Anti-replacement detection method and system of vehicle controller, vehicle, device and medium

Abstract

The application discloses a vehicle controller anti-replacement detection method, a system, a vehicle, equipment and a medium. The vehicle controller anti-replacement detection method comprises the following steps: a controller listens to a broadcast message from a vehicle bus in a sensing window, wherein the broadcast message comprises a vehicle identification code; whether the controller is replaced is judged according to the frame number of the broadcast message carrying the vehicle identification code, the vehicle identification code carried and the vehicle identification code pre-stored in the controller; if it is not judged whether the controller is replaced, a vehicle identification code reading request is sent to the vehicle bus; and if the vehicle identification code is not read or the read vehicle identification code is inconsistent with the vehicle identification code pre-stored in the controller, it is determined that the controller is replaced. By using the application, whether each controller of the vehicle is replaced can be automatically detected through continuous and consistent frame counting of the vehicle bus broadcast, and when it is not judged, active reading is performed to make a judgment, so that the detection efficiency and accuracy are improved.

Description

Technical Field

[0001] This application relates to the field of vehicle network security technology, and in particular to a method, system, vehicle, device and medium for detecting and preventing substitution of vehicle controllers. Background Technology

[0002] During the vehicle production or after-sales phase, the Vehicle Identification Number (VIN) is written to the local storage of each controller for diagnostics, communication, or business binding. Current technologies primarily detect whether a controller has been illegally replaced in the following ways: First, relying on manual comparison using diagnostic tools to read the VIN; this method is inefficient and its accuracy is greatly affected by human factors. Second, verifying the legality of a specific controller's VIN under specific business scenarios; however, this method cannot comprehensively cover all controllers. Third, determining whether a controller is abnormal through cloud-based methods after the vehicle is connected to the network; this method relies on network communication, incurs additional network overhead, and is susceptible to network stability issues, making it difficult to comprehensively and reliably detect vehicle controller replacement. Summary of the Invention

[0003] Based on this, it is necessary to provide a method, system, vehicle, device, and medium for detecting the replacement of vehicle controllers to address the above-mentioned technical problems. This method can automatically detect whether each controller in the vehicle has been replaced by counting consecutive consistent frames broadcast by the in-vehicle bus, and actively read and determine the replacement if it is not detected, thereby improving detection efficiency and accuracy.

[0004] Firstly, a method for preventing the substitution of a vehicle controller is provided, comprising: The controller listens for broadcast messages from the in-vehicle bus within the acquisition window, wherein the broadcast includes the vehicle identification number; Based on the number of frames in the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller, it is determined whether the controller has been replaced. If it is not determined whether the controller has been replaced, a vehicle identification code reading request is sent to the in-vehicle bus; If the vehicle identification code is not read, or if the read vehicle identification code is inconsistent with the vehicle identification code preset in the controller, the controller is determined to have been replaced.

[0005] In some examples, the acceptance window is open for a predetermined period of time after the controller is powered on.

[0006] In some examples, determining whether the controller has been replaced based on the number of frames in the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and a vehicle identification code preset in the controller includes: Determine whether the number of frames in the broadcast message carrying the vehicle identification code is greater than a predetermined number; If the number of broadcast messages carrying the vehicle identification code is greater than a predetermined number, it is further determined whether the vehicle identification code carried in each broadcast message frame is consistent with the vehicle identification code preset in the controller. If the vehicle identification code carried in each broadcast message is consistent with the vehicle identification code preset in the controller, then the controller is determined not to have been replaced. If the vehicle identification code carried in a certain frame of a broadcast message is inconsistent with the vehicle identification code preset in the controller, or if the number of broadcast message frames carrying the vehicle identification code is not greater than a predetermined number, then it is not determined whether the controller has been replaced.

[0007] In some examples, it also includes: When it is determined that the controller has not been replaced, all functions of the controller are enabled normally. When it is determined that the controller has been replaced, fault information is generated and reported to the central display controller.

[0008] In some examples, it also includes: After receiving the fault information, the central display controller will issue an alarm to the user and record the user's operation log.

