Central gateway controller and data processing method

Abstract

Provided in the embodiments of the present disclosure are a central gateway controller and a data processing method. The central gateway controller comprises a switch chip, the switch chip being provided with a plurality of data transmission interfaces used for being connected to electronic control components of a vehicle. The switch chip comprises a data switching component, a hardware acceleration component and a data processing component. The data switching component is configured to send and receive vehicle-onboard data of the vehicle via the data transmission interfaces; the hardware acceleration component is configured to analyze the vehicle-onboard data to obtain an analysis result; and the data processing component is configured to perform network security detection on the vehicle on the basis of the analysis result of the hardware acceleration component. The present disclosure can complete within the switch chip the analysis and security protection for data of each electronic control component, thereby reducing the computation load of a main control chip, reducing data latency caused by mass data transmission between the switch chip and the main control chip, reducing bandwidth requirements between the switch chip and the main control chip, and ensuring processing of other functional data by the main control chip.

Description

A central gateway controller and data processing method

[0001] Cross-reference

[0002] This disclosure claims priority to the Chinese patent application filed with the China Patent Office on September 19, 2023, with application number 202311212169.9 and invention name “A Central Gateway Controller and Data Processing Method”, the entire contents of which are incorporated by reference into this disclosure. Technical Field

[0003] The present disclosure relates to the field of network communication technology, and in particular to a central gateway controller and a data processing method. Background Art

[0004] With the development of vehicle electrical and electronic architecture, the central gateway controller (CGC), or central intelligent domain controller (CIDC), serves as the communication hub within the vehicle network architecture, playing a crucial role in routing hybrid Controller Area Network (CAN), Local Interconnect Network (LIN), and Ethernet networks. Ethernet communication routing requires data exchange and forwarding via a switch chip. In addition to data exchange via the switch chip, the CGC also needs to consider data analysis and security protection.

[0005] Data analysis by the central gateway controller is typically performed on the main control chip. This approach has the following shortcomings: 1) When a switching chip (such as a switch chip) transmits massive amounts of data to the central gateway controller's main control chip, the main control chip consumes a significant amount of computing resources during the data analysis process, increasing the main control chip's load. 2) Data transmission between the switch chip and the main control chip is subject to a certain delay. 3) Data transmission consumes a large amount of bandwidth, with the majority of the data being used by the main control chip for security analysis. This results in less data being transmitted to the main chip related to other functions, impacting the implementation of these functions.

[0006] Summary of the Invention

[0007] The purpose of the embodiments of the present disclosure is to provide a central gateway controller and a data processing method to solve the technical problems in the prior art such as the switch chip transmitting a large amount of data to the main control chip, increasing the load of the main control chip, causing delays and bandwidth waste.

[0008] In order to solve the above technical problems, the embodiments of the present disclosure adopt the following technical solutions:

[0009] A central gateway controller includes a switch chip having multiple data transmission interfaces for connecting to a vehicle's electronic control components. The switch chip includes a data exchange component, a hardware acceleration component, and a data processing component. The data exchange component is configured to receive and send vehicle-mounted data via the data transmission interface. The hardware acceleration component is configured to analyze the vehicle-mounted data and obtain analysis results. The data processing component is configured to perform network security testing on the vehicle based on the analysis results of the hardware acceleration component.

[0010] In some embodiments, the data exchange component is further configured to send the vehicle data to be analyzed to the hardware acceleration component according to preset analysis rules and / or configuration parameters;

[0011] The hardware acceleration component is configured to analyze the vehicle data to be analyzed according to a preset deep learning model to obtain an analysis result;

[0012] The data processing component is configured to update the data exchange rules of the data exchange component in response to the detected analysis result indicating the presence of a network threat.

[0013] In some embodiments, the data exchange component includes an acquisition component configured to acquire the vehicle data to be analyzed based on the data type of the vehicle data, the data type including Transmission Control Protocol (TCP) data and User Datagram Protocol (UDP) data.

[0014] In some embodiments, the central gateway controller further includes a memory configured to store the vehicle data received by the data exchange component in response to detecting that the analysis result indicates that no network threat exists.

[0015] In some embodiments, the central gateway controller further includes a main control chip connected to the switch chip, and the main control chip and the switch chip are connected via a high-speed serial interface (such as a PCIe interface) or a gigabit media independent interface (RGMII interface).

[0016] In some embodiments, the data transmission interface is a physical layer (Physical Layer, referred to as PHY) Ethernet physical interface, and the in-vehicle data is in-vehicle Ethernet data.

[0017] In some embodiments, the data transmission interface also includes at least one of a CAN interface, a LIN interface, another CAN interface (such as a CANFD interface), a real-time communication protocol interface (such as a FlexRay interface), and a local area network transmission protocol interface (such as an Ethernet interface).

[0018] The present disclosure also provides a data processing method, which is applied to a switch chip of a central gateway controller, wherein the switch chip has multiple data transmission interfaces for connecting to electronic control components of a vehicle. The method includes:

[0019] receiving vehicle-mounted data sent by the electronic control component through a data transmission interface;

[0020] Analyze the vehicle data and obtain analysis results;

[0021] Based on the analysis results, the vehicle is tested for network security.

[0022] In some embodiments, the method further comprises:

[0023] After receiving the vehicle-borne data sent by the electronic control component, the method further includes: acquiring the vehicle-borne data to be analyzed according to preset analysis rules and / or configuration parameters;

[0024] Analyze the vehicle data and obtain analysis results, including:

[0025] Analyze the vehicle data to be analyzed according to the preset deep learning model to obtain the analysis results;

[0026] Based on the analysis results, the vehicle is tested for cybersecurity, including:

[0027] In response to the detected analysis result indicating the presence of a network threat, the data exchange rules of the data exchange component are updated.

