Terminal device integrated with intelligent intrusion detection and defense system
By integrating radiator and temperature sensors in the on-board terminals, the start and stop of the radiator is controlled in real time, the problem of high temperature burning of the motherboard under network attacks is solved, and the physical cooling stability and network security are achieved.
Patent Information
- Application Number
- CN202421513217.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- Filing Date
- 2024-06-28
- Publication Date
- 2025-07-25
- Estimated Expiration
- 2034-06-28
AI Technical Summary
Existing vehicle-mounted terminals have caused the motherboard to become hot and hot due to high load operation during network attacks, which poses a risk of burning, and lacks effective cooling devices, which brings dual security risks of both physical and network.
Integrate the radiator, temperature sensor and control board in the terminal device, monitor the motherboard temperature in real time through the temperature sensor, control the start and stop of the radiator, ensure that the cooling fan is started when necessary, and avoid unnecessary power loss and noise. At the same time, the motherboard and control board are powered independently to prevent network attacks from being interfered with.
It effectively avoids the temperature increase caused by high-frequency transportation of the motherboard, reduces the risk of motherboard burning, and ensures physical cooling stability and network security.
Smart Images
Figure CN223157446U_ABST
Abstract
Description
Technical Field
[0001] The utility model relates to the technical field of vehicle information security, and more specifically to a terminal device integrating an intelligent intrusion detection and prevention system. Background Art
[0002] With the development of vehicle intelligence and networking, vehicles provide more software and hardware interfaces to meet the requirements of different applications and services. Coupled with the inherent vulnerability of in-vehicle networks, there are more potential network security risks in vehicles. These network risks generally launch attacks through potential entrances such as T-BOX, in-vehicle computers, gateways, Ethernet, and OBD interfaces. To better prevent these network security risks, the vehicle intrusion detection and prevention system (IDPS, Intrusion Detection & Prevention System) provides a new solution for in-vehicle network information security. This system can effectively collect and detect potential attacks on the in-vehicle network and improper behaviors of the external connected network, and perform dynamic defense and response according to the security detection results of the current vehicle state. IDPS can double the security protection effect. On the one hand, it monitors the system and protects the network from attacks by intruders. On the other hand, it provides reports to administrators when attacks occur in the network environment to help further feedback response measures.
[0003] In the existing vehicle intrusion detection and prevention system, in order not to affect the normal operation of in-vehicle terminals and minimize the impact on network communication of normal services, the rules of the firewall of the in-vehicle terminal are not enabled or only a small number of rules are enabled. When the vehicle is attacked, the data acquisition module of the in-vehicle terminal will collect the data and security information in each vehicle network (such as CAN / CANFD, Ethernet, etc.) in real time and send them to the intrusion detection module of the in-vehicle terminal to determine whether the current abnormality is consistent with the firewall rules, and at the same time enable or download the latest firewall rules. At this time, the in-vehicle terminal is in a high-frequency operation state. It not only needs to process its own self-check data and run firewall rules, but also has to cope with the data stream bombing from lawbreakers, resulting in high-load operation of the in-vehicle terminal, overheating of the main board, and there is a risk of burning the main board; and because network attacks on existing in-vehicle terminals are sporadic and normal communication will not cause a sharp rise in the main board temperature, a heat dissipation device is usually not built in, thus bringing double physical and network security hazards to the in-vehicle terminal. Summary of the Utility Model
[0004] The purpose of the utility model is to provide a terminal device integrating an intelligent intrusion detection and prevention system to solve the above problems.
[0005] The utility model adopts the following technical solutions:
[0006] A terminal device integrated with an intelligent intrusion detection and prevention system, including a terminal housing and a main board arranged inside the terminal housing. A radiator for dissipating heat from the main board is provided on the terminal housing. A first temperature sensor for sensing temperature changes of the main board is arranged inside the terminal housing. A control board for controlling the start and stop of the radiator is also arranged inside the terminal housing. The first temperature sensor is electrically connected to the control board.
[0007] Further, the radiator is a cooling fan. An installation groove for installing the cooling fan is provided on the terminal housing. A groove cover is provided on the notch of the installation groove, and a plurality of heat dissipation through holes are opened on the groove cover.
[0008] Further, an MCU processor, a wireless communication module, a CAN communication module, an IDPS probe module, a vehicle-end firewall configuration management module, a vehicle-end firewall module, and a storage module are integrated on the main board.
