outside world when the data switch module is in the first state and the local power supply switch module is in the fourth state, or when the data switch module is in the second state and the local power supply switch module is in the third state, etc. Furthermore, the external communication module T-BOX cannot operate and enable communication between the vehicle and the outside world when the data switch module is in the second state and the local power supply switch module is in the fourth state, etc. This further reduces the possibility of the external communication module T-BOX resuming operation due to false triggering or illegal hijacking.
[0023] In this embodiment, based on Figure 1 The structure shown can achieve Figure 2 The diagram shows the switching between different working states. (Refer to...) Figure 2 Upon detecting a second event (e.g., detecting a user operation command, specifically a driver long-pressing or repeatedly pressing a physical button, or receiving a command from the cloud, specifically a PKI signature command sent from the cloud to the vehicle), the system controls the data switch module to operate in the second state and the local power supply switch module to operate in the fourth state. Then, it continuously detects trigger events (e.g., timing can be performed), and upon detecting a first event (e.g., the timing value reaches the timing threshold), it controls the data switch module to operate in the first state and the local power supply switch module to operate in the third state.
[0024] In this embodiment, a control module can be configured to control the operating states of the data switch module and the local power supply switch module. Specifically, the control module can perform the following steps: S1. Detect the triggered event; S2. When no second trigger event is detected, or when the first trigger event is detected, the control data switch module operates in the first state, and the control local power supply switch module operates in the third state; S3. When the second trigger event is detected, the control data switch module operates in the second state, and the control local power supply switch module operates in the fourth state.
[0025] In step S1, the triggering events to be detected include a first triggering event and a second triggering event. Specifically, the first triggering event is "execute timing, obtain a dynamically accumulated timing value, and when the timing value reaches a timing threshold (e.g., 2 hours, or can be configured to any value between 15 minutes and 24 hours)". The second triggering event is "detect user operation commands or commands issued from the cloud".
[0026] In step S2, if no second triggering event is detected, namely "detecting user operation commands or cloud-issued commands", then... Figure 3 As shown, the control module controls the data switch module to operate in the first state and controls the local power supply switch module to operate in the third state. In this state, the external communication module T-BOX is connected to the power supply line to obtain power and thus operate normally. At the same time, when the data switch module (CAN firewall) receives the first outgoing message destined for the external communication module T-BOX from the communication bus CAN, the data switch module (CAN firewall) will send the first outgoing message to the external communication module T-BOX, so that the external communication module T-BOX can send the first outgoing message to the outside world through the wireless communication protocol, realizing communication between the car and the outside world.
[0027] When a user discovers or the system detects extreme scenarios such as network attacks, ransomware, or unauthorized data uploads, the user can repeatedly tap or long-press a physical button to allow the control module to receive user operation commands, or the cloud can send a PKI signature command to the car, allowing the control module to receive commands from the cloud. The receipt of these two commands is recognized as a second triggering event, thus triggering step S3. For example... Figure 4 As shown, by executing step S3, the control module controls the data switch module to operate in the second state and controls the local power supply switch module to operate in the fourth state. In this state, the connection between the external communication module T-BOX and the power supply line is cut off, thus preventing it from receiving power and stopping operation. Specifically, the baseband circuit, feed circuit, and antenna in the external communication module T-BOX also stop operating due to lack of power. Simultaneously, when the data switch module (CAN firewall) receives the first outgoing message destined for the external communication module T-BOX from the CAN communication bus, the data switch module (CAN firewall) intercepts the first outgoing message, preventing it from being sent to the external communication module T-BOX. In this way, the external communication module T-BOX neither receives power nor receives the first outgoing message that needs to be sent, thereby achieving a complete cutoff of communication between the vehicle and the outside world.
[0028] In this embodiment, refer to Figure 5The CAN communication bus can also connect multiple internal communication nodes. These internal communication nodes can be various sensors and controllable components installed on the vehicle, such as windows and wipers. These internal communication nodes are all connected to the CAN communication bus, enabling communication between the internal communication nodes and between the internal communication nodes and the external communication module T-BOX [if the data switch module (CAN firewall) is in the first state] via the CAN communication bus. When the control module executes step S3, only the power and data supply to the external communication module T-BOX is cut off, while the internal communication nodes still receive power and data, thus enabling communication via the CAN communication bus. In other words, when the control module executes step S3, it only cuts off the vehicle's communication with the outside world, while in-vehicle communication is maintained normally.
