A domain control unit dynamic routing control method and system

Abstract

The application provides a kind of domain control unit dynamic routing control method and system, method includes in response to the handshake authentication success of TBOX and IVI, activate dynamic routing switch on IVI;Receive diagnostic command containing routing mode identifier (FF01 / FF02) and subfunction network segment identifier;After security authentication, parse command;Execute dynamic routing: mode one activates variable byte bidirectional routing, allows non-fixed length diagnostic request data between OBD CAN and target network segment routing;Mode two activates one-way routing, routes other network segment data to OBD CAN, and shields OBD CAN sleep strategy.The application realizes safe, flexible, efficient CAN data acquisition by multiple security authentication, double-mode dynamic routing and sleep shielding, compatible with various diagnostic equipment, and does not affect vehicle network sleep.

Description

Technical Field

[0001] This invention belongs to the technical field of intelligent connected vehicle network communication and information security, specifically relating to a dynamic routing control method and system for a domain control unit. Background Technology

[0002] With the profound evolution of intelligent connected vehicles and software-defined vehicles, and driven by regulations, standards, market access, and information security incidents, information security is emerging in a new form of "product value." Automobiles face numerous information security threats. Security threats at the in-vehicle terminal node layer include security threats from TBOX, IVI, terminal upgrades, in-vehicle operating systems, as well as risks associated with OBD access and in-vehicle wireless sensors.

[0003] Among these, the risks associated with the On-Board Diagnostic (OBD) interface are particularly prominent. The OBD interface is the only interface through which the vehicle's ECU interacts with the outside world. It can read information from the ECU, the vehicle's current status, fault codes, and test preset vehicle behaviors, such as window operation and engine shutdown. Due to information security requirements, the OBD interface directly connects to the domain control unit and interacts with other controllers within the vehicle, rather than directly connecting to the CAN bus. This makes it difficult for external parties to obtain in-vehicle data, posing significant challenges to data collection during factory operations and after-sales maintenance.

[0004] Furthermore, for energy and power-related data, calibration tools are required for data acquisition. For example, the diagnostic commands sent by the INCA tool during data acquisition are non-fixed-byte diagnostic request commands. However, existing domain control units only support fixed-byte data routing, further increasing the difficulty of CAN data acquisition. Both of these situations often require wire breaking to connect the device, directly impacting the efficiency and simplicity of fault diagnosis.

[0005] Existing technologies, such as the data acquisition method disclosed in patent CN201511008405.0, have the following drawbacks: The proposed data acquisition method does not consider the data acquisition needs during sleep mode anomalies. If data continues to be routed via OBD CAN on other network segments after power-off, bus data cannot sleep mode, and the acquired data will lack a reference for problem analysis because it will be impossible to distinguish whether the failure to sleep mode is due to a real network anomaly or data acquisition issues.

[0006] The data collection permissions are too open, which does not meet the requirements of information security and makes it easy for relevant vehicle data to be stolen, posing a serious security risk.

[0007] This solution is limited to general diagnostic equipment. If the diagnostic equipment is not readily available, the data acquisition function cannot be switched, which limits its operability and application scenarios.

[0008] This solution cannot support variable byte data routing requirements issued by calibration tools such as INCA, and cannot collect and analyze variable data routing requirements under special circumstances, making it difficult to carry out professional calibration and diagnostic work.

[0009] Therefore, there is an urgent need for a dynamic routing control method for domain control units that can meet information security regulations, flexibly support variable byte data routing, not affect the vehicle network sleep strategy, and be easy to operate. Summary of the Invention

[0010] To address the aforementioned technical issues, this invention proposes a dynamic routing control method and system for a domain control unit. Through multiple security authentications, dual-mode dynamic routing, and sleep strategy optimization, it achieves safe, flexible, and efficient in-vehicle network data acquisition and routing, significantly improving fault diagnosis efficiency, meeting the acquisition needs of different devices, and offering simple and convenient operation.

[0011] In a first aspect, the present invention provides the following technical solution: a dynamic routing control method for a domain control unit, comprising: Upon successful handshake authentication between the remote control module and the in-vehicle infotainment system module, the dynamic routing function switch on the in-vehicle infotainment system module is activated. Receive a diagnostic routing control command from the in-vehicle infotainment system module, the diagnostic routing control command including a routing mode identifier and a sub-functional network segment identifier; The diagnostic routing control command is securely authenticated, and the routing mode identifier and the sub-functional network segment identifier are parsed after successful authentication. Based on the parsing results, a dynamic routing operation is performed, which includes: In the first dynamic routing mode, in response to the routing mode identifier being a first preset value, the variable byte data routing function is activated, allowing non-fixed-length diagnostic request data on the source network segment diagnostic CAN bus to be routed to the target network segment, and supporting the routing of response data from the target network segment back to the source network segment diagnostic CAN bus. The second dynamic routing mode, in response to the routing mode identifier being a second preset value, activates the unidirectional data routing function, allowing CAN bus data from at least one other functional network segment to be routed to the source network segment diagnostic CAN bus.

[0012] Compared to existing technologies, the advantages of this invention are as follows: This invention constructs a multi-layered security protection system through remote handshake security authentication between the TBOX and IVI, and diagnostic command security authentication between the IVI and the domain control unit, effectively preventing the illegal theft of vehicle data and meeting information security regulations and standards. By designing a first dynamic routing mode (Mode 1) and a second dynamic routing mode (Mode 2), flexible adaptation to different data acquisition scenarios is achieved: Mode 1 supports bidirectional routing of variable byte data, perfectly adapting to non-fixed byte diagnostic commands from calibration tools such as INCA; Mode 2 supports unidirectional routing of data from other network segments to OBD CAN, facilitating data acquisition by general CAN devices. Simultaneously, Mode 2 shields the impact of the OBD CAN network segment on the domain control unit's sleep strategy during execution, avoiding the abnormal problem of the vehicle failing to sleep due to data acquisition, ensuring that the acquired data accurately reflects the fault state under abnormal sleep scenarios. Furthermore, this invention can be triggered via a soft switch on the IVI and supports remote activation via the TBOX in the background, offering strong operability, a simple and convenient solution, no need for dedicated communication CAN equipment, strong versatility, and compatibility with various CAN device software such as CANOE / CANLYZER / VSPY / INCA. The dynamic routing control method has strong compatibility and can support routing functions for diagnostic needs with variable bytes, flexibly handling different diagnostic routing requirements.