[0028] In some embodiments, based on the analysis result, a network security check is performed on the vehicle, including: in response to the analysis result detecting that no network threat exists, storing the vehicle data received by the data exchange component.

[0029] In some embodiments, the method further includes: acquiring the in-vehicle data to be analyzed according to a data type of the in-vehicle data, wherein the data type includes Transmission Control Protocol TCP data and User Datagram Protocol UDP data.

[0030] The central gateway controller and data processing method provided by the embodiments of the present disclosure, by setting a data exchange component, a hardware acceleration component and a data processing component in the switch chip of the central gateway controller, can complete the analysis and security protection of the data of each electronic control component inside the switch chip, reduce the computing load of the main control chip, and improve the performance of the central gateway controller; at the same time, by performing data analysis and processing in the switch chip, it can reduce the data delay caused by large-scale data transmission between the switch chip and the main control chip, realize the real-time performance of data transmission and processing, improve the response speed of each component of the central gateway controller, and reduce the bandwidth requirement between the switch chip and the main control chip, so as to ensure that the main control chip can process other functional data. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments recorded in the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0032] FIG1 is an architecture diagram of a central gateway controller according to an embodiment of the present disclosure;

[0033] FIG2 is a flow chart of a data processing method according to an embodiment of the present disclosure;

[0034] FIG3 is a flow chart of another data processing method according to an embodiment of the present disclosure;

[0035] FIG4 is a schematic diagram of the structure of a processor according to an embodiment of the present disclosure;

[0036] FIG5 is a flowchart of a computer program product according to an embodiment of the present disclosure;

[0037] FIG6 is a flowchart of a computer-readable storage medium according to an embodiment of the present disclosure;

[0038] FIG7 is a flow chart of an electronic device according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0039] Various aspects and features of the present disclosure are described herein with reference to the accompanying drawings.

[0040] It should be understood that various modifications may be made to the embodiments disclosed herein. Therefore, the above description should not be considered as limiting, but merely as an example of an embodiment. Other modifications within the scope and spirit of the present disclosure will occur to those skilled in the art.

[0041] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments of the present disclosure and, together with the general description of the present disclosure given above and the detailed description of the embodiments given below, serve to explain the principles of the present disclosure.

[0042] These and other characteristics of the present disclosure will become apparent from the following description of a preferred form of embodiment given as a non-limiting example with reference to the accompanying drawings.

[0043] It should also be understood that although the present disclosure has been described with reference to certain specific examples, those skilled in the art will be able to realize many other equivalent forms of the present disclosure that have the features of the claims and are therefore within the scope of protection defined thereby.

[0044] The above and other aspects, features and advantages of the present disclosure will become more apparent from the following detailed description when taken in conjunction with the accompanying drawings.

[0045] Specific embodiments of the present disclosure will be described hereinafter with reference to the accompanying drawings; however, it should be understood that the claimed embodiments are merely examples of the present disclosure, which may be implemented in a variety of ways. Well-known and / or repetitive functions and structures are not described in detail to avoid obscuring the present disclosure with unnecessary or redundant detail. Therefore, the specific structural and functional details claimed herein are not intended to be limiting, but rather serve merely as a basis and representative basis for teaching those skilled in the art to variously employ the present disclosure with substantially any suitable detailed structure.

[0046] This description may use the phrases "in one embodiment," "in another embodiment," "in a further embodiment," or "in other embodiments," each of which may refer to one or more of the same or different embodiments according to the present disclosure.

[0047] Figure 1 is an architectural diagram of a central gateway controller according to an embodiment of the present disclosure. As shown in Figure 1, the first embodiment of the present disclosure provides a central gateway controller 10, including a switch chip 101. The switch chip 101 has multiple data transmission interfaces for connecting to electronic control components of a vehicle. The switch chip 101 includes a data exchange component 100, a hardware acceleration component 200, and a data processing component 300. The data exchange component 100 is configured to receive and send vehicle-mounted data through the data transmission interface. The hardware acceleration component 200 is configured to analyze the vehicle-mounted data to obtain analysis results. The data processing component 300 is configured to perform network security detection on the vehicle based on the analysis results of the hardware acceleration component 200.

[0048] Optionally, the central gateway controller 10 is a network device used to manage and control the connection and communication of various network switching devices, and has functions such as scheduling data traffic, providing network security and monitoring, and is a key component in the network architecture.

[0049] The switch chip 101 is an integrated circuit chip used in network, communication, and data center equipment and is provided in the central gateway controller 10. The data transmission interface is a physical interface used to connect different devices. For example, the switch chip 101 is connected to the first electronic control component 103, the second electronic control component 104, and the third electronic control component 105 through different data transmission interfaces and performs data exchange. In this embodiment, the switch chip 101 can be connected to different electronic control components of the same vehicle or to electronic control components of different vehicles through multiple data transmission interfaces. The electronic control components may include an engine control component, a brake control component, a battery management control component, etc.

[0050] The data exchange component 100 contains internal logic circuitry for transmitting and receiving data according to specific data transmission and reception rules, transferring vehicle data from the vehicle's electronic control unit to the central gateway controller 10, and vice versa. The hardware acceleration component 200, through specialized hardware circuitry, processes and analyzes vehicle data for more efficient network security testing. For example, the hardware acceleration component 200 can detect data anomalies, such as sudden increases in data traffic, and transmit these anomalies to the data processing component 300.

[0051] The data processing component 300 performs network security detection on the vehicle based on the above-mentioned data abnormality status, and can promptly discover potential network security threats such as Trojans or vulnerabilities carried in the vehicle data, ensuring vehicle communication security and information security. For example, it can discover and prevent unauthorized attempts to remotely access the vehicle control system, avoid the vehicle control system from being attacked, and cause the vehicle control system to crash and be unable to control the start and stop of the vehicle.