[0029] In this embodiment, after the control module detects the second trigger event and executes step S3, it can immediately start timing to obtain a dynamically accumulated timing value. The control module detects whether the first trigger event, i.e., "the timing value has reached the timing threshold," has occurred. If the first trigger event is detected, the control module will jump to step S2, thereby switching the vehicle communication system to... Figure 3 As shown, the power and data supply to the external communication module T-BOX is restored, enabling the T-BOX to function normally in communicating with the outside world. Thus, after detecting the second trigger event and executing step S3 to cut off communication between the vehicle and the outside world, the external communication module's external communication function can be automatically restored through timing.
[0030] In this embodiment, by setting a data switch module that can switch between working in the first or second state, and a local power supply switch module that can switch between working in the third or fourth state, the external communication module can be guaranteed to communicate with the outside world of the vehicle under normal circumstances. However, in the event of a second triggering event (which may correspond to extreme scenarios such as network attacks, ransomware, and unauthorized data uploads), the power and data supply to the external communication module is cut off, thereby achieving a high degree of disconnection of the external communication module's external communication function. This can effectively meet the protection requirements of vehicle data in extreme scenarios, while ensuring the normal operation of communication of in-vehicle components. Users can still drive the car or use the functions of in-vehicle components normally, achieving a fine-grained control effect of "only disconnecting the network, not locking the power".
[0031] According to the above embodiment, when the control module controls the data switch module (CAN firewall) to switch to the second state, the data switch module (CAN firewall) performs the following steps: S4. Intercept the first outgoing message in the communication bus of the external communication module.
[0032] In this embodiment, when the data switch module (CAN firewall) executes step S4, which is the step of intercepting the first outgoing message in the communication bus by the external communication module, it can specifically perform the following steps: S401A. Receives the first outgoing message from the communication bus; S402A. Discard the first outgoing message.
[0033] Steps S401A-S402A are the first execution method of step S4.
[0034] In step S401A, the first outgoing message sent to the external communication module T-BOX (which may be sent by an internal communication node) will be received by the data switch module (CAN firewall) via the communication bus.
[0035] In step S402A, the data switch module (CAN firewall) does not send the received first outgoing message to the external communication module T-BOX, so that the external communication module T-BOX will not receive the first outgoing message. Moreover, the data switch module (CAN firewall) discards the first outgoing message, for example, by deleting the first outgoing message locally from the data switch module (CAN firewall).
[0036] After executing steps S401A-S402A, the data switch module (CAN firewall) can also send feedback information to the data source of the first outgoing message (such as the internal communication node that sent the first outgoing message) via the CAN data bus. The feedback information may specifically state that the first outgoing message has been discarded by the data switch module (CAN firewall), allowing the data source of the first outgoing message to perform buffering and retransmission of the first outgoing message, and wait for the external communication module T-BOX to resume operation before retransmitting the first outgoing message, thus ensuring the success rate of the first outgoing message transmission.
[0037] In this embodiment, by executing steps S401A-S402A, the first outgoing message in the communication bus can be intercepted, so that when the data switch module (CAN firewall) is in the second state, the external communication module T-BOX will not receive the first outgoing message.
[0038] In this embodiment, when the data switch module (CAN firewall) executes step S4, which is the step of intercepting the first outgoing message in the communication bus by the external communication module, it can specifically perform the following steps: S401B. Receives the first outgoing message from the communication bus; S402B calls multiple internal communication nodes to perform distributed storage of the first outgoing message.
[0039] Steps S401B-S402B are the second execution method of step S4.
[0040] The principle of step S401B is the same as that of step S401A. The first outgoing message sent to the external communication module T-BOX (which may be sent by an internal communication node) will be received by the data switch module (CAN firewall) through the communication bus.