[0013] Preferably, the step of activating the dynamic routing function switch on the in-vehicle infotainment system module in response to a successful handshake authentication between the remote control module and the in-vehicle infotainment system module includes: The system sends functional requirement commands to the vehicle-side remote control module via the backend server. The remote control module sends a handshake request application message to the in-vehicle infotainment system module. The handshake request application message contains a first random number. and timestamp ; The in-vehicle infotainment system module and the remote control module perform a handshake authentication algorithm, which satisfies the following: ; In the formula, For pre-shared keys, The first random number, For timestamps, A unique identifier for the remote control module. For string concatenation operators, It is a hash message authentication code algorithm based on SHA256; If authentication is successful, the dynamic routing function switch is activated, making the dynamic routing function switch on the in-vehicle infotainment system module operable; if authentication fails, the dynamic routing function switch remains disabled.

[0014] Preferably, the step of receiving a diagnostic routing control command from the in-vehicle infotainment system module, wherein the diagnostic routing control command includes a routing mode identifier and a sub-functional network segment identifier, includes: Define the routing mode identifier DID as the first diagnostic identifier FF01 and the second diagnostic identifier FF02, where FF01 corresponds to the first dynamic routing mode and FF02 corresponds to the second dynamic routing mode. Define sub-functional network segment identifiers Its mapping relationship with different functional network segments satisfies the mapping function: ; In the formula, For the powertrain CAN bus, For the CAN bus of new energy vehicles, For chassis CAN bus, For infotainment CAN bus, For vehicle body control CAN bus. For the target network segment; Based on the mapping relationship, the in-vehicle infotainment system module generates diagnostic routine control commands according to the user's operation on the dynamic routing function switch. : ; In the formula, Example control service identifier, Example program control sub-function startup type, For routing mode identifier, For sub-functional network segment identifiers; Sending the diagnostic routine control command Previously, the in-vehicle infotainment system module also sent a security authentication command, which contained a second random number. and based on the first derived key Calculated authentication code : ; In the formula, This is a ciphertext message authentication code based on the AES algorithm. This is the first derived key derived from the handshake authentication process.

[0015] Preferably, the first dynamic routing mode specifically includes: The domain control unit receives and parses diagnostic routine control commands. ; The domain control unit activates the first dynamic routing mode to establish a connection from the source network segment diagnostic CAN bus to the target network segment. The dynamic routing channel is established by configuring the routing table inside the domain control unit; Allows the source network segment to diagnose non-fixed-length diagnostic request data frames received on the CAN bus. Directly route to the target network segment The non-fixed-length diagnostic request data frame byte length satisfy: ; In the formula, The length of the data frame in bytes. The maximum data byte length allowed by the CAN bus protocol, for the classic CAN protocol. For CAN FD protocol , It is a set of positive integers; From the target network segment response data frame The route back to the source network segment diagnostic CAN bus, the response data frame byte length It also satisfies the variable length constraint: ; The first dynamic routing mode remains active after activation until a shutdown command is received or the domain control unit is reset.

[0016] Preferably, the second dynamic routing mode specifically includes: The domain control unit receives and parses diagnostic routine control commands. ; The domain control unit activates the second dynamic routing mode to establish a connection from the target network segment. The unidirectional dynamic routing channel of the CAN bus for source network segment diagnosis; The target network segment CAN bus data frames Real-time routing to the source network segment diagnostic CAN bus, the forwarding delay of the real-time route. satisfy: ; In the formula, The time it takes for a data frame to arrive at the target diagnostic CAN bus. The time when the domain control unit receives a data frame from the source network segment. Maximum allowed forwarding delay; During the execution of the second dynamic routing mode, the domain control unit implements a sleep policy on the source network segment diagnostic CAN bus. This sleep policy is achieved by modifying the sleep condition logic of the domain control unit, satisfying the following conditions: ; In the formula, The domain control unit is in a state of overall sleep mode. Indicates hibernation. Indicates activity. To control the sleep state of all network segments except the diagnostic CAN bus, If and only if all other network segments satisfy their respective hibernation conditions; To diagnose the sleep request flag on the CAN bus, This indicates that there is an active data request on the CAN bus and the system should not sleep. For logical AND operator, For logical NOT operator; The hibernation strategy allows when hour, ,thereby That is, the domain control unit ignores the routing data activity on the diagnostic CAN bus and decides whether to go into sleep mode only based on the sleep status of other network segments; Meanwhile, the second dynamic routing mode allows other network segments besides the source network segment diagnostic CAN bus to enter sleep mode normally when their respective sleep conditions are met, that is, for any other network segment... Its dormant state It makes independent decisions and is not affected by dynamic routing functionality.

[0017] Preferably, the method further includes an initialization step, which includes: When the domain control unit performs a sleep wake-up or reset operation, the dynamic routing mode function is initialized to the default off state. The reset operation includes power-on reset, hardware pin reset and watchdog reset. The default off state satisfies the following: ; In the formula, This is the default mode. Dynamic routing is disabled. Set the route activation flag. This indicates that no dynamic routing channels are active. This indicates that the dynamic routing table is empty; The initialization process ensures that any previously activated dynamic routing functions are cleared and the system is restored to a safe state each time the domain control unit restarts.