[0052] In-vehicle data refers to vehicle-related data acquired by various sensors while the vehicle is in motion. This data includes vehicle speed, acceleration, steering angle, fuel consumption, emissions, and other data. It also includes vehicle location, road conditions, weather, and traffic status data. The switch chip 101, which includes the hardware acceleration component 200 and the data processing component 300, can provide network security functions, including security detection, secure access control, traffic filtering, and firewalls. It can monitor and filter network traffic in real time, detect and prevent potential network security threats, and protect the vehicle network from malicious attacks and data leaks.

[0053] In some embodiments, the data transmission interface is a physical Ethernet (PHY) interface, and the in-vehicle data is in-vehicle Ethernet data. A PHY Ethernet interface is a standard interface for transmitting data within a computer network. It sends data from a computer or other device to another computer or device within the network and transmits received data back to the sender. The PHY Ethernet interface can transmit data via wired or wireless means and is fast, stable, and reliable.

[0054] In-vehicle Ethernet data includes various sensor data of the vehicle (such as speed data, fuel level data, temperature data, etc.), communication data between electronic control components, and audio and video data in the vehicle entertainment system, etc. For example, when the vehicle is driving, the on-board sensors will collect various in-vehicle Ethernet data, such as speed data, steering angle data, acceleration data, etc. These in-vehicle Ethernet data will be transmitted to the switch chip 101 through the in-vehicle Ethernet physical interface. In addition, the in-vehicle entertainment system can also receive audio and video data through the PHY Ethernet physical interface, allowing passengers to enjoy music, videos and other entertainment content in the car. The PHY Ethernet physical interface and in-vehicle Ethernet data make the vehicle's data transmission and communication efficient and reliable.

[0055] In some embodiments, the central gateway controller 10 further includes a main control chip 102 connected to the switch chip 101 .

[0056] In this embodiment, the main control chip 102 can realize other functions in addition to the above-mentioned network security functions such as network security detection and processing. The network security detection function can be implemented in the switch chip 101, which can effectively reduce the data processing pressure of the main control chip 102 and reduce the data bandwidth requirement between the main control chip 102 and the switch chip 101. The vehicle-mounted data corresponding to other functions can be smoothly and completely transmitted to the main control chip 102, ensuring the effective implementation of other functions, thereby ensuring that the entire vehicle-mounted network can communicate effectively.

[0057] The central gateway controller 10 provided in the embodiment of the present disclosure, by providing a data exchange component 100, a hardware acceleration component 200, and a data processing component 300 in the switch chip 101, can perform data analysis and security protection for each electronic control component within the switch chip 101, reducing the computing load of the main control chip 102 and improving the performance of the central gateway controller 10. Furthermore, by performing data analysis and processing within the switch chip 101, data latency caused by large amounts of data transmission between the switch chip 101 and the main control chip 102 can be reduced, improving the real-time performance of data transmission and processing, as well as the response speed of various components of the central gateway controller 10. Furthermore, the bandwidth requirement between the switch chip 101 and the main control chip 102 is reduced, ensuring that the main control chip 102 can process other functional data.

[0058] In some embodiments, the data exchange component 100 is further configured to send the vehicle data to be analyzed to the hardware acceleration component 200 according to preset analysis rules and / or configuration parameters.

[0059] In this embodiment, the data exchange component 100 can filter and obtain the vehicle data to be analyzed (hereinafter referred to as the data to be analyzed) from the received vehicle data according to preset analysis rules and / or configuration parameters, and send the data to be analyzed to the hardware acceleration component 200 for analysis.

[0060] Optionally, the data exchange component 100 includes an acquisition component configured to acquire the vehicle data to be analyzed according to the data type of the vehicle data, the data type including TCP data and UDP data. That is, the preset analysis rule can be the data type.

[0061] TCP is a reliable, connection-oriented protocol that provides reliable data transmission and flow control mechanisms. TCP data is transmitted in a byte stream format, and each TCP packet has a sequence number to ensure that data arrives at its destination in the correct order. UDP is a connectionless protocol that provides a simple data transmission method. UDP data is transmitted in a datagram format, and each UDP packet contains source and destination port information, but lacks acknowledgment or retransmission mechanisms. UDP is suitable for real-time data transmission, such as audio and video streaming.

[0062] Specifically, the acquisition component of the data exchange component 100 usually confirms the data type based on the header information of the data packet. The data exchange component 100 will check the protocol field of the data packet to determine whether the data type is TCP data or UDP data. For TCP data, the header of the TCP protocol contains source port and destination port fields, and TCP data can be identified through these fields. Usually, the value range of the source port and destination port is 0-65535, and some known port numbers have been assigned to specific applications. That is, by checking the range of port numbers and the list of known port numbers, it can be confirmed that the data type is TCP data. For UDP data, the header of the UDP protocol also contains source port and destination port fields. By checking the value range of these fields and the list of known port numbers, it can be confirmed that the data type is UDP data.

[0063] In this embodiment, when receiving vehicle-mounted data, the data exchange component 100 may only receive two types of data, namely TCP data and UDP data, so as to facilitate the subsequent hardware acceleration component 200 and the data processing component 300 to perform data processing based on more accurate data, thereby enabling more accurate network security detection and improving data processing efficiency.

[0064] In other embodiments, the preset analysis rules may be rules for identifying specific vehicle driving states, such as rules for identifying sudden acceleration, sudden deceleration, sharp turns, speeding, etc., so that data related to the special driving states can be sent as data to be analyzed to the hardware acceleration component 200. The preset analysis rules may also be data transmission ports, etc. For example, when the data exchange component 100 receives vehicle-borne data from multiple data transmission ports, the data from the preset data transmission ports can be sent as data to be analyzed to the hardware acceleration component 200.

[0065] The configuration parameters may be parameters for obtaining the data to be analyzed, such as the vehicle type, the time when the vehicle data is obtained, etc.

