Equipment for automatic driving network security and vehicle

Abstract

The embodiment of the utility model provides equipment for automatic driving network security and a vehicle. The device includes: a controller coupled to a network port of the vehicle and including a first data port, the controller at least partially indirectly coupled to a plurality of functional devices of the vehicle to communicate with the plurality of functional devices; and a switch coupled between the first data port and the plurality of functional devices, and comprising: a plurality of device-side interfaces respectively coupled to the plurality of functional devices; a control side interface coupled to the first data port and the repeater; and a protection module arranged between the plurality of device side interfaces and the control side interface to forward data from the plurality of device side interfaces to the control side interface to provide protection for data transmitted between the plurality of functional devices and the controller. Therefore, the safety of communication between the functional device in the vehicle and the outside can be improved.

Description

Technical Field

[0001] Example embodiments of the present disclosure generally relate to the field of computers, and more particularly to a device and a vehicle for autonomous driving network security. Background Art

[0002] Self-driving cars mainly sense the traffic environment through the installation of hardware such as lidar, millimeter-wave radar, and on-board cameras, and obtain more traffic information with the support of intelligent network technology. The software system analyzes and makes decisions based on the traffic information obtained, allowing self-driving cars to complete travel tasks independently. Among them, software, as the decision-making layer, is equivalent to the human brain, and plays a very important role in whether self-driving cars can drive safely. Under the framework of self-driving, the concept of software-defined cars is also recognized by more and more people.

[0003] However, when the software system analyzes and makes decisions on traffic information, there are risks such as data exposure or data theft. Utility Model Content

[0004] In a first aspect of the present disclosure, a device for autonomous driving network security is provided. The device includes: a controller coupled to a network port of a vehicle and including a first data port, the controller at least partially indirectly coupled to a plurality of functional devices of the vehicle to communicate with the plurality of functional devices; and a switch coupled between the first data port and the plurality of functional devices, and including: a plurality of device-side interfaces, respectively coupled to the plurality of functional devices; a control-side interface, coupled to the first data port, and a forwarder; arranged between the plurality of device-side interfaces and the control-side interface to forward data from the plurality of device-side interfaces to the control-side interface.

[0005] In some embodiments, the switch further includes at least one backup interface coupled to the controller to transmit the same data as the device-side interface.

[0006] In some embodiments, the switch further includes a hardware security module coupled to the repeater and configured to enhance network security of the vehicle.

[0007] In some embodiments, the switch further includes a storage module coupled to the repeater.

[0008] In some embodiments, the controller further includes a second data port coupled to an external diagnostic device of the vehicle.

[0009] In some embodiments, the first data port is a packet forwarding engine port.

[0010] In some embodiments, the second data port is a Gigabit Media Access Control port.

[0011] By arranging equipment for autonomous driving network security between the vehicle's network port and multiple functional devices, the equipment can forward and monitor data during the communication between the vehicle's network port and at least one of the multiple functional devices. When the data passes through the switch, the data is encrypted and monitored through security protocols such as the switch's internal security firewall, and access to suspicious information is denied, thereby improving the security of data during communication between the vehicle's functional devices and the data interface.

[0012] In a second aspect of the present disclosure, a vehicle is provided, comprising: a plurality of functional devices; a data interface; and a device provided according to the first aspect of the present disclosure, arranged between the plurality of functional devices and the data interface, and configured to provide protection for data communications between the plurality of functional devices and the data interface.

[0013] It should be understood that the contents described in this content section are not intended to limit the key features or important features of the embodiments of the present disclosure, nor are they intended to limit the scope of the present disclosure. Other features of the present disclosure will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The above and other features, advantages and aspects of the embodiments of the present disclosure will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. In the accompanying drawings, the same or similar reference numerals represent the same or similar elements, wherein:

[0015] Figure 1 A schematic diagram showing the simplicity of a network security device according to an embodiment of the present disclosure; and

[0016] Figure 2 A schematic block diagram of an electronic device suitable for implementing an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0017] Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as being limited to the embodiments set forth herein. On the contrary, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are only for exemplary purposes and are not intended to limit the scope of protection of the present disclosure.