[0041] During step S402B, the data switch module (CAN firewall) can perform data block processing on the first outgoing message to obtain multiple first data blocks. Specifically, the number of blocks does not need to exceed the number of internal communication nodes. For example, refer to... Figure 5 The first outgoing message can be divided into first data blocks, such as first data block 1, first data block 2, first data block 3, first data block 4, and first data block 5, and a one-to-one correspondence is established between each first data block and each internal communication node. For example, first data block 1, first data block 2, first data block 3, first data block 4, and first data block 5 correspond to internal communication node 1, internal communication node 2, internal communication node 3, internal communication node 4, and internal communication node 5, respectively. Finally, the data switch module (CAN firewall) sends each first data block back to the communication bus and transmits it to the corresponding internal communication node through the communication bus. For example, first data block 1 is transmitted to internal communication node 1 through the CAN communication bus, first data block 2 is transmitted to internal communication node 2 through the CAN communication bus, first data block 3 is transmitted to internal communication node 3 through the CAN communication bus, first data block 4 is transmitted to internal communication node 4 through the CAN communication bus, and first data block 5 is transmitted to internal communication node 5 through the CAN communication bus. Internal communication node 1, internal communication node 2, internal communication node 3, internal communication node 4 and internal communication node 5 respectively store the received first data block 1, first data block 2, first data block 3, first data block 4 and first data block 5.
[0042] In this embodiment, the data switch module (CAN firewall) can select all internal communication nodes to participate in distributed storage, or it can select internal communication nodes other than the data source that sends the first outgoing message. Furthermore, during step S402B, it can detect the idle level of each internal communication node and select the internal communication nodes with the highest idle levels to participate in distributed storage. The internal communication nodes participating in distributed storage are those that will receive the corresponding first data block from the data switch module (CAN firewall). By selecting internal communication nodes other than the data source that sends the first outgoing message to participate in distributed storage, the backflow of the first outgoing message can be avoided, thereby reducing the unnecessary occupation of the CAN communication bus and improving communication efficiency. By selecting the internal communication nodes with the highest idle levels to participate in distributed storage, load balancing among the internal communication nodes can be achieved, which also helps to improve communication efficiency.
[0043] In this embodiment, the data switch module (CAN firewall) can encrypt each data block separately before sending them. Different data blocks can be encrypted using different keys. For example, keys 1, 2, 3, 4, and 5 can be generated. Key 1 is used to encrypt the first data block 1, key 2 to encrypt the first data block 2, key 3 to encrypt the first data block 3, key 4 to encrypt the first data block 4, and key 5 to encrypt the first data block 5. In this way, the first data blocks 1, 2, 3, 4, and 5 sent by the data switch module (CAN firewall) to the various internal communication nodes for distributed storage are all in encrypted form. This helps to resist concentrated saturation attacks in extreme scenarios, meaning that the compromise of a single node will not lead to the leakage of data from other nodes.
[0044] After executing steps S401B-S402B, the data switch module (CAN firewall) can also delete the first outgoing message locally from the data switch module (CAN firewall), so that the data switch module (CAN firewall) does not store the first outgoing message, and only multiple internal communication nodes store the data blocks related to the first outgoing message.
[0045] After executing steps S401B-S402B, the data switch module (CAN firewall) can also send feedback information to the data source of the first outgoing message (such as the internal communication node that sent the first outgoing message) via the CAN data bus. The specific content of the feedback information may be that the first outgoing message has been processed by the data switch module (CAN firewall) through distributed storage.
[0046] In this embodiment, by executing steps S401B-S402B, when the data switch module (CAN firewall) switches to the second state, the first outgoing message targeting the external communication module T-BOX is not sent to the external communication module T-BOX, nor is the first outgoing message stored locally on the data switch module (CAN firewall) or returned to the data source for separate storage. Instead, the first outgoing message is distributed and stored across multiple internal communication nodes. This approach effectively addresses situations where the data switch module (CAN firewall) switches to the second state. Specifically, the data switch module (CAN firewall) typically switches to the second state in extreme scenarios such as network attacks, ransomware, and unauthorized data uploads. Therefore, in addition to external communication... Individual components such as the T-BOX module, data switch module (CAN firewall), and various internal communication nodes are also vulnerable to concentrated saturation attacks in extreme scenarios. Such attacks typically target the first outgoing message. If the first outgoing message is stored in a single component [such as the data switch module (CAN firewall) or a single internal communication node], it faces a significant risk of data leakage. However, by distributing the first outgoing message across multiple internal communication nodes, the risk of attack on the first outgoing message in extreme scenarios can be effectively dispersed. This further reduces the risk of concentrated saturation attacks, even when the external communication module T-BOX is protected from external communication failures, thus achieving higher data security.