[0018] Secondly, the present invention provides the following technical solution: a dynamic routing control system for a domain control unit, the system comprising: The activation module is used to activate the dynamic routing function switch on the in-vehicle infotainment system module in response to a successful handshake authentication between the remote control module and the in-vehicle infotainment system module. The receiving module is used to receive diagnostic routing control commands from the in-vehicle infotainment system module, wherein the diagnostic routing control commands include routing mode identifiers and sub-functional network segment identifiers; The authentication module is used to perform security authentication on the diagnostic routing control command, and parse the routing mode identifier and the sub-functional network segment identifier after successful authentication; The operation module is used to perform dynamic routing operations based on the parsing results, the dynamic routing operations including: In the first dynamic routing mode, in response to the routing mode identifier being a first preset value, the variable byte data routing function is activated, allowing non-fixed-length diagnostic request data on the source network segment diagnostic CAN bus to be routed to the target network segment, and supporting the routing of response data from the target network segment back to the source network segment diagnostic CAN bus. The second dynamic routing mode, in response to the routing mode identifier being a second preset value, activates the unidirectional data routing function, allowing CAN bus data from at least one other functional network segment to be routed to the source network segment diagnostic CAN bus.

[0019] Preferably, the system further includes an initialization module, the initialization module being used for: When the domain control unit performs a sleep wake-up or reset operation, the dynamic routing mode function is initialized to the default off state. The reset operation includes power-on reset, hardware pin reset and watchdog reset. The default off state satisfies the following: ; In the formula, This is the default mode. Dynamic routing is disabled. Set the route activation flag. This indicates that no dynamic routing channels are active. This indicates that the dynamic routing table is empty; The initialization process ensures that any previously activated dynamic routing functions are cleared and the system is restored to a safe state each time the domain control unit restarts.

[0020] Thirdly, the present invention provides the following technical solution: a computer, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the dynamic routing control method of the domain control unit as described above.

[0021] Fourthly, the present invention provides the following technical solution: a storage medium storing a computer program, wherein the computer program, when executed by a processor, implements the dynamic routing control method of the domain control unit as described above. Attached Figure Description

[0022] To more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0023] Figure 1 This is a flowchart of the dynamic routing control method for a domain control unit provided in Embodiment 1 of the present invention; Figure 2 This is a vehicle network topology diagram provided in Embodiment 1 of the present invention; Figure 3 This is a structural block diagram of the domain control unit dynamic routing control system provided in Embodiment 2 of the present invention; Figure 4 This is a schematic diagram of the hardware structure of a computer provided for another embodiment of the present invention.

[0024] The embodiments of the present invention will be further described below with reference to the accompanying drawings. Detailed Implementation

[0025] Embodiments of the present invention are described in detail below, examples of which are illustrated in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain embodiments of the present invention, and should not be construed as limiting the present invention.

[0026] Example 1 In Embodiment 1 of the present invention, as Figure 1 As shown, a dynamic routing control method for a domain control unit includes: S1. In response to the successful handshake authentication between the remote control module and the in-vehicle infotainment system module, activate the dynamic routing function switch on the in-vehicle infotainment system module. like Figure 2As shown, the vehicle network includes a Domain Control Unit (DCU), OBD CAN bus, BCAN bus, PCAN bus, CCAN bus, TCAN bus, NECAN bus, remote control module (TBOX), in-vehicle infotainment system module (IVI), and ECUs connected to each network segment. The OBD CAN bus is the only physical interface that directly connects to external diagnostic equipment. The Domain Control Unit acts as a network gateway, connecting all the aforementioned CAN buses.

[0027] Step S1 includes: S11. Send the functional requirement command to the vehicle remote control module through the backend server; S12. The remote control module sends a handshake request application message to the in-vehicle infotainment system module. The handshake request application message contains a first random number. and timestamp ; S13. The in-vehicle infotainment system module and the remote control module execute a handshake authentication algorithm, wherein the handshake authentication algorithm satisfies: ; In the formula, For pre-shared keys, The first random number, For timestamps, A unique identifier for the remote control module. For string concatenation operators, It is a hash message authentication code algorithm based on SHA256; S14. If authentication is successful, the dynamic routing function switch is activated, making the dynamic routing function switch on the in-vehicle infotainment system module operable; if authentication fails, the dynamic routing function switch remains disabled.

[0028] Specifically, step S1 can be described as follows: After-sales engineers or authorized personnel send a functional requirement command to the vehicle-side remote control module (TBOX) of the target vehicle through a remote backend server (such as the automaker's TSP platform). This command includes the vehicle VIN code and the requirement type identifier; after receiving the command, the TBOX generates a first random number. (For example, a 32-byte random number), and get the current timestamp. (UNIX timestamp, accurate to the second). TBOX constructs a handshake request application message, which contains... , and TBOX's own unique identifier The request is then sent to the in-vehicle infotainment system module (IVI) via the in-vehicle network (such as Ethernet or private CAN). Upon receiving the handshake request, the IVI performs a handshake authentication algorithm with the TBOX. Both parties have a pre-configured shared key. IVI calculates the expected authentication code. ;TBOX also includes its own calculated values ​​in the messages it sends. The IVI compares the two to see if they are equal, and also checks the timestamp. Whether the deviation from the current time is within the allowed window (e.g., ±300 seconds) to prevent replay attacks; if authentication is successful (i.e. If the timestamp is valid, then the IVI activates the dynamic routing function switch on its user interface, changing it from a grayed-out, unavailable state to a highlighted, clickable state. Simultaneously, both parties utilize the HKDF algorithm from... Derivation of session keys used for subsequent communications If authentication fails, the switch remains disabled, the route activation function cannot be enabled, and the process terminates.