[0009] Further, a second temperature sensor for detecting the external environment temperature of the terminal housing is also provided on the outer side wall of the terminal housing. The second temperature sensor is electrically connected to the control board.
[0010] Further, it further includes two independent power supply units. One power supply unit is connected to the main board for power supply, and the other power supply unit is respectively connected to the control board, the radiator, and the first temperature sensor for power supply.
[0011] From the above description of the structure of the present invention, compared with the prior art, the present invention has the following advantages:
[0012] 1. The present invention dissipates heat from the main board by setting a radiator, and sets a first temperature sensor and a control board to control the start and stop of the radiator. During daily use, the cooling fan is in a stopped state and does not operate, thus avoiding unnecessary power consumption and some unnecessary noises. When the temperature feedback by the first temperature sensor rises significantly and exceeds the set threshold, at this time, it is very likely that the terminal device is under a network attack and the MCU processor of the main board operates at a high frequency. The control board controls the cooling fan to operate to dissipate heat from the main board, and tries to avoid the main board from being burned.
[0013] 2. The present invention physically separates the main board integrated with the intelligent intrusion detection and prevention system and the control board for controlling the heat dissipation of the terminal device. There is no communication connection between the main board and the control board, and they are independently powered respectively, thus preventing criminals from attacking and controlling the heat dissipation system of the terminal device through the network and the main board, and ensuring the heat dissipation stability at the physical level. BRIEF DESCRIPTION OF THE DRAWINGS
[0014] Figure 1 It is a schematic structural diagram of the present invention.
[0015] Figure 2 This is an exploded view of the present utility model.
[0016] Among them, the reference numerals in the figure are: terminal housing 10, mounting groove 11, groove cover 12, heat dissipation through hole 13, main board 20, heat dissipation fan 30, first temperature sensor 41, second temperature sensor 42, and control board 50. Specific embodiments
[0017] The following describes the specific embodiments of the embodiments of the present utility model with reference to the accompanying drawings.
[0018] Refer to Figure 1 and Figure 2 , a terminal device integrating an intelligent intrusion detection and prevention system, including a terminal housing 10 and a main board 20 disposed inside the terminal housing 10. The main board 20 is integrated with an MCU processor, a wireless communication module, a CAN communication module, an IDPS probe module, a vehicle-side firewall configuration management module, a vehicle-side firewall module, and a storage module. The wireless communication module can be a 4G or 5G wireless communication module, and at the same time, an EMMC module, a positioning module, and an acceleration sensor module are also provided. In the present utility model, the intelligent intrusion detection and prevention system of the vehicle-mounted terminal is integrated on the main board 20, and its specific circuit structure and firewall policy are prior art and will not be elaborated here.
[0019] Refer to Figure 2 , a radiator for dissipating heat from the main board 20 is provided on the terminal housing 10. Specifically, in this embodiment, the radiator is preferably a heat dissipation fan 30. A mounting groove 11 for mounting the heat dissipation fan 30 is provided on the terminal housing 10, and a groove cover 12 is provided on the opening of the mounting groove 11, and a plurality of heat dissipation through holes 13 are opened on the groove cover 12. A first temperature sensor 41 for sensing the temperature change of the main board 20 is provided inside the terminal housing 10, and a control board 50 for controlling the start and stop of the radiator is also provided inside the terminal housing 10. The first temperature sensor 41 is electrically connected to the control board 50 and feeds back the temperature signal of the main board 20 to the control board 50 in real time. The control board 50 controls whether the radiator operates based on the temperature signal fed back by the first temperature sensor 41 in real time.
[0020] In specific use, that is, in normal daily driving, the temperature of the mainboard 20 of the terminal device does not change dramatically, and the operating temperature is relatively stable and suitable, so the cooling fan 30 is in a shutdown state and does not run, thereby avoiding unnecessary power loss and unnecessary noise. When the control board 50 receives and detects that the temperature feedback from the first temperature sensor 41 has risen significantly and exceeds the temperature threshold set by the control board 50, it is very likely that the terminal device has been attacked by the network, the MCU processor of the mainboard 20 operates at a high frequency, and the control board 50 controls the cooling fan 30 to operate to dissipate heat from the mainboard 20 to avoid burning of the mainboard 20 as much as possible.