[0047] In this embodiment, by executing steps S401B-S402B, each internal communication node that stores a specific outgoing message (e.g., the first outgoing message) may also be the data source for other outgoing messages (e.g., the third outgoing message) sent to the external communication module T-BOX. Moreover, the internal communication node itself is also a component with its own function. Therefore, the distributed storage of the first outgoing message implemented by executing steps S401B-S402B realizes the reuse of the data source of the message data sent by the external communication module T-BOX. There is no need to set up a dedicated distributed storage device, which helps to reduce hardware complexity and reduce usage costs.
[0048] In this embodiment, the data switch module (CAN firewall) also performs the following steps: S5. When switching from the second state to the first state, the second data block of the distributed storage is used as the query target, and the internal communication nodes are traversed and queried. S6. For the internal communication node that has queried the second data block, read the second data block from the internal communication node through the communication bus; S7. Merge the read second data blocks to obtain the second outgoing message; S8. Send the second outgoing message to the external communication module.
[0049] In step S5, when the data switch module (CAN firewall) switches from the second state to the first state, it indicates that the local power supply switch module also switches from the fourth state to the third state, meaning that the external communication module T-BOX resumes its external communication function. The data switch module (CAN firewall) uses the second data block in distributed storage as the query target and traverses and queries each internal communication node. For example, if the data switch module (CAN firewall) executes step S5 after executing steps S401B-S402B, then the second data block could be the first data block that was distributed and stored during step S4.
[0050] In step S5, the data switch module (CAN firewall) iterates through each internal communication node, querying the second data block stored in the internal communication nodes by the data switch module (CAN firewall) through distributed storage. For any internal communication node, if the stored second data block is found, the data switch module (CAN firewall) requests to read the stored second data block from that internal communication node. The internal communication node then sends its locally stored second data block to the data switch module (CAN firewall) via the CAN communication bus.
[0051] By traversing all internal communication nodes, the data switch module (CAN firewall) can read all the second data blocks that were sent to multiple internal communication nodes for storage in the same distributed storage (e.g., all the first data blocks sent to multiple internal communication nodes for storage in the same execution steps S401B-S402B).
[0052] In step S7, the data switch module (CAN firewall) performs data merging processing on each read second data block to obtain a second outgoing message. Specifically, the data merging processing is the reverse of the data block processing in step S402B, and can merge all second data blocks generated in the same distributed storage to restore the corresponding second outgoing message. When each second data block is a first data block, the second outgoing message processed by merging in step S7 is the first outgoing message before steps S401B-S402B.
[0053] By executing steps S5-S7, it is possible to read each data block from each internal communication node and recover the outgoing message when the outgoing message is stored in each internal communication node by performing distributed storage.
[0054] In step S8, the data switch module (CAN firewall) sends the second outgoing message obtained in steps S5-S7 to the external communication module T-BOX.
[0055] By executing steps S5-S8, the data switch module (CAN firewall) can continue the execution results of distributed storage after the external communication module T-BOX has restored its external communication function. It then restores the second outgoing message and sends it to the external communication module T-BOX. This allows the external communication module T-BOX to obtain and send the second outgoing message after a period of disconnection and restoration of external communication function. For the external receiving target of the second outgoing message, this is equivalent to a delayed receipt of the second outgoing message, ensuring its successful transmission. For the internal data source of the second outgoing message (e.g., an internal communication node that sends the second outgoing message), there is no need for the internal data source to perform buffering and retransmission of the second outgoing message. In other words, the distributed storage, restoration, and retransmission processes of the second outgoing message are transparent to the internal data source, thus reducing its burden.
[0056] The control flow of the vehicle communication system in this embodiment is as follows: Figure 6 As shown, its control timing is as follows Figure 7 As shown. (Refer to...) Figure 6 and Figure 7 In this embodiment, the vehicle communication system can highly cut off the external communication function of the external communication module T-BOX when a second triggering event is detected (usually corresponding to extreme scenarios such as network attacks, ransomware, and unauthorized data uploads), thus protecting communication security. It can also detect the first triggering event by timing and restore the external communication function of the external communication module T-BOX when the first triggering event is detected, thereby realizing the self-recovery of the external communication function of the external communication module T-BOX.