[0018] It should be noted that the titles of any sections / subsections provided herein are not restrictive. Various embodiments are described throughout this article, and any type of embodiment may be included under any section / subsection. In addition, the embodiments described in any section / subsection may be combined in any manner with any other embodiments described in the same section / subsection and / or different sections / subsections.

[0019] In the description of the embodiments of the present disclosure, the term "including" and similar terms should be understood as open inclusion, that is, "including but not limited to". The term "based on" should be understood as "based at least in part on". The term "one embodiment" or "the embodiment" should be understood as "at least one embodiment". The term "some embodiments" should be understood as "at least some embodiments". Other explicit and implicit definitions may be included below. The terms "first", "second", etc. may refer to different or the same objects. Other explicit and implicit definitions may be included below.

[0020] The embodiments of the present disclosure may involve user data, data acquisition and / or use, etc. These aspects are subject to the corresponding laws, regulations and relevant provisions. In the embodiments of the present disclosure, all data collection, acquisition, processing, processing, forwarding, use, etc. are carried out on the premise that the user knows and confirms. Accordingly, when implementing each embodiment of the present disclosure, the type, scope of use, usage scenario, etc. of the data or information that may be involved should be informed to the user and the user's authorization should be obtained in an appropriate manner in accordance with the relevant laws and regulations. The specific notification and / or authorization method can vary according to the actual situation and application scenario, and the scope of the present disclosure is not limited in this respect.

[0021] In addition, the term "in response to" as used herein refers to a state in which a corresponding event occurs or a condition is satisfied. It will be understood that the timing of executing a subsequent action executed in response to the event or condition is not necessarily strongly related to the time when the event occurs or the condition is satisfied. For example, in some cases, the subsequent action may be executed immediately when the event occurs or the condition is satisfied; while in other cases, the subsequent action may be executed after a period of time after the event occurs or the condition is satisfied.

[0022] As briefly mentioned above, self-driving cars mainly perceive the traffic environment through the installation of hardware such as lidar, millimeter-wave radar, and on-board cameras, and obtain more traffic information with the support of intelligent network technology. During the period when the vehicle is connected to the outside world (for example, multiple functional devices of the vehicle are connected to external diagnostic equipment), the vehicle's communication data is more easily exposed to the environment, thereby increasing the risk of data intrusion and leakage. On the other hand, when the vehicle communicates with the outside world through the network, it lacks the function of redundant data transmission. When a data transmission line fails, it is easy to cause serious consequences such as data loss.

[0023] According to the embodiments of the present disclosure, a device for autonomous driving network security is proposed to solve or at least partially solve the above-mentioned problems and other potential problems existing in traditional solutions. According to various embodiments of the present disclosure, by arranging a device for autonomous driving network security between a vehicle's network port and a plurality of functional devices, the device can forward data and monitor the data during the communication between the vehicle's network port and at least one of the plurality of functional devices. When the data passes through the switch, the data is encrypted, monitored, and other measures are taken through security protocols such as the switch's internal security firewall, and access to suspicious information is denied, thereby improving the security of the data during the communication between the vehicle's functional devices and the data interface.

[0024] Figure 1 FIG. 1 shows a schematic diagram of a network security device according to an embodiment of the present disclosure. Figure 1 As shown, the device of the present disclosure generally includes a controller 110 and a switch 120 coupled to the controller 110. The controller 110 is coupled to a network port of the vehicle and includes a first data port 111. The switch 120 is arranged between the first data port 111 and a plurality of functional devices 130 of the vehicle, and includes a plurality of device-side interfaces 121, a control-side interface 122, and a repeater 123 coupled between the device-side interface 121 and the control-side interface 122. The plurality of device-side interfaces 121 correspond to the plurality of functional devices 130 of the vehicle, respectively, and each device-side interface 121 is coupled to the corresponding functional device 130. The control-side interface 122 is coupled to the first data port 111 of the controller 110. In some embodiments, the first data port 111 may be a packet forwarding engine (PFE) port.