[0066] The preset analysis rules and configuration parameters can be set and adjusted according to specific vehicle data analysis needs and network security detection needs, so as to better realize vehicle data analysis and network security detection.

[0067] Preferably, the hardware acceleration component 200 is configured to analyze the vehicle data to be analyzed according to a preset deep learning model to obtain analysis results.

[0068] The hardware acceleration component 200 can analyze the data flow, data content, etc. of the data to be analyzed based on a preset deep learning model to determine whether there is any abnormal flow or abnormal data.

[0069] Optionally, deep learning models may include multiple types, such as Convolutional Neural Network (CNN), Long Short-Term Memory (LSTM), Generative Adversarial Networks (GAN), etc.

[0070] Preferably, the data processing component 300 is configured to update the data exchange rules of the data exchange component 100 in response to the detected analysis result indicating the existence of a network threat.

[0071] When the data processing component 300 receives the analysis results from the hardware acceleration component 200, it analyzes the analysis results and detects whether there are network threats therein, wherein the network threats include: remote intrusion, in which the attacker can exploit loopholes or weaknesses in the vehicle data to remotely invade the vehicle's control system, which enables the attacker to manipulate the vehicle's operation, such as controlling braking, acceleration and steering; remote control, in which the attacker can interfere with the vehicle's operation by remotely controlling the vehicle's Internet connection, which may cause the vehicle to lose control or perform operations not controlled by the driver; wireless signal interference, in which the attacker can use wireless signal interference technology to interfere with the vehicle's operation; The vehicle's communication system (such as the Ethernet transmission system in this embodiment) affects the vehicle's communication and control functions; malware and viruses, the network threat mode is that the vehicle system can be infected by malware, viruses or malicious codes carried in the vehicle data, which leads to abnormal vehicle operation, data leakage and other security issues; data privacy issues, the network threat mode is that vehicles connected to the Internet can collect a large amount of vehicle data, including location, driving habits and vehicle status, etc. Attackers can hijack and obtain these vehicle data, infringing on the privacy of the owner; lack of updates and vulnerability patches, the network threat mode is that if the vehicle system does not update and patch known vulnerabilities in a timely manner, attackers can exploit these vulnerabilities to attack. In this embodiment, the data processing component 300 can perform targeted analysis on the abnormal traffic or abnormal data in the analysis results to determine whether the abnormal traffic or abnormal data carries network threats such as malware or viruses, thereby detecting whether the vehicle has network security risks. In a specific implementation, the data processing component 300 can also analyze the normal data transmitted by the hardware acceleration component 200. For example, after the hardware acceleration component 200 analyzes the vehicle-mounted data to be analyzed to obtain the upgrade data of the vehicle control system, the data processing component 300 can determine whether the upgrade data is the latest data, and whether the upgrade data carries malware or viruses, etc., thereby detecting whether there is a network threat to the vehicle.

[0072] The data processing component 300 analyzes the analysis results of the hardware acceleration component 200 and, upon determining the presence of a network threat, triggers an update of the data exchange rules of the data exchange component 100. This allows the data exchange component 100 to update the corresponding data transmission strategy, enhance data encryption and authentication mechanisms, or restrict data exchange from specific sources, thereby improving the security of in-vehicle data transmission and vehicle communications.

[0073] Exemplarily, the data processing component 300 detects abnormal network activity in the data packet sent by the first electronic control component 103 (for example, the analysis result of the hardware acceleration component 200 performing deep learning analysis on the vehicle-mounted data sent by the first electronic control component 103), such as a large number of unknown network connections and frequent port scanning behaviors. Based on these abnormal characteristics, the data processing component 300 determines that there is a network threat and immediately triggers the operation of updating the data exchange rules of the data exchange component 100.

[0074] The updated data exchange rules may include limiting the frequency of data exchange with the first electronic control unit 103 and adding encryption mechanisms to prevent information leakage. This allows the switch chip 101 to promptly detect network threats and update data exchange rules. This allows the switch chip 101 to promptly and effectively prevent and respond to network threats, thereby protecting the vehicle's communication data security.

[0075] In some embodiments, the central gateway controller 10 further includes a memory configured to store the vehicle data received by the data exchange component 100 in response to the detected analysis result indicating that no network threat exists.

[0076] Specifically, the memory stores the vehicle data received by the data exchange component 100 when no network risk or security risk is found. The above method can be used as a backup mechanism to save the vehicle data for later use during normal operation.

[0077] For example, when a vehicle passes a traffic light, the second electronic control unit 104 transmits collected vehicle data to the switch chip 101. Under normal circumstances, meaning when there are no cyberattacks or risks, the memory of the central gateway controller 10 stores this vehicle data for subsequent processing and analysis. This vehicle data can be used for traffic flow monitoring, road condition optimization, and intelligent traffic management.

[0078] In some embodiments, the main control chip 102 and the switch chip 101 are connected via a PCIe interface or an RGMII interface.

[0079] Among them, the PCIe interface is a high-speed serial interface with very high bandwidth and low latency. The PCIe interface can support multiple channels and high-speed data transmission, allowing connected devices to quickly transmit large amounts of data. The RGMII interface is a parallel interface for transmitting data. It uses 4-bit or 8-bit data lines for transmission and is synchronized according to a clock signal. The RGMII interface generally supports Gigabit Ethernet (GbE) data transmission rates. These two connection methods can provide high-speed and reliable data transmission, enabling the central gateway controller 10 to effectively control and manage various devices connected to the switch chip 101.

[0080] For example, the main control chip 102 is connected to the switch chip 101 via a PCIe interface, enabling rapid data transmission and communication between the main control chip 102 and the switch chip 101. The central gateway controller 10 can monitor and control the status and traffic of various devices connected to the switch chip 101 via the PCIe interface. For example, it can monitor the data transmission speed between electronic control components and adjust the network bandwidth to ensure the operational efficiency of the data center.