[0009] In some examples, it also includes: After the acceptance window is closed, the controller's determination result is locked until the vehicle is powered on again.

[0010] Secondly, a vehicle controller anti-substitution detection system is provided, comprising: The monitoring module is used by the controller to monitor broadcast messages from the in-vehicle bus within the acquisition window, wherein the broadcast includes the vehicle identification code; The first judgment module is used to determine whether the controller has been replaced based on the number of frames of the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller. The request module is used to send a vehicle identification code reading request to the in-vehicle bus if it is not determined whether the controller has been replaced. The second judgment module is used to determine that the controller has been replaced if the vehicle identification code is not read, or if the read vehicle identification code is inconsistent with the vehicle identification code preset in the controller.

[0011] Thirdly, a vehicle is provided, including: an anti-substitution detection system for the vehicle controller according to the third aspect described above.

[0012] Fourthly, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, it implements the steps of the anti-substitution detection method for a vehicle controller according to the first aspect and any possible implementation thereof.

[0013] Fifthly, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps of the anti-substitution detection method for a vehicle controller according to the first aspect and any possible implementation thereof.

[0014] In the embodiments of this application, the controller first listens for broadcast messages from the in-vehicle bus within its acquisition window. These broadcast messages include the vehicle identification code (VID). Then, based on the number of frames in the broadcast message carrying the VID, the VID carried, and the VID preset within the controller, it determines whether the controller has been replaced. If it cannot determine whether the controller has been replaced, a VID read request is sent to the in-vehicle bus. If no VID is read, or if the read VID does not match the preset VID in the controller, it is determined that the controller has been replaced. Therefore, by counting the consecutive consistent frames broadcast from the in-vehicle bus, the replacement of each vehicle controller can be automatically detected, and if not determined, a proactive read request can be made, thereby improving detection efficiency and accuracy. Attached Figure Description

[0015] Other features, objects, and advantages of this application will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings: Figure 1 A flowchart of the vehicle controller anti-substitution detection method provided in the embodiments of this application; Figure 2 This is a structural block diagram of the vehicle controller anti-substitution detection system provided in the embodiments of this application; Figure 3 This is a structural block diagram of a computer device provided in an embodiment of this application. Detailed Implementation

[0016] The present application will now be described in further detail with reference to the embodiments and accompanying drawings. It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the application. Furthermore, it should be noted that, for ease of description, only the parts relevant to the application are shown in the accompanying drawings.

[0017] It should be noted that, unless otherwise specified, the embodiments and features of the embodiments in this application can be combined with each other. The present application will now be described in detail with reference to the accompanying drawings and embodiments.

[0018] The following describes in detail, with reference to the accompanying drawings, a method, system, vehicle, device, and medium for detecting the substitution of a vehicle controller according to embodiments of this application.

[0019] Figure 1 This is a flowchart of a vehicle controller anti-substitution detection method according to an embodiment of this application. Figure 1 As shown, the vehicle controller anti-substitution detection method according to an embodiment of this application includes the following steps: S101: The controller listens for broadcast messages from the vehicle bus within the acceptance window, wherein the broadcast includes the vehicle identification number.

[0020] In one embodiment of this application, the acceptance window is in an open state for a predetermined time after the controller is powered on.

[0021] Specifically, after the vehicle control unit (AVCU) is powered on, it broadcasts messages on the in-vehicle bus at fixed intervals. The messages carry the vehicle identification code. After the vehicle's controllers, such as the central display controller (CDCU), telematics processor (TBOX), Bluetooth key controller (CBCM), and data recorder (TDR), open their dedicated acquisition windows after being powered on and synchronously listen to the broadcast messages from the in-vehicle bus.

[0022] It should be noted that the length of the acceptance window must ensure that at least 2-3 broadcast messages can be received to avoid misjudgment due to the loss of a single frame of data. In a specific example, the acceptance window can be set to 3-5 seconds.

[0023] S102: Based on the number of frames in the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller, determine whether the controller has been replaced.

