A vehicle-cloud collaborative domain controller security diagnosis system

CN122924136APending Publication Date: 2026-10-16DONGFENG MOTOR GRP
0 Cites 0 Cited by

Patent Information

Application Number
CN202611097962.2
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-07-23
Publication Date
2026-10-16

AI Technical Summary

Technical Problem

[0003]第一类为本地全量密钥预置方案：产线阶段将整车所有域控制器、下挂ECU的2701拓展会话密钥、2711编程会话密钥直接预置于外接诊断设备与车内OTA主节点中，车载网关仅承担诊断报文路由转发功能，无鉴权代理与安全隔离能力

Benefits of technology

[0056]This invention provides a vehicle-cloud collaborative domain controller security diagnostic system, comprising: a vehicle-cloud collaborative key management module, an external diagnostic security interaction module, a hierarchical diagnostic proxy module, and an OTA remote diagnostic proxy module. The vehicle-cloud collaborative key management module is deployed at both the vehicle cloud and production line levels, and is used to securely generate, encrypt, distribute, and inject permanent diagnostic keys into the vehicle during the vehicle production line stage, ensuring that permanent keys are stored in a closed loop only on the vehicle side and do not diffuse to external devices. The external diagnostic security interaction module dynamically issues temporary diagnostic keys with expiration dates to external diagnostic devices, ensuring that permanent keys do not leave the vehicle side and that temporary keys are manageable. The hierarchical diagnostic proxy module constructs a defense-in-depth architecture of gateway level-one proxy and domain controller level-two proxy, blocking the path for external diagnostic devices to directly connect to the underlying ECU. The OTA remote diagnostic proxy module implements hierarchical authentication for in-vehicle OTA diagnostics based on the vehicle-side permanent key, without relying on cloud-based temporary keys, and shares the same key system and proxy architecture with external diagnostics. This invention solves the problems of easy leakage of diagnostic keys, high risk of illegal diagnosis, and fragmented security systems in multiple scenarios in the prior art, significantly improving the safety level of vehicle electronic control diagnosis, and is applicable to intelligent connected vehicles with centralized domain control architecture.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The application provides a vehicle-cloud cooperative domain controller security diagnosis system, relates to the technical field of vehicle-mounted network security and diagnosis, and comprises a vehicle-cloud cooperative key management module, an external diagnosis security interaction module, a hierarchical diagnosis proxy module and an OTA remote diagnosis proxy module; the vehicle-cloud cooperative key management is used for completing the security generation, encrypted distribution and vehicle end injection of a permanent diagnosis key in the whole vehicle production line stage; the external diagnosis security interaction module is used for dynamically issuing a temporary diagnosis key with a validity period for an external diagnosis device; the hierarchical diagnosis proxy module is used for constructing a gateway first-level proxy and a domain control second-level proxy in-depth defense architecture; and the OTA remote diagnosis proxy module realizes hierarchical authentication of in-vehicle OTA diagnosis based on a vehicle end permanent key. The application solves the problems of easy leakage of diagnosis keys, high risk of illegal diagnosis and fragmentation of multi-scene security systems in the prior art, significantly improves the whole vehicle electronic control diagnosis security level, and is suitable for centralized domain control architecture connected car.
Need to check novelty before this filing date? Find Prior Art