[0029] S2. Receive a diagnostic routing control command from the in-vehicle infotainment system module, the diagnostic routing control command including a routing mode identifier and a sub-functional network segment identifier; Step S2 includes: S21. Define the routing mode identifier DID as the first diagnostic identifier FF01 and the second diagnostic identifier FF02, wherein FF01 corresponds to the first dynamic routing mode and FF02 corresponds to the second dynamic routing mode. Specifically, after successful authentication in step S1, the after-sales engineer or operator manually clicks the activated dynamic routing function switch on the IVI. The IVI display will then show soft switch options, such as "Mode 1 - Activate BCAN" or "Mode 2 - Activate BCAN".

[0030] S22. Define sub-functional network segment identifiers Its mapping relationship with different functional network segments satisfies the mapping function: ; In the formula, For the powertrain CAN bus, For the CAN bus of new energy vehicles, For chassis CAN bus, For infotainment CAN bus, For vehicle body control CAN bus. For the target network segment; Specifically, route mode identifiers (DIDs) are predefined in the system: FF01 represents the first dynamic routing mode (Mode 1, supporting variable-byte bidirectional routing), and FF02 represents the second dynamic routing mode (Mode 2, unidirectional route collection). Sub-functional network segment identifiers are also defined. Mapping function to physical CAN bus .

[0031] S23. Based on the mapping relationship, the in-vehicle infotainment system module generates diagnostic routine control commands according to the user's operation on the dynamic routing function switch. : ; In the formula, Example control service identifier, Example program control sub-function startup type, For routing mode identifier, For sub-functional network segment identifiers; Specifically, based on the soft switch pressed by the user, the IVI generates corresponding diagnostic routine control commands. For example, if the user presses "Mode 1 - Activate BCAN", then... Press "Mode 2 - Activate PCAN" to generate ; S24. Sending the diagnostic routine control command Previously, the in-vehicle infotainment system module also sent a security authentication command, which contained a second random number. and based on the first derived key Calculated authentication code : ; In the formula, This is a ciphertext message authentication code based on the AES algorithm. This is the first derived key derived from the handshake authentication process; Specifically, before sending the above command, the IVI first needs to establish a secure channel with the domain control unit. The IVI generates a second random number. and use the session key derived from the handshake phase. Calculate the authentication code, and IVI will then send the security authentication instructions (including...) and ) and diagnostic routine control commands Send it to the domain control unit together.

[0032] S3. Perform security authentication on the diagnostic routing control command, and parse the routing mode identifier and the sub-functional network segment identifier after successful authentication; Specifically, after receiving the message from the IVI, the domain control unit extracts... and The domain control unit shares a session key with the IVI. (Also derived from HKDF). The domain control unit uses the same AES-CMAC algorithm to calculate the expected authentication code: ; like If the security authentication is successful, the domain control unit will then parse the command. Extract the DID field (first FF01 or FF02) and sub-function field (XX). If security authentication fails, the domain control unit refuses to perform any routing operations and returns a negative response code (e.g., 7F 31 33, indicating security denial). S4. Perform dynamic routing operations based on the parsing results. The dynamic routing operations include: In the first dynamic routing mode, in response to the routing mode identifier being a first preset value, the variable byte data routing function is activated, allowing non-fixed-length diagnostic request data on the source network segment diagnostic CAN bus to be routed to the target network segment, and supporting the routing of response data from the target network segment back to the source network segment diagnostic CAN bus. The second dynamic routing mode, in response to the routing mode identifier being a second preset value, activates the unidirectional data routing function, allowing CAN bus data from at least one other functional network segment to be routed to the source network segment diagnostic CAN bus.

[0033] Specifically, the first dynamic routing mode includes: The domain control unit receives and parses diagnostic routine control commands. ; The domain control unit activates the first dynamic routing mode to establish a connection from the source network segment diagnostic CAN bus to the target network segment. The dynamic routing channel is established by configuring the routing table inside the domain control unit; Specifically, the routing table entries satisfy: The routing table entries satisfy: ; In the formula, The source network segment is used for CAN bus diagnostics, which is the CAN bus that is physically connected to the OBD interface; For the target network segment, based on the sub-function code Determine by referring to the table; This indicates bidirectional routing, meaning that data from OBD to the target network segment and from the target network segment back to OBD are both forwarded. This indicates that the length constraint is variable, meaning that there is no limit to the byte length of the routed data frame; Allows the source network segment to diagnose non-fixed-length diagnostic request data frames received on the CAN bus. Directly route to the target network segment The non-fixed-length diagnostic request data frame byte length satisfy: ; In the formula, The length of the data frame in bytes. The maximum data byte length allowed by the CAN bus protocol, for the classic CAN protocol. For CAN FD protocol , It is a set of positive integers; From the target network segment response data frame The route back to the source network segment diagnostic CAN bus, the response data frame byte length It also satisfies the variable length constraint: ; Specifically, any diagnostic request data frames subsequently received from the OBD CAN bus Regardless of its byte length How much (as long as it meets the requirements) For example, a 3-byte command (22 F1 86) issued by the INCA tool will be immediately forwarded to the BCAN bus by the domain control unit. For instance, if an external INCA tool sends a 3-byte read data command (22 F1 86) via the OBD interface, the domain control unit will forward it verbatim to the BCAN. The powertrain ECU (such as the engine control unit) connected to the BCAN will receive this command and return a response (62 F1 86 01 02 03 04) that may be 5 bytes or longer. This response frame is received by the domain control unit from the BCAN, routed back to the OBDCAN, and finally returned to the INCA tool. Throughout this process, the routing module does not check or truncate the data frame length, achieving transparent routing for variable bytes. The first dynamic routing mode remains active after activation until a shutdown command is received or the domain control unit is reset.