[0057] Reference Figure 6 and Figure 7 During the timing process, the control module can also detect the early recovery command from the cloud. If the early recovery command is detected, it requests the user's secondary signature and button confirmation. If the secondary signature and button confirmation are obtained, in response to the early recovery command, even if the timing value has not yet reached the timing threshold, it controls the data switch module to switch to the first state and controls the local power supply switch module to switch to the third state, thereby restoring the external communication function of the T-BOX external communication module.
[0058] In summary, the vehicle communication system in this embodiment equips the vehicle with a "timed self-recovering hardware disconnection button," allowing the driver or the cloud to instantly make the entire vehicle invisible with a single click, automatically reconnecting after the time is up. This not only prevents hacking but also preserves power, creating a "safety escape window" for vehicle communication.
[0059] The vehicle communication system in this embodiment can be installed on a car, forming a complete vehicle assembly together with other car components. Such a car possesses all the technical effects of a vehicle communication system.
[0060] It should be noted that, unless otherwise specified, when a feature is referred to as "fixed" or "connected" to another feature, it can be directly fixed or connected to the other feature, or indirectly fixed or connected to the other feature. Furthermore, the descriptions of "upper," "lower," "left," and "right" used in this disclosure are only relative to the relative positional relationships of the components of this disclosure in the accompanying drawings. The singular forms "a," "an," and "the" used in this disclosure are also intended to include the plural forms, unless the context clearly indicates otherwise. Moreover, unless otherwise defined, all technical and scientific terms used in this embodiment have the same meaning as commonly understood by one of ordinary skill in the art. The terminology used in this embodiment specification is only for describing particular embodiments and is not intended to limit the invention. The term "and / or" as used in this embodiment includes any combination of one or more of the associated listed items.
[0061] It should be understood that although the terms first, second, third, etc., may be used to describe various elements in this disclosure, these elements should not be limited to these terms. These terms are only used to distinguish elements of the same type from each other. For example, a first element may also be referred to as a second element without departing from the scope of this disclosure, and similarly, a second element may also be referred to as a first element. The use of any and all instances or exemplary language (“e.g.,” “such as,” etc.) provided in this embodiment is intended only to better illustrate embodiments of the invention and, unless otherwise required, does not impose a limitation on the scope of the invention.
[0062] It should be recognized that embodiments of the present invention can be implemented or carried out by computer hardware, a combination of hardware and software, or by computer instructions stored in a non-transitory computer-readable storage medium. The method can be implemented using standard programming techniques—including a non-transitory computer-readable storage medium configured with a computer program, wherein such a storage medium causes the computer to operate in a specific and predefined manner—according to the methods and drawings described in the specific embodiments. Each program can be implemented in a high-level procedural or object-oriented programming language to communicate with the computer system. However, if desired, the program can be implemented in assembly or machine language. In any case, the language can be a compiled or interpreted language. Furthermore, for this purpose, the program can run on a programmed application-specific integrated circuit (ASIC).
[0063] Furthermore, the procedures described in this embodiment can be performed in any suitable order unless otherwise indicated by this embodiment or otherwise obviously contradict the context. The procedures (or variations and / or combinations thereof) described in this embodiment can be executed under the control of one or more computer systems configured with executable instructions, and can be implemented by hardware or a combination thereof as code (e.g., executable instructions, one or more computer programs, or one or more applications) that commonly executes on one or more processors. A computer program includes a plurality of instructions executable by one or more processors.
[0064] Furthermore, the method can be implemented in any suitable type of computing platform, including but not limited to personal computers, minicomputers, mainframes, workstations, networked or distributed computing environments, standalone or integrated computer platforms, or in communication with charged particle tools or other imaging devices, etc. Aspects of the invention can be implemented as machine-readable code stored on a non-transitory storage medium or device, whether removable or integrated into a computing platform, such as a hard disk, optical read and / or write storage medium, RAM, ROM, etc., such that it is readable by a programmable computer, and when the storage medium or device is read by the computer, it can be used to configure and operate the computer to perform the processes described herein. Furthermore, the machine-readable code, or portions thereof, can be transmitted via wired or wireless networks. The invention of this embodiment includes these and other different types of non-transitory computer-readable storage media when such media comprises instructions or programs that implement the steps above in conjunction with a microprocessor or other data processor. When programmed according to the methods and techniques of the invention, the invention also includes the computer itself.