[0025] When at least one functional device 130 among the plurality of functional devices 130 in the vehicle communicates with the data interface of the vehicle, data may be transferred via the switch 120 and the controller 110 to achieve data transmission between the functional device 130 and the data interface.

[0026] The switch 120 acquires data from a plurality of functional devices 130 of the vehicle through a plurality of device-side interfaces 121 , performs processing such as encryption on the data, and then forwards the data to the device controller 110 via the control-side interface 122 .

[0027] In some embodiments, the data interface of the vehicle may include a network module port, such as a port associated with a 5G module. The data port may also include a positioning port. The positioning port is a port associated with a satellite signal module, such as a global positioning system (GPS) module or a global navigation satellite system (GNSS) module. The data interface may also include a vehicle-to-everything (V2X) port. The vehicle-to-everything (V2X) port is associated with, for example, a V2X module.

[0028] The switch 120 may be equipped with a variety of security functions, such as media access control security (MACsec), a denial of service (DoS) engine, deep packet inspection (DPI) using ternary content addressable memory (TCAM), and a trusted boot function to ensure vehicle network security.

[0029] Media access control security can encrypt data based on the 802.1AE protocol, so that the data cannot be obtained through network monitoring. At the same time, media access control security also has authentication and verification functions. Since media access control security can be implemented at the hardware level, it also has lower latency and higher performance. This improves the processing efficiency of the switch 120 for various data.

[0030] The denial of service (DoS) engine may provide protection for data processed by the switch 120 when the switch 120 is subjected to a denial of service attack.

[0031] Deep packet inspection is an application layer-based traffic inspection and control technology that can be used to identify and block network attacks, track user behavior, block malware, and monitor network traffic. Deep packet inspection can find, identify, classify, and reroute or block packets containing specific data or code payloads. When a packet approaches a checkpoint, deep packet inspection intercepts any protocol violations, viruses, spam, and other anomalies and prevents the packet from continuing to pass through the checkpoint, thereby improving the security of data passing through the switch 120.

[0032] In some embodiments, the switch 120 may also include a hardware security module that enhances the security of the device by supporting secure and encrypted boot and managing advanced security features such as MACsec.

[0033] In some embodiments, the forwarder 123 includes a central processing unit (CPU), which includes multiple computing cores. The multiple computing cores run synchronously in a lock-step manner to ensure the reliability of processing results.

[0034] In some embodiments, the switch 120 may further include a storage module 125. The storage module 125 is coupled to the forwarder 123. For example, the storage module 125 may be an on-chip memory. The storage module 125 supports the time-sensitive network (TSN) protocol, the precision time protocol (PTP) and the security firewall, thereby effectively preventing external malicious attacks.

[0035] In some embodiments, the switch 120 further includes at least one backup interface 124. The backup interface 124 is coupled between the device-side interface 121 and the controller 110, and is adapted to receive backup data at least partially identical to the data acquired from at least one device-side interface 121 from at least one backup interface 124 during the period when at least one device-side interface 121 of the plurality of device-side interfaces 121 acquires data, so as to achieve redundancy and backup of data transmission, thereby avoiding data loss caused by a connection failure between the device-side interface 121 and the controller 110.

[0036] In some embodiments, the controller 110 may further include a second data port 112. In some embodiments, the second data port 112 may include a Gigabit Media Access Control (GMAC) port. The second data port 112 is coupled to an external diagnostic device 140 of the vehicle. When the external diagnostic device 140 of the vehicle can be connected to the vehicle through the second data port 112, the external diagnostic device 140 and the controller 110 can communicate directly through the second data port 112 without passing through the switch 120. Since the second control port and the functional device 130 are isolated by the switch 120, the risk of obtaining data in the vehicle functional device 130 by communicating between the external diagnostic device 140 and the vehicle's functional device 130 can be avoided. In this way, the network security of the vehicle is further improved, and the possibility of other network devices being attacked is reduced.

