Vehicle Open Platform API Shielding for Secure Component Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle open platforms face significant information security risks as they rely solely on protocol conversion through a security gateway, making it vulnerable to external developers accessing sensitive vehicle control protocols, which hinders secure joint development.
Innovation Solution
A vehicle security control method and system utilizing a software development kit (SDK) to encapsulate and convert control protocols, providing an API interface for third-party devices to generate and transmit control signals through a bus, ensuring protocol confidentiality and enhanced security by performing additional encryption and permission verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If protocol conversion is performed through a security gateway, then outside developers can implement their own development control, but information security is likely to be cracked resulting in large information security risk
Solution Approach 1:
The patent introduces an open platform as an intermediary layer between the vehicle control system and outside developers. This platform provides standardized API interfaces that allow third-party applications to control vehicle components without direct access to the underlying control protocols. The open platform acts as a mediator that translates high-level API calls into protocol-specific commands, thereby enabling joint development while maintaining protocol confidentiality and security.
Solution Approach 2:
The patent segments the vehicle control system into multiple layers: the application layer (outside developers' code), the open platform layer (protocol conversion and security management), and the control layer (vehicle components). This segmentation isolates the sensitive control protocols within the open platform layer, preventing outside developers from directly accessing or cracking the protocols while still allowing them to achieve their development goals through the provided APIs.
2Adaptability or versatility
If control protocol is opened to outside developers for joint development, then joint development is facilitated, but vehicle protocol information may be divulged
Solution Approach 1:
The open platform serves as an intermediary that shields outside developers from direct exposure to vehicle control protocols. It provides a standardized API interface that abstracts the underlying protocol details, allowing developers to implement their applications without accessing or understanding the proprietary control protocols, thus preventing protocol information divulgence while enabling joint development.
Solution Approach 2:
The patent creates a virtual copy of the control interface through the open platform's API layer. Instead of giving developers access to the actual control protocols, the system provides a replicated interface that mimics the functionality at a higher abstraction level. This copying approach allows developers to work with protocol-like interfaces without exposing the real protocol information.
3Ease of manufacture
If only security gateway protocol conversion is used, then protocol conversion is achieved, but security performance is insufficient and not conducive to joint development
Solution Approach 1:
The open platform provides a universal API interface that can serve multiple third-party applications and developers simultaneously, while internally handling different vehicle control protocols. This multi-functional approach enhances security performance by centralizing protocol management and conversion in a secure environment, rather than requiring each application to implement its own protocol handling, thereby improving both security and ease of joint development.
Data Source
AI summary
The present disclosure discloses a vehicle and a vehicle security control method and system based on an open platform. The open platform includes a software development kit in which a control protocol is encapsulated, the software development kit provides an API function interface, and the method includes: receiving a call request from a third-party device for a target API function interface of the open platform; converting the call request by using the software development kit to generate a control signal that meets a requirement of the control protocol and that is used for controlling a first vehicle component in a vehicle; and transmitting the control signal to a security gateway through a first bus, to enable the security gateway to perform protocol conversion on the control signal, and transmitting the control signal to an in-vehicle network to control the first vehicle component in the vehicle.