[0021] Reference Figure 2 As a preference, in this embodiment, the first temperature sensor 41 is preferably disposed close to the MCU processor of the mainboard 20, so as to detect the temperature change of the MCU processor of the mainboard 20 as quickly and accurately as possible. To this end, the cooling fan 30 is also preferably disposed above the MCU processor of the mainboard 20.
[0022] Reference Figure 1 and Figure 2 As a preferred embodiment, the utility model may also be provided with a second temperature sensor 42 on the outer wall of the terminal housing 10 for detecting the external ambient temperature of the terminal housing 10, and the second temperature sensor 42 is electrically connected to the control board 50. The external temperature change fed back by the second temperature sensor 42 can be used as a reference parameter for the temperature change inside and outside the terminal housing 10, and can also be used as a data parameter for subsequent management or research on the performance and historical behavior of the terminal device. In addition, when the second temperature sensor 42 feeds back the external temperature to the control board 50 in real time, the control board 50 can also turn on the radiator in advance according to the change of the external temperature, and dissipate the heat of the mainboard 20 in the terminal housing 10 in advance; this situation can be used as a measure to dissipate the heat of the mainboard 20 in advance in response to the increase in the external temperature of the terminal housing 10 caused by hot summer or other reasons.
[0023] Preferably, there is no signal or power supply connection between the main board 20 and the control board 50 of the present utility model. It includes two independent power supply units (not shown in the figure). One power supply unit is connected to the main board 20 for power supply, and the other power supply unit is respectively connected to the control board 50, the cooling fan 30, the first temperature sensor 41 and the second temperature sensor 42 for power supply. That is, the main board 20 and the electronic components integrated on the main board 20, such as the MCU processor, the wireless communication module, the positioning module, the acceleration sensor module, the CAN communication module, the IDPS probe module, the vehicle-side firewall configuration management module, the vehicle-side firewall module and the storage module, etc., are all independently powered by one power supply unit. The power supply method and power supply circuit of this power supply unit are basically the same as those of conventional in-vehicle terminal devices on the market, and will not be elaborated here. The control board 50, the cooling fan 30, the first temperature sensor 41 and the second temperature sensor 42 of the present utility model are powered by the other power supply unit, and this power supply unit can be a battery power module or introduced from the vehicle power supply circuit, either is acceptable.
[0024] The present utility model physically separates the main board 20 integrated with the intelligent intrusion detection and prevention system and the control board 50 for controlling the heat dissipation of the terminal device, so as to prevent lawbreakers from attacking and controlling the heat dissipation system of the terminal device through the network and the main board 20, and ensure the heat dissipation stability at the physical level.
[0025] The above is only the specific implementation manner of the present utility model, but the design concept of the present utility model is not limited thereto. Any non-substantive modification made to the present utility model using this concept shall belong to the act of infringing the protection scope of the present utility model.
Claims
1. A terminal device integrating an intelligent intrusion detection and prevention system, comprising a terminal housing and a main board disposed within the terminal housing, characterized in that: A radiator for dissipating heat from the main board is provided on the terminal housing. A first temperature sensor for sensing temperature changes of the main board is provided inside the terminal housing. A control board for controlling the start and stop of the radiator is also provided inside the terminal housing. The first temperature sensor is electrically connected to the control board.
2. The terminal device of an integrated intelligent intrusion detection and prevention system according to claim 1, characterized in that: The radiator is a cooling fan. An installation slot for installing the cooling fan is provided on the terminal housing. A slot cover is provided on the notch of the installation slot, and a plurality of heat dissipation through holes are provided on the slot cover.
3. The terminal device of an integrated intelligent intrusion detection and prevention system according to claim 1, characterized in that: An MCU processor, a wireless communication module, a CAN communication module, an IDPS probe module, a vehicle-side firewall configuration management module, a vehicle-side firewall module, and a storage module are integrated on the main board.
4. The terminal device of an integrated intelligent intrusion detection and prevention system according to claim 1, characterized in that: A second temperature sensor for detecting the external environment temperature of the terminal housing is further provided on the outer side wall of the terminal housing. The second temperature sensor is electrically connected to the control board.
5. The terminal device of an integrated intelligent intrusion detection and prevention system according to claim 1, characterized in that: It further includes two independent power supply units. One power supply unit is connected to the main board for power supply, and the other power supply unit is respectively connected to the control board, the radiator, and the first temperature sensor for power supply.