[0037] The following describes in detail how to improve the network security of a vehicle through a device according to an embodiment of the present disclosure. Specifically, when performing data transmission, the switch obtains data from multiple functional devices of the vehicle from multiple device-side interfaces. In some embodiments, the switch can perform measures such as encryption and monitoring on the obtained data of multiple functional devices, thereby preventing the data of multiple functional devices from being exposed to the environment.

[0038] Then, the switch forwards the data to the controller of the device via the control side interface. In some embodiments, after receiving the data, the controller sends the data to the corresponding network device interface. And communicates with external devices, such as a server in the cloud, through the network device interface.

[0039] Figure 2 FIG. 3 is a schematic block diagram of an electronic device 300 suitable for implementing an embodiment of the present disclosure. The electronic device 300 may be the server mentioned above that communicates with a vehicle or the control system of the vehicle itself or other appropriate devices. Figure 2As shown, the electronic device 300 includes at least one repeater and at least one memory, and at least one repeater can use a central processing unit (CPU) 301, which can perform various appropriate actions and processes according to computer program instructions stored in a read-only memory (ROM) 302 or computer program instructions loaded from a storage unit to a random access memory (RAM) 303. In RAM 303, various programs and data required for device operation can also be stored. CPU 301, ROM 302 and RAM 303 are connected to each other through a bus 304. An input / output (I / O) interface 305 is also connected to the bus 304.

[0040] Multiple components in the electronic device 300 are connected to the I / O interface 305, including: an input unit 306, such as a touch screen, buttons, etc.; an output unit 307, such as various types of displays, speakers, etc.; a storage unit 308, such as a disk, an optical disk, etc.; and a communication unit 309, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 309 allows the electronic device 300 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0041] The various processes and processing described above, such as the processes mentioned above, can be performed by the processing unit 301. For example, in some embodiments, the processes 210 and 220 can be implemented as computer software programs, which are tangibly contained in a machine-readable medium, such as a storage unit 308. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 300 via the ROM 302 and / or the communication unit 309. When the computer program is loaded into the RAM 303 and executed by the CPU 301, one or more actions of the processes 210 and 220 described above can be performed.

[0042] Embodiments of the present disclosure relate to electronic devices and / or computer program products. The computer program product may include a computer-readable storage medium carrying computer-readable program instructions for executing various aspects of the present disclosure.

[0043] Computer readable storage medium can be a tangible device that can hold and store instructions used by an instruction execution device. Computer readable storage medium can be, for example, (but not limited to) an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination thereof. More specific examples (non-exhaustive list) of computer readable storage medium include: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a static random access memory (SRAM), a portable compact disk read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanical encoding device, for example, a punch card or a convex structure in a groove on which instructions are stored, and any suitable combination thereof. The computer readable storage medium used here is not interpreted as a transient signal itself, such as a radio wave or other freely propagating electromagnetic wave, an electromagnetic wave propagated by a waveguide or other transmission medium (for example, a light pulse by an optical fiber cable), or an electrical signal transmitted by a wire.

[0044] The computer-readable program instructions described herein can be downloaded from a computer-readable storage medium to each computing / processing device, or downloaded to an external computer or external storage device via a network, such as the Internet, a local area network, a wide area network, and / or a wireless network. The network can include copper transmission cables, optical fiber transmissions, wireless transmissions, routers, firewalls, switches, gateway computers, and / or edge servers. The network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in the computer-readable storage medium in each computing / processing device.