[0034] The second dynamic routing mode specifically includes: The domain control unit receives and parses diagnostic routine control commands. ; The domain control unit activates the second dynamic routing mode to establish a connection from the target network segment. The unidirectional dynamic routing channel of the CAN bus for source network segment diagnosis; The routing table entries for a one-way dynamic routing channel satisfy the following: ; In the formula, For the target network segment (other functional network segments). For the target network segment (diagnostic CAN bus). This indicates a one-way route, meaning data only travels from one end of the route to the other. Flow is directed to OBD CAN, and reverse flow is not allowed; This indicates that the mode has no special requirements for data frame length and supports routing of both fixed-length and variable-length data frames; The target network segment CAN bus data frames Real-time routing to the source network segment diagnostic CAN bus, the forwarding delay of the real-time route. satisfy: ; In the formula, The time it takes for a data frame to arrive at the target diagnostic CAN bus. The time when the domain control unit receives a data frame from the source network segment. Maximum allowed forwarding delay; Specifically, the domain control unit then began monitoring the PCAN bus in real time. Whenever a data frame appeared on the PCAN bus... (For example, a light status frame 0x123 sent by the body control module), the domain control unit immediately copies and forwards it to the OBDCAN bus. Forwarding delay Guaranteed in Internally, general-purpose CAN devices connected externally (such as CANoe) can capture this data from the OBD CAN, enabling non-intrusive monitoring of the PCAN bus; During the execution of the second dynamic routing mode, the domain control unit implements a sleep policy on the source network segment diagnostic CAN bus. This sleep policy is achieved by modifying the sleep condition logic of the domain control unit, satisfying the following conditions: ; In the formula, The domain control unit is in a state of overall sleep mode. Indicates hibernation. Indicates activity. To control the sleep state of all network segments except the diagnostic CAN bus, If and only if all other network segments satisfy their respective hibernation conditions; To diagnose the sleep request flag on the CAN bus, This indicates that there is an active data request on the CAN bus and the system should not sleep. For logical AND operator, For logical NOT operator; The hibernation strategy allows when hour, ,thereby That is, the domain control unit ignores the routing data activity on the diagnostic CAN bus and decides whether to go into sleep mode only based on the sleep status of other network segments; Meanwhile, the second dynamic routing mode allows other network segments besides the source network segment diagnostic CAN bus to enter sleep mode normally when their respective sleep conditions are met, that is, for any other network segment... Its dormant state It makes independent decisions and is not affected by dynamic routing functionality.

[0035] The method further includes an initialization step, which includes: When the domain control unit performs a sleep wake-up or reset operation, the dynamic routing mode function is initialized to the default off state. The reset operation includes power-on reset, hardware pin reset and watchdog reset. The default off state satisfies the following: ; In the formula, This is the default mode. Dynamic routing is disabled. Set the route activation flag. This indicates that no dynamic routing channels are active. This indicates that the dynamic routing table is empty; The initialization process ensures that any previously activated dynamic routing functions are cleared and the system is restored to a safe state each time the domain control unit restarts. Specifically, the above means that all dynamic routing table entries previously added via Mode 1 or Mode 2 are cleared. If after-sales or testing personnel need to collect data again, they must start from step S1 again and complete the entire process, including remote handshake authentication, IVI switch activation, and security authentication. This design ensures that the dynamic routing function will not remain enabled due to accidents or forgetfulness, maximizing the information security of the vehicle network.

[0036] The dynamic routing control method for the domain control unit provided in Embodiment 1 of this invention constructs a multi-layered security protection system through remote handshake security authentication between the TBOX and IVI, and diagnostic command security authentication between the IVI and the domain control unit. This effectively prevents the illegal theft of vehicle data and meets information security regulations and standards. By designing a first dynamic routing mode (Mode 1) and a second dynamic routing mode (Mode 2), flexible adaptation to different data acquisition scenarios is achieved: Mode 1 supports bidirectional routing of variable byte data, perfectly adapting to non-fixed byte diagnostic commands from calibration tools such as INCA; Mode 2 supports unidirectional routing of data from other network segments to OBD CAN, facilitating data acquisition by general CAN devices. Simultaneously, Mode 2 shields the OBD CAN network segment from the domain control unit's sleep strategy during execution, avoiding the abnormal problem of the vehicle failing to sleep due to data acquisition, and ensuring that the acquired data accurately reflects the fault state under abnormal sleep scenarios. Furthermore, this invention allows for function triggering via a soft switch on the IVI and supports remote activation via a TBOX in the background. It is highly operable, simple, and convenient, requiring no dedicated CAN communication equipment, and is highly versatile, compatible with various CAN device software such as CANOE / CANLYZER / VSPY / INCA. The dynamic routing control method exhibits strong compatibility and supports routing functions for diagnostic needs with variable byte values, flexibly handling different diagnostic routing requirements.

[0037] Example 2 like Figure 3 As shown, in Embodiment 2 of the present invention, a dynamic routing control system for a domain control unit is provided, the system comprising: Activation module 1 is used to activate the dynamic routing function switch on the in-vehicle infotainment system module in response to a successful handshake authentication between the remote control module and the in-vehicle infotainment system module. Receiving module 2 is used to receive diagnostic routing control commands from the in-vehicle infotainment system module, wherein the diagnostic routing control commands include routing mode identifiers and sub-functional network segment identifiers; Authentication module 3 is used to perform security authentication on the diagnostic routing control command, and parse the routing mode identifier and the sub-functional network segment identifier after successful authentication; Operation module 4 is used to perform dynamic routing operations based on the parsing results, the dynamic routing operations including: In the first dynamic routing mode, in response to the routing mode identifier being a first preset value, the variable byte data routing function is activated, allowing non-fixed-length diagnostic request data on the source network segment diagnostic CAN bus to be routed to the target network segment, and supporting the routing of response data from the target network segment back to the source network segment diagnostic CAN bus. The second dynamic routing mode, in response to the routing mode identifier being a second preset value, activates the unidirectional data routing function, allowing CAN bus data from at least one other functional network segment to be routed to the source network segment diagnostic CAN bus.