[0024] In one embodiment of this application, determining whether the controller has been replaced based on the number of frames of the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller includes: determining whether the number of frames of the broadcast message carrying the vehicle identification code is greater than a predetermined number; if the number of frames of the broadcast message carrying the vehicle identification code is greater than the predetermined number, further determining whether the vehicle identification code carried in each frame of the broadcast message is consistent with the vehicle identification code preset in the controller; if the vehicle identification code carried in each frame of the broadcast message is consistent with the vehicle identification code preset in the controller, then determining that the controller has not been replaced; if the vehicle identification code carried in a certain frame of the broadcast message is inconsistent with the vehicle identification code preset in the controller, or if the number of frames of the broadcast message carrying the vehicle identification code is not greater than the predetermined number, then it is not determined whether the controller has been replaced.

[0025] The controller is pre-loaded with a vehicle identification number (VIN) stored at the factory or authorized for writing. In a specific example, the predetermined number is set to 2 frames. When more than 2 broadcast messages are received, and the VIN carried in each broadcast message matches the VIN pre-loaded in the controller, it is determined that the controller has not been replaced. Otherwise, if the VIN carried in a broadcast message does not match the VIN pre-loaded in the controller, or if the number of broadcast messages carrying the VIN is ≤ 2 frames, it cannot be determined whether the controller has been replaced, and the subsequent judgment process begins.

[0026] S103: If it is not determined whether the controller has been replaced, a vehicle identification code reading request is sent to the in-vehicle bus.

[0027] Specifically, if no response is received within a predetermined time after sending a vehicle identification number (VIN) read request, a timeout retransmission mechanism is triggered to retransmit the request; if no response is received after the second request, the read is deemed to have failed.

[0028] S104: If the vehicle identification code is not read, or the read vehicle identification code is inconsistent with the vehicle identification code preset in the controller, then it is determined that the controller has been replaced.

[0029] In one embodiment of this application, the method further includes: when it is determined that the controller has not been replaced, enabling all functions of the controller normally; when it is determined that the controller has been replaced, generating fault information and reporting it to the central display controller.

[0030] Specifically, when the controller is determined to be replaced, the controller generates a unique fault code and records a detailed event log, which includes: the determination timestamp, data source, received vehicle identification code summary information, and vehicle identification code comparison results; at the same time, the fault information is synchronously reported to the central display controller through a custom application layer alarm message.

[0031] In the above example, the central display controller also includes: after receiving the fault information, it alerts the user and records the user operation log.

[0032] Specifically, after receiving an alarm message containing fault information, the central display controller automatically pops up a visual prompt window. The title of the pop-up window can be set to "Unauthorized component detected"; the content of the pop-up window clearly states "The xx controller has been replaced or is unauthorized, which may affect related vehicle functions. Please contact the relevant service station for repair in time"; and it provides two function buttons: "I understand" for the user to confirm that they have been informed of the fault, and "Help" to jump to the service station contact information page; at the same time, it records the time when the user clicks to confirm, forming a complete interaction log.

[0033] In one embodiment of this application, the method further includes: locking the determination result of the controller after the acceptance window is closed until the vehicle is powered on again.

[0034] Specifically, after the acceptance window is closed, the controller's judgment result is locked. If a broadcast message that is inconsistent with the vehicle identification code preset in the controller appears in the subsequent bus broadcast, only the abnormal event is recorded, no alarm is triggered, and the release status of the controller function is not changed. The judgment process is re-executed when the vehicle is powered on again, thereby avoiding frequent alarms or controller function fluctuations during driving and ensuring driving stability.