[0081] In addition, the central gateway controller 10 can also connect to other external devices, such as storage devices or firewalls, through the PCIe interface or RGMII interface. Through these interfaces, the main control chip 102 can quickly exchange data and communicate with these devices to achieve comprehensive management and control of the entire network.

[0082] In some embodiments, the data transmission interface further includes at least one of a CAN interface, a LIN interface, a CANFD interface, a FlexRay interface, and an Ethernet interface.

[0083] In this embodiment, in addition to using the Ethernet interface to transmit Ethernet data, other data can also be transmitted through other types of transmission interfaces to facilitate the transmission of different vehicle-mounted data, and then the switch chip 101 is used to process the transmitted vehicle-mounted data.

[0084] The CAN interface is a highly reliable and real-time serial bus communication standard used for multi-node communication in the vehicle field. The CAN interface is used to transmit vehicle control information, such as the vehicle's speed and brake status. The CAN interface can achieve real-time data transmission and communication between multiple nodes. The LIN interface is a low-cost, low-speed serial bus communication standard, mainly used for low-speed data transmission in vehicle electronic systems. The LIN interface is usually used to connect in-vehicle electronic modules, such as controlling vehicle doors and windows, seat adjustment and other functions. The CANFD interface is an extended version of the CAN interface that can support higher data transmission rates and larger data loads. The CANFD interface can provide higher data transmission capacity and is suitable for applications that require high-speed data transmission, such as Advanced Driver Assistance Systems (ADAS) and vehicle intelligence. The FlexRay interface is a high-speed, redundant, and real-time serial bus communication standard used for real-time data transmission and communication in vehicle electronic systems. FlexRay interfaces can be used to control vehicle safety systems and advanced driver assistance systems, such as the Anti-lock Braking System (ABS) and Electronic Stability Control (ESC). Local area network transmission protocol interfaces (such as Ethernet) are used for data transmission. Ethernet interfaces are widely used in systems such as in-vehicle entertainment systems, in-vehicle infotainment (IVI), and in-vehicle communication systems, supporting high-speed data transmission and applications with high real-time requirements. These data transmission interfaces have their own applications in different systems to meet the diverse data transmission and communication needs of vehicles.

[0085] FIG2 is a flow chart of a data processing method according to an embodiment of the present disclosure. The data processing method is applied to the switch chip 101 of the central gateway controller 10. The switch chip 101 has multiple data transmission interfaces for connecting to the electronic control components of the vehicle. As shown in FIG2 , the data processing method specifically includes the following steps:

[0086] S101: Receive vehicle data sent by the electronic control component through the data transmission interface.

[0087] On-board data refers to vehicle-related data acquired by various sensors while the vehicle is in motion. This includes vehicle speed, acceleration, steering angle, fuel consumption, emissions, and more. It also includes vehicle location, road conditions, weather, and traffic status data.

[0088] Specifically, a vehicle network contains multiple electronic control units (ECUs), such as an engine control unit (ECU), a brake control unit (BCU), and a battery management control unit (BMC). These ECUs can be different ECUs in the same vehicle or in different vehicles. The data exchange component 100 of the switch chip 101 in the central gateway controller 10 can communicate with these ECUs via multiple data transmission interfaces. For example, the switch chip 101 receives speed data from the engine control unit (ECU) via a data transmission interface. The data exchange component 100 contains internal logic circuitry for transmitting and receiving data according to specific data transmission and reception rules, transferring vehicle-mounted data from the vehicle's ECUs to the central gateway controller 10, or from the central gateway controller 10 to the vehicle's ECUs.

[0089] S102: Analyze the vehicle-mounted data to obtain analysis results.

[0090] Specifically, after the data processing component 300 of the switch chip 101 receives the vehicle data sent by the electronic control component through the data transmission interface, the hardware acceleration component 200 of the switch chip 101 can quickly analyze the vehicle data, for example, to detect whether there is a sudden increase in data traffic or other data abnormalities.

[0091] S103: Perform network security testing on the vehicle based on the analysis results.

[0092] Specifically, the data processing component 300 of the switch chip 101 can perform network security detection based on the analysis results of the hardware acceleration component 200 to determine whether there are network threats such as malware or network viruses, and promptly discover potential network security threats such as Trojans or vulnerabilities carried in the vehicle data, thereby ensuring vehicle communication security and information security.

[0093] The data processing method provided in the embodiment of the present disclosure can utilize the switch chip 101 of the central gateway controller 10 to receive vehicle-mounted data sent by the electronic control components through the data transmission interface, analyze the vehicle-mounted data, obtain analysis results, and perform network security testing on the vehicle based on the analysis results. The analysis and security protection of the data of each electronic control component can be completed within the switch chip 101, thereby reducing the computing load of the main control chip 102 and improving the performance of the central gateway controller 10. At the same time, by performing data analysis and processing in the switch chip 101, the data delay caused by large-scale data transmission between the switch chip 101 and the main control chip 102 can be reduced, the real-time performance of data transmission and processing can be achieved, the response speed of each component of the central gateway controller 10 can be improved, and the bandwidth requirement between the switch chip 101 and the main control chip 102 can be reduced, thereby ensuring that the main control chip 102 can process other functional data.

[0094] In some embodiments, after receiving the vehicle-mounted data sent by the electronic control component through the data transmission interface in step S101, the method further includes:

[0095] Obtain vehicle data to be analyzed based on preset analysis rules and / or configuration parameters.

[0096] The data exchange component 100 can filter and obtain the vehicle data to be analyzed (hereinafter referred to as the data to be analyzed) from the received vehicle data according to preset analysis rules and / or configuration parameters, and send the data to be analyzed to the hardware acceleration component 200 for analysis.