[0038] The activation module 1 is used for: The system sends functional requirement commands to the vehicle-side remote control module via the backend server. The remote control module sends a handshake request application message to the in-vehicle infotainment system module. The handshake request application message contains a first random number. and timestamp ; The in-vehicle infotainment system module and the remote control module perform a handshake authentication algorithm, which satisfies the following: ; In the formula, For pre-shared keys, The first random number, For timestamps, A unique identifier for the remote control module. For string concatenation operators, It is a hash message authentication code algorithm based on SHA256; If authentication is successful, the dynamic routing function switch is activated, making the dynamic routing function switch on the in-vehicle infotainment system module operable; if authentication fails, the dynamic routing function switch remains disabled.

[0039] The receiving module 2 is used for: Define the routing mode identifier DID as the first diagnostic identifier FF01 and the second diagnostic identifier FF02, where FF01 corresponds to the first dynamic routing mode and FF02 corresponds to the second dynamic routing mode. Define sub-functional network segment identifiers Its mapping relationship with different functional network segments satisfies the mapping function: ; In the formula, For the powertrain CAN bus, For the CAN bus of new energy vehicles, For chassis CAN bus, For infotainment CAN bus, For vehicle body control CAN bus. For the target network segment; Based on the mapping relationship, the in-vehicle infotainment system module generates diagnostic routine control commands according to the user's operation on the dynamic routing function switch. : ; In the formula, Example control service identifier, Example program control sub-function startup type, For routing mode identifier, For sub-functional network segment identifiers; Sending the diagnostic routine control command Previously, the in-vehicle infotainment system module also sent a security authentication command, which contained a second random number. and based on the first derived key Calculated authentication code : ; In the formula, This is a ciphertext message authentication code based on the AES algorithm. This is the first derived key derived from the handshake authentication process.

[0040] Specifically, the first dynamic routing mode includes: The domain control unit receives and parses diagnostic routine control commands. ; The domain control unit activates the first dynamic routing mode to establish a connection from the source network segment diagnostic CAN bus to the target network segment. The dynamic routing channel is established by configuring the routing table inside the domain control unit; Allows the source network segment to diagnose non-fixed-length diagnostic request data frames received on the CAN bus. Directly route to the target network segment The non-fixed-length diagnostic request data frame byte length satisfy: ; In the formula, The length of the data frame in bytes. The maximum data byte length allowed by the CAN bus protocol, for the classic CAN protocol. For CAN FD protocol , It is a set of positive integers; From the target network segment response data frame The route back to the source network segment diagnostic CAN bus, the response data frame byte length It also satisfies the variable length constraint: ; The first dynamic routing mode remains active after activation until a shutdown command is received or the domain control unit is reset.

[0041] The second dynamic routing mode specifically includes: The domain control unit receives and parses diagnostic routine control commands. ; The domain control unit activates the second dynamic routing mode to establish a connection from the target network segment. The unidirectional dynamic routing channel of the CAN bus for source network segment diagnosis; The target network segment CAN bus data frames Real-time routing to the source network segment diagnostic CAN bus, the forwarding delay of the real-time route. satisfy: ; In the formula, The time it takes for a data frame to arrive at the target diagnostic CAN bus. The time when the domain control unit receives a data frame from the source network segment. Maximum allowed forwarding delay; During the execution of the second dynamic routing mode, the domain control unit implements a sleep policy on the source network segment diagnostic CAN bus. This sleep policy is achieved by modifying the sleep condition logic of the domain control unit, satisfying the following conditions: ; In the formula, The domain control unit is in a state of overall sleep mode. Indicates hibernation. Indicates activity. To control the sleep state of all network segments except the diagnostic CAN bus, If and only if all other network segments satisfy their respective hibernation conditions; To diagnose the sleep request flag on the CAN bus, This indicates that there is an active data request on the CAN bus and the system should not sleep. For logical AND operator, For logical NOT operator; The hibernation strategy allows when hour, ,thereby That is, the domain control unit ignores the routing data activity on the diagnostic CAN bus and decides whether to go into sleep mode only based on the sleep status of other network segments; Meanwhile, the second dynamic routing mode allows other network segments besides the source network segment diagnostic CAN bus to enter sleep mode normally when their respective sleep conditions are met, that is, for any other network segment... Its dormant state It makes independent decisions and is not affected by dynamic routing functionality.

[0042] The system further includes an initialization module 5, which is used for: When the domain control unit performs a sleep wake-up or reset operation, the dynamic routing mode function is initialized to the default off state. The reset operation includes power-on reset, hardware pin reset and watchdog reset. The default off state satisfies the following: ; In the formula, This is the default mode. Dynamic routing is disabled. Set the route activation flag. This indicates that no dynamic routing channels are active. This indicates that the dynamic routing table is empty; The initialization process ensures that any previously activated dynamic routing functions are cleared and the system is restored to a safe state each time the domain control unit restarts.

[0043] In other embodiments of the present invention, the present invention provides the following technical solution: a computer, including a memory 102, a processor 101, and a computer program stored in the memory 102 and executable on the processor 101, wherein the processor 101 executes the computer program to implement the dynamic routing control method of the domain control unit as described above.

[0044] Specifically, the processor 101 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more integrated circuits that can be configured to implement the embodiments of the present invention.