[0045] The computer program instructions for performing the operation of the present disclosure may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-related instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages, such as Smalltalk, C++, etc., and conventional procedural programming languages, such as "C" language or similar programming languages. Computer-readable program instructions may be executed entirely on a user's computer, partially on a user's computer, as an independent software package, partially on a user's computer, partially on a remote computer, or completely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., using an Internet service provider to connect via the Internet). In some embodiments, an electronic circuit, such as a programmable logic circuit, a field programmable gate array (FPGA), or a programmable logic array (PLA), may be customized by utilizing the state information of the computer-readable program instructions, and the electronic circuit may execute the computer-readable program instructions, thereby realizing various aspects of the present disclosure.

[0046] Various aspects of the present disclosure are described herein with reference to the flow charts and / or block diagrams of the devices (systems) and computer program products according to the embodiments of the present disclosure. It should be understood that each box in the flow chart and / or block diagram and the combination of each box in the flow chart and / or block diagram can be implemented by computer-readable program instructions.

[0047] These computer-readable program instructions can be provided to a processing unit of a general-purpose computer, a special-purpose computer, or other programmable data processing device, thereby producing a machine, so that when these instructions are executed by the processing unit of the computer or other programmable data processing device, a device that implements the functions / actions specified in one or more boxes in the flowchart and / or block diagram is generated. These computer-readable program instructions can also be stored in a computer-readable storage medium, and these instructions cause the computer, programmable data processing device, and / or other equipment to work in a specific manner, so that the computer-readable medium storing the instructions includes a manufactured product, which includes instructions for implementing various aspects of the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0048] Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operating steps are performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to implement the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0049] The flow chart and block diagram in the accompanying drawings show the possible architecture, function and operation of the system, method and computer program product according to multiple embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a part of a module, program segment or instruction, and a part of a module, program segment or instruction includes one or more executable instructions for realizing the specified logical function. In some alternative implementations, the function marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two continuous square boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs the specified function or action, or can be implemented with a combination of special hardware and computer instructions.

[0050] The above descriptions of various implementations of the present disclosure are exemplary, non-exhaustive, and not limited to the disclosed implementations. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described implementations. The selection of terms used herein is intended to best explain the principles of the implementations, practical applications, or improvements to the technology in the market, or to enable other persons of ordinary skill in the art to understand the various implementations disclosed herein.

Claims

1. A device for autonomous driving network security, characterized in that: include: A controller (110) coupled to a network port of a vehicle and comprising a first data port (111), wherein the controller (110) is at least partially indirectly coupled to a plurality of functional devices (130) of the vehicle to communicate with the plurality of functional devices (130); as well as A switch (120), coupled between the first data port (111) and the plurality of functional devices (130), comprising: A plurality of device-side interfaces (121), respectively coupled to the plurality of functional devices (130); A control side interface (122), coupled to the first data port (111), and A forwarder (123) is arranged between the plurality of device-side interfaces (121) and the control-side interface (122) to forward data controller from the plurality of device-side interfaces (121) to the control-side interface (122).

2. The device according to claim 1, wherein the switch (120) further comprises at least one backup interface (124) coupled to the controller (110) to transmit the same data as the device-side interface (121).

3. The device according to claim 1 or 2, wherein the switch (120) further comprises a hardware security module coupled to the forwarder (123).

4. The device according to claim 1 or 2, wherein the switch (120) further comprises a storage module (125), the storage module (125) being coupled to the repeater (123).

5. The device according to claim 1 or 2, wherein: The controller (110) also includes a second data port (112) coupled to an external diagnostic device (140) of the vehicle.

6. The device of claim 1, wherein the first data port (111) comprises a packet forwarding engine port.

7. The device of claim 5, wherein the second data port (112) comprises a Gigabit Ethernet Media Access Control port.

8. A vehicle, characterized in that: include Multiple functional devices; Data interface; as well as The device according to any one of claims 1 to 7 is arranged between the plurality of functional devices and the data interface.

Images