[0097] Optionally, the data exchange component 100 includes an acquisition component configured to acquire the vehicle data to be analyzed according to the data type of the vehicle data, the data type including TCP data and UDP data. That is, the preset analysis rule can be the data type.

[0098] When receiving vehicle-mounted data, the data exchange component 100 can only receive two types of data: TCP data and UDP data, so as to facilitate the subsequent hardware acceleration component 200 and the data processing component 300 to process data based on more accurate data, thereby enabling more accurate network security detection and improving data processing efficiency.

[0099] In other embodiments, the preset analysis rules may be rules for identifying specific vehicle driving states, such as rules for identifying sudden acceleration, sudden deceleration, sharp turns, speeding, etc., so that data related to the specific driving states can be sent as data to be analyzed to the hardware acceleration component 200. The preset analysis rules may also be data transmission ports, etc. For example, when the data exchange component 100 receives vehicle-borne data from multiple data transmission ports, the data from the preset data transmission ports can be sent as data to be analyzed to the hardware acceleration component 200.

[0100] The configuration parameters may be parameters for obtaining the data to be analyzed, such as the vehicle type, the time when the vehicle data is obtained, etc.

[0101] The preset analysis rules and configuration parameters can be set and adjusted according to specific vehicle data analysis needs and network security detection needs, so as to better realize vehicle data analysis and network security detection.

[0102] In some embodiments, in step S102, the vehicle-mounted data is analyzed to obtain analysis results, including:

[0103] According to the preset deep learning model, the vehicle data to be analyzed is analyzed to obtain the analysis results.

[0104] The hardware acceleration component 200 can analyze the data flow and content of the data to be analyzed based on a preset deep learning model to determine whether there are any abnormal traffic conditions or abnormal data. Deep learning models can include various types, such as convolutional neural networks, long short-term memory networks, and generative adversarial networks.

[0105] In some embodiments, in step S103, based on the analysis results, a network security check is performed on the vehicle, including:

[0106] In response to the detected analysis result indicating the presence of a network threat, the data exchange rules of the data exchange component 100 are updated.

[0107] After receiving the analysis results from the hardware acceleration component 200, the data processing component 300 can perform targeted analysis on the abnormal traffic or data in the analysis results to determine whether the abnormal traffic or data carries network threats such as malware or viruses, thereby detecting whether the vehicle poses a network security risk. In a specific implementation, the data processing component 300 can also analyze normal data transmitted by the hardware acceleration component 200. For example, after the hardware acceleration component 200 analyzes the vehicle data to be analyzed and obtains upgrade data for the vehicle control system, the data processing component 300 can determine whether the upgrade data is the latest data and whether the upgrade data carries malware or viruses, thereby detecting whether the vehicle poses a network threat.

[0108] The data processing component 300 analyzes the analysis results of the hardware acceleration component 200 and, upon determining the presence of a network threat, triggers an update of the data exchange rules of the data exchange component 100. This allows the data exchange component 100 to update the corresponding data transmission strategy, enhance data encryption and authentication mechanisms, or restrict data exchange from specific sources, thereby improving the security of in-vehicle data transmission and vehicle communications.

[0109] Exemplarily, the data processing component 300 detects abnormal network activity in the data packet sent by the first electronic control component 103 (for example, the analysis result of the hardware acceleration component 200 performing deep learning analysis on the vehicle-mounted data sent by the first electronic control component 103), such as a large number of unknown network connections and frequent port scanning behaviors. Based on these abnormal characteristics, the data processing component 300 determines that there is a network threat and immediately triggers the operation of updating the data exchange rules of the data exchange component 100.

[0110] The updated data exchange rules may include limiting the frequency of data exchange with the first electronic control unit 103 and adding encryption mechanisms to prevent information leakage. This allows the switch chip 101 to promptly detect network threats and update data exchange rules. This allows the switch chip 101 to promptly and effectively prevent and respond to network threats, thereby protecting the vehicle's communication data security.

[0111] The following describes the data processing method in detail using a specific application scenario as an example. FIG3 is a flow chart of another data processing method according to an embodiment of the present disclosure. As shown in FIG3 , the specific steps of the data processing method include:

[0112] S201: Start;

[0113] S202: The data exchange component 100 receives vehicle data from different data transmission ports;

[0114] S203: The data exchange component 100 forwards the vehicle-borne data of the specified protocol to the hardware acceleration component 200 according to the configuration parameters;

[0115] S204: The hardware acceleration component 200 performs deep learning analysis on the vehicle-mounted data of the specified protocol;

[0116] S205: The hardware acceleration component 200 sends the analysis results of the deep learning model to the data processing component 300;

[0117] S206: Determine whether a network risk / threat is detected;

[0118] In this embodiment, it can be determined whether a network risk or a network threat is detected. If not, step S202 (storing vehicle data) is executed; if detected, step S207 is executed;

[0119] S207: The data processing component 300 updates the data exchange rules;

[0120] S208: End.

[0121] It should be noted that the central gateway controller 10 provided in the embodiment of the present disclosure corresponds to the data processing method in the above-mentioned embodiment. Based on the above-mentioned central gateway controller 10, technical personnel in this field can understand the specific implementation methods of the data processing method in the embodiment of the present disclosure and its various variations. Any optional options in the embodiment of the central gateway controller 10 are also applicable to the data processing method, which will not be repeated here.

[0122] The present disclosure also provides a processor. FIG4 is a schematic diagram of the structure of a processor according to an embodiment of the present disclosure. As shown in FIG4 , the processor 4000 is configured to run a program, wherein the program, when run by the processor, executes the method in the above embodiment.

[0123] In the embodiment of the present disclosure, the processor 4000 may execute the operating program of the method in the embodiment.