[0045] The memory 102 may include a large-capacity memory for data or instructions. For example, and not limitingly, the memory 102 may include a hard disk drive (HDD), a floppy disk drive, a solid-state drive (SSD), flash memory, an optical disk drive, a magneto-optical disk drive, magnetic tape, or a Universal Serial Bus (USB) drive, or a combination of two or more of these. Where appropriate, the memory 102 may include removable or non-removable (or fixed) media. Where appropriate, the memory 102 may be internal or external to a data processing device. In a particular embodiment, the memory 102 is non-volatile memory. In a particular embodiment, the memory 102 includes read-only memory (ROM) and random access memory (RAM). Where appropriate, the ROM may be a mask-programmed ROM, a programmable read-only memory (PROM), an erasable read-only memory (EPROM), an electrically erasable read-only memory (EEPROM), an electrically alterable read-only memory (EAROM), or flash memory, or a combination of two or more of these. Where appropriate, the RAM can be Static Random-Access Memory (SRAM) or Dynamic Random-Access Memory (DRAM). DRAM can be Fast Page Mode Dynamic Random Access Memory (FPMDRAM), Extended Data Out Dynamic Random Access Memory (EDODRAM), Synchronous Dynamic Random-Access Memory (SDRAM), etc.

[0046] The memory 102 can be used to store or cache various data files that need to be processed and / or used for communication, as well as possible computer program instructions executed by the processor 101.

[0047] The processor 101 implements the above-mentioned dynamic routing control method for the domain control unit by reading and executing computer program instructions stored in the memory 102.

[0048] In some embodiments, the computer may further include a communication interface 103 and a bus 100. For example, Figure 4 As shown, the processor 101, memory 102, and communication interface 103 are connected through bus 100 and communicate with each other.

[0049] The communication interface 103 is used to enable communication between the various modules, devices, units, and / or equipment in the embodiments of the present invention. The communication interface 103 can also enable data communication with other components such as external devices, image / data acquisition devices, databases, external storage, and image / data processing workstations.

[0050] Bus 100 includes hardware, software, or both, that couples components of a computer device together. Bus 100 includes, but is not limited to, at least one of the following: data bus, address bus, control bus, expansion bus, and local bus. For example, and not as a limitation, bus 100 may include an Accelerated Graphics Port (AGP) or other graphics bus, an Extended Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hyper Transport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an InfiniBand interconnect, a Low Pin Count (LPC) bus, a memory bus, a Micro Channel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local Bus (VLB) bus, or other suitable buses, or a combination of two or more of these. Where appropriate, bus 100 may include one or more buses. Although specific buses are described and illustrated in the embodiments of the present invention, the present invention is contemplated by any suitable bus or interconnect.

[0051] The computer can execute the dynamic routing control method of the domain control unit of the present invention based on the obtained dynamic routing control system of the domain control unit, thereby realizing dynamic routing control of the domain control unit.

[0052] In some further embodiments of the present invention, in conjunction with the above-described dynamic routing control method for domain control units, the present invention provides the following technical solution: a storage medium storing a computer program, wherein the computer program, when executed by a processor, implements the above-described dynamic routing control method for domain control units.

[0053] Those skilled in the art will understand that the logic and / or steps represented in the flowcharts or otherwise described herein, for example, can be considered as a ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can mean any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device.

[0054] More specific examples of readable media (a non-exhaustive list) include: electrical connections (electronic devices) with one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which the program can be printed, since the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0055] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0056] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0057] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the invention patent. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these all fall within the protection scope of the present invention. Therefore, the protection scope of this invention patent should be determined by the appended claims.

Claims

1. A dynamic routing control method for a domain control unit, characterized in that, include: Upon successful handshake authentication between the remote control module and the in-vehicle infotainment system module, the dynamic routing function switch on the in-vehicle infotainment system module is activated. Receive a diagnostic routing control command from the in-vehicle infotainment system module, the diagnostic routing control command including a routing mode identifier and a sub-functional network segment identifier; The diagnostic routing control command is securely authenticated, and the routing mode identifier and the sub-functional network segment identifier are parsed after successful authentication. Based on the parsing results, a dynamic routing operation is performed, which includes: In the first dynamic routing mode, in response to the routing mode identifier being a first preset value, the variable byte data routing function is activated, allowing non-fixed-length diagnostic request data on the source network segment diagnostic CAN bus to be routed to the target network segment, and supporting the routing of response data from the target network segment back to the source network segment diagnostic CAN bus. The second dynamic routing mode, in response to the routing mode identifier being a second preset value, activates the unidirectional data routing function, allowing CAN bus data from at least one other functional network segment to be routed to the source network segment diagnostic CAN bus.

2. The dynamic routing control method for a domain control unit according to claim 1, characterized in that, The step of activating the dynamic routing function switch on the vehicle infotainment system module in response to a successful handshake authentication between the remote control module and the vehicle infotainment system module includes: The system sends functional requirement commands to the vehicle-side remote control module via the backend server. The remote control module sends a handshake request application message to the in-vehicle infotainment system module. The handshake request application message contains a first random number. and timestamp ; The in-vehicle infotainment system module and the remote control module perform a handshake authentication algorithm, which satisfies the following: ； In the formula, For pre-shared keys, The first random number, For timestamps, A unique identifier for the remote control module. For string concatenation operators, It is a hash message authentication code algorithm based on SHA256; If authentication is successful, the dynamic routing function switch is activated, making the dynamic routing function switch on the in-vehicle infotainment system module operable; if authentication fails, the dynamic routing function switch remains disabled.

3. The dynamic routing control method for a domain control unit according to claim 1, characterized in that, The step of receiving a diagnostic routing control command from the in-vehicle infotainment system module, wherein the diagnostic routing control command includes a routing mode identifier and a sub-functional network segment identifier, includes: Define the routing mode identifier DID as the first diagnostic identifier FF01 and the second diagnostic identifier FF02, where FF01 corresponds to the first dynamic routing mode and FF02 corresponds to the second dynamic routing mode. Define sub-functional network segment identifiers Its mapping relationship with different functional network segments satisfies the mapping function: ； In the formula, For the powertrain CAN bus, For the CAN bus of new energy vehicles, For chassis CAN bus, For infotainment CAN bus, For vehicle body control CAN bus. For the target network segment; Based on the mapping relationship, the in-vehicle infotainment system module generates diagnostic routine control commands according to the user's operation on the dynamic routing function switch. : ； In the formula, Example control service identifier, Example program control sub-function startup type, For routing mode identifier, For sub-functional network segment identifiers; Sending the diagnostic routine control command Previously, the in-vehicle infotainment system module also sent a security authentication command, which contained a second random number. and based on the first derived key Calculated authentication code : ； In the formula, This is a ciphertext message authentication code based on the AES algorithm. This is the first derived key derived from the handshake authentication process.

