CN104732126B - A kind of right management method and Rights Management System towards automobile electronic system - Google Patents

Abstract

The present invention is applicable to the field of electric digital data processing, and provides an authority management method and an authority management system oriented to an automotive electronic system. The method includes: obtaining the current driving state of the automobile and the current operating state of the automotive electronic system; The driving state and the running state determine the authority level, and the authority level includes: ordinary authority, restricted authority or advanced restricted authority; according to the determined authority level, corresponding authority management is performed. In the embodiment of the present invention, the current driving state of the car and the current running state of the automotive electronic system are obtained, the authority level is determined according to the driving state and the operating state, and corresponding authority management is performed according to the determined authority level, which improves the security of the automotive electronic system. safety.

Description

A permission management method and a permission management system oriented to an automotive electronic system

technical field

The invention belongs to the field of electrical digital data processing, and in particular relates to an authority management method and an authority management system for automotive electronic systems.

Background technique

The Android operating system with Linux as the core, as a complete mobile device operating system solution, is gradually expanding from the mobile phone platform to various electronic device platforms. In the field of automotive electronics, a touch-type center console with the Android system as the core has emerged. The emergence of this combination enables the mature Android architecture to be quickly applied to the field of automotive electronics, and automotive electronics has therefore gained a large number of applications in the Android ecosystem. But on the other hand, the inherent openness of the Android platform also creates hidden dangers for security issues: the Android system itself provides a permission management mechanism, that is, each application can only use the permissions declared when it is installed. However, since the system's built-in mechanism is only a static authority management, the authority configuration cannot be changed at runtime, and there are deficiencies in scalability and flexibility. In addition, some applications in the consumer market have excessive permission requests, which can easily cause security risks in scenarios with high security requirements. A dynamic rights management mechanism is more suitable for automotive electronics scenarios.

Contents of the invention

In view of this, the present invention provides a permission management method and a permission management system oriented to an automotive electronic system to solve the technical problem in the prior art that applications require high permissions.

The embodiment of the present invention is achieved in this way, a method for authority management oriented to an automotive electronic system, the method comprising the following steps:

Obtain the current driving status of the car and the current operating status of the automotive electronic system;

Determine the authority level according to the driving state and the running state, and the authority level includes: ordinary authority, restricted authority or advanced restricted authority;

According to the determined authority level, perform corresponding authority management.

The embodiment of the present invention also provides an authority management system oriented to an automotive electronic system, the system comprising:

A state acquisition unit is used to obtain the current driving state of the car and the current running state of the automotive electronic system;

An authority level determining unit, configured to determine an authority level according to the driving state and running state acquired by the state acquiring unit, the authority level including: ordinary authority, restricted authority or advanced restricted authority;

The authority management unit is configured to perform corresponding authority management according to the authority level determined by the authority level determination unit.

In the embodiment of the present invention, the current driving state of the car and the current running state of the automotive electronic system are obtained, the authority level is determined according to the driving state and the operating state, and corresponding authority management is performed according to the determined authority level, which improves the security of the automotive electronic system. safety.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the accompanying drawings that need to be used in the descriptions of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only of the present invention. For some embodiments, those of ordinary skill in the art can also obtain other drawings based on these drawings without paying creative efforts.

FIG. 1 is a flow chart of an authority management method for an automotive electronic system provided by an embodiment of the present invention;

Fig. 2 is a structural diagram of an authority management system oriented to an automotive electronic system provided by an embodiment of the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

In order to illustrate the technical solutions of the present invention, specific examples are used below to illustrate.

Embodiment one

As shown in Fig. 1, it is a flow chart of the authority management method for the automotive electronic system provided by the embodiment of the present invention, and the method includes the following steps:

Step S101, acquiring the current driving state of the car and the current running state of the electronic system of the car.

In the embodiment of the present invention, the system for authority management obtains the current driving status of the car and the current running status of the automotive electronic system through the data interface connected to the automotive electronic system, wherein the driving status includes but is not limited to: stopped, driving, Running status includes but not limited to: not running, running critical tasks.

Step S102, according to the driving state and running state, determine the authority level, the authority level includes: ordinary authority, restricted authority or advanced restricted authority.

In the embodiment of the present invention, the system for authority management acquires the driving state and operating state, and determines the current authority level of the car according to the driving state and operating state. The determination of the authority level according to the driving state and operating state includes:

If the driving state is stopped and the running state is not running, then the authority level is determined as normal authority; or,

If the driving status is driving and the running status is not running, the permission level will be restricted; or,

If the driving status is driving and the running status is running critical tasks, the permission level is advanced restricted permission.