[0035] According to the vehicle controller anti-substitution detection method of this application embodiment, the controller first listens for broadcast messages from the in-vehicle bus within an acquisition window, wherein the broadcast includes a vehicle identification code (VIC). Then, based on the number of frames in the broadcast message carrying the VIC, the VIC carried, and a pre-set VIC in the controller, it determines whether the controller has been replaced. If it is not determined whether the controller has been replaced, a VIC read request is sent to the in-vehicle bus. If the VIC is not read, or the read VIC does not match the pre-set VIC in the controller, it is determined that the controller has been replaced. Thus, the replacement of each vehicle controller can be automatically detected by counting the consecutive consistent frames broadcast by the in-vehicle bus, and a determination can be made by actively reading the frame count if it is not determined, thereby improving detection efficiency and accuracy.

[0036] Figure 2 This is a structural block diagram of a vehicle controller anti-substitution detection system according to an embodiment of this application. Figure 2 As shown, a vehicle controller anti-substitution detection system according to an embodiment of this application includes: a monitoring module 210, a first judgment module 220, a request module 230, and a second judgment module 240, wherein: The monitoring module 210 is used by the controller to monitor broadcast messages from the in-vehicle bus within the acquisition window, wherein the broadcast includes the vehicle identification code; The first judgment module 220 is used to determine whether the controller has been replaced based on the number of frames of the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller. The request module 230 is used to send a vehicle identification code reading request to the in-vehicle bus if it is not determined whether the controller has been replaced. The second judgment module 240 is used to determine that the controller has been replaced if the vehicle identification code is not read, or if the read vehicle identification code is inconsistent with the vehicle identification code preset in the controller.

[0037] According to the vehicle controller anti-substitution detection system of this application embodiment, the controller first listens for broadcast messages from the in-vehicle bus within the acquisition window, wherein the broadcast includes a vehicle identification code (VID). Then, based on the number of frames in the broadcast message carrying the VID, the VID carried, and a pre-set VID in the controller, it determines whether the controller has been replaced. If it is not determined whether the controller has been replaced, a VID read request is sent to the in-vehicle bus. If the VID is not read, or the read VID does not match the pre-set VID in the controller, it is determined that the controller has been replaced. Thus, the replacement of each controller in the vehicle can be automatically detected by counting the consecutive consistent frames broadcast by the in-vehicle bus, and the system can actively read and determine the replacement if it is not determined, thereby improving detection efficiency and accuracy.

[0038] Specific limitations regarding the vehicle controller anti-substitution detection system can be found in the limitations of the vehicle controller anti-substitution detection method described above, and will not be repeated here. Each module of the aforementioned vehicle controller anti-substitution detection system can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device in hardware form, or stored in the computer device's memory in software form, so that the processor can call and execute the corresponding operations of each module.

[0039] Furthermore, a vehicle is provided, including a vehicle controller anti-substitution detection system according to any of the above embodiments. The vehicle first has its controller listen for broadcast messages from the in-vehicle bus within an acquisition window, wherein the broadcast includes a vehicle identification code (VIC). Then, based on the number of frames in the broadcast message carrying the VIC, the VIC carried, and a pre-set VIC in the controller, it determines whether the controller has been replaced. If it is not determined whether the controller has been replaced, a VIC read request is sent to the in-vehicle bus. If no VIC is read, or if the read VIC does not match the pre-set VIC in the controller, it is determined that the controller has been replaced. Thus, the replacement of each controller in the vehicle can be automatically detected by counting consecutive consistent frames broadcast from the in-vehicle bus, and proactive reading and determination can be performed when no replacement is found, thereby improving detection efficiency and accuracy.

[0040] Furthermore, other components and functions of the vehicle according to the embodiments of this application are known to those skilled in the art and will not be described in detail here.

[0041] In one embodiment, a computer device is provided. Figure 3 This is a structural block diagram of the computer device provided in the embodiments of this application, with reference to... Figure 3The computer device includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the aforementioned vehicle controller anti-substitution detection method embodiment. For example, it executes the following: the controller listens for broadcast messages from the in-vehicle bus within an acceptance window, wherein the broadcast includes a vehicle identification code; Based on the number of frames in the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller, it is determined whether the controller has been replaced. If it is not determined whether the controller has been replaced, a vehicle identification code reading request is sent to the in-vehicle bus; If the vehicle identification code is not read, or if the read vehicle identification code is inconsistent with the vehicle identification code preset in the controller, the controller is determined to have been replaced.