4. The dynamic routing control method for a domain control unit according to claim 3, characterized in that, The first dynamic routing mode specifically includes: The domain control unit receives and parses diagnostic routine control commands. ; The domain control unit activates the first dynamic routing mode to establish a connection from the source network segment diagnostic CAN bus to the target network segment. The dynamic routing channel is established by configuring the routing table inside the domain control unit; Allows the source network segment to diagnose non-fixed-length diagnostic request data frames received on the CAN bus. Directly route to the target network segment The non-fixed-length diagnostic request data frame byte length satisfy: ； In the formula, The length of the data frame in bytes. The maximum data byte length allowed by the CAN bus protocol, for the classic CAN protocol. For CAN FD protocol , It is a set of positive integers; From the target network segment response data frame The route back to the source network segment diagnostic CAN bus, the response data frame byte length It also satisfies the variable length constraint: ； The first dynamic routing mode remains active after activation until a shutdown command is received or the domain control unit is reset.

5. The dynamic routing control method for a domain control unit according to claim 3, characterized in that, The second dynamic routing mode specifically includes: The domain control unit receives and parses diagnostic routine control commands. ; The domain control unit activates the second dynamic routing mode to establish a connection from the target network segment. The unidirectional dynamic routing channel of the CAN bus for source network segment diagnosis; The target network segment CAN bus data frames Real-time routing to the source network segment diagnostic CAN bus, the forwarding delay of the real-time route. satisfy: ； In the formula, The time it takes for a data frame to arrive at the target diagnostic CAN bus. The time when the domain control unit receives a data frame from the source network segment. Maximum allowed forwarding delay; During the execution of the second dynamic routing mode, the domain control unit implements a sleep policy on the source network segment diagnostic CAN bus. This sleep policy is achieved by modifying the sleep condition logic of the domain control unit, satisfying the following conditions: ； In the formula, The domain control unit is in a state of overall sleep mode. Indicates hibernation. Indicates activity. To control the sleep state of all network segments except the diagnostic CAN bus, If and only if all other network segments satisfy their respective hibernation conditions; To diagnose the sleep request flag on the CAN bus, This indicates that there is an active data request on the CAN bus and the system should not sleep. For logical AND operator, For logical NOT operator; The hibernation strategy allows when hour, ,thereby That is, the domain control unit ignores the routing data activity on the diagnostic CAN bus and decides whether to go into sleep mode only based on the sleep status of other network segments; Meanwhile, the second dynamic routing mode allows other network segments besides the source network segment diagnostic CAN bus to enter sleep mode normally when their respective sleep conditions are met, that is, for any other network segment... Its dormant state Independently determined and unaffected by dynamic routing functionality, among which... Diagnose the CAN bus for the source network segment.

6. The dynamic routing control method for a domain control unit according to claim 1, characterized in that, The method further includes an initialization step, which includes: When the domain control unit performs a sleep wake-up or reset operation, the dynamic routing mode function is initialized to the default off state. The reset operation includes power-on reset, hardware pin reset and watchdog reset. The default off state satisfies the following: ； In the formula, This is the default mode. Dynamic routing is disabled. Set the route activation flag. This indicates that no dynamic routing channels are active. This indicates that the dynamic routing table is empty; The initialization process ensures that any previously activated dynamic routing functions are cleared and the system is restored to a safe state each time the domain control unit restarts.

7. A dynamic routing control system for a domain control unit, characterized in that, The system includes: The activation module is used to activate the dynamic routing function switch on the in-vehicle infotainment system module in response to a successful handshake authentication between the remote control module and the in-vehicle infotainment system module. The receiving module is used to receive diagnostic routing control commands from the in-vehicle infotainment system module, wherein the diagnostic routing control commands include routing mode identifiers and sub-functional network segment identifiers; The authentication module is used to perform security authentication on the diagnostic routing control command, and parse the routing mode identifier and the sub-functional network segment identifier after successful authentication; The operation module is used to perform dynamic routing operations based on the parsing results, the dynamic routing operations including: In the first dynamic routing mode, in response to the routing mode identifier being a first preset value, the variable byte data routing function is activated, allowing non-fixed-length diagnostic request data on the source network segment diagnostic CAN bus to be routed to the target network segment, and supporting the routing of response data from the target network segment back to the source network segment diagnostic CAN bus. The second dynamic routing mode, in response to the routing mode identifier being a second preset value, activates the unidirectional data routing function, allowing CAN bus data from at least one other functional network segment to be routed to the source network segment diagnostic CAN bus.

8. The domain control unit dynamic routing control system according to claim 7, characterized in that, The system further includes an initialization module, which is used for: When the domain control unit performs a sleep wake-up or reset operation, the dynamic routing mode function is initialized to the default off state. The reset operation includes power-on reset, hardware pin reset and watchdog reset. The default off state satisfies the following: ； In the formula, This is the default mode. Dynamic routing is disabled. Set the route activation flag. This indicates that no dynamic routing channels are active. This indicates that the dynamic routing table is empty; The initialization process ensures that any previously activated dynamic routing functions are cleared and the system is restored to a safe state each time the domain control unit restarts.

9. A computer comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the dynamic routing control method for the domain control unit as described in any one of claims 1 to 6.

10. A storage medium, characterized in that, The storage medium stores a computer program, which, when executed by a processor, implements the dynamic routing control method for the domain control unit as described in any one of claims 1 to 6.

Images