Step S103, perform corresponding authority management according to the determined authority level.

In the embodiment of the present invention, after the authority management system determines the authority level of the current car, it performs corresponding authority management according to the authority level. According to the determined authority level, performing corresponding authority management includes:

If the authority management is a common authority, perform the first authority management, and the first authority management is to authorize all tasks to run; or,

If the authority management is to limit authority, perform second authority management, the second authority management is to prohibit the execution of tasks that affect the automotive electronic system; or,

If the authority management is an advanced restricted authority, a third authority management is performed, and the third authority management is to authorize the operation of the critical task.

In the embodiment of the present invention, when the car is not started or is in a parked state after starting, it is in a normal state. At this time, the center console system has relatively the lowest security requirements, and some authority requests that affect performance will be properly authorized; when the car is driving state, the authority management state is restricted state. In this state, the secondary authority management module will prohibit authorization requests that may affect system performance, such as launching persistent broadcasts, displaying content on other applications, etc.; when the car is running When driving and the Android system is performing key tasks such as calling and calling for help, the authority management state is a high-restriction state. In this state, the secondary authority management module only authorizes the authority requests required to solve the current core task, and disables all permissions related to the current core task. Unrelated to any other permission requests.

In the embodiment of the present invention, the current driving state of the car and the current running state of the automotive electronic system are obtained, the authority level is determined according to the driving state and the operating state, and corresponding authority management is performed according to the determined authority level, which improves the security of the automotive electronic system. safety.

for example:

Taking the Android system as an example, the permission management is performed through the secondary permission management module in the Android system, specifically:

The secondary authority management module is a system-level application installed on the Android system, located in the /system/app directory, and the persistent attribute of Manifest.xml is true. It is mainly composed of a rights management table and a status updater.

The permission management table is a data table in the form of Content Provider. The data table records the system permission items that need to be prohibited in the three modes of normal state, restricted state and high restricted state. These configurations can be modified by the administrator at the factory. The status updater is a system-level background service in the form of Service, which runs automatically when it is turned on. The status updater connects the modules responsible for information interaction with the body electronic system in the system, and obtains the vehicle driving information from it. The state updater obtains the vehicle driving information at regular intervals, and transmits the current state to the authority management table, and the authority management table updates the state allowed to execute forward.

The customized PackageManager module comes from modifying the native Android PackageManager module. After the checkUidPermission method originally located in PackageManagerService.java, add the judgment of checking the permission management table in the secondary permission management module, so that the permission instruction is returned only when the Uid permission check and the permission management table permission check are satisfied at the same time.

When the Android system is started, the authority management module and the PackageManager module are self-started and run in the background. Every once in a while, the authority management module obtains the vehicle driving information from the information communication interface of the body electronic system, and updates the status management information in the authority management table according to the driving status. Whenever an application needs a permission request, it will send a query request to the PackageManager. When the customized PackageManager checks the permission, it will not only consider the original static permission configuration of the application, but also go to the permission management table of the secondary permission management module to query Whether to allow the permission to be granted currently. Only when both requirements are met will the corresponding permission be granted to the app.

Embodiment two

As shown in Figure 2, it is a structural diagram of the authority management system for the automotive electronic system provided by the embodiment of the present invention. For the convenience of description, only the parts related to the embodiment of the present invention are shown, including:

The state obtaining unit 201 is used to obtain the current driving state of the car and the current running state of the electronic system of the car.

In the embodiment of the present invention, the system for authority management obtains the current driving status of the car and the current running status of the automotive electronic system through the data interface connected to the automotive electronic system, wherein the driving status includes but is not limited to: stopped, driving, Running status includes but not limited to: not running, running critical tasks.

The authority level determining unit 202 is configured to determine the authority level according to the driving state and the running state acquired by the state acquiring unit 201, and the authority level includes: ordinary authority, restricted authority or advanced restricted authority.

In the embodiment of the present invention, the system for authority management acquires the driving state and operating state, and determines the current authority level of the car according to the driving state and operating state. The permission level determining unit 202 includes:

Ordinary authority determination subunit 2021, used to determine the authority level as ordinary authority if the driving state is stopped and the running state is not running; or,

The restricted authority determination subunit 2022 is used to set the authority level to restricted authority if the driving state is driving and the running state is not running; or,

The advanced restriction authority determining subunit 2023 is configured to set the authority level as advanced restriction authority if the driving state is driving and the running state is running critical tasks.