[0065] A computer program can be applied to input data to perform the functions of this embodiment, thereby transforming the input data to generate output data stored in non-volatile memory. The output information can also be applied to one or more output devices, such as a display. In a preferred embodiment of the invention, the transformed data represents physical and tangible objects, including specific visual depictions of physical and tangible objects generated on the display.
[0066] The above are merely preferred embodiments of the present invention. The present invention is not limited to the above-described embodiments. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention, as long as they achieve the technical effects of the present invention by the same means, should be included within the scope of protection of the present invention. Within the scope of protection of the present invention, the technical solutions and / or implementation methods can have various modifications and variations.
Claims
1. A vehicle-mounted communication system, characterized in that, The vehicle-mounted communication system includes: External communication module; the external communication module is used to enable communication between the vehicle and the outside world; Communication bus; A data switch module is connected between the external communication module and the communication bus. The data switch module is configured to switchably operate in a first state or a second state. In the first state, the data switch module sends a first outgoing message from the communication bus to the external communication module. In the second state, the data switch module intercepts the first outgoing message from the communication bus from the external communication module. Power supply line; A local power supply switch module is connected between the external communication module and the power supply line. The local power supply switch module is used to switchably operate in a third state or a fourth state. In the third state, the local power supply switch module connects the power supply line to supply power to the external communication module, and in the fourth state, the local power supply switch module disconnects the power supply line from supplying power to the external communication module.
2. The vehicle-mounted communication system according to claim 1, characterized in that, The vehicle-mounted communication system also includes: Control module; the control module is used to control the operating status of the data switch module and the local power supply switch module.
3. The vehicle-mounted communication system according to claim 2, characterized in that, The control of the operating states of the data switch module and the local power supply switch module includes: Detect trigger events; the trigger events include a first trigger event and a second trigger event; When the second triggering event is not detected, or when the first triggering event is detected, the data switch module is controlled to operate in the first state, and the local power supply switch module is controlled to operate in the third state; When the second trigger event is detected, the data switch module is controlled to operate in the second state, and the local power supply switch module is controlled to operate in the fourth state.
4. The vehicle-mounted communication system according to claim 3, characterized in that, The detection trigger events include: Detect user operation commands or commands sent from the cloud; When the user operation command or the cloud-issued command is detected, it is determined that the second triggering event has been detected; After the second triggering event is detected, a timer is executed to obtain a dynamically accumulated time value; When the timing value reaches the timing threshold, it is determined that the first triggering event has been detected.
5. The vehicle-mounted communication system according to claim 1, characterized in that, The interception of the first outgoing message in the communication bus by the external communication module includes: Receive the first outgoing message from the communication bus; Discard the first outgoing message.
6. The vehicle-mounted communication system according to any one of claims 1-5, characterized in that, The vehicle-mounted communication system also includes: Multiple internal communication nodes; each internal communication node is mounted on the communication bus, and the internal communication nodes communicate with each other and with the external communication module through the communication bus.
7. The vehicle-mounted communication system according to claim 6, characterized in that, The interception of the first outgoing message in the communication bus by the external communication module includes: Receive the first outgoing message from the communication bus; Multiple internal communication nodes are invoked to perform distributed storage of the first outgoing message.
8. The vehicle-mounted communication system according to claim 7, characterized in that, The step of calling multiple internal communication nodes to perform distributed storage of the first outgoing message includes: The first outgoing message is processed into data blocks to obtain multiple first data blocks; Establish a one-to-one correspondence between each of the first data blocks and each of the internal communication nodes; Each of the first data blocks is sent back to the communication bus and then transmitted to a corresponding internal communication node via the communication bus.
9. The vehicle-mounted communication system according to claim 8, characterized in that, The data switch module is also used for: When switching from the second state to the first state, the second data block of the distributed storage is used as the query target to traverse and query each of the internal communication nodes. For the internal communication node where the second data block is found, the second data block is read from the internal communication node through the communication bus; The read second data blocks are merged to obtain the second outgoing message; The second outgoing message is sent to the external communication module.
10. A car, characterized in that, The vehicle includes the in-vehicle communication system according to any one of claims 1-9.