[0124] Optionally, the processor 4000 can be configured to perform the following steps: receiving vehicle-mounted data sent by the electronic control component through a data transmission interface; analyzing the vehicle-mounted data to obtain analysis results; and performing network security testing on the vehicle based on the analysis results.

[0125] Optionally, the processor 4000 can be configured to perform the following steps: after receiving the in-vehicle data sent by the electronic control component, the method also includes: obtaining the in-vehicle data to be analyzed according to preset analysis rules and / or configuration parameters; analyzing the in-vehicle data to obtain analysis results, including: analyzing the in-vehicle data to be analyzed according to a preset deep learning model to obtain analysis results; performing network security detection on the vehicle based on the analysis results, including: updating the data exchange rules of the data exchange component in response to the detected analysis result indicating the existence of a network threat.

[0126] Optionally, the processor 4000 can also be configured to perform the following steps: performing a network security check on the vehicle based on the analysis results, including: in response to the detected analysis result being that there is no network threat, storing the vehicle data received by the data exchange component.

[0127] Optionally, the processor 4000 may be further configured to perform the following steps: acquiring the vehicle data to be analyzed according to a data type of the vehicle data, wherein the data type transmission control protocol includes TCP data and user datagram protocol UDP data.

[0128] Figure 5 is a flowchart of a computer program product according to an embodiment of the present disclosure. As shown in Figure 5, an embodiment of the present disclosure further provides a computer program product. The computer program product 5000 includes a non-volatile computer-readable storage medium. The non-volatile computer-readable storage medium stores a computer program. When the computer program is executed by a processor, the method provided in the embodiment of the present disclosure is implemented.

[0129] The embodiments of the present disclosure further provide a computer program, which implements the method provided in the embodiments of the present disclosure when executed by a processor.

[0130] Optionally, the computer program implements the following steps when executed by the processor: receiving vehicle-mounted data sent by the electronic control component through the data transmission interface; analyzing the vehicle-mounted data to obtain analysis results; and performing network security testing on the vehicle based on the analysis results.

[0131] Optionally, the above-mentioned computer program implements the program code of the following steps when executed by the processor: after receiving the vehicle-mounted data sent by the electronic control component, the method also includes: obtaining the vehicle-mounted data to be analyzed according to preset analysis rules and / or configuration parameters; analyzing the vehicle-mounted data to obtain analysis results, including: analyzing the vehicle-mounted data to be analyzed according to a preset deep learning model to obtain analysis results; performing network security detection on the vehicle based on the analysis results, including: updating the data exchange rules of the data exchange component in response to the detected analysis result indicating the existence of a network threat.

[0132] Optionally, the computer program implements the following program code when executed by the processor: performing network security detection on the vehicle based on the analysis result, including: in response to the detected analysis result that there is no network threat, storing the vehicle data received by the data exchange component.

[0133] Optionally, the computer program implements the program code of the following steps when executed by the processor: obtaining the vehicle data to be analyzed according to the data type of the vehicle data, wherein the data type transmission control protocol includes TCP data and user datagram protocol UDP data.

[0134] FIG6 is a flowchart of a computer-readable storage medium according to an embodiment of the present disclosure. As shown in FIG6 , an embodiment of the present disclosure further provides a computer-readable storage medium, wherein the computer-readable medium 6000 stores a computer program, and when the computer program is executed by a processor, the steps of the above method are implemented.

[0135] The computer-readable storage medium of the embodiments of the present disclosure may adopt any combination of one or more computer-readable media. The computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus or device, or any combination thereof. In the embodiments of the present disclosure, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, apparatus or device, for example, the memory described above.

[0136] Figure 7 is a flowchart of an electronic device according to an embodiment of the present disclosure. As shown in Figure 7, an embodiment of the present disclosure further provides an electronic device, which includes at least a memory and a processor. A computer program is stored in the memory, and the processor implements the steps of the above method when executing the computer program in the memory.

[0137] In some embodiments, the processor that executes the computer program may be a processing device including one or more general-purpose processing devices, such as a microprocessor. More specifically, the processor may be a complex instruction set computing (CISC) microprocessor, a reduced instruction set computing (RISC) microprocessor, a very long instruction word (VLIW) microprocessor, a processor that runs other instruction sets, or a processor that runs a combination of instruction sets. The processor may also be one or more special-purpose processing devices, such as an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), a digital signal processor (DSP), a system on a chip (SoC), etc.

[0138] The memory may be read-only memory (ROM), random access memory (RAM), phase-change random access memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), electrically erasable programmable read-only memory (EEPROM), other types of random access memory (RAM), flash disks or other forms of flash memory, cache, registers, static memory, compact disk read-only memory (CD-ROM), digital versatile disks (DVD) or other optical storage, magnetic tape cassettes or other magnetic storage devices, or any other possible non-transitory medium used to store information or instructions that can be accessed by a computer device.

[0139] In this embodiment, the electronic device is preferably a central gateway controller 10 including the switch chip 101 , the processor includes a data exchange component 100 , a hardware acceleration component 200 and a data processing component 300 , and the memory is the memory of the switch chip 101 .

[0140] Those skilled in the art will appreciate that the electronic device may include more or fewer components, for example, may further include a communication interface, etc., or may combine certain components, or arrange the components differently.

[0141] The electronic devices of the embodiments of the present disclosure may include but are not limited to fixed terminal devices capable of email transmission such as servers, desktop computers, digital TVs, etc., and mobile terminal devices capable of email transmission such as vehicle-mounted devices (such as vehicle-mounted multimedia devices), handheld devices (such as mobile phones, tablets, etc.), wearable devices (such as smart watches, smart bracelets, etc.).