The authority management unit 203 is configured to perform corresponding authority management according to the authority level determined by the authority level determining unit 202 .

In the embodiment of the present invention, after the authority management system determines the authority level of the current car, it performs corresponding authority management according to the authority level. The rights management unit 203 includes:

The first authority management subunit 2031 is configured to perform first authority management if the authority management is a common authority, and the first authority management is to authorize all tasks to run; or,

The second authority management subunit 2032 is configured to perform second authority management if the authority management is limited authority, and the second authority management is to prohibit the execution of tasks that affect the automotive electronic system; or,

The third authority management subunit 2033 is configured to perform third authority management if the authority management is an advanced restricted authority, and the third authority management is to authorize the operation of the critical task.

In the embodiment of the present invention, when the car is not started or is in a parked state after starting, it is in a normal state. At this time, the center console system has relatively the lowest security requirements, and some authority requests that affect performance will be properly authorized; when the car is driving state, the authority management state is restricted state. In this state, the secondary authority management module will prohibit authorization requests that may affect system performance, such as launching persistent broadcasts, displaying content on other applications, etc.; when the car is running When driving and the Android system is performing key tasks such as calling and calling for help, the authority management state is a high-restriction state. In this state, the secondary authority management module only authorizes the authority requests required to solve the current core task, and disables all permissions related to the current core task. Unrelated to any other permission requests.

In the embodiment of the present invention, the current driving state of the car and the current running state of the automotive electronic system are obtained, the authority level is determined according to the driving state and the operating state, and corresponding authority management is performed according to the determined authority level, which improves the security of the automotive electronic system. safety.

Those of ordinary skill in the art can understand that the various units included in the above-mentioned embodiment 2 are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be realized; in addition, the specific functions of each functional unit The names are only for the convenience of distinguishing each other, and are not used to limit the protection scope of the present invention.

Those of ordinary skill in the art can also understand that all or part of the steps in the method of the above embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, so The storage medium mentioned above includes ROM/RAM, magnetic disk, optical disk, etc.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention should be included in the protection of the present invention. within range.

Claims (2)

1. A rights management method for automotive electronic systems, characterized in that said method comprises the following steps: Obtain the current driving state of the car and the current running state of the automotive electronic system; the driving state includes: stopped, driving, and the running state includes: not running, running key tasks; According to the driving state and running state, determine the permission level, the permission level includes: ordinary permission, restricted permission or advanced restricted permission; the described permission level is determined according to the driving state and running state, including: If the driving state is stopped and the running state is not running, then the authority level is determined as normal authority; or, If the driving status is driving and the running status is not running, the permission level will be restricted; or, If the driving status is driving and the running status is running critical tasks, the permission level is advanced restricted permission; According to the determined authority level, perform corresponding authority management; including: If the authority management is a common authority, perform the first authority management, and the first authority management is to authorize all tasks to run; or, If the authority management is to limit authority, then carry out the second authority management, and the second authority management is to prohibit all Operation of missions affected by the electronic systems of the vehicle described above; or, If the authority management is an advanced restricted authority, a third authority management is performed, and the third authority management is to authorize the operation of the critical task. 2. A rights management system for automotive electronic systems, characterized in that the system includes: The state acquisition unit is used to obtain the current driving state of the car and the current running state of the automotive electronic system; the driving state includes: stopped, driving, and the running state includes: not running, running key tasks; The authority level determining unit is used to determine the authority level according to the driving state and running state acquired by the state acquiring unit, the authority level including: ordinary authority, restricted authority or advanced restricted authority; the authority level determining unit includes: A general authority determination subunit, used to determine the authority level as ordinary authority if the driving state is stopped and the running state is not running; or, Restricted authority determination subunit, used to set the authority level to restricted authority if the driving state is driving and the running state is not running; or, The advanced restriction authority determination subunit is used to set the authority level as advanced restriction authority if the driving state is driving and the running state is running key tasks; The authority management unit is configured to perform corresponding authority management according to the authority level determined by the authority level determining unit; the authority management unit includes: The first authority management subunit is configured to perform first authority management if the authority management is a common authority, and the first authority management is to authorize all tasks to run; or, The second authority management subunit is configured to perform second authority management if the authority management is limited authority, and the second authority management is to prohibit the execution of tasks that affect the automotive electronic system; or, The third authority management subunit is configured to perform third authority management if the authority management is an advanced restricted authority, and the third authority management is to authorize the operation of the critical task.