[0042] This application also provides a computer-readable storage medium storing a computer program. When the processor executes the computer program, it implements the aforementioned vehicle controller anti-substitution detection method embodiment. For example, it executes: the controller listens for broadcast messages from the in-vehicle bus within an acceptance window, wherein the broadcast includes a vehicle identification code; Based on the number of frames in the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller, it is determined whether the controller has been replaced. If it is not determined whether the controller has been replaced, a vehicle identification code reading request is sent to the in-vehicle bus; If the vehicle identification code is not read, or if the read vehicle identification code is inconsistent with the vehicle identification code preset in the controller, the controller is determined to have been replaced.

[0043] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the methods described above. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, or optical storage, etc. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc.

[0044] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0045] The above embodiments merely illustrate several implementation methods of this application, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this patent application should be determined by the appended claims.

Claims

1. A method for preventing substitution detection of a vehicle controller, characterized in that, The method includes: The controller listens for broadcast messages from the in-vehicle bus within the acquisition window, wherein the broadcast includes the vehicle identification number; Based on the number of frames in the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller, it is determined whether the controller has been replaced. If it is not determined whether the controller has been replaced, a vehicle identification code reading request is sent to the in-vehicle bus; If the vehicle identification code is not read, or if the read vehicle identification code is inconsistent with the vehicle identification code preset in the controller, the controller is determined to have been replaced.

2. The method for preventing substitution of a vehicle controller according to claim 1, characterized in that, The data acquisition window is open for a predetermined period of time after the controller is powered on.

3. The anti-substitution detection method for a vehicle controller according to claim 1, characterized in that, The step of determining whether the controller has been replaced based on the frame number of the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller includes: Determine whether the number of frames in the broadcast message carrying the vehicle identification code is greater than a predetermined number; If the number of broadcast messages carrying the vehicle identification code is greater than a predetermined number, it is further determined whether the vehicle identification code carried in each broadcast message frame is consistent with the vehicle identification code preset in the controller. If the vehicle identification code carried in each broadcast message is consistent with the vehicle identification code preset in the controller, then the controller is determined not to have been replaced. If the vehicle identification code carried in a certain frame of a broadcast message is inconsistent with the vehicle identification code preset in the controller, or if the number of broadcast message frames carrying the vehicle identification code is not greater than a predetermined number, then it is not determined whether the controller has been replaced.

4. The anti-substitution detection method for a vehicle controller according to claim 1, characterized in that, Also includes: When it is determined that the controller has not been replaced, all functions of the controller are enabled normally. When it is determined that the controller has been replaced, fault information is generated and reported to the central display controller.

5. The method for preventing substitution of a vehicle controller according to claim 4, characterized in that, Also includes: After receiving the fault information, the central display controller will issue an alarm to the user and record the user's operation log.

6. The method for preventing substitution of a vehicle controller according to claim 1, characterized in that, Also includes: After the acceptance window is closed, the controller's determination result is locked until the vehicle is powered on again.

7. A vehicle controller anti-substitution detection system, characterized in that, The system includes: The monitoring module is used by the controller to monitor broadcast messages from the in-vehicle bus within the acquisition window, wherein the broadcast includes the vehicle identification code; The first judgment module is used to determine whether the controller has been replaced based on the number of frames of the broadcast message carrying the vehicle identification code, the vehicle identification code carried, and the vehicle identification code preset in the controller. The request module is used to send a vehicle identification code reading request to the in-vehicle bus if it is not determined whether the controller has been replaced. The second judgment module is used to determine that the controller has been replaced if the vehicle identification code is not read, or if the read vehicle identification code is inconsistent with the vehicle identification code preset in the controller.

8. A vehicle, characterized in that, include: The vehicle controller anti-substitution detection system according to claim 7.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the anti-substitution detection method for the vehicle controller according to any one of claims 1-6.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the anti-substitution detection method for the vehicle controller according to any one of claims 1-6.

Images