[0142] It should be noted that the storage medium disclosed above may be a computer-readable signal medium or a computer-readable storage medium or any combination of the two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or component, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0143] The above description is merely a preferred embodiment of the present disclosure and an illustration of the technical principles employed. Those skilled in the art should understand that the scope of disclosure involved in the present disclosure is not limited to the technical solutions formed by the specific combination of the above-mentioned technical features, but also includes other technical solutions formed by any combination of the above-mentioned technical features or their equivalents without departing from the above-mentioned disclosed concepts. For example, a technical solution formed by replacing the above-mentioned features with (but not limited to) technical features with similar functions disclosed in this disclosure.

[0144] In addition, although each operation is described in a specific order, this should not be understood as requiring these operations to be performed in the specific order shown or in a sequential order. Under certain circumstances, multitasking and parallel processing may be advantageous. Similarly, although some specific implementation details have been included in the above discussion, these should not be interpreted as limiting the scope of the present disclosure. Some features described in the context of a separate embodiment can also be implemented in a single embodiment in combination. On the contrary, the various features described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable sub-combination mode. Industrial Applicability

[0145] The solution provided by the embodiment of the present disclosure may be a central gateway controller, including a switching switch chip, the switch chip having multiple data transmission interfaces for connecting to the electronic control components of the vehicle, the switch chip including a data exchange component, a hardware acceleration component and a data processing component, the data exchange component being configured to send and receive vehicle-mounted data of the vehicle through the data transmission interface, the hardware acceleration component being configured to analyze the vehicle-mounted data to obtain an analysis result; the data processing component being configured to perform network security detection on the vehicle based on the analysis result of the hardware acceleration component, thereby solving the technical problem that the switch chip transmits a large amount of data to the main control chip, increasing the load of the main control chip, causing delays and bandwidth waste, and achieving the technical effect that the switch chip transmits a large amount of data to the main control chip, increasing the load of the main control chip, without causing delays and bandwidth waste.

Claims

1. A central gateway controller, comprising a switching switch chip, wherein the switch chip has a plurality of data transmission interfaces for connecting to electronic control components of a vehicle, the switch chip comprises a data exchange component, a hardware acceleration component and a data processing component, the data exchange component is configured to receive and send vehicle-mounted data of the vehicle through the data transmission interface, the hardware acceleration component is configured to analyze the vehicle-mounted data to obtain an analysis result; the data processing component is configured to perform network security detection on the vehicle according to the analysis result of the hardware acceleration component.

2. The central gateway controller according to claim 1, wherein: The data exchange component is further configured to send the vehicle data to be analyzed to the hardware acceleration component according to preset analysis rules and / or configuration parameters; The hardware acceleration component is configured to analyze the vehicle-mounted data to be analyzed according to a preset deep learning model to obtain an analysis result; The data processing component is configured to update the data exchange rules of the data exchange component in response to the detected analysis result indicating the presence of a network threat.

3. The central gateway controller according to claim 2, wherein: The data exchange component includes an acquisition component configured to acquire the vehicle-borne data to be analyzed according to a data type of the vehicle-borne data, wherein the data type includes transmission control protocol TCP data and user datagram protocol UDP data.

4. The central gateway controller according to claim 1, wherein: The system also includes a memory configured to store the vehicle-mounted data received by the data exchange component in response to the analysis result being detected as no network threat existing.

5. The central gateway controller according to claim 1, wherein: The central gateway controller also includes a main control chip connected to the switch chip, and the main control chip and the switch chip are connected via a high-speed serial PCIe interface or a gigabit medium independent RGMII interface.

6. The central gateway controller according to claim 1, wherein: The data transmission interface is a physical layer PHY Ethernet physical interface, and the in-vehicle data is in-vehicle Ethernet data.

7. The central gateway controller according to claim 1, wherein: The data transmission interface also includes at least one of a controller area network (CAN) interface, a local interconnect network (LIN) interface, another CAN interface (CANFD) interface, a real-time communication protocol (FlexRay) interface, and a local area network transmission protocol (Ethernet) interface.

8. A data processing method, applied to a switch chip of a central gateway controller, wherein the switch chip has a plurality of data transmission interfaces for connecting to an electronic control component of a vehicle, the method comprising: Receiving the vehicle-mounted data sent by the electronic control component through the data transmission interface; Analyzing the vehicle-mounted data to obtain analysis results; Based on the analysis result, a network security check is performed on the vehicle.

9. The data processing method according to claim 8, wherein: After receiving the vehicle-mounted data sent by the electronic control component, the method further comprises: acquiring the vehicle-mounted data to be analyzed according to preset analysis rules and / or configuration parameters; The vehicle-mounted data is analyzed to obtain analysis results, including: Analyze the vehicle-mounted data to be analyzed according to a preset deep learning model to obtain the analysis result; According to the analysis result, the vehicle is subjected to network security detection, including: In response to the detected analysis result indicating the presence of a network threat, the data exchange rule of the data exchange component is updated.

10. The data processing method according to claim 8, performing network security detection on the vehicle according to the analysis result, comprising: In response to the analysis result being detected as no network threat, the vehicle-mounted data received by the data exchange component is stored.

11. The data processing method according to claim 9, further comprising: The in-vehicle data to be analyzed is acquired according to a data type of the in-vehicle data, wherein the data type includes transmission control protocol TCP data and user datagram protocol UDP data.

12. A computer program product, wherein: The invention comprises a non-volatile computer-readable storage medium storing a computer program, wherein the computer program implements the method according to any one of claims 8 to 11 when executed by a processor.

13. A computer program, wherein: When the computer program is executed by a processor, the method according to any one of claims 8 to 11 is implemented.

14. A computer-readable storage medium having a computer program stored thereon, wherein: When the program is executed by a processor, the steps of the method according to any one of claims 8 to 11 are implemented.

15. An electronic device, wherein: include: one or more processors; as well as A memory associated with the one or more processors, the memory being used to store program instructions, wherein the program instructions, when read and executed by the one or more processors, execute the steps of the method described in any one of claims 8 to 11.

Images